| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Popups und Werbung in Internet Explorer 11 nehmen plötzlich überhandWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
13.02.2014, 09:04
| #1 |
 |  Popups und Werbung in Internet Explorer 11 nehmen plötzlich überhand Guten Tag, mein Problem: Ich kann mich der Popups und der Werbung bei IE 11 "nicht mehr erwehren", und würde mich freuen, wenn ich hier eine Hilfe bekomme. Ich habe das Gefühl, daß mit Beginn des Jahres die Werbung im Internet aggressiver geworden ist! Mit der "Technik" bin ich eines PCs nicht so sehr vertraut, deshalb kann ich mir für dieses Problem nur sehr bedingt selber helfen. Ich habe: - Windows 7 (64 bit) - Internet Explorer 11 Getan habe ich bisher: 1. Abschalten der Popups bei IE / Extras / Popupblocker 2. Bei IE / Extras / Internetoptionen / Datenschutz / Popupblocker. Dort: Einstellungen --> Blockierungsstufe: Hoch 3. (auf Anraten eines Freundes) im Registrierungsschlüssel: HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT" statt "1" eine "0" gesetzt. (Merkwürdigerweise war genau der gleiche Schlüssel zwei Mal vorhanden!?) Mit diesen Angaben möchte ich es erst mal belassen in der Hoffnung, daß ich hier einen Expertenrat erhalten kann. - Ich würde mich freuen. Gruß Frusti |
|
13.02.2014, 09:15
| #2 |
| /// Malwareteam   | Popups und Werbung in Internet Explorer 11 nehmen plötzlich überhand Eine Bereinigung ist mitunter mit viel Arbeit für Dich verbunden.
Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der Schnellere und immer der sicherste Weg. Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist. Vista und Win7 User Alle Tools mit Rechtsklick "als Administrator ausführen" starten. Schritt 1 Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
|
13.02.2014, 09:49
| #3 |
| | Popups und Werbung in Internet Explorer 11 nehmen plötzlich überhand Hallo,
__________________vielen Dank für Deine Bereitschaft, mir helfen zu wollen. Hier die beiden Auswertungen, ( ich hoffe, es kommt alles richtig an): FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt)[/B] (x64) Version: 12-02-2014 01
Ran by Besitzer (administrator) on BESITZER-PC on 13-02-2014 09:32:29
Running from C:\Users\Besitzer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CA88SO2K
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forums
==================== Processes (Whitelisted) =================
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
() C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
() C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
( ) C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\AppIntegrator64.exe
() C:\Users\Besitzer\AppData\Local\HD Streamer\crxmon.exe
() C:\Program Files (x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(VER_COMPANY_NAME) C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe
(VER_COMPANY_NAME) C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbrmon64.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
() C:\Program Files (x86)\Universal Updater\UpdaterService.exe
(COMPANYVERS_NAME) C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbarsvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\swriter.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\soffice.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\soffice.bin
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_12_0_0_44_ActiveX.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
() C:\Program Files (x86)\HD Streamer\BackgroundHost64.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [WrtMon.exe] - C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [20480 2006-09-20] ()
HKLM\...\Run: [VideoDownloadConverter Home Page Guard 64 bit] - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\AppIntegrator64.exe [485448 2014-02-02] ( )
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [TrueImageMonitor.exe] - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5078416 2009-08-28] (Acronis)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [VideoDownloadConverter EPM Support] - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zmedint.exe [12872 2014-02-02] (Mindspark Interactive Network, Inc.)
HKLM-x32\...\Run: [VideoDownloadConverter Search Scope Monitor] - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrchMn.exe [55368 2014-02-02] (Mindspark)
HKLM-x32\...\Run: [VideoDownloadConverter_4z Browser Plugin Loader] - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe [61512 2014-02-02] (VER_COMPANY_NAME)
HKLM-x32\...\Run: [VideoDownloadConverter_4z Browser Plugin Loader 64] - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbrmon64.exe [71752 2014-02-02] (VER_COMPANY_NAME)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1654125919-855541359-3433209274-1000\...\Run: [NextLive] - C:\Windows\SysWOW64\rundll32.exe "C:\Users\Besitzer\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKU\S-1-5-21-1654125919-855541359-3433209274-1000\...\Run: [HD Streamer Sync] - C:\Users\Besitzer\AppData\Local\HD Streamer\crxmon.exe [128952 2014-01-15] ()
AppInit_DLLs: c:\progra~2\movies~1\safety~1\x64\safety~2.dll => File Not Found
AppInit_DLLs-x32: c:\progra~2\movies~1\safety~1\safety~2.dll => File Not Found
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\browsemngr.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browsermngr.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe
IFEO\cltmngsvc.exe: [Debugger] tasklist.exe
IFEO\delta babylon.exe: [Debugger] tasklist.exe
IFEO\delta tb.exe: [Debugger] tasklist.exe
IFEO\delta2.exe: [Debugger] tasklist.exe
IFEO\deltainstaller.exe: [Debugger] tasklist.exe
IFEO\deltasetup.exe: [Debugger] tasklist.exe
IFEO\deltatb.exe: [Debugger] tasklist.exe
IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe
IFEO\iminentsetup.exe: [Debugger] tasklist.exe
IFEO\mediabuilder.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\rjatydimofu.exe: [Debugger] tasklist.exe
IFEO\sweetimsetup.exe: [Debugger] tasklist.exe
IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe
IFEO\trueimagelauncher.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=5bdc670b-611f-628a-a97d-b1af013e3718&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=&type=hp1000
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=5bdc670b-611f-628a-a97d-b1af013e3718&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=&type=hp1000
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = Babylon Search
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF249114589E0CE01
URLSearchHook: HKCU - (No Name) - {93a3111f-4f74-4ed8-895e-d9708497629e} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll (Mindspark)
SearchScopes: HKLM - {52db1893-8a90-4192-aede-08e00b8f8473} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=100&systemid=473&v=n9602-172&apn_uid=3029124234214494&apn_dtid=BND473&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=5bdc670b-611f-628a-a97d-b1af013e3718&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=&type=hp1000
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=5bdc670b-611f-628a-a97d-b1af013e3718&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=&type=hp1000
SearchScopes: HKLM-x32 - {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^HJ^xdm255^YYA^de&si=CNiE-_CGrrwCFQsCwwodsj8AiA&ptb=A37A0A48-85D5-4D1E-8CC2-8328E11C5F6D&ind=2014020213&n=780b8275&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=5bdc670b-611f-628a-a97d-b1af013e3718&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=&type=hp1000
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {3E762055-979B-459A-AC05-D200656890B9} URL = hxxp://de.wikipedia.org/w/index.php?title=Spezial:Suche&search={searchTerms}
SearchScopes: HKCU - {52db1893-8a90-4192-aede-08e00b8f8473} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HD Streamer - {E6062A33-016E-4BDA-A6F1-890D989F8656} - C:\Program Files (x86)\HD Streamer\ScriptHost64.dll (HD Streamer)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: Toolbar BHO - {312f84fb-8970-4fd3-bddb-7012eac4afc9} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll (Mindspark)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Babylon IE plugin - {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} - No File
BHO-x32: Search Assistant BHO - {c547c6c2-561b-4169-a2a5-20ba771ca93b} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll (Mindspark)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HD Streamer - {E6062A33-016E-4BDA-A6F1-890D989F8656} - C:\Program Files (x86)\HD Streamer\ScriptHost.dll (HD Streamer)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - VideoDownloadConverter - {48586425-6bb7-4f51-8dc6-38c88e3ebb58} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll (Mindspark)
Toolbar: HKCU - No Name - {C424171E-592A-415A-9EB1-DFD6D95D3530} - No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.4.24.0.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default
FF user.js: detected! => C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\user.js
FF Homepage: user_pref("browser.startup.homepage", );
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Users\Besitzer\Desktop\Programme - ÖFNNEN\Picasa3\npPicasa3.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @real.com/nppl3260;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @VideoDownloadConverter_4z.com/Plugin - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll (Mindspark)
FF Plugin-x32: @VideoDownloadConverter_ScriptHelper.com/Plugin - C:\Program Files (x86)\VideoDownloadConverter\npVDCPlugin.dll (Mindspark)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\searchplugins\buenosearch.xml
FF SearchPlugin: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\searchplugins\Web Search.xml
FF Extension: VideoDownloadConverter - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\4zffxtbr@VideoDownloadConverter_4z.com [2014-02-02]
FF Extension: incredibar.com - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\ffxtlbr@incredibar.com [2012-08-26]
FF Extension: HD Streamer - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\hd_streamer@iMedia [2014-01-23]
FF Extension: No Name - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\staged [2014-01-23]
FF Extension: IMinent Toolbar - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444} [2011-12-30]
FF Extension: Adblock Plus - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-11]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011-04-05]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011-04-06]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} [2011-10-24]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2012-07-02]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-09-24]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2012-11-12]
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Web Assistant\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-05-09]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-05-09]
FF HKLM-x32\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Web Assistant\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [2013-11-21]
Chrome:
=======
CHR Extension: (HD Streamer) - C:\Users\Besitzer\AppData\Local\Google\Chrome\User Data\Default\Extensions\oleglodmkonbpfmlffapjfednjopbeeh [2014-01-22]
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx [2014-01-22]
CHR HKLM-x32\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx [2014-01-22]
CHR HKLM-x32\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2011-12-22]
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-12-08]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\Exts\Chrome.crx [2014-01-21]
==================== Services (Whitelisted) =================
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [103936 2014-01-20] (Freemake)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe [275696 2013-10-08] (Symantec Corporation)
S3 Symantec RemoteAssist; C:\Program Files (x86)\Common Files\Symantec Shared\Support Controls\ssrc.exe [394704 2008-01-29] (Symantec, Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2103096 2013-12-18] (TuneUp Software)
R2 UniversalUpdater; C:\Program Files (x86)\Universal Updater\UpdaterService.exe [401336 2014-01-19] ()
R2 VideoDownloadConverter_4zService; C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbarsvc.exe [88648 2014-02-02] (COMPANYVERS_NAME)
==================== Drivers (Whitelisted) ====================
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140121.001\BHDrvx64.sys [1526488 2013-12-18] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2014-02-04] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140212.001\IDSvia64.sys [521944 2014-01-21] (Symantec Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140212.019\ENG64.SYS [126040 2014-02-04] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140212.019\EX64.SYS [2099288 2014-02-04] (Symantec Corporation)
S3 Spyder3; C:\Windows\System32\DRIVERS\Spyder3.sys [15360 2008-09-08] ()
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1501000.012\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-21] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1501000.012\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
R0 tdrpman251; C:\Windows\System32\DRIVERS\tdrpm251.sys [1455648 2012-06-03] (Acronis)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-13 09:32 - 2014-02-13 09:32 - 00000000 ____D () C:\FRST
2014-02-13 07:18 - 2014-02-13 07:18 - 00002214 _____ () C:\Windows\PFRO.log
2014-02-13 07:18 - 2014-02-13 07:18 - 00000056 _____ () C:\Windows\setupact.log
2014-02-13 07:18 - 2014-02-13 07:18 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-13 07:15 - 2014-02-13 07:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{08B1F1C3-D572-4D7F-A8F2-7C64E8550B62}
2014-02-12 17:15 - 2014-02-12 17:40 - 00000000 ____D () C:\Users\Besitzer\Desktop\afrotits
2014-02-12 06:54 - 2014-02-12 06:54 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{F97E2884-8C88-4FF2-81AF-395626CCD696}
2014-02-11 18:49 - 2014-02-11 18:49 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{AE8415A6-9719-46F9-ADF4-C1E9126752EA}
2014-02-11 10:00 - 2014-02-11 10:04 - 00000000 ____D () C:\Users\Besitzer\Desktop\Air Pad -Kettler-
2014-02-11 08:41 - 2014-02-11 08:43 - 00049026 _____ () C:\Users\Besitzer\Desktop\Schauspielerin Iris Berben genießt Offline-Dasein.odt
2014-02-11 06:33 - 2014-02-11 06:33 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B434DDC1-18BC-4E24-8887-CC3F8AA9CC66}
2014-02-10 20:41 - 2014-02-10 20:41 - 00016802 _____ () C:\Users\Besitzer\Desktop\ebay-Schuhregal.odt
2014-02-10 13:44 - 2014-02-10 13:44 - 00000000 ____D () C:\Program Files (x86)\buenosearch LTD
2014-02-10 13:43 - 2014-02-10 13:46 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\PerformerSoft
2014-02-10 13:43 - 2014-02-10 13:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\buenosearch LTD
2014-02-10 13:39 - 2014-02-10 13:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{69C73E7F-0273-46B3-B1E1-7B10132A56D5}
2014-02-10 13:38 - 2014-02-10 13:39 - 00000000 ____D () C:\Users\Besitzer\Desktop\PC Tisch
2014-02-10 09:05 - 2014-02-10 09:05 - 00015531 _____ () C:\Users\Besitzer\Desktop\Langenscheidt Spanisch-Deutsch.odt
2014-02-09 21:59 - 2014-02-09 21:59 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{763C83ED-FE6A-4C0D-B05E-4C06D46B6F45}
2014-02-09 19:50 - 2014-02-09 19:50 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{E01C63AC-F378-4C84-8416-02A903AC0852}
2014-02-09 08:58 - 2014-02-09 09:00 - 00519719 _____ () C:\Users\Besitzer\Desktop\URUK - 5000 Jahre Megacity.odt
2014-02-09 08:04 - 2014-02-09 08:04 - 00337136 _____ () C:\Users\Besitzer\Desktop\Fürstenberg Porzellan gr. Bonboniere.odt
2014-02-09 06:46 - 2014-02-09 06:46 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B0F17908-36D5-43DB-9E81-5C48B3DFB234}
2014-02-08 21:29 - 2014-02-08 21:29 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{57C5F2C6-2F7A-4306-88B8-81F479C6E2E1}
2014-02-08 13:04 - 2014-02-08 13:06 - 00027856 _____ () C:\Users\Besitzer\Desktop\Mit Scholl-Latour im Libanon.odt
2014-02-08 06:36 - 2014-02-08 06:36 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{1A6BED29-FD24-445B-9291-5B1EF6D11794}
2014-02-07 13:13 - 2014-02-07 17:31 - 00026362 _____ () C:\Users\Besitzer\Desktop\Schildkröt Fitness Balancekissen.odt
2014-02-07 06:46 - 2014-02-07 06:46 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{09A8728B-3076-4375-9B1E-06BD9C29A79D}
2014-02-06 18:06 - 2014-02-06 18:06 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-02-06 18:05 - 2014-02-07 06:07 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-06 08:43 - 2014-02-06 08:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B3D4F4E4-1694-4E30-BBF0-AD59B26733DE}
2014-02-05 20:43 - 2014-02-05 20:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{F19EC089-AF05-40E5-BD37-13BEB5AB1085}
2014-02-05 20:23 - 2014-02-05 20:23 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{00631558-D67F-4F70-A996-530A28982928}
2014-02-05 15:31 - 2014-02-05 15:32 - 00000000 ____D () C:\Users\Besitzer\Desktop\Pr. v. Hes.-Weingut
2014-02-05 11:17 - 2014-02-05 11:17 - 00027652 _____ () C:\Users\Besitzer\Desktop\KROATIEN - BOSNIEN-HERZEGOWINA - MONTENEGRO.odt
2014-02-05 11:05 - 2014-02-05 11:06 - 00013716 _____ () C:\Users\Besitzer\Desktop\Pan con tomate.odt
2014-02-05 10:53 - 2014-02-05 10:53 - 00011777 _____ () C:\Users\Besitzer\Desktop\Dulcinea-Don Quijote-Ulcinj-Dulcinium.odt
2014-02-05 06:47 - 2014-02-05 06:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{82B2DA4B-425B-40DA-BA2C-495AA1ED237D}
2014-02-04 16:18 - 2014-02-04 16:19 - 00015363 _____ () C:\Users\Besitzer\Desktop\Montenegro.odt
2014-02-04 15:37 - 2014-02-04 15:37 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 - Verknüpfung
2014-02-04 11:31 - 2014-02-04 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{623DA965-A95D-418F-9526-B7A4899E006A}
2014-02-04 10:42 - 2014-02-04 10:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\OpenOffice
2014-02-04 10:41 - 2014-02-04 14:24 - 00000000 ___SD () C:\Program Files (x86)\OpenOffice 4.0.1
2014-02-04 10:40 - 2014-02-04 10:40 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-04 08:45 - 2014-02-13 08:41 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine-1
2014-02-03 21:47 - 2014-02-03 21:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{87B7D477-A026-4AA2-ABC5-2E02C1AF973E}
2014-02-03 07:39 - 2014-02-03 07:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{2A7498CC-7C15-4D8D-9FEE-A7ECE1DE8ECA}
2014-02-02 19:57 - 2014-02-02 19:57 - 00000000 ____D () C:\Program Files (x86)\HD Streamer
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\VideoDownloadConverter_4z
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Program Files (x86)\VideoDownloadConverter_4z
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Program Files (x86)\VideoDownloadConverter
2014-02-02 11:16 - 2014-02-02 15:14 - 00000000 ____D () C:\Users\Besitzer\Desktop\Psycho
2014-02-02 11:12 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Fotos
2014-02-02 11:09 - 2014-02-11 11:34 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine
2014-02-02 08:56 - 2014-02-02 08:56 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{5AE2CD3B-1102-4B01-AB88-6BF124F199CC}
2014-02-01 17:15 - 2014-02-01 17:15 - 00011303 _____ () C:\Users\Besitzer\Desktop\a) Anzüge.odt
2014-02-01 14:24 - 2014-02-01 14:24 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{39A75A6A-D543-475C-A918-91AA252DC637}
2014-01-31 20:43 - 2014-01-31 20:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{8A9F5CC2-A23C-463A-993B-BC1B34636D1E}
2014-01-31 07:42 - 2014-01-31 07:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{F0E71F7E-D761-43EA-AF36-F225A730CB4E}
2014-01-30 07:00 - 2014-01-30 07:00 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{814FD173-CAE7-472B-883D-AA84801E82D5}
2014-01-29 17:37 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-3
2014-01-29 17:28 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-2
2014-01-29 10:29 - 2014-01-29 10:29 - 00024872 _____ () C:\Users\Besitzer\Desktop\Verrückt nach Meer-Sendefolge.odt
2014-01-29 08:29 - 2014-01-29 08:29 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{3C16D6D4-3541-499F-8589-DEB5E2C72432}
2014-01-28 20:42 - 2014-01-28 20:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{16473A40-C639-421F-8118-2816C8D99AA6}
2014-01-28 17:29 - 2014-01-28 17:29 - 00025284 _____ () C:\Users\Besitzer\Desktop\Tea Time.odt
2014-01-28 07:54 - 2014-01-28 07:55 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{83624252-3D60-4BCB-8EF5-D788AC51D7BC}
2014-01-27 13:08 - 2014-01-27 13:08 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Ashampoo
2014-01-27 13:07 - 2014-01-27 13:07 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-01-27 13:00 - 2014-01-27 13:03 - 384551131 _____ () C:\Users\Besitzer\Downloads\Plácido Domingo at Loreley 2013.mp4
2014-01-27 12:05 - 2014-01-27 12:05 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{87119EEF-C842-49E8-B4F1-FC074BC73DA1}
2014-01-26 08:04 - 2014-01-26 08:04 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{AAC0BB77-84EF-4261-8B8D-7A1B5EAA945A}
2014-01-25 08:34 - 2014-01-25 08:34 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B9A27ACD-A380-442B-A2B2-032AC99D320B}
2014-01-24 08:40 - 2014-01-24 08:40 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{E9FAA848-62C3-4DC6-A6F9-B87DC88D34B4}
2014-01-24 06:54 - 2014-01-24 06:54 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{848BD269-EC0A-4CFF-AC6D-C0127A83DDB0}
2014-01-23 10:35 - 2014-01-23 10:35 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{01A54B7D-23E3-4A41-8558-F89FBF8DD795}
2014-01-23 09:49 - 2014-01-23 09:54 - 00000048 _____ () C:\RB.rdat
2014-01-23 09:49 - 2014-01-23 09:54 - 00000048 _____ () C:\License_Time.rdat
2014-01-23 09:49 - 2014-01-23 09:49 - 00000000 ____D () C:\ProgramData\FileCure
2014-01-23 09:47 - 2014-01-23 09:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\FreemakeVideoConverter
2014-01-23 09:45 - 2014-01-23 09:45 - 01071000 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_flashplayer12x32_mssa_aaa_aih(1).exe
