trivia games - nervendes fenster erscheint immer wieder

Electropuls · 28.07.2015, 00:22

Guten Abend,
ich störe nur ungern die Nachtruhe meine lieben Freunde, aber ich benötige eure Hilfe. Ich muss gestehen, großartig durchgelesen habe ich mich hier nicht, aber ich hoffe ihr nehmt es mir nicht übel, wenn dieses Thema schon mal dran war. Also:
Egal ob ich einen Film gucke, im Internet surfe oder einfach nur aufm Destop bin, es erscheint ca. alle Zehn Minuten ein kleines Fenster unten rechts mit einer Telefonnummer und die Frage, ob mein Pc zu langsam wäre. Ganz klein geschrieben: "Gestellt von trivia games".
Ich habe ein aktives Kasperky Programm, doch die Untersuchungen haben nichts ergeben.
Ich bitte um Hilfe, danke.

Gruß
der Bro

schrauber · 28.07.2015, 06:36

hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Electropuls · 02.08.2015, 23:03

guten abend,
ist das normal dass der ständig neue erstellt? oder ist das fortlaufend? der erstellt immer eine frst und eine addition und untersucht dann weiter.
lg

FRST

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:02-08-2015 01
durchgeführt von N1tro (Administrator) auf N1TROGLYZERIEN (02-08-2015 22:57:38)
Gestartet von C:\Users\N1tro\Downloads
Geladene Profile: N1tro & UpdatusUser (Verfügbare Profile: N1tro & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Taiwan Shui Mu Chih Ching Technology Limited.) C:\Program Files (x86)\WinZipper\winzipersvc.exe
() C:\Program Files (x86)\Monster Shopping\monster_shopping_helper_service.exe
(FileProperties_CompanyName) C:\Program Files (x86)\trivia games\trivia_games_notification_service.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
() C:\Program Files (x86)\Hotkey\PowerBiosServer.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Spotify Ltd) C:\Users\N1tro\AppData\Roaming\Spotify\SpotifyWebHelper.exe
() C:\Users\N1tro\AppData\Local\Amazon Music\Amazon Music Helper.exe
(Valve Corporation) F:\steam\Steam.exe
() C:\Program Files (x86)\Hotkey\Hotkey.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Super PC Tools Ltd) C:\ProgramData\{a940e77c-981e-25f6-a940-0e77c9819df2}\hqghumeaylnlf.exe
(Valve Corporation) F:\steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\HpqSRmon.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuSchd2.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Spotify Ltd) C:\Users\N1tro\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Apple Inc.) C:\Program Files\iTunes\iTunes.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\distnoted.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Spotify Ltd) C:\Users\N1tro\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\N1tro\AppData\Roaming\Spotify\SpotifyCrashService.exe
(Spotify Ltd) C:\Users\N1tro\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\N1tro\AppData\Roaming\Spotify\Spotify.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2328360 2010-09-16] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11775592 2011-01-26] (Realtek Semiconductor)
HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2011-01-05] (Intel(R) Corporation)
HKLM\...\Run: [THXCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170280 2015-07-11] (Apple Inc.)
HKLM-x32\...\Run: [THX Audio Control Panel] => C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [1374720 2010-11-01] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-04-30] (Intel Corporation)
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\...\Run: [Spotify Web Helper] => C:\Users\N1tro\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2021944 2015-05-31] (Spotify Ltd)
HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\...\Run: [Amazon Music] => C:\Users\N1tro\AppData\Local\Amazon Music\Amazon Music Helper.exe [6277952 2014-12-08] ()
HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\...\Run: [Spotify] => C:\Users\N1tro\AppData\Roaming\Spotify\Spotify.exe [7323192 2015-05-31] (Spotify Ltd)
HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\...\Run: [UpdateAdmin] => C:\Users\N1tro\AppData\Local\UpdateAdmin\UpdateAdmin.exe [225552 2014-10-16] (DownloadAdmin)
HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\...\Run: [Steam] => F:\steam\steam.exe [2895552 2015-07-24] (Valve Corporation)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-09-08] (Microsoft Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [201320 2011-08-03] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hotkey.lnk [2014-09-02]
ShortcutTarget: Hotkey.lnk -> C:\Program Files (x86)\Hotkey\Hotkey.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2014-10-29]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\N1tro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk [2015-04-29]
ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{a940e77c-981e-25f6-a940-0e77c9819df2}\hqghumeaylnlf.exe (Super PC Tools Ltd)
