|
Plagegeister aller Art und deren Bekämpfung: 100% Pysikalischer Speicher durch svchost.exeWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
11.02.2014, 20:48 | #1 |
| 100% Pysikalischer Speicher durch svchost.exe Hallo liebes Forum, seit ungefähr zwei Wochen springt so einmal täglich die Auslastung des Physikalischen Speichers auf 100% und schwankt dann zwichen 100% und 90%. Das hat zur Folge, dass man nicht mehr richtig mit dem Computer arbeiten kann (sogar die Maus hängt). Ich habe mich dann ein bisschen schlau gemacht und gelesen, dass es an dem Prozess "svchost.exe (secsvcs)" liegen könnt. Als das Problem erneut auftrat habe ich den Ressourcenmonitor geöffnet, den Prozess gesucht, gefunden und beendet. Und tatsächlich: Die Auslastung ging schlagartig von 100% auf 25% zurück und pendelte sich nach einiger Zeit wieder bei 50% (normal) ein. Der Prozess schaltet sich jedoch irgendwann wieder ein, wodurch er nach einem Tag wieder zur Maximallast führt. Ich weiss nicht, was ich jetzt machen soll. Ist das ein Virus oder nur ein Software-/Hardwareproblem? Danke schon mal im Vorraus MFG Marco |
12.02.2014, 07:28 | #2 |
/// the machine /// TB-Ausbilder | 100% Pysikalischer Speicher durch svchost.exe hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
12.02.2014, 14:40 | #3 |
| 100% Pysikalischer Speicher durch svchost.exe Ok - hier der Inhalt der FRST.txt
__________________FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-02-2014 01 Ran by Marco (administrator) on ACER-ASPIRE-574 on 12-02-2014 14:32:07 Running from C:\Users\Marco\Favorites\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe (ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe () C:\Program Files (x86)\Megatech\MProtect\MPServ.EXE (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Iminent) C:\Program Files (x86)\Common Files\Umbrella\Umbrella.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (Somoto) C:\Users\Marco\AppData\Local\FilesFrog Update Checker\update_checker.exe (Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Wajam) C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV3.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE () C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Intel Corporation) C:\Windows\system32\igfxext.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Google Inc.) C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\MusicManager.exe (Pegtop Software) C:\Program Files (x86)\Pegtop\PStart\PStart.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Apple Inc.) C:\Program Files (x86)\QuickTime\QTTask.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe () C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe (Microsoft Corporation) C:\Windows\system32\taskmgr.exe (Microsoft Corporation) C:\Windows\System32\perfmon.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe (Stardock Corporation) C:\program files (x86)\stardock\fences\Fences.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552 2010-05-27] (Egis Technology Inc.) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10920552 2010-06-22] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1890088 2009-12-10] (Synaptics Incorporated) HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [861216 2010-06-11] (Acer Incorporated) HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2782096 2010-07-26] (CANON INC.) HKLM\...\Run: [LogMeIn GUI] - "C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe" HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated) HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.) HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - C:\Windows\KHALMNPR.EXE [130576 2009-06-17] (Logitech, Inc.) HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\btvstack.exe [1023104 2012-10-15] (Atheros Communications) HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\athbttray.exe [801920 2012-10-15] (Atheros Commnucations) HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-04-13] (Intel Corporation) HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [337264 2010-05-27] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-03-11] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-03-11] (Egis Technology Inc.) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-28] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [265984 2010-06-28] (NewTech Infosystems, Inc.) HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [975952 2010-08-10] (Dritek System Inc.) HKLM-x32\...\Run: [facemoods] - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodssrv.exe [329432 2011-04-14] (facemoods.com) HKLM-x32\...\Run: [ArcSoft Connection Service] - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.) HKLM-x32\...\Run: [TaskTray] - [X] HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [Aimersoft Helper Compact.exe] - C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe HKLM-x32\...\Run: [BrowserPlugInHelper] - C:\Program Files (x86)\Aimersoft\Video Converter Ultimate\BrowserPlugInHelper.exe HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [] - [X] HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3478392 2013-12-21] (Adobe Systems Inc.) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-07-22] (Geek Software GmbH) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-01-31] (AVAST Software) HKLM-x32\...\Run: [Iminent] - C:\Program Files (x86)\Iminent\Iminent.exe /warmup "F77F87E5-A6BD-4922-A530-EDF63D7E9F8C" HKLM-x32\...\Run: [IminentMessenger] - C:\Program Files (x86)\Iminent\Iminent.Messengers.exe HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-05-15] (Microsoft Corporation) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272624 2013-02-05] (Microsoft Corporation) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [Gadwin PrintScreen] - C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [phonostarTimer] - C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe [40960 2011-06-20] () HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [ICQ] - C:\Users\Marco\AppData\Roaming\ICQM\icq.exe [33664344 2014-01-08] (ICQ) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [Speech Recognition] - C:\Windows\Speech\Common\sapisvr.exe [44544 2009-07-14] (Microsoft Corporation) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [MobileDocuments] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [DS3 Tool] - C:\Program Files\MotioninJoy\ds3\DS3_Tool.exe [92672 2010-10-02] (www.motioninjoy.com) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [StoppUhr] - [X] HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [F8D9AE2CB9E5983DE40F824224AE867E4C19679F._service_run] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [866584 2014-01-23] (Google Inc.) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [Google Update] - C:\Users\Marco\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-08-22] (Google Inc.) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [MusicManager] - C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [7380992 2013-11-12] (Google Inc.) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [Optimizer Pro] - C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [134648 2013-10-24] () HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [LiveSupport] - C:\Program Files (x86)\LiveSupport\LiveSupport.exe [658944 2013-11-07] (PC Utilities Software Limited) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [PegtopPStart] - C:\Program Files (x86)\Pegtop\PStart\PStart.exe [786952 2013-12-14] (Pegtop Software) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\MountPoints2: {8a6aa81f-52c4-11e0-b592-1c7508203466} - F:\USBAutoRun.exe HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\MountPoints2: {bdf233cf-224c-11e0-8c81-1c7508203466} - E:\USBAutoRun.exe HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\MountPoints2: {cb96a5f7-77b0-11e3-931e-1c7508203466} - E:\LGAutoRun.exe HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\MountPoints2: {d17a50dd-4a4f-11e1-8ca1-1c7508203466} - E:\Setup.exe HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\MountPoints2: {f93f8f3e-9f75-11e2-997f-1c7508203466} - F:\pushinst.exe AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation) AppInit_DLLs: C:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL => C:\Program Files (x86)\Optimizer Pro\OptProCrash_x64.dll [4117320 2014-01-03] () AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [202600 2012-10-08] (NVIDIA Corporation) AppInit_DLLs-x32: c:\progra~2\optimi~1\optpro~1.dll => C:\Program Files (x86)\Optimizer Pro\OptProCrash.dll [4062536 2013-10-29] () Startup: C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Marco\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () Startup: C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Socialbox.lnk ShortcutTarget: Socialbox.lnk -> C:\Program Files (x86)\Socialbox\Socialbox.exe (No File) Startup: C:\Users\Schule\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&CUI=UN94176709418576159&ctid=CT3284351 URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046} URLSearchHook: HKLM-x32 - (No Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - No File URLSearchHook: HKLM-x32 - IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files (x86)\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.) URLSearchHook: HKLM-x32 - NCH DE Toolbar - {b106b661-3e1b-4015-af5c-195e909f35c6} - C:\Program Files (x86)\NCH_DE\tbNCH_.dll (Conduit Ltd.) URLSearchHook: HKCU - IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files (x86)\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.) URLSearchHook: HKCU - NCH DE Toolbar - {b106b661-3e1b-4015-af5c-195e909f35c6} - C:\Program Files (x86)\NCH_DE\tbNCH_.dll (Conduit Ltd.) URLSearchHook: HKCU - (No Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File SearchScopes: HKCU - DefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredimail.com/?search={searchTerms}&loc=search_box&a=1eynMifAVwV SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKCU - {0D7562AE-8EF6-416d-A838-AB665251703A} URL = hxxp://start.facemoods.com/?a=gppc&s={searchTerms}&f=4 SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={D2CDB6AC-F36D-428F-A8F4-44118C4BB442}&mid=&lang=&ds=&pr=&d=&v=&sap=dsp&q={searchTerms} SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredimail.com/?search={searchTerms}&loc=search_box&a=1eynMifAVwV BHO: EXEcheckker - {1F4F33F5-C394-63B9-6E09-59C72C1BBD82} - C:\ProgramData\EXEcheckker\wSjqqm.x64.dll () BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: shoppnnDroop - {9E180093-CF8E-58CF-D3C9-396A9DEB930E} - C:\ProgramData\shoppnnDroop\rrVS8cpa8.x64.dll () BHO: IMinent WebBooster (BHO) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files (x86)\Iminent\Minibar.InternetExplorer.BHOx64.dll (SIEN) BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: ApPtoU - {EB54F8FF-CEF4-7E60-4CB8-91E2782EECB9} - C:\ProgramData\ApPtoU\LhPSOD.x64.dll () BHO: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE_64.dll No File BHO: avast! Ad Blocker - {FFCB3198-32F3-4E8B-9539-4324694ED663} - C:\Program Files (x86)\AVAST Software\avast! Ad Blocker IE\Adblocker64.dll (AVAST Software) BHO-x32: AC-Pro - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files (x86)\AutocompletePro\AutocompletePro.dll (SimplyGen) BHO-x32: EXEcheckker - {1F4F33F5-C394-63B9-6E09-59C72C1BBD82} - C:\ProgramData\EXEcheckker\wSjqqm.dll () BHO-x32: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) BHO-x32: CescrtHlpr Object - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.7\bh\facemoods.dll (facemoods.com BHO) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: No Name - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: shoppnnDroop - {9E180093-CF8E-58CF-D3C9-396A9DEB930E} - C:\ProgramData\shoppnnDroop\rrVS8cpa8.dll () BHO-x32: IMinent WebBooster (BHO) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files (x86)\Iminent\Minibar.InternetExplorer.BHOx86.dll (SIEN) BHO-x32: Wajam - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files (x86)\Wajam\IE\priam_bho.dll (Wajam) BHO-x32: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: NCH DE Toolbar - {b106b661-3e1b-4015-af5c-195e909f35c6} - C:\Program Files (x86)\NCH_DE\tbNCH_.dll (Conduit Ltd.) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.) BHO-x32: Nero Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask.com) BHO-x32: IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files (x86)\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: ApPtoU - {EB54F8FF-CEF4-7E60-4CB8-91E2782EECB9} - C:\ProgramData\ApPtoU\LhPSOD.dll () BHO-x32: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: avast! Ad Blocker - {FFCB3198-32F3-4E8B-9539-4324694ED663} - C:\Program Files (x86)\AVAST Software\avast! Ad Blocker IE\Adblocker32.dll (AVAST Software) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files (x86)\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.) Toolbar: HKLM-x32 - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.) Toolbar: HKLM-x32 - NCH DE Toolbar - {b106b661-3e1b-4015-af5c-195e909f35c6} - C:\Program Files (x86)\NCH_DE\tbNCH_.dll (Conduit Ltd.) Toolbar: HKLM-x32 - facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodsTlbr.dll (facemoods.com) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Nero Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask.com) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKCU - No Name - {D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} - No File Toolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} - No File Toolbar: HKCU - No Name - {B106B661-3E1B-4015-AF5C-195E909F35C6} - No File Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} - No File Toolbar: HKCU - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Hosts: 127.0.0.1 ifw.local Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837 FF Homepage: hxxp://intragart.selfhost.eu/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll () FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Marco\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Marco\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: EXEcheckker - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\0p5bovp@bobhr-.com [2014-01-31] FF Extension: ApPtoU - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\74oai@uo-qik.edu [2014-01-29] FF Extension: shoppnnDroop - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\wliii_oya@aftl-kheuoa.com [2014-01-29] FF Extension: DownloadHelper - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-01-25] FF Extension: Etao QR Code - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\jid0-0c0bUXarADMTgT3G2iGveQ7Bshc@jetpack.xpi [2014-01-23] FF Extension: Media Stealer - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\stealer@physacco.com.xpi [2014-01-25] FF Extension: QR Code - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\{6a910736-6fab-4480-841a-36325cce134f}.xpi [2014-01-23] FF Extension: Adblock Plus - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-23] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-02-06] FF Extension: avast! Ad Blocker - C:\Program Files (x86)\Mozilla Firefox\extensions\adblocker@avast.com.xpi [2014-02-06] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-07-21] FF HKLM-x32\...\Firefox\Extensions: [gamescenter@gamescenter.com] - C:\Program Files (x86)\GamesCenter\GamesCenter.xpi FF Extension: Games Center - C:\Program Files (x86)\GamesCenter\GamesCenter.xpi [2013-02-09] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2013-03-15] FF HKLM-x32\...\Firefox\Extensions: [fmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\ FF Extension: Freemake Video Downloader Plugin - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\ [] FF HKLM-x32\...\Firefox\Extensions: [ytfmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\ FF Extension: Freemake Youtube Download Button - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\ [] FF HKCU\...\Firefox\Extensions: [{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}] - C:\Program Files (x86)\PriceGong\2.5.1\FF FF Extension: PriceGong - C:\Program Files (x86)\PriceGong\2.5.1\FF [2011-08-27] FF HKCU\...\Firefox\Extensions: [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi FF Extension: No Name - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi [2013-12-09] Chrome: ======= CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\pdf.dll () CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.) CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (AdobeAAMDetect) - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll No File CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll No File CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npdeployJava1.dll No File CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File CHR Extension: (FoxyDeal) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiennapmieppnpfhhogglccgepbdajan [2014-01-03] CHR Extension: (Google Drive) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-07-10] CHR Extension: (PriceGong) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok [2013-07-08] CHR Extension: (Freemake Video Downloader) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf [2014-01-26] CHR Extension: (AutocompletePro plugin for chrome) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk [2013-07-08] CHR Extension: (Games Center) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\dehjbbcmklelglapfndfbomoaooippkb [2013-07-08] CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2013-07-08] CHR Extension: (Freemake Youtube Download Button) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh [2014-01-26] CHR Extension: (PanicButton) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\faminaibgiklngmfpfbhmokfmnglamcm [2013-11-10] CHR Extension: (avast! Ad Blocker) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\fplhdcjmbpfkejbhngmlngaecbjmoimd [2013-07-08] CHR Extension: (The QR Code Generator) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcmhlmapohffdglflokbgknlknnmogbb [2013-07-18] CHR Extension: (ApPtoU) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba [2014-01-29] CHR Extension: (Iminent) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl [2014-01-03] CHR Extension: (Funmoods) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihflimipbcaljfnojhhknppphnnciiif [2013-07-08] CHR Extension: (Wajam) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp [2014-01-06] CHR Extension: (QR Code Generator) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbddejkiaboppgjbbeljnhdfejceijam [2013-07-18] CHR Extension: (FVD Downloader) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp [2013-11-10] CHR Extension: (QR-Code aus URL) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\nioihlfoddilijjjeknopfcbglallkce [2013-07-18] CHR Extension: (Google Wallet) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01] CHR Extension: (EXEcheckker) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdlfihameoodkafnckcnpfidcndgekh [2014-02-03] CHR Extension: (shoppnnDroop) - C:\ProgramData\hehonoiddkebnfobcdlakohjokfldcmh [2014-01-29] CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Marco\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-07-09] CHR HKLM-x32\...\Chrome\Extension: [bkomkajifikmkfnjgphkjcfeepbnojok] - C:\Program Files (x86)\PriceGong\2.5.1\pricegong.crx [2011-07-21] CHR HKLM-x32\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2014-01-25] CHR HKLM-x32\...\Chrome\Extension: [defdhglnppeioeflggkmglipcecffkhk] - C:\Program Files (x86)\AutocompletePro\chrome\autocompleteprochrome.crx [2011-01-26] CHR HKLM-x32\...\Chrome\Extension: [dehjbbcmklelglapfndfbomoaooippkb] - C:\Program Files (x86)\GamesCenter\GamesCenter.crx [2013-02-09] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2013-12-21] CHR HKLM-x32\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\ChromeYoutubePlugin.crx [2014-01-25] CHR HKLM-x32\...\Chrome\Extension: [fplhdcjmbpfkejbhngmlngaecbjmoimd] - C:\Program Files\AVAST Software\Avast\AdBlocker\Chrome\avast-adblocker-chrome.crx [2013-03-21] CHR HKLM-x32\...\Chrome\Extension: [igdhbblpcellaljokkpfhcjlagemhgjl] - "C:\Program Files (x86)\Iminent\Iminent.crx" [2013-03-21] CHR HKLM-x32\...\Chrome\Extension: [ihflimipbcaljfnojhhknppphnnciiif] - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.7\facemoods.crx [2010-11-24] CHR HKLM-x32\...\Chrome\Extension: [jpmbfleldcgkldadpdinhjjopdfpjfjp] - C:\Users\Marco\AppData\Local\Wajam\Chrome\wajam.crx [2013-12-13] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 70e6ca8c; C:\Program Files (x86)\Optimizer Pro\OptProCrashSvc.dll [192664 2014-01-03] () R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-31] (AVAST Software) R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [113704 2014-01-31] (AVAST Software) R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2014-01-13] (Ellora Assets Corp.) R2 Megatech-Software-Protection; C:\Program Files (x86)\Megatech\MProtect\MPServ.EXE [36864 2007-12-12] () R2 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-05-27] (Egis Technology Inc.) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4292960 2013-11-11] (Symantec Corporation) R2 SProtection; C:\Program Files (x86)\Common Files\Umbrella\Umbrella.exe [2905408 2013-12-16] (Iminent) R2 WajamUpdaterV3; C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV3.exe [114176 2013-11-01] (Wajam) S2 WinkHandler; C:\Program Files (x86)\Iminent\WinkHandler.exe [425792 2013-12-16] () ==================== Drivers (Whitelisted) ==================== R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2013-11-14] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-31] (AVAST Software) R1 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [440672 2014-01-31] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-14] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-14] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-01-31] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-01-31] (AVAST Software) R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-01-31] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-13] () R3 avmaudio; C:\Windows\System32\DRIVERS\avmaudio.sys [116480 2013-02-24] (AVM Berlin) S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin) S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH) S3 GigasetGenericUSB_x64; C:\Windows\System32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2009-02-20] (Siemens Home and Office Communication Devices GmbH & Co. KG) S3 libusb0; C:\Windows\SysWOW64\drivers\libusb0.sys [33792 2005-03-09] () S4 LMIRfsClientNP; No ImagePath R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.) S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [748648 2010-08-12] (Realtek Semiconductor Corporation ) R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] () S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2008-11-19] (LG Electronics Inc.) S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [27136 2008-11-19] (LG Electronics Inc.) S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [33792 2008-11-19] (LG Electronics Inc.) S3 WsAudio_Device; C:\Windows\System32\drivers\VirtualAudio.sys [31080 2013-01-08] (Wondershare) R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl [146928 2010-08-16] (CyberLink Corp.) S2 LMIInfo; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-12 14:26 - 2014-02-12 14:32 - 00000000 ____D () C:\FRST 2014-02-10 21:31 - 2014-02-10 23:09 - 00000000 ____D () C:\Users\Marco\Desktop\Dusty 2014-02-08 10:35 - 2014-02-08 10:35 - 00002968 _____ () C:\Windows\System32\Tasks\{65B6DA46-08F9-42DC-9D21-68ECB5FEEE0A} 2014-02-08 10:34 - 2014-02-08 10:34 - 00002970 _____ () C:\Windows\System32\Tasks\{CFC12328-BB91-45A7-A7C8-E057AD886176} 2014-02-08 10:08 - 2014-02-08 10:08 - 00002968 _____ () C:\Windows\System32\Tasks\{041F2130-E6FD-40C5-BBE9-52AFC0D96381} 2014-02-08 10:07 - 2014-02-08 10:07 - 00003186 _____ () C:\Windows\System32\Tasks\{29666182-CFDA-470B-A7D8-2515F863832A} 2014-02-07 23:57 - 2014-02-07 23:57 - 00002968 _____ () C:\Windows\System32\Tasks\{F3C812C3-7D7C-44A0-8952-6F379977FA97} 2014-02-07 23:51 - 2014-02-07 23:51 - 00002968 _____ () C:\Windows\System32\Tasks\{7BB0731C-19BC-41B6-A803-F42127F20CFD} 2014-02-07 23:45 - 2014-02-07 23:45 - 00002968 _____ () C:\Windows\System32\Tasks\{131E5AAD-9FED-42AE-9D92-C791A6FE5F3F} 2014-02-07 23:44 - 2014-02-07 23:44 - 00002968 _____ () C:\Windows\System32\Tasks\{D7F197EB-B937-43E7-AE7F-216C7702BE4B} 2014-02-07 23:43 - 2014-02-07 23:43 - 00002968 _____ () C:\Windows\System32\Tasks\{9E305CFD-F157-4A9F-992A-C12E920A12BA} 2014-02-06 19:56 - 2014-02-06 20:04 - 00000000 ____D () C:\Users\Marco\Desktop\Jannik 2014-02-06 19:18 - 2014-02-06 19:18 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\LibreOffice 2014-02-06 19:16 - 2014-02-06 19:16 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\OpenOffice.org 2014-02-06 17:24 - 2014-02-06 17:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-06 17:02 - 2014-02-06 17:02 - 00001386 _____ () C:\Users\Marco\Desktop\iTunes - Verknüpfung.lnk 2014-02-06 16:41 - 2014-02-06 16:41 - 01755604 _____ () C:\Users\Marco\Desktop\1871270_683350511717566_7622_n.mp4 2014-02-05 20:35 - 2014-02-10 20:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-02-03 17:11 - 2014-02-03 17:11 - 00006608 _____ () C:\Users\Marco\AppData\Local\recently-used.xbel 2014-02-03 16:59 - 2014-02-03 16:59 - 00000000 ____D () C:\Users\Marco\Desktop\Feuerwehr 2014-02-03 14:41 - 2014-02-03 14:41 - 00001637 _____ () C:\Users\Marco\Desktop\TeamViewer 9.lnk 2014-02-02 16:49 - 2014-02-02 16:49 - 00001201 _____ () C:\Users\Marco\Desktop\Ressourcenmonitor.lnk 2014-01-31 16:03 - 2014-01-31 16:04 - 00000000 ____D () C:\ProgramData\EXEcheckker 2014-01-31 16:03 - 2014-01-31 16:03 - 00000306 __RSH () C:\ProgramData\ntuser.pol 2014-01-31 16:03 - 2014-01-31 16:03 - 00000000 ____D () C:\ProgramData\okdlfihameoodkafnckcnpfidcndgekh 2014-01-31 15:35 - 2014-01-31 15:35 - 00001956 _____ () C:\Users\Public\Desktop\avast! Premier.lnk 2014-01-31 15:28 - 2014-01-31 15:28 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Wichtiges 2014-01-31 15:15 - 2014-01-31 15:15 - 01884977 _____ () C:\Users\Marco\Desktop\1608083_186652868212024_888047451_n.mp4 2014-01-31 06:40 - 2014-01-31 06:40 - 01884977 _____ () C:\Users\Marco\Desktop\bus 2014-01-29 20:27 - 2014-01-31 16:04 - 00000000 ____D () C:\ProgramData\2ff1ddb567438de4 2014-01-29 20:27 - 2014-01-29 20:28 - 00000000 ____D () C:\ProgramData\ApPtoU 2014-01-29 20:27 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\shoppnnDroop 2014-01-29 20:27 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\hehonoiddkebnfobcdlakohjokfldcmh 2014-01-28 20:49 - 2014-01-28 20:49 - 15336718 _____ () C:\Users\Marco\Desktop\1055344_371045796370724_676684399_n.mp4 2014-01-27 17:24 - 2014-01-27 17:24 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-27 17:24 - 2014-01-27 17:24 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-27 17:21 - 2014-01-27 17:21 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-01-27 17:21 - 2014-01-27 17:21 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2014-01-27 17:11 - 2014-01-27 17:12 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-01-27 17:11 - 2014-01-27 17:12 - 00000000 ____D () C:\Program Files\iTunes 2014-01-27 17:11 - 2014-01-27 17:12 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-01-27 17:11 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files\iPod 2014-01-26 12:24 - 2014-01-26 12:25 - 04685821 _____ () C:\Users\Marco\Desktop\Berufscheck der kleinen Mia.wmv 2014-01-26 12:19 - 2014-01-26 12:21 - 04117893 _____ () C:\Users\Marco\Desktop\Poledancestange im Kinderzimmer.wmv 2014-01-25 17:19 - 2014-01-25 17:20 - 05973713 _____ () C:\Users\Marco\Desktop\Ein Müllmann rastet aus.wmv 2014-01-25 16:52 - 2014-01-25 16:52 - 00000000 ____D () C:\Program Files (x86)\DsNET Corp 2014-01-25 16:30 - 2014-01-25 16:30 - 29836541 _____ () C:\Users\Marco\Desktop\ROLLIN` SAFARI - what if animals were round_.mp4 2014-01-25 16:30 - 2014-01-25 16:30 - 00000000 ____D () C:\Users\Marco\dwhelper 2014-01-24 18:22 - 2014-01-24 18:23 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Sonstige 2014-01-19 22:39 - 2014-01-19 22:39 - 00000032 _____ () C:\Windows\Menu.INI 2014-01-19 19:05 - 2014-01-19 20:04 - 866302861 _____ () C:\Users\Marco\Dusty.zip 2014-01-15 18:29 - 2014-01-15 18:29 - 00000000 ____D () C:\Users\Marco\Telekom 2014-01-15 16:41 - 2014-01-18 11:21 - 00000600 _____ () C:\Users\Marco\AppData\Local\PUTTY.RND 2014-01-15 14:27 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-15 14:27 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-15 14:27 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-15 14:27 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-15 14:27 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-15 14:27 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-15 14:27 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-15 14:27 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-15 14:27 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-01-13 21:20 - 2014-01-13 21:20 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\ICQ Dateien 2014-01-13 18:52 - 2014-01-31 15:32 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys ==================== One Month Modified Files and Folders ======= 2014-02-12 14:32 - 2014-02-12 14:26 - 00000000 ____D () C:\FRST 2014-02-12 14:32 - 2012-05-29 20:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-12 14:30 - 2010-11-05 22:37 - 01116959 _____ () C:\Windows\WindowsUpdate.log 2014-02-12 14:30 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-12 14:30 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-12 14:29 - 2011-01-17 16:11 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Skype 2014-02-12 14:24 - 2013-11-20 14:18 - 00241591 _____ () C:\Windows\IE11_main.log 2014-02-12 14:20 - 2013-08-22 11:24 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002UA.job 2014-02-12 14:20 - 2013-08-22 11:24 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002Core.job 2014-02-12 14:20 - 2011-02-04 19:36 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-02-12 14:20 - 2009-07-14 05:51 - 00309601 _____ () C:\Windows\setupact.log 2014-02-11 20:43 - 2011-02-04 19:36 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-02-11 16:10 - 2012-11-15 20:12 - 00003958 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{604A8C80-AF97-4E6B-B718-0ADED238F7E3} 2014-02-11 14:42 - 2012-06-05 11:02 - 00007667 _____ () C:\Users\Marco\AppData\Local\resmon.resmoncfg 2014-02-10 23:09 - 2014-02-10 21:31 - 00000000 ____D () C:\Users\Marco\Desktop\Dusty 2014-02-10 22:57 - 2013-09-29 15:08 - 00000000 ____D () C:\Users\Marco\AppData\Local\CrashDumps 2014-02-10 22:32 - 2013-08-17 00:55 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Dropbox 2014-02-10 22:31 - 2013-08-17 00:57 - 00000000 ___RD () C:\Users\Marco\Dropbox 2014-02-10 22:31 - 2013-04-17 17:00 - 00000000 ___RD () C:\Users\Marco\Google Drive 2014-02-10 22:31 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\FxsTmp 2014-02-10 22:30 - 2012-01-19 18:30 - 00000000 ____D () C:\ProgramData\boost_interprocess 2014-02-10 22:27 - 2011-11-28 14:24 - 00000000 ____D () C:\Users\Marco\Tracing 2014-02-10 22:25 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-10 21:56 - 2012-10-15 13:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-10 21:56 - 2010-11-05 22:34 - 00174338 _____ () C:\Windows\PFRO.log 2014-02-10 20:30 - 2014-02-05 20:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-02-10 15:49 - 2014-01-04 02:49 - 00003912 _____ () C:\Windows\system32\TeamViewer9_Hooks.log 2014-02-09 12:15 - 2010-11-06 07:28 - 00654852 _____ () C:\Windows\system32\perfh007.dat 2014-02-09 12:15 - 2010-11-06 07:28 - 00130434 _____ () C:\Windows\system32\perfc007.dat 2014-02-09 12:15 - 2009-07-14 06:13 - 01500358 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-02-08 10:35 - 2014-02-08 10:35 - 00002968 _____ () C:\Windows\System32\Tasks\{65B6DA46-08F9-42DC-9D21-68ECB5FEEE0A} 2014-02-08 10:34 - 2014-02-08 10:34 - 00002970 _____ () C:\Windows\System32\Tasks\{CFC12328-BB91-45A7-A7C8-E057AD886176} 2014-02-08 10:08 - 2014-02-08 10:08 - 00002968 _____ () C:\Windows\System32\Tasks\{041F2130-E6FD-40C5-BBE9-52AFC0D96381} 2014-02-08 10:07 - 