2014-01-23 09:45 - 2014-01-23 09:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Macromedia
2014-01-23 09:39 - 2014-01-23 09:39 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-23 09:26 - 2014-01-23 09:26 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm(2).xpi
2014-01-23 09:26 - 2014-01-23 09:26 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm(1).xpi
2014-01-23 09:25 - 2014-01-23 09:25 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm.xpi
2014-01-22 20:59 - 2014-01-22 20:59 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{89FBFF02-7AD4-40A2-A902-F4C222557738}
2014-01-22 11:31 - 2014-02-13 07:19 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\newnext.me
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\Documents\Mobogenie
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\HD Streamer
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\genienext
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\.android
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Program Files (x86)\Universal Updater
2014-01-22 11:30 - 2014-01-22 11:32 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
2014-01-22 08:32 - 2014-01-22 08:32 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{A00C52AD-203B-47AB-B448-4B598AB1941E}
2014-01-21 06:46 - 2014-01-21 06:46 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{92C35054-FE81-491C-8D2F-A9AC3AC432A6}
2014-01-20 14:20 - 2014-01-20 14:20 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-20 14:20 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-20 14:20 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-20 14:20 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-20 14:20 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-20 07:16 - 2014-01-20 07:16 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{E704DAE2-E02A-434F-84F4-591E9275DFC8}
2014-01-19 08:33 - 2014-01-19 08:34 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{BC4C38FD-995A-4CFC-A8AC-A8C186D2BF82}
2014-01-18 10:41 - 2014-01-18 10:42 - 00012812 _____ () C:\Users\Besitzer\Desktop\Hochzeit im Walde.odt
2014-01-18 09:18 - 2014-01-18 09:18 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{7260AB82-9BAF-4464-9B6F-5848CF13DCB4}
2014-01-17 20:55 - 2014-02-10 13:36 - 00000000 ____D () C:\Users\Besitzer\Desktop\Ostpreußen_Danzig-Königsberg_DAMALS
2014-01-17 09:29 - 2014-01-17 09:29 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{E4D65991-EBC4-48CF-880A-3FA086121026}
2014-01-16 10:15 - 2014-01-16 10:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B91B4B55-44B3-49A5-A5EE-FA6F35707B6F}
2014-01-15 21:47 - 2014-01-15 21:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{F75E891B-996F-4939-9F9B-668D98EBAC8E}
2014-01-15 07:25 - 2014-01-15 07:25 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{3753C3F9-793E-40D0-B37C-12F62E025956}
2014-01-15 06:55 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 06:55 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 06:55 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 07:29 - 2014-01-14 07:29 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{A7ADC18D-D03A-461F-B52A-7F6BC06F4DC2}
==================== One Month Modified Files and Folders =======
2014-02-13 09:32 - 2014-02-13 09:32 - 00000000 ____D () C:\FRST
2014-02-13 09:24 - 2013-11-13 17:06 - 00003954 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{083BECD6-A6F2-4401-A905-5865C87918C6}
2014-02-13 09:05 - 2012-12-07 07:53 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-13 08:58 - 2011-04-04 11:29 - 01298834 _____ () C:\Windows\WindowsUpdate.log
2014-02-13 08:52 - 2012-10-04 19:30 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-13 08:41 - 2014-02-04 08:45 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine-1
2014-02-13 07:26 - 2009-07-14 05:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-13 07:26 - 2009-07-14 05:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-13 07:19 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\newnext.me
2014-02-13 07:18 - 2014-02-13 07:18 - 00002214 _____ () C:\Windows\PFRO.log
2014-02-13 07:18 - 2014-02-13 07:18 - 00000056 _____ () C:\Windows\setupact.log
2014-02-13 07:18 - 2014-02-13 07:18 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-13 07:18 - 2012-12-07 07:53 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-13 07:18 - 2011-05-12 17:37 - 36031488 ___SH () C:\Users\Besitzer\Desktop\Thumbs.db
2014-02-13 07:18 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-13 07:15 - 2014-02-13 07:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{08B1F1C3-D572-4D7F-A8F2-7C64E8550B62}
2014-02-13 06:34 - 2011-04-07 17:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\CrashDumps
2014-02-12 18:02 - 2013-09-23 11:36 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\vlc
2014-02-12 18:01 - 2011-05-15 07:22 - 00000000 ____D () C:\Users\Besitzer\Desktop\Video
2014-02-12 17:40 - 2014-02-12 17:15 - 00000000 ____D () C:\Users\Besitzer\Desktop\afrotits
2014-02-12 11:07 - 2012-06-03 19:14 - 00003012 _____ () C:\Windows\System32\Tasks\{1F7E5E00-647A-47E6-9221-252E2625D665}
2014-02-12 06:54 - 2014-02-12 06:54 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{F97E2884-8C88-4FF2-81AF-395626CCD696}
2014-02-11 18:49 - 2014-02-11 18:49 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{AE8415A6-9719-46F9-ADF4-C1E9126752EA}
2014-02-11 11:34 - 2014-02-02 11:09 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine
2014-02-11 10:04 - 2014-02-11 10:00 - 00000000 ____D () C:\Users\Besitzer\Desktop\Air Pad -Kettler-
2014-02-11 08:43 - 2014-02-11 08:41 - 00049026 _____ () C:\Users\Besitzer\Desktop\Schauspielerin Iris Berben genießt Offline-Dasein.odt
2014-02-11 06:33 - 2014-02-11 06:33 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B434DDC1-18BC-4E24-8887-CC3F8AA9CC66}
2014-02-10 20:41 - 2014-02-10 20:41 - 00016802 _____ () C:\Users\Besitzer\Desktop\ebay-Schuhregal.odt
2014-02-10 13:46 - 2014-02-10 13:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\PerformerSoft
2014-02-10 13:44 - 2014-02-10 13:44 - 00000000 ____D () C:\Program Files (x86)\buenosearch LTD
2014-02-10 13:43 - 2014-02-10 13:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\buenosearch LTD
2014-02-10 13:43 - 2011-07-07 07:09 - 00000000 ____D () C:\ProgramData\Babylon
2014-02-10 13:39 - 2014-02-10 13:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{69C73E7F-0273-46B3-B1E1-7B10132A56D5}
2014-02-10 13:39 - 2014-02-10 13:38 - 00000000 ____D () C:\Users\Besitzer\Desktop\PC Tisch
2014-02-10 13:36 - 2014-01-17 20:55 - 00000000 ____D () C:\Users\Besitzer\Desktop\Ostpreußen_Danzig-Königsberg_DAMALS
2014-02-10 12:03 - 2009-07-14 18:58 - 00667970 _____ () C:\Windows\system32\perfh007.dat
2014-02-10 12:03 - 2009-07-14 18:58 - 00136714 _____ () C:\Windows\system32\perfc007.dat
2014-02-10 12:03 - 2009-07-14 06:13 - 01537850 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-10 09:05 - 2014-02-10 09:05 - 00015531 _____ () C:\Users\Besitzer\Desktop\Langenscheidt Spanisch-Deutsch.odt
2014-02-09 21:59 - 2014-02-09 21:59 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{763C83ED-FE6A-4C0D-B05E-4C06D46B6F45}
2014-02-09 19:50 - 2014-02-09 19:50 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{E01C63AC-F378-4C84-8416-02A903AC0852}
2014-02-09 09:00 - 2014-02-09 08:58 - 00519719 _____ () C:\Users\Besitzer\Desktop\URUK - 5000 Jahre Megacity.odt
2014-02-09 08:04 - 2014-02-09 08:04 - 00337136 _____ () C:\Users\Besitzer\Desktop\Fürstenberg Porzellan gr. Bonboniere.odt
2014-02-09 06:46 - 2014-02-09 06:46 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B0F17908-36D5-43DB-9E81-5C48B3DFB234}
2014-02-09 06:08 - 2011-04-10 09:40 - 00000000 ____D () C:\Users\Besitzer\Desktop\Kleidung, Access., Einlegesohlen
2014-02-08 21:29 - 2014-02-08 21:29 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{57C5F2C6-2F7A-4306-88B8-81F479C6E2E1}
2014-02-08 13:06 - 2014-02-08 13:04 - 00027856 _____ () C:\Users\Besitzer\Desktop\Mit Scholl-Latour im Libanon.odt
2014-02-08 10:45 - 2013-11-30 08:00 - 00000000 ____D () C:\Users\Besitzer\Desktop\GARTEN
2014-02-08 06:36 - 2014-02-08 06:36 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{1A6BED29-FD24-445B-9291-5B1EF6D11794}
2014-02-07 17:31 - 2014-02-07 13:13 - 00026362 _____ () C:\Users\Besitzer\Desktop\Schildkröt Fitness Balancekissen.odt
2014-02-07 08:54 - 2012-01-13 20:55 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-02-07 08:07 - 2011-04-06 10:33 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Windows Live
2014-02-07 06:46 - 2014-02-07 06:46 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{09A8728B-3076-4375-9B1E-06BD9C29A79D}
2014-02-07 06:07 - 2014-02-06 18:05 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-06 18:06 - 2014-02-06 18:06 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-02-06 08:43 - 2014-02-06 08:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B3D4F4E4-1694-4E30-BBF0-AD59B26733DE}
2014-02-06 06:52 - 2012-10-04 19:30 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-06 06:52 - 2012-10-04 19:29 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-06 06:52 - 2012-10-04 19:29 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-05 20:43 - 2014-02-05 20:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{F19EC089-AF05-40E5-BD37-13BEB5AB1085}
2014-02-05 20:23 - 2014-02-05 20:23 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{00631558-D67F-4F70-A996-530A28982928}
2014-02-05 15:32 - 2014-02-05 15:31 - 00000000 ____D () C:\Users\Besitzer\Desktop\Pr. v. Hes.-Weingut
2014-02-05 15:17 - 2013-08-24 09:25 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-1
2014-02-05 12:22 - 2011-04-21 17:51 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Stellarium
2014-02-05 12:22 - 2011-04-21 17:50 - 00000000 ____D () C:\Program Files\Stellarium
2014-02-05 11:17 - 2014-02-05 11:17 - 00027652 _____ () C:\Users\Besitzer\Desktop\KROATIEN - BOSNIEN-HERZEGOWINA - MONTENEGRO.odt
2014-02-05 11:06 - 2014-02-05 11:05 - 00013716 _____ () C:\Users\Besitzer\Desktop\Pan con tomate.odt
2014-02-05 10:53 - 2014-02-05 10:53 - 00011777 _____ () C:\Users\Besitzer\Desktop\Dulcinea-Don Quijote-Ulcinj-Dulcinium.odt
2014-02-05 06:47 - 2014-02-05 06:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{82B2DA4B-425B-40DA-BA2C-495AA1ED237D}
2014-02-04 18:38 - 2013-09-08 07:01 - 00289784 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-04 18:11 - 2011-04-05 09:54 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-04 16:19 - 2014-02-04 16:18 - 00015363 _____ () C:\Users\Besitzer\Desktop\Montenegro.odt
2014-02-04 15:37 - 2014-02-04 15:37 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 - Verknüpfung
2014-02-04 14:32 - 2011-04-04 11:29 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-04 14:24 - 2014-02-04 10:41 - 00000000 ___SD () C:\Program Files (x86)\OpenOffice 4.0.1
2014-02-04 12:06 - 2012-06-13 17:06 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\NPE
2014-02-04 11:31 - 2014-02-04 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{623DA965-A95D-418F-9526-B7A4899E006A}
2014-02-04 11:31 - 2013-09-07 17:04 - 00064768 _____ () C:\Users\Besitzer\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-04 11:30 - 2012-12-10 07:41 - 00000000 ____D () C:\Users\Besitzer\Desktop\Programme
2014-02-04 10:42 - 2014-02-04 10:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\OpenOffice
2014-02-04 10:40 - 2014-02-04 10:40 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-03 21:47 - 2014-02-03 21:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{87B7D477-A026-4AA2-ABC5-2E02C1AF973E}
2014-02-03 11:52 - 2014-02-02 11:12 - 00000000 ____D () C:\Users\Besitzer\Desktop\Fotos
2014-02-03 11:52 - 2014-01-29 17:37 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-3
2014-02-03 11:52 - 2014-01-29 17:28 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-2
2014-02-03 07:39 - 2014-02-03 07:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{2A7498CC-7C15-4D8D-9FEE-A7ECE1DE8ECA}
2014-02-02 19:57 - 2014-02-02 19:57 - 00000000 ____D () C:\Program Files (x86)\HD Streamer
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\VideoDownloadConverter_4z
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Program Files (x86)\VideoDownloadConverter_4z
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Program Files (x86)\VideoDownloadConverter
2014-02-02 15:14 - 2014-02-02 11:16 - 00000000 ____D () C:\Users\Besitzer\Desktop\Psycho
2014-02-02 15:10 - 2013-10-10 10:39 - 00017877 _____ () C:\Users\Besitzer\Desktop\Piaf-Konzert.odt
2014-02-02 15:04 - 2013-12-18 10:22 - 00000000 ____D () C:\Users\Besitzer\Desktop\ASTRO
2014-02-02 14:58 - 2011-04-10 09:40 - 00000000 ____D () C:\Users\Besitzer\Desktop\HAUPTORDNER
2014-02-02 14:49 - 2013-11-22 10:43 - 00000000 ____D () C:\Users\Besitzer\Desktop\Mnünzen
2014-02-02 08:56 - 2014-02-02 08:56 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{5AE2CD3B-1102-4B01-AB88-6BF124F199CC}
2014-02-01 17:15 - 2014-02-01 17:15 - 00011303 _____ () C:\Users\Besitzer\Desktop\a) Anzüge.odt
2014-02-01 14:24 - 2014-02-01 14:24 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{39A75A6A-D543-475C-A918-91AA252DC637}
2014-01-31 20:43 - 2014-01-31 20:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{8A9F5CC2-A23C-463A-993B-BC1B34636D1E}
2014-01-31 07:42 - 2014-01-31 07:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{F0E71F7E-D761-43EA-AF36-F225A730CB4E}
2014-01-31 06:31 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-30 07:00 - 2014-01-30 07:00 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{814FD173-CAE7-472B-883D-AA84801E82D5}
2014-01-29 10:29 - 2014-01-29 10:29 - 00024872 _____ () C:\Users\Besitzer\Desktop\Verrückt nach Meer-Sendefolge.odt
2014-01-29 08:29 - 2014-01-29 08:29 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{3C16D6D4-3541-499F-8589-DEB5E2C72432}
2014-01-28 22:49 - 2013-09-23 08:21 - 00000000 ____D () C:\Program Files (x86)\StreamTransport
2014-01-28 20:42 - 2014-01-28 20:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{16473A40-C639-421F-8118-2816C8D99AA6}
2014-01-28 17:29 - 2014-01-28 17:29 - 00025284 _____ () C:\Users\Besitzer\Desktop\Tea Time.odt
2014-01-28 07:55 - 2014-01-28 07:54 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{83624252-3D60-4BCB-8EF5-D788AC51D7BC}
2014-01-27 17:26 - 2011-04-07 17:06 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-27 13:08 - 2014-01-27 13:08 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Ashampoo
2014-01-27 13:07 - 2014-01-27 13:07 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-01-27 13:03 - 2014-01-27 13:00 - 384551131 _____ () C:\Users\Besitzer\Downloads\Plácido Domingo at Loreley 2013.mp4
2014-01-27 12:05 - 2014-01-27 12:05 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{87119EEF-C842-49E8-B4F1-FC074BC73DA1}
2014-01-26 08:04 - 2014-01-26 08:04 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{AAC0BB77-84EF-4261-8B8D-7A1B5EAA945A}
2014-01-25 08:34 - 2014-01-25 08:34 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B9A27ACD-A380-442B-A2B2-032AC99D320B}
2014-01-24 08:40 - 2014-01-24 08:40 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{E9FAA848-62C3-4DC6-A6F9-B87DC88D34B4}
2014-01-24 06:54 - 2014-01-24 06:54 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{848BD269-EC0A-4CFF-AC6D-C0127A83DDB0}
2014-01-23 10:35 - 2014-01-23 10:35 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{01A54B7D-23E3-4A41-8558-F89FBF8DD795}
2014-01-23 10:05 - 2013-09-23 14:57 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\OpenCandy
2014-01-23 09:54 - 2014-01-23 09:49 - 00000048 _____ () C:\RB.rdat
2014-01-23 09:54 - 2014-01-23 09:49 - 00000048 _____ () C:\License_Time.rdat
2014-01-23 09:49 - 2014-01-23 09:49 - 00000000 ____D () C:\ProgramData\FileCure
2014-01-23 09:47 - 2014-01-23 09:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\FreemakeVideoConverter
2014-01-23 09:46 - 2011-04-05 10:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Adobe
2014-01-23 09:45 - 2014-01-23 09:45 - 01071000 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_flashplayer12x32_mssa_aaa_aih(1).exe
2014-01-23 09:45 - 2014-01-23 09:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Macromedia
2014-01-23 09:44 - 2011-12-22 15:27 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2014-01-23 09:44 - 2011-12-22 15:27 - 00000000 ____D () C:\ProgramData\Freemake
2014-01-23 09:39 - 2014-01-23 09:39 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-23 09:26 - 2014-01-23 09:26 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm(2).xpi
2014-01-23 09:26 - 2014-01-23 09:26 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm(1).xpi
2014-01-23 09:25 - 2014-01-23 09:25 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm.xpi
2014-01-23 07:08 - 2011-04-08 09:59 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-01-22 20:59 - 2014-01-22 20:59 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{89FBFF02-7AD4-40A2-A902-F4C222557738}
2014-01-22 13:23 - 2013-08-31 13:51 - 00000000 ____D () C:\Users\Besitzer\Documents\Freemake
2014-01-22 12:30 - 2011-12-22 15:27 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-01-22 11:32 - 2014-01-22 11:30 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
2014-01-22 11:32 - 2013-11-20 15:06 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Mobogenie
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\Documents\Mobogenie
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\HD Streamer
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\genienext
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\.android
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Program Files (x86)\Universal Updater
2014-01-22 11:31 - 2011-04-04 11:29 - 00000000 ____D () C:\Users\Besitzer
2014-01-22 08:32 - 2014-01-22 08:32 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{A00C52AD-203B-47AB-B448-4B598AB1941E}
2014-01-21 06:46 - 2014-01-21 06:46 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{92C35054-FE81-491C-8D2F-A9AC3AC432A6}
2014-01-21 06:41 - 2012-04-02 18:34 - 00000000 ____D () C:\Users\Besitzer\Desktop\Interessenbereiche -Definierung-
2014-01-20 14:21 - 2013-10-21 09:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-20 14:20 - 2014-01-20 14:20 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-20 14:20 - 2011-04-05 11:14 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-20 07:16 - 2014-01-20 07:16 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{E704DAE2-E02A-434F-84F4-591E9275DFC8}
2014-01-19 17:06 - 2012-04-02 18:34 - 00000000 ____D () C:\Users\Besitzer\Desktop\AKTIV - Ordner
2014-01-19 08:34 - 2014-01-19 08:33 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{BC4C38FD-995A-4CFC-A8AC-A8C186D2BF82}
2014-01-18 10:42 - 2014-01-18 10:41 - 00012812 _____ () C:\Users\Besitzer\Desktop\Hochzeit im Walde.odt
2014-01-18 09:18 - 2014-01-18 09:18 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{7260AB82-9BAF-4464-9B6F-5848CF13DCB4}
2014-01-18 07:29 - 2011-12-27 18:22 - 00000000 ____D () C:\Program Files\Google
2014-01-18 07:29 - 2011-06-12 18:56 - 00000000 ____D () C:\Program Files (x86)\Google
2014-01-17 09:29 - 2014-01-17 09:29 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{E4D65991-EBC4-48CF-880A-3FA086121026}
2014-01-17 07:13 - 2013-11-13 15:43 - 00000000 ____D () C:\ProgramData\Google
2014-01-17 07:13 - 2011-04-29 07:04 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Google
2014-01-16 10:15 - 2014-01-16 10:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B91B4B55-44B3-49A5-A5EE-FA6F35707B6F}
2014-01-15 21:52 - 2013-08-14 20:13 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 21:49 - 2011-04-04 14:51 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 21:47 - 2014-01-15 21:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{F75E891B-996F-4939-9F9B-668D98EBAC8E}
2014-01-15 07:25 - 2014-01-15 07:25 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{3753C3F9-793E-40D0-B37C-12F62E025956}
2014-01-14 12:13 - 2014-01-13 10:27 - 00022751 _____ () C:\Users\Besitzer\Desktop\Psycho f. P-S.odt
2014-01-14 07:29 - 2014-01-14 07:29 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{A7ADC18D-D03A-461F-B52A-7F6BC06F4DC2}
Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.6552.dll
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-02-08 09:55
================================
FRST Additions Logfile:
|
|
13.02.2014, 10:06
| #4 | |
| /// Malwareteam | Popups und Werbung in Internet Explorer 11 nehmen plötzlich überhandZitat:
 Schritt 1: Deinstalliere bitte folgende Software: (über Systemsteuerung => Software) Code:
ATTFilter Java 7 Update 25
TuneUp Utilities 2014
VideoDownloadConverter Internet Explorer Toolbar
Ich sehe das Du sogenannte Registry Cleaner am System hast. In deinem Fall TuneUp Utilities 2014. Wir empfehlen auf keinen Fall jegliche Art von Registry Cleaner. Der Grund ist ganz einfach: Die Registry ist das Hirn des Systems. Funktioniert das Hirn nicht, funktioniert der Rest nicht mehr wirklich. Wir lesen oft genug von Hilfesuchenden, dass deren System nach der Nutzung von Registry Cleanern nicht mehr booted.
Zerstörst Du die Registry, zerstörst Du Windows. Ich empfehle Dir hiermit die oben genannte Software zu deinstallieren und in Zukunft auf solche Art von Software zu verzichten. Sollte Sich eines Der Programme nicht deinstallieren lassen teile es mir bitte mit. Schritt 2: Downloade Dir bitte  AdwCleaner auf deinen Desktop.
Schritt 3: Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Schritt 4: erstelle ein neues FRST Logfile und Poste es hier Schritt 5: teile mir mit ob sich das Verhalten deines Rechners verändert hat. |
|
13.02.2014, 10:23
| #5 |
| | Popups und Werbung in Internet Explorer 11 nehmen plötzlich überhand Hallo Aneri, vielen Dank für Deine so schnelle Antwort. Ich stehe z.Zt. gewaltig unter Zeitdruck, deshalb kann es bis zu ein paar Stunden dauern, bis ich das Empfohlene - um es gewissenhaft durchzuführen - abgearbeitet habe. Ich melde mich baldmöglichst. Gruß Frusti |
|
13.02.2014, 10:25
| #6 |
| /// Malwareteam | Popups und Werbung in Internet Explorer 11 nehmen plötzlich überhand kein Problem einfach melden wenn du durch bist damit, aber bitte erledigen, dein System hat es nötig...
