zu meinem Problem: ich habe eine Erweiterung für Chrome die ich nicht löschen kann, der Name ist AdBBlocknWatch 3.0 und ist laut Chrome "Durch Unternehmensrichtlinie installiert".


habe schon Chrome neu Installiert aber die Erweiterung ist trotzdem noch da hat jemand eine Idee, wie ich die Erweiterung weg bekomme?

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

• Starte jetzt FRST.
• Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
• Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
• Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

FRST.txt



FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-02-2014 01
Ran by Marvin (administrator) on MARVIN-PC on 12-02-2014 07:56:44
Running from C:\Users\Marvin\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Enigma Software Group USA, LLC.) C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\windows\system32\atiesrxx.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeSvc.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeSvc2.exe
(AMD) C:\windows\system32\atieclxx.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Ellora Assets Corp.) I:\Programme\converter\Freemake\CaptureLib\CaptureLibService.exe
(Intel Corporation) C:\windows\system32\IProsetMonitor.exe
(Lenovo) C:\Program Files\Lenovo\Power Dial\LenovoCOMSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeTray.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
() C:\windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtLED\RtLEDService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\windows\System32\alg.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Lenovo) C:\Program Files\Lenovo\Power Dial\LitModeSwitch.exe
(Saitek) C:\Program Files (x86)\Saitek\Software\ProfilerU.exe
(Saitek) C:\Program Files (x86)\Saitek\Software\SaiMfd.exe
(Lenovo) C:\Program Files\Lenovo\Power Dial\LitModeCtrl.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\netzmanager.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11786344 2011-03-28] (Realtek Semiconductor)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-11-19] (Intel Corporation)
HKLM-x32\...\Run: [ModeSwitch] - C:\Program Files\Lenovo\Power Dial\LitModeSwitch.exe [163840 2009-09-27] (Lenovo)
HKLM-x32\...\Run: [Malwarebytes' Anti-Malware] - I:\Programme\Schutz\Malwarebytes' Anti-Malware\mbamgui.exe [766536 2012-09-29] (Malwarebytes Corporation)
HKLM-x32\...\Run: [Profiler] - C:\Program Files (x86)\Saitek\Software\ProfilerU.exe [163840 2005-10-18] (Saitek)
HKLM-x32\...\Run: [SaiMfd] - C:\Program Files (x86)\Saitek\Software\SaiMfd.exe [179200 2005-11-03] (Saitek)
HKLM-x32\...\RunOnce: [B Register C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll] - "C:\windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll",DllRegisterServer [194432 2011-12-12] (DivX, LLC)
HKU\.DEFAULT\...\RunOnce: [SpUninstallDeleteDir] - rmdir /s /q "\SearchProtect"
HKU\S-1-5-21-3427846483-774009953-675166152-1001\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKU\S-1-5-21-3427846483-774009953-675166152-1001\...\Run: [BackgroundContainer] - "C:\windows\SysWOW64\Rundll32.exe" "C:\Users\Marvin\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun <===== ATTENTION
HKU\S-1-5-21-3427846483-774009953-675166152-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
AppInit_DLLs: C:\PROGRA~3\WebPlat\WEBPLA~1.DLL => C:\ProgramData\WebPlat\WebPlat_x64.dll [4420096 2014-01-01] ()
AppInit_DLLs-x32: c:\progra~3\webplat\webplat.dll => File Not Found
Startup: C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)
Startup: C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Registration IL-2 Sturmovik 1946.LNK
ShortcutTarget: Registration IL-2 Sturmovik 1946.LNK -> I:\Spiele\IL2 Sturmovik 1946\RegistrationReminder.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - c:\program files (x86)\internet explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://start.qone8.com/web/?type=ds&ts=1383328004&from=amt&uid=3219913727_67301_927BCE60&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://www.searchqu.com//web?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://www.searchqu.com//web?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms}
SearchScopes: HKCU - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
SearchScopes: HKCU - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {9920DB93-04BF-42FB-A70C-1863B14C8787} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = 
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU - No Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} -  No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Winsock: Catalog5 03 C:\windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 01 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 05 mswsock.dll File Not found () ATTENTION: The LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Winsock: Catalog9-x64 04 mswsock.dll File Not found ()
Winsock: Catalog9-x64 05 mswsock.dll File Not found ()
Winsock: Catalog9-x64 06 mswsock.dll File Not found ()
Winsock: Catalog9-x64 07 mswsock.dll File Not found ()
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.3.1 192.168.3.1
Tcpip\..\Interfaces\{0531FEB8-0486-4F57-A855-511C862B50B0}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1

FireFox:
========
FF ProfilePath: C:\Users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default
FF NewTab: about:blank
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: about:blank
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3317483&SearchSource=2&CUI=UN21789345815038290&UM=2&sspv=S41A&q=
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.4.1 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.4.1 - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.0 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=0.80.0 - C:\Program Files (x86)\Battlelog Web Plugins\0.80.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - I:\Programme\Editoren\Picasa\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @protectdisc.com/NPPDLicenseHelper - C:\Program Files (x86)\ProtectDisc\License Helper\NPPDLicenseHelper.dll ()
FF Plugin-x32: @real.com/nppl3260;version=16.0.0.282 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.0.282 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPPDLicenseHelper.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll (RealPlayer)
FF SearchPlugin: C:\Users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default\searchplugins\delta.xml
FF Extension: HHaPpYa22Save - C:\Users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default\Extensions\aoea.ntkq@sh-ey.org [2014-01-01]
FF Extension: DiScOuenntExtensii - C:\Users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default\Extensions\fk-ce@ijfkl.org [2014-01-01]
FF Extension: No Name - C:\Users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default\Extensions\staged [2013-12-31]
FF HKLM-x32\...\Firefox\Extensions: [{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}] - I:\Programme\Adobe CS5\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
FF Extension: Adobe Contribute Toolbar - I:\Programme\Adobe CS5\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9} [2011-05-10]
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-01-19]
FF HKLM-x32\...\Firefox\Extensions: [{34712C68-7391-4c47-94F3-8F88D49AD632}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
FF HKLM-x32\...\Firefox\Extensions: [fmdownloader@gmail.com] - I:\Programme\Internet\Downloader\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\
FF Extension: Freemake Video Downloader Plugin - I:\Programme\Internet\Downloader\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\ []
FF HKLM-x32\...\Firefox\Extensions: [ytfmdownloader@gmail.com] - I:\Programme\Internet\Downloader\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\
FF Extension: Freemake Youtube Download Button - I:\Programme\Internet\Downloader\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\ []
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-01-29]

Chrome: 
=======
CHR HomePage: about:blank
CHR DefaultSearchKeyword: google
CHR DefaultSearchURL: hxxp://www.google.com/search?q={searchTerms}
CHR DefaultNewTabURL: 
CHR Extension: (Google Docs) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-11]
CHR Extension: (Google Drive) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-11]
CHR Extension: (YouTube) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-11]
CHR Extension: (Google-Suche) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-11]
CHR Extension: (AdBBlocknWatch) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikflhiiejehmjgppokkcoiebajjogcaj [2014-02-11]
CHR Extension: (AntiGameOrigin) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldbahlcmhmlpomdepooifmhnalokdhgm [2014-02-11]
CHR Extension: (Google Wallet) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-11]
CHR Extension: (Google Mail) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-11]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Marvin\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-05-04]
CHR HKCU\...\Chrome\Extension: [ioighjflakajniehlakelhkdfljfemcd] - C:\Users\Marvin\AppData\Local\CRE\ioighjflakajniehlakelhkdfljfemcd.crx [2013-12-24]
CHR HKLM-x32\...\Chrome\Extension: [ioighjflakajniehlakelhkdfljfemcd] - C:\Users\Marvin\AppData\Local\CRE\ioighjflakajniehlakelhkdfljfemcd.crx [2013-12-24]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

S2 976137e5; C:\ProgramData\WebPlat\WebPlatSvc.dll [180560 2014-01-01] ()
S2 AxAutoMntSrv; I:\Programme\hack\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
S4 CEEBC40A-FDED-4C59-B354-939132350B01; C:\Program Files (x86)\Roxio\BackOnTrack\File Backup\FileBackupSVC.exe [96752 2009-10-12] ()
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [103936 2013-12-12] (Freemake)
R2 FreemakeVideoCapture; I:\Programme\converter\Freemake\CaptureLib\CaptureLibService.exe [9216 2013-07-31] (Ellora Assets Corp.)
S4 Hamachi2Svc; I:\Programme\Internet\Hamachi\hamachi-2.exe [2470736 2013-06-28] (LogMeIn Inc.)
R2 iSafeService; C:\Program Files (x86)\iSafe\iSafeSvc.exe [491688 2013-12-30] (Elex do Brasil Participações Ltda)
R2 LenovoCOMSvc; C:\Program Files\Lenovo\Power Dial\LenovoCOMSvc.exe [49152 2009-09-30] (Lenovo)
R3 LitModeCtrl; C:\Program Files\Lenovo\Power Dial\LitModeCtrl.exe [81920 2009-09-27] (Lenovo)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
S3 nl_license_manager; I:\Programme\Editoren\RealFlow 2013\License Manager\nl_license_manager.exe [167936 2013-07-27] ()
R2 PnkBstrA; C:\windows\SysWOW64\PnkBstrA.exe [76888 2013-08-31] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [38608 2012-11-29] ()
R2 RtLedService; C:\Program Files\Realtek\RtLED\RtLEDService.exe [311296 2010-02-05] (Realtek Semiconductor Corp.)
R2 SpyHunter 4 Service; C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe [770432 2013-06-27] (Enigma Software Group USA, LLC.)
S3 StarWindServiceAE; I:\Programme\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software)
S4 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S2 SystemStore; No ImagePath

==================== Drivers (Whitelisted) ====================

R0 amdkmafd; C:\Windows\System32\DRIVERS\amdkmafd.sys [21160 2013-07-28] (Advanced Micro Devices, Inc.)
R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [35936 2013-07-26] (Advanced Micro Devices, Inc.)
S3 ApfiltrService; No ImagePath
R3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare)
S3 ArgusMonitor; C:\Windows\SysWow64\drivers\ArgusMonitor.sys [55968 2011-07-04] (Argotronic UG (haftungsbeschraenkt))
S3 catchme; No ImagePath
S3 EsgScanner; C:\Windows\SysWOW64\DRIVERS\EsgScanner.sys [19984 2012-06-22] ()
R3 FIXUSTOR; C:\Windows\System32\DRIVERS\fixustor.sys [13696 2013-07-26] (GenesysLogic)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-11-19] (Intel Corporation)
R3 iSafeKrnl; C:\Program Files (x86)\iSafe\iSafeKrnl.sys [219648 2013-12-30] (Elex do Brasil Participações Ltda)
R1 iSafeNetFilter; C:\Program Files (x86)\iSafe\iSafeNetFilter.sys [44032 2013-12-30] (Elex do Brasil Participações Ltda)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
R3 pmkbdfltr; C:\Windows\System32\DRIVERS\pmkbdfltr.sys [18832 2012-10-30] (PenMount)
S3 pmserenum; C:\Windows\System32\DRIVERS\pmserenum.sys [37272 2012-10-30] (PenMount)
S3 RTHDMIAzAudService; No ImagePath
S3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation                           )
S3 SaiH075C; C:\Windows\System32\DRIVERS\SaiH075C.sys [326784 2006-07-27] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [16000 2013-07-26] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [41216 2013-07-26] (Saitek)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33008 2013-07-26] (Synaptics Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2012-11-12] (Duplex Secure Ltd.)
R3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R2 WinI2C-DDC; C:\windows\system32\drivers\DDCDrv.sys [20832 2008-04-08] (Nicomsoft Ltd.)
R2 WinI2C-DDC; C:\windows\SysWOW64\drivers\DDCDrv.sys [16200 2009-03-02] (Nicomsoft Ltd.)
U3 a1fn5u4h; C:\Windows\System32\Drivers\a1fn5u4h.sys [0 ] (Intel Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-12 07:56 - 2014-02-12 07:57 - 00025696 _____ () C:\Users\Marvin\Desktop\FRST.txt
2014-02-12 07:56 - 2014-02-12 07:56 - 02151424 _____ (Farbar) C:\Users\Marvin\Desktop\FRST64.exe
2014-02-12 07:56 - 2014-02-12 07:56 - 00000000 ____D () C:\FRST
2014-02-11 20:27 - 2014-02-11 20:27 - 00000320 _____ () C:\windows\PFRO.log
2014-02-11 19:11 - 2014-02-11 19:11 - 00002247 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-11 19:08 - 2014-02-11 22:22 - 00000202 _____ () C:\windows\setupact.log
2014-02-11 19:08 - 2014-02-11 19:08 - 00000000 _____ () C:\windows\setuperr.log
2014-02-11 19:03 - 2014-02-11 19:04 - 00200146 _____ () C:\Users\Marvin\Documents\cc_20140211_190346.reg
2014-02-11 18:56 - 2014-02-11 18:56 - 00002774 _____ () C:\windows\System32\Tasks\CCleanerSkipUAC
2014-02-11 18:56 - 2014-02-11 18:56 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-11 18:56 - 2014-02-11 18:56 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-11 18:53 - 2014-02-11 18:54 - 00614792 _____ (Chip Digital GmbH) C:\Users\Marvin\Downloads\CCleaner - CHIP-Downloader.exe
2014-02-11 16:36 - 2014-02-11 16:40 - 00000000 ____D () C:\AdwCleaner
2014-02-07 00:24 - 2014-02-07 00:24 - 00000000 ____D () C:\Program Files (x86)\AdBBlocknWatch
2014-02-05 05:34 - 2014-02-05 05:34 - 05556104 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe
2014-01-30 22:51 - 2014-02-11 16:42 - 00000000 ____D () C:\ProgramData\AdBBlocknWatch
2014-01-30 22:51 - 2014-01-30 22:51 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-30 22:51 - 2014-01-30 22:51 - 00000000 ____D () C:\ProgramData\ikflhiiejehmjgppokkcoiebajjogcaj
2014-01-28 17:43 - 2014-01-28 17:43 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\driver
2014-01-28 17:41 - 2014-01-28 17:42 - 00624408 _____ (LiveSoftAction) C:\Users\Marvin\Downloads\PHILIPS PTA317 driver provided through lukasdrivers.de.exe
2014-01-25 15:26 - 2014-01-25 15:26 - 00000997 _____ () C:\Users\Marvin\Desktop\RealFlow Job Manager.lnk
2014-01-25 15:26 - 2014-01-25 15:26 - 00000988 _____ () C:\Users\Marvin\Desktop\RealFlow Job Node.lnk
2014-01-25 14:44 - 2014-01-25 14:44 - 00000000 ____D () C:\Users\Marvin\graphs
2014-01-25 14:40 - 2014-01-25 14:40 - 00000806 _____ () C:\Users\Marvin\Desktop\RealFlow 2013.lnk
2014-01-25 14:38 - 2014-01-25 14:38 - 00000000 ____D () C:\Users\Marvin\Downloads\Realflow2013
2014-01-25 14:02 - 2014-01-25 14:38 - 110100480 _____ () C:\Users\Marvin\Downloads\Realflow.part1.rar
2014-01-25 14:00 - 2014-01-25 14:36 - 110100480 _____ () C:\Users\Marvin\Downloads\Realflow.part2.rar
2014-01-25 13:50 - 2014-01-25 14:06 - 70076968 _____ () C:\Users\Marvin\Downloads\Realflow.part3.rar
2014-01-25 13:47 - 2014-01-25 13:47 - 00001456 _____ () C:\Users\Marvin\Downloads\Realflow2013Upl-f9cklymmdp1x.dlc
2014-01-25 13:44 - 2014-01-25 13:44 - 00002904 _____ () C:\Users\Marvin\Downloads\relink.us_31a35accc7524e07065d1ff04234c2.dlc
2014-01-23 18:35 - 2014-01-23 19:08 - 00052170 _____ () C:\windows\RFC4DPluginUninstall.exe
2014-01-22 23:11 - 2014-01-22 23:11 - 00378412 _____ () C:\Users\Marvin\Downloads\Kollisionszerlegung (1).c4d
2014-01-22 22:41 - 2014-01-22 23:47 - 00000000 ____D () C:\Users\Marvin\Downloads\backup
2014-01-22 22:39 - 2014-01-22 22:39 - 00378412 _____ () C:\Users\Marvin\Downloads\Kollisionszerlegung.c4d
2014-01-22 20:46 - 2014-01-22 20:46 - 00466390 _____ () C:\Users\Marvin\Downloads\Thrausi.c4d.zip
2014-01-20 20:47 - 2014-01-20 20:59 - 00000000 ____D () C:\Users\Marvin\Desktop\a1a
2014-01-20 20:43 - 2014-01-20 20:43 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-01-20 20:41 - 2014-01-20 20:41 - 00000000 ____D () C:\windows\System32\Tasks\Apple
2014-01-20 20:41 - 2014-01-20 20:41 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-01-19 23:49 - 2014-01-20 20:44 - 42815752 _____ () C:\Users\Marvin\Desktop\IMGP3517.AVI
2014-01-15 18:09 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2014-01-15 18:09 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2014-01-15 18:09 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2014-01-15 18:09 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2014-01-15 18:09 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2014-01-15 18:09 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys
2014-01-15 18:09 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2014-01-15 18:09 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\windows\system32\Drivers\netio.sys
2014-01-15 18:09 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-01-13 00:04 - 2014-01-13 18:50 - 1080758272 _____ () C:\Users\Marvin\Documents\test2.avi

==================== One Month Modified Files and Folders =======

2014-02-12 07:57 - 2014-02-12 07:56 - 00025696 _____ () C:\Users\Marvin\Desktop\FRST.txt
2014-02-12 07:56 - 2014-02-12 07:56 - 02151424 _____ (Farbar) C:\Users\Marvin\Desktop\FRST64.exe
2014-02-12 07:56 - 2014-02-12 07:56 - 00000000 ____D () C:\FRST
2014-02-12 07:41 - 2014-01-07 11:50 - 00000000 ____D () C:\Program Files (x86)\iSafe
2014-02-12 07:39 - 2013-12-24 12:42 - 00000436 _____ () C:\windows\system32\Drivers\etc\hosts.ics
2014-02-12 07:39 - 2010-09-24 15:29 - 01607397 _____ () C:\windows\WindowsUpdate.log
2014-02-12 07:39 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\NDF
2014-02-12 07:34 - 2012-08-04 20:48 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-02-12 07:04 - 2012-12-02 20:09 - 00001110 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-11 22:22 - 2014-02-11 19:08 - 00000202 _____ () C:\windows\setupact.log
2014-02-11 20:35 - 2009-07-14 05:45 - 00017136 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-11 20:35 - 2009-07-14 05:45 - 00017136 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-11 20:28 - 2013-12-19 20:16 - 00003234 _____ () C:\windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3427846483-774009953-675166152-1001
2014-02-11 20:27 - 2014-02-11 20:27 - 00000320 _____ () C:\windows\PFRO.log
2014-02-11 20:27 - 2013-12-31 15:04 - 00000358 ____H () C:\windows\Tasks\couponsupport-S-649636217.job
2014-02-11 20:27 - 2013-12-19 20:16 - 00003366 _____ () C:\windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3427846483-774009953-675166152-1001
2014-02-11 20:27 - 2012-12-02 20:09 - 00001106 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-11 20:27 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-02-11 19:11 - 2014-02-11 19:11 - 00002247 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-11 19:11 - 2012-03-12 21:39 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-11 19:11 - 2011-07-10 12:53 - 00000000 ____D () C:\Users\Marvin\AppData\Local\Google
2014-02-11 19:09 - 2013-08-23 18:37 - 00240640 ___SH () C:\Users\Marvin\Desktop\Thumbs.db
2014-02-11 19:08 - 2014-02-11 19:08 - 00000000 _____ () C:\windows\setuperr.log
2014-02-11 19:07 - 2014-01-07 11:50 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\iSafe
2014-02-11 19:04 - 2014-02-11 19:03 - 00200146 _____ () C:\Users\Marvin\Documents\cc_20140211_190346.reg
2014-02-11 18:59 - 2013-08-06 01:05 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\Free Download Manager
2014-02-11 18:59 - 2012-09-24 17:30 - 00000000 ____D () C:\Users\Marvin\AppData\Local\CrashDumps
2014-02-11 18:59 - 2012-03-04 14:56 - 00000000 ____D () C:\Users\Marvin\AppData\Local\LogMeIn Hamachi
2014-02-11 18:59 - 2011-11-25 16:20 - 00000000 ____D () C:\windows\Minidump
2014-02-11 18:59 - 2011-06-12 19:13 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\uTorrent
2014-02-11 18:59 - 2009-07-26 03:01 - 00000000 ____D () C:\windows\Panther
2014-02-11 18:56 - 2014-02-11 18:56 - 00002774 _____ () C:\windows\System32\Tasks\CCleanerSkipUAC
2014-02-11 18:56 - 2014-02-11 18:56 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-11 18:56 - 2014-02-11 18:56 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-11 18:54 - 2014-02-11 18:53 - 00614792 _____ (Chip Digital GmbH) C:\Users\Marvin\Downloads\CCleaner - CHIP-Downloader.exe
2014-02-11 18:00 - 2009-09-14 07:03 - 00781022 _____ () C:\windows\system32\perfh007.dat
2014-02-11 18:00 - 2009-09-14 07:03 - 00183930 _____ () C:\windows\system32\perfc007.dat
2014-02-11 18:00 - 2009-07-14 06:13 - 01836588 _____ () C:\windows\system32\PerfStringBackup.INI
2014-02-11 17:54 - 2014-01-01 02:20 - 00000000 ____D () C:\ProgramData\WebPlat
2014-02-11 17:43 - 2013-12-31 15:04 - 00000000 ____D () C:\Support
2014-02-11 17:17 - 2014-01-07 11:51 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\eCyber
2014-02-11 16:59 - 2012-12-02 20:09 - 00004106 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-11 16:59 - 2012-12-02 20:09 - 00003854 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-11 16:59 - 2011-07-10 12:52 - 00000000 ____D () C:\Users\Marvin\AppData\Local\Deployment
2014-02-11 16:58 - 2011-07-10 12:52 - 00000000 ____D () C:\Users\Marvin\AppData\Local\Apps\2.0
2014-02-11 16:42 - 2014-01-30 22:51 - 00000000 ____D () C:\ProgramData\AdBBlocknWatch
2014-02-11 16:40 - 2014-02-11 16:36 - 00000000 ____D () C:\AdwCleaner
2014-02-09 23:10 - 2013-06-04 18:36 - 00042496 _____ () C:\Users\Marvin\Documents\Ausgaben schlangen.xls
2014-02-08 20:12 - 2013-04-13 19:51 - 00000227 _____ () C:\Users\Marvin\Desktop\batwait1.cmd
2014-02-07 00:24 - 2014-02-07 00:24 - 00000000 ____D () C:\Program Files (x86)\AdBBlocknWatch
2014-02-07 00:24 - 2013-12-31 15:04 - 00000000 ____D () C:\ProgramData\f8417f2f4a758cdb
2014-02-05 05:34 - 2014-02-05 05:34 - 05556104 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe
2014-02-05 05:34 - 2012-08-04 20:48 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-02-05 05:34 - 2012-08-04 20:48 - 00003822 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-02-05 05:34 - 2011-11-22 19:33 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-30 22:51 - 2014-01-30 22:51 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-30 22:51 - 2014-01-30 22:51 - 00000000 ____D () C:\ProgramData\ikflhiiejehmjgppokkcoiebajjogcaj
2014-01-30 22:51 - 2009-07-14 04:20 - 00000000 ___HD () C:\windows\system32\GroupPolicy
2014-01-30 22:51 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\SysWOW64\GroupPolicy
2014-01-28 17:43 - 2014-01-28 17:43 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\driver
2014-01-28 17:42 - 2014-01-28 17:41 - 00624408 _____ (LiveSoftAction) C:\Users\Marvin\Downloads\PHILIPS PTA317 driver provided through lukasdrivers.de.exe
2014-01-27 15:33 - 2012-12-02 20:12 - 00000000 ___RD () C:\Users\Marvin\Google Drive
2014-01-25 15:26 - 2014-01-25 15:26 - 00000997 _____ () C:\Users\Marvin\Desktop\RealFlow Job Manager.lnk
2014-01-25 15:26 - 2014-01-25 15:26 - 00000988 _____ () C:\Users\Marvin\Desktop\RealFlow Job Node.lnk
2014-01-25 15:26 - 2011-06-25 16:33 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Next Limit
2014-01-25 14:46 - 2011-06-25 16:41 - 00000000 ____D () C:\Users\Marvin\scenes
2014-01-25 14:44 - 2014-01-25 14:44 - 00000000 ____D () C:\Users\Marvin\graphs
2014-01-25 14:44 - 2011-06-25 16:41 - 00000000 ____D () C:\Users\Marvin\AppData\Local\Next Limit
2014-01-25 14:44 - 2011-05-09 20:02 - 00000000 ____D () C:\Users\Marvin
2014-01-25 14:40 - 2014-01-25 14:40 - 00000806 _____ () C:\Users\Marvin\Desktop\RealFlow 2013.lnk
2014-01-25 14:38 - 2014-01-25 14:38 - 00000000 ____D () C:\Users\Marvin\Downloads\Realflow2013
2014-01-25 14:38 - 2014-01-25 14:02 - 110100480 _____ () C:\Users\Marvin\Downloads\Realflow.part1.rar
2014-01-25 14:36 - 2014-01-25 14:00 - 110100480 _____ () C:\Users\Marvin\Downloads\Realflow.part2.rar
2014-01-25 14:06 - 2014-01-25 13:50 - 70076968 _____ () C:\Users\Marvin\Downloads\Realflow.part3.rar
2014-01-25 13:47 - 2014-01-25 13:47 - 00001456 _____ () C:\Users\Marvin\Downloads\Realflow2013Upl-f9cklymmdp1x.dlc
2014-01-25 13:44 - 2014-01-25 13:44 - 00002904 _____ () C:\Users\Marvin\Downloads\relink.us_31a35accc7524e07065d1ff04234c2.dlc
2014-01-23 19:18 - 2013-03-30 14:27 - 00836608 ___SH () C:\Users\Marvin\Downloads\Thumbs.db
2014-01-23 19:08 - 2014-01-23 18:35 - 00052170 _____ () C:\windows\RFC4DPluginUninstall.exe
2014-01-22 23:47 - 2014-01-22 22:41 - 00000000 ____D () C:\Users\Marvin\Downloads\backup
2014-01-22 23:11 - 2014-01-22 23:11 - 00378412 _____ () C:\Users\Marvin\Downloads\Kollisionszerlegung (1).c4d
2014-01-22 22:39 - 2014-01-22 22:39 - 00378412 _____ () C:\Users\Marvin\Downloads\Kollisionszerlegung.c4d
2014-01-22 20:46 - 2014-01-22 20:46 - 00466390 _____ () C:\Users\Marvin\Downloads\Thrausi.c4d.zip
2014-01-20 20:59 - 2014-01-20 20:47 - 00000000 ____D () C:\Users\Marvin\Desktop\a1a
2014-01-20 20:44 - 2014-01-19 23:49 - 42815752 _____ () C:\Users\Marvin\Desktop\IMGP3517.AVI
2014-01-20 20:43 - 2014-01-20 20:43 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-01-20 20:43 - 2011-05-09 20:05 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\Adobe
2014-01-20 20:41 - 2014-01-20 20:41 - 00000000 ____D () C:\windows\System32\Tasks\Apple
2014-01-20 20:41 - 2014-01-20 20:41 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-01-19 08:33 - 2011-05-09 22:56 - 00270496 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-01-18 11:15 - 2009-07-14 05:45 - 04950072 _____ () C:\windows\system32\FNTCACHE.DAT
2014-01-18 11:05 - 2009-07-14 03:34 - 00000499 _____ () C:\windows\win.ini
2014-01-18 11:04 - 2013-07-13 02:02 - 00000000 ____D () C:\windows\system32\MRT
2014-01-18 11:00 - 2011-08-26 20:38 - 86054176 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-01-13 19:00 - 2013-09-04 23:01 - 00041984 ___SH () C:\Users\Marvin\Documents\Thumbs.db
2014-01-13 18:50 - 2014-01-13 00:04 - 1080758272 _____ () C:\Users\Marvin\Documents\test2.avi

ZeroAccess:
C:\Users\Marvin\AppData\Local\8cfd349e
C:\Users\Marvin\AppData\Local\8cfd349e\@
C:\Users\Marvin\AppData\Local\8cfd349e\loader.tlb

Files to move or delete:
====================
C:\ProgramData\flashax10.exe


Some content of TEMP:
====================
C:\Users\Marvin\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-08 00:38