2014-02-08 10:07 - 00003186 _____ () C:\Windows\System32\Tasks\{29666182-CFDA-470B-A7D8-2515F863832A} 2014-02-07 23:57 - 2014-02-07 23:57 - 00002968 _____ () C:\Windows\System32\Tasks\{F3C812C3-7D7C-44A0-8952-6F379977FA97} 2014-02-07 23:51 - 2014-02-07 23:51 - 00002968 _____ () C:\Windows\System32\Tasks\{7BB0731C-19BC-41B6-A803-F42127F20CFD} 2014-02-07 23:45 - 2014-02-07 23:45 - 00002968 _____ () C:\Windows\System32\Tasks\{131E5AAD-9FED-42AE-9D92-C791A6FE5F3F} 2014-02-07 23:44 - 2014-02-07 23:44 - 00002968 _____ () C:\Windows\System32\Tasks\{D7F197EB-B937-43E7-AE7F-216C7702BE4B} 2014-02-07 23:43 - 2014-02-07 23:43 - 00002968 _____ () C:\Windows\System32\Tasks\{9E305CFD-F157-4A9F-992A-C12E920A12BA} 2014-02-07 23:37 - 2011-01-21 16:34 - 00000000 ____D () C:\Users\Marco\Spiele 2014-02-06 20:04 - 2014-02-06 19:56 - 00000000 ____D () C:\Users\Marco\Desktop\Jannik 2014-02-06 19:18 - 2014-02-06 19:18 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\LibreOffice 2014-02-06 19:16 - 2014-02-06 19:16 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\OpenOffice.org 2014-02-06 17:24 - 2014-02-06 17:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-06 17:18 - 2012-01-24 14:55 - 04492800 ___SH () C:\Users\Marco\Desktop\Thumbs.db 2014-02-06 17:02 - 2014-02-06 17:02 - 00001386 _____ () C:\Users\Marco\Desktop\iTunes - Verknüpfung.lnk 2014-02-06 16:41 - 2014-02-06 16:41 - 01755604 _____ () C:\Users\Marco\Desktop\1871270_683350511717566_7622_n.mp4 2014-02-05 20:32 - 2012-05-29 20:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-02-05 20:32 - 2012-05-29 20:49 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-02-05 20:32 - 2012-05-29 20:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-02-05 14:36 - 2013-12-26 22:17 - 00000000 ____D () C:\Users\Besucher\AppData\Local\CrashDumps 2014-02-04 15:43 - 2011-01-17 15:16 - 00162544 _____ () C:\Users\Marco\AppData\Local\GDIPFONTCACHEV1.DAT 2014-02-03 17:11 - 2014-02-03 17:11 - 00006608 _____ () C:\Users\Marco\AppData\Local\recently-used.xbel 2014-02-03 17:11 - 2012-08-05 22:10 - 00000000 ____D () C:\Users\Marco\.gimp-2.8 2014-02-03 16:59 - 2014-02-03 16:59 - 00000000 ____D () C:\Users\Marco\Desktop\Feuerwehr 2014-02-03 15:35 - 2011-11-07 20:14 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\vlc 2014-02-03 14:41 - 2014-02-03 14:41 - 00001637 _____ () C:\Users\Marco\Desktop\TeamViewer 9.lnk 2014-02-02 16:49 - 2014-02-02 16:49 - 00001201 _____ () C:\Users\Marco\Desktop\Ressourcenmonitor.lnk 2014-02-01 11:22 - 2012-07-10 15:26 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-02-01 01:56 - 2013-12-02 21:16 - 00000000 ____D () C:\Users\SERVER\Desktop\Intragart 2014-02-01 01:26 - 2013-08-29 18:48 - 00162544 _____ () C:\Users\SERVER\AppData\Local\GDIPFONTCACHEV1.DAT 2014-02-01 01:25 - 2011-01-17 15:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\SoftGrid Client 2014-01-31 16:04 - 2014-01-31 16:03 - 00000000 ____D () C:\ProgramData\EXEcheckker 2014-01-31 16:04 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\2ff1ddb567438de4 2014-01-31 16:03 - 2014-01-31 16:03 - 00000306 __RSH () C:\ProgramData\ntuser.pol 2014-01-31 16:03 - 2014-01-31 16:03 - 00000000 ____D () C:\ProgramData\okdlfihameoodkafnckcnpfidcndgekh 2014-01-31 16:03 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-01-31 16:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy 2014-01-31 15:53 - 2012-05-12 13:25 - 00001033 _____ () C:\Windows\wininit.ini 2014-01-31 15:53 - 2011-01-17 15:17 - 00000000 ___RD () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-01-31 15:52 - 2013-08-17 00:56 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-31 15:35 - 2014-01-31 15:35 - 00001956 _____ () C:\Users\Public\Desktop\avast! Premier.lnk 2014-01-31 15:32 - 2014-01-13 18:52 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-01-31 15:32 - 2013-03-21 13:53 - 00440672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys 2014-01-31 15:32 - 2011-07-21 08:15 - 01038072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-01-31 15:32 - 2011-07-21 08:15 - 00421704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-01-31 15:32 - 2011-07-21 08:15 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-01-31 15:32 - 2011-07-21 08:15 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-01-31 15:32 - 2011-07-21 08:14 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-01-31 15:28 - 2014-01-31 15:28 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Wichtiges 2014-01-31 15:15 - 2014-01-31 15:15 - 01884977 _____ () C:\Users\Marco\Desktop\1608083_186652868212024_888047451_n.mp4 2014-01-31 06:40 - 2014-01-31 06:40 - 01884977 _____ () C:\Users\Marco\Desktop\bus 2014-01-29 20:28 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\ApPtoU 2014-01-29 20:27 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\shoppnnDroop 2014-01-29 20:27 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\hehonoiddkebnfobcdlakohjokfldcmh 2014-01-28 23:02 - 2014-01-03 00:10 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro 2014-01-28 20:49 - 2014-01-28 20:49 - 15336718 _____ () C:\Users\Marco\Desktop\1055344_371045796370724_676684399_n.mp4 2014-01-27 21:06 - 2013-07-06 09:23 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\.minecraft 2014-01-27 17:24 - 2014-01-27 17:24 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-27 17:24 - 2014-01-27 17:24 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-27 17:24 - 2013-11-15 15:52 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-27 17:24 - 2013-11-15 15:52 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-27 17:24 - 2013-11-15 15:52 - 00000000 ____D () C:\ProgramData\Oracle 2014-01-27 17:21 - 2014-01-27 17:21 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-01-27 17:21 - 2014-01-27 17:21 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2014-01-27 17:21 - 2013-07-11 19:36 - 00000000 ____D () C:\Program Files\Java 2014-01-27 17:15 - 2012-04-18 15:24 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-01-27 17:15 - 2012-04-18 15:23 - 00000000 ____D () C:\Program Files (x86)\WinRAR 2014-01-27 17:12 - 2014-01-27 17:11 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-01-27 17:12 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files\iTunes 2014-01-27 17:12 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-01-27 17:11 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files\iPod 2014-01-26 16:53 - 2011-02-12 21:31 - 01018368 ___SH () C:\Users\Marco\Thumbs.db 2014-01-26 12:25 - 2014-01-26 12:24 - 04685821 _____ () C:\Users\Marco\Desktop\Berufscheck der kleinen Mia.wmv 2014-01-26 12:21 - 2014-01-26 12:19 - 04117893 _____ () C:\Users\Marco\Desktop\Poledancestange im Kinderzimmer.wmv 2014-01-25 17:20 - 2014-01-25 17:19 - 05973713 _____ () C:\Users\Marco\Desktop\Ein Müllmann rastet aus.wmv 2014-01-25 16:52 - 2014-01-25 16:52 - 00000000 ____D () C:\Program Files (x86)\DsNET Corp 2014-01-25 16:47 - 2012-01-13 16:55 - 00000000 ____D () C:\ProgramData\Freemake 2014-01-25 16:46 - 2012-01-13 16:54 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake 2014-01-25 16:46 - 2012-01-13 16:54 - 00000000 ____D () C:\Program Files (x86)\Freemake 2014-01-25 16:30 - 2014-01-25 16:30 - 29836541 _____ () C:\Users\Marco\Desktop\ROLLIN` SAFARI - what if animals were round_.mp4 2014-01-25 16:30 - 2014-01-25 16:30 - 00000000 ____D () C:\Users\Marco\dwhelper 2014-01-25 16:30 - 2011-01-17 15:16 - 00000000 ___RD () C:\Users\Marco 2014-01-24 18:23 - 2014-01-24 18:22 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Sonstige 2014-01-22 16:35 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-01-20 04:55 - 2011-08-15 10:33 - 00000000 ____D () C:\Users\Marco\Dusty 2014-01-19 22:39 - 2014-01-19 22:39 - 00000032 _____ () C:\Windows\Menu.INI 2014-01-19 20:04 - 2014-01-19 19:05 - 866302861 _____ () C:\Users\Marco\Dusty.zip 2014-01-18 11:21 - 2014-01-15 16:41 - 00000600 _____ () C:\Users\Marco\AppData\Local\PUTTY.RND 2014-01-16 16:50 - 2009-07-14 05:45 - 00549696 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-01-16 16:29 - 2013-08-14 12:30 - 00000000 ____D () C:\Windows\system32\MRT 2014-01-16 16:22 - 2011-01-29 17:10 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-16 09:59 - 2012-07-13 18:03 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-01-15 18:29 - 2014-01-15 18:29 - 00000000 ____D () C:\Users\Marco\Telekom 2014-01-15 18:27 - 2013-11-17 20:44 - 00000000 ____D () C:\Users\Marco\Desktop\Für Karin 2014-01-15 18:27 - 2011-01-16 20:30 - 00000000 ____D () C:\Users\Marco\Schreiben 2014-01-13 21:20 - 2014-01-13 21:20 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\ICQ Dateien 2014-01-13 18:51 - 2013-03-21 13:53 - 00207904 _____ () C:\Windows\system32\Drivers\aswVmm.sys Files to move or delete: ==================== C:\Users\Marco\worldpainter_0.11.2.exe C:\Users\Marco\worldpainter_1.2.5.exe Some content of TEMP: ==================== C:\Users\Besucher\AppData\Local\Temp\AskSLib.dll C:\Users\Marco\AppData\Local\Temp\2dcd1d63cb45e6613582211c3d5f4b23.exe C:\Users\Marco\AppData\Local\Temp\7zip.exe C:\Users\Marco\AppData\Local\Temp\aacdec.exe C:\Users\Marco\AppData\Local\Temp\AskPIP_FF_.exe C:\Users\Marco\AppData\Local\Temp\AskSLib.dll C:\Users\Marco\AppData\Local\Temp\au.dll C:\Users\Marco\AppData\Local\Temp\audacity-win-unicode-1.3.12.exe C:\Users\Marco\AppData\Local\Temp\avguidx.dll C:\Users\Marco\AppData\Local\Temp\AVG_Toolbar_V11.exe C:\Users\Marco\AppData\Local\Temp\b11r-96g.dll C:\Users\Marco\AppData\Local\Temp\bitool.dll C:\Users\Marco\AppData\Local\Temp\COMAP.EXE C:\Users\Marco\AppData\Local\Temp\EBU9E9A.exe C:\Users\Marco\AppData\Local\Temp\EBUB5E1.DLL C:\Users\Marco\AppData\Local\Temp\eMule0.50a-Installer.exe C:\Users\Marco\AppData\Local\Temp\eMulePlus-1.2b.Installer.exe C:\Users\Marco\AppData\Local\Temp\FFSetupSoftonic260.exe C:\Users\Marco\AppData\Local\Temp\FoxyDeal_Setup.exe C:\Users\Marco\AppData\Local\Temp\FreemakeVideoDownloader_3.0.0.11.exe C:\Users\Marco\AppData\Local\Temp\FreemakeVideoDownloader_3.0.0.26.exe C:\Users\Marco\AppData\Local\Temp\FreemakeVideoDownloader_3.5.1.1.exe C:\Users\Marco\AppData\Local\Temp\FreemakeVideoDownloader_3.6.2.3.exe C:\Users\Marco\AppData\Local\Temp\GLFF2CB.tmp.ConduitEngineSetup.exe C:\Users\Marco\AppData\Local\Temp\HssInstaller.exe C:\Users\Marco\AppData\Local\Temp\i4jdel0.exe C:\Users\Marco\AppData\Local\Temp\iGearedHelper.dll C:\Users\Marco\AppData\Local\Temp\IMsetup.exe C:\Users\Marco\AppData\Local\Temp\IncrediMail_MediaBar_2.exe C:\Users\Marco\AppData\Local\Temp\installChecker.exe C:\Users\Marco\AppData\Local\Temp\installhelper.dll C:\Users\Marco\AppData\Local\Temp\j3dcore-ogl-cg.dll C:\Users\Marco\AppData\Local\Temp\j3dcore-ogl-chk.dll C:\Users\Marco\AppData\Local\Temp\j3dcore-ogl.dll C:\Users\Marco\AppData\Local\Temp\jpathwatch-nativelib-v-0-94-jpathwatch-native.dll C:\Users\Marco\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe C:\Users\Marco\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe C:\Users\Marco\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe C:\Users\Marco\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe C:\Users\Marco\AppData\Local\Temp\LiveSupport_setup.exe C:\Users\Marco\AppData\Local\Temp\MachineIdCreator.exe C:\Users\Marco\AppData\Local\Temp\MyBabylonTB.exe C:\Users\Marco\AppData\Local\Temp\MyClaroTB.exe C:\Users\Marco\AppData\Local\Temp\oi_{3A453DFD-D72E-40AB-9BDE-407524B0CB4A}.exe C:\Users\Marco\AppData\Local\Temp\OptimizerPro.exe C:\Users\Marco\AppData\Local\Temp\pixsetup.exe C:\Users\Marco\AppData\Local\Temp\prismsetup.exe C:\Users\Marco\AppData\Local\Temp\pstagesetup.exe C:\Users\Marco\AppData\Local\Temp\qc_e3f0f3ef_27e6_4ca8_8a7c_a3d761aa54bb_64.exe C:\Users\Marco\AppData\Local\Temp\setup.exe C:\Users\Marco\AppData\Local\Temp\sfamcc00001.dll C:\Users\Marco\AppData\Local\Temp\sfextra.dll C:\Users\Marco\AppData\Local\Temp\SkypeSetup.exe C:\Users\Marco\AppData\Local\Temp\sonarinst.exe C:\Users\Marco\AppData\Local\Temp\SRAssetsHelper.dll C:\Users\Marco\AppData\Local\Temp\tbFile.dll C:\Users\Marco\AppData\Local\Temp\udm1bnyk.dll C:\Users\Marco\AppData\Local\Temp\uninst.exe C:\Users\Marco\AppData\Local\Temp\UpdateCheckerSetup.exe C:\Users\Marco\AppData\Local\Temp\wajam_download.exe C:\Users\Marco\AppData\Local\Temp\xmlUpdater.exe C:\Users\Marco\AppData\Local\Temp\zipsetup.exe C:\Users\Schule\AppData\Local\Temp\zipsetup.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-02-08 14:42 ==================== End Of Log ============================ und hier der Inhalt der Addition.txt Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-02-2014 01 Ran by Marco at 2014-02-12 14:32:38 Running from C:\Users\Marco\Favorites\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0} ==================== Installed Programs ====================== Acer Backup Manager (x32 Version: 2.0.0.68 - NewTech Infosystems) Acer Crystal Eye webcam (x32 Version: 1.0.4.3 - Liteon) Acer ePower Management (x32 Version: 5.00.3005 - Acer Incorporated) Acer eRecovery Management (x32 Version: 4.05.3013 - Acer Incorporated) Acer GameZone Console (x32 Version: 6.1.0.9 - Oberon Media, Inc.) Acer Registration (x32 Version: 1.03.3003 - Acer Incorporated) Acer ScreenSaver (x32 Version: 1.1.0707.2010 - Acer Incorporated) Acer Updater (x32 Version: 1.02.3001 - Acer Incorporated) Acrobat.com (x32 Version: 1.6.65 - Adobe Systems Incorporated) ADAC Druckstudio (x32 Version: - ) Adobe Acrobat XI Pro (x32 Version: 11.0.06 - Adobe Systems) Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated) Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated) Hidden Adobe Download Assistant (x32 Version: 1.2.5 - Adobe Systems Incorporated) Adobe Download Assistant (x32 Version: 1.2.5 - Adobe Systems Incorporated) Hidden Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated) Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated) Adobe Reader 9.1 MUI (x32 Version: 9.1.0 - Adobe Systems Incorporated) Adobe Shockwave Player 11.5 (x32 Version: 11.5.9.620 - Adobe Systems, Inc.) Airport Mania First Flight (x32 Version: - Oberon Media) Amazonia (x32 Version: - Oberon Media) Any Video Converter 3.1.7 (x32 Version: - Any-Video-Converter.com) Apache Tomcat 7.0.34 (Version: - ) Apple Application Support (x32 Version: 2.3.6 - Apple Inc.) Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.) Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.) ApPtoU (x32 Version: - ApptoU) ArcSoft WebCam Companion 3 (x32 Version: 3.0.0.117 - ArcSoft) Art Effects for PDR10 (Version: 2.0 - NewBlue) Artweaver Plus 1.0 (x32 Version: 1.0 - Boris Eyrich Software) Ask Toolbar (x32 Version: 1.6.6.0 - Ask.com) <==== ATTENTION Atheros Bluetooth Suite (64) (Version: 7.4.0.165 - Atheros) aTube Catcher (x32 Version: 3.8.5187 - DsNET Corp) Audacity 1.3.12 (Unicode) (x32 Version: - Audacity Team) Audacity 2.0.2 (x32 Version: 2.0.2 - Audacity Team) Audio Recorder for FREE 2010 v12.8.1 (x32 Version: - Copyright(C) 2005-2010 AudioToolMedia Software.) AudioCon (x32 Version: 1.0 - Basement Softworks) AutocompletePro (x32 Version: - ) <==== ATTENTION avast! Ad Blocker (x32 Version: 1.0.0.0 - AVAST Software) avast! Premier (x32 Version: 9.0.2013 - Avast Software) AVS Audio Editor 7.1 (x32 Version: - Online Media Technologies Ltd.) AVS Update Manager 1.0 (x32 Version: - Online Media Technologies Ltd.) AVS4YOU Software Navigator 1.4 (x32 Version: - Online Media Technologies Ltd.) Backup Manager Basic (x32 Version: 2.0.0.68 - NewTech Infosystems) Hidden Bing Bar (x32 Version: 7.3.124.0 - Microsoft Corporation) Bonjour (Version: 3.0.0.10 - Apple Inc.) Broadcom Gigabit NetLink Controller (Version: 14.0.2.3 - Broadcom Corporation) BrowserProtect (x32 Version: - Bit89 Inc) <==== ATTENTION Cake Mania (x32 Version: - Oberon Media) Canon MP550 series MP Drivers (Version: - ) Canon MP560 series MP Drivers (Version: - ) Canon My Printer (x32 Version: - ) Capturelib Screen Recorder 2.0.0 (x32 Version: 2.0.0 - Capturelib, Inc.) CD Art Display 2.0.1 (x32 Version: - CD Art Display) CDBurnerXP (x32 Version: 4.5.1.4003 - CDBurnerXP) CDDRV_Installer (Version: 4.60 - Logitech) Hidden Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Conduit Engine (x32 Version: - Conduit Ltd.) <==== ATTENTION CyberLink PowerDVD 9 (x32 Version: 9.0.3216.50 - CyberLink Corp.) CyberLink PowerDVD 9 (x32 Version: 9.0.3216.50 - CyberLink Corp.) Hidden D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DebugMode Wink (x32 Version: - ) Desktop Player (x32 Version: 1.00.0000 - LongTailVideo) Diercke Globus (x32 Version: 1.1 - Imagon GmbH) DivxToDVD 0.5.2 (x32 Version: 0.5.2 - VSO-Software SARL) Dream Day First Home (x32 Version: - Oberon Media) Driver Genius Professional Edition (x32 Version: 10.0 - Driver-Soft Inc.) Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.) DVD Flick 1.3.0.7 (x32 Version: 1.3.0.7 - Dennis Meuwissen) eBay Worldwide (x32 Version: 2.1.0901 - OEM) eMule (x32 Version: - ) erLT (x32 Version: 1.20.0137 - Logitech, Inc.) Hidden eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) Hidden EXEcheckker (x32 Version: - EXEacheccker) Express Zip (x32 Version: - NCH Software) F1 Championship Season 2000 (x32 Version: - ) Facemoods Toolbar (x32 Version: - ) <==== ATTENTION Fahren Lernen Offline 2.0 (x32 Version: - Verlag Heinrich Vogel - Springer Transport Media GmbH) Farm Frenzy 2 (x32 Version: - Oberon Media) Fences (Version: 1.0 - Stardock Corporation) Hidden Fences (x32 Version: - Stardock Corporation) ffdshow [rev 2033] [2008-07-05] (x32 Version: 1.0 - ) FilesFrog Update Checker (x32 Version: - ) <==== ATTENTION FormatFactory 3.0.1 (x32 Version: 3.0.1 - Free Time) Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden FoxTab FLV To Mp3 (remove only) (x32 Version: - ) <==== ATTENTION FoxyDeal (x32 Version: 1.1.0 - R&E Media GmbH) Free Screen To Video V 1.2 (x32 Version: 1.2.0.0 - Koyote Soft) Freemake Video Downloader (x32 Version: 3.6.2 - Ellora Assets Corporation) Gadwin PrintScreen (x32 Version: 4.5 - Gadwin Systems, Inc.) Galapago (x32 Version: - Oberon Media) GamesCenter (x32 Version: - GamesCenter) GeoGebra (x32 Version: 3.2.46.0 - International GeoGebra Institute) GeoGebra 4.4 (x32 Version: 4.3.31.0 - International GeoGebra Institute) GetFLV 9.0.9.9 (x32 Version: - GetFLV, Inc.) Gigaset QuickSync (Version: 7.2.0844.6 - Gigaset Communications GmbH) GIMP 2.8.0 (Version: 2.8.0 - The GIMP Team) GlassFish Server Open Source Edition 4.0 (Version: - ) Google Chrome (x32 Version: 32.0.1700.102 - Google Inc.) Google Drive (x32 Version: 1.13.5782.599 - Google, Inc.) Google Earth (x32 Version: 7.1.2.2041 - Google) Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden Heroes of Hellas (x32 Version: - Oberon Media) HTSK (x32 Version: - ) iCloud (Version: 2.1.2.8 - Apple Inc.) ICQ 8.2 (build 6901) (HKCU Version: 8.2.6901.0 - ICQ) Identity Card (x32 Version: 1.00.3003 - Acer Incorporated) iLivid (x32 Version: 1.92.0.121952 - Bandoo Media Inc.) <==== ATTENTION ImgBurn (x32 Version: 2.5.7.0 - LIGHTNING UK!) Iminent (x32 Version: 6.41.1.1 - Iminent) <==== ATTENTION IncrediMail MediaBar 2 Toolbar (x32 Version: 6.1.0.7 - IncrediMail MediaBar 2) Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation) Intel(R) Graphics Media Accelerator Driver (x32 Version: 8.15.10.2182 - Intel Corporation) Intel(R) Management Engine Components (x32 Version: 6.0.0.1179 - Intel Corporation) Intel(R) Rapid Storage Technology (x32 Version: 9.6.2.1001 - Intel Corporation) Internet Radio (x32 Version: - ) InternetTV 7.15 (x32 Version: - MMToolz, Inc.) Internet-TV für Windows Media Center (x32 Version: 4.2.2.0 - Microsoft Corporation) iTunes (Version: 11.1.3.8 - Apple Inc.) Java 7 Update 51 (64-bit) (Version: 7.0.510 - Oracle) Java 7 Update 51 (x32 Version: 7.0.510 - Oracle) Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden Java SE Development Kit 7 Update 25 (64-bit) (Version: 1.7.0.250 - Oracle) Java(TM) 6 Update 22 (x32 Version: 6.0.220 - Oracle) Java(TM) 6 Update 37 (x32 Version: 6.0.370 - Oracle) Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden KhalInstallWrapper (Version: 2.00.0000 - Logitech) Hidden Launch Manager (x32 Version: 4.0.14 - Acer Inc.) LEGO Sports 2003 (x32 Version: - ) LG PC Suite III (x32 Version: 1.0.0.0 - LG Electronics) Hidden LG USB Modem Drivers (x32 Version: 4.9.4 - LG Electronics) LibreOffice 4.1.1.2 (x32 Version: 4.1.1.2 - The Document Foundation) LiveSupport (x32 Version: 1.2.7.0 - PC Utilities Software Limited) <==== ATTENTION Logitech SetPoint (x32 Version: 4.80 - Logitech) MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden MAGIX Speed burnR (MSI) (x32 Version: 7.0.2.6 - MAGIX AG) MegaCAD 2013 (32) Ausbildungsversion (x32 Version: 20.13.02.13 - Megatech Software GmbH) MegaCAD 3D 2011 (x32 Version: - ) Merriam Websters Spell Jam (x32 Version: - Oberon Media) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden Microsoft Access database engine 2010 (German) (x32 Version: 14.0.6029.1000 - Microsoft Corporation) Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0 - Microsoft Corporation) Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Access database engine 2007 (German) (x32 Version: 12.0.6425.1000 - Microsoft Corporation) Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft PowerPoint Viewer (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation) Microsoft SkyDrive (HKCU Version: 16.4.6013.0910 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation) MotioninJoy ds3 vibration driver version 0.100 (x32 Version: - www.motioninjoy.com) MotioninJoy Gamepad tool 0.7.0000 (Version: 0.7.0000 - www.motioninjoy.com) Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Mozilla Firefox 27.0 (x86 de) (x32 Version: 27.0 - Mozilla) Mozilla Maintenance Service (x32 Version: 24.3.0 - Mozilla) Mozilla Thunderbird 24.3.0 (x86 de) (x32 Version: 24.3.0 - Mozilla) MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation) Music Manager (HKCU Version: - Google, Inc.) MyPhoneExplorer (x32 Version: 1.8.5 - F.J. Wechselberger) MyWinLocker (x32 Version: 3.1.212.0 - Egis Technology Inc.) Hidden MyWinLocker Suite (x32 Version: 3.1.212.0 - Egis Technology Inc.) MyWinLocker Suite (x32 Version: 3.1.212.0 - Egis Technology Inc.) Hidden NCH DE Toolbar (x32 Version: 6.2.7.3 - NCH DE) NetBeans IDE 7.3.1 (Version: 7.3.1 - NetBeans.org) Norton Online Backup (x32 Version: 2.8.1.10 - Symantec Corporation) Notepad++ (x32 Version: 6.3.1 - ) NTI Media Maker 9 (x32 Version: 9.0.2.8928 - NTI Corporation) NTI Media Maker 9 (x32 Version: 9.0.2.8928 - NTI Corporation) Hidden NVIDIA Display Control Panel (Version: 6.14.12.5922 - NVIDIA Corporation) NVIDIA Grafiktreiber 306.97 (Version: 306.97 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.85.551 - NVIDIA Corporation) Hidden NVIDIA Optimus 1.10.8 (Version: 1.10.8 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.10.0224 - NVIDIA Corporation) NVIDIA Systemsteuerung 306.97 (Version: 306.97 - NVIDIA Corporation) Hidden NVIDIA Update 1.10.8 (Version: 1.10.8 - NVIDIA Corporation) NVIDIA Update Components (Version: 1.10.8 - NVIDIA Corporation) Hidden NVIDIA Updatus (x32 Version: 1.0.3 - NVIDIA Corporation) Hidden OpenOffice.org 3.3 (x32 Version: 3.3.9567 - OpenOffice.org) Optimizer Pro v3.2 (x32 Version: - PC Utilities Software Limited) <==== ATTENTION PDF24 Creator 5.7.0 (x32 Version: - PDF24.org) Pegtop PStart (x32 Version: - Pegtop Software) PhonerLite 2.09 (x32 Version: 2.09 - Heiko Sommerfeldt) phonostar-Player Version 3.02.2 (x32 Version: - ) Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden PhotoStage Slideshow Producer (x32 Version: - NCH Software) Pivot Stickfigure Animator (x32 Version: 2.2.5 - Peter Bone) PMG 2.0.0 (x32 Version: - URGESOFT) Poker Pop (x32 Version: - Oberon Media) posterXXL Designer 5.2 (x32 Version: - ) posterXXL.de Bestellsoftware 4.80 (x32 Version: - posterXXL AG) QuickTime (x32 Version: 7.74.80.86 - Apple Inc.) RealSpeak Solo fur Deutsch - Steffi (x32 Version: 4.00.0000 - ScanSoft) Realtek High Definition Audio Driver (x32 Version: 6.0.1.6141 - Realtek Semiconductor Corp.) Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30122 - Realtek Semiconductor Corp.) RollerCoaster Tycoon 3 (x32 Version: 1.00.000 - ) Roomeon 3D-Planer (x32 Version: 1.1.0 - MyDomicile.com GmbH) Schoener Fernsehen 0.0.0.1 (x32 Version: 0.0.0.1 - © schoener-fernsehen.com) Scribus 1.3.9 (x32 Version: 1.3.9 - The Scribus Team) SDFormatter (x32 Version: 4.0.0 - SD Association) Shockwave (x32 Version: - ) shoppnnDroop (x32 Version: - sHopnidrop) Shredder (Version: 2.0.8.3 - Egis Technology Inc.) Hidden Shredder (x32 Version: 2.0.8.3 - Egis Technology Inc.) Hidden Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.) SpeedFan (remove only) (x32 Version: - ) Spin & Win (x32 Version: - Oberon Media) StoppUhr (x32 Version: - ) Super Screen Recorder 4.0 (x32 Version: - ZeallSoft, Inc.) Synaptics Pointing Device Driver (Version: 14.0.19.0 - Synaptics Incorporated) Synthesia (remove only) (x32 Version: - ) TeamViewer 9 (x32 Version: 9.0.25942 - TeamViewer) TmNationsForever (x32 Version: - Nadeo) Total Immersion Racing (x32 Version: - ) Two Worlds Pinball (x32 Version: - ) Überwachungstool für die Intel® Turbo-Boost-Technik (Version: 1.0.186.6 - Intel) UltraMixer 4.0.0 (x32 Version: 4.0.0 - UltraMixer Digital Audio Solutions) Uniblue RegistryBooster (x32 Version: - Uniblue Systems Ltd) Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation) Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation) VDownloader 3.0.752 (x32 Version: - Vitzo Limited) Video Downloader Professional 1.0.2.0 (x32 Version: - KWOXER UN!TED) VideoPad Videobearbeitungs-Software (x32 Version: - NCH Software) VirtualDJ Home FREE (x32 Version: 7.0.5 - Atomix Productions) Visual C++ 9.0 CRT (x86) WinSXS MSM (x32 Version: 9.0 - Microsoft Corporation) Hidden VLC media player 2.1.3 (x32 Version: 2.1.3 - VideoLAN) Wajam (x32 Version: 2.06 - Wajam) <==== ATTENTION WavePad Sound Editor (x32 Version: - NCH Software) Welcome Center (x32 Version: 1.02.3004 - Acer Incorporated) Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Family Safety (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Family Safety (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Mail (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Messenger (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live MIME IFilter (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Sync (x32 Version: 14.0.8117.416 - Microsoft Corporation) Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Writer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Windows Live Writer Resources (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden WinPcap 4.1.2 (x32 Version: 4.1.0.2001 - CACE Technologies) WinRAR 5.01 (32-bit) (x32 Version: 5.01.0 - win.rar GmbH) WinSCP 5.1.7 (x32 Version: 5.1.7 - Martin Prikryl) Wisdom-soft Set up ASR 3.1 Free (x32 Version: - Wisdom Software Inc.) WorldPainter 1.2.5 (x32 Version: 1.2.5 - pepsoft.org) XAMPP (x32 Version: 1.8.3-0 - BitNami) xHamster Video Downloader 3.24 (x32 Version: - DownloadToolz, Inc.) Xilisoft Online Video Converter (HKCU Version: 2.0.25.1122 - Xilisoft) Xvid 1.1.3 final uninstall (x32 Version: 1.1 - Xvid team (Koepi)) Youtube Downloader HD v. 2.9.5 (x32 Version: - YoutubeDownloaderHD.com) Zoo Tycoon: Complete Collection (x32 Version: - ) ==================== Restore Points ========================= 27-01-2014 12:13:15 Windows Update 27-01-2014 16:07:30 Installed iTunes 27-01-2014 16:20:12 Installed Java 7 Update 51 (64-bit) 27-01-2014 16:23:14 Installed Java 7 Update 51 28-01-2014 14:12:16 Windows Update 29-01-2014 19:05:36 Windows Update 31-01-2014 05:38:39 Windows Update 31-01-2014 14:30:08 avast! antivirus system restore point 31-01-2014 14:34:43 Gerätetreiber-Paketinstallation: Avast Netzwerkdienst 01-02-2014 10:22:19 Windows Update 02-02-2014 07:09:35 Windows Update 03-02-2014 10:09:18 Windows Update 06-02-2014 10:27:25 Windows Update 08-02-2014 09:05:41 Windows Update 09-02-2014 10:02:17 Windows Update 11-02-2014 13:41:00 Windows Update 12-02-2014 13:20:42 Windows Update ==================== Hosts content: ========================== 2009-07-14 03:34 - 2013-08-30 08:56 - 00000845 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 ifw.local ==================== Scheduled Tasks (whitelisted) ============= Task: {0243D68B-87C4-462E-B40C-1513228F99FB} - System32\Tasks\{CFC12328-BB91-45A7-A7C8-E057AD886176} => C:\Users\Marco\Spiele\Alarmstuferot2\GAME.EXE [2000-11-03] (Westwood Studios) Task: {05F64E81-2F8A-4AF8-9DC1-9DB48FD6D2B6} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002UA => C:\Users\Marco\AppData\Local\Google\Update\GoogleUpdate.exe [2013-08-22] (Google Inc.) Task: {11BA94DA-46DF-42D4-97DE-035212E2779C} - System32\Tasks\{65B6DA46-08F9-42DC-9D21-68ECB5FEEE0A} => C:\Users\Marco\Spiele\Alarmstuferot2\ra2.exe [2000-10-24] () Task: {1AFBE3FB-3882-4E49-A4B4-E8FF77BBA157} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-31] (AVAST Software) Task: {1C1955BC-B7CB-4EA4-8C21-A90AF429B694} - System32\Tasks\{041F2130-E6FD-40C5-BBE9-52AFC0D96381} => C:\Users\Marco\Spiele\Alarmstuferot2\ra2.exe [2000-10-24] () Task: {29B54186-9B89-40A3-9CCE-773889D5164C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-05] (Adobe Systems Incorporated) Task: {2B192A1D-3580-420D-A092-E847EE02E2E4} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.) Task: {2CE20BB5-B6D9-4128-AF24-C418FEEC1FDF} - System32\Tasks\{131E5AAD-9FED-42AE-9D92-C791A6FE5F3F} => C:\Users\Marco\Spiele\Alarmstuferot2\ra2.exe [2000-10-24] () Task: {37A36BE3-1A07-4047-BB8B-236C078242B3} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2010-02-04] () Task: {38B42351-1A33-4512-A85B-2E9780F02F5C} - System32\Tasks\{25C3A0DC-D568-459A-A16E-3A4044F74354} => C:\Users\Marco\Spiele\Minecraft\MinecraftServer\Minecraft_Server2.exe Task: {3C86FB08-A292-44FE-90F3-7622BC0ADF09} - System32\Tasks\NCH Software\ExpressZipDowngrade => C:\Program Files (x86)\NCH Software\ExpressZip\expresszip.exe [2012-10-12] (NCH Software) Task: {3FE0C3FC-E318-4593-9158-20AD6672E6A6} - System32\Tasks\{7BB0731C-19BC-41B6-A803-F42127F20CFD} => C:\Users\Marco\Spiele\Alarmstuferot2\ra2.exe [2000-10-24] () Task: {4E73B4FB-082C-43D7-9AB0-59BD0C52DF63} - System32\Tasks\{F82A0C86-76A6-4595-B376-E6D9BA04741E} => C:\Program Files (x86)\iTunes\iTunes.exe [2013-11-02] (Apple Inc.) Task: {52EF294A-44F3-4AF9-ABF4-BCBEAFFDA72E} - System32\Tasks\{AF5E9E21-4330-4597-9725-7FDA46601544} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.) Task: {71001592-84AA-498A-A0E9-1F7563049E1F} - System32\Tasks\{168BB853-63CF-44A0-A43E-83BBFE6C499E} => C:\Users\Marco\Spiele\Minecraft\MinecraftServer\Minecraft_Server2.exe Task: {721796F6-5AA6-4680-ACB6-6237D89F41DB} - System32\Tasks\{8DD834B5-198E-409A-8D7A-660C47ED02B5} => Chrome.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=5.8.0.156&LastError=12002 Task: {753B28D6-1E08-4A72-B90F-F380948E9F11} - System32\Tasks\{3A31849E-296C-42FD-B5A4-88D344352D88} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=5.1.0.104&LastError=12002 Task: {7A06C56B-43D6-443C-BF82-615F902F8AAC} - System32\Tasks\{018DF6E4-C046-4FD5-B951-93D34A583983} => C:\Users\Marco\Spiele\Minecraft\MinecraftServer\Minecraft_Server2.exe Task: {7C6DCB3D-8A7F-40A4-8D84-62CE61AA9508} - System32\Tasks\{9DDB31B9-44F5-4181-AF4F-F2E495E3E944} => C:\Users\Marco\Spiele\Minecraft\MinecraftServer\Minecraft_Server2.exe Task: {7CDE1BDE-36F0-469D-AF52-08EB2E433632} - System32\Tasks\{F3C812C3-7D7C-44A0-8952-6F379977FA97} => C:\Users\Marco\Spiele\Alarmstuferot2\ra2.exe [2000-10-24] () Task: {7F84C0EE-20A2-4A71-A138-2BDFD4B19263} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtect <==== ATTENTION Task: {8491CA71-BFE6-4CED-8609-BD78A4196801} - System32\Tasks\{9E305CFD-F157-4A9F-992A-C12E920A12BA} => C:\Users\Marco\Spiele\Alarmstuferot2\ra2.exe [2000-10-24] () Task: {87973194-E3EE-4D45-9648-F1A955C2D753} - System32\Tasks\{E9155501-32F8-4449-B5FF-9D6B51F2FE7C} => C:\Users\Marco\Desktop\Outlook Express\msimn.exe Task: {93842E88-1546-4F19-AF5B-DE63875ABA5E} - System32\Tasks\{A729EAD2-997C-4569-862A-0D2199F40FD8} => Chrome.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=5.8.0.156&LastError=12002 Task: {93CEE8D4-B57A-47CC-BB79-73801D6D61C0} - System32\Tasks\{D2896F57-0A56-4DEB-92EB-84B7EFE9286E} => C:\Users\Marco\Spiele\Minecraft\MinecraftServer\Minecraft_Server2.exe Task: {9C7880E3-2990-4838-98AB-FDD2FF5A5FCD} - System32\Tasks\{6304674E-B243-4EE8-9C9E-B020C16B726C} => Chrome.