__________________ --> Popups und Werbung in Internet Explorer 11 nehmen plötzlich überhand |
|
14.02.2014, 12:13
| #7 |
| | Popups und Werbung in Internet Explorer 11 nehmen plötzlich überhand Hallo Aneri, so, nun habe ich die Punkte abgearbeitet. 1.) Zu Deinem Schritt 1: "Tune Up Utilities" lösche ich eigentlich ungern. Bezügl. der registry-Löschungen kann ich ja aktiv verhindern, daß gelöscht wird! Den Rest des Tune Up-Programms hielt ich eigentlich für recht gut brauchbar!? Die beiden anderen Programme sind weg. 2.) Die Situation der unerwünschten Popups ist noch nicht so recht befriedigend. Es erscheinen weiterhin unerwünschte Popups. 3.) Das Ergebnis des AdwCleaner:AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.018 - Bericht erstellt am 13/02/2014 um 17:51:45
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Besitzer - BESITZER-PC
# Gestartet von : C:\Users\Besitzer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZSF80D\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
Dienst Gelöscht : VideoDownloadConverter_4zService
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\BitGuard
Ordner Gelöscht : C:\ProgramData\Browser Manager
Ordner Gelöscht : C:\ProgramData\BrowserProtect
Ordner Gelöscht : C:\ProgramData\DSearchLink
Ordner Gelöscht : C:\ProgramData\IBUpdaterService
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\Program Files (x86)\Amazon Browser Bar
Ordner Gelöscht : C:\Program Files (x86)\VideoDownloadConverter_4z
Ordner Gelöscht : C:\Users\Besitzer\AppData\Local\Babylon
Ordner Gelöscht : C:\Users\Besitzer\AppData\Local\VideoDownloadConverter_4z
Ordner Gelöscht : C:\Users\Besitzer\AppData\LocalLow\BabylonToolbar
Ordner Gelöscht : C:\Users\Besitzer\AppData\LocalLow\Delta
Ordner Gelöscht : C:\Users\Besitzer\AppData\LocalLow\iac
Ordner Gelöscht : C:\Users\Besitzer\AppData\LocalLow\incredibar.com
Ordner Gelöscht : C:\Users\Besitzer\AppData\LocalLow\Minibar
Ordner Gelöscht : C:\Users\Besitzer\AppData\LocalLow\searchresultstb
Ordner Gelöscht : C:\Users\Besitzer\AppData\LocalLow\VideoDownloadConverter_4z
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\BrowserCompanion
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\OpenCandy
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\pdfforge
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\PerformerSoft
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\ffxtlbr@incredibar.com
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\bprotector_extensions.sqlite
Datei Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\searchplugins\Web Search.xml
Datei Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\user.js
***** [ Verknüpfungen ] *****
Verknüpfung Desinfiziert : C:\Users\Besitzer\Desktop\Programme\''Free Video to DVD''\Search.lnk
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403A-B9D2-65C292C39087}]
Wert Gelöscht : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403A-B9D2-65C292C39087}]
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Schlüssel Gelöscht : HKCU\Software\Microsoft\Office\Powerpoint\Addins\babylonofficeaddin.officeaddin
Schlüssel Gelöscht : HKCU\Software\Microsoft\Office\Word\Addins\babylonofficeaddin.officeaddin
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\BabylonHelper.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\BabylonIEPI.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\BabylonTC.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BabylonIEPI.BabylonIEBho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BabylonIEPI.BabylonIEBho.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BabylonOfficeAddin.OfficeAddin
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BabylonOfficeAddin.OfficeAddin.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BabylonTC.GingerApplication
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BabylonTC.GingerApplication.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.SettingsPlugin
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.SettingsPlugin.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Savings Sidekick_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Savings Sidekick_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Babylon.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_irfanview-plugins[1]_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_irfanview-plugins[1]_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_microsoft-kamera-codec-paket_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_microsoft-kamera-codec-paket_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_swf-player_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_swf-player_RASMANCS
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [VideoDownloadConverter Search Scope Monitor]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [VideoDownloadConverter_4z Browser Plugin Loader]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [VideoDownloadConverter_4z Browser Plugin Loader 64]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B16632F1-24E0-4D99-A68D-70BFB6447C48}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C0CEA572-2978-4DFC-A672-8100FF0E276A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2A1260C1-2964-453F-B0BA-FA429472EB5F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{363D5C92-10DC-4287-93E5-1832EECC48EC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3B41BE90-F731-4137-AFF3-2CA951E7F0D9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4128C64D-F0DD-4811-9405-D22294E8151F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{69407823-3494-4400-8D49-612549E8F4EE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6AC0BB10-C922-45E2-857D-2A368FE749E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8FCA5302-6D6D-4645-BF99-D43CF76CE474}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C547C6C2-561B-4169-A2A5-20BA771CA93B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DD385519-22E7-4BE2-8A8D-35C66DF4858E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DF390AA1-1E65-4825-B8E7-BE6B47BD56B8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{ED345812-2722-4DCA-9976-D01832DB44EE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{47700C35-9E3E-4DAD-934C-0CE28A87237C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5F339F0B-716F-408F-A627-DEEB5DEB4020}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{716E443D-7CAA-44F1-866B-F45D00E712CC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{95734BDE-B702-45B9-86E5-27676729F904}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B7EA2226-F876-4BE4-B478-76EBAE2A668A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D0482C8E-BAEA-4943-911A-B661060F56A7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2D3826A1-F3E8-45D6-94B5-C26D8EC0073B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{3EE17DD1-E28B-4AED-A3B2-9C29CB2C19D6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{886F93AD-3CBB-4424-8442-A7340243540F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{AA289DBC-59B6-40A5-AC7D-C90DF850289C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{CA723163-6FAD-43D4-8B93-0D8C52BD9974}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{F1F328EB-F5A5-432B-A54C-05F3EF5B0BD8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{FE8DBB09-C3D3-4477-80CB-D38914B94BB8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C547C6C2-561B-4169-A2A5-20BA771CA93B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C547C6C2-561B-4169-A2A5-20BA771CA93B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C547C6C2-561B-4169-A2A5-20BA771CA93B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ED345812-2722-4DCA-9976-D01832DB44EE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{C424171E-592A-415A-9EB1-DFD6D95D3530}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{93A3111F-4F74-4ED8-895E-D9708497629E}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{47700C35-9E3E-4DAD-934C-0CE28A87237C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5F339F0B-716F-408F-A627-DEEB5DEB4020}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{716E443D-7CAA-44F1-866B-F45D00E712CC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{95734BDE-B702-45B9-86E5-27676729F904}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B7EA2226-F876-4BE4-B478-76EBAE2A668A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D0482C8E-BAEA-4943-911A-B661060F56A7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : HKCU\Software\Alexa Internet
Schlüssel Gelöscht : HKCU\Software\BabylonToolbar
Schlüssel Gelöscht : HKCU\Software\DataMngr
Schlüssel Gelöscht : HKCU\Software\distromatic
Schlüssel Gelöscht : HKCU\Software\IM
Schlüssel Gelöscht : HKCU\Software\ParetoLogic
Schlüssel Gelöscht : HKCU\Software\performersoft llc
Schlüssel Gelöscht : HKCU\Software\smartbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\BabylonToolbar
Schlüssel Gelöscht : HKLM\Software\bProtector
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : HKLM\Software\ParetoLogic
Schlüssel Gelöscht : HKLM\Software\Uniblue\DriverScanner
Schlüssel Gelöscht : HKLM\Software\Web Assistant
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Tarma Installer
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Web Assistant
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16428
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]
-\\ Mozilla Firefox v5.0.1 (de)
[ Datei : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\prefs.js ]
Zeile gelöscht : user_pref("browser.search.defaultengine", "Ask.com");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.admin", false);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.autoRvrt", "false");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.babExt", "");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.babTrack", "affID=115849&tt=3612_6");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.bbDpng", "11");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.cntry", "DE");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.dfltSrch", true);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.excTlbr", false);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.hdrMd5", "4AC8320469FB9CCBC18FFD96E13AD16E");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.hmpg", true);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.id", "8a03fc9e0000000000004061865ed214");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.instlDay", "15586");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.keyWordUrl", "hxxp://search.babylon.com/?affID=115849&tt=3612_6&babsrc=KW_ss&mntrId=8a03fc9e0000000000004061865ed214&q=");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.6.9.1218:33:42");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.newTab", false);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?affID=115849&tt=3612_6&babsrc=NT_ss&mntrId=8a03fc9e0000000000004061865ed214");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.pnu_base", "{\"newVrsn\":\"74\",\"lastVrsn\":\"74\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\"showSilent\":\"true\",\"msgTs\":0,\"lstMsgTs\":\"0\"}");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.sg", "tzb");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.smplGrp", "tzb");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.srcExt", "ss");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=8a03fc9e0000000000004061865ed214&q=");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.vrsn", "1.6.9.12");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.vrsnTs", "1.6.9.1218:33:42");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.vrsni", "1.6.9.12");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.babExt", "");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=115849&tt=3612_6");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.newTab", false);
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.6.9.1218:33:42");
Zeile gelöscht : user_pref("extensions.enabledAddons", "{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22,{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24,{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29,{C9B68337-E93A-44EA-94D[...]
Zeile gelöscht : user_pref("extensions.facemoods.DNSErrUrl", "hxxp://start.facemoods.com/?a=make&f=5");
Zeile gelöscht : user_pref("extensions.facemoods.aflt", "make");
Zeile gelöscht : user_pref("extensions.facemoods.dfltSrch", true);
Zeile gelöscht : user_pref("extensions.facemoods.dfltSrchPrvdr", "Facemoods Search");
Zeile gelöscht : user_pref("extensions.facemoods.dnsErr", true);
Zeile gelöscht : user_pref("extensions.facemoods.firstRun", true);
Zeile gelöscht : user_pref("extensions.facemoods.hmpg", true);
Zeile gelöscht : user_pref("extensions.facemoods.hmpgUrl", "hxxp://start.facemoods.com/?a=make");
Zeile gelöscht : user_pref("extensions.facemoods.id", "8a03fc9e0000000000004061865ed214");
Zeile gelöscht : user_pref("extensions.facemoods.instlDay", "15330");
Zeile gelöscht : user_pref("extensions.facemoods.mntz", "");
Zeile gelöscht : user_pref("extensions.facemoods.newTab", true);
Zeile gelöscht : user_pref("extensions.facemoods.newTabUrl", "hxxp://start.facemoods.com/?a=make&f=2");
Zeile gelöscht : user_pref("extensions.facemoods.prtnrId", "facemoods.com");
Zeile gelöscht : user_pref("extensions.facemoods.searchProviderAdded", true);
Zeile gelöscht : user_pref("extensions.facemoods.sid", "1ef7d35917304ead8184dde2e8ce38a4");
Zeile gelöscht : user_pref("extensions.facemoods.tlbrSrchUrl", "hxxp://start.facemoods.com/?a=make&f=3");
Zeile gelöscht : user_pref("extensions.facemoods.vrsn", "1.4.17.11");
Zeile gelöscht : user_pref("extensions.incredibar.RadioMyStations", "[{\"id\":\"1069\",\"name\":\"ORS Rom?ntica en espa?ol\",\"url\":\"hxxp://www.orsradio.com/oldies56k.asx\",\"streamType\":\"mp\"},{\"id\":\"1213\",\"[...]
Zeile gelöscht : user_pref("extensions.incredibar.actvtyRptTime", "1378927736353");
Zeile gelöscht : user_pref("extensions.incredibar.admin", false);
Zeile gelöscht : user_pref("extensions.incredibar.aflt", "orgnl");
Zeile gelöscht : user_pref("extensions.incredibar.afterInstallRpt", "sent");
Zeile gelöscht : user_pref("extensions.incredibar.cntry", "DE");
Zeile gelöscht : user_pref("extensions.incredibar.dfltLng", "EN");
Zeile gelöscht : user_pref("extensions.incredibar.dfltSrch", false);
Zeile gelöscht : user_pref("extensions.incredibar.dfltlng", "en");
Zeile gelöscht : user_pref("extensions.incredibar.dfltsrch", "false");
Zeile gelöscht : user_pref("extensions.incredibar.did", "10643");
Zeile gelöscht : user_pref("extensions.incredibar.envrmnt", "production");
Zeile gelöscht : user_pref("extensions.incredibar.excTlbr", false);
Zeile gelöscht : user_pref("extensions.incredibar.hdrMd5", "D8D22DE52FC2073D88C93CBDCC3D170A");
Zeile gelöscht : user_pref("extensions.incredibar.hmpg", false);
Zeile gelöscht : user_pref("extensions.incredibar.hrdid", "8a03fc9e0000000000004061865ed214");
Zeile gelöscht : user_pref("extensions.incredibar.id", "8a03fc9e0000000000004061865ed214");
Zeile gelöscht : user_pref("extensions.incredibar.installerproductid", "26");
Zeile gelöscht : user_pref("extensions.incredibar.instlDay", "15578");
Zeile gelöscht : user_pref("extensions.incredibar.instlRef", "");
Zeile gelöscht : user_pref("extensions.incredibar.instlday", "15578");
Zeile gelöscht : user_pref("extensions.incredibar.instlref", "");
Zeile gelöscht : user_pref("extensions.incredibar.isDcmntCmplt", true);
Zeile gelöscht : user_pref("extensions.incredibar.isdcmntcmplt", "false");
Zeile gelöscht : user_pref("extensions.incredibar.keywordurl", "");
Zeile gelöscht : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1415:58:04");
Zeile gelöscht : user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
Zeile gelöscht : user_pref("extensions.incredibar.newTab", false);
Zeile gelöscht : user_pref("extensions.incredibar.newtab", "false");
Zeile gelöscht : user_pref("extensions.incredibar.newtaburl", "");
Zeile gelöscht : user_pref("extensions.incredibar.noFFXTlbr", false);
Zeile gelöscht : user_pref("extensions.incredibar.ppd", "666661");
Zeile gelöscht : user_pref("extensions.incredibar.prdct", "incredibar");
Zeile gelöscht : user_pref("extensions.incredibar.productid", "26");
Zeile gelöscht : user_pref("extensions.incredibar.prtnrId", "Incredibar");
Zeile gelöscht : user_pref("extensions.incredibar.prtnrid", "Incredibar");
Zeile gelöscht : user_pref("extensions.incredibar.sg", "none");
Zeile gelöscht : user_pref("extensions.incredibar.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.incredibar.smplgrp", "none");
Zeile gelöscht : user_pref("extensions.incredibar.srch", "");
Zeile gelöscht : user_pref("extensions.incredibar.srchprvdr", "");
Zeile gelöscht : user_pref("extensions.incredibar.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.incredibar.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6R8DfWGzg2&loc=IB_TB&i=26&search=");
Zeile gelöscht : user_pref("extensions.incredibar.tlbrid", "base");
Zeile gelöscht : user_pref("extensions.incredibar.tlbrsrchurl", "hxxp://mystart.Incredibar.com/?a=6R8DfWGzg2&loc=IB_TB&i=26&search=");
Zeile gelöscht : user_pref("extensions.incredibar.upn2", "6R8DfWGzg2");
Zeile gelöscht : user_pref("extensions.incredibar.upn2n", "92824947608783518");
Zeile gelöscht : user_pref("extensions.incredibar.vrsn", "1.5.11.14");
Zeile gelöscht : user_pref("extensions.incredibar.vrsnTs", "1.5.11.1415:58:04");
Zeile gelöscht : user_pref("extensions.incredibar.vrsni", "1.5.11.14");
Zeile gelöscht : user_pref("extensions.incredibar.vrsnts", "1.5.11.1415:58:04");
Zeile gelöscht : user_pref("extensions.incredibar.wnd", "{\"cloudcover\":\"25\",\"humidity\":\"88\",\"observation_time\":\"05:25 PM\",\"precipMM\":\"0.8\",\"pressure\":\"1013\",\"temp_C\":\"13\",\"temp_F\":\"55\",\"vi[...]
Zeile gelöscht : user_pref("extensions.incredibar_i.aflt", "orgnl");
Zeile gelöscht : user_pref("extensions.incredibar_i.dfltLng", "");
Zeile gelöscht : user_pref("extensions.incredibar_i.did", "10643");
Zeile gelöscht : user_pref("extensions.incredibar_i.excTlbr", false);
Zeile gelöscht : user_pref("extensions.incredibar_i.id", "8a03fc9e0000000000004061865ed214");
Zeile gelöscht : user_pref("extensions.incredibar_i.installerproductid", "26");
Zeile gelöscht : user_pref("extensions.incredibar_i.instlDay", "15578");
Zeile gelöscht : user_pref("extensions.incredibar_i.instlRef", "");
Zeile gelöscht : user_pref("extensions.incredibar_i.ms_url_id", "");
Zeile gelöscht : user_pref("extensions.incredibar_i.newTab", false);
Zeile gelöscht : user_pref("extensions.incredibar_i.ppd", "666661");
Zeile gelöscht : user_pref("extensions.incredibar_i.prdct", "incredibar");
Zeile gelöscht : user_pref("extensions.incredibar_i.productid", "26");
Zeile gelöscht : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
Zeile gelöscht : user_pref("extensions.incredibar_i.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.incredibar_i.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6R8DfWGzg2&loc=IB_TB&i=26&search=");
Zeile gelöscht : user_pref("extensions.incredibar_i.upn2", "6R8DfWGzg2");
Zeile gelöscht : user_pref("extensions.incredibar_i.upn2n", "92824947608783518");
Zeile gelöscht : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
Zeile gelöscht : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1415:58:04");
Zeile gelöscht : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");
-\\ Google Chrome v
[ Datei : C:\Users\Besitzer\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [31815 octets] - [13/02/2014 17:51:02]
AdwCleaner[S0].txt - [29937 octets] - [13/02/2014 17:51:45]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [29998 octets] ##########
Das Weitere im nächsten post. Viele Grüße frusti Jetzt habe ich ein Problem: Ich bekomme die beiden weitern Dateien nicht ins Forum!? Geändert von Frusti (14.02.2014 um 13:11 Uhr) |
|
14.02.2014, 14:21
| #8 |
| /// Malwareteam | Popups und Werbung in Internet Explorer 11 nehmen plötzlich überhand Teile die Dateien auf mehrere Posts auf wenn sie für einen zu groß sind |
|
14.02.2014, 16:06
| #9 |
| | Popups und Werbung in Internet Explorer 11 nehmen plötzlich überhand Anknüpfend an meine vorige Mail hier: 3.) JRT ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 6.1.1 (02.04.2014:1) OS: Windows 7 Home Premium x64 Ran by Besitzer on 14.02.2014 at 14:32:47,91 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Registry Values Suspicious HKCU\..\Run entries found. Trojan:JS/Medfos.B? Value Name Type Value Data ======================================================================================== NextLive REG_SZ C:\Windows\SysWOW64\rundll32.exe "C:\Users\Besitzer\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l ~~~ Registry Keys ~~~ Files ~~~ Folders Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{A3C06863-CB31-464C-A844-A7D3E473E59E} ~~~ Event Viewer Logs were cleared ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 14.02.2014 at 14:39:07,61 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 4.) FRST FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01
Ran by Besitzer (administrator) on BESITZER-PC on 14-02-2014 15:56:35
Running from C:\Users\Besitzer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZSF80D
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
() C:\Program Files (x86)\Universal Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
() C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Users\Besitzer\AppData\Local\HD Streamer\crxmon.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
() C:\Program Files (x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
() C:\Program Files (x86)\HD Streamer\BackgroundHost64.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_12_0_0_44_ActiveX.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(Farbar) C:\Users\Besitzer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZSF80D\FRST64 (1).exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [WrtMon.exe] - C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [20480 2006-09-20] ()
HKLM\...\Run: [VideoDownloadConverter Home Page Guard 64 bit] - "C:\PROGRA~2\VIDEOD~2\bar\1.bin\AppIntegrator64.exe"
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [TrueImageMonitor.exe] - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5078416 2009-08-28] (Acronis)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [VideoDownloadConverter EPM Support] - "C:\PROGRA~2\VIDEOD~2\bar\1.bin\4zmedint.exe" T8EPMSUP.DLL,S
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1654125919-855541359-3433209274-1000\...\Run: [NextLive] - C:\Windows\SysWOW64\rundll32.exe "C:\Users\Besitzer\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKU\S-1-5-21-1654125919-855541359-3433209274-1000\...\Run: [HD Streamer Sync] - C:\Users\Besitzer\AppData\Local\HD Streamer\crxmon.exe [128952 2014-01-15] ()
AppInit_DLLs: c:\progra~2\movies~1\safety~1\x64\safety~2.dll => File Not Found
AppInit_DLLs-x32: c:\progra~2\movies~1\safety~1\safety~2.dll => File Not Found
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\browsemngr.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browsermngr.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe
IFEO\cltmngsvc.exe: [Debugger] tasklist.exe
IFEO\delta babylon.exe: [Debugger] tasklist.exe
IFEO\delta tb.exe: [Debugger] tasklist.exe
IFEO\delta2.exe: [Debugger] tasklist.exe
IFEO\deltainstaller.exe: [Debugger] tasklist.exe
IFEO\deltasetup.exe: [Debugger] tasklist.exe
IFEO\deltatb.exe: [Debugger] tasklist.exe
IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe
IFEO\iminentsetup.exe: [Debugger] tasklist.exe
IFEO\mediabuilder.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\rjatydimofu.exe: [Debugger] tasklist.exe
IFEO\sweetimsetup.exe: [Debugger] tasklist.exe
IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe
IFEO\trueimagelauncher.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF249114589E0CE01
SearchScopes: HKLM - {52db1893-8a90-4192-aede-08e00b8f8473} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=100&systemid=473&v=n9602-172&apn_uid=3029124234214494&apn_dtid=BND473&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {52db1893-8a90-4192-aede-08e00b8f8473} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: HD Streamer - {E6062A33-016E-4BDA-A6F1-890D989F8656} - C:\Program Files (x86)\HD Streamer\ScriptHost64.dll (HD Streamer)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HD Streamer - {E6062A33-016E-4BDA-A6F1-890D989F8656} - C:\Program Files (x86)\HD Streamer\ScriptHost.dll (HD Streamer)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - VideoDownloadConverter - {48586425-6bb7-4f51-8dc6-38c88e3ebb58} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.4.24.0.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default
FF Homepage: user_pref("browser.startup.homepage", );
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Users\Besitzer\Desktop\Programme - ÖFNNEN\Picasa3\npPicasa3.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @real.com/nppl3260;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @VideoDownloadConverter_4z.com/Plugin - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll No File
FF Plugin-x32: @VideoDownloadConverter_ScriptHelper.com/Plugin - C:\Program Files (x86)\VideoDownloadConverter\npVDCPlugin.dll (Mindspark)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\searchplugins\buenosearch.xml
FF Extension: HD Streamer - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\hd_streamer@iMedia [2014-01-23]
FF Extension: Adblock Plus - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-11]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011-04-05]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011-04-06]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} [2011-10-24]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2012-07-02]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-09-24]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2012-11-12]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-05-09]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-05-09]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [2013-11-21]
Chrome:
=======
CHR Extension: (HD Streamer) - C:\Users\Besitzer\AppData\Local\Google\Chrome\User Data\Default\Extensions\oleglodmkonbpfmlffapjfednjopbeeh [2014-01-22]
CHR HKLM-x32\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2011-12-22]
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-12-08]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\Exts\Chrome.crx [2014-01-21]
==================== Services (Whitelisted) =================
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [103936 2014-01-20] (Freemake)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe [275696 2013-10-08] (Symantec Corporation)
S3 Symantec RemoteAssist; C:\Program Files (x86)\Common Files\Symantec Shared\Support Controls\ssrc.exe [394704 2008-01-29] (Symantec, Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2103096 2013-12-18] (TuneUp Software)
R2 UniversalUpdater; C:\Program Files (x86)\Universal Updater\UpdaterService.exe [401336 2014-01-19] ()
==================== Drivers (Whitelisted) ====================
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140121.001\BHDrvx64.sys [1526488 2013-12-18] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2014-02-04] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140213.002\IDSvia64.sys [521944 2014-01-21] (Symantec Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140213.033\ENG64.SYS [126040 2014-02-04] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140213.033\EX64.SYS [2099288 2014-02-04] (Symantec Corporation)