==================== End Of Log ============================
         

--- --- ---

--- --- ---






Addition.txt

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-02-2014 01
Ran by Marvin at 2014-02-12 07:57:46
Running from C:\Users\Marvin\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Microsoft Security Essentials (Disabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Disabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

==================== Installed Programs ======================

µTorrent (x32 Version: 3.1.3 - )
Adobe AIR (x32 Version: 1.5.3.9120 - Adobe Systems Inc.)
Adobe AIR (x32 Version: 1.5.3.9120 - Adobe Systems Inc.) Hidden
Adobe Community Help (x32 Version: 3.0.0 - Adobe Systems Incorporated) Hidden
Adobe Community Help (x32 Version: 3.0.0.400 - Adobe Systems Incorporated)
Adobe Creative Suite 5 Master Collection (x32 Version: 5.0 - Adobe Systems Incorporated)
Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Media Player (x32 Version: 1.8 - Adobe Systems Incorporated)
Adobe Media Player (x32 Version: 1.8 - Adobe Systems Incorporated) Hidden
Adobe Reader X (10.1.0) - Deutsch (x32 Version: 10.1.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.6 (x32 Version: 11.6.7.637 - Adobe Systems, Inc)
Age of Empire 2 HD Edition GERMAN (c) Microsoft version 1 (x32 Version: 1 - )
Allgemeine Runtime Files (x86) (Version: 1.0.3.5 - Sereby Corporation)
AMD Accelerated Video Transcoding (Version: 12.5.100.20928 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (Version: 10.0.1016.4 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (Version: 8.0.891.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (Version: 1.0.70928.1539 - Advanced Micro Devices, Inc.) Hidden
ANNO 2070 (x32 Version: 1.0.0.0 - Ubisoft)
Apple Application Support (x32 Version: 2.3.4 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
ArgusMonitor (x32 Version:  - )
ARMA 2 REINFORCEMENTS Uninstall (x32 Version:  - )
Ashampoo ClipFinder HD v.2.3.5 (x32 Version: 2.3.5 - Ashampoo GmbH & Co. KG)
AutoIt v3.3.6.1 (x32 Version:  - AutoIt Team)
Battlefield Mod Development Toolkit 2.0 Beta (x32 Version:  - )
Battlelog Web Plugins (x32 Version: 0.80.0 - EA Digital Illusions CE AB)
Blender (Version: 2.58-release - Blender Foundation)
Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.00.0000 - Activision) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) (x32 Version: 1.7 - Activision)
Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch (x32 Version:  - ) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.4 Patch (x32 Version: 1.4 - Activision) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32 Version:  - ) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32 Version: 1.6 - Activision) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version:  - ) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version: 1.7 - Activision) Hidden
Call of Duty: Black Ops (x32 Version:  - )
Camtasia Studio 7 (x32 Version: 7.1.0 - TechSmith Corporation)
Camtasia Studio 8 (x32 Version: 8.0.2.964 - TechSmith Corporation)
Captcha Brotherhood (x32 Version: 1.1.9 - Brotherhood Software)
Catalyst Control Center - Branding (x32 Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center (x32 Version: 2012.0928.1532.26058 - Ihr Firmenname) Hidden
Catalyst Control Center Graphics Previews Common (x32 Version: 2012.0928.1532.26058 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2009.1006.2226.38455 - ATI Technologies, Inc.) Hidden
Catalyst Control Center InstallProxy (x32 Version: 2012.0928.1532.26058 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Localization All (x32 Version: 2012.0928.1532.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Standard (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Chinese Traditional (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Czech (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Danish (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Dutch (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help English (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Finnish (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help French (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help German (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Greek (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Hungarian (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Italian (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Japanese (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Korean (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Norwegian (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Polish (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Portuguese (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Russian (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Spanish (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Swedish (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Thai (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
CCC Help Turkish (x32 Version: 2012.0928.1531.26058 - Advanced Micro Devices, Inc.) Hidden
ccc-utility64 (Version: 2012.0928.1532.26058 - Advanced Micro Devices, Inc.) Hidden
CCleaner (Version: 4.10 - Piriform)
Cheat Engine 6.1 (x32 Version:  - Dark Byte)
CINEMA 4D 14.042 (Version: 14.042 - MAXON Computer GmbH)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DBS Walk And Follow (x32 Version:  - )
DCS World (Version: 1.2.2.7122 - )
DCXtended .9 (x32 Version:  - )
DesertCombat  0.7 (x32 Version:  - )
Direct Stream Recorder (remove only) (x32 Version:  - )
DivX-Setup (x32 Version: 2.6.1.5 - DivX, LLC)
Driver Genius Professional Edition (x32 Version: 11.0 - Driver-Soft Inc.)
ESN Sonar (x32 Version: 0.70.0 - ESN Social Software AB)
eSupport UndeletePlus 3.0.2.830 (x32 Version:  - Copyright © 2011 eSupport.com • All Rights Reserved)
FileZilla Client 3.7.0.2 (HKCU Version: 3.7.0.2 - FileZilla Project)
Flight Simulator X (x32 Version:  - )
Flight Simulator X Service Pack 1 (x32 Version:  - )
FMS (x32 Version:  - )
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Fraps (remove only) (x32 Version:  - )
Free Download Manager 3.9.2 (x32 Version:  - FreeDownloadManager.ORG)
Free Mp3 Wma Converter V 2.0 (x32 Version: 2.0.0.0 - Koyote Soft)
Free YouTube Download version 3.2.2.430 (x32 Version: 3.2.2.430 - DVDVideoSoft Ltd.)
Freemake Video Converter Version 4.0.3 (x32 Version: 4.0.3 - Ellora Assets Corporation)
Freemake Video Downloader (x32 Version: 3.6.2 - Ellora Assets Corporation)
Genesys USB Mass Storage Device (x32 Version: 1.0.0.0 - Genesys Logic)
Google Chrome (x32 Version: 32.0.1700.107 - Google Inc.)
Google Drive (x32 Version: 1.13.5782.599 - Google, Inc.)
Google Earth (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.5 - Google Inc.) Hidden
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Grand Theft Auto IV (x32 Version: 1.00.0000 - Rockstar Games)
Harry Potter und die Heiligtümer des Todes(TM) - Teil 2 (x32 Version: 1.0.0.0 - Electronic Arts)
Homeworld (x32 Version:  - )
Homeworld Cataclysm (x32 Version:  - )
Homeworld2 (x32 Version:  - Sierra)
HyperLobby client (x32 Version: 4.3.2 - Jiri Fojtasek)
IL-2 Sturmovik 1946 (x32 Version: 1.00.0000 - Ihr Firmenname)
IL-2 Sturmovik 1946 (x32 Version: 1.00.0000 - Ihr Firmenname) Hidden
IL2-JoyControl (x32 Version:  - )
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Network Connections 17.4.95.0 (Version: 17.4.95.0 - Intel)
Intel(R) Network Connections 17.4.95.0 (Version: 17.4.95.0 - Intel) Hidden
Intel(R) Rapid Storage Technology (x32 Version: 11.7.0.1013 - Intel Corporation)
IvAp v1.9.8 (build 2138) (x32 Version:  - IVAO)
Java 7 Update 21 (x32 Version: 7.0.210 - Oracle)
Java 7 Update 25 (x32 Version: 7.0.250 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.5 - Sun Microsystems, Inc.) Hidden
Java SE Development Kit 7 Update 4 (64-bit) (Version: 1.7.0.40 - Oracle)
Java(TM) 6 Update 25 (64-bit) (Version: 6.0.250 - Oracle)
Java(TM) 6 Update 25 (x32 Version: 6.0.250 - Oracle)
Java(TM) 7 Update 4 (64-bit) (Version: 7.0.40 - Oracle)
JavaFX 2.1.0 (64-bit) (Version: 2.1.0 - Oracle Corporation)
JavaFX 2.1.0 SDK (64-bit) (Version: 2.1.0 - Oracle Corporation)
JDownloader 0.9 (x32 Version: 0.9 - AppWork GmbH)
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Lenovo Healthcare Software (x32 Version: 3.0.0.090928 - Lenovo)
Lenovo Power2Go (x32 Version: 6.0.3321a3 - CyberLink Corp.)
Lenovo Power2Go (x32 Version: 6.0.3321a3 - CyberLink Corp.) Hidden
Lenovo Rescue System (Version: 3.0.0827 - CyberLink Corp.) Hidden
Lenovo Rescue System (x32 Version: 3.0.0827 - CyberLink Corp.)
Lenovo Treiber- und Anwendungsinstallation (x32 Version: 5.1.0.1119 - Lenovo)
License Manager (x32 Version:  - )
LogMeIn Hamachi (x32 Version: 2.1.0.374 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.1.0.374 - LogMeIn, Inc.) Hidden
LVT (x32 Version: 4.1.1.0930 - Lenovo)
LXH-JME2207FN Hotkey Driver (x32 Version: 5.1.0804 - Lenovo)
MacroX 3.1 (x32 Version: 3.1 - Uhrzeit.org)
Malwarebytes Anti-Malware Version 1.60.0.1800 (x32 Version: 1.60.0.1800 - Malwarebytes Corporation)
MDownloader (x32 Version: 0.15.26.7024 - adma)
Microsoft .NET Framework 4.5 (Version: 4.5.50709 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Flight Simulator X (x32 Version: 10.0.60905 - Microsoft Game Studios) Hidden
Microsoft Flight Simulator X: Acceleration (x32 Version: 10.0.61637.0 - Microsoft Game Studios)
Microsoft Flight Simulator X: Acceleration (x32 Version: 10.0.61637.0 - Microsoft Game Studios) Hidden
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.88.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2003 German User Interface Pack (x32 Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office FrontPage 2003 (x32 Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (x32 Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Security Client (Version: 4.4.0304.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (Version: 4.4.304.0 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 (Version: 8.0.51011 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (x32 Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (x32 Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (x32 Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (Version:  - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (Version: 2.0.50728 - Microsoft Corporation) Hidden
Microsoft WSE 3.0 Runtime (x32 Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft_VC80_ATL_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_ATL_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_CRT_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFC_x86_x64 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86 (x32 Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC80_MFCLOC_x86_x64 (Version: 80.50727.4053 - Adobe) Hidden
Microsoft_VC90_ATL_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_ATL_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_CRT_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86 (x32 Version: 1.00.0000 - Adobe) Hidden
Microsoft_VC90_MFC_x86_x64 (Version: 1.00.0000 - Adobe) Hidden
MinecraftAlpha (x32 Version:  - )
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 26.0 (x86 en-US) (x32 Version: 26.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser und SDK (x32 Version: 4.20.9818.0 - Microsoft Corporation)
NET Render Client / CINEMA 4D 11.530 (Version: 11.514 - MAXON Computer GmbH)
NET Render Client 14.014 (Version: 14.014 - MAXON Computer GmbH)
NET Render Server 14.014 (Version: 14.014 - MAXON Computer GmbH)
Netzmanager (Version: 1.071 - Deutsche Telekom AG, Marmiko IT-Solutions GmbH) Hidden
Netzmanager (x32 Version: 1.071 - Deutsche Telekom AG)
Notepad++ (x32 Version: 5.9 - )
Origin (x32 Version: 8.3.7.3619 - Electronic Arts, Inc.)
PDF Settings CS5 (x32 Version: 10.0 - Adobe Systems Incorporated) Hidden
PE Builder 3.1.10a (x32 Version:  - Bart Lagerweij)
Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Picasa 3 (x32 Version: 3.8 - Google, Inc.)
PMDG 737 8900 NGX (x32 Version: 1.00.2922 - PMDG Simulations, LLC.)
Power Dial (x32 Version: 3.0.1.1010 - Lenovo)
Protect Disc License Helper 1.0.118 (x32 Version: 1.0.118 - Protect Disc)
ProtectDisc Driver, Version 11 (x32 Version: 11.0.0.11 - ProtectDisc Software GmbH)
PunkBuster Services (x32 Version: 0.993 - Even Balance, Inc.)
PxMergeModule (x32 Version: 1.00.0000 - Your Company Name) Hidden
Qualcomm Atheros Client Installation Program (x32 Version: 10.0 - Qualcomm Atheros)
Qualcomm Atheros WiFi Driver Installation (x32 Version: 9.2 - Qualcomm Atheros)
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
RealDownloader (x32 Version: 1.3.0 - RealNetworks, Inc.) Hidden
RealFlow 2012 (x32 Version:  - )
RealFlow 2013 (x32 Version:  - )
RealFlow 5 (x32 Version:  - )
RealFlow Job Manager (x32 Version:  - )
RealFlow Plug-in for Cinema4D (x32 Version: 1.0 - Next Limit)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (x32 Version: 16.0.0 - RealNetworks)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6343 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
Recuva (Version: 1.42 - Piriform)
RepCare 2012 (x32 Version: 16.1 - Andre Weinert)
Revo Uninstaller Pro 2.5.9 (Version: 2.5.9 - VS Revo Group, Ltd.)
RollerCoaster Tycoon 3 Platinum (x32 Version: 1.00.000 - Atari)
Roxio BackOnTrack (x32 Version: 1.3.1 - Roxio)
Roxio BackOnTrack (x32 Version: 1.3.1 - Roxio) Hidden
Roxio File Backup (x32 Version: 1.3.0 - Roxio) Hidden
Roxio Update Manager (x32 Version: 6.0.0 - Roxio) Hidden
RtLED (Version: 1.0.2 - Realtek Semiconductor Corp.)
Saitek SST Programming Software (x32 Version: 1.00.0000 - Saitek)
Samsung_MonSetup (x32 Version: 1.00.0000 - Samsung)
SimCity 4 Deluxe (x32 Version:  - )
SpyHunter (x32 Version: 4.14.5.4268 - Enigma Software Group USA, LLC)
Steamless Counter Strike Source Pack (x32 Version: 1.0 - Steamless)
Streaming Video Recorder V4.7.0 (x32 Version: 4.7.0 - Apowersoft)
SUPER © v2011.build.49 (July 1st, 2011) Version v2011.build.49 (x32 Version: v2011.build.49 - eRightSoft)
Synthesia (remove only) (x32 Version:  - )
TeamSpeak 2 RC2 (x32 Version: 2.0.32.60 - Dominating Bytes Design)
TeamSpeak 3 Client (HKCU Version: 3.0.13.1 - TeamSpeak Systems GmbH)
TeamViewer 9 (x32 Version: 9.0.24951 - TeamViewer)
The Eye v1.0.8 (b367) (x32 Version:  - International Virtual Aviation Organisation VZW/ASBL)
The Settlers III Gold Edition (x32 Version:  - )
ThemeWallpaper (x32 Version: 1.1.0.090901 - Lenovo)
Ubisoft Game Launcher (x32 Version: 1.0.0.0 - UBISOFT)
Uniblue Powersuite (x32 Version: 4.1.3.1 - Uniblue Systems Limited)
Update for Microsoft .NET Framework 4.5 (KB2750147) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4.5 (KB2805221) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4.5 (KB2805226) (x32 Version: 1 - Microsoft Corporation)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
VirtualCloneDrive (x32 Version:  - Elaborate Bytes)
VLC media player 1.1.11 (x32 Version: 1.1.11 - VideoLAN)
Web Stream Recorder 2010 (x32 Version: 3.0.0.2085 - Sytexis Software)
WebPlat (x32 Version:  - Sourceplace)
Windows 7 USB/DVD Download Tool (x32 Version: 1.0.30 - Microsoft Corporation)
Windows Installer Clean Up (x32 Version: 3.00.00.0000 - Microsoft Corporation)
Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Sync (x32 Version: 14.0.8089.726 - Microsoft Corporation)
Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Media Player Firefox Plugin (x32 Version: 1.0.0.8 - Microsoft Corp)
WinPcap 4.1.2 (x32 Version: 4.1.0.2001 - CACE Technologies)
WinRAR 4.00 (32-Bit) (x32 Version: 4.00.0 - win.rar GmbH)
WinSetupFromUSB (HKCU Version:  - )
WM Recorder (x32 Version: 14.11.3 - AllAlex, Inc)
Worms Revolution (x32 Version:  - )
YAC (x32 Version:  - ELEX DO BRASIL PARTICIPAÇÕES LTDA)
Yu-Gi-Oh! Power of Chaos JOEY THE PASSION (x32 Version: 1.00.0000 - KONAMI)
Yu-Gi-Oh! Power of Chaos KAIBA THE REVENGE (x32 Version: 1.00.0000 - KONAMI)
Yu-Gi-Oh! Power of Chaos YUGI THE DESTINY (x32 Version: 1.00.0000 - KONAMI)

==================== Restore Points  =========================

29-01-2014 01:14:27 Windows Update
01-02-2014 23:57:55 Windows Update
05-02-2014 09:44:55 Windows Update
08-02-2014 17:19:05 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2013-03-30 14:37 - 00000658 ____N C:\windows\system32\Drivers\etc\hosts
127.0.0.1       localhost
127.0.0.1 65.52.240.48
127.0.0.1 activation.cloud.techsmith.com
127.0.0.1 secure.applian.com
127.0.0.1 activate.adobe.com
127.0.0.1 adobe.activate.com
127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 adobeereg.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com


==================== Scheduled Tasks (whitelisted) =============

Task: {0CEA64A9-9AFA-4E16-AD76-72996896E5AD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-02] (Google Inc.)
Task: {0DCDADC5-7534-482A-9822-F44E6E9F9AC4} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3427846483-774009953-675166152-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2012-11-29] (RealNetworks, Inc.)
Task: {42C79BF2-92A5-4EE2-97EE-427389D58C38} - System32\Tasks\{D2213DCF-17C3-4675-9F70-B8E810903908} => I:\Schneiden\Camtasia Studio 8\CamtasiaStudio.exe
Task: {4E084055-BCE4-4C23-97E2-F3755FA25231} - System32\Tasks\{F85E1293-B40C-4418-A651-5B84D58128AB} => I:\Schneiden\Camtasia Studio 8\CamtasiaStudio.exe
Task: {4E287D1A-2097-407C-ADB4-181FC3502C6F} - System32\Tasks\{92E86344-5429-4237-9F7B-FDBFB81637EB} => I:\Schneiden\Camtasia Studio 8\CamtasiaStudio.exe
Task: {5EF3E341-72C5-482B-B11A-870F1ED09BB7} - System32\Tasks\{5C265C75-A0B0-45A4-913B-A503FA7B1F97} => I:\Spiele\BF1942\BF1942.exe [2004-12-02] ()
Task: {6335F61B-9E5E-44E8-9154-3908435D7B1C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-02] (Google Inc.)
Task: {66163E17-D7E7-48DE-8C8D-D55EFCD0F702} - \SpeedUpMyPC No Task File
Task: {6913E95F-0DAB-4C2E-A705-77D227F71665} - System32\Tasks\BackgroundContainer Startup Task => Rundll32.exe "C:\Users\Marvin\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun
Task: {69DF9B5E-7E77-4231-918A-3D10FF61FC76} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3427846483-774009953-675166152-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {6AF7B1D7-E44C-40CF-81B4-701B4535BA16} - System32\Tasks\{4838DD4D-EE07-4F23-84E5-D096C0B0B8F3} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [2012-01-25] (Advanced Micro Devices Inc.)
Task: {6F521B53-4A56-44C2-B74C-424BA64B940B} - System32\Tasks\couponsupport-S-649636217 => c:\support\couponsupport.exe <==== ATTENTION
Task: {7150538C-0575-47CF-97E1-670EBB977CEB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: {87D65247-A5D4-41D9-8C25-FD0DE94308E8} - System32\Tasks\{0AAC371C-DFB8-42F2-B658-82C44A59A129} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [2012-01-25] (Advanced Micro Devices Inc.)
Task: {898DBE69-DC66-4D94-A8AA-A4895F252FE1} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3427846483-774009953-675166152-1001 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {934BA65F-30F3-497C-BC7F-ABF88468BC65} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3427846483-774009953-675166152-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2012-11-29] (RealNetworks, Inc.)
Task: {A765C4A2-42A7-47B1-8192-7962373D1822} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3427846483-774009953-675166152-1001 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2012-11-29] (RealNetworks, Inc.)
Task: {B4F97338-31B4-4152-8B8B-A54C8F6D2ECF} - System32\Tasks\{AB45C556-52A2-4336-800C-FBE780B67639} => I:\Schneiden\Camtasia Studio 8\CamtasiaStudio.exe
Task: {B66F5727-71AB-4C42-8061-0F5991D67E93} - System32\Tasks\SpyHunter4Startup => C:\Program Files (x86)\Enigma Software Group\SpyHunter\Spyhunter4.exe [2013-09-06] (Enigma Software Group USA, LLC.)
Task: {B8AA527E-4F59-41F2-8DB0-A27A3A7BE36A} - System32\Tasks\AdobeAAMUpdater-1.0-Marvin-PC-Marvin => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2010-03-06] (Adobe Systems Incorporated)
Task: {D9FA5C0B-09A3-4D53-9ABA-2ECC7B5C6765} - System32\Tasks\{07E7ACD2-C9C4-40CB-B6AA-AF5194561C8F} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [2012-01-25] (Advanced Micro Devices Inc.)
Task: {DEF28FAE-1C73-4236-8429-9EF601E04E79} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-05] (Adobe Systems Incorporated)
Task: {E98BD0CB-A87B-47F1-834C-5C4A95DCB4B2} - System32\Tasks\Google Updater and Installer => C:\Users\Marvin\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {F5BF49FF-A150-4B48-95E7-C1325D463677} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\couponsupport-S-649636217.job => c:\support\couponsupport.exe <==== ATTENTION
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2010-01-02 15:42 - 2010-01-02 15:42 - 00098304 _____ () I:\Programme\Internet\FileZilla FTP Client\fzshellext_64.dll
2011-05-23 16:48 - 2011-03-02 11:40 - 00164864 _____ () I:\Programme\System sachen\Winrar\rarext64.dll
2011-02-09 01:56 - 2011-02-09 01:56 - 00301568 _____ () I:\Programme\notepad++\NppShell_04.dll
2014-01-01 02:20 - 2014-01-01 02:20 - 04420096 _____ () C:\ProgramData\WebPlat\WebPlat_x64.dll
2014-01-07 11:50 - 2013-12-27 11:54 - 00176976 _____ () C:\Program Files (x86)\iSafe\tws\unrar.dll
2014-01-07 11:50 - 2013-12-27 11:54 - 00087744 _____ () C:\Program Files (x86)\iSafe\tws\unacev2.dll
2014-01-07 11:50 - 2013-12-30 11:21 - 00185000 _____ () C:\Program Files (x86)\iSafe\libpng.dll
2013-08-31 14:36 - 2013-08-31 14:36 - 00076888 _____ () C:\windows\SysWOW64\PnkBstrA.exe
2012-11-29 20:31 - 2012-11-29 20:31 - 00038608 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
2010-09-24 15:50 - 2008-12-30 10:09 - 02088960 _____ () C:\Program Files\Lenovo\Power Dial\LitModeSwitchRes.dll
2012-07-27 11:07 - 2005-10-18 13:24 - 00147456 _____ () C:\Program Files (x86)\Saitek\Software\SAICFG.dll
2013-03-29 14:36 - 2013-03-29 14:36 - 03174448 _____ () C:\windows\Microsoft.Net\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
2012-07-09 00:51 - 2012-07-09 00:51 - 00284128 _____ () C:\windows\Microsoft.Net\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll
2013-05-26 16:53 - 2013-05-26 16:53 - 00093696 _____ () I:\Programme\Internet\FileZilla FTP Client\fzshellext.dll
2014-02-11 19:11 - 2014-02-02 00:41 - 00715592 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libglesv2.dll
2014-02-11 19:11 - 2014-02-02 00:41 - 00100168 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\libegl.dll
2014-02-11 19:11 - 2014-02-02 00:42 - 04055368 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\pdf.dll
2014-02-11 19:11 - 2014-02-02 00:42 - 00399688 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ppGoogleNaClPluginChrome.dll
2014-02-11 19:11 - 2014-02-02 00:41 - 01634632 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\ffmpegsumo.dll
2014-02-11 19:11 - 2014-02-02 00:42 - 13616456 _____ () C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.107\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\ProgramData\Temp:D346F792
AlternateDataStreams: C:\Users\Marvin\Cookies:VbyxrOc6G7aVsQG4Ew
AlternateDataStreams: C:\Users\Marvin\Lokale Einstellungen:CzZtaubIAUtyjNelMlBJjPU
AlternateDataStreams: C:\Users\Marvin\AppData\Local:CzZtaubIAUtyjNelMlBJjPU
AlternateDataStreams: C:\Users\Marvin\AppData\Local\Anwendungsdaten:CzZtaubIAUtyjNelMlBJjPU
AlternateDataStreams: C:\Users\Marvin\AppData\Local\Temp:FEFcpEaOBT7B4EM5nlZM7LDt

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"

==================== Disabled items from MSCONFIG ==============

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: bthserv => 3
MSCONFIG\Services: CEEBC40A-FDED-4C59-B354-939132350B01 => 2
MSCONFIG\Services: Fax => 3
MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: AdobeCS5ServiceManager => "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin
MSCONFIG\startupreg: AlcoholAutomount => "I:\Programme\Alcohol 120\axcmd.exe" /automount
MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc.exe"
MSCONFIG\startupreg: DivXUpdate => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
MSCONFIG\startupreg: GenieoSystemTray => "C:\Users\Marvin\AppData\Roaming\Genieo\Application\TrayUi\bin\gentray.exe"
MSCONFIG\startupreg: GenieoUpdaterService => "C:\Users\Marvin\AppData\Roaming\Genieo\Application\Updater\bin\genupdater.exe" -wait 5
MSCONFIG\startupreg: Google Update => "C:\Users\Marvin\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: Healthcare => C:\Program Files\Lenovo\HealthCare\HealthCare.exe /hide
MSCONFIG\startupreg: jmekey => C:\Program Files (x86)\jmesoft\hotkey.exe
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "I:\Programme\Internet\Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: PowerSuite => "I:\PROGRA~1\Schutz\POWERS~1\launcher.exe" delay 20000  -m
MSCONFIG\startupreg: Powersuite Monitor => "C:\Program Files (x86)\Uniblue\Powersuite\powersuite_monitor.exe"
MSCONFIG\startupreg: QuickTime Task => "I:\Programme\Player\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s
MSCONFIG\startupreg: SpeedUpMyPC => "C:\Program Files (x86)\Uniblue\SpeedUpMyPC\launcher.exe" -d 20000 
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SwitchBoard => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
MSCONFIG\startupreg: Unattend0000000001{BFA3D12B-66DD-4617-923A-E864BC7D20B5} => C:\Windows\test.bat
MSCONFIG\startupreg: VirtualCloneDrive => "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
MSCONFIG\startupreg: vProt => "C:\Program Files (x86)\AVG Secure Search\vprot.exe"

==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Hamachi Network Interface
Description: Hamachi Network Interface
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: LogMeIn, Inc.
Service: hamachi
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Microsoft-6zu4-Adapter
Description: Microsoft-6zu4-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Microsoft-ISATAP-Adapter #2
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Microsoft-ISATAP-Adapter #3
Description: Microsoft-ISATAP-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/12/2014 07:56:28 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/12/2014 07:56:28 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/12/2014 07:56:28 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/12/2014 07:56:28 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/12/2014 07:56:28 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.

Error: (02/12/2014 00:49:16 AM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "assemblyIdentity1". Fehler in Manifest- oder Richtliniendatei "assemblyIdentity2" in Zeile assemblyIdentity3.
Der Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs im assemblyIdentity-Element ist ungültig.

Error: (02/11/2014 08:38:22 PM) (Source: CVHSVC) (User: )
Description: Nur zur Information.
(Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.