CHR HKLM\SOFTWARE\Policies\Google: Richtlinienbeschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1409778935&from=adks&uid=WDCXWD3200BEKT-60PVMT0_WD-WX11A81J4024J4024&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1409778935&from=adks&uid=WDCXWD3200BEKT-60PVMT0_WD-WX11A81J4024J4024&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1409778935&from=adks&uid=WDCXWD3200BEKT-60PVMT0_WD-WX11A81J4024J4024&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1409778935&from=adks&uid=WDCXWD3200BEKT-60PVMT0_WD-WX11A81J4024J4024&q={searchTerms}
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.delta-homes.com/web/?type=ds&ts=1418813419&from=wpm12173&uid=WDCXWD3200BEKT-60PVMT0_WD-WX11A81J4024J4024&q={searchTerms}
HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.delta-homes.com/web/?type=ds&ts=1418813419&from=wpm12173&uid=WDCXWD3200BEKT-60PVMT0_WD-WX11A81J4024J4024&q={searchTerms}
HKU\S-1-5-21-3492612163-2341442985-4162812709-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
HKU\S-1-5-21-3492612163-2341442985-4162812709-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
URLSearchHook: HKU\S-1-5-21-3492612163-2341442985-4162812709-1000 - Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files (x86)\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1409778935&from=adks&uid=WDCXWD3200BEKT-60PVMT0_WD-WX11A81J4024J4024&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1409778935&from=adks&uid=WDCXWD3200BEKT-60PVMT0_WD-WX11A81J4024J4024&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1409778935&from=adks&uid=WDCXWD3200BEKT-60PVMT0_WD-WX11A81J4024J4024&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1409778935&from=adks&uid=WDCXWD3200BEKT-60PVMT0_WD-WX11A81J4024J4024&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3492612163-2341442985-4162812709-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.delta-homes.com/web/?utm_source=b&utm_medium=wpm03203&utm_campaign=install_ie&utm_content=ds&from=wpm03203&uid=3219913727_132775_32177771&ts=1426844524&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3492612163-2341442985-4162812709-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.delta-homes.com/web/?utm_source=b&utm_medium=wpm03203&utm_campaign=install_ie&utm_content=ds&from=wpm03203&uid=3219913727_132775_32177771&ts=1426844524&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3492612163-2341442985-4162812709-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.delta-homes.com/web/?utm_source=b&utm_medium=wpm03203&utm_campaign=install_ie&utm_content=ds&from=wpm03203&uid=3219913727_132775_32177771&ts=1426844524&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3492612163-2341442985-4162812709-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.delta-homes.com/web/?utm_source=b&utm_medium=wpm03203&utm_campaign=install_ie&utm_content=ds&from=wpm03203&uid=3219913727_132775_32177771&ts=1426844524&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3492612163-2341442985-4162812709-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.delta-homes.com/web/?utm_source=b&utm_medium=wpm03203&utm_campaign=install_ie&utm_content=ds&from=wpm03203&uid=3219913727_132775_32177771&ts=1426844524&type=default&q={searchTerms}
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{BCEB4ADB-12D2-4A80-8281-C80BAB55764E}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{FB6369E3-C003-4944-ACD8-B1976DD78985}: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\N1tro\AppData\Roaming\Mozilla\Firefox\Profiles\bddbcq0c.default
FF NewTab: hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
FF Homepage: hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-01-06] ()
FF Plugin-x32: @kaspersky.com/content_blocker -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com [2014-10-22] ()
FF Plugin-x32: @kaspersky.com/online_banking -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com [2014-10-22] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-10-22] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [2014-09-03] (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [2014-09-03] (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-23] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-23] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.3 -> F:\vlc\neu\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\N1tro\AppData\Roaming\Mozilla\Firefox\Profiles\bddbcq0c.default\user.js [2015-05-23]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com [2014-09-18]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-09-18]
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com [2014-09-18]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com [2014-09-18]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com [2014-09-18]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-10-29]
FF HKLM-x32\...\Firefox\Extensions: [{C7AE725D-FA5C-4027-BB4C-787EF9F8248A}] - C:\Program Files (x86)\PremierOpinion\firefox
FF Extension: PremierOpinion - C:\Program Files (x86)\PremierOpinion\firefox [2015-05-19]
FF HKLM-x32\...\Firefox\Extensions: [arthurj8283@gmail.com] - C:\Users\N1tro\AppData\Roaming\Mozilla\Firefox\Profiles\bddbcq0c.default\extensions\arthurj8283@gmail.com
FF HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