S3 Spyder3; C:\Windows\System32\DRIVERS\Spyder3.sys [15360 2008-09-08] ()
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1501000.012\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-21] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1501000.012\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
R0 tdrpman251; C:\Windows\System32\DRIVERS\tdrpm251.sys [1455648 2012-06-03] (Acronis)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-14 15:44 - 2014-02-14 15:44 - 00002228 _____ () C:\Windows\PFRO.log
2014-02-14 14:39 - 2014-02-14 14:39 - 00001119 _____ () C:\Users\Besitzer\Desktop\JRT.txt
2014-02-14 14:01 - 2014-02-14 14:01 - 00051442 _____ () C:\Users\Besitzer\Desktop\JRT.zip
2014-02-14 13:57 - 2014-02-14 13:57 - 00000979 _____ () C:\Users\Public\Desktop\WinRAR.lnk
2014-02-14 13:57 - 2014-02-14 13:57 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-02-14 13:44 - 2014-02-14 13:44 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\WinRAR
2014-02-14 13:43 - 2014-02-14 13:57 - 00000000 ____D () C:\Program Files\WinRAR
2014-02-14 13:35 - 2014-02-14 13:35 - 00014143 _____ () C:\Users\Besitzer\Desktop\Datei in zip Datei umwandeln.odt
2014-02-14 11:49 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-14 11:49 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-14 06:40 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-14 06:40 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-14 06:40 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-14 06:40 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-14 06:40 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-14 06:40 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-14 06:38 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-14 06:38 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-14 06:38 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-14 06:38 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-14 06:38 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-14 06:38 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-14 06:38 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-14 06:38 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-14 06:38 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-14 06:38 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-14 06:38 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-14 06:38 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-14 06:38 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-14 06:38 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-14 06:38 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-14 06:38 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-14 06:38 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-14 06:38 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-14 06:28 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-14 06:28 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-14 06:28 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-14 06:28 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-14 06:28 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-14 06:28 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-14 06:28 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-14 06:28 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-14 06:28 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-14 06:28 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-14 06:28 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-14 06:28 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-14 06:28 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-14 06:28 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-14 06:28 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-14 06:28 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-14 06:28 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-14 06:28 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-14 06:28 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-14 06:28 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-14 06:28 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-14 06:28 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-14 06:28 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-14 06:28 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-14 06:28 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-14 06:28 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-14 06:28 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-14 06:28 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-14 06:28 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-14 06:28 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-14 06:28 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-14 06:28 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-14 06:28 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-14 06:28 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-14 06:28 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-14 06:28 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-14 06:28 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-14 06:28 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-14 06:28 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-14 06:22 - 2014-02-14 15:44 - 00000280 _____ () C:\Windows\setupact.log
2014-02-14 06:22 - 2014-02-14 06:22 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-13 18:02 - 2014-02-13 18:02 - 00000000 ____D () C:\Windows\ERUNT
2014-02-13 17:50 - 2014-02-13 17:51 - 00000000 ____D () C:\AdwCleaner
2014-02-13 17:18 - 2014-02-13 17:18 - 00014505 _____ () C:\Users\Besitzer\Desktop\Waschvollautomat.odt
2014-02-13 09:38 - 2014-02-13 09:38 - 00033919 _____ () C:\Users\Besitzer\Desktop\FRST Scan result.odt
2014-02-13 09:32 - 2014-02-14 15:56 - 00000000 ____D () C:\FRST
2014-02-11 10:00 - 2014-02-11 10:04 - 00000000 ____D () C:\Users\Besitzer\Desktop\Air Pad -Kettler-
2014-02-11 08:41 - 2014-02-11 08:43 - 00049026 _____ () C:\Users\Besitzer\Desktop\Schauspielerin Iris Berben genießt Offline-Dasein.odt
2014-02-10 20:41 - 2014-02-10 20:41 - 00016802 _____ () C:\Users\Besitzer\Desktop\ebay-Schuhregal.odt
2014-02-10 13:44 - 2014-02-10 13:44 - 00000000 ____D () C:\Program Files (x86)\buenosearch LTD
2014-02-10 13:43 - 2014-02-10 13:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\buenosearch LTD
2014-02-10 13:38 - 2014-02-10 13:39 - 00000000 ____D () C:\Users\Besitzer\Desktop\PC Tisch
2014-02-10 09:05 - 2014-02-10 09:05 - 00015531 _____ () C:\Users\Besitzer\Desktop\Langenscheidt Spanisch-Deutsch.odt
2014-02-09 08:58 - 2014-02-09 09:00 - 00519719 _____ () C:\Users\Besitzer\Desktop\URUK - 5000 Jahre Megacity.odt
2014-02-09 08:04 - 2014-02-09 08:04 - 00337136 _____ () C:\Users\Besitzer\Desktop\Fürstenberg Porzellan gr. Bonboniere.odt
2014-02-08 13:04 - 2014-02-08 13:06 - 00027856 _____ () C:\Users\Besitzer\Desktop\Mit Scholl-Latour im Libanon.odt
2014-02-07 13:13 - 2014-02-07 17:31 - 00026362 _____ () C:\Users\Besitzer\Desktop\Schildkröt Fitness Balancekissen.odt
2014-02-06 18:06 - 2014-02-06 18:06 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-02-06 18:05 - 2014-02-07 06:07 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-05 15:31 - 2014-02-05 15:32 - 00000000 ____D () C:\Users\Besitzer\Desktop\Pr. v. Hes.-Weingut
2014-02-05 11:17 - 2014-02-05 11:17 - 00027652 _____ () C:\Users\Besitzer\Desktop\KROATIEN - BOSNIEN-HERZEGOWINA - MONTENEGRO.odt
2014-02-05 11:05 - 2014-02-05 11:06 - 00013716 _____ () C:\Users\Besitzer\Desktop\Pan con tomate.odt
2014-02-05 10:53 - 2014-02-05 10:53 - 00011777 _____ () C:\Users\Besitzer\Desktop\Dulcinea-Don Quijote-Ulcinj-Dulcinium.odt
2014-02-04 16:18 - 2014-02-04 16:19 - 00015363 _____ () C:\Users\Besitzer\Desktop\Montenegro.odt
2014-02-04 15:37 - 2014-02-04 15:37 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 - Verknüpfung
2014-02-04 10:42 - 2014-02-04 10:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\OpenOffice
2014-02-04 10:41 - 2014-02-04 14:24 - 00000000 ___SD () C:\Program Files (x86)\OpenOffice 4.0.1
2014-02-04 10:40 - 2014-02-04 10:40 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-04 08:45 - 2014-02-14 10:45 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine-1
2014-02-02 19:57 - 2014-02-02 19:57 - 00000000 ____D () C:\Program Files (x86)\HD Streamer
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Program Files (x86)\VideoDownloadConverter
2014-02-02 11:16 - 2014-02-02 15:14 - 00000000 ____D () C:\Users\Besitzer\Desktop\Psycho
2014-02-02 11:12 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Fotos
2014-02-02 11:09 - 2014-02-11 11:34 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine
2014-02-01 17:15 - 2014-02-01 17:15 - 00011303 _____ () C:\Users\Besitzer\Desktop\a) Anzüge.odt
2014-01-29 17:37 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-3
2014-01-29 17:28 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-2
2014-01-29 10:29 - 2014-01-29 10:29 - 00024872 _____ () C:\Users\Besitzer\Desktop\Verrückt nach Meer-Sendefolge.odt
2014-01-28 17:29 - 2014-01-28 17:29 - 00025284 _____ () C:\Users\Besitzer\Desktop\Tea Time.odt
2014-01-27 13:08 - 2014-01-27 13:08 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Ashampoo
2014-01-27 13:07 - 2014-01-27 13:07 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-01-27 13:00 - 2014-01-27 13:03 - 384551131 _____ () C:\Users\Besitzer\Downloads\Plácido Domingo at Loreley 2013.mp4
2014-01-23 09:49 - 2014-01-23 09:54 - 00000048 _____ () C:\RB.rdat
2014-01-23 09:49 - 2014-01-23 09:54 - 00000048 _____ () C:\License_Time.rdat
2014-01-23 09:49 - 2014-01-23 09:49 - 00000000 ____D () C:\ProgramData\FileCure
2014-01-23 09:47 - 2014-01-23 09:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\FreemakeVideoConverter
2014-01-23 09:45 - 2014-01-23 09:45 - 01071000 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_flashplayer12x32_mssa_aaa_aih(1).exe
2014-01-23 09:45 - 2014-01-23 09:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Macromedia
2014-01-23 09:39 - 2014-01-23 09:39 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-23 09:26 - 2014-01-23 09:26 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm(2).xpi
2014-01-23 09:26 - 2014-01-23 09:26 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm(1).xpi
2014-01-23 09:25 - 2014-01-23 09:25 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm.xpi
2014-01-22 11:31 - 2014-02-14 15:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\newnext.me
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\Documents\Mobogenie
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\HD Streamer
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\genienext
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\.android
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Program Files (x86)\Universal Updater
2014-01-22 11:30 - 2014-01-22 11:32 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
2014-01-20 14:20 - 2014-01-20 14:20 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-20 14:20 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-20 14:20 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-20 14:20 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-20 14:20 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-18 10:41 - 2014-01-18 10:42 - 00012812 _____ () C:\Users\Besitzer\Desktop\Hochzeit im Walde.odt
2014-01-17 20:55 - 2014-02-10 13:36 - 00000000 ____D () C:\Users\Besitzer\Desktop\Ostpreußen_Danzig-Königsberg_DAMALS
2014-01-15 06:55 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 06:55 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 06:55 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
==================== One Month Modified Files and Folders =======
2014-02-14 15:56 - 2014-02-13 09:32 - 00000000 ____D () C:\FRST
2014-02-14 15:52 - 2012-10-04 19:30 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-14 15:52 - 2009-07-14 05:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-14 15:52 - 2009-07-14 05:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-14 15:45 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\newnext.me
2014-02-14 15:45 - 2012-12-07 07:53 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-14 15:44 - 2014-02-14 15:44 - 00002228 _____ () C:\Windows\PFRO.log
2014-02-14 15:44 - 2014-02-14 06:22 - 00000280 _____ () C:\Windows\setupact.log
2014-02-14 15:44 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-14 15:42 - 2011-04-04 11:29 - 02002550 _____ () C:\Windows\WindowsUpdate.log
2014-02-14 15:05 - 2012-12-07 07:53 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-14 14:39 - 2014-02-14 14:39 - 00001119 _____ () C:\Users\Besitzer\Desktop\JRT.txt
2014-02-14 14:29 - 2013-11-13 17:06 - 00003954 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{083BECD6-A6F2-4401-A905-5865C87918C6}
2014-02-14 14:15 - 2012-12-10 07:41 - 00000000 ____D () C:\Users\Besitzer\Desktop\Programme
2014-02-14 14:01 - 2014-02-14 14:01 - 00051442 _____ () C:\Users\Besitzer\Desktop\JRT.zip
2014-02-14 13:57 - 2014-02-14 13:57 - 00000979 _____ () C:\Users\Public\Desktop\WinRAR.lnk
2014-02-14 13:57 - 2014-02-14 13:57 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-02-14 13:57 - 2014-02-14 13:43 - 00000000 ____D () C:\Program Files\WinRAR
2014-02-14 13:44 - 2014-02-14 13:44 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\WinRAR
2014-02-14 13:35 - 2014-02-14 13:35 - 00014143 _____ () C:\Users\Besitzer\Desktop\Datei in zip Datei umwandeln.odt
2014-02-14 13:35 - 2011-05-12 17:37 - 36079616 ___SH () C:\Users\Besitzer\Desktop\Thumbs.db
2014-02-14 12:10 - 2009-07-14 18:58 - 00667970 _____ () C:\Windows\system32\perfh007.dat
2014-02-14 12:10 - 2009-07-14 18:58 - 00136714 _____ () C:\Windows\system32\perfc007.dat
2014-02-14 12:10 - 2009-07-14 06:13 - 01537850 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-14 10:45 - 2014-02-04 08:45 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine-1
2014-02-14 08:15 - 2012-06-03 19:14 - 00003012 _____ () C:\Windows\System32\Tasks\{1F7E5E00-647A-47E6-9221-252E2625D665}
2014-02-14 06:22 - 2014-02-14 06:22 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-13 18:02 - 2014-02-13 18:02 - 00000000 ____D () C:\Windows\ERUNT
2014-02-13 17:51 - 2014-02-13 17:50 - 00000000 ____D () C:\AdwCleaner
2014-02-13 17:18 - 2014-02-13 17:18 - 00014505 _____ () C:\Users\Besitzer\Desktop\Waschvollautomat.odt
2014-02-13 09:38 - 2014-02-13 09:38 - 00033919 _____ () C:\Users\Besitzer\Desktop\FRST Scan result.odt
2014-02-13 06:34 - 2011-04-07 17:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\CrashDumps
2014-02-12 18:02 - 2013-09-23 11:36 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\vlc
2014-02-12 18:01 - 2011-05-15 07:22 - 00000000 ____D () C:\Users\Besitzer\Desktop\Video
2014-02-11 11:34 - 2014-02-02 11:09 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine
2014-02-11 10:04 - 2014-02-11 10:00 - 00000000 ____D () C:\Users\Besitzer\Desktop\Air Pad -Kettler-
2014-02-11 08:43 - 2014-02-11 08:41 - 00049026 _____ () C:\Users\Besitzer\Desktop\Schauspielerin Iris Berben genießt Offline-Dasein.odt
2014-02-10 20:41 - 2014-02-10 20:41 - 00016802 _____ () C:\Users\Besitzer\Desktop\ebay-Schuhregal.odt
2014-02-10 13:44 - 2014-02-10 13:44 - 00000000 ____D () C:\Program Files (x86)\buenosearch LTD
2014-02-10 13:43 - 2014-02-10 13:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\buenosearch LTD
2014-02-10 13:39 - 2014-02-10 13:38 - 00000000 ____D () C:\Users\Besitzer\Desktop\PC Tisch
2014-02-10 13:36 - 2014-01-17 20:55 - 00000000 ____D () C:\Users\Besitzer\Desktop\Ostpreußen_Danzig-Königsberg_DAMALS
2014-02-10 09:05 - 2014-02-10 09:05 - 00015531 _____ () C:\Users\Besitzer\Desktop\Langenscheidt Spanisch-Deutsch.odt
2014-02-09 09:00 - 2014-02-09 08:58 - 00519719 _____ () C:\Users\Besitzer\Desktop\URUK - 5000 Jahre Megacity.odt
2014-02-09 08:04 - 2014-02-09 08:04 - 00337136 _____ () C:\Users\Besitzer\Desktop\Fürstenberg Porzellan gr. Bonboniere.odt
2014-02-09 06:08 - 2011-04-10 09:40 - 00000000 ____D () C:\Users\Besitzer\Desktop\Kleidung, Access., Einlegesohlen
2014-02-08 13:06 - 2014-02-08 13:04 - 00027856 _____ () C:\Users\Besitzer\Desktop\Mit Scholl-Latour im Libanon.odt
2014-02-08 10:45 - 2013-11-30 08:00 - 00000000 ____D () C:\Users\Besitzer\Desktop\GARTEN
2014-02-07 17:31 - 2014-02-07 13:13 - 00026362 _____ () C:\Users\Besitzer\Desktop\Schildkröt Fitness Balancekissen.odt
2014-02-07 08:54 - 2012-01-13 20:55 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-02-07 08:07 - 2011-04-06 10:33 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Windows Live
2014-02-07 06:07 - 2014-02-06 18:05 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-06 18:06 - 2014-02-06 18:06 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-02-06 13:16 - 2014-02-14 06:28 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-14 06:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-14 06:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-14 06:28 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-14 06:28 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-14 06:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-14 06:28 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-14 06:28 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-14 06:28 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-14 06:28 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-14 06:28 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-14 06:28 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-14 06:28 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-14 06:28 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-14 06:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-14 06:28 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-14 06:28 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-14 06:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-14 06:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-14 06:28 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-14 06:28 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-14 06:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-14 06:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-14 06:28 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-14 06:28 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-14 06:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-14 06:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-14 06:28 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-14 06:28 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-14 06:28 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-14 06:28 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-14 06:28 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-14 06:28 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-14 06:28 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-14 06:28 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-14 06:28 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-14 06:28 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-14 06:28 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-14 06:28 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-06 06:52 - 2012-10-04 19:30 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-06 06:52 - 2012-10-04 19:29 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-06 06:52 - 2012-10-04 19:29 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-05 15:32 - 2014-02-05 15:31 - 00000000 ____D () C:\Users\Besitzer\Desktop\Pr. v. Hes.-Weingut
2014-02-05 15:17 - 2013-08-24 09:25 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-1
2014-02-05 12:22 - 2011-04-21 17:51 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Stellarium
2014-02-05 12:22 - 2011-04-21 17:50 - 00000000 ____D () C:\Program Files\Stellarium
2014-02-05 11:17 - 2014-02-05 11:17 - 00027652 _____ () C:\Users\Besitzer\Desktop\KROATIEN - BOSNIEN-HERZEGOWINA - MONTENEGRO.odt
2014-02-05 11:06 - 2014-02-05 11:05 - 00013716 _____ () C:\Users\Besitzer\Desktop\Pan con tomate.odt
2014-02-05 10:53 - 2014-02-05 10:53 - 00011777 _____ () C:\Users\Besitzer\Desktop\Dulcinea-Don Quijote-Ulcinj-Dulcinium.odt
2014-02-04 18:38 - 2013-09-08 07:01 - 00289784 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-04 18:11 - 2011-04-05 09:54 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-04 16:19 - 2014-02-04 16:18 - 00015363 _____ () C:\Users\Besitzer\Desktop\Montenegro.odt
2014-02-04 15:37 - 2014-02-04 15:37 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 - Verknüpfung
2014-02-04 14:32 - 2011-04-04 11:29 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-04 14:24 - 2014-02-04 10:41 - 00000000 ___SD () C:\Program Files (x86)\OpenOffice 4.0.1
2014-02-04 12:06 - 2012-06-13 17:06 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\NPE
2014-02-04 11:31 - 2013-09-07 17:04 - 00064768 _____ () C:\Users\Besitzer\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-04 10:42 - 2014-02-04 10:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\OpenOffice
2014-02-04 10:40 - 2014-02-04 10:40 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-03 11:52 - 2014-02-02 11:12 - 00000000 ____D () C:\Users\Besitzer\Desktop\Fotos
2014-02-03 11:52 - 2014-01-29 17:37 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-3
2014-02-03 11:52 - 2014-01-29 17:28 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-2
2014-02-02 19:57 - 2014-02-02 19:57 - 00000000 ____D () C:\Program Files (x86)\HD Streamer
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Program Files (x86)\VideoDownloadConverter
2014-02-02 15:14 - 2014-02-02 11:16 - 00000000 ____D () C:\Users\Besitzer\Desktop\Psycho
2014-02-02 15:10 - 2013-10-10 10:39 - 00017877 _____ () C:\Users\Besitzer\Desktop\Piaf-Konzert.odt
2014-02-02 15:04 - 2013-12-18 10:22 - 00000000 ____D () C:\Users\Besitzer\Desktop\ASTRO
2014-02-02 14:58 - 2011-04-10 09:40 - 00000000 ____D () C:\Users\Besitzer\Desktop\HAUPTORDNER
2014-02-02 14:49 - 2013-11-22 10:43 - 00000000 ____D () C:\Users\Besitzer\Desktop\Mnünzen
2014-02-01 17:15 - 2014-02-01 17:15 - 00011303 _____ () C:\Users\Besitzer\Desktop\a) Anzüge.odt
2014-01-31 06:31 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-29 10:29 - 2014-01-29 10:29 - 00024872 _____ () C:\Users\Besitzer\Desktop\Verrückt nach Meer-Sendefolge.odt
2014-01-28 22:49 - 2013-09-23 08:21 - 00000000 ____D () C:\Program Files (x86)\StreamTransport
2014-01-28 17:29 - 2014-01-28 17:29 - 00025284 _____ () C:\Users\Besitzer\Desktop\Tea Time.odt
2014-01-27 17:26 - 2011-04-07 17:06 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-27 13:08 - 2014-01-27 13:08 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Ashampoo
2014-01-27 13:07 - 2014-01-27 13:07 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-01-27 13:03 - 2014-01-27 13:00 - 384551131 _____ () C:\Users\Besitzer\Downloads\Plácido Domingo at Loreley 2013.mp4
2014-01-23 09:54 - 2014-01-23 09:49 - 00000048 _____ () C:\RB.rdat
2014-01-23 09:54 - 2014-01-23 09:49 - 00000048 _____ () C:\License_Time.rdat
2014-01-23 09:49 - 2014-01-23 09:49 - 00000000 ____D () C:\ProgramData\FileCure
2014-01-23 09:47 - 2014-01-23 09:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\FreemakeVideoConverter
2014-01-23 09:46 - 2011-04-05 10:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Adobe
2014-01-23 09:45 - 2014-01-23 09:45 - 01071000 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_flashplayer12x32_mssa_aaa_aih(1).exe
2014-01-23 09:45 - 2014-01-23 09:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Macromedia
2014-01-23 09:44 - 2011-12-22 15:27 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2014-01-23 09:44 - 2011-12-22 15:27 - 00000000 ____D () C:\ProgramData\Freemake
2014-01-23 09:39 - 2014-01-23 09:39 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-23 09:26 - 2014-01-23 09:26 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm(2).xpi
2014-01-23 09:26 - 2014-01-23 09:26 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm(1).xpi
2014-01-23 09:25 - 2014-01-23 09:25 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm.xpi
2014-01-23 07:08 - 2011-04-08 09:59 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-01-22 13:23 - 2013-08-31 13:51 - 00000000 ____D () C:\Users\Besitzer\Documents\Freemake
2014-01-22 12:30 - 2011-12-22 15:27 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-01-22 11:32 - 2014-01-22 11:30 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
2014-01-22 11:32 - 2013-11-20 15:06 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Mobogenie
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\Documents\Mobogenie
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\HD Streamer
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\genienext
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\.android
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Program Files (x86)\Universal Updater
2014-01-22 11:31 - 2011-04-04 11:29 - 00000000 ____D () C:\Users\Besitzer
2014-01-21 06:41 - 2012-04-02 18:34 - 00000000 ____D () C:\Users\Besitzer\Desktop\Interessenbereiche -Definierung-
2014-01-20 14:21 - 2013-10-21 09:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-20 14:20 - 2014-01-20 14:20 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-20 14:20 - 2011-04-05 11:14 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-19 17:06 - 2012-04-02 18:34 - 00000000 ____D () C:\Users\Besitzer\Desktop\AKTIV - Ordner
2014-01-18 10:42 - 2014-01-18 10:41 - 00012812 _____ () C:\Users\Besitzer\Desktop\Hochzeit im Walde.odt
2014-01-18 07:29 - 2011-12-27 18:22 - 00000000 ____D () C:\Program Files\Google
2014-01-18 07:29 - 2011-06-12 18:56 - 00000000 ____D () C:\Program Files (x86)\Google
2014-01-17 07:13 - 2013-11-13 15:43 - 00000000 ____D () C:\ProgramData\Google
2014-01-17 07:13 - 2011-04-29 07:04 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Google
2014-01-15 21:52 - 2013-08-14 20:13 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 21:49 - 2011-04-04 14:51 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.6552.dll
Some content of TEMP:
====================
C:\Users\Besitzer\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-02-08 09:55
==================== End Of Log ============================
--- --- --- Ich hoffe, ich habe Dir nun die angeforderten Dinge geben können. Ich freue mich auf Deine Antwort. Viele Grüße Frusti |
|
18.02.2014, 16:56
| #10 |
| /// Malwareteam | Popups und Werbung in Internet Explorer 11 nehmen plötzlich überhand Hi sry war länger auße Haus  Scan mit Combofix
|
|
19.02.2014, 16:58
| #11 |
| | Popups und Werbung in Internet Explorer 11 nehmen plötzlich überhand Hallo, vielen Dank für die Fortsetzung Deiner Bemühungen. Ich habe mir Mühe gegeben, alles nach Deinen Anweisungen zu machen. Ich hoffe, es ist ok so: Hier die "Combo"-Datei: Combofix Logfile: Code:
ATTFilter ComboFix 14-02-16.01 - Besitzer 18.02.2014 17:59:19.1.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.4061.2105 [GMT 1:00]
ausgeführt von:: c:\users\Besitzer\Downloads\ComboFix.exe
AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
(((((((((((((((((((((((((((((((((((( Weitere Löschungen ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Install.exe
c:\users\Besitzer\AppData\Roaming\Microsoft\Windows\Recent\Thumbs.db
c:\users\Public\AlexaNSISPlugin.6552.dll
c:\windows\IsUn0407.exe
c:\windows\SysWow64\Packet.dll
c:\windows\SysWow64\wpcap.dll
.
.
((((((((((((((((((((((( Dateien erstellt von 2014-01-18 bis 2014-02-18 ))))))))))))))))))))))))))))))
.