Error: (02/11/2014 08:35:47 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SMSvcHost.exe, Version: 4.0.30319.17929, Zeitstempel: 0x4ffa80b1
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1677
Ausnahmecode: 0xe0434352
Fehleroffset: 0x000000000000940d
ID des fehlerhaften Prozesses: 0x111c
Startzeit der fehlerhaften Anwendung: 0xSMSvcHost.exe0
Pfad der fehlerhaften Anwendung: SMSvcHost.exe1
Pfad des fehlerhaften Moduls: SMSvcHost.exe2
Berichtskennung: SMSvcHost.exe3

Error: (02/11/2014 08:35:46 PM) (Source: .NET Runtime) (User: )
Description: Application: SMSvcHost.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.IO.FileLoadException
Stack:
   at System.Runtime.Fx+IOCompletionThunk.UnhandledExceptionFrame(UInt32, UInt32, System.Threading.NativeOverlapped*)
   at System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)

Error: (02/11/2014 08:30:46 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: SMSvcHost.exe, Version: 4.0.30319.17929, Zeitstempel: 0x4ffa80b1
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1677
Ausnahmecode: 0xe0434352
Fehleroffset: 0x000000000000940d
ID des fehlerhaften Prozesses: 0x3b0
Startzeit der fehlerhaften Anwendung: 0xSMSvcHost.exe0
Pfad der fehlerhaften Anwendung: SMSvcHost.exe1
Pfad des fehlerhaften Moduls: SMSvcHost.exe2
Berichtskennung: SMSvcHost.exe3


System errors:
=============
Error: (02/12/2014 07:40:16 AM) (Source: ipnathlp) (User: )
Description: 0

Error: (02/12/2014 07:40:12 AM) (Source: ipnathlp) (User: )
Description: 0

Error: (02/12/2014 07:39:14 AM) (Source: ipnathlp) (User: )
Description: 192.168.3.104192.168.137.0255.255.255.0

Error: (02/12/2014 07:39:14 AM) (Source: ipnathlp) (User: )
Description: 0

Error: (02/12/2014 07:38:24 AM) (Source: ipnathlp) (User: )
Description: 192.168.3.104192.168.137.0255.255.255.0

Error: (02/12/2014 07:38:24 AM) (Source: ipnathlp) (User: )
Description: 0

Error: (02/12/2014 07:37:35 AM) (Source: ipnathlp) (User: )
Description: 0

Error: (02/12/2014 07:37:26 AM) (Source: ipnathlp) (User: )
Description: 192.168.3.104192.168.137.0255.255.255.0

Error: (02/12/2014 06:59:27 AM) (Source: ipnathlp) (User: )
Description: 0

Error: (02/12/2014 05:29:24 AM) (Source: ipnathlp) (User: )
Description: 0


Microsoft Office Sessions:
=========================
Error: (02/12/2014 07:56:28 AM) (Source: SideBySide)(User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Marvin\Downloads\SoftonicDownloader_fuer_tubebox (2).exe

Error: (02/12/2014 07:56:28 AM) (Source: SideBySide)(User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Marvin\Downloads\SoftonicDownloader_fuer_tubebox (1).exe

Error: (02/12/2014 07:56:28 AM) (Source: SideBySide)(User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Marvin\Downloads\SoftonicDownloader_fuer_tubebox.exe

Error: (02/12/2014 07:56:28 AM) (Source: SideBySide)(User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Marvin\Downloads\SoftonicDownloader_fuer_ytd-video-downloader (1).exe

Error: (02/12/2014 07:56:28 AM) (Source: SideBySide)(User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Marvin\Downloads\SoftonicDownloader_fuer_ytd-video-downloader.exe

Error: (02/12/2014 00:49:16 AM) (Source: SideBySide)(User: )
Description: assemblyIdentityversionMAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINORC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dllC:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll3

Error: (02/11/2014 08:38:22 PM) (Source: CVHSVC)(User: )
Description: (Patch task for {90140011-0066-0407-0000-0000000FF1CE}): DownloadLatest Failed: Der Servername oder die Serveradresse konnte nicht verarbeitet werden.

Error: (02/11/2014 08:35:47 PM) (Source: Application Error)(User: )
Description: SMSvcHost.exe4.0.30319.179294ffa80b1KERNELBASE.dll6.1.7601.1822951fb1677e0434352000000000000940d111c01cf276075d69f3eC:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exeC:\windows\system32\KERNELBASE.dllb467ae38-9353-11e3-867e-4437e60acb1a

Error: (02/11/2014 08:35:46 PM) (Source: .NET Runtime)(User: )
Description: Application: SMSvcHost.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.IO.FileLoadException
Stack:
   at System.Runtime.Fx+IOCompletionThunk.UnhandledExceptionFrame(UInt32, UInt32, System.Threading.NativeOverlapped*)
   at System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32, UInt32, System.Threading.NativeOverlapped*)

Error: (02/11/2014 08:30:46 PM) (Source: Application Error)(User: )
Description: SMSvcHost.exe4.0.30319.179294ffa80b1KERNELBASE.dll6.1.7601.1822951fb1677e0434352000000000000940d3b001cf275fc2322344C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exeC:\windows\system32\KERNELBASE.dll008ed3f8-9353-11e3-867e-4437e60acb1a


CodeIntegrity Errors:
===================================
  Date: 2013-07-26 10:55:49.382
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SaiBus.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-07-26 10:55:49.242
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SaiBus.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-07-26 10:35:45.889
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SaiBus.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-07-26 10:35:45.780
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SaiBus.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-07-26 02:00:22.852
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SaiBus.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-07-26 02:00:22.727
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SaiBus.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-07-25 22:48:56.434
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SaiBus.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-07-25 22:48:56.324
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SaiBus.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-07-22 23:18:58.675
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SaiBus.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.

  Date: 2013-07-22 23:18:58.566
  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\SaiBus.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.


==================== Memory info =========================== 

Percentage of memory in use: 41%
Total physical RAM: 6078.49 MB
Available physical RAM: 3558 MB
Total Pagefile: 12218.67 MB
Available Pagefile: 8980.72 MB
Total Virtual: 8192 MB
Available Virtual: 8191.82 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:919.47 GB) (Free:254.38 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive i: (Volume) (Fixed) (Total:918.37 GB) (Free:597.8 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 1B778F34)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=919 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=918 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=25 GB) - (Type=12)

==================== End Of Log ============================
         

hi,

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

• WICHTIG: Speichere Combofix auf deinem Desktop.
• Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
• Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
• Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
• Wenn Combofix fertig ist, wird es ein Logfile erstellen.
• Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten

Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.

starte den Rechner einfach neu. Dies sollte das Problem beheben.

log.txt

ich muss den log aufteilen weil er über 120000 Zeichen lang ist.

1. Teil

ComboFix 14-02-12.01 - Marvin 13.02.2014  12:08:24.2.8 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.6078.3946 [GMT 1:00]
ausgeführt von:: c:\users\Marvin\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Microsoft Security Essentials *Disabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files (x86)\ShoppingChip
c:\programdata\ShoppingChip
c:\programdata\webplat\WebPlatSvc.dll
C:\timerintray
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn\1.1\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn\1.1\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn\1.1\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn\1.1\manifest.json
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn\1.1\nRJ6MA.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig\1.1\background.html
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig\1.1\content.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig\1.1\iPKMl8mvFEl.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig\1.1\lsdb.js
c:\users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig\1.1\manifest.json
c:\users\ASPNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn
c:\users\ASPNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn\1.1\background.html
c:\users\ASPNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn\1.1\content.js
c:\users\ASPNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn\1.1\lsdb.js
c:\users\ASPNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn\1.1\manifest.json
c:\users\ASPNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn\1.1\nRJ6MA.js
c:\users\ASPNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig
c:\users\ASPNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig\1.1\background.html
c:\users\ASPNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig\1.1\content.js
c:\users\ASPNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig\1.1\iPKMl8mvFEl.js
c:\users\ASPNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig\1.1\lsdb.js
c:\users\ASPNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig\1.1\manifest.json
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn\1.1\background.html
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn\1.1\content.js
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn\1.1\lsdb.js
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn\1.1\manifest.json
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn\1.1\nRJ6MA.js
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig\1.1\background.html
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig\1.1\content.js
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig\1.1\iPKMl8mvFEl.js
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig\1.1\lsdb.js
c:\users\Gast\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig\1.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn\1.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn\1.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn\1.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn\1.1\manifest.json
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\dglfddogcdbbbohnejbjjbjinochhdbn\1.1\nRJ6MA.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig\1.1\background.html
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig\1.1\content.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig\1.1\iPKMl8mvFEl.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig\1.1\lsdb.js
c:\users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkndongfabbipndbancbppcfhodgkbig\1.1\manifest.json
c:\users\Marvin\AppData\Local\assembly\tmp
c:\users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikflhiiejehmjgppokkcoiebajjogcaj
c:\users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikflhiiejehmjgppokkcoiebajjogcaj\3.0_0\background.html
c:\users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikflhiiejehmjgppokkcoiebajjogcaj\3.0_0\content.js
c:\users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikflhiiejehmjgppokkcoiebajjogcaj\3.0_0\lsdb.js
c:\users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikflhiiejehmjgppokkcoiebajjogcaj\3.0_0\manifest.json
c:\users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikflhiiejehmjgppokkcoiebajjogcaj\3.0_0\SKXp.js
c:\users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ikflhiiejehmjgppokkcoiebajjogcaj_0.localstorage-journal
c:\users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ikflhiiejehmjgppokkcoiebajjogcaj_0.localstorage
c:\users\Marvin\AppData\Local\TBHostSupport
c:\users\Marvin\AppData\Local\TBHostSupport\TBHostSupport.dll
c:\users\Marvin\AppData\Roaming\Awmyo
c:\users\Marvin\AppData\Roaming\Awmyo\naima.bob
c:\users\Marvin\AppData\Roaming\Microsoft\Windows\Recent\Thumbs.db
c:\users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default\extensions\aoea.ntkq@sh-ey.org
c:\users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default\extensions\aoea.ntkq@sh-ey.org\bootstrap.js
c:\users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default\extensions\aoea.ntkq@sh-ey.org\chrome.manifest
c:\users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default\extensions\aoea.ntkq@sh-ey.org\content\bg.js
c:\users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default\extensions\aoea.ntkq@sh-ey.org\install.rdf
c:\users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default\extensions\fk-ce@ijfkl.org
c:\users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default\extensions\fk-ce@ijfkl.org\bootstrap.js
c:\users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default\extensions\fk-ce@ijfkl.org\chrome.manifest
c:\users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default\extensions\fk-ce@ijfkl.org\content\bg.js
c:\users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default\extensions\fk-ce@ijfkl.org\install.rdf
c:\users\Marvin\Documents\~WRL0991.tmp
c:\windows\IsUn0407.exe
c:\windows\iun6002.exe
c:\windows\SysWow64\frapsvid.dll
c:\windows\SysWow64\Packet.dll
c:\windows\SysWow64\pthreadVC.dll
c:\windows\SysWow64\start.exe
c:\windows\SysWow64\wpcap.dll
c:\windows\Tasks\couponsupport-S-649636217.job
c:\users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Preferences . . . . Nicht in der Lage zu löschen
.
Infizierte Kopie von c:\windows\system32\Services.exe wurde gefunden und desinfiziert 
Kopie von - c:\windows\ERDNT\cache64\services.exe wurde wiederhergestellt 
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_npf
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-01-13 bis 2014-02-13  ))))))))))))))))))))))))))))))
.
.
2014-02-13 11:14 . 2014-02-13 11:14	--------	d-----w-	c:\users\Public\AppData\Local\temp
2014-02-13 11:14 . 2014-02-13 11:14	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-02-12 22:42 . 2013-12-04 03:28	10315576	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{F5F8BB91-FDCD-4A21-AE0F-32CA5C911BB9}\mpengine.dll
2014-02-12 19:47 . 2014-02-12 19:47	--------	d-----w-	c:\users\Marvin\AppData\Roaming\Artisteer
2014-02-12 06:56 . 2014-02-12 06:57	--------	d-----w-	C:\FRST
2014-02-11 17:56 . 2014-02-11 17:56	--------	d-----w-	c:\program files\CCleaner
2014-02-11 15:53 . 2013-12-04 03:28	10315576	----a-w-	c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-02-11 15:36 . 2014-02-11 15:40	--------	d-----w-	C:\AdwCleaner
2014-02-06 23:24 . 2014-02-06 23:24	--------	d-----w-	c:\program files (x86)\AdBBlocknWatch
2014-02-05 04:34 . 2014-02-05 04:34	5556104	----a-w-	c:\windows\SysWow64\FlashPlayerInstaller.exe
2014-01-30 21:51 . 2014-02-11 15:42	--------	d-----w-	c:\programdata\AdBBlocknWatch
2014-01-30 21:51 . 2014-01-30 21:51	--------	d-----w-	c:\programdata\ikflhiiejehmjgppokkcoiebajjogcaj
2014-01-28 16:43 . 2014-01-28 16:43	--------	d-----w-	c:\users\Marvin\AppData\Roaming\driver
2014-01-25 13:44 . 2014-01-25 13:44	--------	d-----w-	c:\users\Marvin\graphs
2014-01-23 17:35 . 2014-01-23 18:08	52170	----a-w-	c:\windows\RFC4DPluginUninstall.exe
2014-01-20 19:43 . 2014-01-20 19:43	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin5.dll
2014-01-20 19:43 . 2014-01-20 19:43	159744	----a-w-	c:\program files (x86)\Mozilla Firefox\plugins\npqtplugin5.dll
2014-01-20 19:43 . 2014-01-20 19:43	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin4.dll
2014-01-20 19:43 . 2014-01-20 19:43	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin3.dll
2014-01-20 19:43 . 2014-01-20 19:43	159744	----a-w-	c:\program files (x86)\Mozilla Firefox\plugins\npqtplugin4.dll
2014-01-20 19:43 . 2014-01-20 19:43	159744	----a-w-	c:\program files (x86)\Mozilla Firefox\plugins\npqtplugin3.dll
2014-01-20 19:43 . 2014-01-20 19:43	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin2.dll
2014-01-20 19:43 . 2014-01-20 19:43	159744	----a-w-	c:\program files\Internet Explorer\Plugins\npqtplugin.dll
2014-01-20 19:43 . 2014-01-20 19:43	159744	----a-w-	c:\program files (x86)\Mozilla Firefox\plugins\npqtplugin2.dll
2014-01-20 19:43 . 2014-01-20 19:43	159744	----a-w-	c:\program files (x86)\Mozilla Firefox\plugins\npqtplugin.dll
2014-01-20 19:43 . 2014-01-20 19:43	--------	d-----w-	c:\programdata\Apple Computer
2014-01-20 19:41 . 2014-01-20 19:41	--------	d-----w-	c:\program files (x86)\Common Files\Apple
2014-01-20 19:41 . 2014-01-20 19:41	--------	d-----w-	c:\program files (x86)\Apple Software Update
2014-01-15 17:09 . 2013-11-27 01:41	343040	----a-w-	c:\windows\system32\drivers\usbhub.sys
2014-01-15 17:09 . 2013-11-27 01:41	99840	----a-w-	c:\windows\system32\drivers\usbccgp.sys
2014-01-15 17:09 . 2013-11-27 01:41	53248	----a-w-	c:\windows\system32\drivers\usbehci.sys
2014-01-15 17:09 . 2013-11-27 01:41	325120	----a-w-	c:\windows\system32\drivers\usbport.sys
2014-01-15 17:09 . 2013-11-27 01:41	25600	----a-w-	c:\windows\system32\drivers\usbohci.sys
2014-01-15 17:09 . 2013-11-27 01:41	30720	----a-w-	c:\windows\system32\drivers\usbuhci.sys
2014-01-15 17:09 . 2013-11-27 01:41	7808	----a-w-	c:\windows\system32\drivers\usbd.sys
2014-01-15 17:09 . 2013-11-26 10:32	3156480	----a-w-	c:\windows\system32\win32k.sys
2014-01-15 17:09 . 2013-11-26 11:40	376768	----a-w-	c:\windows\system32\drivers\netio.sys
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-05 04:34 . 2012-08-04 19:48	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-02-05 04:34 . 2011-11-22 18:33	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-01-19 07:33 . 2011-05-09 21:56	270496	------w-	c:\windows\system32\MpSigStub.exe
2014-01-18 10:00 . 2011-08-26 19:38	86054176	----a-w-	c:\windows\system32\MRT.exe
2013-12-14 10:06 . 2013-12-14 10:06	940032	----a-w-	c:\windows\system32\MsSpellCheckingFacility.exe
2013-12-14 10:06 . 2013-12-14 10:06	194048	----a-w-	c:\windows\SysWow64\elshyph.dll
2013-12-14 10:06 . 2013-12-14 10:06	942592	----a-w-	c:\windows\system32\jsIntl.dll
2013-12-14 10:06 . 2013-12-14 10:06	86016	----a-w-	c:\windows\SysWow64\iesysprep.dll
2013-12-14 10:06 . 2013-12-14 10:06	86016	----a-w-	c:\windows\system32\RegisterIEPKEYs.exe
2013-12-14 10:06 . 2013-12-14 10:06	74240	----a-w-	c:\windows\SysWow64\SetIEInstalledDate.exe
2013-12-14 10:06 . 2013-12-14 10:06	71680	----a-w-	c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-12-14 10:06 . 2013-12-14 10:06	645120	----a-w-	c:\windows\SysWow64\jsIntl.dll
2013-12-14 10:06 . 2013-12-14 10:06	62464	----a-w-	c:\windows\SysWow64\tdc.ocx
2013-12-14 10:06 . 2013-12-14 10:06	61952	----a-w-	c:\windows\SysWow64\MshtmlDac.dll
2013-12-14 10:06 . 2013-12-14 10:06	61952	----a-w-	c:\windows\SysWow64\iesetup.dll
2013-12-14 10:06 . 2013-12-14 10:06	51200	----a-w-	c:\windows\SysWow64\ieetwproxystub.dll
2013-12-14 10:06 . 2013-12-14 10:06	48640	----a-w-	c:\windows\SysWow64\mshtmler.dll
2013-12-14 10:06 . 2013-12-14 10:06	454656	----a-w-	c:\windows\SysWow64\vbscript.dll
2013-12-14 10:06 . 2013-12-14 10:06	36352	----a-w-	c:\windows\SysWow64\imgutil.dll
2013-12-14 10:06 . 2013-12-14 10:06	34816	----a-w-	c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-12-14 10:06 . 2013-12-14 10:06	337408	----a-w-	c:\windows\SysWow64\html.iec
2013-12-14 10:06 . 2013-12-14 10:06	247808	----a-w-	c:\windows\system32\msls31.dll
2013-12-14 10:06 . 2013-12-14 10:06	24576	----a-w-	c:\windows\SysWow64\licmgr10.dll
2013-12-14 10:06 . 2013-12-14 10:06	235008	----a-w-	c:\windows\system32\elshyph.dll
2013-12-14 10:06 . 2013-12-14 10:06	182272	----a-w-	c:\windows\SysWow64\msls31.dll
2013-12-14 10:06 . 2013-12-14 10:06	151552	----a-w-	c:\windows\SysWow64\iexpress.exe
2013-12-14 10:06 . 2013-12-14 10:06	139264	----a-w-	c:\windows\SysWow64\wextract.exe
2013-12-14 10:06 . 2013-12-14 10:06	13312	----a-w-	c:\windows\SysWow64\mshta.exe
2013-12-14 10:06 . 2013-12-14 10:06	112128	----a-w-	c:\windows\SysWow64\ieUnatt.exe
2013-12-14 10:06 . 2013-12-14 10:06	111616	----a-w-	c:\windows\SysWow64\IEAdvpack.dll
2013-12-14 10:06 . 2013-12-14 10:06	1051136	----a-w-	c:\windows\SysWow64\mshtmlmedia.dll
2013-12-14 10:06 . 2013-12-14 10:06	90112	----a-w-	c:\windows\system32\SetIEInstalledDate.exe
2013-12-14 10:06 . 2013-12-14 10:06	84992	----a-w-	c:\windows\system32\mshtmled.dll
2013-12-14 10:06 . 2013-12-14 10:06	83968	----a-w-	c:\windows\system32\MshtmlDac.dll
2013-12-14 10:06 . 2013-12-14 10:06	81408	----a-w-	c:\windows\system32\icardie.dll
2013-12-14 10:06 . 2013-12-14 10:06	774144	----a-w-	c:\windows\system32\jscript.dll
2013-12-14 10:06 . 2013-12-14 10:06	77312	----a-w-	c:\windows\system32\tdc.ocx
2013-12-14 10:06 . 2013-12-14 10:06	626176	----a-w-	c:\windows\system32\msfeeds.dll
2013-12-14 10:06 . 2013-12-14 10:06	62464	----a-w-	c:\windows\system32\pngfilt.dll
2013-12-14 10:06 . 2013-12-14 10:06	616104	----a-w-	c:\windows\system32\ieapfltr.dat
2013-12-14 10:06 . 2013-12-14 10:06	548352	----a-w-	c:\windows\system32\vbscript.dll
2013-12-14 10:06 . 2013-12-14 10:06	52224	----a-w-	c:\windows\system32\msfeedsbs.dll
2013-12-14 10:06 . 2013-12-14 10:06	48640	----a-w-	c:\windows\system32\mshtmler.dll
2013-12-14 10:06 . 2013-12-14 10:06	48128	----a-w-	c:\windows\system32\imgutil.dll
2013-12-14 10:06 . 2013-12-14 10:06	453120	----a-w-	c:\windows\system32\dxtmsft.dll
2013-12-14 10:06 . 2013-12-14 10:06	413696	----a-w-	c:\windows\system32\html.iec
2013-12-14 10:06 . 2013-12-14 10:06	40448	----a-w-	c:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-14 10:06 . 2013-12-14 10:06	30208	----a-w-	c:\windows\system32\licmgr10.dll
2013-12-14 10:06 . 2013-12-14 10:06	296960	----a-w-	c:\windows\system32\dxtrans.dll
2013-12-14 10:06 . 2013-12-14 10:06	263376	----a-w-	c:\windows\system32\iedkcs32.dll
2013-12-14 10:06 . 2013-12-14 10:06	243200	----a-w-	c:\windows\system32\webcheck.dll
2013-12-14 10:06 . 2013-12-14 10:06	235520	----a-w-	c:\windows\system32\url.dll
2013-12-14 10:06 . 2013-12-14 10:06	195584	----a-w-	c:\windows\system32\msrating.dll
2013-12-14 10:06 . 2013-12-14 10:06	167424	----a-w-	c:\windows\system32\iexpress.exe
2013-12-14 10:06 . 2013-12-14 10:06	147968	----a-w-	c:\windows\system32\occache.dll
2013-12-14 10:06 . 2013-12-14 10:06	143872	----a-w-	c:\windows\system32\wextract.exe
2013-12-14 10:06 . 2013-12-14 10:06	13824	----a-w-	c:\windows\system32\mshta.exe
2013-12-14 10:06 . 2013-12-14 10:06	135680	----a-w-	c:\windows\system32\iepeers.dll
2013-12-14 10:06 . 2013-12-14 10:06	13312	----a-w-	c:\windows\system32\msfeedssync.exe
2013-12-14 10:06 . 2013-12-14 10:06	131072	----a-w-	c:\windows\system32\IEAdvpack.dll
2013-12-14 10:06 . 2013-12-14 10:06	1228800	----a-w-	c:\windows\system32\mshtmlmedia.dll
2013-12-14 10:06 . 2013-12-14 10:06	105984	----a-w-	c:\windows\system32\iesysprep.dll
2013-12-14 10:06 . 2013-12-14 10:06	101376	----a-w-	c:\windows\system32\inseng.dll
2013-11-26 11:54 . 2013-12-21 10:14	23183360	----a-w-	c:\windows\system32\mshtml.dll
2013-11-26 10:19 . 2013-12-21 10:14	2724864	----a-w-	c:\windows\system32\mshtml.tlb
2013-11-26 10:18 . 2013-12-21 10:14	4096	----a-w-	c:\windows\system32\ieetwcollectorres.dll
2013-11-26 09:48 . 2013-12-21 10:14	66048	----a-w-	c:\windows\system32\iesetup.dll
2013-11-26 09:46 . 2013-12-21 10:14	48640	----a-w-	c:\windows\system32\ieetwproxystub.dll
2013-11-26 09:41 . 2013-12-21 10:14	2764288	----a-w-	c:\windows\system32\iertutil.dll
2013-11-26 09:29 . 2013-12-21 10:14	53760	----a-w-	c:\windows\system32\jsproxy.dll
2013-11-26 09:27 . 2013-12-21 10:14	33792	----a-w-	c:\windows\system32\iernonce.dll
2013-11-26 09:23 . 2013-12-21 10:14	2724864	----a-w-	c:\windows\SysWow64\mshtml.tlb
2013-11-26 09:21 . 2013-12-21 10:14	574976	----a-w-	c:\windows\system32\ieui.dll
2013-11-26 09:18 . 2013-12-21 10:14	139264	----a-w-	c:\windows\system32\ieUnatt.exe
2013-11-26 09:18 . 2013-12-21 10:14	111616	----a-w-	c:\windows\system32\ieetwcollector.exe
2013-11-26 09:16 . 2013-12-21 10:14	708608	----a-w-	c:\windows\system32\jscript9diag.dll
2013-11-26 08:57 . 2013-12-21 10:14	218624	----a-w-	c:\windows\system32\ie4uinit.exe
2013-11-26 08:35 . 2013-12-21 10:14	5769216	----a-w-	c:\windows\system32\jscript9.dll
2013-11-26 08:28 . 2013-12-21 10:14	553472	----a-w-	c:\windows\SysWow64\jscript9diag.dll
2013-11-26 08:16 . 2013-12-21 10:14	4243968	----a-w-	c:\windows\SysWow64\jscript9.dll
2013-11-26 08:02 . 2013-12-21 10:14	1995264	----a-w-	c:\windows\system32\inetcpl.cpl
2013-11-26 07:48 . 2013-12-21 10:14	12996608	----a-w-	c:\windows\system32\ieframe.dll
2013-11-26 07:32 . 2013-12-21 10:14	1928192	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2013-11-26 07:07 . 2013-12-21 10:14	2334208	----a-w-	c:\windows\system32\wininet.dll
2013-11-26 06:40 . 2013-12-21 10:14	1395200	----a-w-	c:\windows\system32\urlmon.dll
2013-11-26 06:34 . 2013-12-21 10:14	817664	----a-w-	c:\windows\system32\ieapfltr.dll
2013-11-26 06:33 . 2013-12-21 10:14	1820160	----a-w-	c:\windows\SysWow64\wininet.dll
2013-11-23 18:26 . 2013-12-10 22:32	417792	----a-w-	c:\windows\SysWow64\WMPhoto.dll
2013-11-23 17:47 . 2013-12-10 22:32	465920	----a-w-	c:\windows\system32\WMPhoto.dll
2006-05-03 10:06	163328	--sha-r-	c:\windows\SysWOW64\flvDX.dll
2007-02-21 11:47	31232	--sha-r-	c:\windows\SysWOW64\msfDX.dll
2008-03-16 13:30	216064	--sha-r-	c:\windows\SysWOW64\nbDX.dll
2010-01-06 22:00	107520	--sha-r-	c:\windows\SysWOW64\TAKDSDecoder.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GoogleDriveSync"="c:\program files (x86)\Google\Drive\googledrivesync.exe" [2013-12-06 20203904]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" [2012-11-30 56128]
"ModeSwitch"="c:\program files\Lenovo\Power Dial\LitModeSwitch.exe" [2009-09-27 163840]
"Malwarebytes' Anti-Malware"="i:\programme\Schutz\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-09-29 766536]
"Profiler"="c:\program files (x86)\Saitek\Software\ProfilerU.exe" [2005-10-18 163840]
"SaiMfd"="c:\program files (x86)\Saitek\Software\SaiMfd.exe" [2005-11-03 179200]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SpUninstallDeleteDir"="rmdir" [X]
.
c:\users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Netzmanager.lnk - c:\program files\Netzmanager\netzmanager.exe /Autostart [2012-7-20 14134784]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"RequireSignedAppInit_DLLs"=0 (0x0)
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute	REG_MULTI_SZ   	autocheck autochk *\0sh4native Sh4Removal
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"LogMeIn Hamachi Ui"="i:\programme\Internet\Hamachi\hamachi-2-ui.exe" --auto-start
.
R2 976137e5;WebPlat;c:\windows\system32\rundll32.exe;c:\windows\SYSNATIVE\rundll32.exe [x]
R2 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service;i:\programme\hack\Alcohol 120\AxAutoMntSrv.exe;i:\programme\hack\Alcohol 120\AxAutoMntSrv.exe [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SystemStore;System Store; [x]
R3 ArgusMonitor;ArgusMonitor kernel mode driver;SysWOW64\drivers\ArgusMonitor.sys;SysWOW64\drivers\ArgusMonitor.sys [x]
R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
R3 EsgScanner;EsgScanner;c:\windows\system32\DRIVERS\EsgScanner.sys;c:\windows\SYSNATIVE\DRIVERS\EsgScanner.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 LitModeCtrl;LitModeCtrl;c:\program files\Lenovo\Power Dial\LitModeCtrl.exe;c:\program files\Lenovo\Power Dial\LitModeCtrl.exe [x]
R3 netr7364;RT73 USB-Drahtlos-LAN-Kartentreiber für Vista;c:\windows\system32\DRIVERS\netr7364.sys;c:\windows\SYSNATIVE\DRIVERS\netr7364.sys [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft-Netzwerkinspektion;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 nl_license_manager;nl_license_manager;i:\programme\Editoren\RealFlow 2013\License Manager\nl_license_manager.exe;i:\programme\Editoren\RealFlow 2013\License Manager\nl_license_manager.exe [x]
R3 pmserenum;PenMount Serial Device Enumeration Service;c:\windows\system32\DRIVERS\pmserenum.sys;c:\windows\SYSNATIVE\DRIVERS\pmserenum.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys;c:\windows\SYSNATIVE\DRIVERS\revoflt.sys [x]
R3 RTL8023x64;Realtek 10/100 NIC Family NDIS x64 Driver;c:\windows\system32\DRIVERS\Rtnic64.sys;c:\windows\SYSNATIVE\DRIVERS\Rtnic64.sys [x]
R3 SwitchBoard;SwitchBoard;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe;c:\program files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [x]
R3 TelekomNM6;Telekom Netzmanager Packet Filter Driver;c:\program files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys;c:\program files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 wsvd;wsvd;c:\windows\system32\DRIVERS\wsvd.sys;c:\windows\SYSNATIVE\DRIVERS\wsvd.sys [x]
R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\DRIVERS\yk62x64.sys;c:\windows\SYSNATIVE\DRIVERS\yk62x64.sys [x]
R4 CEEBC40A-FDED-4C59-B354-939132350B01;Roxio File Backup Service;c:\program files (x86)\Roxio\BackOnTrack\File Backup\FileBackupSVC.exe;c:\program files (x86)\Roxio\BackOnTrack\File Backup\FileBackupSVC.exe [x]
R4 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;i:\programme\Internet\Hamachi\hamachi-2.exe;i:\programme\Internet\Hamachi\hamachi-2.exe [x]
S0 amdkmafd;AMD Audio Bus Lower Filter;c:\windows\system32\DRIVERS\amdkmafd.sys;c:\windows\SYSNATIVE\DRIVERS\amdkmafd.sys [x]
S0 amdkmpfd;AMD PCI Root Bus Lower Filter;c:\windows\system32\DRIVERS\amdkmpfd.sys;c:\windows\SYSNATIVE\DRIVERS\amdkmpfd.sys [x]
S0 iaStorA;iaStorA;c:\windows\system32\DRIVERS\iaStorA.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorA.sys [x]
S0 iaStorF;iaStorF;c:\windows\system32\DRIVERS\iaStorF.sys;c:\windows\SYSNATIVE\DRIVERS\iaStorF.sys [x]
S0 iusb3hcs;Intel(R) USB 3.0 Hostcontroller-Switchtreiber;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S0 sptd;sptd;c:\windows\\SystemRoot\System32\Drivers\sptd.sys;c:\windows\\SystemRoot\System32\Drivers\sptd.sys [x]
S1 iSafeNetFilter;iSafeNetFilter;c:\program files (x86)\iSafe\iSafeNetFilter.sys;c:\program files (x86)\iSafe\iSafeNetFilter.sys [x]
S2 acedrv11;acedrv11;c:\windows\system32\drivers\acedrv11.sys;c:\windows\SYSNATIVE\drivers\acedrv11.sys [x]
S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe;c:\windows\SYSNATIVE\atiesrxx.exe [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 Freemake Improver;Freemake Improver;c:\programdata\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe;c:\programdata\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [x]
S2 FreemakeVideoCapture;FreemakeVideoCapture;i:\programme\converter\Freemake\CaptureLib\CaptureLibService.exe;i:\programme\converter\Freemake\CaptureLib\CaptureLibService.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage-Technologie;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe;c:\windows\SYSNATIVE\IProsetMonitor.exe [x]
S2 iSafeService;iSafeService;c:\program files (x86)\iSafe\iSafeSvc.exe;c:\program files (x86)\iSafe\iSafeSvc.exe [x]
S2 LenovoCOMSvc;LenovoCOMService;c:\program files\Lenovo\Power Dial\LenovoCOMSvc.exe;c:\program files\Lenovo\Power Dial\LenovoCOMSvc.exe [x]
S2 Netzmanager Service;Netzmanager Infrastruktur Informationssystem Dienst;c:\program files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe ;c:\program files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe  [x]
S2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [x]
S2 RtLedService;RtLedService Installer;c:\program files\Realtek\RtLED\RtLEDService.exe;c:\program files\Realtek\RtLED\RtLEDService.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 SpyHunter 4 Service;SpyHunter 4 Service;c:\progra~2\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE;c:\progra~2\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [x]
S2 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 WinI2C-DDC;WinI2C-DDC Kernel Mode Driver;c:\windows\system32\drivers\DDCDrv.sys;c:\windows\SYSNATIVE\drivers\DDCDrv.sys [x]
S3 Apowersoft_AudioDevice;Apowersoft_AudioDevice;c:\windows\system32\drivers\Apowersoft_AudioDevice.sys;c:\windows\SYSNATIVE\drivers\Apowersoft_AudioDevice.sys [x]
S3 AtiHDAudioService;AMD Function Driver for HD Audio Service;c:\windows\system32\drivers\AtihdW76.sys;c:\windows\SYSNATIVE\drivers\AtihdW76.sys [x]
S3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K;c:\windows\system32\DRIVERS\e1k62x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1k62x64.sys [x]
S3 FIXUSTOR;FIXUSTOR;c:\windows\system32\DRIVERS\fixustor.sys;c:\windows\SYSNATIVE\DRIVERS\fixustor.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 iSafeKrnl;iSafeKrnl;c:\program files (x86)\iSafe\iSafeKrnl.sys;c:\program files (x86)\iSafe\iSafeKrnl.sys [x]
S3 pmkbdfltr;PenMount Keyboard Device Filter Driver;c:\windows\system32\DRIVERS\pmkbdfltr.sys;c:\windows\SYSNATIVE\DRIVERS\pmkbdfltr.sys [x]
S3 SaiH075C;SaiH075C;c:\windows\system32\DRIVERS\SaiH075C.sys;c:\windows\SYSNATIVE\DRIVERS\SaiH075C.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
S3 SmbDrvI;SmbDrvI;c:\windows\system32\DRIVERS\Smb_driver_Intel.sys;c:\windows\SYSNATIVE\DRIVERS\Smb_driver_Intel.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
iissvcs	REG_MULTI_SZ   	w3svc was
apphost	REG_MULTI_SZ   	apphostsvc
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-02-11 18:11	1211720	----a-w-	c:\program files (x86)\Google\Chrome\Application\32.0.1700.107\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-02-13 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-08-04 04:34]
.
2014-02-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-02 19:09]
.
2014-02-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-02 19:09]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-12-06 14:47	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-12-06 14:47	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-12-06 14:47	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2013-12-06 14:47	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-12-06 14:47	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-12-06 14:47	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-03-28 11786344]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2013-10-23 1266912]
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = about:blank
uLocal Page = c:\windows\system32\blank.htm
uDefault_Page_URL = about:blank
mDefault_Search_URL = hxxp://www.google.com
mDefault_Page_URL = about:blank
mStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://www.google.com
mCustomizeSearch = hxxp://www.google.com
mSearchAssistant = hxxp://www.google.com
TCP: DhcpNameServer = 192.168.3.1 192.168.3.1
TCP: Interfaces\{93496D7E-FC92-4851-937A-CB8EDF4EF0B0}: DhcpNameServer = 192.168.3.1 192.168.3.1
FF - ProfilePath - c:\users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3317483&CUI=UN21789345815038290&UM=2&SearchSource=3&q={searchTerms}&sspv=S41A
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3317483&SearchSource=2&CUI=UN21789345815038290&UM=2&sspv=S41A&q=
FF - prefs.js: browser.startup.homepage - about:blank
FF - prefs.js: browser.search.selectedEngine - Google
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
AddRemove-DesertCombat - c:\windows\iun6002.exe
AddRemove-MDT - c:\windows\iun6002.exe
AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe
AddRemove-{5F189DF5-2D05-472B-9091-84D9848AE48B}{976137e5} - c:\progra~3\WebPlat\WebPlat.dll
.
.
         