Chrome: 
=======
CHR Profile: C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Poper Blocker) - C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkkbcggnhapdmkeljlodobbkopceiche [2015-05-23]
CHR Extension: (YouTube) - C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-09-03]
CHR Extension: (Adblock Plus) - C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-05-23]
CHR Extension: (Google Search) - C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-09-03]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-15]
CHR Extension: (PremierOpinion) - C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkndcbhcgphcfkkddanakjiepeknbgle [2015-05-19]
CHR Extension: (Chrome Web Store Payments) - C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-09-03]
CHR Extension: (Gmail) - C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-09-03]
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKLM\...\Chrome\Extension: [noajmlkipclmeolfcnflkjhijkigpfjh] - C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Extensions\noajmlkipclmeolfcnflkjhijkigpfjh.crx [2014-12-17]
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKLM-x32\...\Chrome\Extension: [mkndcbhcgphcfkkddanakjiepeknbgle] - C:\Program Files (x86)\PremierOpinion\pmcm.crx [2015-05-19]
CHR HKLM-x32\...\Chrome\Extension: [noajmlkipclmeolfcnflkjhijkigpfjh] - C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Extensions\noajmlkipclmeolfcnflkjhijkigpfjh.crx [2014-12-17]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)
R2 AVP15.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe [233552 2014-04-20] (Kaspersky Lab ZAO)
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-09-03] (globalUpdate) [Datei ist nicht signiert] <==== ACHTUNG
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-09-03] (globalUpdate) [Datei ist nicht signiert] <==== ACHTUNG
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1037824 2009-09-20] (Hewlett-Packard Co.) [Datei ist nicht signiert]
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-01-05] ()
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [Datei ist nicht signiert]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [Datei ist nicht signiert]
R2 PowerBiosServer; C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [33792 2011-02-15] () [Datei ist nicht signiert]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 winzipersvc; C:\Program Files (x86)\WinZipper\winzipersvc.exe [426128 2015-05-21] (Taiwan Shui Mu Chih Ching Technology Limited.) <==== ACHTUNG