.
2014-02-18 17:04 . 2014-02-18 17:04 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-02-18 10:54 . 2014-02-18 10:54 -------- d-----w- c:\users\Besitzer\MediathekView
2014-02-18 10:38 . 2014-02-18 10:40 108968 ----a-w- c:\windows\system32\WindowsAccessBridge-64.dll
2014-02-18 10:37 . 2014-02-18 10:37 189352 ----a-w- c:\windows\system32\javaw.exe
2014-02-18 10:37 . 2014-02-18 10:37 189352 ----a-w- c:\windows\system32\java.exe
2014-02-18 10:37 . 2014-02-18 10:37 -------- d-----w- c:\program files\Java
2014-02-14 12:43 . 2014-02-14 12:57 -------- d-----w- c:\program files\WinRAR
2014-02-14 10:49 . 2013-12-21 09:53 548864 ----a-w- c:\windows\system32\vbscript.dll
2014-02-14 10:49 . 2013-12-21 08:56 454656 ----a-w- c:\windows\SysWow64\vbscript.dll
2014-02-14 05:40 . 2013-12-06 02:30 1882112 ----a-w- c:\windows\system32\msxml3.dll
2014-02-14 05:40 . 2013-12-06 02:02 1237504 ----a-w- c:\windows\SysWow64\msxml3.dll
2014-02-14 05:40 . 2013-12-06 02:30 2048 ----a-w- c:\windows\system32\msxml3r.dll
2014-02-14 05:40 . 2013-12-06 02:02 2048 ----a-w- c:\windows\SysWow64\msxml3r.dll
2014-02-14 05:28 . 2014-02-06 11:30 2724864 ----a-w- c:\windows\system32\mshtml.tlb
2014-02-13 17:02 . 2014-02-13 17:02 -------- d-----w- c:\windows\ERUNT
2014-02-13 16:50 . 2014-02-13 16:51 -------- d-----w- C:\AdwCleaner
2014-02-13 08:32 . 2014-02-14 14:57 -------- d-----w- C:\FRST
2014-02-10 12:44 . 2014-02-10 12:44 -------- d-----w- c:\program files (x86)\buenosearch LTD
2014-02-10 12:43 . 2014-02-10 12:43 -------- d-----w- c:\users\Besitzer\AppData\Roaming\buenosearch LTD
2014-02-06 17:06 . 2014-02-06 17:06 51496 ----a-w- c:\windows\system32\drivers\stflt.sys
2014-02-06 17:05 . 2014-02-07 05:07 -------- d-----w- c:\program files (x86)\Spyware Terminator
2014-02-04 09:42 . 2014-02-04 09:42 -------- d-----w- c:\users\Besitzer\AppData\Roaming\OpenOffice
2014-02-04 09:40 . 2014-02-04 09:40 -------- d-----w- c:\program files (x86)\OpenOffice 4
2014-02-02 18:57 . 2014-02-02 18:57 -------- d-----w- c:\program files (x86)\HD Streamer
2014-02-02 18:20 . 2014-02-02 18:20 -------- d-----w- c:\program files (x86)\VideoDownloadConverter
2014-01-27 12:08 . 2014-01-27 12:08 -------- d-----w- c:\users\Besitzer\AppData\Roaming\Ashampoo
2014-01-27 12:07 . 2014-01-27 12:07 -------- d-----w- c:\programdata\Ashampoo
2014-01-23 08:49 . 2014-01-23 08:49 -------- d-----w- c:\programdata\FileCure
2014-01-23 08:47 . 2014-01-23 08:47 -------- d-----w- c:\users\Besitzer\AppData\Local\FreemakeVideoConverter
2014-01-23 08:45 . 2014-01-23 08:45 -------- d-----w- c:\users\Besitzer\AppData\Local\Macromedia
2014-01-23 08:39 . 2014-01-23 08:39 -------- d-----w- c:\programdata\McAfee
2014-01-22 10:31 . 2014-01-22 10:31 -------- d-----w- c:\users\Besitzer\AppData\Local\HD Streamer
2014-01-22 10:31 . 2014-01-22 10:31 -------- d-----w- c:\program files (x86)\Universal Updater
2014-01-22 10:31 . 2014-01-22 10:31 -------- d-----w- c:\users\Besitzer\.android
2014-01-22 10:31 . 2014-02-18 11:21 -------- d-----w- c:\users\Besitzer\AppData\Roaming\newnext.me
2014-01-22 10:31 . 2014-01-22 10:31 -------- d-----w- c:\users\Besitzer\AppData\Local\genienext
2014-01-22 10:30 . 2014-01-22 10:32 -------- d-----w- c:\program files (x86)\Mobogenie
2014-01-20 13:20 . 2013-12-18 20:09 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
.
.
.
(((((((((((((((((((((((((((((((((((( Find3M Bericht ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-16 08:33 . 2011-04-04 13:51 88567024 ----a-w- c:\windows\system32\MRT.exe
2014-02-06 05:52 . 2012-10-04 18:29 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-02-06 05:52 . 2012-10-04 18:29 692616 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-12-18 09:01 . 2013-09-07 12:37 40760 ----a-w- c:\windows\system32\TURegOpt.exe
2013-12-18 09:01 . 2014-01-07 07:18 29496 ----a-w- c:\windows\system32\authuitu.dll
2013-12-18 09:01 . 2014-01-07 07:18 25400 ----a-w- c:\windows\SysWow64\authuitu.dll
2013-12-18 09:01 . 2013-09-10 13:37 43320 ----a-w- c:\windows\system32\uxtuneup.dll
2013-12-18 09:01 . 2013-09-10 13:37 36152 ----a-w- c:\windows\SysWow64\uxtuneup.dll
2013-12-04 11:43 . 2013-12-04 11:43 940032 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe
2013-12-04 11:43 . 2013-12-04 11:43 194048 ----a-w- c:\windows\SysWow64\elshyph.dll
2013-12-04 11:43 . 2013-12-04 11:43 942592 ----a-w- c:\windows\system32\jsIntl.dll
2013-12-04 11:43 . 2013-12-04 11:43 90112 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-12-04 11:43 . 2013-12-04 11:43 86016 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-12-04 11:43 . 2013-12-04 11:43 86016 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-12-04 11:43 . 2013-12-04 11:43 84992 ----a-w- c:\windows\system32\mshtmled.dll
2013-12-04 11:43 . 2013-12-04 11:43 83968 ----a-w- c:\windows\system32\MshtmlDac.dll
2013-12-04 11:43 . 2013-12-04 11:43 81408 ----a-w- c:\windows\system32\icardie.dll
2013-12-04 11:43 . 2013-12-04 11:43 774144 ----a-w- c:\windows\system32\jscript.dll
2013-12-04 11:43 . 2013-12-04 11:43 77312 ----a-w- c:\windows\system32\tdc.ocx
2013-12-04 11:43 . 2013-12-04 11:43 74240 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-12-04 11:43 . 2013-12-04 11:43 71680 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-12-04 11:43 . 2013-12-04 11:43 645120 ----a-w- c:\windows\SysWow64\jsIntl.dll
2013-12-04 11:43 . 2013-12-04 11:43 62464 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-12-04 11:43 . 2013-12-04 11:43 62464 ----a-w- c:\windows\system32\pngfilt.dll
2013-12-04 11:43 . 2013-12-04 11:43 61952 ----a-w- c:\windows\SysWow64\MshtmlDac.dll
2013-12-04 11:43 . 2013-12-04 11:43 616104 ----a-w- c:\windows\system32\ieapfltr.dat
2013-12-04 11:43 . 2013-12-04 11:43 52224 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-12-04 11:43 . 2013-12-04 11:43 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-12-04 11:43 . 2013-12-04 11:43 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-12-04 11:43 . 2013-12-04 11:43 48128 ----a-w- c:\windows\system32\imgutil.dll
2013-12-04 11:43 . 2013-12-04 11:43 453120 ----a-w- c:\windows\system32\dxtmsft.dll
2013-12-04 11:43 . 2013-12-04 11:43 413696 ----a-w- c:\windows\system32\html.iec
2013-12-04 11:43 . 2013-12-04 11:43 40448 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-04 11:43 . 2013-12-04 11:43 36352 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-12-04 11:43 . 2013-12-04 11:43 34816 ----a-w- c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-12-04 11:43 . 2013-12-04 11:43 337408 ----a-w- c:\windows\SysWow64\html.iec
2013-12-04 11:43 . 2013-12-04 11:43 30208 ----a-w- c:\windows\system32\licmgr10.dll
2013-12-04 11:43 . 2013-12-04 11:43 296960 ----a-w- c:\windows\system32\dxtrans.dll
2013-12-04 11:43 . 2013-12-04 11:43 263376 ----a-w- c:\windows\system32\iedkcs32.dll
2013-12-04 11:43 . 2013-12-04 11:43 247808 ----a-w- c:\windows\system32\msls31.dll
2013-12-04 11:43 . 2013-12-04 11:43 24576 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-12-04 11:43 . 2013-12-04 11:43 243200 ----a-w- c:\windows\system32\webcheck.dll
2013-12-04 11:43 . 2013-12-04 11:43 235520 ----a-w- c:\windows\system32\url.dll
2013-12-04 11:43 . 2013-12-04 11:43 235008 ----a-w- c:\windows\system32\elshyph.dll
2013-12-04 11:43 . 2013-12-04 11:43 182272 ----a-w- c:\windows\SysWow64\msls31.dll
2013-12-04 11:43 . 2013-12-04 11:43 167424 ----a-w- c:\windows\system32\iexpress.exe
2013-12-04 11:43 . 2013-12-04 11:43 151552 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-12-04 11:43 . 2013-12-04 11:43 147968 ----a-w- c:\windows\system32\occache.dll
2013-12-04 11:43 . 2013-12-04 11:43 143872 ----a-w- c:\windows\system32\wextract.exe
2013-12-04 11:43 . 2013-12-04 11:43 139264 ----a-w- c:\windows\SysWow64\wextract.exe
2013-12-04 11:43 . 2013-12-04 11:43 13824 ----a-w- c:\windows\system32\mshta.exe
2013-12-04 11:43 . 2013-12-04 11:43 135680 ----a-w- c:\windows\system32\iepeers.dll
2013-12-04 11:43 . 2013-12-04 11:43 13312 ----a-w- c:\windows\SysWow64\mshta.exe
2013-12-04 11:43 . 2013-12-04 11:43 13312 ----a-w- c:\windows\system32\msfeedssync.exe
2013-12-04 11:43 . 2013-12-04 11:43 131072 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-12-04 11:43 . 2013-12-04 11:43 1228800 ----a-w- c:\windows\system32\mshtmlmedia.dll
2013-12-04 11:43 . 2013-12-04 11:43 111616 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-12-04 11:43 . 2013-12-04 11:43 105984 ----a-w- c:\windows\system32\iesysprep.dll
2013-12-04 11:43 . 2013-12-04 11:43 1051136 ----a-w- c:\windows\SysWow64\mshtmlmedia.dll
2013-12-04 11:43 . 2013-12-04 11:43 101376 ----a-w- c:\windows\system32\inseng.dll
2013-11-27 01:41 . 2014-01-15 05:55 343040 ----a-w- c:\windows\system32\drivers\usbhub.sys
2013-11-27 01:41 . 2014-01-15 05:55 99840 ----a-w- c:\windows\system32\drivers\usbccgp.sys
2013-11-27 01:41 . 2014-01-15 05:55 53248 ----a-w- c:\windows\system32\drivers\usbehci.sys
2013-11-27 01:41 . 2014-01-15 05:55 325120 ----a-w- c:\windows\system32\drivers\usbport.sys
2013-11-27 01:41 . 2014-01-15 05:55 25600 ----a-w- c:\windows\system32\drivers\usbohci.sys
2013-11-27 01:41 . 2014-01-15 05:55 30720 ----a-w- c:\windows\system32\drivers\usbuhci.sys
2013-11-27 01:41 . 2014-01-15 05:55 7808 ----a-w- c:\windows\system32\drivers\usbd.sys
2013-11-26 11:40 . 2014-01-15 05:55 376768 ----a-w- c:\windows\system32\drivers\netio.sys
2013-11-26 10:32 . 2014-01-15 05:55 3156480 ----a-w- c:\windows\system32\win32k.sys
2013-11-23 18:26 . 2013-12-12 05:20 417792 ----a-w- c:\windows\SysWow64\WMPhoto.dll
2013-11-23 17:47 . 2013-12-12 05:20 465920 ----a-w- c:\windows\system32\WMPhoto.dll
2013-11-21 18:39 . 2012-11-13 17:30 177752 ----a-w- c:\windows\system32\drivers\SYMEVENT64x86.SYS
.
.
(((((((((((((((((((((((((((( Autostartpunkte der Registrierung ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{E6062A33-016E-4BDA-A6F1-890D989F8656}]
2014-01-29 11:41 438784 ----a-w- c:\program files (x86)\HD Streamer\ScriptHost.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NextLive"="c:\users\Besitzer\AppData\Roaming\newnext.me\nengine.dll" [2014-01-06 1283584]
"HD Streamer Sync"="c:\users\Besitzer\AppData\Local\HD Streamer\crxmon.exe" [2014-01-15 128952]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288]
"TrueImageMonitor.exe"="c:\program files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" [2009-08-28 5078416]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-10-11 59280]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Spyder3Utility.lnk - c:\program files (x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility.exe [2009-8-11 6798714]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"TkBellExe"="c:\program files (x86)\real\realplayer\Update\realsched.exe" -osboot
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Freemake Improver;Freemake Improver;c:\programdata\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe;c:\programdata\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [x]
R3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys;c:\windows\SYSNATIVE\DRIVERS\afcdp.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys;c:\windows\SYSNATIVE\drivers\IntcHdmi.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Spyder3;Datacolor Spyder3;c:\windows\system32\DRIVERS\Spyder3.sys;c:\windows\SYSNATIVE\DRIVERS\Spyder3.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R4 afcdpsrv;Acronis Nonstop Backup service;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1501000.012\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1501000.012\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1501000.012\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1501000.012\SYMEFA64.SYS [x]
S0 tdrpman251;Acronis Try&Decide and Restore Points filter (build 251);c:\windows\system32\DRIVERS\tdrpm251.sys;c:\windows\SYSNATIVE\DRIVERS\tdrpm251.sys [x]
S1 BHDrvx64;BHDrvx64;c:\program files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140121.001\BHDrvx64.sys;c:\program files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140121.001\BHDrvx64.sys [x]
S1 ccSet_NIS;NIS Settings Manager;c:\windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\NISx64\1501000.012\ccSetx64.sys [x]
S1 IDSVia64;IDSVia64;c:\program files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140217.001\IDSvia64.sys;c:\program files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140217.001\IDSvia64.sys [x]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1501000.012\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1501000.012\Ironx64.SYS [x]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1501000.012\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\NISx64\1501000.012\SYMNETS.SYS [x]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe;c:\program files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [x]
S2 UniversalUpdater;Universal Updater Service;c:\program files (x86)\Universal Updater\UpdaterService.exe;c:\program files (x86)\Universal Updater\UpdaterService.exe [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2014-02-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-04 05:52]
.
2014-02-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-07 06:53]
.
2014-02-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-07 06:53]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E6062A33-016E-4BDA-A6F1-890D989F8656}]
2014-01-29 11:41 425984 ----a-w- c:\program files (x86)\HD Streamer\ScriptHost64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WrtMon.exe"="c:\windows\system32\spool\drivers\x64\3\WrtMon.exe" [2006-09-20 20480]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-10-13 162584]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-10-13 386840]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-10-13 417560]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
uSearchAssistant = hxxp://www.google.com
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant =
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\
FF - prefs.js: browser.startup.homepage -
FF - ExtSQL: 2014-01-23 09:23; hd_streamer@iMedia; c:\users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\extensions\hd_streamer@iMedia
FF - ExtSQL: 2014-01-23 09:44; {5bdc670b-611f-628a-a97d-b1af013e3718}; c:\users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\extensions\{5bdc670b-611f-628a-a97d-b1af013e3718}
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-10 - (no file)
Toolbar-{48586425-6bb7-4f51-8dc6-38c88e3ebb58} - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-10 - (no file)
AddRemove-STANLY Track - c:\windows\system32\javaws.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\21.1.0.18\diMaster.dll\" /prefetch:1"
"ImagePath"="\SystemRoot\System32\Drivers\NISx64\1501000.012\SYMNETS.SYS"
"TrustedImagePaths"="c:\program files (x86)\Norton Internet Security\Engine\21.1.0.18;c:\program files (x86)\Norton Internet Security\Engine64\21.1.0.18"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\ B*e*s*s*e*r*e* *I*n*f*o*r*m*a*t*i*o*n*s*q*u*e*l*l*e*n*\Diskuss. mit arab. Welt]
"Order"=hex:08,00,00,00,02,00,00,00,0c,00,00,00,01,00,00,00,00,00,00,00
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\ B*e*s*s*e*r*e* *I*n*f*o*r*m*a*t*i*o*n*s*q*u*e*l*l*e*n*\Info Quellen Nahost]
"Order"=hex:08,00,00,00,02,00,00,00,0c,00,00,00,01,00,00,00,00,00,00,00
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\ B*e*s*s*e*r*e* *I*n*f*o*r*m*a*t*i*o*n*s*q*u*e*l*l*e*n*\INFORMATIONSQUELLEN]
"Order"=hex:08,00,00,00,02,00,00,00,0c,00,00,00,01,00,00,00,00,00,00,00
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\ B*e*s*s*e*r*e* *I*n*f*o*r*m*a*t*i*o*n*s*q*u*e*l*l*e*n*\neutrale Medien-INFO-QUELLEN]
"Order"=hex:08,00,00,00,02,00,00,00,0c,00,00,00,01,00,00,00,00,00,00,00
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\ B*e*s*s*e*r*e* *I*n*f*o*r*m*a*t*i*o*n*s*q*u*e*l*l*e*n*\Seriöse, objektive Berichterstattung - gute Frage.net]
"Order"=hex:08,00,00,00,02,00,00,00,0c,00,00,00,01,00,00,00,00,00,00,00
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID]
@DACL=(02 0000)
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_26"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_26"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_27"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_27"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_28"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_28"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_29"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_29"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_30"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_30"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_31"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_31"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_32"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_32"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_33"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_33"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_34"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_34"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_35"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_35"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_36"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_36"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_37"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_37"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_38"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_38"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_39"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_39"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_40"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_40"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_41"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_41"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_42"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_42"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_43"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_43"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_26"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_26"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_26"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_27"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_27"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_27"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_28"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_28"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_28"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_29"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_29"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_29"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_30"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_30"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_30"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_31"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_31"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_31"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_32"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_32"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_32"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_33"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_33"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_33"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_34"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_34"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_34"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_35"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_35"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_35"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_36"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_36"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_36"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_37"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_37"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_37"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_38"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_38"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_38"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_39"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_39"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_39"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_40"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_40"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_40"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_41"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_41"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_41"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_42"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_42"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_42"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_43"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_43"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_43"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_44"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_44"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_44"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_45"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_45"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_45"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_46"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_46"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_46"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_47"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_47"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_47"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_48"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_48"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_48"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_49"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_49"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_49"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_50"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_50"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_50"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_51"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_51"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_51"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_26"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_26"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_26"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_27"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_27"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_27"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_28"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_28"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_28"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_29"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_29"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_29"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_30"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_30"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_30"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_31"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_31"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_31"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_32"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_32"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_32"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_33"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_33"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_33"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_34"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_34"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_34"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_35"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_35"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_35"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_36"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_36"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_36"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_37"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_37"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_37"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_38"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_38"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_38"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_39"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_39"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_39"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_40"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_40"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_40"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_41"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_41"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_41"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_42"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_42"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_42"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_43"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_43"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_43"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_44"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_44"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_44"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_45"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_45"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_45"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_46"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_46"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_46"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_47"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_47"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_47"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_48"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_48"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_48"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_49"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_49"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_49"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_50"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_50"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_50"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_51"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_51"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_51"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_02"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-02-18 18:06:33
ComboFix-quarantined-files.txt 2014-02-18 17:06
.
Vor Suchlauf: 9 Verzeichnis(se), 1.435.326.980.096 Bytes frei
Nach Suchlauf: 12 Verzeichnis(se), 1.435.250.413.568 Bytes frei
.