2.Teil

.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Classes\CLSID]
@DACL=(02 0000)
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}]
@DACL=(02 0000)
@="Java Plug-in 10.4.1"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_03"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_04"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_05"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_01"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_01"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_02"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_02"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_03"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_03"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_04"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_04"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_05"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_05"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_06"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_06"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_07"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_07"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_08"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_08"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_09"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_09"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_10"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_10"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_11"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_11"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_12"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_12"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_13"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_13"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_14"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_14"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_15"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_15"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_16"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_16"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_17"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_17"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_18"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_18"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_19"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_19"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_20"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_20"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_21"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_21"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_01"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_01"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_02"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_02"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_03"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_03"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_04"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_04"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_01"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_01"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_02"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_02"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_03"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_03"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_04"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_04"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_05"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_05"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_06"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_06"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_07"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_07"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_01"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_01"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_02"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_02"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_03"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_03"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_04"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_04"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_05"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_05"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_06"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_06"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_07"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_07"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_08"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_08"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_09"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_09"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_10"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_10"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_11"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_11"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_12"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_12"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_13"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_13"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_14"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_14"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_15"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_15"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_16"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_16"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_17"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_17"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_18"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_18"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_19"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_19"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_20"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_20"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_21"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_21"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_22"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_22"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_23"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_23"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_24"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_24"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_25"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_25"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_26"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_26"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_27"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_27"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_28"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_28"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_29"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_29"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_30"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_30"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_31"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_31"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_32"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_32"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_33"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_33"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_34"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_34"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_35"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_35"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_36"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_36"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_01"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_01"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_01"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_02"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_02"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_02"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_03"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_03"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_03"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_04"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_04"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_04"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_05"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_05"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_05"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_06"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_06"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_06"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_07"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_07"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_07"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_08"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_08"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_08"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_09"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_09"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_09"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_10"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_10"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_10"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_11"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_11"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_11"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_12"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_12"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_12"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_13"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_13"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_13"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_14"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_14"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_14"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_15"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_15"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_15"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_16"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_16"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_16"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_17"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_17"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_17"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_18"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_18"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_18"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_19"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_19"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_19"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_20"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_20"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_20"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_21"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_21"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_21"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_22"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_22"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_22"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_23"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_23"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_23"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_24"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_24"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_24"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_25"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_25"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_25"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_26"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_26"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_26"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_27"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_27"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_27"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_28"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_28"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_28"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_29"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_29"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_29"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_30"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_30"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_30"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_31"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_31"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_31"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_32"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_32"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_32"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_33"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_33"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_33"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_34"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_34"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_34"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_01"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_01"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_01"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_02"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_02"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_02"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_03"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_03"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_03"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_04"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_04"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_04"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_05"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_05"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_05"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_06"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_06"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_06"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_07"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_07"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_07"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_08"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_08"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_08"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_09"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_09"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_09"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_10"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_10"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_10"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_11"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_11"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_11"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_12"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_12"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_12"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_13"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_13"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_13"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_14"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_14"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_14"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_15"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_15"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_15"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_16"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_16"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_16"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_17"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_17"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_17"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_18"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_18"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_18"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_19"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_19"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_19"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_20"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_20"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_20"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_21"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_21"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_21"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_22"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_22"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_22"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_23"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_23"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_23"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_24"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_24"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_24"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_25"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_25"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_25"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_26"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_26"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_26"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_27"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_27"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_27"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_28"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_28"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_28"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_29"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_29"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_29"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_30"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_30"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_30"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_31"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_31"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_31"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_01"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_01"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_01"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_02"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_02"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_02"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_03"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_03"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_03"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_04"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_04"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_04"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 10.4.1"
.
[HKEY_USERS\.Default\Software\Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_02"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*Á�Ú0]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*Á�Ú0\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*«˜U!]
@Class="Shell"
@Allowed: (Read) (RestrictedCode)
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.*«˜U!\OpenWithList]
@Class="Shell"
"a"="vlc.exe"
"MRUList"="a"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{F8F5F52C-4EBC-F195-9A9C-D5A6E817EFE2}*]
"habmcjgajhbpblbf"=hex:69,61,6c,69,67,6e,6d,6f,6d,61,6c,6c,6e,64,6c,70,6a,70,
   00,00
"iaplmjfpbmdcooopkg"=hex:69,61,6e,6a,64,63,66,66,6e,66,65,70,63,70,66,6c,61,63,
   00,77
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001\Software\SecuROM\!CAUTION! NEVER A OR CHANGE ANY KEY*]
"??"=hex:1e,4d,f8,06,c7,32,56,a5,f7,b2,fa,66,4e,c4,8c,6e,7b,00,4c,c2,e7,2e,7b,
   eb,8d,d1,e9,bd,03,66,c2,84,ec,29,d1,ee,58,3d,fa,fb,fc,b6,0f,45,8e,af,15,d0,\
"??"=hex:66,47,2b,96,00,f0,08,b2,d1,52,a6,d1,c9,ab,15,53
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID]
@DACL=(02 0000)
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}]
@DACL=(02 0000)
@="Java Plug-in 10.4.0"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_03"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_04"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_05"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_01"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_01"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_02"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_02"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_03"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_03"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_04"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_04"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_05"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_05"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_06"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_06"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_07"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_07"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_08"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_08"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_09"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_09"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_10"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_10"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_11"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_11"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_12"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_12"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_13"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_13"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_14"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_14"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_15"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_15"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_16"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_16"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_17"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_17"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_18"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_18"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_19"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_19"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_20"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_20"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_21"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_21"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_22"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_22"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_23"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_23"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_24"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_24"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_25"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_25"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_26"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_26"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_27"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_27"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_28"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_28"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_29"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_29"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_30"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_30"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_01"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_01"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_02"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_02"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_03"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_03"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_04"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_04"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_01"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_01"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_02"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_02"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_03"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_03"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_04"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_04"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_05"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_05"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_06"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_06"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_07"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_07"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_01"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_01"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_02"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_02"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_03"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_03"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_04"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_04"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_05"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_05"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_06"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_06"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_07"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_07"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_08"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_08"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_09"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_09"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_10"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_10"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_11"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_11"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_12"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_12"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_13"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_13"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_14"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_14"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_15"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_15"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_16"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_16"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_17"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_17"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_18"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_18"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_19"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_19"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_20"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_20"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_21"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_21"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_22"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_22"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_23"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_23"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_24"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_24"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_25"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_25"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_26"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_26"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_27"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_27"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_28"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_28"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_29"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_29"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_30"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_30"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_31"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_31"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_32"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_32"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_33"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_33"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_34"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_34"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_35"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_35"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_36"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_36"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_01"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_01"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_01"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_02"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_02"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_02"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_03"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_03"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_03"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_04"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_04"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_04"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_05"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_05"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_05"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_06"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_06"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_06"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_07"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_07"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_07"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_08"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_08"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_08"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_09"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_09"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_09"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_10"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_10"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_10"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_11"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_11"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_11"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_12"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_12"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_12"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_13"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_13"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_13"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_14"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_14"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_14"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_15"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_15"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_15"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_16"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_16"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_16"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_17"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_17"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_17"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_18"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_18"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_18"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_19"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_19"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_19"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_20"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_20"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_20"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_21"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_21"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_21"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_22"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_22"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_22"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_23"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_23"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_23"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_24"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_24"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_24"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_25"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_25"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_25"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_26"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_26"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_26"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_27"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_27"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_27"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_28"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_28"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_28"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_29"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_29"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_29"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_30"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_30"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_30"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_31"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_31"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_31"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_32"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_32"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_32"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_33"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_33"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_33"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_34"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_34"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_34"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_01"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_01"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_01"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_02"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_02"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_02"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_03"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_03"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_03"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_04"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_04"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_04"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_05"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_05"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_05"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_06"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_06"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_06"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_07"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_07"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_07"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_08"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_08"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_08"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_09"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_09"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_09"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_10"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_10"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_10"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_11"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_11"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_11"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_12"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_12"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_12"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_13"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_13"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_13"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_14"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_14"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_14"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_15"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_15"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_15"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_16"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_16"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_16"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_17"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_17"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_17"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_18"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_18"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_18"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_19"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_19"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_19"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_20"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_20"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_20"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_21"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_21"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_21"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_22"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_22"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_22"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_23"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_23"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_23"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_24"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_24"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_24"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_25"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_25"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_25"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_26"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_26"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_26"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_27"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_27"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_27"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_28"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_28"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_28"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_29"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_29"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_29"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_30"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_30"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_30"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_31"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_31"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_31"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_01"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_01"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_01"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_02"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_02"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_02"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_03"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_03"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_03"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_04"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_04"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_04"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 10.4.0"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}]
@DACL=(02 0000)
@="Blender Thumbnail Handler"
.
[HKEY_USERS\S-1-5-21-3427846483-774009953-675166152-1001_Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_02"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\software\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\iSafe\iSafeSvc2.exe
c:\program files (x86)\iSafe\iSafeTray.exe
c:\program files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\SysWOW64\PnkBstrA.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-02-13  12:21:29 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2014-02-13 11:21
.
Vor Suchlauf: 24 Verzeichnis(se), 275.694.002.176 Bytes frei
Nach Suchlauf: 27 Verzeichnis(se), 275.445.391.360 Bytes frei
.
- - End Of File - - 31F6038119EF64DE466F9A912620D2B1
A36C5E4F47E84449FF07ED3517B43A31
         

Downloade Dir bitte Malwarebytes Anti-Malware

• Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
• Starte Malwarebytes' Anti-Malware (MBAM).
• Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
• Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
• Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
• Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
• Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
• Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte AdwCleaner auf deinen Desktop.

• Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
• Starte die AdwCleaner.exe mit einem Doppelklick.
• Stimme den Nutzungsbedingungen zu.
• Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
  • "Tracing" Schlüssel löschen
  • Winsock Einstellungen zurücksetzen
  • Proxy Einstellungen zurücksetzen
  • Internet Explorer Richtlinien zurücksetzen
  • Chrome Richtlinien zurücksetzen
  • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
• Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
• Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
• Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
• Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

• Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
• Drücke eine beliebige Taste, um das Tool zu starten.
• Je nach System kann der Scan eine Weile dauern.
• Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
• Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Malwarebytes Anti-Malware hatte ich schon, und habe ein update gemacht auf 1.75.0.1300
und dann gescannt

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.02.14.06

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16476
Marvin :: MARVIN-PC [Administrator]

14.02.2014 15:46:04
mbam-log-2014-02-14 (15-46-04).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|I:\|Q:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 1120529
Laufzeit: 3 Stunde(n), 43 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1D2ABF6A-2B19-3E94-0991-5B5BDB7134DA} (PUP.Optional.ShoppingChip) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\{77D46E27-0E41-4478-87A6-AABE6FBCF252} (PUP.Optional.GreatSaver.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Typelib\{F126C9FC-9299-40F2-BD42-C59023AD1E7F} (PUP.Optional.GetNow.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Interface\{237FDFDB-3722-470E-8BA8-90196DABE967} (PUP.Optional.GetNow.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 40
C:\Qoobox\Quarantine\C\ProgramData\WebPlat\WebPlatSvc.dll.vir (Trojan.SProtector) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\111usb xp\win xp cd\WXPSP1_DE\BONUS\Tools und Programme\Microsoft XP Suite Keygen\Microsoft XP Suite Keygen.exe (Trojan.Downloader) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\111usb xp\win xp cd\BONUS\Tools und Programme\Microsoft XP Suite Keygen\Microsoft XP Suite Keygen.exe (Trojan.Downloader) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\111usb xp\win xp 2\BONUS\Tools und Programme\Microsoft XP Suite Keygen\Microsoft XP Suite Keygen.exe (Trojan.Downloader) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\111usb xp\win xp cd\WXPSP1_DE\BONUS\Tools und Programme\The Bat 1.60\The Bat 1.60 Crack.exe (Trojan.Agent.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\111usb xp\win xp 2\BONUS\Tools und Programme\The Bat 1.60\The Bat 1.60 Crack.exe (Trojan.Agent.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\spiele\yugi\gns-arm2.7z (Trojan.Agent) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\111usb xp\win xp cd\WXPSP1_DE\BONUS\Tools und Programme\xpTuner 1.03\xpTuner 1.03 Update.exe (RiskWare.Tool.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\111usb xp\win xp 2\BONUS\Tools und Programme\xpTuner 1.03\xpTuner 1.03 Update.exe (RiskWare.Tool.CK) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Users\Marvin\AppData\Local\DownloadGuide\wajam_download.exe.vir (PUP.Optional.Wajam) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Desktop\YTDSetup.exe (PUP.Optional.Spigot.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\downloads\Software\aTubeCatcher_3.8.5187.exe (PUP.Optional.Spigot.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\aaabbb\SoftonicDownloader_fuer_undelete-plus.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\SoftonicDownloader_fuer_tubebox (2).exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\SoftonicDownloader_fuer_ytd-video-downloader (1).exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\SoftonicDownloader_fuer_ytd-video-downloader.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\SoftonicDownloader_fuer_tubebox.exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\SoftonicDownloader_fuer_tubebox (1).exe (PUP.Optional.Softonic.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\downloads\Software\FreemakeVideoConverterSetup.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\picpick_inst.exe (PUP.Optional.OpenCandy) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\downloads\MinecraftInstaller__2490_il119.exe (PUP.Optional.InstallMonetizer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\PHILIPS PTA317 driver provided through lukasdrivers.de.exe (PUP.Optional.GetNow.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\CSBrowserHelper\cs-browser-assistant-2-0.exe (PUP.Optional.CrossRider) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Users\Marvin\AppData\Local\DownloadGuide\mconduitinstaller.exe.vir (PUP.Optional.Conduit.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Conduit\Community Alerts\Alert.dll.vir (PUP.Optional.Conduit) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\Nicht bestätigt 287973.crdownload (PUP.Optional.BundleInstaller.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\Nicht bestätigt 599530.crdownload (PUP.Optional.BundleInstaller.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\Nicht bestätigt 909839.crdownload (PUP.Optional.BundleInstaller.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\Nicht bestätigt 243881.crdownload (PUP.Optional.BundleInstaller.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Users\Marvin\AppData\Roaming\OpenCandy\7BCE386A03874590A522906D4674DD19\DeltaTB.exe.vir (PUP.Optional.Babylon.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\Java.exe (PUP.Optional.AirInstaller) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\Programme\SH4\SpyHunter v4.14.5.4268\Patch\spyhunter.4.3.32-patch.exe (PUP.Hacktool.Patcher) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files (x86)\Enigma Software Group\SpyHunter\spyhunter.4.3.32-patch.exe (PUP.Hacktool.Patcher) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\Tuifly\geheundfolge.rar (PUP.Hacktool.Patcher) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\spiele\yugi\yugioh_4\daby4tr2.exe (PUP.HackTool.HotKeysHook) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\spiele\yugi\yugioh_4.zip (PUP.HackTool.HotKeysHook) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\spiele\9276_1231000752_GTAIV4Trainer.rar (HackTool.GamesCheat.Gen) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\spiele\11227_Grand Theft Auto IV v1.0.3.0 plus5 trainer.rar (HackTool.GamesCheat.Gen) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Marvin\Downloads\Malwarebytes.Anti-Malware.1.42.FFF.rar (Dont.Steal.Our.Software) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\AdwCleaner\Quarantine\C\Users\Marvin\AppData\Local\DownloadGuide\PallySoft_ShoppingChip.exe.vir (Adware.Linkular) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

AdwCleaner[S1].txt

# AdwCleaner v3.018 - Bericht erstellt am 14/02/2014 um 18:57:32
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Marvin - MARVIN-PC
# Gestartet von : C:\Users\Marvin\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Datei Gelöscht : C:\Users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default\searchplugins\delta.xml

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2410}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2410}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{014DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4B71-B0A3-3D82E62A6909}
Schlüssel Gelöscht : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2410}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2410}
Schlüssel Gelöscht : HKCU\Software\OCS

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v26.0 (en-US)

[ Datei : C:\Users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default\prefs.js ]