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=5.9.0.114.259&LastError=12002 Task: {9FC40BDE-262F-4E37-9A42-C2D7A9970121} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-04] (Google Inc.) Task: {A0A8F269-2126-49E7-82D6-3C90BE49769F} - System32\Tasks\{FB329407-D9CF-45E2-A7AA-9821EE20AFF6} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.) Task: {ACCB94CF-0623-4E26-AAA1-EAFC9E1DA8E4} - System32\Tasks\{BC50B084-7749-425E-850B-CA9E6EB0B630} => Chrome.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=5.5.0.119.259&LastError=12002 Task: {ADB07AD0-812D-4FE8-835C-82AFBFA23A6D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-04] (Google Inc.) Task: {B7FB40E1-3D31-4933-8B0D-A5913A2A82EC} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002Core => C:\Users\Marco\AppData\Local\Google\Update\GoogleUpdate.exe [2013-08-22] (Google Inc.) Task: {C1B9D1A2-080B-49B3-BE8A-C6AEC3D0E13C} - System32\Tasks\{286679F3-E4CA-49EB-9131-19F30BE88821} => C:\Program Files (x86)\iTunes\iTunes.exe [2013-11-02] (Apple Inc.) Task: {C2E744AF-5BEA-4F40-94E7-FEBC8F3C35F0} - System32\Tasks\{D7F197EB-B937-43E7-AE7F-216C7702BE4B} => C:\Users\Marco\Spiele\Alarmstuferot2\ra2.exe [2000-10-24] () Task: {CB4F24C2-4FE9-4D94-B82D-C94C7F2A776B} - System32\Tasks\{F40D556C-C413-4C55-A7FB-3317E550DE5C} => C:\Users\Marco\Desktop\Outlook Express\msimn.exe Task: {CD0D28F5-AD4A-4FE6-9F7A-A372DA05E969} - System32\Tasks\{169C9909-726B-4D85-889B-A18344793E2A} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.) Task: {D8856736-975D-4D5E-8D27-AA28A386504D} - System32\Tasks\SomotoUpdateCheckerAutoStart => C:\Users\Marco\AppData\Local\FilesFrog Update Checker\update_checker.exe [2013-10-17] (Somoto) <==== ATTENTION Task: {FAF208E0-82D5-410D-AB5B-887D0DF92786} - System32\Tasks\{9AC64663-E425-4523-9D47-6BB3E54485BD} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.) Task: {FE462F8F-1D99-443A-8058-8BC33FA42F53} - System32\Tasks\{85E368E9-E8F8-4E5C-B925-15010CB0854F} => Chrome.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=5.5.0.112.259&LastError=12002 Task: {FFD45F39-6E99-4E02-BA70-912CF3E13639} - System32\Tasks\{4FB3F7B1-331D-4127-AF81-5610D9687066} => C:\Users\Marco\Desktop\Outlook Express\msimn.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002Core.job => C:\Users\Marco\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002UA.job => C:\Users\Marco\AppData\Local\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2012-01-10 20:12 - 2012-01-10 20:12 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2011-07-10 17:30 - 2011-06-20 16:05 - 00040960 _____ () C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe 2013-07-20 13:39 - 2009-07-20 11:35 - 00018960 _____ () C:\Program Files\Logitech\SetPoint\khalwrapper.dll 2013-07-20 13:39 - 2009-07-20 03:00 - 00077824 _____ () C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe 2012-11-15 20:00 - 2012-11-15 20:00 - 00088576 _____ () C:\Program Files (x86)\NCH Software\ExpressZip\ezcm64.dll 2013-02-10 11:05 - 2013-01-08 10:32 - 00721917 _____ () C:\Windows\SysWOW64\AiCM64.dll 2013-08-15 10:58 - 2013-08-15 10:58 - 00402432 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_64\VistaBridgeLibrary\3a8ad1faad945b7fde47baea6ca8a360\VistaBridgeLibrary.ni.dll 2014-02-10 20:31 - 2014-02-10 19:05 - 02172928 _____ () C:\Program Files\AVAST Software\Avast\defs\14021001\algo.dll 2014-02-12 14:20 - 2014-02-12 08:49 - 02172928 _____ () C:\Program Files\AVAST Software\Avast\defs\14021200\algo.dll 2014-01-03 00:10 - 2013-10-29 11:20 - 04062536 _____ () C:\Program Files (x86)\Optimizer Pro\OptProCrash.dll 2014-01-03 00:10 - 2014-01-03 00:10 - 00192664 _____ () C:\Program Files (x86)\Optimizer Pro\OptProCrashSvc.dll 2011-11-01 23:26 - 2011-11-01 23:26 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll 2011-11-01 23:26 - 2011-11-01 23:26 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll 2007-12-12 08:29 - 2007-12-12 08:29 - 00036864 _____ () C:\Program Files (x86)\Megatech\MProtect\MPServ.EXE 2010-06-28 23:20 - 2010-06-28 23:20 - 00465576 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll 2010-06-28 23:12 - 2010-06-28 23:12 - 01081600 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll 2011-07-10 17:30 - 2011-06-15 13:07 - 02293248 _____ () C:\Program Files (x86)\phonostar-Player\QtCore4.dll 2011-07-10 17:30 - 2011-03-30 07:16 - 08173568 _____ () C:\Program Files (x86)\phonostar-Player\QtGui4.dll 2011-07-10 17:30 - 2011-03-30 06:59 - 00191488 _____ () C:\Program Files (x86)\phonostar-Player\QtSql4.dll 2011-07-10 17:30 - 2011-03-30 10:46 - 00416256 _____ () C:\Program Files (x86)\phonostar-Player\plugins\sqldrivers\qsqlite4.dll 2013-02-27 20:33 - 2013-02-27 20:33 - 10683392 _____ () C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\QtWebKit4.dll 2013-02-27 20:32 - 2013-02-27 20:32 - 07741952 _____ () C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\QtGui4.dll 2013-02-27 20:32 - 2013-02-27 20:32 - 02248192 _____ () C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\QtCore4.dll 2013-02-27 20:33 - 2013-02-27 20:33 - 01681408 _____ () C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\QtNetwork4.dll 2013-11-12 02:03 - 2013-11-12 02:03 - 00117248 _____ () C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\libaacdec.dll 2013-11-12 02:04 - 2013-11-12 02:04 - 00231936 _____ () C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\libmpgdec.dll 2013-11-12 02:03 - 2013-11-12 02:03 - 00253440 _____ () C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\libid3tag.dll 2013-11-12 02:05 - 2013-11-12 02:05 - 00344064 _____ () C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\libaudioenc.dll 2013-02-27 20:33 - 2013-02-27 20:33 - 00026624 _____ () C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\imageformats\qgif4.dll 2010-08-30 10:45 - 2009-05-20 07:02 - 00072200 _____ () C:\Program Files (x86)\Launch Manager\CdDirIo.dll 2013-11-14 19:10 - 2013-11-14 19:10 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2011-01-17 16:19 - 2011-02-03 15:01 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll 2014-02-05 20:35 - 2014-02-05 20:35 - 03019376 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll 2014-02-05 20:35 - 2014-02-05 20:35 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll 2014-02-05 20:35 - 2014-02-05 20:35 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll 2014-02-06 17:24 - 2014-02-06 17:24 - 03583600 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ==================== Alternate Data Streams (whitelisted) ========= AlternateDataStreams: C:\ProgramData\Temp:0B9176C0 AlternateDataStreams: C:\ProgramData\Temp:1EE00E38 AlternateDataStreams: C:\ProgramData\Temp:798A3728 AlternateDataStreams: C:\ProgramData\Temp:93EB7685 AlternateDataStreams: C:\ProgramData\Temp:CDFF58FE ==================== Safe Mode (whitelisted) =================== ==================== Disabled items from MSCONFIG ============== ==================== Faulty Device Manager Devices ============= Name: LogMeIn Kernel Information Provider Description: LogMeIn Kernel Information Provider Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: LMIInfo Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (02/12/2014 02:20:06 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 60169617 Error: (02/12/2014 02:20:06 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 60169617 Error: (02/12/2014 02:20:06 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (02/12/2014 02:20:05 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 60168244 Error: (02/12/2014 02:20:05 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 60168244 Error: (02/12/2014 02:20:05 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (02/12/2014 02:20:04 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 60167214 Error: (02/12/2014 02:20:04 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 60167214 Error: (02/12/2014 02:20:04 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (02/12/2014 02:20:02 PM) (Source: Bonjour Service) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 60165998 System errors: ============= Error: (02/12/2014 02:24:42 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7 für x64-basierte Systeme Error: (02/11/2014 08:49:36 PM) (Source: Service Control Manager) (User: ) Description: Dienst "Windows Defender" wurde unerwartet beendet. Dies ist bereits 4 Mal passiert. Error: (02/11/2014 02:46:09 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT) Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7 für x64-basierte Systeme Error: (02/11/2014 02:41:28 PM) (Source: Service Control Manager) (User: ) Description: Dienst "Windows Defender" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert. Error: (02/10/2014 11:10:15 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows Defender" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts. Error: (02/10/2014 10:58:00 PM) (Source: DCOM) (User: ) Description: {995C996E-D918-4A8C-A302-45719A6F4EA7} Error: (02/10/2014 10:43:42 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "Windows Defender" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts. Error: (02/10/2014 10:37:48 PM) (Source: DCOM) (User: ) Description: 1053BBUpdate-Service{D6381B4A-D254-46EB-9018-A62E0F4BA6BA} Error: (02/10/2014 10:37:46 PM) (Source: Service Control Manager) (User: ) Description: Der Dienst "BBUpdate" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (02/10/2014 10:37:46 PM) (Source: Service Control Manager) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst BBUpdate erreicht. Microsoft Office Sessions: ========================= Error: (02/12/2014 02:20:06 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 60169617 Error: (02/12/2014 02:20:06 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 60169617 Error: (02/12/2014 02:20:06 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (02/12/2014 02:20:05 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 60168244 Error: (02/12/2014 02:20:05 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 60168244 Error: (02/12/2014 02:20:05 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (02/12/2014 02:20:04 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 60167214 Error: (02/12/2014 02:20:04 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledEvent 60167214 Error: (02/12/2014 02:20:04 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (02/12/2014 02:20:02 PM) (Source: Bonjour Service)(User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 60165998 ==================== Memory info =========================== Percentage of memory in use: 72% Total physical RAM: 3766.71 MB Available physical RAM: 1034.59 MB Total Pagefile: 7531.6 MB Available Pagefile: 3875.31 MB Total Virtual: 8192 MB Available Virtual: 8191.81 MB ==================== Drives ================================ Drive c: (Acer) (Fixed) (Total:452.66 GB) (Free:134.13 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: FD9AB21B) Partition 1: (Not Active) - (Size=13 GB) - (Type=27) Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=453 GB) - (Type=07 NTFS) ==================== End Of Log ============================ |
13.02.2014, 05:55 | #4 |
/// the machine /// TB-Ausbilder | 100% Pysikalischer Speicher durch svchost.exe hi, Scan mit Combofix
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
13.02.2014, 17:41 | #5 |
| 100% Pysikalischer Speicher durch svchost.exe Ok, bin fertig damit Dauer: ca. 30 Minuten Programm hat nicht "gemeckert" Ist mein Problem jetzt gelöst? Was hat das Programm gemacht? Danke für die Hilfe übrigens Code:
ATTFilter ComboFix 14-02-12.01 - Marco 13.02.2014 16:43:35.1.4 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.3767.1114 [GMT 1:00] ausgeführt von:: c:\users\Marco\Desktop\ComboFix.exe AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B} FW: avast! Antivirus *Disabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0} SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . C:\install.exe c:\program files (x86)\AutocompletePro c:\program files (x86)\AutocompletePro\AutocompletePro.dll c:\program files (x86)\AutocompletePro\chrome\autocompleteprochrome.crx c:\program files (x86)\AutocompletePro\FireFoxExtension.exe c:\program files (x86)\AutocompletePro\InstTracker.exe c:\program files (x86)\AutocompletePro\support@predictad.com\chrome.manifest c:\program files (x86)\AutocompletePro\support@predictad.com\chrome\content\browserOverlay.xul c:\program files (x86)\AutocompletePro\support@predictad.com\chrome\content\options.js c:\program files (x86)\AutocompletePro\support@predictad.com\chrome\content\options.xul c:\program files (x86)\AutocompletePro\support@predictad.com\chrome\content\utils.js c:\program files (x86)\AutocompletePro\support@predictad.com\defaults\preferences\predictad.js c:\program files (x86)\AutocompletePro\support@predictad.com\install.rdf c:\program files (x86)\AutocompletePro\unins000.dat c:\program files (x86)\AutocompletePro\unins000.exe c:\program files (x86)\facemoods.com c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\bh\facemoods.dll c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\facemoods.crx c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\facemoods.png c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodsApp.dll c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodsEng.dll c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodssrv.exe c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodsTlbr.dll c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\uninstall.exe c:\program files (x86)\facemoods.com\sqlite3.dll c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe c:\program files (x86)\PriceGong c:\program files (x86)\PriceGong\2.5.1\FF\chrome.manifest c:\program files (x86)\PriceGong\2.5.1\FF\chrome\content\options.js c:\program files (x86)\PriceGong\2.5.1\FF\chrome\content\options.xul c:\program files (x86)\PriceGong\2.5.1\FF\chrome\content\overlay.js c:\program files (x86)\PriceGong\2.5.1\FF\chrome\content\PriceGong.png c:\program files (x86)\PriceGong\2.5.1\FF\chrome\content\pricegong.xul c:\program files (x86)\PriceGong\2.5.1\FF\chrome\locale\en-US\overlay.dtd c:\program files (x86)\PriceGong\2.5.1\FF\chrome\locale\en-US\pricegong.dtd c:\program files (x86)\PriceGong\2.5.1\FF\chrome\skin\overlay.css c:\program files (x86)\PriceGong\2.5.1\FF\components\pg_inst.txt c:\program files (x86)\PriceGong\2.5.1\FF\components\PriceGong.xpt c:\program files (x86)\PriceGong\2.5.1\FF\install.rdf c:\program files (x86)\PriceGong\2.5.1\FF\modules\Observers.js c:\program files (x86)\PriceGong\2.5.1\FF\modules\pricegong.js c:\program files (x86)\PriceGong\2.5.1\PriceGong.crx c:\program files (x86)\PriceGong\uninst.exe c:\users\Besucher\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba c:\users\Besucher\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\background.html c:\users\Besucher\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\content.js c:\users\Besucher\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\LHkDVr3Y.js c:\users\Besucher\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\lsdb.js c:\users\Besucher\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\manifest.json c:\users\Besucher\AppData\Local\Google\Chrome\User Data\Default\Preferences c:\users\Karin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba c:\users\Karin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\background.html c:\users\Karin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\content.js c:\users\Karin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\LHkDVr3Y.js c:\users\Karin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\lsdb.js c:\users\Karin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\manifest.json c:\users\Karin\AppData\Local\Google\Chrome\User Data\Default\Preferences c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\0p5bovp@bobhr-.com c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\0p5bovp@bobhr-.com\bootstrap.js c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\0p5bovp@bobhr-.com\chrome.manifest c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\0p5bovp@bobhr-.com\content\bg.js c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\0p5bovp@bobhr-.com\install.rdf c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\74oai@uo-qik.edu c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\74oai@uo-qik.edu\bootstrap.js c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\74oai@uo-qik.edu\chrome.manifest c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\74oai@uo-qik.edu\content\bg.js c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\74oai@uo-qik.edu\install.rdf c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\wliii_oya@aftl-kheuoa.com c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\wliii_oya@aftl-kheuoa.com\bootstrap.js c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\wliii_oya@aftl-kheuoa.com\chrome.manifest c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\wliii_oya@aftl-kheuoa.com\content\bg.js c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\wliii_oya@aftl-kheuoa.com\install.rdf c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\background.html c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\content.js c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\LHkDVr3Y.js c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\lsdb.js c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\manifest.json c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdlfihameoodkafnckcnpfidcndgekh c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdlfihameoodkafnckcnpfidcndgekh\4.1_0\background.html c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdlfihameoodkafnckcnpfidcndgekh\4.1_0\content.js c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdlfihameoodkafnckcnpfidcndgekh\4.1_0\lsdb.js c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdlfihameoodkafnckcnpfidcndgekh\4.1_0\manifest.json c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdlfihameoodkafnckcnpfidcndgekh\4.1_0\MHSlmhlp.js c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gnnlogcccgfcaamcaalbgffiphmhfkba_0.localstorage-journal c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gnnlogcccgfcaamcaalbgffiphmhfkba_0.localstorage c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_okdlfihameoodkafnckcnpfidcndgekh_0.localstorage-journal c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_okdlfihameoodkafnckcnpfidcndgekh_0.localstorage c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Preferences c:\users\Marco\AppData\Local\TempDIR c:\users\Marco\AppData\Local\TempDIR\BetterInstaller.exe c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\0p5bovp@bobhr-.com c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\0p5bovp@bobhr-.com\bootstrap.js c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\0p5bovp@bobhr-.com\chrome.manifest c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\0p5bovp@bobhr-.com\content\bg.js c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\0p5bovp@bobhr-.com\install.rdf c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\74oai@uo-qik.edu c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\74oai@uo-qik.edu\bootstrap.js c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\74oai@uo-qik.edu\chrome.manifest c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\74oai@uo-qik.edu\content\bg.js c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\74oai@uo-qik.edu\install.rdf c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\wliii_oya@aftl-kheuoa.com c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\wliii_oya@aftl-kheuoa.com\bootstrap.js c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\wliii_oya@aftl-kheuoa.com\chrome.manifest c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\wliii_oya@aftl-kheuoa.com\content\bg.js c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\wliii_oya@aftl-kheuoa.com\install.rdf c:\users\Schule\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba c:\users\Schule\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\background.html c:\users\Schule\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\content.js c:\users\Schule\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\LHkDVr3Y.js c:\users\Schule\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\lsdb.js c:\users\Schule\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\manifest.json c:\users\Schule\AppData\Local\Google\Chrome\User Data\Default\Preferences c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\0p5bovp@bobhr-.com c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\0p5bovp@bobhr-.com\bootstrap.js c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\0p5bovp@bobhr-.com\chrome.manifest c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\0p5bovp@bobhr-.com\content\bg.js c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\0p5bovp@bobhr-.com\install.rdf c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\74oai@uo-qik.edu c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\74oai@uo-qik.edu\bootstrap.js c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\74oai@uo-qik.edu\chrome.manifest c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\74oai@uo-qik.edu\content\bg.js c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\74oai@uo-qik.edu\install.rdf c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\wliii_oya@aftl-kheuoa.com c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\wliii_oya@aftl-kheuoa.com\bootstrap.js c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\wliii_oya@aftl-kheuoa.com\chrome.manifest c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\wliii_oya@aftl-kheuoa.com\content\bg.js c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\wliii_oya@aftl-kheuoa.com\install.rdf c:\users\SERVER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba c:\users\SERVER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\background.html c:\users\SERVER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\content.js c:\users\SERVER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\LHkDVr3Y.js c:\users\SERVER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\lsdb.js c:\users\SERVER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\manifest.json c:\users\SERVER\AppData\Local\Google\Chrome\User Data\Default\Preferences c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\0p5bovp@bobhr-.com c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\0p5bovp@bobhr-.com\bootstrap.js c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\0p5bovp@bobhr-.com\chrome.manifest c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\0p5bovp@bobhr-.com\content\bg.js c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\0p5bovp@bobhr-.com\install.rdf c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\74oai@uo-qik.edu c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\74oai@uo-qik.edu\bootstrap.js c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\74oai@uo-qik.edu\chrome.manifest c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\74oai@uo-qik.edu\content\bg.js c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\74oai@uo-qik.edu\install.rdf c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\wliii_oya@aftl-kheuoa.com c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\wliii_oya@aftl-kheuoa.com\bootstrap.js c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\wliii_oya@aftl-kheuoa.com\chrome.manifest c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\wliii_oya@aftl-kheuoa.com\content\bg.js c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\wliii_oya@aftl-kheuoa.com\install.rdf c:\windows\SysWow64\Packet.dll c:\windows\SysWow64\pthreadVC.dll c:\windows\SysWow64\wpcap.dll . . ((((((((((((((((((((((((((((((((((((((( Treiber/Dienste ))))))))))))))))))))))))))))))))))))))))))))))))) . . -------\Legacy_NPF -------\Service_npf . . ((((((((((((((((((((((( Dateien erstellt von 2014-01-13 bis 2014-02-13 )))))))))))))))))))))))))))))) . . 2014-02-13 16:03 . 2014-02-13 16:03 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp 2014-02-13 16:03 . 2014-02-13 16:03 -------- d-----w- c:\users\Karin\AppData\Local\temp 2014-02-13 16:03 . 2014-02-13 16:03 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-02-13 16:03 . 2014-02-13 16:03 -------- d-----w- c:\users\Besucher\AppData\Local\temp 2014-02-13 16:03 . 2014-02-13 16:03 -------- d-----w- c:\users\SERVER\AppData\Local\temp 2014-02-13 16:03 . 2014-02-13 16:03 -------- d-----w- c:\users\Schule\AppData\Local\temp 2014-02-13 16:03 . 2014-02-13 16:03 -------- d-----w- c:\users\Gast\AppData\Local\temp 2014-02-12 13:26 . 2014-02-12 13:33 -------- d-----w- C:\FRST 2014-02-11 13:49 . 2013-12-04 03:28 10315576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{DBAAAE59-784E-4742-920D-5EA7ACF217E0}\mpengine.dll 2014-02-06 18:18 . 2014-02-06 18:18 -------- d-----w- c:\users\Besucher\AppData\Roaming\LibreOffice 2014-02-06 18:16 . 2014-02-06 18:16 -------- d-----w- c:\users\Besucher\AppData\Roaming\OpenOffice.org 2014-02-05 19:35 . 2014-02-10 19:30 -------- d-----w- c:\program files (x86)\Mozilla Thunderbird 2014-01-31 15:03 . 2014-01-31 15:04 -------- d-----w- c:\programdata\EXEcheckker 2014-01-31 15:03 . 2014-01-31 15:03 -------- d-----w- c:\programdata\okdlfihameoodkafnckcnpfidcndgekh 2014-01-29 19:27 . 2014-01-29 19:28 -------- d-----w- c:\programdata\ApPtoU 2014-01-29 19:27 . 2014-01-31 15:04 -------- d-----w- c:\programdata\2ff1ddb567438de4 2014-01-29 19:27 . 2014-01-29 19:27 -------- d-----w- c:\programdata\shoppnnDroop 2014-01-29 19:27 . 2014-01-29 19:27 -------- d-----w- c:\programdata\hehonoiddkebnfobcdlakohjokfldcmh 2014-01-27 16:24 . 2014-01-27 16:24 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll 2014-01-27 16:21 . 2014-01-27 16:21 312744 ----a-w- c:\windows\system32\javaws.exe 2014-01-27 16:21 . 2014-01-27 16:21 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll 2014-01-27 16:21 . 2014-01-27 16:21 189352 ----a-w- c:\windows\system32\javaw.exe 2014-01-27 16:21 . 2014-01-27 16:21 189352 ----a-w- c:\windows\system32\java.exe 2014-01-27 16:11 . 2014-01-27 16:11 -------- d-----w- c:\program files\iPod 2014-01-27 16:11 . 2014-01-27 16:12 -------- d-----w- c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-01-27 16:11 . 2014-01-27 16:12 -------- d-----w- c:\program files\iTunes 2014-01-27 16:11 . 2014-01-27 16:12 -------- d-----w- c:\program files (x86)\iTunes 2014-01-25 15:52 . 2014-01-25 15:52 -------- d-----w- c:\program files (x86)\DsNET Corp 2014-01-25 15:30 . 2014-01-25 15:30 -------- d-----w- c:\users\Marco\dwhelper 2014-01-15 17:29 . 2014-01-15 17:29 -------- d-----w- c:\users\Marco\Telekom 2014-01-15 13:27 . 2013-11-27 01:41 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys 2014-01-15 13:27 . 2013-11-27 01:41 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys 2014-01-15 13:27 . 2013-11-27 01:41 53248 ----a-w- c:\windows\system32\drivers\usbehci.sys 2014-01-15 13:27 . 2013-11-27 01:41 325120 ----a-w- c:\windows\system32\drivers\usbport.sys 2014-01-15 13:27 . 2013-11-27 01:41 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys 2014-01-15 13:27 . 2013-11-27 01:41 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys 2014-01-15 13:27 . 2013-11-27 01:41 7808 ----a-w- c:\windows\system32\drivers\usbd.sys 2014-01-15 13:27 . 2013-11-26 10:32 3156480 ----a-w- c:\windows\system32\win32k.sys 2014-01-15 13:27 . 2013-11-26 11:40 376768 ----a-w- c:\windows\system32\drivers\netio.sys . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-02-05 19:32 . 2012-05-29 19:49 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2014-02-05 19:32 . 2012-05-29 19:49 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2014-01-31 14:32 . 2014-01-13 17:52 80184 ----a-w- c:\windows\system32\drivers\aswstm.sys 2014-01-31 14:32 . 2011-07-21 07:15 1038072 ----a-w- c:\windows\system32\drivers\aswSnx.sys 2014-01-31 14:32 . 2011-07-21 07:15 421704 ----a-w- c:\windows\system32\drivers\aswSP.sys 2014-01-31 14:32 . 2011-07-21 07:15 78648 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys 2014-01-31 14:32 . 2011-07-21 07:15 334136 ----a-w- c:\windows\system32\aswBoot.exe 2014-01-31 14:32 . 2011-07-21 07:14 43152 ----a-w- c:\windows\avastSS.scr 2014-01-31 14:32 . 2013-03-21 12:53 440672 ----a-w- c:\windows\system32\drivers\aswNdisFlt.sys 2014-01-16 15:22 . 2011-01-29 16:10 86054176 ----a-w- c:\windows\system32\MRT.exe 2014-01-16 08:59 . 2012-07-13 17:03 270496 ------w- c:\windows\system32\MpSigStub.exe 2014-01-13 17:51 . 2013-03-21 12:53 207904 ----a-w- c:\windows\system32\drivers\aswVmm.sys 2013-11-23 18:26 . 2013-12-12 12:15 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll 2013-11-23 17:47 . 2013-12-12 12:15 465920 ----a-w- c:\windows\system32\WMPhoto.dll 2010-01-26 22:11 . 2011-01-23 10:01 444283 ----a-w- c:\program files (x86)\Common Files\WinPcapNmap.exe . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks] "{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}"= "c:\program files (x86)\IncrediMail_MediaBar_2\tbIncr.dll" [2010-09-12 3863136] "{b106b661-3e1b-4015-af5c-195e909f35c6}"= "c:\program files (x86)\NCH_DE\tbNCH_.dll" [2010-12-09 3911776] . [HKEY_CLASSES_ROOT\clsid\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}] . [HKEY_CLASSES_ROOT\clsid\{b106b661-3e1b-4015-af5c-195e909f35c6}] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{1F4F33F5-C394-63B9-6E09-59C72C1BBD82}] 2014-01-31 15:03 423424 ----a-w- c:\programdata\EXEcheckker\wSjqqm.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}] 2010-09-12 14:02 3863136 ----a-w- c:\program files (x86)\ConduitEngine\ConduitEngine.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{9E180093-CF8E-58CF-D3C9-396A9DEB930E}] 2014-01-29 19:27 427008 ----a-w- c:\programdata\shoppnnDroop\rrVS8cpa8.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{b106b661-3e1b-4015-af5c-195e909f35c6}] 2010-12-09 11:51 3911776 ----a-w- c:\program files (x86)\NCH_DE\tbNCH_.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}] 2010-02-04 14:50 1197448 ----a-w- c:\program files (x86)\Ask.com\GenericAskToolbar.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}] 2010-09-12 14:02 3863136 ----a-w- c:\program files (x86)\IncrediMail_MediaBar_2\tbIncr.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{EB54F8FF-CEF4-7E60-4CB8-91E2782EECB9}] 2014-01-29 19:28 425984 ----a-w- c:\programdata\ApPtoU\LhPSOD.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar] "{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}"= "c:\program files (x86)\IncrediMail_MediaBar_2\tbIncr.dll" [2010-09-12 3863136] "{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files (x86)\ConduitEngine\ConduitEngine.dll" [2010-09-12 3863136] "{b106b661-3e1b-4015-af5c-195e909f35c6}"= "c:\program files (x86)\NCH_DE\tbNCH_.dll" [2010-12-09 3911776] "{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2010-02-04 1197448] . [HKEY_CLASSES_ROOT\clsid\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}] . [HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}] . [HKEY_CLASSES_ROOT\clsid\{b106b661-3e1b-4015-af5c-195e909f35c6}] . [HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1] [HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}] [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd] . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1] @="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}" [HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}] 2013-05-29 09:28 220632 ----a-w- c:\users\Marco\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2] @="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}" [HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}] 2013-05-29 09:28 220632 ----a-w- c:\users\Marco\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3] @="{BBACC218-34EA-4666-9D7A-C78F2274A524}" [HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}] 2013-05-29 09:28 220632 ----a-w- c:\users\Marco\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 131248 ----a-w- c:\users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 131248 ----a-w- c:\users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 131248 ----a-w- c:\users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2010-05-27 02:40 120176 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "phonostarTimer"="c:\program files (x86)\phonostar-Player\phonostarTimer.exe" [2011-06-20 40960] "ICQ"="c:\users\Marco\AppData\Roaming\ICQM\icq.exe" [2014-01-08 33664344] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584] "Speech Recognition"="c:\windows\Speech\Common\sapisvr.exe" [2009-07-14 44544] "DS3 Tool"="c:\program files\MotioninJoy\ds3\DS3_Tool.exe" [2010-10-02 92672] "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-11-14 20584608] "F8D9AE2CB9E5983DE40F824224AE867E4C19679F._service_run"="c:\program files (x86)\Google\Chrome\Application\chrome.exe" [2014-01-23 866584] "GoogleDriveSync"="c:\program files (x86)\Google\Drive\googledrivesync.exe" [2013-12-06 20203904] "ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2013-04-05 59720] "iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-04-05 59720] "MusicManager"="c:\users\Marco\AppData\Local\Programs\Google\MusicManager\MusicManager.exe" [2013-11-12 7380992] "LiveSupport"="c:\program files (x86)\LiveSupport\LiveSupport.exe" [2013-11-07 658944] "PegtopPStart"="c:\program files (x86)\Pegtop\PStart\PStart.exe" [2013-12-14 786952] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-04-13 284696] "SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2010-05-27 337264] "EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2010-03-11 201584] "EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2010-03-11 407920] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696] "BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2010-06-28 265984] "LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-08-10 975952] "ArcSoft Connection Service"="c:\program files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424] "APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904] "Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe" [2013-12-21 3478392] "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888] "PDFPrint"="c:\program files (x86)\PDF24\pdf24.exe" [2013-07-22 162856] "AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-01-31 3767096] "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-11-01 152392] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336] . c:\users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\Marco\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-1-3 30714328] . c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\ Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2013-7-20 1207312] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) "AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux2"=wdmaud.drv . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS] @="" . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files (x86)\LogMeIn\x64\RaInfo.sys;c:\program files (x86)\LogMeIn\x64\RaInfo.sys [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys;c:\windows\SYSNATIVE\drivers\avmeject.sys [x] R3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe [x] R3 FWLANUSB;AVM FRITZ!WLAN;c:\windows\system32\DRIVERS\fwlanusb.sys;c:\windows\SYSNATIVE\DRIVERS\fwlanusb.sys [x] R3 GigasetGenericUSB_x64;GigasetGenericUSB_x64;c:\windows\system32\DRIVERS\GigasetGenericUSB_x64.sys;c:\windows\SYSNATIVE\DRIVERS\GigasetGenericUSB_x64.sys [x] R3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;c:\windows\system32\DRIVERS\LEqdUsb.Sys;c:\windows\SYSNATIVE\DRIVERS\LEqdUsb.Sys [x] R3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;c:\windows\system32\DRIVERS\LHidEqd.Sys;c:\windows\SYSNATIVE\DRIVERS\LHidEqd.Sys [x] R3 libusb0;LibUsb-Win32 - Kernel Driver, Version 0.1.10.1;c:\windows\system32\drivers\libusb0.sys;c:\windows\SYSNATIVE\drivers\libusb0.sys [x] R3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x] R3 LVUVC64;Logitech Webcam 200(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x] R3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;c:\windows\system32\DRIVERS\MijXfilt.sys;c:\windows\SYSNATIVE\DRIVERS\MijXfilt.sys [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x] R3 RTL8192cu;Realtek RTL8192CU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192cu.sys;c:\windows\SYSNATIVE\DRIVERS\RTL8192cu.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TurboBoost;TurboBoost;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x] R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x] R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] R3 WsAudio_Device;WsAudio_Device;c:\windows\system32\drivers\VirtualAudio.sys;c:\windows\SYSNATIVE\drivers\VirtualAudio.sys [x] R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\drivers\WSDScan.sys;c:\windows\SYSNATIVE\drivers\WSDScan.sys [x] S0 aswRvrt;avast! Revert; [x] S0 aswVmm;avast! VM Monitor; [x] S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x] S1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys;c:\windows\SYSNATIVE\drivers\aswKbd.sys [x] S1 aswNdisFlt;Avast! Firewall Driver;c:\windows\system32\DRIVERS\aswNdisFlt.sys;c:\windows\SYSNATIVE\DRIVERS\aswNdisFlt.sys [x] S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x] S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x] S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x] S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x] S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x] S2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2010/11/05 23:01];c:\program files (x86)\CyberLink\PowerDVD9\000.fcl;c:\program files (x86)\CyberLink\PowerDVD9\000.fcl [x] S2 70e6ca8c;Optimizer Pro Crash Monitor;c:\windows\system32\rundll32.exe;c:\windows\SYSNATIVE\rundll32.exe [x] S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x] S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x] S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe;c:\program files\AVAST Software\Avast\afwServ.exe [x] S2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.exe [x] S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x] S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x] S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [x] S2 FreemakeVideoCapture;FreemakeVideoCapture;c:\program files (x86)\Freemake\CaptureLib\CaptureLibService.exe;c:\program files (x86)\Freemake\CaptureLib\CaptureLibService.exe [x] S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x] S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x] S2 Megatech-Software-Protection;Megatech Software Protection;c:\program files (x86)\Megatech\MProtect\MPServ.EXE;c:\program files (x86)\Megatech\MProtect\MPServ.EXE [x] S2 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [x] S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x] S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [x] S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x] S2 SProtection;SProtection;c:\program files (x86)\Common Files\Umbrella\Umbrella.exe;c:\program files (x86)\Common Files\Umbrella\Umbrella.exe [x] S2 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x] S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x] S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x] S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x] S2 WajamUpdaterV3;WajamUpdaterV3;c:\program files (x86)\Wajam\Updater\WajamUpdaterV3.exe;c:\program files (x86)\Wajam\Updater\WajamUpdaterV3.exe [x] S2 WinkHandler;WinkHandler;c:\program files (x86)\Iminent\WinkHandler.exe;c:\program files (x86)\Iminent\WinkHandler.exe [x] S3 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x] S3 avmaudio;AVM Audio;c:\windows\system32\DRIVERS\avmaudio.sys;c:\windows\SYSNATIVE\DRIVERS\avmaudio.sys [x] S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x] S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x] S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x] S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x] S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x] S3 MonitorFunction;Driver for Monitor;c:\windows\system32\DRIVERS\TVMonitor.sys;c:\windows\SYSNATIVE\DRIVERS\TVMonitor.sys [x] S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x] S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x] S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x] S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x] S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x] S3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys;c:\windows\SYSNATIVE\DRIVERS\teamviewervpn.sys [x] . . --- Andere Dienste/Treiber im Speicher --- . *NewlyCreated* - WS2IFSL . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2014-01-28 19:44 1211672 ----a-w- c:\program files (x86)\Google\Chrome\Application\32.0.1700.102\Installer\chrmstp.exe . Inhalt des "geplante Tasks" Ordners . 2014-02-13 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-29 19:32] . 2014-02-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-04 18:36] . 2014-02-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-04 18:36] . 2014-02-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002Core.job - c:\users\Marco\AppData\Local\Google\Update\GoogleUpdate.exe [2013-08-22 10:24] . 2014-02-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002UA.job - c:\users\Marco\AppData\Local\Google\Update\GoogleUpdate.exe [2013-08-22 10:24] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1F4F33F5-C394-63B9-6E09-59C72C1BBD82}] 2014-01-31 15:03 471552 ----a-w- c:\programdata\EXEcheckker\wSjqqm.x64.dll . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9E180093-CF8E-58CF-D3C9-396A9DEB930E}] 2014-01-29 19:27 476672 ----a-w- c:\programdata\shoppnnDroop\rrVS8cpa8.x64.dll . [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EB54F8FF-CEF4-7E60-4CB8-91E2782EECB9}] 2014-01-29 19:28 475136 ----a-w- c:\programdata\ApPtoU\LhPSOD.x64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2014-01-31 14:32 287280 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP] @="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}" [HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}] 2010-05-27 02:42 137584 ----a-w- c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}] 2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}" . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}] 2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}" . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}] 2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}] 2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}] 2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay] @="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}" [HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}] 2013-12-06 14:47 778704 ----a-w- c:\program files (x86)\Google\Drive\googledrivesync64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "mwlDaemon"="c:\program files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe" [2010-05-27 349552] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-06-22 10920552] "Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2010-06-11 861216] "CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2010-07-26 2782096] "AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-09-20 444904] "Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2012-09-20 1832760] "Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 130576] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-01-10 167704] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-01-10 392984] "Persistence"="c:\windows\system32\igfxpers.exe" [2012-01-10 417560] "AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\btvstack.exe" [2012-10-15 1023104] "AthBtTray"="c:\program files (x86)\Bluetooth Suite\athbttray.exe" [2012-10-15 801920] . [hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler] "{1984DD45-52CF-49cd-AB77-18F378FEA264}"= "c:\program files (x86)\Stardock\Fences\FencesMenu64.dll" [2010-06-22 253288] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"=c:\windows\System32\nvinitx.dll . ------- Zusätzlicher Suchlauf ------- . uLocal Page = c:\windows\system32\blank.htm uStart Page = hxxp://search.conduit.com?SearchSource=10&CUI=UN94176709418576159&ctid=CT3284351 mLocal Page = c:\windows\SysWOW64\blank.htm uInternet Settings,ProxyOverride = *.local mSearchAssistant = IE: An vorhandene PDF-Datei anfügen - c:\program files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppend.html IE: Download with Xilisoft Online Video Converter - c:\program files (x86)\Xilisoft\Online Video Converter\upod_link.HTM IE: In Adobe PDF konvertieren - c:\program files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECapture.html IE: Linkziel an vorhandene PDF-Datei anhängen - c:\program files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html IE: Linkziel in Adobe PDF konvertieren - c:\program files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html IE: {{1F958B09-3312-7f0e-9723-4C1324C57B20} - c:\program files (x86)\Internet Radio\Radio.exe TCP: DhcpNameServer = 192.168.178.1 FF - ProfilePath - c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\ FF - prefs.js: browser.startup.homepage - hxxp://intragart.selfhost.eu/ . - - - - Entfernte verwaiste Registrierungseinträge - - - - . URLSearchHooks-{84FF7BD6-B47F-46F8-9130-01B2696B36CB} - (no file) BHO-{64182481-4F71-486b-A045-B233BD0DA8FC} - c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\bh\facemoods.dll BHO-{84FF7BD6-B47F-46F8-9130-01B2696B36CB} - (no file) Toolbar-Locked - (no file) Toolbar-{DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodsTlbr.dll Wow6432Node-HKCU-Run-Gadwin PrintScreen - c:\program files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe Wow6432Node-HKCU-Run-MobileDocuments - c:\program files (x86)\Common Files\Apple\Internet Services\ubd.exe Wow6432Node-HKCU-Run-StoppUhr - (no file) Wow6432Node-HKLM-Run-facemoods - c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodssrv.exe Wow6432Node-HKLM-Run-TaskTray - (no file) Wow6432Node-HKLM-Run-Aimersoft Helper Compact.exe - c:\program files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe Wow6432Node-HKLM-Run-BrowserPlugInHelper - c:\program files (x86)\Aimersoft\Video Converter Ultimate\BrowserPlugInHelper.exe Wow6432Node-HKLM-Run-<NO NAME> - (no file) Wow6432Node-HKLM-Run-Iminent - c:\program files (x86)\Iminent\Iminent.exe Wow6432Node-HKLM-Run-IminentMessenger - c:\program files (x86)\Iminent\Iminent.Messengers.exe Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe c:\users\Schule\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe c:\users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe c:\users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Socialbox.lnk - c:\program files (x86)\Socialbox\Socialbox.exe BHO-{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - c:\program files (x86)\Hotspot Shield\HssIE\HssIE_64.dll Toolbar-Locked - (no file) WebBrowser-{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} - (no file) WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file) WebBrowser-{B106B661-3E1B-4015-AF5C-195E909F35C6} - (no file) ShellIconOverlayIdentifiers-{F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file) ShellIconOverlayIdentifiers-{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file) ShellIconOverlayIdentifiers-{BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file) ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file) ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file) ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file) ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - (no file) HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe HKLM-Run-LogMeIn GUI - c:\program files (x86)\LogMeIn\x64\LogMeInSystray.exe AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe AddRemove-Audacity 1.3 Beta (Unicode)_is1 - c:\program files (x86)\Audacity 1.3 Beta (Unicode)\unins000.exe AddRemove-AutocompletePro3_is1 - c:\program files (x86)\AutocompletePro\unins000.exe AddRemove-DebugMode Wink - c:\program files (x86)\DebugMode\Wink\uninst.exe AddRemove-facemoods - c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\uninstall.exe AddRemove-Gadwin PrintScreen - c:\program files (x86)\Gadwin Systems\PrintScreen\Uninstall.exe AddRemove-PMG_is1 - c:\program files (x86)\PMG\unins000.exe AddRemove-Shockwave - c:\windows\System32\Macromed\SHOCKW~2\UNWISE.EXE AddRemove-Super Screen Recorder_is1 - c:\program files (x86)\Zeallsoft\Super Screen Recorder\unins000.exe AddRemove-VSO DivxToDVD_is1 - c:\program files (x86)\vso\DivxToDVD\unins000.exe AddRemove-WavePad - c:\program files (x86)\NCH Swift Sound\WavePad\uninst.exe AddRemove-xHamster Video Downloader_is1 - e:\secret\xHamster Video Downloader\unins000.exe AddRemove-{01B91C29-337A-1FFD-7CFC-473451D2F861} - c:\programdata\ApPtoU\LhPSOD.exe AddRemove-{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693} - c:\programdata\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\uninstall.exe AddRemove-{275BD947-F0EF-4B3E-B393-90781665D0F4}_is1 - c:\program files (x86)\Artweaver Plus 1.0\unins000.exe AddRemove-{7E7FAE3D-3358-D280-8DBF-E8E2D94326D1} - c:\programdata\shoppnnDroop\rrVS8cpa8.exe AddRemove-{86593088-CB6B-8BD7-2277-397C45F99E2D} - c:\programdata\EXEcheckker\wSjqqm.exe AddRemove-{E63E34A7-E552-412B-9E40-FD6FC5227ABA}_is1 - c:\program files (x86)\Uniblue\RegistryBooster\unins000.exe . . . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{B154377D-700F-42cc-9474-23858FBDF4BD}] "ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD9\000.fcl" . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="ChromeHTML" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID] @DACL=(02 0000) . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}] @DACL=(02 0000) @="Dropbox Autoplay COM Server" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}] @DACL=(02 0000) @="SyncingOverlayHandler Class" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}] @DACL=(02 0000) @="ErrorOverlayHandler Class" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.0_03" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.0_04" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.0_05" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_01" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_01" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_02" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_02" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_03" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_03" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_04" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_04" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_05" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_05" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_06" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_06" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_07" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_07" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_08" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_08" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_09" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_09" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_10" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_10" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_11" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_11" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_12" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_12" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_13" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_13" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_14" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_14" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_15" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_15" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_16" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_16" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_17" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_17" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_18" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_18" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_19" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_19" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_20" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_20" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_21" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_21" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0_01" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0_01" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0_02" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0_02" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0_03" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0_03" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0_04" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0_04" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_01" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_01" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_02" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_02" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_03" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_03" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_04" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_04" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_05" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_05" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_06" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_06" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_07" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_07" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_01" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_01" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_02" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_02" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_03" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_03" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_04" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_04" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_05" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_05" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_06" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_06" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_07" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_07" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_08" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_08" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_09" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_09" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_10" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_10" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_11" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_11" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_12" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_12" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_13" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_13" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_14" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_14" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_15" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_15" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_16" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_16" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_17" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_17" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_18" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_18" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_19" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_19" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_20" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_20" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_21" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_21" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_22" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_22" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_23" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_23" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_24" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_24" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_25" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_25" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_26" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_26" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_27" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_27" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_28" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_28" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_29" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_29" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_30" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_30" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_31" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_31" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_32" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_32" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_33" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_33" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_34" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_34" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_35" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_35" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_36" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_36" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_37" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_37" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_38" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_38" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_39" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_39" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_40" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_40" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_41" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_41" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_42" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_42" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_43" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_43" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_01" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_01" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_01" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_02" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_02" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_02" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_03" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_03" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_03" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_04" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_04" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_04" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_05" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_05" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_05" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_06" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_06" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_06" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_07" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_07" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_07" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_08" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_08" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_08" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_09" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_09" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_09" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_10" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_10" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_10" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_11" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_11" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_11" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_12" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_12" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_12" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_13" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_13" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_13" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_14" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_14" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_14" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_15" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_15" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_15" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_16" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_16" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_16" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_17" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_17" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_17" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_18" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_18" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_18" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_19" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_19" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_19" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_20" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_20" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_20" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_21" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_21" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_21" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_22" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_22" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_22" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_23" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_23" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_23" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_24" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_24" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_24" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_25" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_25" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_25" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_26" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_26" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_26" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_27" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_27" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_27" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_28" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_28" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_28" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_29" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_29" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_29" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_30" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_30" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_30" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_31" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_31" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_31" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_32" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_32" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_32" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_33" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_33" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_33" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_34" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_34" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_34" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_35" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_35" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_35" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_36" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_36" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_36" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_37" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_37" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_37" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_38" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_38" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_38" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_39" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_39" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_39" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_40" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_40" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_40" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_41" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_41" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_41" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_42" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_42" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_42" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_43" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_43" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_43" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_44" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_44" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_44" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_45" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_45" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_45" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_46" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_46" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_46" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_47" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_47" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_47" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_48" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_48" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_48" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_49" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_49" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_49" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_50" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_50" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_50" . |