- - End Of File - - B24D4A2FBD461446F49996AE2B918DF7
A36C5E4F47E84449FF07ED3517B43A31 Viele Grüße Frusti Hallo Aneri, es scheinen sich erste Erfolge zu zeigen: Viele (alle?) aggressiven Popups erscheinen derzeit nicht mehr. Allerdings, ein erster Fehler zeigt sich auch: Wenn ich bei Internet Explorer 11 in der Suchleiste einen Begriff - z.B. "Wetter", oder "Marsoberfläche" - eingebe, zeigt er mir kein Ergebnis an. Google Suggestions" macht zwar in einem Aufklapp-Fenster einige Vorschläge, wenn ich die aber anklicke, erscheint ein leeres Fenster! Auch: Der von mir eingestellte Suchanbieter "Wikipedia" ist nicht mehr vorhanden! Aus dem Bereich der gespeicherten "Favoriten" heraus kann ich allerdings Websites aufrufen!? Viele Grüße Frusti Zusatz zu meinem letzten posting: Ich bin durch die fehlende Suchmöglichkeit und auch durch die fehlende Möglichkeit, eingegebene Websites aufrufen zu können, vom Internet ausgesperrt! Wie kann ich das wieder "reparieren"? Leider ist das, was ich z.Zt. überhaupt nicht gebrauchen kann, eingetreten: Die Suche mit Google fällt völlig aus! Die Ursache ist mir grundsätzlich schleierhaft, da ich dies noch nie erlebt habe. "Wikipedia" habe ich wenigstens durch einfaches erneutes Hinzufügen reparieren können. Es war merkwürdigerweise nach dem gestrigen Durchlauf von "Combo" plötzlich weg. Aber bei "Google" haben alle Möglichkeiten versagt. Auch dies ist erst nach dem "Combo-Durchlauf eingetreten.(?) Ich hoffe und bin bei Deiner Kompetenz auch sicher, daß Du einen Weg finden wirst, daß ich sehr bald wieder mit der "Google"-Suche weiterarbeiten kann. |
|
20.02.2014, 14:48
| #12 |
| /// Malwareteam | Popups und Werbung in Internet Explorer 11 nehmen plötzlich überhand HI erstelle bitte ein neues FRST Logfile und poste es hier. Combofix setzt normalerweise Standartwerte für die Suchmaschinen. Wir schauen uns das mal an Kannst du Wikipedia nicht normal aufrufen? |
|
20.02.2014, 16:52
| #13 |
| | Popups und Werbung in Internet Explorer 11 nehmen plötzlich überhand Halo Aneri, ich habe "sehnsüchtig" auf Deine Nachricht gewartet. Ich glaube, wir waren auf einem guten Weg, dann passiert dieses Malheur mit der 'Google-Such-Funktion'. Ich hoffe so sehr, Du kannst mir helfen, daß ich auf den "graden Weg" zurückgelange (ich bin anderweitig in 'heftigen Schwierigkeiten', sodaß mir der PC keinesfalls ausfallen darf!). Kann ich denn irgendetwas falsch gemacht haben? Also: 1.) FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-02-2014
Ran by Besitzer (administrator) on BESITZER-PC on 20-02-2014 16:30:09
Running from C:\Users\Besitzer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ZMPRJ5P
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
() C:\Program Files (x86)\Universal Updater\UpdaterService.exe
() C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
() C:\Users\Besitzer\AppData\Local\HD Streamer\crxmon.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
() C:\Program Files (x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
() C:\Program Files (x86)\HD Streamer\BackgroundHost64.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_12_0_0_44_ActiveX.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [WrtMon.exe] - C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [20480 2006-09-20] ()
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [TrueImageMonitor.exe] - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5078416 2009-08-28] (Acronis)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1654125919-855541359-3433209274-1000\...\Run: [NextLive] - C:\Windows\SysWOW64\rundll32.exe "C:\Users\Besitzer\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKU\S-1-5-21-1654125919-855541359-3433209274-1000\...\Run: [HD Streamer Sync] - C:\Users\Besitzer\AppData\Local\HD Streamer\crxmon.exe [128952 2014-01-15] ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF249114589E0CE01
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {52db1893-8a90-4192-aede-08e00b8f8473} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=100&systemid=473&v=n9602-172&apn_uid=3029124234214494&apn_dtid=BND473&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {52db1893-8a90-4192-aede-08e00b8f8473} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKCU - {7F77D80B-4B89-46CD-B430-59AD534DEAEF} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}
SearchScopes: HKCU - {830039F3-07E5-4C4D-9663-C9743D343886} URL = hxxp://de.wikipedia.org/w/index.php?title=Spezial:Suche&search={searchTerms}
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HD Streamer - {E6062A33-016E-4BDA-A6F1-890D989F8656} - C:\Program Files (x86)\HD Streamer\ScriptHost64.dll (HD Streamer)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HD Streamer - {E6062A33-016E-4BDA-A6F1-890D989F8656} - C:\Program Files (x86)\HD Streamer\ScriptHost.dll (HD Streamer)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - No Name - {48586425-6bb7-4f51-8dc6-38c88e3ebb58} - No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.4.24.0.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Users\Besitzer\Desktop\Programme - ÖFNNEN\Picasa3\npPicasa3.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @real.com/nppl3260;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @VideoDownloadConverter_4z.com/Plugin - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll No File
FF Plugin-x32: @VideoDownloadConverter_ScriptHelper.com/Plugin - C:\Program Files (x86)\VideoDownloadConverter\npVDCPlugin.dll (Mindspark)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\searchplugins\buenosearch.xml
FF Extension: HD Streamer - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\hd_streamer@iMedia [2014-01-23]
FF Extension: Adblock Plus - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-11]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011-04-05]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011-04-06]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} [2011-10-24]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2012-07-02]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-09-24]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2012-11-12]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-05-09]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-05-09]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [2013-11-21]
Chrome:
=======
CHR Extension: (HD Streamer) - C:\Users\Besitzer\AppData\Local\Google\Chrome\User Data\Default\Extensions\oleglodmkonbpfmlffapjfednjopbeeh [2014-01-22]
CHR HKLM-x32\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2011-12-22]
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-12-08]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\Exts\Chrome.crx [2014-01-21]
==================== Services (Whitelisted) =================
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [103936 2014-01-20] (Freemake)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe [275696 2013-10-08] (Symantec Corporation)
S3 Symantec RemoteAssist; C:\Program Files (x86)\Common Files\Symantec Shared\Support Controls\ssrc.exe [394704 2008-01-29] (Symantec, Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2103096 2013-12-18] (TuneUp Software)
R2 UniversalUpdater; C:\Program Files (x86)\Universal Updater\UpdaterService.exe [401336 2014-01-19] ()
==================== Drivers (Whitelisted) ====================
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140214.001\BHDrvx64.sys [1526488 2013-12-18] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2014-02-04] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140219.001\IDSvia64.sys [521944 2014-01-21] (Symantec Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140219.033\ENG64.SYS [126040 2014-02-04] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140219.033\EX64.SYS [2099288 2014-02-04] (Symantec Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 Spyder3; C:\Windows\System32\DRIVERS\Spyder3.sys [15360 2008-09-08] ()
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1501000.012\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-21] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1501000.012\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
R0 tdrpman251; C:\Windows\System32\DRIVERS\tdrpm251.sys [1455648 2012-06-03] (Acronis)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-20 16:25 - 2014-02-20 16:25 - 00010486 _____ () C:\Users\Besitzer\Desktop\Probleme Google.odt
2014-02-20 11:44 - 2014-02-20 11:44 - 00206647 _____ () C:\Users\Besitzer\Desktop\Einen Moment der Ruhe.odt
2014-02-20 09:39 - 2014-02-20 09:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{9D8B4C73-DDCE-4E13-9615-83F75CB8B04D}
2014-02-20 07:34 - 2014-02-20 07:34 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{43FD4C98-9286-41BD-83C4-098FCD67A5DE}
2014-02-20 07:22 - 2013-11-27 00:29 - 05693440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-02-20 07:22 - 2013-11-26 23:49 - 06573056 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-19 17:59 - 2014-02-20 09:29 - 00000280 _____ () C:\Windows\setupact.log
2014-02-19 17:59 - 2014-02-19 17:59 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-19 17:52 - 2014-02-19 17:52 - 01069920 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_reader11_de_mssa_aaa_aih.exe
2014-02-19 12:17 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-02-19 12:17 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-19 12:17 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-19 12:17 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-02-19 12:17 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-02-19 12:17 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-02-19 12:17 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-19 12:17 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-02-19 12:17 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-02-19 12:17 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-02-19 12:17 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-02-19 12:17 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-02-19 12:17 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-02-19 12:17 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-02-19 12:17 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-02-19 12:17 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-02-19 12:16 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-02-19 12:16 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-02-19 07:39 - 2014-02-19 07:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{77F185F0-738D-4C67-B041-E7B4C59808ED}
2014-02-18 21:38 - 2014-02-18 21:38 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{9FA4C146-EEBA-4E4D-BFBF-1FFBB1A381AE}
2014-02-18 21:37 - 2014-02-18 21:37 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{455F7D01-CB43-473E-991A-7EE8C06FF49A}
2014-02-18 21:34 - 2014-02-18 21:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-02-18 18:38 - 2014-02-18 18:39 - 00084347 _____ () C:\Users\Besitzer\Desktop\Iris Berben empfindet Leben ohne Internet als befreiend.odt
2014-02-18 18:06 - 2014-02-18 18:06 - 00115576 _____ () C:\ComboFix.txt
2014-02-18 17:58 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-02-18 17:58 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-02-18 17:58 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-02-18 17:58 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-02-18 17:58 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-02-18 17:58 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-02-18 17:58 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-02-18 17:58 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-02-18 17:57 - 2014-02-18 18:06 - 00000000 ____D () C:\Qoobox
2014-02-18 17:56 - 2014-02-18 18:05 - 00000000 ____D () C:\Windows\erdnt
2014-02-18 12:30 - 2014-02-18 12:30 - 00009900 _____ () C:\Users\Besitzer\Desktop\MediathekView 4.0 Final.odt
2014-02-18 12:16 - 2014-02-18 12:16 - 29640231 _____ () C:\Users\Besitzer\Downloads\MediathekView_4.zip
2014-02-18 11:54 - 2014-02-18 14:12 - 582821958 _____ () C:\Users\Besitzer\Desktop\Der_große_Haushaltscheck-Mikrowellen-344029_3483249.mp4
2014-02-18 11:54 - 2014-02-18 11:54 - 00000000 ____D () C:\Users\Besitzer\MediathekView
2014-02-18 11:38 - 2014-02-18 11:40 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-02-18 11:37 - 2014-02-18 11:37 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-02-18 11:37 - 2014-02-18 11:37 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-02-18 11:37 - 2014-02-18 11:37 - 00000000 ____D () C:\Program Files\Java
2014-02-18 11:31 - 2014-02-18 11:31 - 00022192 _____ () C:\Users\Besitzer\Desktop\ARD Mediathek Download.odt
2014-02-18 09:05 - 2014-02-18 09:06 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{17B7F846-D90A-4D9B-ACF2-3184BA7A8AD5}
2014-02-17 06:44 - 2014-02-17 06:44 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B04677A7-4A84-4891-B8B1-68927CCFC398}
2014-02-16 08:10 - 2014-02-16 08:10 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{133D7684-F07E-40FB-AEC9-CC9009B4C041}
2014-02-15 18:53 - 2014-02-15 18:53 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{EC5BE35E-91CF-4835-9555-E24D0F57A9B0}
2014-02-15 13:47 - 2014-02-15 13:47 - 00000000 ____D () C:\Users\Besitzer\Desktop\Sport-Fitneß
2014-02-15 08:55 - 2014-02-16 12:19 - 00016091 _____ () C:\Users\Besitzer\Desktop\Rückz-Ummelden.odt
2014-02-15 06:52 - 2014-02-15 06:53 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{1B189B65-49A6-47CB-B0EF-55F617D264A3}
2014-02-14 16:58 - 2014-02-14 16:58 - 00010152 _____ () C:\Users\Besitzer\Desktop\Geberth, Wilhelm.odt
2014-02-14 13:57 - 2014-02-14 13:57 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-02-14 13:44 - 2014-02-14 13:44 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\WinRAR
2014-02-14 13:43 - 2014-02-14 13:57 - 00000000 ____D () C:\Program Files\WinRAR
2014-02-14 13:35 - 2014-02-14 13:35 - 00014143 _____ () C:\Users\Besitzer\Desktop\Datei in zip Datei umwandeln.odt
2014-02-14 11:49 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-14 11:49 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-14 06:40 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-14 06:40 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-14 06:40 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-14 06:40 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-14 06:40 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-14 06:40 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-14 06:38 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-14 06:38 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-14 06:38 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-14 06:38 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-14 06:38 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-14 06:38 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-14 06:38 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-14 06:38 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-14 06:38 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-14 06:38 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-14 06:38 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-14 06:38 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-14 06:38 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-14 06:38 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-14 06:38 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-14 06:38 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-14 06:38 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-14 06:38 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-14 06:28 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-14 06:28 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-14 06:28 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-14 06:28 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-14 06:28 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-14 06:28 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-14 06:28 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-14 06:28 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-14 06:28 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-14 06:28 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-14 06:28 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-14 06:28 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-14 06:28 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-14 06:28 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-14 06:28 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-14 06:28 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-14 06:28 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-14 06:28 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-14 06:28 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-14 06:28 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-14 06:28 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-14 06:28 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-14 06:28 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-14 06:28 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-14 06:28 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-14 06:28 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-14 06:28 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-14 06:28 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-14 06:28 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-14 06:28 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-14 06:28 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-14 06:28 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-14 06:28 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-14 06:28 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-14 06:28 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-14 06:28 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-14 06:28 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-14 06:28 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-14 06:28 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-13 18:02 - 2014-02-13 18:02 - 00000000 ____D () C:\Windows\ERUNT
2014-02-13 17:50 - 2014-02-13 17:51 - 00000000 ____D () C:\AdwCleaner
2014-02-13 17:18 - 2014-02-13 17:18 - 00014505 _____ () C:\Users\Besitzer\Desktop\Waschvollautomat.odt
2014-02-13 09:38 - 2014-02-13 09:38 - 00033919 _____ () C:\Users\Besitzer\Desktop\FRST Scan result.odt
2014-02-13 09:32 - 2014-02-20 16:30 - 00000000 ____D () C:\FRST
2014-02-11 08:41 - 2014-02-11 08:43 - 00049026 _____ () C:\Users\Besitzer\Desktop\Schauspielerin Iris Berben genießt Offline-Dasein.odt
2014-02-10 20:41 - 2014-02-10 20:41 - 00016802 _____ () C:\Users\Besitzer\Desktop\ebay-Schuhregal.odt
2014-02-10 13:44 - 2014-02-10 13:44 - 00000000 ____D () C:\Program Files (x86)\buenosearch LTD
2014-02-10 13:43 - 2014-02-10 13:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\buenosearch LTD
2014-02-10 09:05 - 2014-02-14 16:53 - 00015905 _____ () C:\Users\Besitzer\Desktop\Langensch.-Vokabel-PC Span-Dt..odt
2014-02-09 08:58 - 2014-02-09 09:00 - 00519719 _____ () C:\Users\Besitzer\Desktop\URUK - 5000 Jahre Megacity.odt
2014-02-09 08:04 - 2014-02-09 08:04 - 00337136 _____ () C:\Users\Besitzer\Desktop\Fürstenberg Porzellan gr. Bonboniere.odt
2014-02-08 13:04 - 2014-02-08 13:06 - 00027856 _____ () C:\Users\Besitzer\Desktop\Mit Scholl-Latour im Libanon.odt
2014-02-06 18:06 - 2014-02-06 18:06 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-02-06 18:05 - 2014-02-07 06:07 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-04 15:37 - 2014-02-04 15:37 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 - Verknüpfung
2014-02-04 10:42 - 2014-02-04 10:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\OpenOffice
2014-02-04 10:41 - 2014-02-04 14:24 - 00000000 ___SD () C:\Program Files (x86)\OpenOffice 4.0.1
2014-02-04 10:40 - 2014-02-04 10:40 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-04 08:45 - 2014-02-20 16:25 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine-1
2014-02-02 19:57 - 2014-02-02 19:57 - 00000000 ____D () C:\Program Files (x86)\HD Streamer
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Program Files (x86)\VideoDownloadConverter
2014-02-02 11:16 - 2014-02-02 15:14 - 00000000 ____D () C:\Users\Besitzer\Desktop\Psycho
2014-02-02 11:12 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Fotos
2014-02-02 11:09 - 2014-02-19 15:14 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine
2014-02-01 17:15 - 2014-02-01 17:15 - 00011303 _____ () C:\Users\Besitzer\Desktop\a) Anzüge.odt
2014-01-29 17:37 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-3
2014-01-29 17:28 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-2
2014-01-29 10:29 - 2014-01-29 10:29 - 00024872 _____ () C:\Users\Besitzer\Desktop\Verrückt nach Meer-Sendefolge.odt
2014-01-28 17:29 - 2014-01-28 17:29 - 00025284 _____ () C:\Users\Besitzer\Desktop\Tea Time.odt
2014-01-27 13:08 - 2014-01-27 13:08 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Ashampoo
2014-01-27 13:07 - 2014-01-27 13:07 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-01-27 13:00 - 2014-01-27 13:03 - 384551131 _____ () C:\Users\Besitzer\Downloads\Plácido Domingo at Loreley 2013.mp4
2014-01-23 09:49 - 2014-01-23 09:54 - 00000048 _____ () C:\RB.rdat
2014-01-23 09:49 - 2014-01-23 09:54 - 00000048 _____ () C:\License_Time.rdat
2014-01-23 09:49 - 2014-01-23 09:49 - 00000000 ____D () C:\ProgramData\FileCure
2014-01-23 09:47 - 2014-01-23 09:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\FreemakeVideoConverter
2014-01-23 09:45 - 2014-01-23 09:45 - 01071000 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_flashplayer12x32_mssa_aaa_aih(1).exe
2014-01-23 09:45 - 2014-01-23 09:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Macromedia
2014-01-23 09:39 - 2014-01-23 09:39 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-22 11:31 - 2014-02-20 11:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\newnext.me
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\Documents\Mobogenie
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\HD Streamer
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\genienext
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\.android
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Program Files (x86)\Universal Updater
2014-01-22 11:30 - 2014-01-22 11:32 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
==================== One Month Modified Files and Folders =======
2014-02-20 16:30 - 2014-02-13 09:32 - 00000000 ____D () C:\FRST
2014-02-20 16:25 - 2014-02-20 16:25 - 00010486 _____ () C:\Users\Besitzer\Desktop\Probleme Google.odt
2014-02-20 16:25 - 2014-02-04 08:45 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine-1
2014-02-20 16:25 - 2011-05-12 17:37 - 36243968 ___SH () C:\Users\Besitzer\Desktop\Thumbs.db
2014-02-20 16:16 - 2012-12-07 07:53 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-20 16:05 - 2012-10-04 19:30 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-20 14:43 - 2013-11-13 17:06 - 00003954 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{083BECD6-A6F2-4401-A905-5865C87918C6}
2014-02-20 14:30 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-20 14:18 - 2011-04-04 11:29 - 01297709 _____ () C:\Windows\WindowsUpdate.log
2014-02-20 14:17 - 2012-12-07 07:53 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-20 13:00 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-20 11:44 - 2014-02-20 11:44 - 00206647 _____ () C:\Users\Besitzer\Desktop\Einen Moment der Ruhe.odt
2014-02-20 11:15 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\newnext.me
2014-02-20 09:39 - 2014-02-20 09:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{9D8B4C73-DDCE-4E13-9615-83F75CB8B04D}
2014-02-20 09:36 - 2009-07-14 05:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-20 09:36 - 2009-07-14 05:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-20 09:29 - 2014-02-19 17:59 - 00000280 _____ () C:\Windows\setupact.log
2014-02-20 09:29 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-20 07:34 - 2014-02-20 07:34 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{43FD4C98-9286-41BD-83C4-098FCD67A5DE}
2014-02-19 17:59 - 2014-02-19 17:59 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-19 17:55 - 2013-09-14 09:44 - 07813846 _____ () C:\Users\Besitzer\Downloads\iv_formats.zip
2014-02-19 17:52 - 2014-02-19 17:52 - 01069920 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_reader11_de_mssa_aaa_aih.exe
2014-02-19 15:14 - 2014-02-02 11:09 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine
2014-02-19 07:39 - 2014-02-19 07:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{77F185F0-738D-4C67-B041-E7B4C59808ED}
2014-02-18 21:38 - 2014-02-18 21:38 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{9FA4C146-EEBA-4E4D-BFBF-1FFBB1A381AE}
2014-02-18 21:37 - 2014-02-18 21:37 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{455F7D01-CB43-473E-991A-7EE8C06FF49A}
2014-02-18 21:34 - 2014-02-18 21:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-02-18 21:30 - 2011-04-29 07:04 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Google
2014-02-18 18:39 - 2014-02-18 18:38 - 00084347 _____ () C:\Users\Besitzer\Desktop\Iris Berben empfindet Leben ohne Internet als befreiend.odt
2014-02-18 18:06 - 2014-02-18 18:06 - 00115576 _____ () C:\ComboFix.txt
2014-02-18 18:06 - 2014-02-18 17:57 - 00000000 ____D () C:\Qoobox
2014-02-18 18:06 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-02-18 18:05 - 2014-02-18 17:56 - 00000000 ____D () C:\Windows\erdnt
2014-02-18 18:04 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-02-18 14:12 - 2014-02-18 11:54 - 582821958 _____ () C:\Users\Besitzer\Desktop\Der_große_Haushaltscheck-Mikrowellen-344029_3483249.mp4
2014-02-18 14:11 - 2012-12-07 07:53 - 00004110 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-18 14:11 - 2012-12-07 07:53 - 00003858 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-18 14:09 - 2013-09-23 11:36 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\vlc
2014-02-18 12:30 - 2014-02-18 12:30 - 00009900 _____ () C:\Users\Besitzer\Desktop\MediathekView 4.0 Final.odt
2014-02-18 12:16 - 2014-02-18 12:16 - 29640231 _____ () C:\Users\Besitzer\Downloads\MediathekView_4.zip
2014-02-18 12:14 - 2011-04-04 11:29 - 00000000 ____D () C:\Users\Besitzer
2014-02-18 12:07 - 2012-04-16 15:58 - 00041472 ___SH () C:\Users\Besitzer\Downloads\Thumbs.db
2014-02-18 11:54 - 2014-02-18 11:54 - 00000000 ____D () C:\Users\Besitzer\MediathekView
2014-02-18 11:49 - 2013-12-25 10:08 - 00000000 ____D () C:\Users\Besitzer\.mediathek3
2014-02-18 11:44 - 2013-10-21 09:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-18 11:40 - 2014-02-18 11:38 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-02-18 11:37 - 2014-02-18 11:37 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-02-18 11:37 - 2014-02-18 11:37 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-02-18 11:37 - 2014-02-18 11:37 - 00000000 ____D () C:\Program Files\Java
2014-02-18 11:31 - 2014-02-18 11:31 - 00022192 _____ () C:\Users\Besitzer\Desktop\ARD Mediathek Download.odt
2014-02-18 10:21 - 2009-07-14 18:58 - 00667970 _____ () C:\Windows\system32\perfh007.dat
2014-02-18 10:21 - 2009-07-14 18:58 - 00136714 _____ () C:\Windows\system32\perfc007.dat