Zeile gelöscht : user_pref("CT3317483.1000082.isPlayDisplay", "true");
Zeile gelöscht : user_pref("CT3317483.1000082.state", "{\"state\":\"stopped\",\"text\":\"BlackBeat...\",\"description\":\"BlackBeats FM (D)\",\"url\":\"hxxp://www.blackbeats.fm/listen.m3u\"}");
Zeile gelöscht : user_pref("CT3317483.1000234.TWC_TMP_city", "NUREMBERG");
Zeile gelöscht : user_pref("CT3317483.1000234.TWC_TMP_country", "DE");
Zeile gelöscht : user_pref("CT3317483.1000234.TWC_country", "GERMANY");
Zeile gelöscht : user_pref("CT3317483.1000234.TWC_locId", "GMBY0250");
Zeile gelöscht : user_pref("CT3317483.1000234.TWC_location", "Nuremberg, MT, Germany");
Zeile gelöscht : user_pref("CT3317483.1000234.TWC_region", "DE");
Zeile gelöscht : user_pref("CT3317483.1000234.TWC_temp_dis", "c");
Zeile gelöscht : user_pref("CT3317483.1000234.TWC_wind_dis", "kmh");
Zeile gelöscht : user_pref("CT3317483.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3317483.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3317483.FF19Solved", "true");
Zeile gelöscht : user_pref("CT3317483.FirstTime", "true");
Zeile gelöscht : user_pref("CT3317483.FirstTimeFF3", "true");
Zeile gelöscht : user_pref("CT3317483.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3317483&SearchSource=2&CUI=UN21789345815038290&UM=2&sspv=S41A&q=");
Zeile gelöscht : user_pref("CT3317483.UserID", "UN21789345815038290");
Zeile gelöscht : user_pref("CT3317483.addressBarTakeOverEnabledInHidden", "true");
Zeile gelöscht : user_pref("CT3317483.appOptions", "{}");
Zeile gelöscht : user_pref("CT3317483.browser.search.defaultthis.engineName", "true");
Zeile gelöscht : user_pref("CT3317483.countryCode", "DE");
Zeile gelöscht : user_pref("CT3317483.defaultSearch", "true");
Zeile gelöscht : user_pref("CT3317483.embeddedsData", "[{\"appId\":\"10000002\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"instantAlert\":[...]
Zeile gelöscht : user_pref("CT3317483.enableAlerts", "true");
Zeile gelöscht : user_pref("CT3317483.enableSearchFromAddressBar", "true");
Zeile gelöscht : user_pref("CT3317483.firstTimeDialogOpened", "true");
Zeile gelöscht : user_pref("CT3317483.fixPageNotFoundError", "true");
Zeile gelöscht : user_pref("CT3317483.fixPageNotFoundErrorByUser", "true");
Zeile gelöscht : user_pref("CT3317483.fixPageNotFoundErrorInHidden", "true");
Zeile gelöscht : user_pref("CT3317483.fullUserID", "UN21789345815038290.IN.20131231145418");
Zeile gelöscht : user_pref("CT3317483.installDate", "31/12/2013 14:54:20");
Zeile gelöscht : user_pref("CT3317483.installId", "cidtubebox");
Zeile gelöscht : user_pref("CT3317483.installSessionId", "{5C67EDB8-C591-4E71-A943-836D4A3ED8CD}");
Zeile gelöscht : user_pref("CT3317483.installSp", "TRUE");
Zeile gelöscht : user_pref("CT3317483.installType", "conduitnsisintegration");
Zeile gelöscht : user_pref("CT3317483.installUsage", "2013-12-31T16:54:43.77668+03:00");
Zeile gelöscht : user_pref("CT3317483.installUsageEarly", "2013-12-31T16:54:43.33988+03:00");
Zeile gelöscht : user_pref("CT3317483.installerVersion", "1.8.1.4");
Zeile gelöscht : user_pref("CT3317483.isCheckedStartAsHidden", true);
Zeile gelöscht : user_pref("CT3317483.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3317483.isFirstTimeToolbarLoading", "false");
Zeile gelöscht : user_pref("CT3317483.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Zeile gelöscht : user_pref("CT3317483.keyword", "true");
Zeile gelöscht : user_pref("CT3317483.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3317483&octid=CT3317483&SearchSource=15&CUI=UN21789345815038290&SSPV=S41A&Lay=1&UM=2\"}[...]
Zeile gelöscht : user_pref("CT3317483.lastVersion", "10.23.0.726");
Zeile gelöscht : user_pref("CT3317483.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Zeile gelöscht : user_pref("CT3317483.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DLFasFq4GJYM\",\"EB_MAIN_FRAME_TITLE\":\"LORDE%20-%20Royals%20-[...]
Zeile gelöscht : user_pref("CT3317483.openThankYouPage", "false");
Zeile gelöscht : user_pref("CT3317483.openUninstallPage", "true");
Zeile gelöscht : user_pref("CT3317483.originalHomepage", "hxxp://start.qone8.com/?type=hp&ts=1383328004&from=amt&uid=3219913727_67301_927BCE60");
Zeile gelöscht : user_pref("CT3317483.originalSearchAddressUrl", "");
Zeile gelöscht : user_pref("CT3317483.originalSearchEngine", "qone8");
Zeile gelöscht : user_pref("CT3317483.originalSearchEngineName", "qone8");
Zeile gelöscht : user_pref("CT3317483.revertSettingsEnabled", "true");
Zeile gelöscht : user_pref("CT3317483.search.searchAppId", "10000002");
Zeile gelöscht : user_pref("CT3317483.search.searchCount", "0");
Zeile gelöscht : user_pref("CT3317483.searchFromAddressBarEnabledByUser", "true");
Zeile gelöscht : user_pref("CT3317483.searchInNewTabEnabledByUser", "true");
Zeile gelöscht : user_pref("CT3317483.searchInNewTabEnabledInHidden", "true");
Zeile gelöscht : user_pref("CT3317483.searchRevert", "true");
Zeile gelöscht : user_pref("CT3317483.searchSuggestEnabledByUser", "true");
Zeile gelöscht : user_pref("CT3317483.searchUninstallUserMode", "2");
Zeile gelöscht : user_pref("CT3317483.searchUserMode", "2");
Zeile gelöscht : user_pref("CT3317483.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3317483.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3317483.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Zeile gelöscht : user_pref("CT3317483.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3317483\"}");
Zeile gelöscht : user_pref("CT3317483.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://RadioTotalToolbar.OurToolbar.com//xpi\"}");
Zeile gelöscht : user_pref("CT3317483.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"RadioTotal \"}");
Zeile gelöscht : user_pref("CT3317483.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
Zeile gelöscht : user_pref("CT3317483.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
Zeile gelöscht : user_pref("CT3317483.serviceLayer_services_Configuration_lastUpdate", "1388498077422");
Zeile gelöscht : user_pref("CT3317483.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1388498079984");
Zeile gelöscht : user_pref("CT3317483.serviceLayer_services_appsMetadata_lastUpdate", "1388498077861");
Zeile gelöscht : user_pref("CT3317483.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1388498079821");
Zeile gelöscht : user_pref("CT3317483.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1388498077591");
Zeile gelöscht : user_pref("CT3317483.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1388498079877");
Zeile gelöscht : user_pref("CT3317483.serviceLayer_services_login_10.23.0.726_lastUpdate", "1388498079989");
Zeile gelöscht : user_pref("CT3317483.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1388498079880");
Zeile gelöscht : user_pref("CT3317483.serviceLayer_services_searchAPI_lastUpdate", "1388498079911");
Zeile gelöscht : user_pref("CT3317483.serviceLayer_services_serviceMap_lastUpdate", "1388498076807");
Zeile gelöscht : user_pref("CT3317483.serviceLayer_services_toolbarContextMenu_lastUpdate", "1388498078017");
Zeile gelöscht : user_pref("CT3317483.serviceLayer_services_toolbarSettings_lastUpdate", "1388498077301");
Zeile gelöscht : user_pref("CT3317483.serviceLayer_services_translation_lastUpdate", "1388498079903");
Zeile gelöscht : user_pref("CT3317483.settingsINI", true);
Zeile gelöscht : user_pref("CT3317483.shouldFirstTimeDialog", "false");
Zeile gelöscht : user_pref("CT3317483.showToolbarPermission", "false");
Zeile gelöscht : user_pref("CT3317483.smartbar.CTID", "CT3317483");
Zeile gelöscht : user_pref("CT3317483.smartbar.Uninstall", "0");
Zeile gelöscht : user_pref("CT3317483.smartbar.homepage", "true");
Zeile gelöscht : user_pref("CT3317483.smartbar.toolbarName", "RadioTotal ");
Zeile gelöscht : user_pref("CT3317483.startPage", "true");
Zeile gelöscht : user_pref("CT3317483.toolbarBornServerTime", "31-12-2013");
Zeile gelöscht : user_pref("CT3317483.toolbarCurrentServerTime", "31-12-2013");
Zeile gelöscht : user_pref("CT3317483.toolbarInstallDate", "31-12-2013 14:54:18");
Zeile gelöscht : user_pref("CT3317483.toolbarLoginClientTime", "Tue Dec 31 2013 14:54:39 GMT+0100");
Zeile gelöscht : user_pref("CT3317483.versionFromInstaller", "10.23.0.726");
Zeile gelöscht : user_pref("CT3317483.xpeMode", "0");
Zeile gelöscht : user_pref("CT3317483_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1388498075712,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}]");
Zeile gelöscht : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3317483&octid=CT3317483&SearchSource=61&CUI=UN21789345815038290&UM=2&UP=SP84D45B03-2617-4EC3-B1F2-83676675F9D7&SSPV=S41A")[...]
Zeile gelöscht : user_pref("Smartbar.ConduitSearchEngineList", "RadioTotal Customized Web Search");
Zeile gelöscht : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3317483&SearchSource=2&CUI=UN21789345815038290&UM=2&sspv=S41A&q=");
Zeile gelöscht : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "");
Zeile gelöscht : user_pref("Smartbar.keywordURLSelectedCTID", "CT3317483");
Zeile gelöscht : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
Zeile gelöscht : user_pref("browser.search.defaultthis.engineName", "RadioTotal Customized Web Search");
Zeile gelöscht : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3317483&CUI=UN21789345815038290&UM=2&SearchSource=3&q={searchTerms}&sspv=S41A");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.babExt", "");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=110819&tt=100512_2_");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.hardId", "927bce60000000000000e2cb382e83a6");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.id", "927bce60000000000000e2cb382e83a6");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.instlDay", "15476");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.newTab", true);
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=110819&tt=100512_2_&babsrc=NT_ss&mntrId=927bce60000000000000e2cb382e83a6");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1723:54:10");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
Zeile gelöscht : user_pref("extensions.delta.admin", false);
Zeile gelöscht : user_pref("extensions.delta.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Zeile gelöscht : user_pref("extensions.delta.autoRvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.bbDpng", "6");
Zeile gelöscht : user_pref("extensions.delta.cntry", "DE");
Zeile gelöscht : user_pref("extensions.delta.dfltLng", "de");
Zeile gelöscht : user_pref("extensions.delta.excTlbr", false);
Zeile gelöscht : user_pref("extensions.delta.ffxUnstlRst", true);
Zeile gelöscht : user_pref("extensions.delta.hdrMd5", "CC5B6BF3416793127B7997492319AEE3");
Zeile gelöscht : user_pref("extensions.delta.id", "927bce600000000000004437e60acb1a");
Zeile gelöscht : user_pref("extensions.delta.instlDay", "15935");
Zeile gelöscht : user_pref("extensions.delta.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.delta.lastVrsnTs", "1.8.24.519:02:12");
Zeile gelöscht : user_pref("extensions.delta.newTab", false);
Zeile gelöscht : user_pref("extensions.delta.prdct", "delta");
Zeile gelöscht : user_pref("extensions.delta.prtnrId", "delta");
Zeile gelöscht : user_pref("extensions.delta.rvrt", "false");
Zeile gelöscht : user_pref("extensions.delta.sg", "czb");
Zeile gelöscht : user_pref("extensions.delta.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.delta.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.delta.tlbrSrchUrl", "");
Zeile gelöscht : user_pref("extensions.delta.vrsn", "1.8.24.5");
Zeile gelöscht : user_pref("extensions.delta.vrsnTs", "1.8.24.519:02:12");
Zeile gelöscht : user_pref("extensions.delta.vrsni", "1.8.24.5");
Zeile gelöscht : user_pref("extensions.delta_i.babExt", "");
Zeile gelöscht : user_pref("extensions.delta_i.babTrack", "affID=121564&tsp=4978");
Zeile gelöscht : user_pref("extensions.delta_i.srcExt", "ss");
Zeile gelöscht : user_pref("extensions.wO4.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.match(/ressbar.co[...]
Zeile gelöscht : user_pref("extensions.zUmBa9_T5Pb.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.match(/re[...]
Zeile gelöscht : user_pref("extentions.y2layers.defaultEnableAppsList", "pagerage,ezlooker,dropdowndeals,twittube,toprelatedtopics,buzzdock");
Zeile gelöscht : user_pref("extentions.y2layers.installId", "e3bcd389-808d-46da-a559-2469d0f8c47e");
Zeile gelöscht : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3317483&SearchSource=2&CUI=UN21789345815038290&UM=2&sspv=S41A&q=");
Zeile gelöscht : user_pref("plugin.state.npconduitfirefoxplugin", 2);
Zeile gelöscht : user_pref("smartbar.addressBarOwnerCTID", "CT3317483");
Zeile gelöscht : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3317483&CUI=UN21789345815038290&UM=2&SearchSource=13&sspv=S41A,hxxp://search.conduit.com/?ctid=CT3317483&octid=CT3317483&Se[...]
Zeile gelöscht : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3317483&SearchSource=2&CUI=UN21789345815038290&UM=2&sspv=S41A&q=");
Zeile gelöscht : user_pref("smartbar.defaultSearchOwnerCTID", "CT3317483");
Zeile gelöscht : user_pref("smartbar.homePageOwnerCTID", "CT3317483");
Zeile gelöscht : user_pref("smartbar.machineId", "4XIY/F9HVKOT+K/93ZNFQ5EKSJBLZ1OZS4CWXIULX5RUTVWQDN7DX2GUIH1EPRZPRIRNQ5KHDRGCUH4EKMLYJQ");
Zeile gelöscht : user_pref("smartbar.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3317483&CUI=UN21789345815038290&UM=2&SearchSource=13&sspv=S41A");
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E+x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E,x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E-x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E.:2z527.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E.x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E/x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E06CG5EL8:", "6E6D696A6F6B6D766E74");
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E06CG5EL8:.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E06CG5EL;8I:K", "247E2D2F226A74736F707571737C747A242F4B49474F42357D5D5C3D");
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E06CG5EL;8I:K.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E0x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E1x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E2x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E3x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E4x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E5x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E6x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E7x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E8x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E9x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E:x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E;x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E<x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E=x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E>x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E?x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7E@x305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7EAx305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7EBE3G=;D9N9=D", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57");
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7EBE3G=;D9N9=D.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7EBx305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7ECx305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7EDx305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B+7Etx305.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B-0?3G>D", "6D6A40716F3E41437A7871747220754C4E7C2521227B542A26252625582C292E2F302A2A");
Zeile gelöscht : user_pref("valueApps.CT3317483./9B-0?3G>D.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B-0?3G@6:5;", "");
Zeile gelöscht : user_pref("valueApps.CT3317483./9B-0?3G@6:5;.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B-0?3GFA7EF", "2B2E2C3D");
Zeile gelöscht : user_pref("valueApps.CT3317483./9B-0?3GFA7EF.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B-3=3ECCJA=F>", "247E333D2C452F4135276F297B7E7D21202F26313E4249357D37382F3A494D5D513F283338435D6554695B65546D57695D5D686365533C70766C66755E");
Zeile gelöscht : user_pref("valueApps.CT3317483./9B-3=3ECCJA=F>.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B/>01=9A6K6<IM;KRIE@PDAWM", "6A696B7273747576");
Zeile gelöscht : user_pref("valueApps.CT3317483./9B/>01=9A6K6<IM;KRIE@PDAWM.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B3=>@44I48?", "372C2D3269757633423633414847203E3D474E4D4C45474F2A554A4D2D5858585E4B554E366352564F");
Zeile gelöscht : user_pref("valueApps.CT3317483./9B3=>@44I48?.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B5BA==9CJAG", "3B3D6D3C3F6C71417A43794576797D4A4B7A7D517E");
Zeile gelöscht : user_pref("valueApps.CT3317483./9B5BA==9CJAG.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B6B11G4C56B>F;P;ANR@P", "6E6D696A6F6B6D766F73707A7B");
Zeile gelöscht : user_pref("valueApps.CT3317483./9B6B11G4C56B>F;P;ANR@P.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B90E@.3C;7B=?OFB>>RHIQS", "393F352F3E");
Zeile gelöscht : user_pref("valueApps.CT3317483./9B90E@.3C;7B=?OFB>>RHIQS.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B9643G3/9E", "6A");
Zeile gelöscht : user_pref("valueApps.CT3317483./9B9643G3/9E.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B;45>:BI9I7IE", "2B2E2C3D");
Zeile gelöscht : user_pref("valueApps.CT3317483./9B;45>:BI9I7IE.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B<:222H64<", "393F352F3E");
Zeile gelöscht : user_pref("valueApps.CT3317483./9B<:222H64<.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B<:222H64<L8DAJ", "6D70706F7673737974772A797872787A757B7D");
Zeile gelöscht : user_pref("valueApps.CT3317483./9B<:222H64<L8DAJ.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B=+03EH8H8J?:", "4443");
Zeile gelöscht : user_pref("valueApps.CT3317483./9B=+03EH8H8J?:.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B?+E2A52D8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");
Zeile gelöscht : user_pref("valueApps.CT3317483./9B?+E2A52D8.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483./9B?B0D:8AJ62<H", "6D");
Zeile gelöscht : user_pref("valueApps.CT3317483./9B?B0D:8AJ62<H.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483./9BA@0<0BI6A7GN:6@L?", "6C");
Zeile gelöscht : user_pref("valueApps.CT3317483./9BA@0<0BI6A7GN:6@L?.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.PG_ENABLE", "74727565");
Zeile gelöscht : user_pref("valueApps.CT3317483.PG_ENABLE.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.SF_JUST_INSTALLED", "46414C5345");
Zeile gelöscht : user_pref("valueApps.CT3317483.SF_JUST_INSTALLED.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.SF_STATUS", "454E41424C4544");
Zeile gelöscht : user_pref("valueApps.CT3317483.SF_STATUS.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.SF_USER_ID", "6369645F333131323230313331343534343639323937333635");
Zeile gelöscht : user_pref("valueApps.CT3317483.SF_USER_ID.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483._key_cl_active", "33393037383931382D376262332D343664342D386638322D363037336638656236336564");
Zeile gelöscht : user_pref("valueApps.CT3317483._key_cl_active.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.cbfirsttime", "5475652044656320333120323031332031343A35343A343720474D542B30313030");
Zeile gelöscht : user_pref("valueApps.CT3317483.cbfirsttime.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_appStateReportTime", "31333838343938303833333037");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_appStateReportTime.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_appState_Clarity_Active", "6F6E");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_appState_Clarity_Active.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_appState_CouponBuddy", "6F6E");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_appState_CouponBuddy.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_appState_Easytobook", "6F6E");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_appState_Easytobook.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_appState_Easytobook_targeted", "6F6E");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_appState_Easytobook_targeted.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_appState_PriceGong", "6F6E");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_appState_PriceGong.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_appState_WindowShopper", "6F6E");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_appState_WindowShopper.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_appsConfig.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_appsDefaultEnabled", "74727565");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_appsDefaultEnabled.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_calledSetupService", "31");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_calledSetupService.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_currentVersion", "312E31322E302E35");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_currentVersion.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_existingUsersRecoveryDone", "31");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_existingUsersRecoveryDone.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_first_time", "31");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_first_time.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_lastLoginTime", "31333838343938303837303637");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_lastLoginTime.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_localization.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_mamEnabled", "74727565");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_mamEnabled.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_migrated_from_ls", "31");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_migrated_from_ls.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_new_welcome_experience", "31");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_new_welcome_experience.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_settings1.12.0.5.storedInFile", true);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_showWelcomeGadget", "66616C7365");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_showWelcomeGadget.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_stamp", "313130315F30");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_stamp.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_userId", "62363736333732322D643537612D346461372D613632342D303532666339386630313032");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_userId.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_user_approval_interacted", "31");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_user_approval_interacted.storedInFile", false);
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_welcomeDialogMode", "31");
Zeile gelöscht : user_pref("valueApps.CT3317483.mam_gk_welcomeDialogMode.storedInFile", false);

-\\ Google Chrome v32.0.1700.107

[ Datei : C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [45398 octets] - [11/02/2014 16:36:16]
AdwCleaner[R1].txt - [29551 octets] - [14/02/2014 18:54:56]
AdwCleaner[S0].txt - [44097 octets] - [11/02/2014 16:40:25]
AdwCleaner[S1].txt - [29405 octets] - [14/02/2014 18:57:32]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [29466 octets] ##########
         

JRT.txt

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 7 Home Premium x64
Ran by Marvin on 14.02.2014 at 19:03:39,86
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Failed to stop: [Service] isafekrnl 
Failed to stop: [Service] isafeservice 



~~~ Registry Values



~~~ Registry Keys

Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\isafe
Failed to delete: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9920DB93-04BF-42FB-A70C-1863B14C8787}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2410}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2410}
Failed to delete: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2410}



~~~ Files

Successfully deleted: [File] "C:\Users\Marvin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\speedupmypc.lnk"



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Marvin\AppData\Roaming\isafe"
Successfully deleted: [Folder] "C:\Users\Marvin\appdata\local\cre"
Successfully deleted: [Folder] "C:\Users\Marvin\appdata\locallow\datamngr"
Failed to delete: [Folder] "C:\Program Files (x86)\isafe"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue"



~~~ FireFox

Failed to delete: [File] C:\Users\Marvin\AppData\Roaming\mozilla\firefox\profiles\u7ctgmmt.default\searchplugins\delta.xml
Successfully deleted: [Folder] C:\Users\Marvin\AppData\Roaming\mozilla\firefox\profiles\u7ctgmmt.default\extensions\staged
Successfully deleted the following from C:\Users\Marvin\AppData\Roaming\mozilla\firefox\profiles\u7ctgmmt.default\prefs.js

user_pref("CT3317483.1000082.isPlayDisplay", "true");
user_pref("CT3317483.1000082.state", "{\"state\":\"stopped\",\"text\":\"BlackBeat...\",\"description\":\"BlackBeats FM (D)\",\"url\":\"hxxp://www.blackbeats.fm/listen.m3u\"}")
user_pref("CT3317483.1000234.TWC_TMP_city", "NUREMBERG");
user_pref("CT3317483.1000234.TWC_TMP_country", "DE");
user_pref("CT3317483.1000234.TWC_country", "GERMANY");
user_pref("CT3317483.1000234.TWC_locId", "GMBY0250");
user_pref("CT3317483.1000234.TWC_location", "Nuremberg, MT, Germany");
user_pref("CT3317483.1000234.TWC_region", "DE");
user_pref("CT3317483.1000234.TWC_temp_dis", "c");
user_pref("CT3317483.1000234.TWC_wind_dis", "kmh");
user_pref("CT3317483.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3317483.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3317483.FF19Solved", "true");
user_pref("CT3317483.FirstTime", "true");
user_pref("CT3317483.FirstTimeFF3", "true");
user_pref("CT3317483.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3317483&SearchSource=2&CUI=UN21789345815038290&UM=2&sspv=S41A&q=");
user_pref("CT3317483.UserID", "UN21789345815038290");
user_pref("CT3317483.addressBarTakeOverEnabledInHidden", "true");
user_pref("CT3317483.appOptions", "{}");
user_pref("CT3317483.browser.search.defaultthis.engineName", "true");
user_pref("CT3317483.countryCode", "DE");
user_pref("CT3317483.defaultSearch", "true");
user_pref("CT3317483.embeddedsData", "[{\"appId\":\"10000002\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm
user_pref("CT3317483.enableAlerts", "true");
user_pref("CT3317483.enableSearchFromAddressBar", "true");
user_pref("CT3317483.firstTimeDialogOpened", "true");
user_pref("CT3317483.fixPageNotFoundError", "true");
user_pref("CT3317483.fixPageNotFoundErrorByUser", "true");
user_pref("CT3317483.fixPageNotFoundErrorInHidden", "true");
user_pref("CT3317483.fullUserID", "UN21789345815038290.IN.20131231145418");
user_pref("CT3317483.installDate", "31/12/2013 14:54:20");
user_pref("CT3317483.installId", "cidtubebox");
user_pref("CT3317483.installSessionId", "{5C67EDB8-C591-4E71-A943-836D4A3ED8CD}");
user_pref("CT3317483.installSp", "TRUE");
user_pref("CT3317483.installType", "conduitnsisintegration");
user_pref("CT3317483.installUsage", "2013-12-31T16:54:43.77668+03:00");
user_pref("CT3317483.installUsageEarly", "2013-12-31T16:54:43.33988+03:00");
user_pref("CT3317483.installerVersion", "1.8.1.4");
user_pref("CT3317483.isCheckedStartAsHidden", true);
user_pref("CT3317483.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3317483.isFirstTimeToolbarLoading", "false");
user_pref("CT3317483.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
user_pref("CT3317483.keyword", "true");
user_pref("CT3317483.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit.com/?ctid=CT3317483&octid=CT3317483&SearchSource=15&CUI=UN2178934581503829
user_pref("CT3317483.lastVersion", "10.23.0.726");
user_pref("CT3317483.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
user_pref("CT3317483.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DLFasFq4GJYM\",\"EB_MAIN_FRAME_TITLE\"
user_pref("CT3317483.openThankYouPage", "false");
user_pref("CT3317483.openUninstallPage", "true");
user_pref("CT3317483.originalHomepage", "hxxp://start.qone8.com/?type=hp&ts=1383328004&from=amt&uid=3219913727_67301_927BCE60");
user_pref("CT3317483.originalSearchAddressUrl", "");
user_pref("CT3317483.originalSearchEngine", "qone8");
user_pref("CT3317483.originalSearchEngineName", "qone8");
user_pref("CT3317483.revertSettingsEnabled", "true");
user_pref("CT3317483.search.searchAppId", "10000002");
user_pref("CT3317483.search.searchCount", "0");
user_pref("CT3317483.searchFromAddressBarEnabledByUser", "true");
user_pref("CT3317483.searchInNewTabEnabledByUser", "true");
user_pref("CT3317483.searchInNewTabEnabledInHidden", "true");
user_pref("CT3317483.searchRevert", "true");
user_pref("CT3317483.searchSuggestEnabledByUser", "true");
user_pref("CT3317483.searchUninstallUserMode", "2");
user_pref("CT3317483.searchUserMode", "2");
user_pref("CT3317483.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3317483.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
user_pref("CT3317483.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
user_pref("CT3317483.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT3317483\"}");
user_pref("CT3317483.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://RadioTotalToolbar.OurToolbar.com//xpi\"}");
user_pref("CT3317483.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"RadioTotal \"}");
user_pref("CT3317483.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
user_pref("CT3317483.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
user_pref("CT3317483.serviceLayer_services_Configuration_lastUpdate", "1388498077422");
user_pref("CT3317483.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1388498079984");
user_pref("CT3317483.serviceLayer_services_appsMetadata_lastUpdate", "1388498077861");
user_pref("CT3317483.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1388498079821");
user_pref("CT3317483.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1388498077591");
user_pref("CT3317483.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1388498079877");
user_pref("CT3317483.serviceLayer_services_login_10.23.0.726_lastUpdate", "1388498079989");
user_pref("CT3317483.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1388498079880");
user_pref("CT3317483.serviceLayer_services_searchAPI_lastUpdate", "1388498079911");
user_pref("CT3317483.serviceLayer_services_serviceMap_lastUpdate", "1388498076807");
user_pref("CT3317483.serviceLayer_services_toolbarContextMenu_lastUpdate", "1388498078017");
user_pref("CT3317483.serviceLayer_services_toolbarSettings_lastUpdate", "1388498077301");
user_pref("CT3317483.serviceLayer_services_translation_lastUpdate", "1388498079903");
user_pref("CT3317483.settingsINI", true);
user_pref("CT3317483.shouldFirstTimeDialog", "false");
user_pref("CT3317483.showToolbarPermission", "false");
user_pref("CT3317483.smartbar.CTID", "CT3317483");
user_pref("CT3317483.smartbar.Uninstall", "0");
user_pref("CT3317483.smartbar.homepage", "true");
user_pref("CT3317483.smartbar.toolbarName", "RadioTotal ");
user_pref("CT3317483.startPage", "true");
user_pref("CT3317483.toolbarBornServerTime", "31-12-2013");
user_pref("CT3317483.toolbarCurrentServerTime", "31-12-2013");
user_pref("CT3317483.toolbarInstallDate", "31-12-2013 14:54:18");
user_pref("CT3317483.toolbarLoginClientTime", "Tue Dec 31 2013 14:54:39 GMT+0100");
user_pref("CT3317483.versionFromInstaller", "10.23.0.726");
user_pref("CT3317483.xpeMode", "0");
user_pref("CT3317483_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\":1388498075712,\"isWithState\":\"\",\"timeFromStart\":0,\"timeFromPrev\":0}
user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT3317483&octid=CT3317483&SearchSource=61&CUI=UN21789345815038290&UM=2&UP=SP84D45B03-2617-4EC3-B1F2
user_pref("Smartbar.ConduitSearchEngineList", "RadioTotal Customized Web Search");
user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3317483&SearchSource=2&CUI=UN21789345815038290&UM=2&sspv=S41A&q=");
user_pref("Smartbar.SearchFromAddressBarSavedUrl", "");
user_pref("Smartbar.keywordURLSelectedCTID", "CT3317483");
user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
user_pref("browser.search.defaultthis.engineName", "RadioTotal Customized Web Search");
user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3317483&CUI=UN21789345815038290&UM=2&SearchSource=3&q={searchTerms}&sspv=S41A");
user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
user_pref("extensions.BabylonToolbar_i.babExt", "");
user_pref("extensions.BabylonToolbar_i.babTrack", "affID=110819&tt=100512_2_");
user_pref("extensions.BabylonToolbar_i.hardId", "927bce60000000000000e2cb382e83a6");
user_pref("extensions.BabylonToolbar_i.id", "927bce60000000000000e2cb382e83a6");
user_pref("extensions.BabylonToolbar_i.instlDay", "15476");
user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
user_pref("extensions.BabylonToolbar_i.newTab", true);
user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=110819&tt=100512_2_&babsrc=NT_ss&mntrId=927bce60000000000000e2cb382e83a6");
user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9");
user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1723:54:10");
user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
user_pref("extensions.delta.admin", false);
user_pref("extensions.delta.aflt", "babsst");
user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
user_pref("extensions.delta.autoRvrt", "false");
user_pref("extensions.delta.bbDpng", "6");
user_pref("extensions.delta.cntry", "DE");
user_pref("extensions.delta.dfltLng", "de");
user_pref("extensions.delta.excTlbr", false);
user_pref("extensions.delta.ffxUnstlRst", true);
user_pref("extensions.delta.hdrMd5", "CC5B6BF3416793127B7997492319AEE3");
user_pref("extensions.delta.id", "927bce600000000000004437e60acb1a");
user_pref("extensions.delta.instlDay", "15935");
user_pref("extensions.delta.instlRef", "sst");
user_pref("extensions.delta.lastVrsnTs", "1.8.24.519:02:12");
user_pref("extensions.delta.newTab", false);
user_pref("extensions.delta.prdct", "delta");
user_pref("extensions.delta.prtnrId", "delta");
user_pref("extensions.delta.rvrt", "false");
user_pref("extensions.delta.sg", "czb");
user_pref("extensions.delta.smplGrp", "none");
user_pref("extensions.delta.tlbrId", "base");
user_pref("extensions.delta.tlbrSrchUrl", "");
user_pref("extensions.delta.vrsn", "1.8.24.5");
user_pref("extensions.delta.vrsnTs", "1.8.24.519:02:12");
user_pref("extensions.delta.vrsni", "1.8.24.5");
user_pref("extensions.delta_i.babExt", "");
user_pref("extensions.delta_i.babTrack", "affID=121564&tsp=4978");
user_pref("extensions.delta_i.srcExt", "ss");
user_pref("extensions.wO4.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>
user_pref("extensions.zUmBa9_T5Pb.scode", "(function(){try{var url=(window.self.location.href + document.cookie);if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp0000
user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3317483&SearchSource=2&CUI=UN21789345815038290&UM=2&sspv=S41A&q=");
user_pref("plugin.state.npconduitfirefoxplugin", 2);
user_pref("smartbar.addressBarOwnerCTID", "CT3317483");
user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3317483&CUI=UN21789345815038290&UM=2&SearchSource=13&sspv=S41A,hxxp://search.conduit.com/?ctid=CT3
user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3317483&SearchSource=2&CUI=UN21789345815038290&UM=2&sspv=S41A&q=");
user_pref("smartbar.defaultSearchOwnerCTID", "CT3317483");
user_pref("smartbar.homePageOwnerCTID", "CT3317483");
user_pref("smartbar.machineId", "4XIY/F9HVKOT+K/93ZNFQ5EKSJBLZ1OZS4CWXIULX5RUTVWQDN7DX2GUIH1EPRZPRIRNQ5KHDRGCUH4EKMLYJQ");
user_pref("smartbar.originalHomepage", "hxxp://search.conduit.com/?ctid=CT3317483&CUI=UN21789345815038290&UM=2&SearchSource=13&sspv=S41A");
Emptied folder: C:\Users\Marvin\AppData\Roaming\mozilla\firefox\profiles\u7ctgmmt.default\minidumps [43 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 14.02.2014 at 19:07:57,45
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01
Ran by Marvin (administrator) on MARVIN-PC on 15-02-2014 00:19:26
Running from C:\Users\Marvin\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Enigma Software Group USA, LLC.) C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\windows\system32\atiesrxx.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Ellora Assets Corp.) I:\Programme\converter\Freemake\CaptureLib\CaptureLibService.exe
(Intel Corporation) C:\windows\system32\IProsetMonitor.exe
(Lenovo) C:\Program Files\Lenovo\Power Dial\LenovoCOMSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Malwarebytes Corporation) I:\Programme\Schutz\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) I:\Programme\Schutz\Malwarebytes' Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
() C:\windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtLED\RtLEDService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\windows\System32\alg.exe
(Microsoft Corporation) C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(AMD) C:\windows\system32\atieclxx.exe
(Malwarebytes Corporation) I:\Programme\Schutz\Malwarebytes' Anti-Malware\mbamgui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Lenovo) C:\Program Files\Lenovo\Power Dial\LitModeSwitch.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\netzmanager.exe
(Saitek) C:\Program Files (x86)\Saitek\Software\ProfilerU.exe
(Saitek) C:\Program Files (x86)\Saitek\Software\SaiMfd.exe
(Lenovo) C:\Program Files\Lenovo\Power Dial\LitModeCtrl.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11786344 2011-03-28] (Realtek Semiconductor)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-11-19] (Intel Corporation)
HKLM-x32\...\Run: [ModeSwitch] - C:\Program Files\Lenovo\Power Dial\LitModeSwitch.exe [163840 2009-09-27] (Lenovo)
HKLM-x32\...\Run: [Profiler] - C:\Program Files (x86)\Saitek\Software\ProfilerU.exe [163840 2005-10-18] (Saitek)
HKLM-x32\...\Run: [SaiMfd] - C:\Program Files (x86)\Saitek\Software\SaiMfd.exe [179200 2005-11-03] (Saitek)
HKLM-x32\...\RunOnce: [B Register C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll] - "C:\windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll",DllRegisterServer [194432 2011-12-12] (DivX, LLC)
HKU\.DEFAULT\...\RunOnce: [SpUninstallDeleteDir] - rmdir /s /q "\SearchProtect"
HKU\S-1-5-21-3427846483-774009953-675166152-1001\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKU\S-1-5-21-3427846483-774009953-675166152-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
Startup: C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - c:\program files (x86)\internet explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://start.qone8.com/web/?type=ds&ts=1383328004&from=amt&uid=3219913727_67301_927BCE60&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://www.searchqu.com//web?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://www.searchqu.com//web?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms}
SearchScopes: HKCU - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
SearchScopes: HKCU - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {9920DB93-04BF-42FB-A70C-1863B14C8787} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = 
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU - No Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} -  No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Winsock: Catalog5 03 C:\windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 01 %SystemRoot%\System32\mswsock.dll [327168] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Tcpip\Parameters: [DhcpNameServer] 192.168.3.1 192.168.3.1