13.02.2014, 17:42 | #6 |
| 100% Pysikalischer Speicher durch svchost.exe Hier der zweite Teil, Code war zu lang Code:
ATTFilter [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_51" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_51" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_51" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_52" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_52" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_52" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_53" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_53" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_53" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_54" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_54" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_54" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_55" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_55" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_55" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_56" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_56" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_56" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_57" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_57" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_57" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_58" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_58" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_58" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_59" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_59" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_59" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_60" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_60" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_60" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_61" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_61" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_61" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_01" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_01" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_01" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_02" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_02" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_02" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_03" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_03" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_03" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_04" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_04" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_04" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_05" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_05" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_05" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_06" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_06" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_06" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_07" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_07" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_07" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_08" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_08" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_08" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_09" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_09" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_09" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_10" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_10" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_10" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_11" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_11" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_11" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_12" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_12" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_12" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_13" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_13" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_13" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_14" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_14" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_14" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_15" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_15" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_15" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_16" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_16" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_16" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_17" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_17" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_17" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_18" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_18" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_18" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_19" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_19" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_19" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_20" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_20" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_20" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_21" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_21" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_21" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_22" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_22" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_22" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_23" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_23" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_23" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_24" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_24" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_24" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_25" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_25" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_25" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_26" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_26" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_26" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_27" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_27" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_27" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_28" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_28" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_28" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_29" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_29" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_29" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_30" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_30" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_30" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_31" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_31" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_31" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_32" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_32" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_32" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_33" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_33" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_33" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_34" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_34" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_34" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_35" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_35" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_35" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_36" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_36" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_36" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_37" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_37" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_37" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_38" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_38" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_38" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_39" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_39" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_39" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_40" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_40" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_40" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_41" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_41" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_41" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_42" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_42" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_42" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_43" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_43" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_43" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_44" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_44" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_44" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_45" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_45" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_45" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_46" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_46" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_46" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_47" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_47" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_47" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_48" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_48" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_48" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_49" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_49" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_49" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_50" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_50" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_50" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_51" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_51" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_51" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_52" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_52" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_52" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_53" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_53" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_53" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_54" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_54" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_54" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_55" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_55" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_55" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_56" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_56" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_56" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_57" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_57" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_57" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_58" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_58" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_58" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_59" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_59" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_59" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_60" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_60" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_60" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_61" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_61" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_61" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_62" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_62" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_62" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_63" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_63" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_63" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_64" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_64" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_64" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_65" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_65" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_65" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_66" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_66" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_66" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_67" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_67" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_67" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_68" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_68" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_68" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_69" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_69" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_69" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_70" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_70" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_70" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_71" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_71" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_71" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_01" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_01" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_01" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_02" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_02" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_02" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_03" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_03" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_03" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_04" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_04" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_04" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_05" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_05" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_05" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_06" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_06" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_06" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_07" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_07" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_07" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_08" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_08" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_08" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_09" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_09" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_09" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_10" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_10" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_10" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_11" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_11" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_11" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_12" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_12" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_12" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_13" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_13" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_13" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_14" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_14" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_14" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_15" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_15" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_15" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_16" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_16" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_16" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_17" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_17" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_17" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_18" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_18" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_18" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_19" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_19" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_19" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_20" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_20" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_20" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_21" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_21" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_21" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_22" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_22" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_22" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_23" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_23" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_23" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_24" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_24" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_24" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_25" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_25" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_25" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_26" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_26" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_26" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_27" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_27" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_27" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_28" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_28" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_28" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_29" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_29" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_29" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_30" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_30" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_30" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_31" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_31" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_31" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_32" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_32" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_32" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_33" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_33" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_33" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_34" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_34" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_34" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_35" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_35" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_35" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_36" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_36" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_36" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_37" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_37" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_37" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_38" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_38" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_38" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_39" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_39" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_39" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_40" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_40" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_40" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_41" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_41" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_41" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_42" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_42" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_42" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_43" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_43" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_43" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_44" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_44" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_44" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_45" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_45" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_45" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_46" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_46" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_46" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_47" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_47" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_47" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_48" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_48" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_48" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_49" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_49" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_49" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_50" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_50" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_50" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_51" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_51" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_51" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}] @DACL=(02 0000) @="Java Plug-in 1.3.0_02" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}] @DACL=(02 0000) @="UpToDateOverlayHandler Class" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}] @DACL=(02 0000) @="SyncFileInformationProvider Class" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] @DACL=(02 0000) @="DropboxExt" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] @DACL=(02 0000) @="DropboxExt" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] @DACL=(02 0000) @="DropboxExt" . [HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}] @DACL=(02 0000) @="DropboxExt" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Weitere laufende Prozesse ------------------------ . c:\program files\AVAST Software\Avast\AvastSvc.exe c:\windows\SysWOW64\rundll32.exe c:\program files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe c:\users\Marco\AppData\Local\FilesFrog Update Checker\update_checker.exe . ************************************************************************** . Zeit der Fertigstellung: 2014-02-13 17:18:43 - PC wurde neu gestartet ComboFix-quarantined-files.txt 2014-02-13 16:18 . Vor Suchlauf: 18 Verzeichnis(se), 154.007.314.432 Bytes frei Nach Suchlauf: 26 Verzeichnis(se), 164.352.839.680 Bytes frei . - - End Of File - - 55A5AC42538C7E46F691EF5CC6603FD3 |
14.02.2014, 15:47 | #7 |
/// the machine /// TB-Ausbilder | 100% Pysikalischer Speicher durch svchost.exe Da is noch Arbeit Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
14.02.2014, 21:16 | #8 |
| 100% Pysikalischer Speicher durch svchost.exe So, hier die log von Malwarebytes Anti-Malware |
14.02.2014, 22:04 | #9 |
| 100% Pysikalischer Speicher durch svchost.exe Teil 2 |
14.02.2014, 22:43 | #10 |
| 100% Pysikalischer Speicher durch svchost.exe Hier die JRT.txt Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.1 (02.04.2014:1) OS: Windows 7 Home Premium x64 Ran by Marco on 14.02.2014 at 22:09:01,85 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services Successfully stopped: [Service] 70e6ca8c Successfully deleted: [Service] 70e6ca8c ~~~ Registry Values Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\livesupport ~~~ Registry Keys Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\livesupport Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1767309948-3694062471-1967485482-1002\Software\sweetim Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1767309948-3694062471-1967485482-1002\Software\wajam Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9 Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\livesupport_is1 Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{16C8C46E-C811-4977-BF0A-B5CC1FA78D95} Successfully deleted: [Registry Key] "hkey_current_user\software\microsoft\internet explorer\low rights\elevationpolicy\{a5aa24ea-11b8-4113-95ae-9ed71deaf12a}" ~~~ Files Successfully deleted: [File] C:\Windows\syswow64\sho6128.tmp ~~~ Folders Failed to delete: [Folder] "C:\ProgramData\boost_interprocess" Successfully deleted: [Folder] "C:\ProgramData\{b49a644a-1076-4a3d-b124-daa7862f2318}" Successfully deleted: [Folder] "C:\Users\Marco\AppData\Roaming\getrighttogo" Successfully deleted: [Folder] "C:\Program Files (x86)\livesupport" Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\livesupport" Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue" Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin" Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{00328E27-ECE5-4AAE-B65F-BFD94FB8B7FC} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{0077C27F-89A8-4981-B031-25E66D5306DD} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{00E34057-3C3D-4901-995A-AB939DB341B7} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{016FEEC6-F431-47D0-A4A3-298499E27F16} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{02FCBF57-67EA-4F58-89C0-8FA235DD290B} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{0530FB47-A83D-461E-8C16-70D6D1CDDCC1} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{09D00057-2538-4E30-A788-135F0DC0EAB7} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{0A41D001-95CA-4FDF-A7EB-561102168325} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{0B603D1F-30B5-4336-BFC0-A80E262965F3} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{0BDF5B31-F11D-4523-9029-3C992C91A1A6} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{0D16E4D8-CD96-409B-A485-A60EE0707074} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{0DBA3181-9506-40EE-B2C6-A2206CF8DA2F} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{0E007492-A341-408B-992E-73995E56993C} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{0E765305-6317-40D5-BB00-C288EF21C62A} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{1601135D-7F7B-477C-AB42-E6F2F490B9C2} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{16C01B70-1A7D-4DB7-96E3-AFB0F41DCA94} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{17A64D13-A2E5-46D2-8652-4FCB53811F3D} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{17F8F42B-F621-4474-9A89-9713031FCAC8} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{1D09A860-1492-4E78-A8E0-5929CF0F4E24} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{1EC135B6-7646-4B7E-81C0-A60BB65D2C3C} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{210145AB-4CC4-4CB3-92B8-6DDCF3F8E226} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{23E69280-1640-4816-A055-7B5D470E3ADA} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{258CDC8D-24C7-48A2-BF6C-A08E302365AB} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{26E1685C-BDFE-47D0-BEF7-87CDCA1778F1} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{280F3935-0EBD-4143-B43E-A1D74FE6F168} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{28275E8C-F723-4805-AD8A-BFD8198F45CB} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{285B6CB9-5999-4ECA-B9DC-D987F7322832} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{28B06BB9-6543-4E76-97BD-07BA1B931777} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{28F9B051-627B-45A0-9891-8A32D5859099} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{2A820E05-00CE-4A59-9519-5AF70AEB2954} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{2B67AA50-FBCB-4CDA-B8BD-63ACD13A27C7} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{2B7F97B0-9ED3-49B0-81D9-F90166664825} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{2BF14A1A-8A78-4D5D-8330-AB1725C62F39} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{2C979978-E695-480E-A2BA-EF356E4C5A28} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{2D0751F1-4E67-4213-BF87-09F829AA15C9} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{2FC8BA9E-124D-4D12-9868-1C327B84262F} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{2FDA0D96-6389-4C5D-A275-A65516CA04F5} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{305F4F69-6B49-46E2-B391-B896AF5D7ED8} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{30E935D5-F2A1-46E2-BDC8-CB4D53470AFF} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{3168B0C1-5DC4-466B-8524-8BE5B1C67D9F} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{31843E36-03FB-4F0E-BB13-42774CBDF428} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{31D83F41-786A-4D41-87BF-EF9C4DECAE7D} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{32493AC5-2C54-4AD6-B3D2-3DE24461CEF7} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{3252FF8D-00D9-4524-B3E0-DF263E744482} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{32C4E05F-4115-4862-B48A-E0F698C9A0CC} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{338E1398-8CFB-4592-8547-0B1B896CB616} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{39E6C854-45D4-461B-A041-7AB6D52EAD79} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{3C42530F-137F-4B39-A3F9-D68B33682FB3} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{3DE068D2-0105-48D6-8FDF-78E3267F37E4} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{3F57473D-4B5D-4534-95FC-A116C748A965} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{41A3088C-1A56-455D-A5CA-4EECF3417F81} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{42B9F7DA-788B-42E7-A890-7D0A9DE975C9} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{42FFD388-6DDD-4226-9E66-46A079E3FEE5} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{457B415D-65F1-4CF6-856E-70A4D6E682E8} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{4A35FA95-2557-42A5-9993-AA78C24BD90D} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{4B55F971-CD43-4820-A03F-BF20F337E73C} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{4B8A1108-6AA6-46FE-805F-23179D225307} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{4C8C4FD5-90AC-4964-B222-0288100C0237} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{4E054ED2-064D-4B6D-9791-31C35C88C0AE} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{4E3B7D8A-4AFC-489E-8C91-F62440641DBB} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{4E723639-347C-434E-AA50-87C170B8041B} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{4F725FDD-3B33-465D-BB4A-85EC0731091C} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{500EC612-B8F8-4084-9C05-810C930AD9CA} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{5031C446-710D-42FE-AEFD-73C71995847F} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{51385252-05B3-470C-89D6-7D1EB38C9DA2} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{51D7F46C-7152-4457-BCF7-EC55CD9747D1} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{54FBC402-7926-49F3-ACBC-E60AE482E0BC} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{55667ADA-5A3F-4482-8524-1D5F0A18C9E1} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{56FFEC00-3948-4970-972E-D2463BB9287D} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{587BC827-1134-47D8-97BB-929CFF719ADD} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{5BE92689-0DDA-45E9-BA4D-CC7939729903} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{5C2B7928-395F-4DCB-9F01-E36E0EA6E91A} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{5CAF6CC5-47A7-4FF5-A2FB-67E1ABB298CF} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{5D00FB63-3A1E-46B6-AC65-34C5AF4979ED} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{5F624BB3-9D78-424E-9C8C-8F330934693C} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{5FAD0AA9-9C41-4DB7-B51F-F0674C97FB80} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{61A16B8F-6538-4D8E-B760-9BA31B67B7C4} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6227A473-8FB4-4983-ACDA-C00D61356FA7} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{626851C7-84AE-41B2-8A60-0EE30C82A040} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{64CDFAD5-778C-4DD9-AAF7-EE1005A1412D} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6731DE32-6829-4A38-9EE1-B9E56C9D4E84} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{678E1AF5-1631-4176-A39C-1C2199A3A191} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6857FCBC-12C4-4CCD-8F51-85EAC2807F78} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6898193E-FDD6-433E-BBAB-E0CD7F67BF9F} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{68C694CC-ACA2-4D0E-844A-DF75E7072C59} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{69684DFD-1D3D-4ACC-9609-CB66D29A86A6} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6A0D2CD5-D228-44EE-9AF7-4D11A53A3934} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6B7321F2-37D6-4383-94F2-43C50EE56A74} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6CC3E1DF-0FE8-43F3-8534-D13078994164} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6D87F75E-7956-4E8C-A988-FD71AD08F6CD} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6D9A1DE3-008B-4B27-BB60-80258236C621} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6DDB77C8-5620-4383-A74A-BBB3C11305F4} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6E5E42A1-864C-42BE-B43D-32CF3E65F50D} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{70E1DC40-67D3-4BD6-AA28-2B9D2768FAA9} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{71ACE107-850C-4BA0-AA67-950297FBAD76} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{7464DCEA-160E-4165-B91B-CCC681C06055} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{76727A40-93AA-464E-958C-04617101C347} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{77FB4586-C81F-456F-B8E1-C379F689FDB7} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{785F34EC-7391-4B3B-A148-63B52BCEF23D} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{78C6F625-F628-471E-A9F8-5904AD9FA3B9} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{78C95CEB-A536-48BC-881A-B182DFEB1361} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{793401E9-2297-48EF-8E3E-61798B23B3F1} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{7A125F1F-942C-4602-9F83-C244BA37AE06} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{7AB9F808-990A-4308-8CC8-5F749F6A4541} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{7B2BAF0E-3BDE-4BE5-9836-284A5DFB393A} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{7C7F84BD-86EF-4FC2-88BF-9962E8416D8C} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{7CB2EE2B-50FE-44FE-B72A-5327EFFBB81C} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{7F71E67C-9D41-4B39-A16F-02B04937BDC1} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{7F87997F-C71B-4061-B84B-1103BCEC8F1A} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{80AFF7BA-CE56-4F88-848C-033A0969F1ED} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{8128D934-9E3D-4B85-8B9D-26D088860A32} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{8188300C-AB7D-4F92-A1D8-B3A9821C45BF} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{819479B4-2AA2-4539-9A42-1695D974DF2D} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{82B4507C-06B0-4942-8A5B-81A6ACEFD46D} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{82C3946D-9496-4917-8F3F-A558F9F6A273} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{83C9BA1A-09DD-4654-AD74-0F163B95C53D} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{844F31DC-B6F8-45F5-9E87-4CFA4A5ABD0B} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{86674A0D-C8BC-4614-9822-978C52303644} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{89D3EAB9-8D4F-4EF5-8753-F82E4113099F} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{8CF8948A-CA57-4EA6-8A53-9DB6CAB42F8F} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{8E934D06-3FC3-4EF3-97D7-9B41473093C0} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{8ED3492F-401E-4DC9-92F9-BA0D56D4220B} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{8EF59A11-7DE3-4BED-9328-190BCDA98D54} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{8F88AA1B-72AB-4880-8B96-69588D36ADFB} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{8F8ADA8C-36A4-4B40-98CB-B15610CC1A3D} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{929B966C-68D9-4A87-9799-A7D1F3B918AA} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{93325E3C-9AC6-4E43-AF8A-27F686AC7556} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{9441D59B-3316-4623-A602-78837A2B7424} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{9559BF77-E9B5-4FE3-B280-676F1D9D9CFC} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{9627BF43-E6DF-444A-8ECE-1D53F08FD561} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{963BAF84-7226-4D20-B39E-4D40C7B19FD7} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{9714B22C-1163-4199-BF04-0FCB7DD02EC0} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{979251E9-36BF-4934-BDAE-B583C1F52EDF} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{989537C0-F487-4EF6-B6C6-E3F94091F1ED} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{98BA9408-E405-4740-9733-2544391D394E} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{992EF126-8A8E-4FC6-BBDD-4C1DF4BF4D70} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{997EC560-684B-4CDC-A634-6D5222F6CBA8} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{99C2A44F-D08E-4D75-94C0-A0972D5C16D8} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{9A2FB952-35BE-4E89-88E6-D2D07A6699CA} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{9A45E190-4DFC-4E72-8046-F744338F32EE} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{9B20677B-D4A1-4423-95F3-783039FD6991} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{9B489879-1F71-4922-935A-DDCB690249DA} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{9F05EE23-6205-4A10-82E9-1077B51EDFD3} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{9F0710F7-4D43-43F8-9DA2-DE5C749F6F0F} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A00DD6EB-4DC4-469F-AC11-0191F85C1C33} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A0BA7B4E-C938-4134-ACA4-183947A23090} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A1223706-99CE-488C-82CD-4B48F4FF31E2} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A1D6AB9E-435A-4778-89E7-7B788E1FC859} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A3104EC8-B1DC-44D0-8263-EFCF2104567E} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A484CC98-F554-440B-82E4-DBC9445125A4} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A5630CA6-AAF1-484D-B52D-84EE6D2B3CE7} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A58F7A35-ED6B-4639-90E2-6B8EBAB39C1E} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A5A0F41E-B272-43DC-9284-9411D988C507} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A680633E-3E54-4F9C-AE9E-FB896B2F7ADC} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A7A67FA3-6AEE-4EBA-B735-0BA5F9B47E01} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A92D1E31-F35F-48E5-AA6E-3E829BD37E55} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A995E36D-248E-4FAE-A595-3AA627D36B00} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{AB771A8A-899B-4063-BE16-DEE36752A3E7} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{AC73D022-CC25-4E36-B18D-A76320B52A7B} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{AC964083-CF4B-4680-9643-0A3711884689} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{AECE176D-1804-48B0-8B13-A33CADBABBFD} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{AF67078C-6A74-49BA-ABF0-FB57B1F72A0C} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{AFCE3000-1561-4DE8-94A1-F9A99BDC8F38} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{AFE8AD2E-2DBF-42AD-A1CE-8FA9768F27D5} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{B1EF0E33-8EE0-4AB0-8173-7B70D1CEF334} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{B240BCF8-76C2-4050-9160-D0DB9D16AB9D} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{B5BE603C-A733-41A0-B19E-5047A0C04069} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{B683A3C4-F1A7-4369-A28E-5A30D5E10D34} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{B73EB436-8F33-4CEF-ACFB-8CB894CFE32E} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{B7DE18F4-99C6-49D8-B10C-A43FB3455576} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{B818D18F-FDBF-45B2-814E-280DFA634EDF} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{B977A847-3AC2-4E7D-8A2A-C6E5D61AE1DE} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{BAE062BB-0CFE-4E21-BA0B-5F91442F29AA} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{BB15B21B-4AC0-49CD-81C8-9A8435169597} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{BB2889BE-CA28-4DCA-834B-853A6E1C307E} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{BB75BFC6-7D0C-47BB-AF87-A7CF995D3A95} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{BC2E97C6-0283-4626-BD48-C5ECC2DE89B4} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{BC3D8162-82A0-48AD-8291-830F893D40E2} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{BDD3F0CB-88A2-4D8B-9E4E-5B2B9F33F416} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{BFE3BFEE-BDD4-40BF-AB76-0FD386733104} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C0EAB9EA-46A2-4E27-B690-451DCDAFD1CA} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C143E832-D6FD-42D9-92E5-4C395D5DC629} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C1540225-E55C-438B-8ED7-83F12B8DE8BB} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C1BB96C0-A935-437E-AD3F-39964A5D7465} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C1D4243C-1824-4A4B-AE6B-5ECA1C440766} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C2254D44-C84D-40B5-A63F-E5E6692C33E3} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C231585A-FFC3-4353-9297-A0D18C14B96D} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C2B25762-B0BF-44ED-B9E2-5A0DA90F9DA7} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C2D180C2-1274-4569-8DC8-F0B7F547C704} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C2F53808-2EBB-422C-920F-3BF2EC15A820} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C3B9091F-DA28-48DA-8A8E-A8C267FA2465} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C5306942-5A15-45C0-9463-8C63E26C90DF} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C597E6E4-0B5D-400A-9E30-A7E4DD2F781A} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{CB233248-6B47-45E7-9A5C-1C8F9E5A3B2C} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{CC6305F4-2CCE-4A65-8F2C-81C4F47E1CF9} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{CD4D9CEA-A7E1-4952-81F9-8027AFD49A3B} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{CF980592-F001-49AB-A16A-73DBFA70E81F} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D0D94EA8-379E-4ED1-8561-FC763A3F8502} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D14C8986-2B8F-4FDA-9430-4AEFA38CF683} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D2915598-ACB3-4BA5-8ED1-848B5D884A13} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D2F2D953-5A0E-4CBA-B1FF-09E569659B0B} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D4C2A928-D892-42C2-B2AE-0A4C32CB53F2} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D537B2BE-24F4-4BAC-8FC2-E95DD6A33E44} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D58488B3-4061-482E-9E23-B51C02A88DDE} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D5E70B8A-D47E-4FDF-9A5F-E556DE6E9EAA} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D697D932-D8DC-48CD-93A2-F2427E9E96CD} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D7DA4206-A8DE-45D9-BC86-BAF0D4FFE2F8} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D849F521-CB61-4A0B-A471-E695351BB861} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D905FFA9-CCE9-4150-B69D-B9117AA2011A} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D96CEC0C-48B9-40DF-97F3-589426F3A0A4} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{DDB6A30F-7C9D-4C5C-880D-131BD49204C6} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{DF7D8F3F-95A1-4B9D-A87E-C1CF4BAC77CD} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E014AA82-8249-4462-A679-AA714331E323} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E0FA2791-F6C3-481E-AC1E-8E3AABD27646} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E2A396C2-8BFC-4BFC-9B5F-2E5E66959D8F} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E3873774-5334-46CE-A87C-FE3DF6889278} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E6667124-F9B5-418A-A23A-1A87EF405304} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E6C5ACC5-71CD-4979-98AF-635E71273B62} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E815692B-6BDE-461A-A984-D4DF250B1633} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E8668F03-764E-4D63-93D5-9C2F0E0299ED} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E885CEC5-896E-44A3-A717-279232E62984} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E8FB9CE6-745A-4239-B0FF-24E3A3229587} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E9052C3A-1E36-4504-919E-3DDCA7ABCFB0} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E9155044-A076-460A-BA45-988CF38E93DB} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{EAD3E008-1C1F-4150-B588-F4CD39C23AE5} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{EB4A4FBD-BC40-4369-9D45-D2E5451FA575} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{EEF386FE-9244-4BA8-975D-C64AAFBAC573} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{EF6F2539-9976-40DE-9198-F8CE0A8E486E} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{F27CB336-2282-4FC5-9576-2B8E17B3FB08} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{F3C3A7F5-888F-4BEE-8078-1AE81529EBB9} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{F6277F86-DEF3-41AC-818E-3A73743A3502} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{F7CDEA14-2981-4978-A49C-821D51634BD4} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{FE16D0A9-1F8F-4830-AEB3-A74D0D519845} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{FEACD7BC-54E0-4CE3-98E9-9E7FD5D4AA4A} Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{FFB8C382-33A3-4B51-BDF7-431B45C76584} ~~~ FireFox Successfully deleted the following from C:\Users\Marco\AppData\Roaming\mozilla\firefox\profiles\3ite4e37.default-1390417290837\prefs.js user_pref("extensions.lwaSsmiWfg.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.index Emptied folder: C:\Users\Marco\AppData\Roaming\mozilla\firefox\profiles\3ite4e37.default-1390417290837\minidumps [10 files] ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 14.02.2014 at 22:18:26,11 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Am anfang trat ein fehler auf (siehe bild) - wiederholen funktionierte nicht aber bei abbrechen lief es weiter, deswegen bin ich nicht näher drauf eingegangen.... ist das schlimm? FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01 Ran by Marco (administrator) on ACER-ASPIRE-574 on 14-02-2014 22:34:15 Running from C:\Users\Marco\Favorites\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe (ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe () C:\Program Files (x86)\Megatech\MProtect\MPServ.EXE (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Intel Corporation) C:\Windows\system32\igfxext.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe () C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Google Inc.) C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\MusicManager.exe (Pegtop Software) C:\Program Files (x86)\Pegtop\PStart\PStart.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Apple Inc.) C:\Program Files (x86)\QuickTime\QTTask.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe () C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe (Microsoft Corporation) c:\program files\windows defender\MpCmdRun.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552 2010-05-27] (Egis Technology Inc.) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10920552 2010-06-22] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1890088 2009-12-10] (Synaptics Incorporated) HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [861216 2010-06-11] (Acer Incorporated) HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2782096 2010-07-26] (CANON INC.) HKLM\...\Run: [LogMeIn GUI] - "C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe" HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated) HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.) HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - C:\Windows\KHALMNPR.EXE [130576 2009-06-17] (Logitech, Inc.) HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\btvstack.exe [1023104 2012-10-15] (Atheros Communications) HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\athbttray.exe [801920 2012-10-15] (Atheros Commnucations) HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-04-13] (Intel Corporation) HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [337264 2010-05-27] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-03-11] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-03-11] (Egis Technology Inc.) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-28] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [265984 2010-06-28] (NewTech Infosystems, Inc.) HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [975952 2010-08-10] (Dritek System Inc.) HKLM-x32\...\Run: [ArcSoft Connection Service] - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [] - [X] HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3478392 2013-12-21] (Adobe Systems Inc.) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-07-22] (Geek Software GmbH) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-01-31] (AVAST Software) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [phonostarTimer] - C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe [40960 2011-06-20] () HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [ICQ] - C:\Users\Marco\AppData\Roaming\ICQM\icq.exe [33664344 2014-01-08] (ICQ) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [Speech Recognition] - C:\Windows\Speech\Common\sapisvr.exe [44544 2009-07-14] (Microsoft Corporation) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [DS3 Tool] - C:\Program Files\MotioninJoy\ds3\DS3_Tool.exe [92672 2010-10-02] (www.motioninjoy.com) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [F8D9AE2CB9E5983DE40F824224AE867E4C19679F._service_run] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [866584 2014-01-23] (Google Inc.) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [MusicManager] - C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [7380992 2013-11-12] (Google Inc.) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [PegtopPStart] - C:\Program Files (x86)\Pegtop\PStart\PStart.exe [786952 2013-12-14] (Pegtop Software) AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation) AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [202600 2012-10-08] (NVIDIA Corporation) Startup: C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Marco\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) GroupPolicy: Group Policy on Chrome detected <======= ATTENTION ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046} StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: EXEcheckker - {1F4F33F5-C394-63B9-6E09-59C72C1BBD82} - C:\ProgramData\EXEcheckker\wSjqqm.x64.dll No File BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: shoppnnDroop - {9E180093-CF8E-58CF-D3C9-396A9DEB930E} - C:\ProgramData\shoppnnDroop\rrVS8cpa8.x64.dll No File BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: ApPtoU - {EB54F8FF-CEF4-7E60-4CB8-91E2782EECB9} - C:\ProgramData\ApPtoU\LhPSOD.x64.dll No File BHO: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO: AppptoU - {F7323678-D72E-9FCD-29D9-B9DD31909229} - C:\ProgramData\AppptoU\bHeHik38.x64.dll No File BHO: avast! Ad Blocker - {FFCB3198-32F3-4E8B-9539-4324694ED663} - C:\Program Files (x86)\AVAST Software\avast! Ad Blocker IE\Adblocker64.dll (AVAST Software) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: avast! Ad Blocker - {FFCB3198-32F3-4E8B-9539-4324694ED663} - C:\Program Files (x86)\AVAST Software\avast! Ad Blocker IE\Adblocker32.dll (AVAST Software) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKCU - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837 FF Homepage: hxxp://intragart.selfhost.eu/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll () FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Marco\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Marco\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: DownloadHelper - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-01-25] FF Extension: Etao QR Code - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\jid0-0c0bUXarADMTgT3G2iGveQ7Bshc@jetpack.xpi [2014-01-23] FF Extension: Media Stealer - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\stealer@physacco.com.xpi [2014-01-25] FF Extension: QR Code - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\{6a910736-6fab-4480-841a-36325cce134f}.xpi [2014-01-23] FF Extension: Adblock Plus - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-23] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-02-06] FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\adblocker@avast.com.xpi [2014-02-06] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-07-21] FF HKLM-x32\...\Firefox\Extensions: [gamescenter@gamescenter.com] - C:\Program Files (x86)\GamesCenter\GamesCenter.xpi FF Extension: No Name - C:\Program Files (x86)\GamesCenter\GamesCenter.xpi [2013-02-09] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2013-03-15] FF HKLM-x32\...\Firefox\Extensions: [fmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\ FF Extension: Freemake Video Downloader Plugin - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\ [] FF HKLM-x32\...\Firefox\Extensions: [ytfmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\ FF Extension: Freemake Youtube Download Button - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\ [] Chrome: ======= CHR Extension: (Google Drive) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-07-10] CHR Extension: (Freemake Video Downloader) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf [2014-01-26] CHR Extension: (Games Center) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\dehjbbcmklelglapfndfbomoaooippkb [2013-07-08] CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2013-07-08] CHR Extension: (Freemake Youtube Download Button) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh [2014-01-26] CHR Extension: (Video Downloader professional) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2014-02-14] CHR Extension: (avast! Ad Blocker) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\fplhdcjmbpfkejbhngmlngaecbjmoimd [2013-07-08] CHR Extension: (AppptoU) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpocpclffomeibcpplfabifcpokcigde [2014-02-13] CHR Extension: (Media file downloader) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\khbkckdkhakengfjmejmiabaakdlhaab [2014-02-14] CHR Extension: (Google Wallet) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01] CHR Extension: (EXEcheckker) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdlfihameoodkafnckcnpfidcndgekh [2014-02-13] CHR Extension: (shoppnnDroop) - C:\ProgramData\hehonoiddkebnfobcdlakohjokfldcmh [2014-01-29] CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Marco\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-07-09] CHR HKLM-x32\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2014-01-25] CHR HKLM-x32\...\Chrome\Extension: [dehjbbcmklelglapfndfbomoaooippkb] - C:\Program Files (x86)\GamesCenter\GamesCenter.crx [2013-02-09] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2013-12-21] CHR HKLM-x32\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\ChromeYoutubePlugin.crx [2014-01-25] CHR HKLM-x32\...\Chrome\Extension: [fplhdcjmbpfkejbhngmlngaecbjmoimd] - C:\Program Files\AVAST Software\Avast\AdBlocker\Chrome\avast-adblocker-chrome.crx [2013-03-21] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-31] (AVAST Software) R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [113704 2014-01-31] (AVAST Software) R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2014-01-13] (Ellora Assets Corp.) R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 Megatech-Software-Protection; C:\Program Files (x86)\Megatech\MProtect\MPServ.EXE [36864 2007-12-12] () R2 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-05-27] (Egis Technology Inc.) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4292960 2013-11-11] (Symantec Corporation) ==================== Drivers (Whitelisted) ==================== R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2013-11-14] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-31] (AVAST Software) R1 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [440672 2014-01-31] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-14] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-14] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-01-31] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-01-31] (AVAST Software) R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-01-31] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-13] () R3 avmaudio; C:\Windows\System32\DRIVERS\avmaudio.sys [116480 2013-02-24] (AVM Berlin) S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin) S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH) S3 GigasetGenericUSB_x64; C:\Windows\System32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2009-02-20] (Siemens Home and Office Communication Devices GmbH & Co. KG) S3 libusb0; C:\Windows\SysWOW64\drivers\libusb0.sys [33792 2005-03-09] () S4 LMIRfsClientNP; No ImagePath R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [748648 2010-08-12] (Realtek Semiconductor Corporation ) R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] () S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2008-11-19] (LG Electronics Inc.) S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [27136 2008-11-19] (LG Electronics Inc.) S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [33792 2008-11-19] (LG Electronics Inc.) S3 WsAudio_Device; C:\Windows\System32\drivers\VirtualAudio.sys [31080 2013-01-08] (Wondershare) R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl [146928 2010-08-16] (CyberLink Corp.