2014-02-18 10:21 - 2009-07-14 06:13 - 01537850 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-18 09:06 - 2014-02-18 09:05 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{17B7F846-D90A-4D9B-ACF2-3184BA7A8AD5}
2014-02-17 08:10 - 2012-12-10 07:41 - 00000000 ____D () C:\Users\Besitzer\Desktop\Programme
2014-02-17 06:44 - 2014-02-17 06:44 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B04677A7-4A84-4891-B8B1-68927CCFC398}
2014-02-16 12:19 - 2014-02-15 08:55 - 00016091 _____ () C:\Users\Besitzer\Desktop\Rückz-Ummelden.odt
2014-02-16 09:35 - 2013-08-14 20:13 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-16 09:33 - 2011-04-04 14:51 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-16 09:11 - 2014-01-17 20:55 - 00000000 ____D () C:\Users\Besitzer\Desktop\Ostpreußen_Danzig-Königsberg_DAMALS
2014-02-16 08:10 - 2014-02-16 08:10 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{133D7684-F07E-40FB-AEC9-CC9009B4C041}
2014-02-15 18:53 - 2014-02-15 18:53 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{EC5BE35E-91CF-4835-9555-E24D0F57A9B0}
2014-02-15 15:00 - 2012-06-03 19:14 - 00003012 _____ () C:\Windows\System32\Tasks\{1F7E5E00-647A-47E6-9221-252E2625D665}
2014-02-15 13:56 - 2014-01-18 10:41 - 00013065 _____ () C:\Users\Besitzer\Desktop\Hochzeit im Walde.odt
2014-02-15 13:47 - 2014-02-15 13:47 - 00000000 ____D () C:\Users\Besitzer\Desktop\Sport-Fitneß
2014-02-15 13:43 - 2013-02-21 07:57 - 00000000 ____D () C:\Users\Besitzer\Desktop\Reisen, Events
2014-02-15 13:42 - 2013-12-18 10:22 - 00000000 ____D () C:\Users\Besitzer\Desktop\ASTRO
2014-02-15 06:53 - 2014-02-15 06:52 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{1B189B65-49A6-47CB-B0EF-55F617D264A3}
2014-02-14 17:22 - 2011-04-10 09:40 - 00000000 ____D () C:\Users\Besitzer\Desktop\HAUPTORDNER
2014-02-14 17:19 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2014-02-14 17:09 - 2012-04-08 15:19 - 00000000 ____D () C:\Program Files (x86)\CatchtheSperm
2014-02-14 16:58 - 2014-02-14 16:58 - 00010152 _____ () C:\Users\Besitzer\Desktop\Geberth, Wilhelm.odt
2014-02-14 16:53 - 2014-02-10 09:05 - 00015905 _____ () C:\Users\Besitzer\Desktop\Langensch.-Vokabel-PC Span-Dt..odt
2014-02-14 13:57 - 2014-02-14 13:57 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-02-14 13:57 - 2014-02-14 13:43 - 00000000 ____D () C:\Program Files\WinRAR
2014-02-14 13:44 - 2014-02-14 13:44 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\WinRAR
2014-02-14 13:35 - 2014-02-14 13:35 - 00014143 _____ () C:\Users\Besitzer\Desktop\Datei in zip Datei umwandeln.odt
2014-02-13 18:02 - 2014-02-13 18:02 - 00000000 ____D () C:\Windows\ERUNT
2014-02-13 17:51 - 2014-02-13 17:50 - 00000000 ____D () C:\AdwCleaner
2014-02-13 17:18 - 2014-02-13 17:18 - 00014505 _____ () C:\Users\Besitzer\Desktop\Waschvollautomat.odt
2014-02-13 09:38 - 2014-02-13 09:38 - 00033919 _____ () C:\Users\Besitzer\Desktop\FRST Scan result.odt
2014-02-13 06:34 - 2011-04-07 17:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\CrashDumps
2014-02-12 18:01 - 2011-05-15 07:22 - 00000000 ____D () C:\Users\Besitzer\Desktop\Video
2014-02-11 08:43 - 2014-02-11 08:41 - 00049026 _____ () C:\Users\Besitzer\Desktop\Schauspielerin Iris Berben genießt Offline-Dasein.odt
2014-02-10 20:41 - 2014-02-10 20:41 - 00016802 _____ () C:\Users\Besitzer\Desktop\ebay-Schuhregal.odt
2014-02-10 13:44 - 2014-02-10 13:44 - 00000000 ____D () C:\Program Files (x86)\buenosearch LTD
2014-02-10 13:43 - 2014-02-10 13:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\buenosearch LTD
2014-02-09 09:00 - 2014-02-09 08:58 - 00519719 _____ () C:\Users\Besitzer\Desktop\URUK - 5000 Jahre Megacity.odt
2014-02-09 08:04 - 2014-02-09 08:04 - 00337136 _____ () C:\Users\Besitzer\Desktop\Fürstenberg Porzellan gr. Bonboniere.odt
2014-02-09 06:08 - 2011-04-10 09:40 - 00000000 ____D () C:\Users\Besitzer\Desktop\Kleidung, Access., Einlegesohlen
2014-02-08 13:06 - 2014-02-08 13:04 - 00027856 _____ () C:\Users\Besitzer\Desktop\Mit Scholl-Latour im Libanon.odt
2014-02-08 10:45 - 2013-11-30 08:00 - 00000000 ____D () C:\Users\Besitzer\Desktop\GARTEN
2014-02-07 08:54 - 2012-01-13 20:55 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-02-07 08:07 - 2011-04-06 10:33 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Windows Live
2014-02-07 06:07 - 2014-02-06 18:05 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-06 18:06 - 2014-02-06 18:06 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-02-06 13:16 - 2014-02-14 06:28 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-14 06:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-14 06:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-14 06:28 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-14 06:28 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-14 06:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-14 06:28 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-14 06:28 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-14 06:28 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-14 06:28 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-14 06:28 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-14 06:28 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-14 06:28 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-14 06:28 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-14 06:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-14 06:28 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-14 06:28 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-14 06:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-14 06:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-14 06:28 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-14 06:28 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-14 06:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-14 06:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-14 06:28 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-14 06:28 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-14 06:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-14 06:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-14 06:28 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-14 06:28 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-14 06:28 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-14 06:28 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-14 06:28 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-14 06:28 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-14 06:28 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-14 06:28 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-14 06:28 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-14 06:28 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-14 06:28 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-14 06:28 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-06 06:52 - 2012-10-04 19:30 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-06 06:52 - 2012-10-04 19:29 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-06 06:52 - 2012-10-04 19:29 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-05 15:17 - 2013-08-24 09:25 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-1
2014-02-05 12:22 - 2011-04-21 17:51 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Stellarium
2014-02-05 12:22 - 2011-04-21 17:50 - 00000000 ____D () C:\Program Files\Stellarium
2014-02-04 18:38 - 2013-09-08 07:01 - 00289784 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-04 18:11 - 2011-04-05 09:54 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-04 15:37 - 2014-02-04 15:37 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 - Verknüpfung
2014-02-04 14:32 - 2011-04-04 11:29 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-04 14:24 - 2014-02-04 10:41 - 00000000 ___SD () C:\Program Files (x86)\OpenOffice 4.0.1
2014-02-04 12:06 - 2012-06-13 17:06 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\NPE
2014-02-04 11:31 - 2013-09-07 17:04 - 00064768 _____ () C:\Users\Besitzer\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-04 10:42 - 2014-02-04 10:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\OpenOffice
2014-02-04 10:40 - 2014-02-04 10:40 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-03 11:52 - 2014-02-02 11:12 - 00000000 ____D () C:\Users\Besitzer\Desktop\Fotos
2014-02-03 11:52 - 2014-01-29 17:37 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-3
2014-02-03 11:52 - 2014-01-29 17:28 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-2
2014-02-02 19:57 - 2014-02-02 19:57 - 00000000 ____D () C:\Program Files (x86)\HD Streamer
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Program Files (x86)\VideoDownloadConverter
2014-02-02 15:14 - 2014-02-02 11:16 - 00000000 ____D () C:\Users\Besitzer\Desktop\Psycho
2014-02-02 15:10 - 2013-10-10 10:39 - 00017877 _____ () C:\Users\Besitzer\Desktop\Piaf-Konzert.odt
2014-02-02 14:49 - 2013-11-22 10:43 - 00000000 ____D () C:\Users\Besitzer\Desktop\Mnünzen
2014-02-01 17:15 - 2014-02-01 17:15 - 00011303 _____ () C:\Users\Besitzer\Desktop\a) Anzüge.odt
2014-01-31 06:31 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-29 10:29 - 2014-01-29 10:29 - 00024872 _____ () C:\Users\Besitzer\Desktop\Verrückt nach Meer-Sendefolge.odt
2014-01-28 22:49 - 2013-09-23 08:21 - 00000000 ____D () C:\Program Files (x86)\StreamTransport
2014-01-28 17:29 - 2014-01-28 17:29 - 00025284 _____ () C:\Users\Besitzer\Desktop\Tea Time.odt
2014-01-27 17:26 - 2011-04-07 17:06 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-27 13:08 - 2014-01-27 13:08 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Ashampoo
2014-01-27 13:07 - 2014-01-27 13:07 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-01-27 13:03 - 2014-01-27 13:00 - 384551131 _____ () C:\Users\Besitzer\Downloads\Plácido Domingo at Loreley 2013.mp4
2014-01-23 09:54 - 2014-01-23 09:49 - 00000048 _____ () C:\RB.rdat
2014-01-23 09:54 - 2014-01-23 09:49 - 00000048 _____ () C:\License_Time.rdat
2014-01-23 09:49 - 2014-01-23 09:49 - 00000000 ____D () C:\ProgramData\FileCure
2014-01-23 09:47 - 2014-01-23 09:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\FreemakeVideoConverter
2014-01-23 09:46 - 2011-04-05 10:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Adobe
2014-01-23 09:45 - 2014-01-23 09:45 - 01071000 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_flashplayer12x32_mssa_aaa_aih(1).exe
2014-01-23 09:45 - 2014-01-23 09:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Macromedia
2014-01-23 09:44 - 2011-12-22 15:27 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2014-01-23 09:44 - 2011-12-22 15:27 - 00000000 ____D () C:\ProgramData\Freemake
2014-01-23 09:39 - 2014-01-23 09:39 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-23 07:08 - 2011-04-08 09:59 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-01-22 13:23 - 2013-08-31 13:51 - 00000000 ____D () C:\Users\Besitzer\Documents\Freemake
2014-01-22 12:30 - 2011-12-22 15:27 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-01-22 11:32 - 2014-01-22 11:30 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
2014-01-22 11:32 - 2013-11-20 15:06 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Mobogenie
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\Documents\Mobogenie
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\HD Streamer
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\genienext
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\.android
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Program Files (x86)\Universal Updater
2014-01-21 06:41 - 2012-04-02 18:34 - 00000000 ____D () C:\Users\Besitzer\Desktop\Interessenbereiche -Definierung-
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-02-18 09:25
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- 2.) Die Sache mit der Suchfunktion muß ich mittlerweile relativieren: Suche mit 'Wikipedia' funktioniert einwandfrei, ebenso z.B. Suche mit einem anderen Suchanbieter: 'Yahoo'. Bei 'Google': Ich gebe z.B. das Wort 'Advent' ein, dann erscheint ein weißes Hauptfenster und ganz oben, rechts neben der Stelle, wo ich die Sucheingabe mache, erscheint "Leere Seite". Markiere ich dann "Advent' und klicke in dem gleichen Suchfenster auf die Lupe, erscheint 'Advent' und davor ein 'Fragezeichen' ?? 3.) Die Sache mit den zahlreichen PopUp's ist leider wieder wie früher, also sehr 'nervig'! Gerne erwarte ich Deine Antwort. Gruß Frusti |
|
20.02.2014, 17:03
| #14 |
| /// Malwareteam | Popups und Werbung in Internet Explorer 11 nehmen plötzlich überhand Hi Schitt 1: Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter Task: {BAAEA414-656B-4B5A-A5CF-DA3D254B63ED} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION
Task: {5BE15600-93E5-4A44-AB01-C17D071D0C86} - System32\Tasks\5021 => Wscript.exe C:\Users\Besitzer\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schitt 2: Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schitt 3: erstell ein neues FRST Logfile und poste es hier |
|
20.02.2014, 18:00
| #15 |
| | Popups und Werbung in Internet Explorer 11 nehmen plötzlich überhand Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 18-02-2014 Ran by Besitzer at 2014-02-20 17:36:31 Run:1 Running from C:\Users\Besitzer\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** Task: {BAAEA414-656B-4B5A-A5CF-DA3D254B63ED} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION Task: {5BE15600-93E5-4A44-AB01-C17D071D0C86} - System32\Tasks\5021 => Wscript.exe C:\Users\Besitzer\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION ***************** HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BAAEA414-656B-4B5A-A5CF-DA3D254B63ED} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BAAEA414-656B-4B5A-A5CF-DA3D254B63ED} => Key deleted successfully. C:\Windows\System32\Tasks\0 => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\0 => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5BE15600-93E5-4A44-AB01-C17D071D0C86} => Key deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5BE15600-93E5-4A44-AB01-C17D071D0C86} => Key deleted successfully. C:\Windows\System32\Tasks\5021 => Moved successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\5021 => Key deleted successfully. ==== End of Fixlog ==== Soweit für dieses. Ich soll ja lt. Anweisung alle offenen Fenster für Adwcleaner schließen, deshalb folgt eine Unterbrechung des Posts. 2.)AdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.019 - Bericht erstellt am 20/02/2014 um 17:46:29
# Aktualisiert 17/02/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Besitzer - BESITZER-PC
# Gestartet von : C:\Users\Besitzer\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\ProgramData\WinMaximizer
Ordner Gelöscht : C:\Program Files (x86)\Mobogenie
Ordner Gelöscht : C:\Program Files (x86)\VideoDownloadConverter
Ordner Gelöscht : C:\Users\Besitzer\AppData\Local\genienext
Ordner Gelöscht : C:\Users\Besitzer\AppData\Local\Mobogenie
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\newnext.me
Ordner Gelöscht : C:\Users\Besitzer\Documents\Mobogenie
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\somotomoviestoolbar1
Datei Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\invalidprefs.js
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter.ScriptHelper
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter.ScriptHelper.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ToolbarProtector
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ToolbarProtector.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@VideoDownloadConverter_4z.com/Plugin
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@VideoDownloadConverter_ScriptHelper.com/Plugin
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3719959C-1CCD-4FA7-8EBB-7D9DED86FCCB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3D429207-4689-492D-A0E5-CDC5DFBB5005}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{84B7B98F-E018-4DBB-AB4C-4DDD3DFCB5FB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8A4E8BCB-5598-4CAF-9DEC-4D452760E28D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A86782D8-7B41-452F-A217-1854F72DBA54}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FF48DBA6-5DD8-4D10-9EB0-0FA968502E66}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{385F1935-3784-48D0-A61F-6385493DED3C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8A4E8BCB-5598-4CAF-9DEC-4D452760E28D}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A86782D8-7B41-452F-A217-1854F72DBA54}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A86782D8-7B41-452F-A217-1854F72DBA54}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2D6F0AC3-0C2E-4E07-8FDA-11268AB51211}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3444C3C5-6C56-4A16-A453-832B05BF6EA4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3D429207-4689-492D-A0E5-CDC5DFBB5005}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{48586425-6BB7-4F51-8DC6-38C88E3EBB58}]
Schlüssel Gelöscht : HKCU\Software\VideoDownloadConverter_4z
Schlüssel Gelöscht : HKCU\Software\WinMaximizer
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\VideoDownloadConverter_4z
Schlüssel Gelöscht : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\Software\SafetyNut
Schlüssel Gelöscht : HKLM\Software\Uniblue
Schlüssel Gelöscht : HKLM\Software\VideoDownloadConverter
Schlüssel Gelöscht : HKLM\Software\VideoDownloadConverter_4z
Schlüssel Gelöscht : HKLM\Software\WinMaximizer
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VideoDownloadConverter
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16518
-\\ Mozilla Firefox v5.0.1 (de)
[ Datei : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\prefs.js ]
-\\ Google Chrome v
[ Datei : C:\Users\Besitzer\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [31815 octets] - [13/02/2014 17:51:02]
AdwCleaner[R1].txt - [4695 octets] - [20/02/2014 17:45:20]
AdwCleaner[S0].txt - [30155 octets] - [13/02/2014 17:51:45]
AdwCleaner[S1].txt - [4509 octets] - [20/02/2014 17:46:29]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [4569 octets] ##########
============================ 3.) FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-02-2014
Ran by Besitzer (administrator) on BESITZER-PC on 20-02-2014 17:52:28
Running from C:\Users\Besitzer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0WTXAZZ9
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forums
==================== Processes (Whitelisted) =================
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
() C:\Program Files (x86)\Universal Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
() C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
() C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Users\Besitzer\AppData\Local\HD Streamer\crxmon.exe
() C:\Program Files (x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
() C:\Program Files (x86)\HD Streamer\BackgroundHost64.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_12_0_0_44_ActiveX.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(Farbar) C:\Users\Besitzer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0WTXAZZ9\FRST64 (1).exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [WrtMon.exe] - C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [20480 2006-09-20] ()
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [TrueImageMonitor.exe] - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5078416 2009-08-28] (Acronis)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1654125919-855541359-3433209274-1000\...\Run: [HD Streamer Sync] - C:\Users\Besitzer\AppData\Local\HD Streamer\crxmon.exe [128952 2014-01-15] ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF249114589E0CE01
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {52db1893-8a90-4192-aede-08e00b8f8473} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=100&systemid=473&v=n9602-172&apn_uid=3029124234214494&apn_dtid=BND473&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {52db1893-8a90-4192-aede-08e00b8f8473} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKCU - {7F77D80B-4B89-46CD-B430-59AD534DEAEF} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}
SearchScopes: HKCU - {830039F3-07E5-4C4D-9663-C9743D343886} URL = hxxp://de.wikipedia.org/w/index.php?title=Spezial:Suche&search={searchTerms}
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HD Streamer - {E6062A33-016E-4BDA-A6F1-890D989F8656} - C:\Program Files (x86)\HD Streamer\ScriptHost64.dll (HD Streamer)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HD Streamer - {E6062A33-016E-4BDA-A6F1-890D989F8656} - C:\Program Files (x86)\HD Streamer\ScriptHost.dll (HD Streamer)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.4.24.0.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Users\Besitzer\Desktop\Programme - ÖFNNEN\Picasa3\npPicasa3.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @real.com/nppl3260;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\searchplugins\buenosearch.xml
FF Extension: HD Streamer - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\hd_streamer@iMedia [2014-01-23]
FF Extension: Adblock Plus - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-11]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011-04-05]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011-04-06]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} [2011-10-24]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2012-07-02]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-09-24]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2012-11-12]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-05-09]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-05-09]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [2013-11-21]
Chrome:
=======
CHR Extension: (HD Streamer) - C:\Users\Besitzer\AppData\Local\Google\Chrome\User Data\Default\Extensions\oleglodmkonbpfmlffapjfednjopbeeh [2014-01-22]
CHR HKLM-x32\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2011-12-22]
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-12-08]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\Exts\Chrome.crx [2014-01-21]
==================== Services (Whitelisted) =================
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [103936 2014-01-20] (Freemake)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe [275696 2013-10-08] (Symantec Corporation)
S3 Symantec RemoteAssist; C:\Program Files (x86)\Common Files\Symantec Shared\Support Controls\ssrc.exe [394704 2008-01-29] (Symantec, Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2103096 2013-12-18] (TuneUp Software)
R2 UniversalUpdater; C:\Program Files (x86)\Universal Updater\UpdaterService.exe [401336 2014-01-19] ()
==================== Drivers (Whitelisted) ====================
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140214.001\BHDrvx64.sys [1526488 2013-12-18] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2014-02-04] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140219.001\IDSvia64.sys [521944 2014-01-21] (Symantec Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140219.033\ENG64.SYS [126040 2014-02-04] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140219.033\EX64.SYS [2099288 2014-02-04] (Symantec Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 Spyder3; C:\Windows\System32\DRIVERS\Spyder3.sys [15360 2008-09-08] ()
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1501000.012\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-21] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1501000.012\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
R0 tdrpman251; C:\Windows\System32\DRIVERS\tdrpm251.sys [1455648 2012-06-03] (Acronis)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-20 17:44 - 2014-02-20 17:44 - 01241834 _____ () C:\Users\Besitzer\Desktop\adwcleaner.exe
2014-02-20 17:41 - 2014-02-20 17:41 - 01241834 _____ () C:\Users\Besitzer\Downloads\adwcleaner.exe
2014-02-20 17:36 - 2014-02-20 17:36 - 02153472 _____ (Farbar) C:\Users\Besitzer\Desktop\FRST64.exe
2014-02-20 16:25 - 2014-02-20 16:25 - 00010486 _____ () C:\Users\Besitzer\Desktop\Probleme Google.odt
2014-02-20 11:44 - 2014-02-20 11:44 - 00206647 _____ () C:\Users\Besitzer\Desktop\Einen Moment der Ruhe.odt
2014-02-20 09:39 - 2014-02-20 09:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{9D8B4C73-DDCE-4E13-9615-83F75CB8B04D}
2014-02-20 07:34 - 2014-02-20 07:34 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{43FD4C98-9286-41BD-83C4-098FCD67A5DE}
2014-02-20 07:22 - 2013-11-27 00:29 - 05693440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-02-20 07:22 - 2013-11-26 23:49 - 06573056 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-19 17:59 - 2014-02-20 17:48 - 00000336 _____ () C:\Windows\setupact.log
2014-02-19 17:59 - 2014-02-19 17:59 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-19 17:52 - 2014-02-19 17:52 - 01069920 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_reader11_de_mssa_aaa_aih.exe
2014-02-19 12:17 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-02-19 12:17 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-19 12:17 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-19 12:17 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-02-19 12:17 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-02-19 12:17 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-02-19 12:17 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-19 12:17 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-02-19 12:17 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-02-19 12:17 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-02-19 12:17 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-02-19 12:17 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-02-19 12:17 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-02-19 12:17 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-02-19 12:17 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-02-19 12:17 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-02-19 12:16 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-02-19 12:16 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-02-19 07:39 - 2014-02-19 07:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{77F185F0-738D-4C67-B041-E7B4C59808ED}
2014-02-18 21:38 - 2014-02-18 21:38 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{9FA4C146-EEBA-4E4D-BFBF-1FFBB1A381AE}
2014-02-18 21:37 - 2014-02-18 21:37 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{455F7D01-CB43-473E-991A-7EE8C06FF49A}
2014-02-18 21:34 - 2014-02-18 21:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-02-18 18:38 - 2014-02-18 18:39 - 00084347 _____ () C:\Users\Besitzer\Desktop\Iris Berben empfindet Leben ohne Internet als befreiend.odt
2014-02-18 18:06 - 2014-02-18 18:06 - 00115576 _____ () C:\ComboFix.txt
2014-02-18 17:58 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-02-18 17:58 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-02-18 17:58 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-02-18 17:58 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-02-18 17:58 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-02-18 17:58 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-02-18 17:58 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-02-18 17:58 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-02-18 17:57 - 2014-02-18 18:06 - 00000000 ____D () C:\Qoobox