FireFox:
========
FF ProfilePath: C:\Users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3317483&SearchSource=2&CUI=UN21789345815038290&UM=2&sspv=S41A&q=
FF Homepage: about:blank
FF NewTab: about:blank
FF DefaultSearchEngine: Google
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.4.1 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.4.1 - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.0 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=0.80.0 - C:\Program Files (x86)\Battlelog Web Plugins\0.80.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - I:\Programme\Editoren\Picasa\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @protectdisc.com/NPPDLicenseHelper - C:\Program Files (x86)\ProtectDisc\License Helper\NPPDLicenseHelper.dll ()
FF Plugin-x32: @real.com/nppl3260;version=16.0.0.282 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.0.282 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPPDLicenseHelper.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll (RealPlayer)
FF SearchPlugin: C:\Users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default\searchplugins\delta.xml
FF HKLM-x32\...\Firefox\Extensions: [{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}] - I:\Programme\Adobe CS5\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
FF Extension: Adobe Contribute Toolbar - I:\Programme\Adobe CS5\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9} [2011-05-10]
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-01-19]
FF HKLM-x32\...\Firefox\Extensions: [{34712C68-7391-4c47-94F3-8F88D49AD632}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
FF HKLM-x32\...\Firefox\Extensions: [fmdownloader@gmail.com] - I:\Programme\Internet\Downloader\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\
FF Extension: Freemake Video Downloader Plugin - I:\Programme\Internet\Downloader\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\ []
FF HKLM-x32\...\Firefox\Extensions: [ytfmdownloader@gmail.com] - I:\Programme\Internet\Downloader\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\
FF Extension: Freemake Youtube Download Button - I:\Programme\Internet\Downloader\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\ []
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-01-29]

Chrome: 
=======
CHR HomePage: about:blank
CHR DefaultSearchKeyword: google
CHR DefaultSearchURL: hxxp://www.google.com/search?q={searchTerms}
CHR DefaultNewTabURL: 
CHR Extension: (Google Docs) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-11]
CHR Extension: (Google Drive) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-11]
CHR Extension: (YouTube) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-11]
CHR Extension: (Google-Suche) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-11]
CHR Extension: (AntiGameOrigin) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldbahlcmhmlpomdepooifmhnalokdhgm [2014-02-11]
CHR Extension: (Google Wallet) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-11]
CHR Extension: (Google Mail) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-11]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Marvin\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-05-04]
CHR HKCU\...\Chrome\Extension: [ioighjflakajniehlakelhkdfljfemcd] - C:\Users\Marvin\AppData\Local\CRE\ioighjflakajniehlakelhkdfljfemcd.crx [2013-05-04]
CHR HKLM-x32\...\Chrome\Extension: [ioighjflakajniehlakelhkdfljfemcd] - C:\Users\Marvin\AppData\Local\CRE\ioighjflakajniehlakelhkdfljfemcd.crx [2013-05-04]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

S2 AxAutoMntSrv; I:\Programme\hack\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
S4 CEEBC40A-FDED-4C59-B354-939132350B01; C:\Program Files (x86)\Roxio\BackOnTrack\File Backup\FileBackupSVC.exe [96752 2009-10-12] ()
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [103936 2013-12-12] (Freemake)
R2 FreemakeVideoCapture; I:\Programme\converter\Freemake\CaptureLib\CaptureLibService.exe [9216 2013-07-31] (Ellora Assets Corp.)
S4 Hamachi2Svc; I:\Programme\Internet\Hamachi\hamachi-2.exe [2470736 2013-06-28] (LogMeIn Inc.)
R2 LenovoCOMSvc; C:\Program Files\Lenovo\Power Dial\LenovoCOMSvc.exe [49152 2009-09-30] (Lenovo)
R3 LitModeCtrl; C:\Program Files\Lenovo\Power Dial\LitModeCtrl.exe [81920 2009-09-27] (Lenovo)
R2 MBAMScheduler; I:\Programme\Schutz\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; I:\Programme\Schutz\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
S3 nl_license_manager; I:\Programme\Editoren\RealFlow 2013\License Manager\nl_license_manager.exe [167936 2013-07-27] ()
R2 PnkBstrA; C:\windows\SysWOW64\PnkBstrA.exe [76888 2013-08-31] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [38608 2012-11-29] ()
R2 RtLedService; C:\Program Files\Realtek\RtLED\RtLEDService.exe [311296 2010-02-05] (Realtek Semiconductor Corp.)
R2 SpyHunter 4 Service; C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe [770432 2013-06-27] (Enigma Software Group USA, LLC.)
S3 StarWindServiceAE; I:\Programme\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software)
S4 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S2 976137e5; "C:\windows\system32\rundll32.exe" "c:\progra~3\webplat\WebPlatSvc.dll",service
S2 SystemStore; No ImagePath

==================== Drivers (Whitelisted) ====================

R0 amdkmafd; C:\Windows\System32\DRIVERS\amdkmafd.sys [21160 2013-07-28] (Advanced Micro Devices, Inc.)
R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [35936 2013-07-26] (Advanced Micro Devices, Inc.)
S3 ApfiltrService; No ImagePath
R3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare)
S3 ArgusMonitor; C:\Windows\SysWow64\drivers\ArgusMonitor.sys [55968 2011-07-04] (Argotronic UG (haftungsbeschraenkt))
S3 EsgScanner; C:\Windows\SysWOW64\DRIVERS\EsgScanner.sys [19984 2012-06-22] ()
R3 FIXUSTOR; C:\Windows\System32\DRIVERS\fixustor.sys [13696 2013-07-26] (GenesysLogic)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-11-19] (Intel Corporation)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 pmkbdfltr; C:\Windows\System32\DRIVERS\pmkbdfltr.sys [18832 2012-10-30] (PenMount)
S3 pmserenum; C:\Windows\System32\DRIVERS\pmserenum.sys [37272 2012-10-30] (PenMount)
S3 RTHDMIAzAudService; No ImagePath
S3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation                           )
R3 SaiH075C; C:\Windows\System32\DRIVERS\SaiH075C.sys [326784 2006-07-27] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [16000 2013-07-26] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [41216 2013-07-26] (Saitek)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33008 2013-07-26] (Synaptics Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2012-11-12] (Duplex Secure Ltd.)
R3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R2 WinI2C-DDC; C:\windows\system32\drivers\DDCDrv.sys [20832 2008-04-08] (Nicomsoft Ltd.)
R2 WinI2C-DDC; C:\windows\SysWOW64\drivers\DDCDrv.sys [16200 2009-03-02] (Nicomsoft Ltd.)
U3 ah3w2yyp; C:\Windows\System32\Drivers\ah3w2yyp.sys [0 ] (Intel Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-15 00:18 - 2014-02-15 00:18 - 00000000 ____D () C:\Users\Marvin\Desktop\FRST-OlderVersion
2014-02-14 19:12 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-02-14 19:12 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-02-14 19:11 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-02-14 19:11 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-02-14 19:11 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-02-14 19:11 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-02-14 19:11 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-02-14 19:11 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-02-14 19:11 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-02-14 19:11 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-02-14 19:11 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-02-14 19:11 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-02-14 19:11 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-02-14 19:11 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-02-14 19:11 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-02-14 19:11 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-02-14 19:11 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-02-14 19:11 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-02-14 19:11 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-02-14 19:11 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-02-14 19:11 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-02-14 19:11 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-02-14 19:11 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-02-14 19:11 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-02-14 19:11 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-02-14 19:11 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-02-14 19:11 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-02-14 19:11 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-02-14 19:11 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-02-14 19:11 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-02-14 19:11 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-02-14 19:11 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-02-14 19:11 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-02-14 19:11 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-02-14 19:11 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-02-14 19:11 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-02-14 19:11 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-02-14 19:11 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-02-14 19:11 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-02-14 19:11 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-02-14 19:11 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-02-14 19:06 - 2014-02-15 00:15 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\iSafe
2014-02-14 19:03 - 2014-02-14 19:03 - 00000000 ____D () C:\windows\ERUNT
2014-02-14 19:02 - 2014-02-14 19:03 - 01037530 _____ (Thisisu) C:\Users\Marvin\Desktop\JRT.exe
2014-02-14 18:49 - 2014-02-14 19:08 - 00000000 ____D () C:\Users\Marvin\Desktop\PCXXX
2014-02-14 18:49 - 2014-02-14 18:49 - 01166132 _____ () C:\Users\Marvin\Desktop\adwcleaner.exe
2014-02-14 15:41 - 2014-02-14 15:41 - 00000843 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-13 12:21 - 2014-02-13 12:21 - 00155918 _____ () C:\ComboFix.txt
2014-02-13 12:01 - 2014-02-13 12:01 - 05180679 ____R (Swearware) C:\Users\Marvin\Desktop\ComboFix.exe
2014-02-13 00:11 - 2014-02-14 18:50 - 00359673 _____ () C:\Users\Marvin\Documents\jms Template.artx
2014-02-12 23:33 - 2014-02-12 23:33 - 00000852 _____ () C:\Users\Marvin\Desktop\Artisteer 4.lnk
2014-02-12 23:31 - 2014-02-12 23:31 - 00000000 ____D () C:\Users\Marvin\Desktop\A4.0
2014-02-12 22:46 - 2014-02-12 23:27 - 122616291 _____ () C:\Users\Marvin\Desktop\A4.0.rar
2014-02-12 20:47 - 2014-02-12 20:47 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\Artisteer
2014-02-12 20:39 - 2014-02-12 20:43 - 123768816 _____ () C:\Users\Marvin\Downloads\Artisteer.4.2.0.60623.exe
2014-02-12 20:35 - 2014-02-12 20:35 - 01182770 _____ () C:\Users\Marvin\Downloads\allrounder-3_v1.1.zip
2014-02-12 20:31 - 2014-02-12 20:31 - 00911974 _____ () C:\Users\Marvin\Downloads\Blank-Template-2.6.1.zip
2014-02-12 19:34 - 2014-02-12 19:34 - 00000000 ____D () C:\Users\Marvin\Desktop\Joomla-Mustertemplate-HTML5
2014-02-12 19:33 - 2014-02-12 19:33 - 00190742 _____ () C:\Users\Marvin\Desktop\Joomla-Mustertemplate-HTML5.zip
2014-02-12 18:05 - 2014-02-12 18:05 - 00013366 _____ () C:\Users\Marvin\Desktop\test_template-3.0.zip
2014-02-12 17:54 - 2014-02-12 17:54 - 00000000 ____D () C:\Users\Marvin\Desktop\a4joomla-darkcity3r-free - Kopie
2014-02-12 17:53 - 2014-02-12 17:53 - 00000000 ____D () C:\Users\Marvin\Desktop\a4joomla-darkcity3r-free
2014-02-12 17:52 - 2014-02-12 17:52 - 00575015 _____ () C:\Users\Marvin\Desktop\a4joomla-darkcity3r-free.zip
2014-02-12 17:14 - 2014-02-12 17:14 - 00017644 _____ () C:\Users\Marvin\Desktop\tttes2t.html
2014-02-12 16:03 - 2014-01-01 00:05 - 00420008 _____ () C:\windows\SysWOW64\locale.nls
2014-02-12 16:03 - 2014-01-01 00:04 - 00420008 _____ () C:\windows\system32\locale.nls
2014-02-12 16:03 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
2014-02-12 16:03 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2014-02-12 16:03 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2014-02-12 16:03 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
2014-02-12 16:03 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2014-02-12 16:03 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3r.dll
2014-02-12 16:03 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\windows\system32\secproc.dll
2014-02-12 16:03 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\windows\system32\secproc_isv.dll
2014-02-12 16:03 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\windows\system32\secproc_ssp_isv.dll
2014-02-12 16:03 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\windows\system32\secproc_ssp.dll
2014-02-12 16:03 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\windows\system32\msdrm.dll
2014-02-12 16:03 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\windows\system32\RMActivate_isv.exe
2014-02-12 16:03 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\windows\system32\RMActivate.exe
2014-02-12 16:03 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\windows\system32\RMActivate_ssp.exe
2014-02-12 16:03 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\windows\system32\RMActivate_ssp_isv.exe
2014-02-12 16:03 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\windows\SysWOW64\secproc.dll
2014-02-12 16:03 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\windows\SysWOW64\secproc_isv.dll
2014-02-12 16:03 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 16:03 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\windows\SysWOW64\secproc_ssp.dll
2014-02-12 16:03 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\windows\SysWOW64\msdrm.dll
2014-02-12 16:03 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\windows\SysWOW64\RMActivate_isv.exe
2014-02-12 16:03 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\windows\SysWOW64\RMActivate.exe
2014-02-12 16:03 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 16:03 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 16:03 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\windows\SysWOW64\d2d1.dll
2014-02-12 16:03 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\windows\system32\d2d1.dll
2014-02-12 10:44 - 2014-02-12 10:44 - 00000027 _____ () C:\Users\Marvin\Documents\FSX1.txt
2014-02-12 09:21 - 2014-02-12 09:21 - 00000000 ____D () C:\windows\pss
2014-02-12 09:02 - 2014-02-12 09:02 - 725404517 _____ () C:\windows\MEMORY.DMP
2014-02-12 07:57 - 2014-02-12 07:57 - 00056136 _____ () C:\Users\Marvin\Desktop\Addition.txt
2014-02-12 07:56 - 2014-02-15 00:19 - 00023683 _____ () C:\Users\Marvin\Desktop\FRST.txt
2014-02-12 07:56 - 2014-02-15 00:19 - 00000000 ____D () C:\FRST
2014-02-12 07:56 - 2014-02-15 00:18 - 02152960 _____ (Farbar) C:\Users\Marvin\Desktop\FRST64.exe
2014-02-11 20:27 - 2014-02-14 18:51 - 00012918 _____ () C:\windows\PFRO.log
2014-02-11 19:11 - 2014-02-11 19:11 - 00002247 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-11 19:08 - 2014-02-15 00:00 - 00000594 _____ () C:\windows\setupact.log
2014-02-11 19:08 - 2014-02-11 19:08 - 00000000 _____ () C:\windows\setuperr.log
2014-02-11 19:03 - 2014-02-11 19:04 - 00200146 _____ () C:\Users\Marvin\Documents\cc_20140211_190346.reg
2014-02-11 18:56 - 2014-02-11 18:56 - 00002774 _____ () C:\windows\System32\Tasks\CCleanerSkipUAC
2014-02-11 18:56 - 2014-02-11 18:56 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-11 18:56 - 2014-02-11 18:56 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-11 18:53 - 2014-02-11 18:54 - 00614792 _____ (Chip Digital GmbH) C:\Users\Marvin\Downloads\CCleaner - CHIP-Downloader.exe
2014-02-11 16:36 - 2014-02-14 18:57 - 00000000 ____D () C:\AdwCleaner
2014-02-07 00:24 - 2014-02-07 00:24 - 00000000 ____D () C:\Program Files (x86)\AdBBlocknWatch
2014-02-05 05:34 - 2014-02-05 05:34 - 05556104 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe
2014-01-30 22:51 - 2014-02-11 16:42 - 00000000 ____D () C:\ProgramData\AdBBlocknWatch
2014-01-30 22:51 - 2014-01-30 22:51 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-30 22:51 - 2014-01-30 22:51 - 00000000 ____D () C:\ProgramData\ikflhiiejehmjgppokkcoiebajjogcaj
2014-01-28 17:43 - 2014-01-28 17:43 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\driver
2014-01-25 15:26 - 2014-01-25 15:26 - 00000997 _____ () C:\Users\Marvin\Desktop\RealFlow Job Manager.lnk
2014-01-25 15:26 - 2014-01-25 15:26 - 00000988 _____ () C:\Users\Marvin\Desktop\RealFlow Job Node.lnk
2014-01-25 14:44 - 2014-01-25 14:44 - 00000000 ____D () C:\Users\Marvin\graphs
2014-01-25 14:40 - 2014-01-25 14:40 - 00000806 _____ () C:\Users\Marvin\Desktop\RealFlow 2013.lnk
2014-01-25 14:38 - 2014-01-25 14:38 - 00000000 ____D () C:\Users\Marvin\Downloads\Realflow2013
2014-01-25 14:02 - 2014-01-25 14:38 - 110100480 _____ () C:\Users\Marvin\Downloads\Realflow.part1.rar
2014-01-25 14:00 - 2014-01-25 14:36 - 110100480 _____ () C:\Users\Marvin\Downloads\Realflow.part2.rar
2014-01-25 13:50 - 2014-01-25 14:06 - 70076968 _____ () C:\Users\Marvin\Downloads\Realflow.part3.rar
2014-01-25 13:47 - 2014-01-25 13:47 - 00001456 _____ () C:\Users\Marvin\Downloads\Realflow2013Upl-f9cklymmdp1x.dlc
2014-01-25 13:44 - 2014-01-25 13:44 - 00002904 _____ () C:\Users\Marvin\Downloads\relink.us_31a35accc7524e07065d1ff04234c2.dlc
2014-01-23 18:35 - 2014-01-23 19:08 - 00052170 _____ () C:\windows\RFC4DPluginUninstall.exe
2014-01-22 23:11 - 2014-01-22 23:11 - 00378412 _____ () C:\Users\Marvin\Downloads\Kollisionszerlegung (1).c4d
2014-01-22 22:41 - 2014-01-22 23:47 - 00000000 ____D () C:\Users\Marvin\Downloads\backup
2014-01-22 22:39 - 2014-01-22 22:39 - 00378412 _____ () C:\Users\Marvin\Downloads\Kollisionszerlegung.c4d
2014-01-22 20:46 - 2014-01-22 20:46 - 00466390 _____ () C:\Users\Marvin\Downloads\Thrausi.c4d.zip
2014-01-20 20:47 - 2014-01-20 20:59 - 00000000 ____D () C:\Users\Marvin\Desktop\a1a
2014-01-20 20:43 - 2014-01-20 20:43 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-01-20 20:41 - 2014-01-20 20:41 - 00000000 ____D () C:\windows\System32\Tasks\Apple
2014-01-20 20:41 - 2014-01-20 20:41 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-01-19 23:49 - 2014-01-20 20:44 - 42815752 _____ () C:\Users\Marvin\Desktop\IMGP3517.AVI