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S2 LMIInfo; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-14 22:18 - 2014-02-14 22:18 - 00027801 _____ () C:\Users\Marco\Desktop\JRT.txt 2014-02-14 22:08 - 2014-02-14 22:08 - 00000000 ____D () C:\Windows\ERUNT 2014-02-14 22:00 - 2014-02-14 22:00 - 00006470 _____ () C:\Users\Marco\Desktop\AdwCleaner[S0].zip 2014-02-14 21:58 - 2014-02-14 22:26 - 00000000 ____D () C:\ProgramData\boost_interprocess 2014-02-14 21:57 - 2014-02-14 21:57 - 00040704 _____ () C:\Users\Marco\Desktop\AdwCleaner[S0].txt 2014-02-14 21:49 - 2014-02-14 21:52 - 00000000 ____D () C:\AdwCleaner 2014-02-14 21:13 - 2014-02-14 21:13 - 00011404 _____ () C:\Users\Marco\Desktop\mbam-log-2014-02-14 (20-53-55).rar 2014-02-14 20:49 - 2014-02-14 20:49 - 00001117 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Malwarebytes 2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-02-14 20:49 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-02-14 16:59 - 2014-02-14 16:59 - 00005973 _____ () C:\Users\Marco\AppData\Local\recently-used.xbel 2014-02-13 21:11 - 2014-02-14 21:05 - 00000000 ____D () C:\ProgramData\AppptoU 2014-02-13 21:11 - 2014-02-13 21:11 - 00000000 ____D () C:\Users\Marco\AppData\Local\Packages 2014-02-13 17:18 - 2014-02-13 17:18 - 00177913 _____ () C:\ComboFix.txt 2014-02-13 16:37 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-02-13 16:37 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-02-13 16:37 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-02-13 16:37 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-02-13 16:37 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-02-13 16:37 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2014-02-13 16:37 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2014-02-13 16:37 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2014-02-13 16:36 - 2014-02-13 17:18 - 00000000 ____D () C:\Qoobox 2014-02-13 16:36 - 2014-02-13 17:16 - 00000000 ____D () C:\Windows\erdnt 2014-02-13 16:32 - 2014-02-13 16:32 - 05180679 ____R (Swearware) C:\Users\Marco\Desktop\ComboFix.exe 2014-02-12 14:30 - 2014-02-12 14:33 - 00040672 _____ () C:\Users\Marco\Desktop\Addition.txt 2014-02-12 14:28 - 2014-02-12 14:33 - 00069527 _____ () C:\Users\Marco\Desktop\FRST.txt 2014-02-12 14:26 - 2014-02-14 22:34 - 00000000 ____D () C:\FRST 2014-02-10 21:31 - 2014-02-10 23:09 - 00000000 ____D () C:\Users\Marco\Desktop\Dusty 2014-02-08 10:35 - 2014-02-08 10:35 - 00002968 _____ () C:\Windows\System32\Tasks\{65B6DA46-08F9-42DC-9D21-68ECB5FEEE0A} 2014-02-08 10:34 - 2014-02-08 10:34 - 00002970 _____ () C:\Windows\System32\Tasks\{CFC12328-BB91-45A7-A7C8-E057AD886176} 2014-02-08 10:08 - 2014-02-08 10:08 - 00002968 _____ () C:\Windows\System32\Tasks\{041F2130-E6FD-40C5-BBE9-52AFC0D96381} 2014-02-08 10:07 - 2014-02-08 10:07 - 00003186 _____ () C:\Windows\System32\Tasks\{29666182-CFDA-470B-A7D8-2515F863832A} 2014-02-07 23:57 - 2014-02-07 23:57 - 00002968 _____ () C:\Windows\System32\Tasks\{F3C812C3-7D7C-44A0-8952-6F379977FA97} 2014-02-07 23:51 - 2014-02-07 23:51 - 00002968 _____ () C:\Windows\System32\Tasks\{7BB0731C-19BC-41B6-A803-F42127F20CFD} 2014-02-07 23:45 - 2014-02-07 23:45 - 00002968 _____ () C:\Windows\System32\Tasks\{131E5AAD-9FED-42AE-9D92-C791A6FE5F3F} 2014-02-07 23:44 - 2014-02-07 23:44 - 00002968 _____ () C:\Windows\System32\Tasks\{D7F197EB-B937-43E7-AE7F-216C7702BE4B} 2014-02-07 23:43 - 2014-02-07 23:43 - 00002968 _____ () C:\Windows\System32\Tasks\{9E305CFD-F157-4A9F-992A-C12E920A12BA} 2014-02-06 19:56 - 2014-02-13 16:33 - 00000000 ____D () C:\Users\Marco\Desktop\Jannik 2014-02-06 19:18 - 2014-02-06 19:18 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\LibreOffice 2014-02-06 19:16 - 2014-02-06 19:16 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\OpenOffice.org 2014-02-06 17:24 - 2014-02-06 17:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-06 17:02 - 2014-02-06 17:02 - 00001386 _____ () C:\Users\Marco\Desktop\iTunes - Verknüpfung.lnk 2014-02-06 16:41 - 2014-02-06 16:41 - 01755604 _____ () C:\Users\Marco\Desktop\1871270_683350511717566_7622_n.mp4 2014-02-05 20:35 - 2014-02-10 20:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-02-03 16:59 - 2014-02-03 16:59 - 00000000 ____D () C:\Users\Marco\Desktop\Feuerwehr 2014-02-03 14:41 - 2014-02-03 14:41 - 00001637 _____ () C:\Users\Marco\Desktop\TeamViewer 9.lnk 2014-02-02 16:49 - 2014-02-02 16:49 - 00001201 _____ () C:\Users\Marco\Desktop\Ressourcenmonitor.lnk 2014-01-31 16:03 - 2014-02-14 21:05 - 00000000 ____D () C:\ProgramData\EXEcheckker 2014-01-31 16:03 - 2014-01-31 16:03 - 00000306 __RSH () C:\ProgramData\ntuser.pol 2014-01-31 16:03 - 2014-01-31 16:03 - 00000000 ____D () C:\ProgramData\okdlfihameoodkafnckcnpfidcndgekh 2014-01-31 15:35 - 2014-01-31 15:35 - 00001956 _____ () C:\Users\Public\Desktop\avast! Premier.lnk 2014-01-31 15:28 - 2014-01-31 15:28 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Wichtiges 2014-01-31 15:15 - 2014-01-31 15:15 - 01884977 _____ () C:\Users\Marco\Desktop\1608083_186652868212024_888047451_n.mp4 2014-01-31 06:40 - 2014-01-31 06:40 - 01884977 _____ () C:\Users\Marco\Desktop\bus 2014-01-29 20:27 - 2014-02-14 21:05 - 00000000 ____D () C:\ProgramData\shoppnnDroop 2014-01-29 20:27 - 2014-02-14 21:05 - 00000000 ____D () C:\ProgramData\ApPtoU 2014-01-29 20:27 - 2014-02-13 21:12 - 00000000 ____D () C:\ProgramData\2ff1ddb567438de4 2014-01-29 20:27 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\hehonoiddkebnfobcdlakohjokfldcmh 2014-01-28 20:49 - 2014-01-28 20:49 - 15336718 _____ () C:\Users\Marco\Desktop\1055344_371045796370724_676684399_n.mp4 2014-01-27 17:24 - 2014-01-27 17:24 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-27 17:24 - 2014-01-27 17:24 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-27 17:21 - 2014-01-27 17:21 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-01-27 17:21 - 2014-01-27 17:21 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2014-01-27 17:11 - 2014-01-27 17:12 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-01-27 17:11 - 2014-01-27 17:12 - 00000000 ____D () C:\Program Files\iTunes 2014-01-27 17:11 - 2014-01-27 17:12 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-01-27 17:11 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files\iPod 2014-01-26 12:24 - 2014-01-26 12:25 - 04685821 _____ () C:\Users\Marco\Desktop\Berufscheck der kleinen Mia.wmv 2014-01-26 12:19 - 2014-01-26 12:21 - 04117893 _____ () C:\Users\Marco\Desktop\Poledancestange im Kinderzimmer.wmv 2014-01-25 17:19 - 2014-01-25 17:20 - 05973713 _____ () C:\Users\Marco\Desktop\Ein Müllmann rastet aus.wmv 2014-01-25 16:52 - 2014-01-25 16:52 - 00000000 ____D () C:\Program Files (x86)\DsNET Corp 2014-01-25 16:30 - 2014-01-25 16:30 - 29836541 _____ () C:\Users\Marco\Desktop\ROLLIN` SAFARI - what if animals were round_.mp4 2014-01-25 16:30 - 2014-01-25 16:30 - 00000000 ____D () C:\Users\Marco\dwhelper 2014-01-24 18:22 - 2014-01-24 18:23 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Sonstige 2014-01-19 22:39 - 2014-01-19 22:39 - 00000032 _____ () C:\Windows\Menu.INI 2014-01-19 19:05 - 2014-01-19 20:04 - 866302861 _____ () C:\Users\Marco\Dusty.zip 2014-01-15 18:29 - 2014-01-15 18:29 - 00000000 ____D () C:\Users\Marco\Telekom 2014-01-15 16:41 - 2014-02-12 16:08 - 00000600 _____ () C:\Users\Marco\AppData\Local\PUTTY.RND 2014-01-15 14:27 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-01-15 14:27 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-01-15 14:27 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-01-15 14:27 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-01-15 14:27 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-01-15 14:27 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-01-15 14:27 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-01-15 14:27 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-01-15 14:27 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys ==================== One Month Modified Files and Folders ======= 2014-02-14 22:34 - 2014-02-12 14:26 - 00000000 ____D () C:\FRST 2014-02-14 22:34 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-14 22:34 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-14 22:32 - 2012-05-29 20:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-14 22:30 - 2010-11-05 22:37 - 01787399 _____ () C:\Windows\WindowsUpdate.log 2014-02-14 22:27 - 2011-01-17 16:11 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Skype 2014-02-14 22:26 - 2014-02-14 21:58 - 00000000 ____D () C:\ProgramData\boost_interprocess 2014-02-14 22:26 - 2013-08-17 00:57 - 00000000 ___RD () C:\Users\Marco\Dropbox 2014-02-14 22:26 - 2013-08-17 00:55 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Dropbox 2014-02-14 22:26 - 2013-04-17 17:00 - 00000000 ___RD () C:\Users\Marco\Google Drive 2014-02-14 22:26 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\FxsTmp 2014-02-14 22:23 - 2011-02-04 19:36 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-02-14 22:21 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-14 22:21 - 2009-07-14 05:51 - 00310049 _____ () C:\Windows\setupact.log 2014-02-14 22:19 - 2013-08-22 11:24 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002Core.job 2014-02-14 22:18 - 2014-02-14 22:18 - 00027801 _____ () C:\Users\Marco\Desktop\JRT.txt 2014-02-14 22:11 - 2013-08-22 11:24 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002UA.job 2014-02-14 22:08 - 2014-02-14 22:08 - 00000000 ____D () C:\Windows\ERUNT 2014-02-14 22:00 - 2014-02-14 22:00 - 00006470 _____ () C:\Users\Marco\Desktop\AdwCleaner[S0].zip 2014-02-14 22:00 - 2011-02-20 12:00 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software 2014-02-14 21:57 - 2014-02-14 21:57 - 00040704 _____ () C:\Users\Marco\Desktop\AdwCleaner[S0].txt 2014-02-14 21:52 - 2014-02-14 21:49 - 00000000 ____D () C:\AdwCleaner 2014-02-14 21:43 - 2011-02-04 19:36 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-02-14 21:22 - 2012-07-10 15:26 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-02-14 21:18 - 2010-11-05 22:34 - 00759330 _____ () C:\Windows\PFRO.log 2014-02-14 21:17 - 2011-01-17 15:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\SoftGrid Client 2014-02-14 21:13 - 2014-02-14 21:13 - 00011404 _____ () C:\Users\Marco\Desktop\mbam-log-2014-02-14 (20-53-55).rar 2014-02-14 21:05 - 2014-02-13 21:11 - 00000000 ____D () C:\ProgramData\AppptoU 2014-02-14 21:05 - 2014-01-31 16:03 - 00000000 ____D () C:\ProgramData\EXEcheckker 2014-02-14 21:05 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\shoppnnDroop 2014-02-14 21:05 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\ApPtoU 2014-02-14 20:49 - 2014-02-14 20:49 - 00001117 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Malwarebytes 2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-02-14 18:18 - 2012-11-15 20:12 - 00003958 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{604A8C80-AF97-4E6B-B718-0ADED238F7E3} 2014-02-14 17:39 - 2011-11-07 20:14 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\vlc 2014-02-14 17:03 - 2010-11-06 07:28 - 00654852 _____ () C:\Windows\system32\perfh007.dat 2014-02-14 17:03 - 2010-11-06 07:28 - 00130434 _____ () C:\Windows\system32\perfc007.dat 2014-02-14 17:03 - 2009-07-14 06:13 - 01500358 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-02-14 16:59 - 2014-02-14 16:59 - 00005973 _____ () C:\Users\Marco\AppData\Local\recently-used.xbel 2014-02-14 16:59 - 2012-08-05 22:10 - 00000000 ____D () C:\Users\Marco\.gimp-2.8 2014-02-14 16:59 - 2012-01-24 14:55 - 04504576 ___SH () C:\Users\Marco\Desktop\Thumbs.db 2014-02-14 16:11 - 2012-06-05 11:02 - 00007667 _____ () C:\Users\Marco\AppData\Local\resmon.resmoncfg 2014-02-13 21:12 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\2ff1ddb567438de4 2014-02-13 21:11 - 2014-02-13 21:11 - 00000000 ____D () C:\Users\Marco\AppData\Local\Packages 2014-02-13 17:18 - 2014-02-13 17:18 - 00177913 _____ () C:\ComboFix.txt 2014-02-13 17:18 - 2014-02-13 16:36 - 00000000 ____D () C:\Qoobox 2014-02-13 17:18 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default 2014-02-13 17:17 - 2012-10-01 15:39 - 00000000 ___RD () C:\Users\Schule\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-02-13 17:17 - 2011-01-17 15:17 - 00000000 ___RD () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-02-13 17:16 - 2014-02-13 16:36 - 00000000 ____D () C:\Windows\erdnt 2014-02-13 17:10 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini 2014-02-13 17:07 - 2009-07-14 03:34 - 82575360 _____ () C:\Windows\system32\config\SOFTWARE.bak 2014-02-13 17:07 - 2009-07-14 03:34 - 27000832 _____ () C:\Windows\system32\config\SYSTEM.bak 2014-02-13 17:07 - 2009-07-14 03:34 - 14155776 _____ () C:\Windows\system32\config\DEFAULT.bak 2014-02-13 17:07 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak 2014-02-13 17:07 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\SAM.bak 2014-02-13 16:36 - 2013-09-29 15:08 - 00000000 ____D () C:\Users\Marco\AppData\Local\CrashDumps 2014-02-13 16:33 - 2014-02-06 19:56 - 00000000 ____D () C:\Users\Marco\Desktop\Jannik 2014-02-13 16:32 - 2014-02-13 16:32 - 05180679 ____R (Swearware) C:\Users\Marco\Desktop\ComboFix.exe 2014-02-12 16:08 - 2014-01-15 16:41 - 00000600 _____ () C:\Users\Marco\AppData\Local\PUTTY.RND 2014-02-12 14:33 - 2014-02-12 14:30 - 00040672 _____ () C:\Users\Marco\Desktop\Addition.txt 2014-02-12 14:33 - 2014-02-12 14:28 - 00069527 _____ () C:\Users\Marco\Desktop\FRST.txt 2014-02-12 14:24 - 2013-11-20 14:18 - 00241591 _____ () C:\Windows\IE11_main.log 2014-02-10 23:09 - 2014-02-10 21:31 - 00000000 ____D () C:\Users\Marco\Desktop\Dusty 2014-02-10 22:27 - 2011-11-28 14:24 - 00000000 ____D () C:\Users\Marco\Tracing 2014-02-10 21:56 - 2012-10-15 13:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-10 20:30 - 2014-02-05 20:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-02-10 15:49 - 2014-01-04 02:49 - 00003912 _____ () C:\Windows\system32\TeamViewer9_Hooks.log 2014-02-08 10:35 - 2014-02-08 10:35 - 00002968 _____ () C:\Windows\System32\Tasks\{65B6DA46-08F9-42DC-9D21-68ECB5FEEE0A} 2014-02-08 10:34 - 2014-02-08 10:34 - 00002970 _____ () C:\Windows\System32\Tasks\{CFC12328-BB91-45A7-A7C8-E057AD886176} 2014-02-08 10:08 - 2014-02-08 10:08 - 00002968 _____ () C:\Windows\System32\Tasks\{041F2130-E6FD-40C5-BBE9-52AFC0D96381} 2014-02-08 10:07 - 2014-02-08 10:07 - 00003186 _____ () C:\Windows\System32\Tasks\{29666182-CFDA-470B-A7D8-2515F863832A} 2014-02-07 23:57 - 2014-02-07 23:57 - 00002968 _____ () C:\Windows\System32\Tasks\{F3C812C3-7D7C-44A0-8952-6F379977FA97} 2014-02-07 23:51 - 2014-02-07 23:51 - 00002968 _____ () C:\Windows\System32\Tasks\{7BB0731C-19BC-41B6-A803-F42127F20CFD} 2014-02-07 23:45 - 2014-02-07 23:45 - 00002968 _____ () C:\Windows\System32\Tasks\{131E5AAD-9FED-42AE-9D92-C791A6FE5F3F} 2014-02-07 23:44 - 2014-02-07 23:44 - 00002968 _____ () C:\Windows\System32\Tasks\{D7F197EB-B937-43E7-AE7F-216C7702BE4B} 2014-02-07 23:43 - 2014-02-07 23:43 - 00002968 _____ () C:\Windows\System32\Tasks\{9E305CFD-F157-4A9F-992A-C12E920A12BA} 2014-02-07 23:37 - 2011-01-21 16:34 - 00000000 ____D () C:\Users\Marco\Spiele 2014-02-06 19:18 - 2014-02-06 19:18 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\LibreOffice 2014-02-06 19:16 - 2014-02-06 19:16 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\OpenOffice.org 2014-02-06 17:24 - 2014-02-06 17:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-06 17:02 - 2014-02-06 17:02 - 00001386 _____ () C:\Users\Marco\Desktop\iTunes - Verknüpfung.lnk 2014-02-06 16:41 - 2014-02-06 16:41 - 01755604 _____ () C:\Users\Marco\Desktop\1871270_683350511717566_7622_n.mp4 2014-02-05 20:32 - 2012-05-29 20:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-02-05 20:32 - 2012-05-29 20:49 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-02-05 20:32 - 2012-05-29 20:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-02-05 14:36 - 2013-12-26 22:17 - 00000000 ____D () C:\Users\Besucher\AppData\Local\CrashDumps 2014-02-04 15:43 - 2011-01-17 15:16 - 00162544 _____ () C:\Users\Marco\AppData\Local\GDIPFONTCACHEV1.DAT 2014-02-03 16:59 - 2014-02-03 16:59 - 00000000 ____D () C:\Users\Marco\Desktop\Feuerwehr 2014-02-03 14:41 - 2014-02-03 14:41 - 00001637 _____ () C:\Users\Marco\Desktop\TeamViewer 9.lnk 2014-02-02 16:49 - 2014-02-02 16:49 - 00001201 _____ () C:\Users\Marco\Desktop\Ressourcenmonitor.lnk 2014-02-01 01:56 - 2013-12-02 21:16 - 00000000 ____D () C:\Users\SERVER\Desktop\Intragart 2014-02-01 01:26 - 2013-08-29 18:48 - 00162544 _____ () C:\Users\SERVER\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-31 16:03 - 2014-01-31 16:03 - 00000306 __RSH () C:\ProgramData\ntuser.pol 2014-01-31 16:03 - 2014-01-31 16:03 - 00000000 ____D () C:\ProgramData\okdlfihameoodkafnckcnpfidcndgekh 2014-01-31 16:03 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-01-31 16:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy 2014-01-31 15:53 - 2012-05-12 13:25 - 00001033 _____ () C:\Windows\wininit.ini 2014-01-31 15:52 - 2013-08-17 00:56 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-31 15:35 - 2014-01-31 15:35 - 00001956 _____ () C:\Users\Public\Desktop\avast! Premier.lnk 2014-01-31 15:32 - 2014-01-13 18:52 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-01-31 15:32 - 2013-03-21 13:53 - 00440672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys 2014-01-31 15:32 - 2011-07-21 08:15 - 01038072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-01-31 15:32 - 2011-07-21 08:15 - 00421704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-01-31 15:32 - 2011-07-21 08:15 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-01-31 15:32 - 2011-07-21 08:15 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-01-31 15:32 - 2011-07-21 08:14 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-01-31 15:28 - 2014-01-31 15:28 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Wichtiges 2014-01-31 15:15 - 2014-01-31 15:15 - 01884977 _____ () C:\Users\Marco\Desktop\1608083_186652868212024_888047451_n.mp4 2014-01-31 06:40 - 2014-01-31 06:40 - 01884977 _____ () C:\Users\Marco\Desktop\bus 2014-01-29 20:27 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\hehonoiddkebnfobcdlakohjokfldcmh 2014-01-28 20:49 - 2014-01-28 20:49 - 15336718 _____ () C:\Users\Marco\Desktop\1055344_371045796370724_676684399_n.mp4 2014-01-27 21:06 - 2013-07-06 09:23 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\.minecraft 2014-01-27 17:24 - 2014-01-27 17:24 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-27 17:24 - 2014-01-27 17:24 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-27 17:24 - 2013-11-15 15:52 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-27 17:24 - 2013-11-15 15:52 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-27 17:24 - 2013-11-15 15:52 - 00000000 ____D () C:\ProgramData\Oracle 2014-01-27 17:21 - 2014-01-27 17:21 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-01-27 17:21 - 2014-01-27 17:21 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2014-01-27 17:21 - 2013-07-11 19:36 - 00000000 ____D () C:\Program Files\Java 2014-01-27 17:15 - 2012-04-18 15:24 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-01-27 17:15 - 2012-04-18 15:23 - 00000000 ____D () C:\Program Files (x86)\WinRAR 2014-01-27 17:12 - 2014-01-27 17:11 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-01-27 17:12 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files\iTunes 2014-01-27 17:12 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-01-27 17:11 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files\iPod 2014-01-26 16:53 - 2011-02-12 21:31 - 01018368 ___SH () C:\Users\Marco\Thumbs.db 2014-01-26 12:25 - 2014-01-26 12:24 - 04685821 _____ () C:\Users\Marco\Desktop\Berufscheck der kleinen Mia.wmv 2014-01-26 12:21 - 2014-01-26 12:19 - 04117893 _____ () C:\Users\Marco\Desktop\Poledancestange im Kinderzimmer.wmv 2014-01-25 17:20 - 2014-01-25 17:19 - 05973713 _____ () C:\Users\Marco\Desktop\Ein Müllmann rastet aus.wmv 2014-01-25 16:52 - 2014-01-25 16:52 - 00000000 ____D () C:\Program Files (x86)\DsNET Corp 2014-01-25 16:47 - 2012-01-13 16:55 - 00000000 ____D () C:\ProgramData\Freemake 2014-01-25 16:46 - 2012-01-13 16:54 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake 2014-01-25 16:46 - 2012-01-13 16:54 - 00000000 ____D () C:\Program Files (x86)\Freemake 2014-01-25 16:30 - 2014-01-25 16:30 - 29836541 _____ () C:\Users\Marco\Desktop\ROLLIN` SAFARI - what if animals were round_.mp4 2014-01-25 16:30 - 2014-01-25 16:30 - 00000000 ____D () C:\Users\Marco\dwhelper 2014-01-25 16:30 - 2011-01-17 15:16 - 00000000 ___RD () C:\Users\Marco 2014-01-24 18:23 - 2014-01-24 18:22 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Sonstige 2014-01-22 16:35 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-01-20 04:55 - 2011-08-15 10:33 - 00000000 ____D () C:\Users\Marco\Dusty 2014-01-19 22:39 - 2014-01-19 22:39 - 00000032 _____ () C:\Windows\Menu.INI 2014-01-19 20:04 - 2014-01-19 19:05 - 866302861 _____ () C:\Users\Marco\Dusty.zip 2014-01-16 16:50 - 2009-07-14 05:45 - 00549696 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-01-16 16:29 - 2013-08-14 12:30 - 00000000 ____D () C:\Windows\system32\MRT 2014-01-16 16:22 - 2011-01-29 17:10 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-01-16 09:59 - 2012-07-13 18:03 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2014-01-15 18:29 - 2014-01-15 18:29 - 00000000 ____D () C:\Users\Marco\Telekom 2014-01-15 18:27 - 2013-11-17 20:44 - 00000000 ____D () C:\Users\Marco\Desktop\Für Karin 2014-01-15 18:27 - 2011-01-16 20:30 - 00000000 ____D () C:\Users\Marco\Schreiben Files to move or delete: ==================== C:\Users\Marco\worldpainter_0.11.2.exe C:\Users\Marco\worldpainter_1.2.5.exe Some content of TEMP: ==================== C:\Users\Marco\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-02-08 14:42 ==================== End Of Log ============================ --- --- --- |
14.02.2014, 22:45 | #11 |
| 100% Pysikalischer Speicher durch svchost.exe hier das bild |
15.02.2014, 18:35 | #12 |
/// the machine /// TB-Ausbilder | 100% Pysikalischer Speicher durch svchost.exe Komischer Fehler. ESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
16.02.2014, 20:14 | #13 |
| 100% Pysikalischer Speicher durch svchost.exe ne, auslastung geht nimma hoch auf 100% aber der scan hat jetzt ca. 4h und 50min gebruacht hier das log von ESET Online Scanner Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=9c04227118546249897b3c6cae8fccce # engine=17093 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-02-16 06:27:52 # local_time=2014-02-16 07:27:52 (+0100, Mitteleuropäische Zeit) # country="Germany" # lang=1033 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=772 16777213 83 82 1399450 8126232 0 0 # compatibility_mode=5893 16776573 100 94 165284 144205122 0 0 # scanned=439233 # found=3 # cleaned=0 # scan_time=17346 sh=2C06A350EA95B428E1BD9BBC94B5932061EC71DB ft=1 fh=a351c33b2a9de0d7 vn="a variant of Win32/SpeedingUpMyPC application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\optimizer pro\OptimizerPro.exe.vir" sh=888E0F78F11013E11283DA19CDE2B574E4E8833B ft=1 fh=7d4b0bc979117643 vn="a variant of Win32/AdWare.SpeedingUpMyPC.D application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\optimizer pro\OptProLauncher.exe.vir" sh=34EDAC09C618F20D260A0B2AB6E51584EA4996EE ft=1 fh=621aa319d1387749 vn="a variant of Win32/Adware.SpeedingUpMyPC.C application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\optimizer pro\OptProSmartScan.exe.vir" Code:
ATTFilter Results of screen317's Security Check version 0.99.79 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 10 Out of date! ``````````````Antivirus/Firewall Check:`````````````` avast! Antivirus Antivirus out of date! `````````Anti-malware/Other Utilities Check:````````` Malwarebytes Anti-Malware Version 1.75.0.1300 Java(TM) 6 Update 22 Java(TM) 6 Update 37 Java 7 Update 51 Adobe Flash Player 12.0.0.43 Flash Player out of Date! Adobe Reader 9 Adobe Reader out of Date! Mozilla Firefox (27.0.1) Mozilla Thunderbird (24.3.0) Google Chrome 32.0.1700.102 Google Chrome 32.0.1700.76 ````````Process Check: objlist.exe by Laurent```````` Symantec Norton Online Backup NOBuAgent.exe Symantec Norton Online Backup NOBuClient.exe AVAST Software Avast AvastSvc.exe AVAST Software Avast afwServ.exe AVAST Software Avast AvastUI.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01 Ran by Marco (administrator) on ACER-ASPIRE-574 on 16-02-2014 20:13:31 Running from C:\Users\Marco\Favorites\Downloads Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 10 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Microsoft Corporation) C:\Windows\system32\WLANExt.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe (ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe (CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE (Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe (Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe () C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe () C:\Program Files (x86)\Megatech\MProtect\MPServ.EXE (Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe (Intel Corporation) C:\Windows\system32\igfxext.exe (Intel Corporation) C:\Windows\system32\igfxsrvc.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe (Google Inc.) C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\MusicManager.exe (Pegtop Software) C:\Program Files (x86)\Pegtop\PStart\PStart.exe (Logitech, Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe (ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe (Apple Inc.) C:\Program Files (x86)\QuickTime\QTTask.exe (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe (Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe (Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe () C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe (Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe (Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552 2010-05-27] (Egis Technology Inc.) HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10920552 2010-06-22] (Realtek Semiconductor) HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1890088 2009-12-10] (Synaptics Incorporated) HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [861216 2010-06-11] (Acer Incorporated) HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2782096 2010-07-26] (CANON INC.) HKLM\...\Run: [LogMeIn GUI] - "C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe" HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated) HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.) HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - C:\Windows\KHALMNPR.EXE [130576 2009-06-17] (Logitech, Inc.) HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\btvstack.exe [1023104 2012-10-15] (Atheros Communications) HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\athbttray.exe [801920 2012-10-15] (Atheros Commnucations) HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-04-13] (Intel Corporation) HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [337264 2010-05-27] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-03-11] (Egis Technology Inc.) HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-03-11] (Egis Technology Inc.) HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-28] (Adobe Systems Incorporated) HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [265984 2010-06-28] (NewTech Infosystems, Inc.) HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [975952 2010-08-10] (Dritek System Inc.) HKLM-x32\...\Run: [ArcSoft Connection Service] - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.) HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.) HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [] - [X] HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3478392 2013-12-21] (Adobe Systems Inc.) HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-07-22] (Geek Software GmbH) HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-01-31] (AVAST Software) HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation) Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [phonostarTimer] - C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe [40960 2011-06-20] () HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [ICQ] - C:\Users\Marco\AppData\Roaming\ICQM\icq.exe [33664344 2014-01-08] (ICQ) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [Speech Recognition] - C:\Windows\Speech\Common\sapisvr.exe [44544 2009-07-14] (Microsoft Corporation) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [DS3 Tool] - C:\Program Files\MotioninJoy\ds3\DS3_Tool.exe [92672 2010-10-02] (www.motioninjoy.com) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [F8D9AE2CB9E5983DE40F824224AE867E4C19679F._service_run] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [866584 2014-01-23] (Google Inc.) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [MusicManager] - C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [7380992 2013-11-12] (Google Inc.) HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [PegtopPStart] - C:\Program Files (x86)\Pegtop\PStart\PStart.exe [786952 2013-12-14] (Pegtop Software) AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation) AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [202600 2012-10-08] (NVIDIA Corporation) Startup: C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk ShortcutTarget: Dropbox.lnk -> C:\Users\Marco\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) GroupPolicy: Group Policy on Chrome detected <======= ATTENTION ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046} StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: EXEcheckker - {1F4F33F5-C394-63B9-6E09-59C72C1BBD82} - C:\ProgramData\EXEcheckker\wSjqqm.x64.dll No File BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO: shoppnnDroop - {9E180093-CF8E-58CF-D3C9-396A9DEB930E} - C:\ProgramData\shoppnnDroop\rrVS8cpa8.x64.dll No File BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.) BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO: ApPtoU - {EB54F8FF-CEF4-7E60-4CB8-91E2782EECB9} - C:\ProgramData\ApPtoU\LhPSOD.x64.dll No File BHO: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO: AppptoU - {F7323678-D72E-9FCD-29D9-B9DD31909229} - C:\ProgramData\AppptoU\bHeHik38.x64.dll No File BHO: avast! Ad Blocker - {FFCB3198-32F3-4E8B-9539-4324694ED663} - C:\Program Files (x86)\AVAST Software\avast! Ad Blocker IE\Adblocker64.dll (AVAST Software) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) BHO-x32: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) BHO-x32: avast! Ad Blocker - {FFCB3198-32F3-4E8B-9539-4324694ED663} - C:\Program Files (x86)\AVAST Software\avast! Ad Blocker IE\Adblocker32.dll (AVAST Software) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.) Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) Toolbar: HKCU - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated) DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 FireFox: ======== FF ProfilePath: C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837 FF Homepage: hxxp://intragart.selfhost.eu/ FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll () FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll () FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems) FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Marco\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Marco\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: DownloadHelper - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-01-25] FF Extension: Etao QR Code - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\jid0-0c0bUXarADMTgT3G2iGveQ7Bshc@jetpack.xpi [2014-01-23] FF Extension: Media Stealer - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\stealer@physacco.com.xpi [2014-01-25] FF Extension: QR Code - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\{6a910736-6fab-4480-841a-36325cce134f}.xpi [2014-01-23] FF Extension: Adblock Plus - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-23] FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-02-15] FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\adblocker@avast.com.xpi [2014-02-15] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-07-21] FF HKLM-x32\...\Firefox\Extensions: [gamescenter@gamescenter.com] - C:\Program Files (x86)\GamesCenter\GamesCenter.xpi FF Extension: No Name - C:\Program Files (x86)\GamesCenter\GamesCenter.xpi [2013-02-09] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2013-03-15] FF HKLM-x32\...\Firefox\Extensions: [fmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\ FF Extension: Freemake Video Downloader Plugin - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\ [] FF HKLM-x32\...\Firefox\Extensions: [ytfmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\ FF Extension: Freemake Youtube Download Button - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\ [] Chrome: ======= CHR Extension: (Google Drive) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-07-10] CHR Extension: (Freemake Video Downloader) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf [2014-01-26] CHR Extension: (Games Center) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\dehjbbcmklelglapfndfbomoaooippkb [2013-07-08] CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2013-07-08] CHR Extension: (Freemake Youtube Download Button) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh [2014-01-26] CHR Extension: (Video Downloader professional) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2014-02-14] CHR Extension: (avast! Ad Blocker) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\fplhdcjmbpfkejbhngmlngaecbjmoimd [2013-07-08] CHR Extension: (AppptoU) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpocpclffomeibcpplfabifcpokcigde [2014-02-13] CHR Extension: (Media file downloader) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\khbkckdkhakengfjmejmiabaakdlhaab [2014-02-14] CHR Extension: (Google Wallet) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01] CHR Extension: (EXEcheckker) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdlfihameoodkafnckcnpfidcndgekh [2014-02-13] CHR Extension: (shoppnnDroop) - C:\ProgramData\hehonoiddkebnfobcdlakohjokfldcmh [2014-01-29] CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Marco\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-07-09] CHR HKLM-x32\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2014-01-25] CHR HKLM-x32\...