2014-02-18 17:56 - 2014-02-18 18:05 - 00000000 ____D () C:\Windows\erdnt
2014-02-18 12:30 - 2014-02-18 12:30 - 00009900 _____ () C:\Users\Besitzer\Desktop\MediathekView 4.0 Final.odt
2014-02-18 12:16 - 2014-02-18 12:16 - 29640231 _____ () C:\Users\Besitzer\Downloads\MediathekView_4.zip
2014-02-18 11:54 - 2014-02-18 14:12 - 582821958 _____ () C:\Users\Besitzer\Desktop\Der_große_Haushaltscheck-Mikrowellen-344029_3483249.mp4
2014-02-18 11:54 - 2014-02-18 11:54 - 00000000 ____D () C:\Users\Besitzer\MediathekView
2014-02-18 11:38 - 2014-02-18 11:40 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-02-18 11:37 - 2014-02-18 11:37 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-02-18 11:37 - 2014-02-18 11:37 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-02-18 11:37 - 2014-02-18 11:37 - 00000000 ____D () C:\Program Files\Java
2014-02-18 11:31 - 2014-02-18 11:31 - 00022192 _____ () C:\Users\Besitzer\Desktop\ARD Mediathek Download.odt
2014-02-18 09:05 - 2014-02-18 09:06 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{17B7F846-D90A-4D9B-ACF2-3184BA7A8AD5}
2014-02-17 06:44 - 2014-02-17 06:44 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B04677A7-4A84-4891-B8B1-68927CCFC398}
2014-02-16 08:10 - 2014-02-16 08:10 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{133D7684-F07E-40FB-AEC9-CC9009B4C041}
2014-02-15 18:53 - 2014-02-15 18:53 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{EC5BE35E-91CF-4835-9555-E24D0F57A9B0}
2014-02-15 13:47 - 2014-02-15 13:47 - 00000000 ____D () C:\Users\Besitzer\Desktop\Sport-Fitneß
2014-02-15 08:55 - 2014-02-16 12:19 - 00016091 _____ () C:\Users\Besitzer\Desktop\Rückz-Ummelden.odt
2014-02-15 06:52 - 2014-02-15 06:53 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{1B189B65-49A6-47CB-B0EF-55F617D264A3}
2014-02-14 16:58 - 2014-02-14 16:58 - 00010152 _____ () C:\Users\Besitzer\Desktop\Geberth, Wilhelm.odt
2014-02-14 13:57 - 2014-02-14 13:57 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-02-14 13:44 - 2014-02-14 13:44 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\WinRAR
2014-02-14 13:43 - 2014-02-14 13:57 - 00000000 ____D () C:\Program Files\WinRAR
2014-02-14 13:35 - 2014-02-14 13:35 - 00014143 _____ () C:\Users\Besitzer\Desktop\Datei in zip Datei umwandeln.odt
2014-02-14 11:49 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-14 11:49 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-14 06:40 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-14 06:40 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-14 06:40 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-14 06:40 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-14 06:40 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-14 06:40 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-14 06:38 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-14 06:38 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-14 06:38 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-14 06:38 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-14 06:38 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-14 06:38 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-14 06:38 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-14 06:38 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-14 06:38 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-14 06:38 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-14 06:38 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-14 06:38 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-14 06:38 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-14 06:38 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-14 06:38 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-14 06:38 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-14 06:38 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-14 06:38 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-14 06:28 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-14 06:28 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-14 06:28 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-14 06:28 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-14 06:28 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-14 06:28 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-14 06:28 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-14 06:28 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-14 06:28 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-14 06:28 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-14 06:28 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-14 06:28 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-14 06:28 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-14 06:28 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-14 06:28 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-14 06:28 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-14 06:28 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-14 06:28 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-14 06:28 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-14 06:28 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-14 06:28 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-14 06:28 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-14 06:28 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-14 06:28 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-14 06:28 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-14 06:28 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-14 06:28 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-14 06:28 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-14 06:28 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-14 06:28 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-14 06:28 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-14 06:28 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-14 06:28 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-14 06:28 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-14 06:28 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-14 06:28 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-14 06:28 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-14 06:28 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-14 06:28 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-13 18:02 - 2014-02-13 18:02 - 00000000 ____D () C:\Windows\ERUNT
2014-02-13 17:50 - 2014-02-20 17:46 - 00000000 ____D () C:\AdwCleaner
2014-02-13 17:18 - 2014-02-13 17:18 - 00014505 _____ () C:\Users\Besitzer\Desktop\Waschvollautomat.odt
2014-02-13 09:38 - 2014-02-13 09:38 - 00033919 _____ () C:\Users\Besitzer\Desktop\FRST Scan result.odt
2014-02-13 09:32 - 2014-02-20 17:52 - 00000000 ____D () C:\FRST
2014-02-11 08:41 - 2014-02-11 08:43 - 00049026 _____ () C:\Users\Besitzer\Desktop\Schauspielerin Iris Berben genießt Offline-Dasein.odt
2014-02-10 20:41 - 2014-02-10 20:41 - 00016802 _____ () C:\Users\Besitzer\Desktop\ebay-Schuhregal.odt
2014-02-10 13:44 - 2014-02-10 13:44 - 00000000 ____D () C:\Program Files (x86)\buenosearch LTD
2014-02-10 13:43 - 2014-02-10 13:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\buenosearch LTD
2014-02-10 09:05 - 2014-02-14 16:53 - 00015905 _____ () C:\Users\Besitzer\Desktop\Langensch.-Vokabel-PC Span-Dt..odt
2014-02-09 08:58 - 2014-02-09 09:00 - 00519719 _____ () C:\Users\Besitzer\Desktop\URUK - 5000 Jahre Megacity.odt
2014-02-09 08:04 - 2014-02-09 08:04 - 00337136 _____ () C:\Users\Besitzer\Desktop\Fürstenberg Porzellan gr. Bonboniere.odt
2014-02-08 13:04 - 2014-02-08 13:06 - 00027856 _____ () C:\Users\Besitzer\Desktop\Mit Scholl-Latour im Libanon.odt
2014-02-06 18:06 - 2014-02-06 18:06 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-02-06 18:05 - 2014-02-07 06:07 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-04 15:37 - 2014-02-04 15:37 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 - Verknüpfung
2014-02-04 10:42 - 2014-02-04 10:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\OpenOffice
2014-02-04 10:41 - 2014-02-04 14:24 - 00000000 ___SD () C:\Program Files (x86)\OpenOffice 4.0.1
2014-02-04 10:40 - 2014-02-04 10:40 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-04 08:45 - 2014-02-20 16:25 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine-1
2014-02-02 19:57 - 2014-02-02 19:57 - 00000000 ____D () C:\Program Files (x86)\HD Streamer
2014-02-02 11:16 - 2014-02-02 15:14 - 00000000 ____D () C:\Users\Besitzer\Desktop\Psycho
2014-02-02 11:12 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Fotos
2014-02-02 11:09 - 2014-02-19 15:14 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine
2014-02-01 17:15 - 2014-02-01 17:15 - 00011303 _____ () C:\Users\Besitzer\Desktop\a) Anzüge.odt
2014-01-29 17:37 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-3
2014-01-29 17:28 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-2
2014-01-29 10:29 - 2014-01-29 10:29 - 00024872 _____ () C:\Users\Besitzer\Desktop\Verrückt nach Meer-Sendefolge.odt
2014-01-28 17:29 - 2014-01-28 17:29 - 00025284 _____ () C:\Users\Besitzer\Desktop\Tea Time.odt
2014-01-27 13:08 - 2014-01-27 13:08 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Ashampoo
2014-01-27 13:07 - 2014-01-27 13:07 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-01-27 13:00 - 2014-01-27 13:03 - 384551131 _____ () C:\Users\Besitzer\Downloads\Plácido Domingo at Loreley 2013.mp4
2014-01-23 09:49 - 2014-01-23 09:54 - 00000048 _____ () C:\RB.rdat
2014-01-23 09:49 - 2014-01-23 09:54 - 00000048 _____ () C:\License_Time.rdat
2014-01-23 09:49 - 2014-01-23 09:49 - 00000000 ____D () C:\ProgramData\FileCure
2014-01-23 09:47 - 2014-01-23 09:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\FreemakeVideoConverter
2014-01-23 09:45 - 2014-01-23 09:45 - 01071000 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_flashplayer12x32_mssa_aaa_aih(1).exe
2014-01-23 09:45 - 2014-01-23 09:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Macromedia
2014-01-23 09:39 - 2014-01-23 09:39 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\HD Streamer
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\.android
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Program Files (x86)\Universal Updater
==================== One Month Modified Files and Folders =======
2014-02-20 17:52 - 2014-02-13 09:32 - 00000000 ____D () C:\FRST
2014-02-20 17:52 - 2012-10-04 19:30 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-20 17:48 - 2014-02-19 17:59 - 00000336 _____ () C:\Windows\setupact.log
2014-02-20 17:48 - 2012-12-07 07:53 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-20 17:48 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-20 17:47 - 2011-04-04 11:29 - 01305552 _____ () C:\Windows\WindowsUpdate.log
2014-02-20 17:46 - 2014-02-13 17:50 - 00000000 ____D () C:\AdwCleaner
2014-02-20 17:44 - 2014-02-20 17:44 - 01241834 _____ () C:\Users\Besitzer\Desktop\adwcleaner.exe
2014-02-20 17:41 - 2014-02-20 17:41 - 01241834 _____ () C:\Users\Besitzer\Downloads\adwcleaner.exe
2014-02-20 17:36 - 2014-02-20 17:36 - 02153472 _____ (Farbar) C:\Users\Besitzer\Desktop\FRST64.exe
2014-02-20 17:16 - 2012-12-07 07:53 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-20 17:08 - 2011-05-12 17:37 - 36269056 ___SH () C:\Users\Besitzer\Desktop\Thumbs.db
2014-02-20 16:25 - 2014-02-20 16:25 - 00010486 _____ () C:\Users\Besitzer\Desktop\Probleme Google.odt
2014-02-20 16:25 - 2014-02-04 08:45 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine-1
2014-02-20 14:43 - 2013-11-13 17:06 - 00003954 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{083BECD6-A6F2-4401-A905-5865C87918C6}
2014-02-20 14:30 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-20 13:00 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-20 11:44 - 2014-02-20 11:44 - 00206647 _____ () C:\Users\Besitzer\Desktop\Einen Moment der Ruhe.odt
2014-02-20 09:39 - 2014-02-20 09:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{9D8B4C73-DDCE-4E13-9615-83F75CB8B04D}
2014-02-20 09:36 - 2009-07-14 05:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-20 09:36 - 2009-07-14 05:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-20 07:34 - 2014-02-20 07:34 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{43FD4C98-9286-41BD-83C4-098FCD67A5DE}
2014-02-19 17:59 - 2014-02-19 17:59 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-19 17:55 - 2013-09-14 09:44 - 07813846 _____ () C:\Users\Besitzer\Downloads\iv_formats.zip
2014-02-19 17:52 - 2014-02-19 17:52 - 01069920 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_reader11_de_mssa_aaa_aih.exe
2014-02-19 15:14 - 2014-02-02 11:09 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine
2014-02-19 07:39 - 2014-02-19 07:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{77F185F0-738D-4C67-B041-E7B4C59808ED}
2014-02-18 21:38 - 2014-02-18 21:38 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{9FA4C146-EEBA-4E4D-BFBF-1FFBB1A381AE}
2014-02-18 21:37 - 2014-02-18 21:37 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{455F7D01-CB43-473E-991A-7EE8C06FF49A}
2014-02-18 21:34 - 2014-02-18 21:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-02-18 21:30 - 2011-04-29 07:04 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Google
2014-02-18 18:39 - 2014-02-18 18:38 - 00084347 _____ () C:\Users\Besitzer\Desktop\Iris Berben empfindet Leben ohne Internet als befreiend.odt
2014-02-18 18:06 - 2014-02-18 18:06 - 00115576 _____ () C:\ComboFix.txt
2014-02-18 18:06 - 2014-02-18 17:57 - 00000000 ____D () C:\Qoobox
2014-02-18 18:06 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-02-18 18:05 - 2014-02-18 17:56 - 00000000 ____D () C:\Windows\erdnt
2014-02-18 18:04 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-02-18 14:12 - 2014-02-18 11:54 - 582821958 _____ () C:\Users\Besitzer\Desktop\Der_große_Haushaltscheck-Mikrowellen-344029_3483249.mp4
2014-02-18 14:11 - 2012-12-07 07:53 - 00004110 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-18 14:11 - 2012-12-07 07:53 - 00003858 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-18 14:09 - 2013-09-23 11:36 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\vlc
2014-02-18 12:30 - 2014-02-18 12:30 - 00009900 _____ () C:\Users\Besitzer\Desktop\MediathekView 4.0 Final.odt
2014-02-18 12:16 - 2014-02-18 12:16 - 29640231 _____ () C:\Users\Besitzer\Downloads\MediathekView_4.zip
2014-02-18 12:14 - 2011-04-04 11:29 - 00000000 ____D () C:\Users\Besitzer
2014-02-18 12:07 - 2012-04-16 15:58 - 00041472 ___SH () C:\Users\Besitzer\Downloads\Thumbs.db
2014-02-18 11:54 - 2014-02-18 11:54 - 00000000 ____D () C:\Users\Besitzer\MediathekView
2014-02-18 11:49 - 2013-12-25 10:08 - 00000000 ____D () C:\Users\Besitzer\.mediathek3
2014-02-18 11:44 - 2013-10-21 09:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-18 11:40 - 2014-02-18 11:38 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-02-18 11:37 - 2014-02-18 11:37 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-02-18 11:37 - 2014-02-18 11:37 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-02-18 11:37 - 2014-02-18 11:37 - 00000000 ____D () C:\Program Files\Java
2014-02-18 11:31 - 2014-02-18 11:31 - 00022192 _____ () C:\Users\Besitzer\Desktop\ARD Mediathek Download.odt
2014-02-18 10:21 - 2009-07-14 18:58 - 00667970 _____ () C:\Windows\system32\perfh007.dat
2014-02-18 10:21 - 2009-07-14 18:58 - 00136714 _____ () C:\Windows\system32\perfc007.dat
2014-02-18 10:21 - 2009-07-14 06:13 - 01537850 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-18 09:06 - 2014-02-18 09:05 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{17B7F846-D90A-4D9B-ACF2-3184BA7A8AD5}
2014-02-17 08:10 - 2012-12-10 07:41 - 00000000 ____D () C:\Users\Besitzer\Desktop\Programme
2014-02-17 06:44 - 2014-02-17 06:44 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B04677A7-4A84-4891-B8B1-68927CCFC398}
2014-02-16 12:19 - 2014-02-15 08:55 - 00016091 _____ () C:\Users\Besitzer\Desktop\Rückz-Ummelden.odt
2014-02-16 09:35 - 2013-08-14 20:13 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-16 09:33 - 2011-04-04 14:51 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-16 09:11 - 2014-01-17 20:55 - 00000000 ____D () C:\Users\Besitzer\Desktop\Ostpreußen_Danzig-Königsberg_DAMALS
2014-02-16 08:10 - 2014-02-16 08:10 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{133D7684-F07E-40FB-AEC9-CC9009B4C041}
2014-02-15 18:53 - 2014-02-15 18:53 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{EC5BE35E-91CF-4835-9555-E24D0F57A9B0}
2014-02-15 15:00 - 2012-06-03 19:14 - 00003012 _____ () C:\Windows\System32\Tasks\{1F7E5E00-647A-47E6-9221-252E2625D665}
2014-02-15 13:56 - 2014-01-18 10:41 - 00013065 _____ () C:\Users\Besitzer\Desktop\Hochzeit im Walde.odt
2014-02-15 13:47 - 2014-02-15 13:47 - 00000000 ____D () C:\Users\Besitzer\Desktop\Sport-Fitneß
2014-02-15 13:43 - 2013-02-21 07:57 - 00000000 ____D () C:\Users\Besitzer\Desktop\Reisen, Events
2014-02-15 13:42 - 2013-12-18 10:22 - 00000000 ____D () C:\Users\Besitzer\Desktop\ASTRO
2014-02-15 06:53 - 2014-02-15 06:52 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{1B189B65-49A6-47CB-B0EF-55F617D264A3}
2014-02-14 17:22 - 2011-04-10 09:40 - 00000000 ____D () C:\Users\Besitzer\Desktop\HAUPTORDNER
2014-02-14 17:19 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2014-02-14 17:09 - 2012-04-08 15:19 - 00000000 ____D () C:\Program Files (x86)\CatchtheSperm
2014-02-14 16:58 - 2014-02-14 16:58 - 00010152 _____ () C:\Users\Besitzer\Desktop\Geberth, Wilhelm.odt
2014-02-14 16:53 - 2014-02-10 09:05 - 00015905 _____ () C:\Users\Besitzer\Desktop\Langensch.-Vokabel-PC Span-Dt..odt
2014-02-14 13:57 - 2014-02-14 13:57 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-02-14 13:57 - 2014-02-14 13:43 - 00000000 ____D () C:\Program Files\WinRAR
2014-02-14 13:44 - 2014-02-14 13:44 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\WinRAR
2014-02-14 13:35 - 2014-02-14 13:35 - 00014143 _____ () C:\Users\Besitzer\Desktop\Datei in zip Datei umwandeln.odt
2014-02-13 18:02 - 2014-02-13 18:02 - 00000000 ____D () C:\Windows\ERUNT
2014-02-13 17:18 - 2014-02-13 17:18 - 00014505 _____ () C:\Users\Besitzer\Desktop\Waschvollautomat.odt
2014-02-13 09:38 - 2014-02-13 09:38 - 00033919 _____ () C:\Users\Besitzer\Desktop\FRST Scan result.odt
2014-02-13 06:34 - 2011-04-07 17:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\CrashDumps
2014-02-12 18:01 - 2011-05-15 07:22 - 00000000 ____D () C:\Users\Besitzer\Desktop\Video
2014-02-11 08:43 - 2014-02-11 08:41 - 00049026 _____ () C:\Users\Besitzer\Desktop\Schauspielerin Iris Berben genießt Offline-Dasein.odt
2014-02-10 20:41 - 2014-02-10 20:41 - 00016802 _____ () C:\Users\Besitzer\Desktop\ebay-Schuhregal.odt
2014-02-10 13:44 - 2014-02-10 13:44 - 00000000 ____D () C:\Program Files (x86)\buenosearch LTD
2014-02-10 13:43 - 2014-02-10 13:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\buenosearch LTD
2014-02-09 09:00 - 2014-02-09 08:58 - 00519719 _____ () C:\Users\Besitzer\Desktop\URUK - 5000 Jahre Megacity.odt
2014-02-09 08:04 - 2014-02-09 08:04 - 00337136 _____ () C:\Users\Besitzer\Desktop\Fürstenberg Porzellan gr. Bonboniere.odt
2014-02-09 06:08 - 2011-04-10 09:40 - 00000000 ____D () C:\Users\Besitzer\Desktop\Kleidung, Access., Einlegesohlen
2014-02-08 13:06 - 2014-02-08 13:04 - 00027856 _____ () C:\Users\Besitzer\Desktop\Mit Scholl-Latour im Libanon.odt
2014-02-08 10:45 - 2013-11-30 08:00 - 00000000 ____D () C:\Users\Besitzer\Desktop\GARTEN
2014-02-07 08:54 - 2012-01-13 20:55 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-02-07 08:07 - 2011-04-06 10:33 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Windows Live
2014-02-07 06:07 - 2014-02-06 18:05 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-06 18:06 - 2014-02-06 18:06 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-02-06 13:16 - 2014-02-14 06:28 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-14 06:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-14 06:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-14 06:28 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-14 06:28 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-14 06:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-14 06:28 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-14 06:28 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-14 06:28 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-14 06:28 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-14 06:28 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-14 06:28 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-14 06:28 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-14 06:28 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-14 06:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-14 06:28 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-14 06:28 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-14 06:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-14 06:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-14 06:28 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-14 06:28 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-14 06:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-14 06:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-14 06:28 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-14 06:28 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-14 06:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-14 06:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-14 06:28 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-14 06:28 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-14 06:28 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-14 06:28 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-14 06:28 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-14 06:28 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-14 06:28 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-14 06:28 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-14 06:28 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-14 06:28 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-14 06:28 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-14 06:28 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-06 06:52 - 2012-10-04 19:30 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-06 06:52 - 2012-10-04 19:29 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-06 06:52 - 2012-10-04 19:29 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-05 15:17 - 2013-08-24 09:25 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-1
2014-02-05 12:22 - 2011-04-21 17:51 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Stellarium
2014-02-05 12:22 - 2011-04-21 17:50 - 00000000 ____D () C:\Program Files\Stellarium
2014-02-04 18:38 - 2013-09-08 07:01 - 00289784 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-04 18:11 - 2011-04-05 09:54 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-04 15:37 - 2014-02-04 15:37 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 - Verknüpfung
2014-02-04 14:32 - 2011-04-04 11:29 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-04 14:24 - 2014-02-04 10:41 - 00000000 ___SD () C:\Program Files (x86)\OpenOffice 4.0.1
2014-02-04 12:06 - 2012-06-13 17:06 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\NPE
2014-02-04 11:31 - 2013-09-07 17:04 - 00064768 _____ () C:\Users\Besitzer\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-04 10:42 - 2014-02-04 10:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\OpenOffice
2014-02-04 10:40 - 2014-02-04 10:40 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-03 11:52 - 2014-02-02 11:12 - 00000000 ____D () C:\Users\Besitzer\Desktop\Fotos
2014-02-03 11:52 - 2014-01-29 17:37 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-3
2014-02-03 11:52 - 2014-01-29 17:28 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-2
2014-02-02 19:57 - 2014-02-02 19:57 - 00000000 ____D () C:\Program Files (x86)\HD Streamer
2014-02-02 15:14 - 2014-02-02 11:16 - 00000000 ____D () C:\Users\Besitzer\Desktop\Psycho
2014-02-02 15:10 - 2013-10-10 10:39 - 00017877 _____ () C:\Users\Besitzer\Desktop\Piaf-Konzert.odt
2014-02-02 14:49 - 2013-11-22 10:43 - 00000000 ____D () C:\Users\Besitzer\Desktop\Mnünzen
2014-02-01 17:15 - 2014-02-01 17:15 - 00011303 _____ () C:\Users\Besitzer\Desktop\a) Anzüge.odt
2014-01-31 06:31 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-29 10:29 - 2014-01-29 10:29 - 00024872 _____ () C:\Users\Besitzer\Desktop\Verrückt nach Meer-Sendefolge.odt
2014-01-28 22:49 - 2013-09-23 08:21 - 00000000 ____D () C:\Program Files (x86)\StreamTransport
2014-01-28 17:29 - 2014-01-28 17:29 - 00025284 _____ () C:\Users\Besitzer\Desktop\Tea Time.odt
2014-01-27 17:26 - 2011-04-07 17:06 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-27 13:08 - 2014-01-27 13:08 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Ashampoo
2014-01-27 13:07 - 2014-01-27 13:07 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-01-27 13:03 - 2014-01-27 13:00 - 384551131 _____ () C:\Users\Besitzer\Downloads\Plácido Domingo at Loreley 2013.mp4
2014-01-23 09:54 - 2014-01-23 09:49 - 00000048 _____ () C:\RB.rdat
2014-01-23 09:54 - 2014-01-23 09:49 - 00000048 _____ () C:\License_Time.rdat
2014-01-23 09:49 - 2014-01-23 09:49 - 00000000 ____D () C:\ProgramData\FileCure
2014-01-23 09:47 - 2014-01-23 09:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\FreemakeVideoConverter
2014-01-23 09:46 - 2011-04-05 10:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Adobe
2014-01-23 09:45 - 2014-01-23 09:45 - 01071000 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_flashplayer12x32_mssa_aaa_aih(1).exe
2014-01-23 09:45 - 2014-01-23 09:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Macromedia
2014-01-23 09:44 - 2011-12-22 15:27 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2014-01-23 09:44 - 2011-12-22 15:27 - 00000000 ____D () C:\ProgramData\Freemake
2014-01-23 09:39 - 2014-01-23 09:39 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-23 07:08 - 2011-04-08 09:59 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-01-22 13:23 - 2013-08-31 13:51 - 00000000 ____D () C:\Users\Besitzer\Documents\Freemake
2014-01-22 12:30 - 2011-12-22 15:27 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\HD Streamer
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\.android
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Program Files (x86)\Universal Updater
2014-01-21 06:41 - 2012-04-02 18:34 - 00000000 ____D () C:\Users\Besitzer\Desktop\Interessenbereiche -Definierung-
Some content of TEMP:
====================
C:\Users\Besitzer\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-02-18 09:25
==================== End Of Log ============================
--- --- --- --- --- --- Übrigens: Ich habe heute früh mal den 'Norton Internet Security Scan' laufen lassen: Er berichtete mir von 5 entfernten "Tracking Cookies" ! Gruß Frusti |
|
| Themen zu Popups und Werbung in Internet Explorer 11 nehmen plötzlich überhand |
| abschalten, datenschutz, einstellungen, erhalte, explorer, gen, guten, ie 11, interne, internet, internet explorer, jahres, microsoft, nicht mehr, pcs, plötzlich, popups, problem, schutz, software, technik, vorhanden, werbung, windows, windows 7, würde |
Gruß Aneri 
WARNUNG an die MITLESER: 
Linear-Darstellung