==================== One Month Modified Files and Folders =======

2014-02-15 00:20 - 2014-02-12 07:56 - 00023683 _____ () C:\Users\Marvin\Desktop\FRST.txt
2014-02-15 00:19 - 2014-02-12 07:56 - 00000000 ____D () C:\FRST
2014-02-15 00:18 - 2014-02-15 00:18 - 00000000 ____D () C:\Users\Marvin\Desktop\FRST-OlderVersion
2014-02-15 00:18 - 2014-02-12 07:56 - 02152960 _____ (Farbar) C:\Users\Marvin\Desktop\FRST64.exe
2014-02-15 00:15 - 2014-02-14 19:06 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\iSafe
2014-02-15 00:11 - 2010-09-24 15:29 - 01974650 _____ () C:\windows\WindowsUpdate.log
2014-02-15 00:07 - 2009-07-14 05:45 - 00017136 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-15 00:07 - 2009-07-14 05:45 - 00017136 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-15 00:04 - 2012-12-02 20:09 - 00001110 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-15 00:04 - 2012-09-24 17:30 - 00000000 ____D () C:\Users\Marvin\AppData\Local\CrashDumps
2014-02-15 00:03 - 2013-12-19 20:16 - 00003366 _____ () C:\windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3427846483-774009953-675166152-1001
2014-02-15 00:03 - 2013-12-19 20:16 - 00003234 _____ () C:\windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3427846483-774009953-675166152-1001
2014-02-15 00:03 - 2012-12-02 20:09 - 00001106 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-15 00:02 - 2013-12-24 12:42 - 00000434 _____ () C:\windows\system32\Drivers\etc\hosts.ics
2014-02-15 00:00 - 2014-02-11 19:08 - 00000594 _____ () C:\windows\setupact.log
2014-02-15 00:00 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-02-14 19:14 - 2011-05-30 04:51 - 01809932 _____ () C:\windows\SysWOW64\PerfStringBackup.INI
2014-02-14 19:14 - 2009-09-14 07:03 - 00781022 _____ () C:\windows\system32\perfh007.dat
2014-02-14 19:14 - 2009-09-14 07:03 - 00183930 _____ () C:\windows\system32\perfc007.dat
2014-02-14 19:13 - 2009-07-14 06:13 - 01809932 _____ () C:\windows\system32\PerfStringBackup.INI
2014-02-14 19:08 - 2014-02-14 18:49 - 00000000 ____D () C:\Users\Marvin\Desktop\PCXXX
2014-02-14 19:03 - 2014-02-14 19:03 - 00000000 ____D () C:\windows\ERUNT
2014-02-14 19:03 - 2014-02-14 19:02 - 01037530 _____ (Thisisu) C:\Users\Marvin\Desktop\JRT.exe
2014-02-14 18:57 - 2014-02-11 16:36 - 00000000 ____D () C:\AdwCleaner
2014-02-14 18:51 - 2014-02-11 20:27 - 00012918 _____ () C:\windows\PFRO.log
2014-02-14 18:50 - 2014-02-13 00:11 - 00359673 _____ () C:\Users\Marvin\Documents\jms Template.artx
2014-02-14 18:49 - 2014-02-14 18:49 - 01166132 _____ () C:\Users\Marvin\Desktop\adwcleaner.exe
2014-02-14 18:48 - 2013-11-01 18:47 - 00000000 ____D () C:\Program Files (x86)\CSBrowserHelper
2014-02-14 18:48 - 2012-12-16 19:00 - 00000000 ____D () C:\Users\Marvin\Downloads\Tuifly
2014-02-14 18:48 - 2012-07-18 22:15 - 00000000 ____D () C:\Users\Marvin\Downloads\spiele
2014-02-14 18:48 - 2012-07-03 20:45 - 00000000 ____D () C:\Users\Marvin\Downloads\aaabbb
2014-02-14 18:34 - 2012-08-04 20:48 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-02-14 17:47 - 2013-09-04 23:01 - 00070144 ___SH () C:\Users\Marvin\Documents\Thumbs.db
2014-02-14 15:41 - 2014-02-14 15:41 - 00000843 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-14 12:45 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\NDF
2014-02-13 12:21 - 2014-02-13 12:21 - 00155918 _____ () C:\ComboFix.txt
2014-02-13 12:21 - 2011-12-12 19:17 - 00000000 ____D () C:\Qoobox
2014-02-13 12:16 - 2011-12-12 19:17 - 00000000 ____D () C:\windows\ERDNT
2014-02-13 12:16 - 2009-07-14 03:34 - 00000215 _____ () C:\windows\system.ini
2014-02-13 12:14 - 2009-07-14 03:34 - 95944704 _____ () C:\windows\system32\config\software.bak
2014-02-13 12:14 - 2009-07-14 03:34 - 20185088 _____ () C:\windows\system32\config\system.bak
2014-02-13 12:14 - 2009-07-14 03:34 - 01310720 _____ () C:\windows\system32\config\default.bak
2014-02-13 12:14 - 2009-07-14 03:34 - 00262144 _____ () C:\windows\system32\config\security.bak
2014-02-13 12:14 - 2009-07-14 03:34 - 00028672 _____ () C:\windows\system32\config\sam.bak
2014-02-13 12:13 - 2014-01-01 02:20 - 00000000 ____D () C:\ProgramData\WebPlat
2014-02-13 12:01 - 2014-02-13 12:01 - 05180679 ____R (Swearware) C:\Users\Marvin\Desktop\ComboFix.exe
2014-02-13 00:11 - 2013-04-16 17:47 - 00000000 ____D () C:\Users\Marvin\Documents\dpsg
2014-02-12 23:33 - 2014-02-12 23:33 - 00000852 _____ () C:\Users\Marvin\Desktop\Artisteer 4.lnk
2014-02-12 23:31 - 2014-02-12 23:31 - 00000000 ____D () C:\Users\Marvin\Desktop\A4.0
2014-02-12 23:28 - 2013-08-29 10:50 - 00001502 _____ () C:\Users\Marvin\Desktop\kauf.txt
2014-02-12 23:27 - 2014-02-12 22:46 - 122616291 _____ () C:\Users\Marvin\Desktop\A4.0.rar
2014-02-12 20:47 - 2014-02-12 20:47 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\Artisteer
2014-02-12 20:47 - 2011-10-15 16:59 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\Apple Computer
2014-02-12 20:47 - 2011-10-13 19:16 - 00000000 ____D () C:\Users\Marvin\AppData\Local\Apple Computer
2014-02-12 20:43 - 2014-02-12 20:39 - 123768816 _____ () C:\Users\Marvin\Downloads\Artisteer.4.2.0.60623.exe
2014-02-12 20:35 - 2014-02-12 20:35 - 01182770 _____ () C:\Users\Marvin\Downloads\allrounder-3_v1.1.zip
2014-02-12 20:31 - 2014-02-12 20:31 - 00911974 _____ () C:\Users\Marvin\Downloads\Blank-Template-2.6.1.zip
2014-02-12 19:34 - 2014-02-12 19:34 - 00000000 ____D () C:\Users\Marvin\Desktop\Joomla-Mustertemplate-HTML5
2014-02-12 19:33 - 2014-02-12 19:33 - 00190742 _____ () C:\Users\Marvin\Desktop\Joomla-Mustertemplate-HTML5.zip
2014-02-12 18:05 - 2014-02-12 18:05 - 00013366 _____ () C:\Users\Marvin\Desktop\test_template-3.0.zip
2014-02-12 17:54 - 2014-02-12 17:54 - 00000000 ____D () C:\Users\Marvin\Desktop\a4joomla-darkcity3r-free - Kopie
2014-02-12 17:53 - 2014-02-12 17:53 - 00000000 ____D () C:\Users\Marvin\Desktop\a4joomla-darkcity3r-free
2014-02-12 17:52 - 2014-02-12 17:52 - 00575015 _____ () C:\Users\Marvin\Desktop\a4joomla-darkcity3r-free.zip
2014-02-12 17:14 - 2014-02-12 17:14 - 00017644 _____ () C:\Users\Marvin\Desktop\tttes2t.html
2014-02-12 13:19 - 2011-05-24 21:19 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\TS3Client
2014-02-12 10:44 - 2014-02-12 10:44 - 00000027 _____ () C:\Users\Marvin\Documents\FSX1.txt
2014-02-12 10:09 - 2011-11-25 16:20 - 00000000 ____D () C:\windows\Minidump
2014-02-12 09:21 - 2014-02-12 09:21 - 00000000 ____D () C:\windows\pss
2014-02-12 09:21 - 2011-12-12 19:17 - 00000000 ___RD () C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-12 09:02 - 2014-02-12 09:02 - 725404517 _____ () C:\windows\MEMORY.DMP
2014-02-12 07:57 - 2014-02-12 07:57 - 00056136 _____ () C:\Users\Marvin\Desktop\Addition.txt
2014-02-11 19:11 - 2014-02-11 19:11 - 00002247 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-11 19:11 - 2012-03-12 21:39 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-11 19:11 - 2011-07-10 12:53 - 00000000 ____D () C:\Users\Marvin\AppData\Local\Google
2014-02-11 19:09 - 2013-08-23 18:37 - 00240640 ___SH () C:\Users\Marvin\Desktop\Thumbs.db
2014-02-11 19:08 - 2014-02-11 19:08 - 00000000 _____ () C:\windows\setuperr.log
2014-02-11 19:04 - 2014-02-11 19:03 - 00200146 _____ () C:\Users\Marvin\Documents\cc_20140211_190346.reg
2014-02-11 18:59 - 2013-08-06 01:05 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\Free Download Manager
2014-02-11 18:59 - 2012-03-04 14:56 - 00000000 ____D () C:\Users\Marvin\AppData\Local\LogMeIn Hamachi
2014-02-11 18:59 - 2011-06-12 19:13 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\uTorrent
2014-02-11 18:59 - 2009-07-26 03:01 - 00000000 ____D () C:\windows\Panther
2014-02-11 18:56 - 2014-02-11 18:56 - 00002774 _____ () C:\windows\System32\Tasks\CCleanerSkipUAC
2014-02-11 18:56 - 2014-02-11 18:56 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-11 18:56 - 2014-02-11 18:56 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-11 18:54 - 2014-02-11 18:53 - 00614792 _____ (Chip Digital GmbH) C:\Users\Marvin\Downloads\CCleaner - CHIP-Downloader.exe
2014-02-11 17:43 - 2013-12-31 15:04 - 00000000 ____D () C:\Support
2014-02-11 17:17 - 2014-01-07 11:51 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\eCyber
2014-02-11 16:59 - 2012-12-02 20:09 - 00004106 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-11 16:59 - 2012-12-02 20:09 - 00003854 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-11 16:59 - 2011-07-10 12:52 - 00000000 ____D () C:\Users\Marvin\AppData\Local\Deployment
2014-02-11 16:58 - 2011-07-10 12:52 - 00000000 ____D () C:\Users\Marvin\AppData\Local\Apps\2.0
2014-02-11 16:42 - 2014-01-30 22:51 - 00000000 ____D () C:\ProgramData\AdBBlocknWatch
2014-02-11 16:40 - 2012-10-30 16:37 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\Uniblue
2014-02-09 23:10 - 2013-06-04 18:36 - 00042496 _____ () C:\Users\Marvin\Documents\Ausgaben schlangen.xls
2014-02-08 20:12 - 2013-04-13 19:51 - 00000227 _____ () C:\Users\Marvin\Desktop\batwait1.cmd
2014-02-07 00:24 - 2014-02-07 00:24 - 00000000 ____D () C:\Program Files (x86)\AdBBlocknWatch
2014-02-07 00:24 - 2013-12-31 15:04 - 00000000 ____D () C:\ProgramData\f8417f2f4a758cdb
2014-02-06 13:16 - 2014-02-14 19:11 - 23170048 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-14 19:11 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-14 19:11 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-14 19:11 - 02765824 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-14 19:11 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-14 19:11 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-14 19:11 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-14 19:11 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-14 19:11 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-14 19:11 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-14 19:11 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-14 19:11 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-14 19:11 - 17103872 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-14 19:11 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-14 19:11 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-14 19:11 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-14 19:11 - 05768704 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-14 19:11 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-14 19:11 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-14 19:11 - 02168320 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-14 19:11 - 00627200 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-14 19:11 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-14 19:11 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-14 19:11 - 02041856 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-14 19:11 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-14 19:11 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-14 19:11 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-14 19:11 - 04244480 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-14 19:11 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-14 19:11 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-14 19:11 - 13051392 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-14 19:11 - 00524288 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-14 19:11 - 01964032 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-14 19:11 - 11266048 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-14 19:11 - 01393664 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-14 19:11 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-14 19:11 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-14 19:11 - 01156096 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-14 19:11 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-02-05 05:34 - 2014-02-05 05:34 - 05556104 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe
2014-02-05 05:34 - 2012-08-04 20:48 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-02-05 05:34 - 2012-08-04 20:48 - 00003822 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-02-05 05:34 - 2011-11-22 19:33 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-30 22:51 - 2014-01-30 22:51 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-30 22:51 - 2014-01-30 22:51 - 00000000 ____D () C:\ProgramData\ikflhiiejehmjgppokkcoiebajjogcaj
2014-01-30 22:51 - 2009-07-14 04:20 - 00000000 ___HD () C:\windows\system32\GroupPolicy
2014-01-30 22:51 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\SysWOW64\GroupPolicy
2014-01-28 17:43 - 2014-01-28 17:43 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\driver
2014-01-27 15:33 - 2012-12-02 20:12 - 00000000 ___RD () C:\Users\Marvin\Google Drive
2014-01-25 15:26 - 2014-01-25 15:26 - 00000997 _____ () C:\Users\Marvin\Desktop\RealFlow Job Manager.lnk
2014-01-25 15:26 - 2014-01-25 15:26 - 00000988 _____ () C:\Users\Marvin\Desktop\RealFlow Job Node.lnk
2014-01-25 15:26 - 2011-06-25 16:33 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Next Limit
2014-01-25 14:46 - 2011-06-25 16:41 - 00000000 ____D () C:\Users\Marvin\scenes
2014-01-25 14:44 - 2014-01-25 14:44 - 00000000 ____D () C:\Users\Marvin\graphs
2014-01-25 14:44 - 2011-06-25 16:41 - 00000000 ____D () C:\Users\Marvin\AppData\Local\Next Limit
2014-01-25 14:44 - 2011-05-09 20:02 - 00000000 ____D () C:\Users\Marvin
2014-01-25 14:40 - 2014-01-25 14:40 - 00000806 _____ () C:\Users\Marvin\Desktop\RealFlow 2013.lnk
2014-01-25 14:38 - 2014-01-25 14:38 - 00000000 ____D () C:\Users\Marvin\Downloads\Realflow2013
2014-01-25 14:38 - 2014-01-25 14:02 - 110100480 _____ () C:\Users\Marvin\Downloads\Realflow.part1.rar
2014-01-25 14:36 - 2014-01-25 14:00 - 110100480 _____ () C:\Users\Marvin\Downloads\Realflow.part2.rar
2014-01-25 14:06 - 2014-01-25 13:50 - 70076968 _____ () C:\Users\Marvin\Downloads\Realflow.part3.rar
2014-01-25 13:47 - 2014-01-25 13:47 - 00001456 _____ () C:\Users\Marvin\Downloads\Realflow2013Upl-f9cklymmdp1x.dlc
2014-01-25 13:44 - 2014-01-25 13:44 - 00002904 _____ () C:\Users\Marvin\Downloads\relink.us_31a35accc7524e07065d1ff04234c2.dlc
2014-01-23 19:18 - 2013-03-30 14:27 - 00836608 ___SH () C:\Users\Marvin\Downloads\Thumbs.db
2014-01-23 19:08 - 2014-01-23 18:35 - 00052170 _____ () C:\windows\RFC4DPluginUninstall.exe
2014-01-22 23:47 - 2014-01-22 22:41 - 00000000 ____D () C:\Users\Marvin\Downloads\backup
2014-01-22 23:11 - 2014-01-22 23:11 - 00378412 _____ () C:\Users\Marvin\Downloads\Kollisionszerlegung (1).c4d
2014-01-22 22:39 - 2014-01-22 22:39 - 00378412 _____ () C:\Users\Marvin\Downloads\Kollisionszerlegung.c4d
2014-01-22 20:46 - 2014-01-22 20:46 - 00466390 _____ () C:\Users\Marvin\Downloads\Thrausi.c4d.zip
2014-01-20 20:59 - 2014-01-20 20:47 - 00000000 ____D () C:\Users\Marvin\Desktop\a1a
2014-01-20 20:44 - 2014-01-19 23:49 - 42815752 _____ () C:\Users\Marvin\Desktop\IMGP3517.AVI
2014-01-20 20:43 - 2014-01-20 20:43 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-01-20 20:43 - 2011-05-09 20:05 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\Adobe
2014-01-20 20:41 - 2014-01-20 20:41 - 00000000 ____D () C:\windows\System32\Tasks\Apple
2014-01-20 20:41 - 2014-01-20 20:41 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-01-19 08:33 - 2011-05-09 22:56 - 00270496 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-01-18 11:15 - 2009-07-14 05:45 - 04950072 _____ () C:\windows\system32\FNTCACHE.DAT
2014-01-18 11:05 - 2009-07-14 03:34 - 00000499 _____ () C:\windows\win.ini
2014-01-18 11:04 - 2013-07-13 02:02 - 00000000 ____D () C:\windows\system32\MRT
2014-01-18 11:00 - 2011-08-26 20:38 - 86054176 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe

ZeroAccess:
C:\Users\Marvin\AppData\Local\8cfd349e
C:\Users\Marvin\AppData\Local\8cfd349e\@
C:\Users\Marvin\AppData\Local\8cfd349e\loader.tlb

Files to move or delete:
====================
C:\ProgramData\flashax10.exe


Some content of TEMP:
====================
C:\Users\Marvin\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-08 00:38

==================== End Of Log ============================
         

--- --- ---

--- --- ---

ESET Online Scanner

• Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
• Lade und starte Eset Online Scanner
• Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
• Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
• Klicke auf Starten.
• Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
• Klicke am Ende des Suchlaufs auf Fertig stellen.
• Schließe das Fenster von ESET.
• Explorer öffnen.
• C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
• Logfile hier posten.
• Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
• Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte SecurityCheck und:

• Speichere es auf dem Desktop.
• Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
• Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=68ee2097d18a8341afd8ded0445836b4
# engine=17093
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-02-16 11:03:22
# local_time=2014-02-17 12:03:22 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 18250131 144221652 0 0
# scanned=1105616
# found=12
# cleaned=0
# scan_time=40512
sh=09EC9C4AE6D73266E17461CF99C0C97C42F96274 ft=1 fh=6a32c8fc13f8fffc vn="a variant of Win32/Adware.Yontoo.A application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Yontoo\YontooIEClient.dll.vir"
sh=A0C7E576FBDFF608455DE3AA0AAFE1C97B0F5468 ft=1 fh=75dd9cc14468cf44 vn="a variant of Win32/Adware.Yontoo.B application" ac=I fn="C:\AdwCleaner\Quarantine\C\ProgramData\Tarma Installer\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}\_Setupx.dll.vir"
sh=904E7CC939B0BE082FBB8B29470F4E3D4FFCD36C ft=0 fh=0000000000000000 vn="Java/Exploit.Agent.NZN trojan" ac=I fn="C:\Dokumente und Einstellungen\Marvin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\684cbbdd-46cff693"
sh=B8DD72F2A0B2B4376A5E3F2175975F64452E42FB ft=0 fh=0000000000000000 vn="Java/Exploit.Agent.ORV trojan" ac=I fn="C:\Dokumente und Einstellungen\Marvin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32\310fe020-7990d16e"
sh=A0AC50CE60FFE962C625A8A2D1566815BF80D1C5 ft=0 fh=0000000000000000 vn="a variant of Win32/Packed.VMProtect.AAH trojan" ac=I fn="C:\Dokumente und Einstellungen\Marvin\Desktop\dddddd\AZUBALUM\AgeOfEmpires2HD\de-aoe2hd.iso"
sh=F188DE94FE07E80F18D11E6B1410EBC88DB8A64E ft=0 fh=0000000000000000 vn="Android/Exploit.Lotoor.BD trojan" ac=I fn="C:\Dokumente und Einstellungen\Marvin\Desktop\usb\AAATABLET\SoftRoot.apk"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="a variant of Win32/Packed.VMProtect.AAA trojan" ac=I fn="C:\Dokumente und Einstellungen\Marvin\Downloads\spiele\bitreactor.to_Harry.Potter.and.the.Deathly.Hallows.Part.2-SKIDROW\bitreactor.to_Harry.Potter.and.the.Deathly.Hallows.Part.2-SKIDROW\bitreactor.to_Harry.Potter.and.the.Deathly.Hallows.Part.2-SKIDROW\sr-hp8.iso"
sh=904E7CC939B0BE082FBB8B29470F4E3D4FFCD36C ft=0 fh=0000000000000000 vn="Java/Exploit.Agent.NZN trojan" ac=I fn="C:\Users\Marvin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\29\684cbbdd-46cff693"
sh=B8DD72F2A0B2B4376A5E3F2175975F64452E42FB ft=0 fh=0000000000000000 vn="Java/Exploit.Agent.ORV trojan" ac=I fn="C:\Users\Marvin\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32\310fe020-7990d16e"
sh=A0AC50CE60FFE962C625A8A2D1566815BF80D1C5 ft=0 fh=0000000000000000 vn="a variant of Win32/Packed.VMProtect.AAH trojan" ac=I fn="C:\Users\Marvin\Desktop\dddddd\AZUBALUM\AgeOfEmpires2HD\de-aoe2hd.iso"
sh=F188DE94FE07E80F18D11E6B1410EBC88DB8A64E ft=0 fh=0000000000000000 vn="Android/Exploit.Lotoor.BD trojan" ac=I fn="C:\Users\Marvin\Desktop\usb\AAATABLET\SoftRoot.apk"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="a variant of Win32/Packed.VMProtect.AAA trojan" ac=I fn="C:\Users\Marvin\Downloads\spiele\bitreactor.to_Harry.Potter.and.the.Deathly.Hallows.Part.2-SKIDROW\bitreactor.to_Harry.Potter.and.the.Deathly.Hallows.Part.2-SKIDROW\bitreactor.to_Harry.Potter.and.the.Deathly.Hallows.Part.2-SKIDROW\sr-hp8.iso"
         

 Results of screen317's Security Check version 0.99.79  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Microsoft Security Essentials   
  (On Access scanning disabled!) 
 Error obtaining update status for antivirus!  
`````````Anti-malware/Other Utilities Check:````````` 
 SpyHunter     
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Java(TM) 6 Update 25  
 Java 7 Update 21  
 Java 7 Update 25  
 Java version out of Date! 
 Adobe Flash Player 11.9.900.170  
 Adobe Reader 10.1.0 Adobe Reader out of Date!  
 Mozilla Firefox (26.0) 
 Google Chrome 32.0.1700.107  
````````Process Check: objlist.exe by Laurent````````  
 Microsoft Security Essentials MSMpEng.exe 
 Microsoft Security Essentials msseces.exe 
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         

FRST Logfile:

FRST Logfile:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 16-02-2014
Ran by Marvin (administrator) on MARVIN-PC on 17-02-2014 00:22:36
Running from C:\Users\Marvin\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Enigma Software Group USA, LLC.) C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\windows\system32\atiesrxx.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Ellora Assets Corp.) I:\Programme\converter\Freemake\CaptureLib\CaptureLibService.exe
(Intel Corporation) C:\windows\system32\IProsetMonitor.exe
(Lenovo) C:\Program Files\Lenovo\Power Dial\LenovoCOMSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(Deutsche Telekom AG) C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe
() C:\windows\SysWOW64\PnkBstrA.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtLED\RtLEDService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\windows\System32\alg.exe
(AMD) C:\windows\system32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Lenovo) C:\Program Files\Lenovo\Power Dial\LitModeSwitch.exe
(Deutsche Telekom AG) C:\Program Files\Netzmanager\netzmanager.exe
(Saitek) C:\Program Files (x86)\Saitek\Software\ProfilerU.exe
(Saitek) C:\Program Files (x86)\Saitek\Software\SaiMfd.exe
(Lenovo) C:\Program Files\Lenovo\Power Dial\LitModeCtrl.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\windows\system32\prevhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11786344 2011-03-28] (Realtek Semiconductor)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240 2012-11-19] (Intel Corporation)
HKLM-x32\...\Run: [ModeSwitch] - C:\Program Files\Lenovo\Power Dial\LitModeSwitch.exe [163840 2009-09-27] (Lenovo)
HKLM-x32\...\Run: [Profiler] - C:\Program Files (x86)\Saitek\Software\ProfilerU.exe [163840 2005-10-18] (Saitek)
HKLM-x32\...\Run: [SaiMfd] - C:\Program Files (x86)\Saitek\Software\SaiMfd.exe [179200 2005-11-03] (Saitek)
HKLM-x32\...\RunOnce: [B Register C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll] - "C:\windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll",DllRegisterServer [194432 2011-12-12] (DivX, LLC)
HKU\.DEFAULT\...\RunOnce: [SpUninstallDeleteDir] - rmdir /s /q "\SearchProtect"
HKU\S-1-5-21-3427846483-774009953-675166152-1001\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKU\S-1-5-21-3427846483-774009953-675166152-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
Startup: C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Netzmanager.lnk
ShortcutTarget: Netzmanager.lnk -> C:\Program Files\Netzmanager\netzmanager.exe (Deutsche Telekom AG)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - c:\program files (x86)\internet explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://start.qone8.com/web/?type=ds&ts=1383328004&from=amt&uid=3219913727_67301_927BCE60&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://www.searchqu.com//web?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://www.searchqu.com//web?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms}
SearchScopes: HKCU - DefaultScope {9920DB93-04BF-42FB-A70C-1863B14C8787} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = 
SearchScopes: HKCU - {0191A6B0-1154-4C22-9182-23A95BBE92D9} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {9920DB93-04BF-42FB-A70C-1863B14C8787} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=vc_trans_8140&type=horus
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = 
Toolbar: HKCU - No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} -  No File
Toolbar: HKCU - No Name - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} -  No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} -  No File
Winsock: Catalog5 03 C:\windows\SysWOW64\mswsock.dll [231424] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Winsock: Catalog5-x64 01 %SystemRoot%\System32\mswsock.dll [327168] (Microsoft Corporation) ATTENTION: The LibraryPath should be "%SystemRoot%\system32\NLAapi.dll"
Tcpip\Parameters: [DhcpNameServer] 192.168.3.1 192.168.3.1

FireFox:
========
FF ProfilePath: C:\Users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default
FF NewTab: about:blank
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: about:blank
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3317483&SearchSource=2&CUI=UN21789345815038290&UM=2&sspv=S41A&q=
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.4.1 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.4.1 - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.0 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=0.80.0 - C:\Program Files (x86)\Battlelog Web Plugins\0.80.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - I:\Programme\Editoren\Picasa\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MIF5BA~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @protectdisc.com/NPPDLicenseHelper - C:\Program Files (x86)\ProtectDisc\License Helper\NPPDLicenseHelper.dll ()
FF Plugin-x32: @real.com/nppl3260;version=16.0.0.282 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.0 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.0.282 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPPDLicenseHelper.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll (RealPlayer)
FF SearchPlugin: C:\Users\Marvin\AppData\Roaming\Mozilla\Firefox\Profiles\u7ctgmmt.default\searchplugins\delta.xml
FF HKLM-x32\...\Firefox\Extensions: [{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}] - I:\Programme\Adobe CS5\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
FF Extension: Adobe Contribute Toolbar - I:\Programme\Adobe CS5\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9} [2011-05-10]
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-01-19]
FF HKLM-x32\...\Firefox\Extensions: [{34712C68-7391-4c47-94F3-8F88D49AD632}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []
FF HKLM-x32\...\Firefox\Extensions: [fmdownloader@gmail.com] - I:\Programme\Internet\Downloader\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\
FF Extension: Freemake Video Downloader Plugin - I:\Programme\Internet\Downloader\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\ []
FF HKLM-x32\...\Firefox\Extensions: [ytfmdownloader@gmail.com] - I:\Programme\Internet\Downloader\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\
FF Extension: Freemake Youtube Download Button - I:\Programme\Internet\Downloader\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\ []
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-01-29]

Chrome: 
=======
CHR HomePage: about:blank
CHR DefaultSearchKeyword: google
CHR DefaultSearchURL: hxxp://www.google.com/search?q={searchTerms}
CHR DefaultNewTabURL: 
CHR Extension: (Google Docs) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-11]
CHR Extension: (Google Drive) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-11]
CHR Extension: (YouTube) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-11]
CHR Extension: (Google-Suche) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-11]
CHR Extension: (AntiGameOrigin) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldbahlcmhmlpomdepooifmhnalokdhgm [2014-02-11]
CHR Extension: (Google Wallet) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-11]
CHR Extension: (Google Mail) - C:\Users\Marvin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-11]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Marvin\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-05-04]
CHR HKCU\...\Chrome\Extension: [ioighjflakajniehlakelhkdfljfemcd] - C:\Users\Marvin\AppData\Local\CRE\ioighjflakajniehlakelhkdfljfemcd.crx [2013-05-04]
CHR HKLM-x32\...\Chrome\Extension: [ioighjflakajniehlakelhkdfljfemcd] - C:\Users\Marvin\AppData\Local\CRE\ioighjflakajniehlakelhkdfljfemcd.crx [2013-05-04]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

S2 AxAutoMntSrv; I:\Programme\hack\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
S4 CEEBC40A-FDED-4C59-B354-939132350B01; C:\Program Files (x86)\Roxio\BackOnTrack\File Backup\FileBackupSVC.exe [96752 2009-10-12] ()
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [103936 2013-12-12] (Freemake)
R2 FreemakeVideoCapture; I:\Programme\converter\Freemake\CaptureLib\CaptureLibService.exe [9216 2013-07-31] (Ellora Assets Corp.)
S4 Hamachi2Svc; I:\Programme\Internet\Hamachi\hamachi-2.exe [2470736 2013-06-28] (LogMeIn Inc.)
R2 LenovoCOMSvc; C:\Program Files\Lenovo\Power Dial\LenovoCOMSvc.exe [49152 2009-09-30] (Lenovo)
R3 LitModeCtrl; C:\Program Files\Lenovo\Power Dial\LitModeCtrl.exe [81920 2009-09-27] (Lenovo)
S2 MBAMScheduler; I:\Programme\Schutz\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; I:\Programme\Schutz\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R2 Netzmanager Service; C:\Program Files\Netzmanager\NMInfraIS2\Netzmanager_Service.exe [2635776 2012-07-20] (Deutsche Telekom AG)
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
S3 nl_license_manager; I:\Programme\Editoren\RealFlow 2013\License Manager\nl_license_manager.exe [167936 2013-07-27] ()
R2 PnkBstrA; C:\windows\SysWOW64\PnkBstrA.exe [76888 2013-08-31] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [38608 2012-11-29] ()
R2 RtLedService; C:\Program Files\Realtek\RtLED\RtLEDService.exe [311296 2010-02-05] (Realtek Semiconductor Corp.)
R2 SpyHunter 4 Service; C:\Program Files (x86)\Enigma Software Group\SpyHunter\SH4Service.exe [770432 2013-06-27] (Enigma Software Group USA, LLC.)
S3 StarWindServiceAE; I:\Programme\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software)
S4 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S2 976137e5; "C:\windows\system32\rundll32.exe" "c:\progra~3\webplat\WebPlatSvc.dll",service
S2 SystemStore; No ImagePath