\Chrome\Extension: [dehjbbcmklelglapfndfbomoaooippkb] - C:\Program Files (x86)\GamesCenter\GamesCenter.crx [2013-02-09] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2013-12-21] CHR HKLM-x32\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\ChromeYoutubePlugin.crx [2014-01-25] CHR HKLM-x32\...\Chrome\Extension: [fplhdcjmbpfkejbhngmlngaecbjmoimd] - C:\Program Files\AVAST Software\Avast\AdBlocker\Chrome\avast-adblocker-chrome.crx [2013-03-21] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-31] (AVAST Software) R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [113704 2014-01-31] (AVAST Software) S2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2014-01-13] (Ellora Assets Corp.) S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 Megatech-Software-Protection; C:\Program Files (x86)\Megatech\MProtect\MPServ.EXE [36864 2007-12-12] () R2 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-05-27] (Egis Technology Inc.) R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4292960 2013-11-11] (Symantec Corporation) ==================== Drivers (Whitelisted) ==================== R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2013-11-14] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-31] (AVAST Software) R1 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [440672 2014-01-31] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-14] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-14] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-01-31] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-01-31] (AVAST Software) S3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-01-31] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-13] () R3 avmaudio; C:\Windows\System32\DRIVERS\avmaudio.sys [116480 2013-02-24] (AVM Berlin) S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin) S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH) S3 GigasetGenericUSB_x64; C:\Windows\System32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2009-02-20] (Siemens Home and Office Communication Devices GmbH & Co. KG) S3 libusb0; C:\Windows\SysWOW64\drivers\libusb0.sys [33792 2005-03-09] () S4 LMIRfsClientNP; No ImagePath S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [748648 2010-08-12] (Realtek Semiconductor Corporation ) S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] () S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2008-11-19] (LG Electronics Inc.) S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [27136 2008-11-19] (LG Electronics Inc.) S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [33792 2008-11-19] (LG Electronics Inc.) S3 WsAudio_Device; C:\Windows\System32\drivers\VirtualAudio.sys [31080 2013-01-08] (Wondershare) R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl [146928 2010-08-16] (CyberLink Corp.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S2 LMIInfo; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-02-15 09:46 - 2014-02-15 09:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-15 09:39 - 2014-02-01 10:20 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-15 09:39 - 2014-02-01 10:18 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-15 09:39 - 2014-02-01 10:18 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-15 09:39 - 2014-02-01 10:18 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-02-15 09:39 - 2014-02-01 10:18 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-15 09:39 - 2014-02-01 10:18 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-15 09:39 - 2014-02-01 08:57 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-15 09:39 - 2014-02-01 08:57 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-15 09:39 - 2014-02-01 08:57 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-15 09:39 - 2014-02-01 08:57 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-02-15 09:39 - 2014-02-01 08:57 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-15 09:39 - 2014-02-01 08:57 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-15 09:39 - 2014-02-01 08:40 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-15 09:39 - 2014-02-01 08:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-15 09:39 - 2014-02-01 07:45 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-02-15 09:39 - 2014-02-01 07:38 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-02-15 09:39 - 2013-12-21 10:39 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-02-15 09:39 - 2013-12-21 08:56 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-02-15 09:38 - 2014-02-01 10:19 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-15 09:38 - 2014-02-01 10:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-15 09:38 - 2014-02-01 10:18 - 19274240 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-15 09:38 - 2014-02-01 10:18 - 15403520 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-15 09:38 - 2014-02-01 10:18 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-15 09:38 - 2014-02-01 10:18 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-15 09:38 - 2014-02-01 10:18 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-02-15 09:38 - 2014-02-01 10:18 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-15 09:38 - 2014-02-01 10:18 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-15 09:38 - 2014-02-01 08:58 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-15 09:38 - 2014-02-01 08:58 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-15 09:38 - 2014-02-01 08:57 - 14359040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-15 09:38 - 2014-02-01 08:57 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-15 09:38 - 2014-02-01 08:57 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-15 09:38 - 2014-02-01 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-02-15 09:38 - 2014-02-01 08:57 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-15 09:38 - 2014-02-01 08:57 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-14 22:18 - 2014-02-14 22:18 - 00027801 _____ () C:\Users\Marco\Desktop\JRT.txt 2014-02-14 22:08 - 2014-02-14 22:08 - 00000000 ____D () C:\Windows\ERUNT 2014-02-14 22:00 - 2014-02-14 22:00 - 00006470 _____ () C:\Users\Marco\Desktop\AdwCleaner[S0].zip 2014-02-14 21:58 - 2014-02-16 19:56 - 00000000 ____D () C:\ProgramData\boost_interprocess 2014-02-14 21:57 - 2014-02-14 21:57 - 00040704 _____ () C:\Users\Marco\Desktop\AdwCleaner[S0].txt 2014-02-14 21:49 - 2014-02-14 21:52 - 00000000 ____D () C:\AdwCleaner 2014-02-14 21:13 - 2014-02-14 21:13 - 00011404 _____ () C:\Users\Marco\Desktop\mbam-log-2014-02-14 (20-53-55).rar 2014-02-14 20:49 - 2014-02-14 20:49 - 00001117 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Malwarebytes 2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-02-14 20:49 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-02-14 16:59 - 2014-02-14 16:59 - 00005973 _____ () C:\Users\Marco\AppData\Local\recently-used.xbel 2014-02-13 21:11 - 2014-02-14 21:05 - 00000000 ____D () C:\ProgramData\AppptoU 2014-02-13 21:11 - 2014-02-13 21:11 - 00000000 ____D () C:\Users\Marco\AppData\Local\Packages 2014-02-13 17:18 - 2014-02-13 17:18 - 00177913 _____ () C:\ComboFix.txt 2014-02-13 16:37 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-02-13 16:37 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-02-13 16:37 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-02-13 16:37 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-02-13 16:37 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-02-13 16:37 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe 2014-02-13 16:37 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe 2014-02-13 16:37 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe 2014-02-13 16:36 - 2014-02-13 17:18 - 00000000 ____D () C:\Qoobox 2014-02-13 16:36 - 2014-02-13 17:16 - 00000000 ____D () C:\Windows\erdnt 2014-02-13 16:33 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls 2014-02-13 16:33 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls 2014-02-13 16:33 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-02-13 16:33 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-02-13 16:33 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-02-13 16:33 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-02-13 16:33 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-02-13 16:33 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-02-13 16:33 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-02-13 16:33 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-02-13 16:33 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-02-13 16:33 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-02-13 16:33 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-02-13 16:33 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-02-13 16:33 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-02-13 16:33 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-02-13 16:33 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-02-13 16:33 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2014-02-13 16:33 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2014-02-13 16:33 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2014-02-13 16:33 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2014-02-13 16:33 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-02-13 16:33 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2014-02-13 16:33 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2014-02-13 16:33 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2014-02-13 16:33 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2014-02-13 16:33 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-02-13 16:33 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-02-13 16:32 - 2014-02-13 16:32 - 05180679 ____R (Swearware) C:\Users\Marco\Desktop\ComboFix.exe 2014-02-12 14:30 - 2014-02-12 14:33 - 00040672 _____ () C:\Users\Marco\Desktop\Addition.txt 2014-02-12 14:28 - 2014-02-12 14:33 - 00069527 _____ () C:\Users\Marco\Desktop\FRST.txt 2014-02-12 14:26 - 2014-02-16 20:13 - 00000000 ____D () C:\FRST 2014-02-10 21:31 - 2014-02-10 23:09 - 00000000 ____D () C:\Users\Marco\Desktop\Dusty 2014-02-08 10:35 - 2014-02-08 10:35 - 00002968 _____ () C:\Windows\System32\Tasks\{65B6DA46-08F9-42DC-9D21-68ECB5FEEE0A} 2014-02-08 10:34 - 2014-02-08 10:34 - 00002970 _____ () C:\Windows\System32\Tasks\{CFC12328-BB91-45A7-A7C8-E057AD886176} 2014-02-08 10:08 - 2014-02-08 10:08 - 00002968 _____ () C:\Windows\System32\Tasks\{041F2130-E6FD-40C5-BBE9-52AFC0D96381} 2014-02-08 10:07 - 2014-02-08 10:07 - 00003186 _____ () C:\Windows\System32\Tasks\{29666182-CFDA-470B-A7D8-2515F863832A} 2014-02-07 23:57 - 2014-02-07 23:57 - 00002968 _____ () C:\Windows\System32\Tasks\{F3C812C3-7D7C-44A0-8952-6F379977FA97} 2014-02-07 23:51 - 2014-02-07 23:51 - 00002968 _____ () C:\Windows\System32\Tasks\{7BB0731C-19BC-41B6-A803-F42127F20CFD} 2014-02-07 23:45 - 2014-02-07 23:45 - 00002968 _____ () C:\Windows\System32\Tasks\{131E5AAD-9FED-42AE-9D92-C791A6FE5F3F} 2014-02-07 23:44 - 2014-02-07 23:44 - 00002968 _____ () C:\Windows\System32\Tasks\{D7F197EB-B937-43E7-AE7F-216C7702BE4B} 2014-02-07 23:43 - 2014-02-07 23:43 - 00002968 _____ () C:\Windows\System32\Tasks\{9E305CFD-F157-4A9F-992A-C12E920A12BA} 2014-02-06 19:56 - 2014-02-13 16:33 - 00000000 ____D () C:\Users\Marco\Desktop\Jannik 2014-02-06 19:18 - 2014-02-06 19:18 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\LibreOffice 2014-02-06 19:16 - 2014-02-06 19:16 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\OpenOffice.org 2014-02-06 17:02 - 2014-02-06 17:02 - 00001386 _____ () C:\Users\Marco\Desktop\iTunes - Verknüpfung.lnk 2014-02-06 16:41 - 2014-02-06 16:41 - 01755604 _____ () C:\Users\Marco\Desktop\1871270_683350511717566_7622_n.mp4 2014-02-05 20:35 - 2014-02-10 20:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-02-03 16:59 - 2014-02-03 16:59 - 00000000 ____D () C:\Users\Marco\Desktop\Feuerwehr 2014-02-03 14:41 - 2014-02-03 14:41 - 00001637 _____ () C:\Users\Marco\Desktop\TeamViewer 9.lnk 2014-02-02 16:49 - 2014-02-02 16:49 - 00001201 _____ () C:\Users\Marco\Desktop\Ressourcenmonitor.lnk 2014-01-31 16:03 - 2014-02-14 21:05 - 00000000 ____D () C:\ProgramData\EXEcheckker 2014-01-31 16:03 - 2014-01-31 16:03 - 00000306 __RSH () C:\ProgramData\ntuser.pol 2014-01-31 16:03 - 2014-01-31 16:03 - 00000000 ____D () C:\ProgramData\okdlfihameoodkafnckcnpfidcndgekh 2014-01-31 15:35 - 2014-01-31 15:35 - 00001956 _____ () C:\Users\Public\Desktop\avast! Premier.lnk 2014-01-31 15:28 - 2014-01-31 15:28 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Wichtiges 2014-01-31 15:15 - 2014-01-31 15:15 - 01884977 _____ () C:\Users\Marco\Desktop\1608083_186652868212024_888047451_n.mp4 2014-01-31 06:40 - 2014-01-31 06:40 - 01884977 _____ () C:\Users\Marco\Desktop\bus 2014-01-29 20:27 - 2014-02-14 21:05 - 00000000 ____D () C:\ProgramData\shoppnnDroop 2014-01-29 20:27 - 2014-02-14 21:05 - 00000000 ____D () C:\ProgramData\ApPtoU 2014-01-29 20:27 - 2014-02-13 21:12 - 00000000 ____D () C:\ProgramData\2ff1ddb567438de4 2014-01-29 20:27 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\hehonoiddkebnfobcdlakohjokfldcmh 2014-01-28 20:49 - 2014-01-28 20:49 - 15336718 _____ () C:\Users\Marco\Desktop\1055344_371045796370724_676684399_n.mp4 2014-01-27 17:24 - 2014-01-27 17:24 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-27 17:24 - 2014-01-27 17:24 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-27 17:21 - 2014-01-27 17:21 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-01-27 17:21 - 2014-01-27 17:21 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2014-01-27 17:11 - 2014-01-27 17:12 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-01-27 17:11 - 2014-01-27 17:12 - 00000000 ____D () C:\Program Files\iTunes 2014-01-27 17:11 - 2014-01-27 17:12 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-01-27 17:11 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files\iPod 2014-01-26 12:24 - 2014-01-26 12:25 - 04685821 _____ () C:\Users\Marco\Desktop\Berufscheck der kleinen Mia.wmv 2014-01-26 12:19 - 2014-01-26 12:21 - 04117893 _____ () C:\Users\Marco\Desktop\Poledancestange im Kinderzimmer.wmv 2014-01-25 17:19 - 2014-01-25 17:20 - 05973713 _____ () C:\Users\Marco\Desktop\Ein Müllmann rastet aus.wmv 2014-01-25 16:52 - 2014-01-25 16:52 - 00000000 ____D () C:\Program Files (x86)\DsNET Corp 2014-01-25 16:30 - 2014-01-25 16:30 - 29836541 _____ () C:\Users\Marco\Desktop\ROLLIN` SAFARI - what if animals were round_.mp4 2014-01-25 16:30 - 2014-01-25 16:30 - 00000000 ____D () C:\Users\Marco\dwhelper 2014-01-24 18:22 - 2014-01-24 18:23 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Sonstige 2014-01-19 22:39 - 2014-01-19 22:39 - 00000032 _____ () C:\Windows\Menu.INI 2014-01-19 19:05 - 2014-01-19 20:04 - 866302861 _____ () C:\Users\Marco\Dusty.zip ==================== One Month Modified Files and Folders ======= 2014-02-16 20:13 - 2014-02-12 14:26 - 00000000 ____D () C:\FRST 2014-02-16 20:11 - 2013-08-22 11:24 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002UA.job 2014-02-16 20:04 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-02-16 20:04 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-02-16 20:00 - 2010-11-05 22:37 - 01986251 _____ () C:\Windows\WindowsUpdate.log 2014-02-16 19:58 - 2010-11-06 07:28 - 00654852 _____ () C:\Windows\system32\perfh007.dat 2014-02-16 19:58 - 2010-11-06 07:28 - 00130434 _____ () C:\Windows\system32\perfc007.dat 2014-02-16 19:58 - 2009-07-14 06:13 - 01500358 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-02-16 19:56 - 2014-02-14 21:58 - 00000000 ____D () C:\ProgramData\boost_interprocess 2014-02-16 19:56 - 2011-01-17 16:11 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Skype 2014-02-16 19:55 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\FxsTmp 2014-02-16 19:54 - 2013-08-17 00:57 - 00000000 ___RD () C:\Users\Marco\Dropbox 2014-02-16 19:54 - 2013-08-17 00:55 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Dropbox 2014-02-16 19:54 - 2013-04-17 17:00 - 00000000 ___RD () C:\Users\Marco\Google Drive 2014-02-16 19:50 - 2011-02-04 19:36 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-02-16 19:50 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-02-16 19:49 - 2010-11-05 22:34 - 00760164 _____ () C:\Windows\PFRO.log 2014-02-16 19:49 - 2009-07-14 05:51 - 00310329 _____ () C:\Windows\setupact.log 2014-02-16 19:47 - 2011-01-17 15:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\SoftGrid Client 2014-02-16 19:43 - 2011-02-04 19:36 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-02-16 19:41 - 2012-11-15 20:12 - 00003958 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{604A8C80-AF97-4E6B-B718-0ADED238F7E3} 2014-02-16 19:32 - 2012-05-29 20:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-02-16 14:32 - 2013-11-20 14:18 - 00245892 _____ () C:\Windows\IE11_main.log 2014-02-16 00:48 - 2013-11-08 18:26 - 00000000 ____D () C:\Users\SERVER\Desktop\Intragart-Flyer 2014-02-16 00:08 - 2011-08-03 10:50 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Liteon 2014-02-15 22:24 - 2011-01-17 17:08 - 00000000 _____ () C:\Windows\system32\Drivers\lvuvc.hs 2014-02-15 18:53 - 2012-10-15 13:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-02-15 18:52 - 2012-07-10 15:26 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update 2014-02-15 14:06 - 2011-11-07 20:14 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\vlc 2014-02-15 11:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache 2014-02-15 09:47 - 2014-02-15 09:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-02-14 22:42 - 2012-01-24 14:55 - 04512256 ___SH () C:\Users\Marco\Desktop\Thumbs.db 2014-02-14 22:19 - 2013-08-22 11:24 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002Core.job 2014-02-14 22:18 - 2014-02-14 22:18 - 00027801 _____ () C:\Users\Marco\Desktop\JRT.txt 2014-02-14 22:08 - 2014-02-14 22:08 - 00000000 ____D () C:\Windows\ERUNT 2014-02-14 22:00 - 2014-02-14 22:00 - 00006470 _____ () C:\Users\Marco\Desktop\AdwCleaner[S0].zip 2014-02-14 22:00 - 2011-02-20 12:00 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software 2014-02-14 21:57 - 2014-02-14 21:57 - 00040704 _____ () C:\Users\Marco\Desktop\AdwCleaner[S0].txt 2014-02-14 21:52 - 2014-02-14 21:49 - 00000000 ____D () C:\AdwCleaner 2014-02-14 21:52 - 2011-08-14 22:51 - 00000000 ____D () C:\ProgramData\ICQ 2014-02-14 21:13 - 2014-02-14 21:13 - 00011404 _____ () C:\Users\Marco\Desktop\mbam-log-2014-02-14 (20-53-55).rar 2014-02-14 21:05 - 2014-02-13 21:11 - 00000000 ____D () C:\ProgramData\AppptoU 2014-02-14 21:05 - 2014-01-31 16:03 - 00000000 ____D () C:\ProgramData\EXEcheckker 2014-02-14 21:05 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\shoppnnDroop 2014-02-14 21:05 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\ApPtoU 2014-02-14 20:49 - 2014-02-14 20:49 - 00001117 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Malwarebytes 2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware 2014-02-14 16:59 - 2014-02-14 16:59 - 00005973 _____ () C:\Users\Marco\AppData\Local\recently-used.xbel 2014-02-14 16:59 - 2012-08-05 22:10 - 00000000 ____D () C:\Users\Marco\.gimp-2.8 2014-02-14 16:11 - 2012-06-05 11:02 - 00007667 _____ () C:\Users\Marco\AppData\Local\resmon.resmoncfg 2014-02-13 21:12 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\2ff1ddb567438de4 2014-02-13 21:11 - 2014-02-13 21:11 - 00000000 ____D () C:\Users\Marco\AppData\Local\Packages 2014-02-13 17:18 - 2014-02-13 17:18 - 00177913 _____ () C:\ComboFix.txt 2014-02-13 17:18 - 2014-02-13 16:36 - 00000000 ____D () C:\Qoobox 2014-02-13 17:18 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default 2014-02-13 17:17 - 2012-10-01 15:39 - 00000000 ___RD () C:\Users\Schule\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-02-13 17:17 - 2011-01-17 15:17 - 00000000 ___RD () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup 2014-02-13 17:16 - 2014-02-13 16:36 - 00000000 ____D () C:\Windows\erdnt 2014-02-13 17:10 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini 2014-02-13 17:07 - 2009-07-14 03:34 - 82575360 _____ () C:\Windows\system32\config\SOFTWARE.bak 2014-02-13 17:07 - 2009-07-14 03:34 - 27000832 _____ () C:\Windows\system32\config\SYSTEM.bak 2014-02-13 17:07 - 2009-07-14 03:34 - 14155776 _____ () C:\Windows\system32\config\DEFAULT.bak 2014-02-13 17:07 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak 2014-02-13 17:07 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\SAM.bak 2014-02-13 16:36 - 2013-09-29 15:08 - 00000000 ____D () C:\Users\Marco\AppData\Local\CrashDumps 2014-02-13 16:33 - 2014-02-06 19:56 - 00000000 ____D () C:\Users\Marco\Desktop\Jannik 2014-02-13 16:32 - 2014-02-13 16:32 - 05180679 ____R (Swearware) C:\Users\Marco\Desktop\ComboFix.exe 2014-02-12 16:08 - 2014-01-15 16:41 - 00000600 _____ () C:\Users\Marco\AppData\Local\PUTTY.RND 2014-02-12 14:33 - 2014-02-12 14:30 - 00040672 _____ () C:\Users\Marco\Desktop\Addition.txt 2014-02-12 14:33 - 2014-02-12 14:28 - 00069527 _____ () C:\Users\Marco\Desktop\FRST.txt 2014-02-10 23:09 - 2014-02-10 21:31 - 00000000 ____D () C:\Users\Marco\Desktop\Dusty 2014-02-10 22:27 - 2011-11-28 14:24 - 00000000 ____D () C:\Users\Marco\Tracing 2014-02-10 20:30 - 2014-02-05 20:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird 2014-02-10 15:49 - 2014-01-04 02:49 - 00003912 _____ () C:\Windows\system32\TeamViewer9_Hooks.log 2014-02-08 10:35 - 2014-02-08 10:35 - 00002968 _____ () C:\Windows\System32\Tasks\{65B6DA46-08F9-42DC-9D21-68ECB5FEEE0A} 2014-02-08 10:34 - 2014-02-08 10:34 - 00002970 _____ () C:\Windows\System32\Tasks\{CFC12328-BB91-45A7-A7C8-E057AD886176} 2014-02-08 10:08 - 2014-02-08 10:08 - 00002968 _____ () C:\Windows\System32\Tasks\{041F2130-E6FD-40C5-BBE9-52AFC0D96381} 2014-02-08 10:07 - 2014-02-08 10:07 - 00003186 _____ () C:\Windows\System32\Tasks\{29666182-CFDA-470B-A7D8-2515F863832A} 2014-02-07 23:57 - 2014-02-07 23:57 - 00002968 _____ () C:\Windows\System32\Tasks\{F3C812C3-7D7C-44A0-8952-6F379977FA97} 2014-02-07 23:51 - 2014-02-07 23:51 - 00002968 _____ () C:\Windows\System32\Tasks\{7BB0731C-19BC-41B6-A803-F42127F20CFD} 2014-02-07 23:45 - 2014-02-07 23:45 - 00002968 _____ () C:\Windows\System32\Tasks\{131E5AAD-9FED-42AE-9D92-C791A6FE5F3F} 2014-02-07 23:44 - 2014-02-07 23:44 - 00002968 _____ () C:\Windows\System32\Tasks\{D7F197EB-B937-43E7-AE7F-216C7702BE4B} 2014-02-07 23:43 - 2014-02-07 23:43 - 00002968 _____ () C:\Windows\System32\Tasks\{9E305CFD-F157-4A9F-992A-C12E920A12BA} 2014-02-07 23:37 - 2011-01-21 16:34 - 00000000 ____D () C:\Users\Marco\Spiele 2014-02-06 19:18 - 2014-02-06 19:18 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\LibreOffice 2014-02-06 19:16 - 2014-02-06 19:16 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\OpenOffice.org 2014-02-06 17:02 - 2014-02-06 17:02 - 00001386 _____ () C:\Users\Marco\Desktop\iTunes - Verknüpfung.lnk 2014-02-06 16:41 - 2014-02-06 16:41 - 01755604 _____ () C:\Users\Marco\Desktop\1871270_683350511717566_7622_n.mp4 2014-02-05 20:32 - 2012-05-29 20:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-02-05 20:32 - 2012-05-29 20:49 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-02-05 20:32 - 2012-05-29 20:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-02-05 14:36 - 2013-12-26 22:17 - 00000000 ____D () C:\Users\Besucher\AppData\Local\CrashDumps 2014-02-04 15:43 - 2011-01-17 15:16 - 00162544 _____ () C:\Users\Marco\AppData\Local\GDIPFONTCACHEV1.DAT 2014-02-03 16:59 - 2014-02-03 16:59 - 00000000 ____D () C:\Users\Marco\Desktop\Feuerwehr 2014-02-03 14:41 - 2014-02-03 14:41 - 00001637 _____ () C:\Users\Marco\Desktop\TeamViewer 9.lnk 2014-02-02 16:49 - 2014-02-02 16:49 - 00001201 _____ () C:\Users\Marco\Desktop\Ressourcenmonitor.lnk 2014-02-01 10:20 - 2014-02-15 09:39 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-02-01 10:19 - 2014-02-15 09:38 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-02-01 10:19 - 2014-02-15 09:38 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-02-01 10:18 - 2014-02-15 09:39 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-02-01 10:18 - 2014-02-15 09:39 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-02-01 10:18 - 2014-02-15 09:39 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-02-01 10:18 - 2014-02-15 09:39 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-02-01 10:18 - 2014-02-15 09:39 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-02-01 10:18 - 2014-02-15 09:38 - 19274240 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-02-01 10:18 - 2014-02-15 09:38 - 15403520 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-02-01 10:18 - 2014-02-15 09:38 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-02-01 10:18 - 2014-02-15 09:38 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-02-01 10:18 - 2014-02-15 09:38 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-02-01 10:18 - 2014-02-15 09:38 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-02-01 10:18 - 2014-02-15 09:38 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-02-01 08:58 - 2014-02-15 09:38 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-02-01 08:58 - 2014-02-15 09:38 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-02-01 08:57 - 2014-02-15 09:39 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-02-01 08:57 - 2014-02-15 09:39 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-02-01 08:57 - 2014-02-15 09:39 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-02-01 08:57 - 2014-02-15 09:39 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-02-01 08:57 - 2014-02-15 09:39 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-02-01 08:57 - 2014-02-15 09:39 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-02-01 08:57 - 2014-02-15 09:38 - 14359040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-02-01 08:57 - 2014-02-15 09:38 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-02-01 08:57 - 2014-02-15 09:38 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-02-01 08:57 - 2014-02-15 09:38 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-02-01 08:57 - 2014-02-15 09:38 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-02-01 08:57 - 2014-02-15 09:38 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-02-01 08:40 - 2014-02-15 09:39 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-02-01 08:34 - 2014-02-15 09:39 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-02-01 07:45 - 2014-02-15 09:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-02-01 07:38 - 2014-02-15 09:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-02-01 01:56 - 2013-12-02 21:16 - 00000000 ____D () C:\Users\SERVER\Desktop\Intragart 2014-02-01 01:26 - 2013-08-29 18:48 - 00162544 _____ () C:\Users\SERVER\AppData\Local\GDIPFONTCACHEV1.DAT 2014-01-31 16:03 - 2014-01-31 16:03 - 00000306 __RSH () C:\ProgramData\ntuser.pol 2014-01-31 16:03 - 2014-01-31 16:03 - 00000000 ____D () C:\ProgramData\okdlfihameoodkafnckcnpfidcndgekh 2014-01-31 16:03 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy 2014-01-31 16:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy 2014-01-31 15:53 - 2012-05-12 13:25 - 00001033 _____ () C:\Windows\wininit.ini 2014-01-31 15:52 - 2013-08-17 00:56 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox 2014-01-31 15:35 - 2014-01-31 15:35 - 00001956 _____ () C:\Users\Public\Desktop\avast! Premier.lnk 2014-01-31 15:32 - 2014-01-13 18:52 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys 2014-01-31 15:32 - 2013-03-21 13:53 - 00440672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys 2014-01-31 15:32 - 2011-07-21 08:15 - 01038072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2014-01-31 15:32 - 2011-07-21 08:15 - 00421704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2014-01-31 15:32 - 2011-07-21 08:15 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2014-01-31 15:32 - 2011-07-21 08:15 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2014-01-31 15:32 - 2011-07-21 08:14 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr 2014-01-31 15:28 - 2014-01-31 15:28 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Wichtiges 2014-01-31 15:15 - 2014-01-31 15:15 - 01884977 _____ () C:\Users\Marco\Desktop\1608083_186652868212024_888047451_n.mp4 2014-01-31 06:40 - 2014-01-31 06:40 - 01884977 _____ () C:\Users\Marco\Desktop\bus 2014-01-29 20:27 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\hehonoiddkebnfobcdlakohjokfldcmh 2014-01-28 20:49 - 2014-01-28 20:49 - 15336718 _____ () C:\Users\Marco\Desktop\1055344_371045796370724_676684399_n.mp4 2014-01-27 21:06 - 2013-07-06 09:23 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\.minecraft 2014-01-27 17:24 - 2014-01-27 17:24 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-01-27 17:24 - 2014-01-27 17:24 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-01-27 17:24 - 2013-11-15 15:52 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-01-27 17:24 - 2013-11-15 15:52 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-01-27 17:24 - 2013-11-15 15:52 - 00000000 ____D () C:\ProgramData\Oracle 2014-01-27 17:21 - 2014-01-27 17:21 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe 2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe 2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe 2014-01-27 17:21 - 2014-01-27 17:21 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2014-01-27 17:21 - 2013-07-11 19:36 - 00000000 ____D () C:\Program Files\Java 2014-01-27 17:15 - 2012-04-18 15:24 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2014-01-27 17:15 - 2012-04-18 15:23 - 00000000 ____D () C:\Program Files (x86)\WinRAR 2014-01-27 17:12 - 2014-01-27 17:11 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 2014-01-27 17:12 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files\iTunes 2014-01-27 17:12 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files (x86)\iTunes 2014-01-27 17:11 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files\iPod 2014-01-26 16:53 - 2011-02-12 21:31 - 01018368 ___SH () C:\Users\Marco\Thumbs.db 2014-01-26 12:25 - 2014-01-26 12:24 - 04685821 _____ () C:\Users\Marco\Desktop\Berufscheck der kleinen Mia.wmv 2014-01-26 12:21 - 2014-01-26 12:19 - 04117893 _____ () C:\Users\Marco\Desktop\Poledancestange im Kinderzimmer.wmv 2014-01-25 17:20 - 2014-01-25 17:19 - 05973713 _____ () C:\Users\Marco\Desktop\Ein Müllmann rastet aus.wmv 2014-01-25 16:52 - 2014-01-25 16:52 - 00000000 ____D () C:\Program Files (x86)\DsNET Corp 2014-01-25 16:47 - 2012-01-13 16:55 - 00000000 ____D () C:\ProgramData\Freemake 2014-01-25 16:46 - 2012-01-13 16:54 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake 2014-01-25 16:46 - 2012-01-13 16:54 - 00000000 ____D () C:\Program Files (x86)\Freemake 2014-01-25 16:30 - 2014-01-25 16:30 - 29836541 _____ () C:\Users\Marco\Desktop\ROLLIN` SAFARI - what if animals were round_.mp4 2014-01-25 16:30 - 2014-01-25 16:30 - 00000000 ____D () C:\Users\Marco\dwhelper 2014-01-25 16:30 - 2011-01-17 15:16 - 00000000 ___RD () C:\Users\Marco 2014-01-24 18:23 - 2014-01-24 18:22 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Sonstige 2014-01-22 16:35 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-01-20 04:55 - 2011-08-15 10:33 - 00000000 ____D () C:\Users\Marco\Dusty 2014-01-19 22:39 - 2014-01-19 22:39 - 00000032 _____ () C:\Windows\Menu.INI 2014-01-19 20:04 - 2014-01-19 19:05 - 866302861 _____ () C:\Users\Marco\Dusty.zip Files to move or delete: ==================== C:\Users\Marco\worldpainter_0.11.2.exe C:\Users\Marco\worldpainter_1.2.5.exe Some content of TEMP: ==================== C:\Users\Marco\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-02-08 14:42 ==================== End Of Log ============================ --- --- --- |
17.02.2014, 14:26 | #14 |
/// the machine /// TB-Ausbilder | 100% Pysikalischer Speicher durch svchost.exe Adobe updaten. Fertig Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu 100% Pysikalischer Speicher durch svchost.exe |
100%, arbeiten, auslastung, auslastung 100%, computer, einiger, erneut, folge, forum, gesuch, gesucht, hängt, maus, monitor, nicht mehr, problem, prozess, ressourcenmonitor, richtig, schaltet, secsvcs, speicher, spring, svchost.exe, täglich, virus, woche, wochen |