==================== Drivers (Whitelisted) ====================

R0 amdkmafd; C:\Windows\System32\DRIVERS\amdkmafd.sys [21160 2013-07-28] (Advanced Micro Devices, Inc.)
R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [35936 2013-07-26] (Advanced Micro Devices, Inc.)
S3 ApfiltrService; No ImagePath
R3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920 2013-06-02] (Wondershare)
S3 ArgusMonitor; C:\Windows\SysWow64\drivers\ArgusMonitor.sys [55968 2011-07-04] (Argotronic UG (haftungsbeschraenkt))
S3 EsgScanner; C:\Windows\SysWOW64\DRIVERS\EsgScanner.sys [19984 2012-06-22] ()
R3 FIXUSTOR; C:\Windows\System32\DRIVERS\fixustor.sys [13696 2013-07-26] (GenesysLogic)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-11-19] (Intel Corporation)
S3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 pmkbdfltr; C:\Windows\System32\DRIVERS\pmkbdfltr.sys [18832 2012-10-30] (PenMount)
S3 pmserenum; C:\Windows\System32\DRIVERS\pmserenum.sys [37272 2012-10-30] (PenMount)
S3 RTHDMIAzAudService; No ImagePath
S3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation                           )
R3 SaiH075C; C:\Windows\System32\DRIVERS\SaiH075C.sys [326784 2006-07-27] (Saitek)
R3 SaiMini; C:\Windows\System32\DRIVERS\SaiMini.sys [16000 2013-07-26] (Saitek)
R3 SaiNtBus; C:\Windows\System32\drivers\SaiBus.sys [41216 2013-07-26] (Saitek)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33008 2013-07-26] (Synaptics Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2012-11-12] (Duplex Secure Ltd.)
R3 TelekomNM6; C:\Program Files\Netzmanager\NMInfraIS2\Driver\TelekomNM6.sys [45664 2010-09-16] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH)
R2 WinI2C-DDC; C:\windows\system32\drivers\DDCDrv.sys [20832 2008-04-08] (Nicomsoft Ltd.)
R2 WinI2C-DDC; C:\windows\SysWOW64\drivers\DDCDrv.sys [16200 2009-03-02] (Nicomsoft Ltd.)
U3 ah3w2yyp; C:\Windows\System32\Drivers\ah3w2yyp.sys [0 ] (Intel Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-17 00:09 - 2014-02-17 00:09 - 00987425 _____ () C:\Users\Marvin\Desktop\SecurityCheck.exe
2014-02-16 12:42 - 2014-02-16 12:43 - 02347384 _____ (ESET) C:\Users\Marvin\Downloads\esetsmartinstaller_enu.exe
2014-02-15 17:56 - 2014-02-15 17:56 - 00000000 ____D () C:\Users\Marvin\Desktop\jsc3d-full-1.6.5
2014-02-15 17:55 - 2014-02-15 17:56 - 39915283 _____ () C:\Users\Marvin\Desktop\jsc3d-full-1.6.5.zip
2014-02-15 00:18 - 2014-02-17 00:22 - 00000000 ____D () C:\Users\Marvin\Desktop\FRST-OlderVersion
2014-02-14 19:12 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-02-14 19:12 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-02-14 19:11 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-02-14 19:11 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-02-14 19:11 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-02-14 19:11 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-02-14 19:11 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-02-14 19:11 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-02-14 19:11 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-02-14 19:11 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-02-14 19:11 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-02-14 19:11 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-02-14 19:11 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-02-14 19:11 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-02-14 19:11 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-02-14 19:11 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-02-14 19:11 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-02-14 19:11 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-02-14 19:11 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-02-14 19:11 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-02-14 19:11 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-02-14 19:11 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-02-14 19:11 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-02-14 19:11 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-02-14 19:11 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-02-14 19:11 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-02-14 19:11 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-02-14 19:11 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-02-14 19:11 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-02-14 19:11 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-02-14 19:11 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-02-14 19:11 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-02-14 19:11 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-02-14 19:11 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-02-14 19:11 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-02-14 19:11 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-02-14 19:11 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-02-14 19:11 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-02-14 19:11 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-02-14 19:11 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-02-14 19:11 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-02-14 19:06 - 2014-02-15 00:15 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\iSafe
2014-02-14 19:03 - 2014-02-14 19:03 - 00000000 ____D () C:\windows\ERUNT
2014-02-14 19:02 - 2014-02-14 19:03 - 01037530 _____ (Thisisu) C:\Users\Marvin\Desktop\JRT.exe
2014-02-14 18:49 - 2014-02-17 00:22 - 00000000 ____D () C:\Users\Marvin\Desktop\PCXXX
2014-02-14 18:49 - 2014-02-14 18:49 - 01166132 _____ () C:\Users\Marvin\Desktop\adwcleaner.exe
2014-02-14 15:41 - 2014-02-14 15:41 - 00000843 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-13 12:21 - 2014-02-13 12:21 - 00155918 _____ () C:\ComboFix.txt
2014-02-13 12:01 - 2014-02-13 12:01 - 05180679 ____R (Swearware) C:\Users\Marvin\Desktop\ComboFix.exe
2014-02-13 00:11 - 2014-02-14 18:50 - 00359673 _____ () C:\Users\Marvin\Documents\jms Template.artx
2014-02-12 23:33 - 2014-02-12 23:33 - 00000852 _____ () C:\Users\Marvin\Desktop\Artisteer 4.lnk
2014-02-12 23:31 - 2014-02-12 23:31 - 00000000 ____D () C:\Users\Marvin\Desktop\A4.0
2014-02-12 22:46 - 2014-02-12 23:27 - 122616291 _____ () C:\Users\Marvin\Desktop\A4.0.rar
2014-02-12 20:47 - 2014-02-12 20:47 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\Artisteer
2014-02-12 20:39 - 2014-02-12 20:43 - 123768816 _____ () C:\Users\Marvin\Downloads\Artisteer.4.2.0.60623.exe
2014-02-12 20:35 - 2014-02-12 20:35 - 01182770 _____ () C:\Users\Marvin\Downloads\allrounder-3_v1.1.zip
2014-02-12 20:31 - 2014-02-12 20:31 - 00911974 _____ () C:\Users\Marvin\Downloads\Blank-Template-2.6.1.zip
2014-02-12 19:34 - 2014-02-12 19:34 - 00000000 ____D () C:\Users\Marvin\Desktop\Joomla-Mustertemplate-HTML5
2014-02-12 19:33 - 2014-02-12 19:33 - 00190742 _____ () C:\Users\Marvin\Desktop\Joomla-Mustertemplate-HTML5.zip
2014-02-12 18:05 - 2014-02-12 18:05 - 00013366 _____ () C:\Users\Marvin\Desktop\test_template-3.0.zip
2014-02-12 17:54 - 2014-02-12 17:54 - 00000000 ____D () C:\Users\Marvin\Desktop\a4joomla-darkcity3r-free - Kopie
2014-02-12 17:53 - 2014-02-12 17:53 - 00000000 ____D () C:\Users\Marvin\Desktop\a4joomla-darkcity3r-free
2014-02-12 17:52 - 2014-02-12 17:52 - 00575015 _____ () C:\Users\Marvin\Desktop\a4joomla-darkcity3r-free.zip
2014-02-12 17:14 - 2014-02-12 17:14 - 00017644 _____ () C:\Users\Marvin\Desktop\tttes2t.html
2014-02-12 16:03 - 2014-01-01 00:05 - 00420008 _____ () C:\windows\SysWOW64\locale.nls
2014-02-12 16:03 - 2014-01-01 00:04 - 00420008 _____ () C:\windows\system32\locale.nls
2014-02-12 16:03 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
2014-02-12 16:03 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2014-02-12 16:03 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2014-02-12 16:03 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
2014-02-12 16:03 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2014-02-12 16:03 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3r.dll
2014-02-12 16:03 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\windows\system32\secproc.dll
2014-02-12 16:03 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\windows\system32\secproc_isv.dll
2014-02-12 16:03 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\windows\system32\secproc_ssp_isv.dll
2014-02-12 16:03 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\windows\system32\secproc_ssp.dll
2014-02-12 16:03 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\windows\system32\msdrm.dll
2014-02-12 16:03 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\windows\system32\RMActivate_isv.exe
2014-02-12 16:03 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\windows\system32\RMActivate.exe
2014-02-12 16:03 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\windows\system32\RMActivate_ssp.exe
2014-02-12 16:03 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\windows\system32\RMActivate_ssp_isv.exe
2014-02-12 16:03 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\windows\SysWOW64\secproc.dll
2014-02-12 16:03 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\windows\SysWOW64\secproc_isv.dll
2014-02-12 16:03 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 16:03 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\windows\SysWOW64\secproc_ssp.dll
2014-02-12 16:03 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\windows\SysWOW64\msdrm.dll
2014-02-12 16:03 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\windows\SysWOW64\RMActivate_isv.exe
2014-02-12 16:03 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\windows\SysWOW64\RMActivate.exe
2014-02-12 16:03 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 16:03 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 16:03 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\windows\SysWOW64\d2d1.dll
2014-02-12 16:03 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\windows\system32\d2d1.dll
2014-02-12 10:44 - 2014-02-12 10:44 - 00000027 _____ () C:\Users\Marvin\Documents\FSX1.txt
2014-02-12 09:21 - 2014-02-12 09:21 - 00000000 ____D () C:\windows\pss
2014-02-12 09:02 - 2014-02-12 09:02 - 725404517 _____ () C:\windows\MEMORY.DMP
2014-02-12 07:57 - 2014-02-12 07:57 - 00056136 _____ () C:\Users\Marvin\Desktop\Addition.txt
2014-02-12 07:56 - 2014-02-17 00:22 - 02152448 _____ (Farbar) C:\Users\Marvin\Desktop\FRST64.exe
2014-02-12 07:56 - 2014-02-17 00:22 - 00023431 _____ () C:\Users\Marvin\Desktop\FRST.txt
2014-02-12 07:56 - 2014-02-17 00:22 - 00000000 ____D () C:\FRST
2014-02-11 20:27 - 2014-02-14 18:51 - 00012918 _____ () C:\windows\PFRO.log
2014-02-11 19:11 - 2014-02-11 19:11 - 00002247 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-11 19:08 - 2014-02-15 00:00 - 00000594 _____ () C:\windows\setupact.log
2014-02-11 19:08 - 2014-02-11 19:08 - 00000000 _____ () C:\windows\setuperr.log
2014-02-11 19:03 - 2014-02-11 19:04 - 00200146 _____ () C:\Users\Marvin\Documents\cc_20140211_190346.reg
2014-02-11 18:56 - 2014-02-11 18:56 - 00002774 _____ () C:\windows\System32\Tasks\CCleanerSkipUAC
2014-02-11 18:56 - 2014-02-11 18:56 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-11 18:56 - 2014-02-11 18:56 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-11 18:53 - 2014-02-11 18:54 - 00614792 _____ (Chip Digital GmbH) C:\Users\Marvin\Downloads\CCleaner - CHIP-Downloader.exe
2014-02-11 16:36 - 2014-02-14 18:57 - 00000000 ____D () C:\AdwCleaner
2014-02-07 00:24 - 2014-02-07 00:24 - 00000000 ____D () C:\Program Files (x86)\AdBBlocknWatch
2014-02-05 05:34 - 2014-02-05 05:34 - 05556104 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe
2014-01-30 22:51 - 2014-02-11 16:42 - 00000000 ____D () C:\ProgramData\AdBBlocknWatch
2014-01-30 22:51 - 2014-01-30 22:51 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-30 22:51 - 2014-01-30 22:51 - 00000000 ____D () C:\ProgramData\ikflhiiejehmjgppokkcoiebajjogcaj
2014-01-28 17:43 - 2014-01-28 17:43 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\driver
2014-01-25 15:26 - 2014-01-25 15:26 - 00000997 _____ () C:\Users\Marvin\Desktop\RealFlow Job Manager.lnk
2014-01-25 15:26 - 2014-01-25 15:26 - 00000988 _____ () C:\Users\Marvin\Desktop\RealFlow Job Node.lnk
2014-01-25 14:44 - 2014-01-25 14:44 - 00000000 ____D () C:\Users\Marvin\graphs
2014-01-25 14:40 - 2014-01-25 14:40 - 00000806 _____ () C:\Users\Marvin\Desktop\RealFlow 2013.lnk
2014-01-25 14:38 - 2014-01-25 14:38 - 00000000 ____D () C:\Users\Marvin\Downloads\Realflow2013
2014-01-25 14:02 - 2014-01-25 14:38 - 110100480 _____ () C:\Users\Marvin\Downloads\Realflow.part1.rar
2014-01-25 14:00 - 2014-01-25 14:36 - 110100480 _____ () C:\Users\Marvin\Downloads\Realflow.part2.rar
2014-01-25 13:50 - 2014-01-25 14:06 - 70076968 _____ () C:\Users\Marvin\Downloads\Realflow.part3.rar
2014-01-25 13:47 - 2014-01-25 13:47 - 00001456 _____ () C:\Users\Marvin\Downloads\Realflow2013Upl-f9cklymmdp1x.dlc
2014-01-25 13:44 - 2014-01-25 13:44 - 00002904 _____ () C:\Users\Marvin\Downloads\relink.us_31a35accc7524e07065d1ff04234c2.dlc
2014-01-23 18:35 - 2014-01-23 19:08 - 00052170 _____ () C:\windows\RFC4DPluginUninstall.exe
2014-01-22 23:11 - 2014-01-22 23:11 - 00378412 _____ () C:\Users\Marvin\Downloads\Kollisionszerlegung (1).c4d
2014-01-22 22:41 - 2014-01-22 23:47 - 00000000 ____D () C:\Users\Marvin\Downloads\backup
2014-01-22 22:39 - 2014-01-22 22:39 - 00378412 _____ () C:\Users\Marvin\Downloads\Kollisionszerlegung.c4d
2014-01-22 20:46 - 2014-01-22 20:46 - 00466390 _____ () C:\Users\Marvin\Downloads\Thrausi.c4d.zip
2014-01-20 20:47 - 2014-01-20 20:59 - 00000000 ____D () C:\Users\Marvin\Desktop\a1a
2014-01-20 20:43 - 2014-01-20 20:43 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-01-20 20:41 - 2014-01-20 20:41 - 00000000 ____D () C:\windows\System32\Tasks\Apple
2014-01-20 20:41 - 2014-01-20 20:41 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-01-19 23:49 - 2014-01-20 20:44 - 42815752 _____ () C:\Users\Marvin\Desktop\IMGP3517.AVI

==================== One Month Modified Files and Folders =======

2014-02-17 00:22 - 2014-02-15 00:18 - 00000000 ____D () C:\Users\Marvin\Desktop\FRST-OlderVersion
2014-02-17 00:22 - 2014-02-14 18:49 - 00000000 ____D () C:\Users\Marvin\Desktop\PCXXX
2014-02-17 00:22 - 2014-02-12 07:56 - 02152448 _____ (Farbar) C:\Users\Marvin\Desktop\FRST64.exe
2014-02-17 00:22 - 2014-02-12 07:56 - 00023431 _____ () C:\Users\Marvin\Desktop\FRST.txt
2014-02-17 00:22 - 2014-02-12 07:56 - 00000000 ____D () C:\FRST
2014-02-17 00:09 - 2014-02-17 00:09 - 00987425 _____ () C:\Users\Marvin\Desktop\SecurityCheck.exe
2014-02-17 00:05 - 2013-08-29 10:50 - 00002456 _____ () C:\Users\Marvin\Desktop\kauf.txt
2014-02-17 00:05 - 2010-09-24 15:29 - 01072247 _____ () C:\windows\WindowsUpdate.log
2014-02-17 00:04 - 2012-12-02 20:09 - 00001110 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-16 23:34 - 2012-08-04 20:48 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-02-16 17:04 - 2012-12-02 20:09 - 00001106 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-16 12:43 - 2014-02-16 12:42 - 02347384 _____ (ESET) C:\Users\Marvin\Downloads\esetsmartinstaller_enu.exe
2014-02-16 12:43 - 2009-09-14 07:03 - 00781022 _____ () C:\windows\system32\perfh007.dat
2014-02-16 12:43 - 2009-09-14 07:03 - 00183930 _____ () C:\windows\system32\perfc007.dat
2014-02-16 12:43 - 2009-07-14 06:13 - 01836588 _____ () C:\windows\system32\PerfStringBackup.INI
2014-02-16 09:36 - 2013-12-24 12:42 - 00000433 _____ () C:\windows\system32\Drivers\etc\hosts.ics
2014-02-16 01:40 - 2013-06-04 18:36 - 00041472 _____ () C:\Users\Marvin\Documents\Ausgaben schlangen.xls
2014-02-15 17:56 - 2014-02-15 17:56 - 00000000 ____D () C:\Users\Marvin\Desktop\jsc3d-full-1.6.5
2014-02-15 17:56 - 2014-02-15 17:55 - 39915283 _____ () C:\Users\Marvin\Desktop\jsc3d-full-1.6.5.zip
2014-02-15 15:23 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\rescache
2014-02-15 00:39 - 2012-09-24 17:30 - 00000000 ____D () C:\Users\Marvin\AppData\Local\CrashDumps
2014-02-15 00:15 - 2014-02-14 19:06 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\iSafe
2014-02-15 00:07 - 2009-07-14 05:45 - 00017136 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-15 00:07 - 2009-07-14 05:45 - 00017136 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-15 00:03 - 2013-12-19 20:16 - 00003366 _____ () C:\windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3427846483-774009953-675166152-1001
2014-02-15 00:03 - 2013-12-19 20:16 - 00003234 _____ () C:\windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3427846483-774009953-675166152-1001
2014-02-15 00:00 - 2014-02-11 19:08 - 00000594 _____ () C:\windows\setupact.log
2014-02-15 00:00 - 2009-07-14 06:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-02-14 19:14 - 2011-05-30 04:51 - 01809932 _____ () C:\windows\SysWOW64\PerfStringBackup.INI
2014-02-14 19:03 - 2014-02-14 19:03 - 00000000 ____D () C:\windows\ERUNT
2014-02-14 19:03 - 2014-02-14 19:02 - 01037530 _____ (Thisisu) C:\Users\Marvin\Desktop\JRT.exe
2014-02-14 18:57 - 2014-02-11 16:36 - 00000000 ____D () C:\AdwCleaner
2014-02-14 18:51 - 2014-02-11 20:27 - 00012918 _____ () C:\windows\PFRO.log
2014-02-14 18:50 - 2014-02-13 00:11 - 00359673 _____ () C:\Users\Marvin\Documents\jms Template.artx
2014-02-14 18:49 - 2014-02-14 18:49 - 01166132 _____ () C:\Users\Marvin\Desktop\adwcleaner.exe
2014-02-14 18:48 - 2013-11-01 18:47 - 00000000 ____D () C:\Program Files (x86)\CSBrowserHelper
2014-02-14 18:48 - 2012-12-16 19:00 - 00000000 ____D () C:\Users\Marvin\Downloads\Tuifly
2014-02-14 18:48 - 2012-07-18 22:15 - 00000000 ____D () C:\Users\Marvin\Downloads\spiele
2014-02-14 18:48 - 2012-07-03 20:45 - 00000000 ____D () C:\Users\Marvin\Downloads\aaabbb
2014-02-14 17:47 - 2013-09-04 23:01 - 00070144 ___SH () C:\Users\Marvin\Documents\Thumbs.db
2014-02-14 15:41 - 2014-02-14 15:41 - 00000843 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-14 12:45 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\system32\NDF
2014-02-13 12:21 - 2014-02-13 12:21 - 00155918 _____ () C:\ComboFix.txt
2014-02-13 12:21 - 2011-12-12 19:17 - 00000000 ____D () C:\Qoobox
2014-02-13 12:16 - 2011-12-12 19:17 - 00000000 ____D () C:\windows\ERDNT
2014-02-13 12:16 - 2009-07-14 03:34 - 00000215 _____ () C:\windows\system.ini
2014-02-13 12:14 - 2009-07-14 03:34 - 95944704 _____ () C:\windows\system32\config\software.bak
2014-02-13 12:14 - 2009-07-14 03:34 - 20185088 _____ () C:\windows\system32\config\system.bak
2014-02-13 12:14 - 2009-07-14 03:34 - 01310720 _____ () C:\windows\system32\config\default.bak
2014-02-13 12:14 - 2009-07-14 03:34 - 00262144 _____ () C:\windows\system32\config\security.bak
2014-02-13 12:14 - 2009-07-14 03:34 - 00028672 _____ () C:\windows\system32\config\sam.bak
2014-02-13 12:13 - 2014-01-01 02:20 - 00000000 ____D () C:\ProgramData\WebPlat
2014-02-13 12:01 - 2014-02-13 12:01 - 05180679 ____R (Swearware) C:\Users\Marvin\Desktop\ComboFix.exe
2014-02-13 00:11 - 2013-04-16 17:47 - 00000000 ____D () C:\Users\Marvin\Documents\dpsg
2014-02-12 23:33 - 2014-02-12 23:33 - 00000852 _____ () C:\Users\Marvin\Desktop\Artisteer 4.lnk
2014-02-12 23:31 - 2014-02-12 23:31 - 00000000 ____D () C:\Users\Marvin\Desktop\A4.0
2014-02-12 23:27 - 2014-02-12 22:46 - 122616291 _____ () C:\Users\Marvin\Desktop\A4.0.rar
2014-02-12 20:47 - 2014-02-12 20:47 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\Artisteer
2014-02-12 20:47 - 2011-10-15 16:59 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\Apple Computer
2014-02-12 20:47 - 2011-10-13 19:16 - 00000000 ____D () C:\Users\Marvin\AppData\Local\Apple Computer
2014-02-12 20:43 - 2014-02-12 20:39 - 123768816 _____ () C:\Users\Marvin\Downloads\Artisteer.4.2.0.60623.exe
2014-02-12 20:35 - 2014-02-12 20:35 - 01182770 _____ () C:\Users\Marvin\Downloads\allrounder-3_v1.1.zip
2014-02-12 20:31 - 2014-02-12 20:31 - 00911974 _____ () C:\Users\Marvin\Downloads\Blank-Template-2.6.1.zip
2014-02-12 19:34 - 2014-02-12 19:34 - 00000000 ____D () C:\Users\Marvin\Desktop\Joomla-Mustertemplate-HTML5
2014-02-12 19:33 - 2014-02-12 19:33 - 00190742 _____ () C:\Users\Marvin\Desktop\Joomla-Mustertemplate-HTML5.zip
2014-02-12 18:05 - 2014-02-12 18:05 - 00013366 _____ () C:\Users\Marvin\Desktop\test_template-3.0.zip
2014-02-12 17:54 - 2014-02-12 17:54 - 00000000 ____D () C:\Users\Marvin\Desktop\a4joomla-darkcity3r-free - Kopie
2014-02-12 17:53 - 2014-02-12 17:53 - 00000000 ____D () C:\Users\Marvin\Desktop\a4joomla-darkcity3r-free
2014-02-12 17:52 - 2014-02-12 17:52 - 00575015 _____ () C:\Users\Marvin\Desktop\a4joomla-darkcity3r-free.zip
2014-02-12 17:14 - 2014-02-12 17:14 - 00017644 _____ () C:\Users\Marvin\Desktop\tttes2t.html
2014-02-12 13:19 - 2011-05-24 21:19 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\TS3Client
2014-02-12 10:44 - 2014-02-12 10:44 - 00000027 _____ () C:\Users\Marvin\Documents\FSX1.txt
2014-02-12 10:09 - 2011-11-25 16:20 - 00000000 ____D () C:\windows\Minidump
2014-02-12 09:21 - 2014-02-12 09:21 - 00000000 ____D () C:\windows\pss
2014-02-12 09:21 - 2011-12-12 19:17 - 00000000 ___RD () C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-12 09:02 - 2014-02-12 09:02 - 725404517 _____ () C:\windows\MEMORY.DMP
2014-02-12 07:57 - 2014-02-12 07:57 - 00056136 _____ () C:\Users\Marvin\Desktop\Addition.txt
2014-02-11 19:11 - 2014-02-11 19:11 - 00002247 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-11 19:11 - 2012-03-12 21:39 - 00000000 ____D () C:\Program Files (x86)\Google
2014-02-11 19:11 - 2011-07-10 12:53 - 00000000 ____D () C:\Users\Marvin\AppData\Local\Google
2014-02-11 19:09 - 2013-08-23 18:37 - 00240640 ___SH () C:\Users\Marvin\Desktop\Thumbs.db
2014-02-11 19:08 - 2014-02-11 19:08 - 00000000 _____ () C:\windows\setuperr.log
2014-02-11 19:04 - 2014-02-11 19:03 - 00200146 _____ () C:\Users\Marvin\Documents\cc_20140211_190346.reg
2014-02-11 18:59 - 2013-08-06 01:05 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\Free Download Manager
2014-02-11 18:59 - 2012-03-04 14:56 - 00000000 ____D () C:\Users\Marvin\AppData\Local\LogMeIn Hamachi
2014-02-11 18:59 - 2011-06-12 19:13 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\uTorrent
2014-02-11 18:59 - 2009-07-26 03:01 - 00000000 ____D () C:\windows\Panther
2014-02-11 18:56 - 2014-02-11 18:56 - 00002774 _____ () C:\windows\System32\Tasks\CCleanerSkipUAC
2014-02-11 18:56 - 2014-02-11 18:56 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-02-11 18:56 - 2014-02-11 18:56 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-11 18:54 - 2014-02-11 18:53 - 00614792 _____ (Chip Digital GmbH) C:\Users\Marvin\Downloads\CCleaner - CHIP-Downloader.exe
2014-02-11 17:43 - 2013-12-31 15:04 - 00000000 ____D () C:\Support
2014-02-11 17:17 - 2014-01-07 11:51 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\eCyber
2014-02-11 16:59 - 2012-12-02 20:09 - 00004106 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-11 16:59 - 2012-12-02 20:09 - 00003854 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-11 16:59 - 2011-07-10 12:52 - 00000000 ____D () C:\Users\Marvin\AppData\Local\Deployment
2014-02-11 16:58 - 2011-07-10 12:52 - 00000000 ____D () C:\Users\Marvin\AppData\Local\Apps\2.0
2014-02-11 16:42 - 2014-01-30 22:51 - 00000000 ____D () C:\ProgramData\AdBBlocknWatch
2014-02-11 16:40 - 2012-10-30 16:37 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\Uniblue
2014-02-08 20:12 - 2013-04-13 19:51 - 00000227 _____ () C:\Users\Marvin\Desktop\batwait1.cmd
2014-02-07 00:24 - 2014-02-07 00:24 - 00000000 ____D () C:\Program Files (x86)\AdBBlocknWatch
2014-02-07 00:24 - 2013-12-31 15:04 - 00000000 ____D () C:\ProgramData\f8417f2f4a758cdb
2014-02-06 13:16 - 2014-02-14 19:11 - 23170048 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-14 19:11 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-14 19:11 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-14 19:11 - 02765824 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-14 19:11 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-14 19:11 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-14 19:11 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-14 19:11 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-14 19:11 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-14 19:11 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-14 19:11 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-14 19:11 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-14 19:11 - 17103872 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-14 19:11 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-14 19:11 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-14 19:11 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-14 19:11 - 05768704 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-14 19:11 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-14 19:11 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-14 19:11 - 02168320 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-14 19:11 - 00627200 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-14 19:11 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-14 19:11 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-14 19:11 - 02041856 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-14 19:11 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-14 19:11 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-14 19:11 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-14 19:11 - 04244480 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-14 19:11 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-14 19:11 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-14 19:11 - 13051392 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-14 19:11 - 00524288 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-14 19:11 - 01964032 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-14 19:11 - 11266048 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-14 19:11 - 01393664 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-14 19:11 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-14 19:11 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-14 19:11 - 01156096 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-14 19:11 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-02-05 05:34 - 2014-02-05 05:34 - 05556104 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerInstaller.exe
2014-02-05 05:34 - 2012-08-04 20:48 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-02-05 05:34 - 2012-08-04 20:48 - 00003822 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-02-05 05:34 - 2011-11-22 19:33 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-01-30 22:51 - 2014-01-30 22:51 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-30 22:51 - 2014-01-30 22:51 - 00000000 ____D () C:\ProgramData\ikflhiiejehmjgppokkcoiebajjogcaj
2014-01-30 22:51 - 2009-07-14 04:20 - 00000000 ___HD () C:\windows\system32\GroupPolicy
2014-01-30 22:51 - 2009-07-14 04:20 - 00000000 ____D () C:\windows\SysWOW64\GroupPolicy
2014-01-28 17:43 - 2014-01-28 17:43 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\driver
2014-01-27 15:33 - 2012-12-02 20:12 - 00000000 ___RD () C:\Users\Marvin\Google Drive
2014-01-25 15:26 - 2014-01-25 15:26 - 00000997 _____ () C:\Users\Marvin\Desktop\RealFlow Job Manager.lnk
2014-01-25 15:26 - 2014-01-25 15:26 - 00000988 _____ () C:\Users\Marvin\Desktop\RealFlow Job Node.lnk
2014-01-25 15:26 - 2011-06-25 16:33 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Next Limit
2014-01-25 14:46 - 2011-06-25 16:41 - 00000000 ____D () C:\Users\Marvin\scenes
2014-01-25 14:44 - 2014-01-25 14:44 - 00000000 ____D () C:\Users\Marvin\graphs
2014-01-25 14:44 - 2011-06-25 16:41 - 00000000 ____D () C:\Users\Marvin\AppData\Local\Next Limit
2014-01-25 14:44 - 2011-05-09 20:02 - 00000000 ____D () C:\Users\Marvin
2014-01-25 14:40 - 2014-01-25 14:40 - 00000806 _____ () C:\Users\Marvin\Desktop\RealFlow 2013.lnk
2014-01-25 14:38 - 2014-01-25 14:38 - 00000000 ____D () C:\Users\Marvin\Downloads\Realflow2013
2014-01-25 14:38 - 2014-01-25 14:02 - 110100480 _____ () C:\Users\Marvin\Downloads\Realflow.part1.rar
2014-01-25 14:36 - 2014-01-25 14:00 - 110100480 _____ () C:\Users\Marvin\Downloads\Realflow.part2.rar
2014-01-25 14:06 - 2014-01-25 13:50 - 70076968 _____ () C:\Users\Marvin\Downloads\Realflow.part3.rar
2014-01-25 13:47 - 2014-01-25 13:47 - 00001456 _____ () C:\Users\Marvin\Downloads\Realflow2013Upl-f9cklymmdp1x.dlc
2014-01-25 13:44 - 2014-01-25 13:44 - 00002904 _____ () C:\Users\Marvin\Downloads\relink.us_31a35accc7524e07065d1ff04234c2.dlc
2014-01-23 19:18 - 2013-03-30 14:27 - 00836608 ___SH () C:\Users\Marvin\Downloads\Thumbs.db
2014-01-23 19:08 - 2014-01-23 18:35 - 00052170 _____ () C:\windows\RFC4DPluginUninstall.exe
2014-01-22 23:47 - 2014-01-22 22:41 - 00000000 ____D () C:\Users\Marvin\Downloads\backup
2014-01-22 23:11 - 2014-01-22 23:11 - 00378412 _____ () C:\Users\Marvin\Downloads\Kollisionszerlegung (1).c4d
2014-01-22 22:39 - 2014-01-22 22:39 - 00378412 _____ () C:\Users\Marvin\Downloads\Kollisionszerlegung.c4d
2014-01-22 20:46 - 2014-01-22 20:46 - 00466390 _____ () C:\Users\Marvin\Downloads\Thrausi.c4d.zip
2014-01-20 20:59 - 2014-01-20 20:47 - 00000000 ____D () C:\Users\Marvin\Desktop\a1a
2014-01-20 20:44 - 2014-01-19 23:49 - 42815752 _____ () C:\Users\Marvin\Desktop\IMGP3517.AVI
2014-01-20 20:43 - 2014-01-20 20:43 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-01-20 20:43 - 2011-05-09 20:05 - 00000000 ____D () C:\Users\Marvin\AppData\Roaming\Adobe
2014-01-20 20:41 - 2014-01-20 20:41 - 00000000 ____D () C:\windows\System32\Tasks\Apple
2014-01-20 20:41 - 2014-01-20 20:41 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update
2014-01-19 08:33 - 2011-05-09 22:56 - 00270496 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2014-01-18 11:15 - 2009-07-14 05:45 - 04950072 _____ () C:\windows\system32\FNTCACHE.DAT
2014-01-18 11:05 - 2009-07-14 03:34 - 00000499 _____ () C:\windows\win.ini
2014-01-18 11:04 - 2013-07-13 02:02 - 00000000 ____D () C:\windows\system32\MRT
2014-01-18 11:00 - 2011-08-26 20:38 - 86054176 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe

ZeroAccess:
C:\Users\Marvin\AppData\Local\8cfd349e
C:\Users\Marvin\AppData\Local\8cfd349e\@
C:\Users\Marvin\AppData\Local\8cfd349e\loader.tlb

Files to move or delete:
====================
C:\ProgramData\flashax10.exe


Some content of TEMP:
====================
C:\Users\Marvin\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-08 00:38

==================== End Of Log ============================
         

--- --- ---

--- --- ---

Java und adobe updaten.


Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.


Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

HKLM-x32\...\RunOnce: [B Register C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll] - "C:\windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll",DllRegisterServer [194432 2011-12-12] (DivX, LLC)
HKU\.DEFAULT\...\RunOnce: [SpUninstallDeleteDir] - rmdir /s /q "\SearchProtect"
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
S2 976137e5; "C:\windows\system32\rundll32.exe" "c:\progra~3\webplat\WebPlatSvc.dll",service
c:\progra~3\webplat
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
C:\Program Files\Enigma Software Group
ZeroAccess:
C:\Users\Marvin\AppData\Local\8cfd349e
C:\Users\Marvin\AppData\Local\8cfd349e\@
C:\Users\Marvin\AppData\Local\8cfd349e\loader.tlb
C:\ProgramData\flashax10.exe
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

• Starte nun FRST erneut und klicke den Entfernen Button.
• Das Tool erstellt eine Fixlog.txt.
• Poste mir deren Inhalt.

Frisches FRST log bitte.