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2014-12-25] (DT Soft Ltd)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [457824 2014-02-20] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [141320 2014-10-22] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [243808 2014-04-10] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [793800 2014-10-22] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2014-03-25] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179296 2014-03-26] (Kaspersky Lab ZAO)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-02 22:57 - 2015-08-02 22:58 - 00027218 _____ C:\Users\N1tro\Downloads\FRST.txt
2015-08-02 22:57 - 2015-08-02 22:57 - 00000000 ____D C:\FRST
2015-08-02 22:56 - 2015-08-02 22:56 - 02169856 _____ (Farbar) C:\Users\N1tro\Downloads\FRST64.exe
2015-08-02 22:31 - 2015-08-02 22:31 - 00000000 ___HD C:\$Windows.~BT
2015-07-28 22:32 - 2015-07-25 20:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-28 22:32 - 2015-07-25 20:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-28 22:32 - 2015-07-25 20:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-28 22:32 - 2015-07-25 20:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-28 22:32 - 2015-07-25 20:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-28 22:32 - 2015-07-25 20:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-28 22:32 - 2015-07-25 20:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-28 22:32 - 2015-07-25 19:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-24 10:35 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-24 10:35 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-24 10:35 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-24 10:35 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-24 10:35 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-24 10:35 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-24 10:35 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-24 10:35 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-24 10:35 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-24 10:35 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-24 10:35 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-24 10:35 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-24 10:35 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-24 10:35 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-24 10:35 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-24 10:35 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-24 10:35 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-24 10:35 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-24 10:35 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-24 10:35 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-24 10:35 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-24 10:35 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-24 10:35 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-24 10:35 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-24 10:35 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-24 10:35 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-24 10:35 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-24 10:35 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-24 10:35 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-24 10:35 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-24 10:35 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-24 10:35 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-24 10:35 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-24 10:35 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-24 10:35 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-24 10:35 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-24 10:35 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-24 10:35 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-24 10:35 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-24 10:35 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-24 10:35 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-24 10:35 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-24 10:35 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-24 10:35 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-24 10:34 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-24 10:34 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-24 10:34 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-24 10:34 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-24 10:34 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-24 10:34 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-24 10:34 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-24 10:34 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-24 10:34 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-24 10:34 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-24 10:34 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-24 10:34 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-24 10:25 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-24 10:25 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-24 10:25 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-24 10:25 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-24 10:25 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-24 10:25 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-24 10:25 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-24 10:25 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-24 10:25 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-24 10:25 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-24 10:25 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-24 10:25 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-24 10:25 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-24 10:25 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-24 10:25 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-24 10:25 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-24 10:25 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-24 10:25 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-24 10:25 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-24 10:25 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-24 10:25 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-24 10:25 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-24 10:25 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-24 10:25 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-24 10:25 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-24 10:25 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-24 10:25 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-24 10:25 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-24 10:25 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-24 10:24 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-24 10:24 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-24 10:24 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-24 10:24 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-24 10:24 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-24 10:24 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-24 10:13 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-24 10:13 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-24 10:13 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-24 10:13 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-24 10:13 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-24 10:13 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-24 10:13 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-24 10:13 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-24 10:13 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-24 10:13 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-24 10:13 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-24 10:13 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-24 10:13 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-24 10:13 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-24 10:13 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-24 10:13 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-24 10:13 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-24 10:13 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-24 10:13 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-24 10:13 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-24 10:13 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-24 10:13 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-24 10:13 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-24 10:13 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-24 10:13 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-24 10:13 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-24 10:13 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-24 10:13 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-24 10:13 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-24 10:12 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-24 10:12 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-24 10:12 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-24 10:12 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-24 10:12 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-24 10:12 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-24 10:12 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-24 10:12 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-24 10:12 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-24 10:12 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-24 10:12 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-24 10:12 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-24 10:12 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-24 10:12 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-24 10:12 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-24 10:12 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-24 10:12 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-24 10:12 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-24 10:12 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-24 10:12 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-24 10:12 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-24 10:12 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-24 10:12 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-24 10:12 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-24 10:12 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-24 10:12 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-24 10:12 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-24 10:12 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-24 10:12 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-24 10:12 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-24 10:12 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-24 09:42 - 2015-07-24 09:42 - 00000000 ____D C:\Users\N1tro\AppData\Local\CEF
2015-07-23 23:58 - 2015-07-23 23:58 - 00001759 _____ C:\Users\Public\Desktop\iTunes.lnk
2015-07-23 23:58 - 2015-07-23 23:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-07-23 23:57 - 2015-07-23 23:58 - 00000000 ____D C:\Program Files\iTunes
2015-07-23 23:57 - 2015-07-23 23:57 - 00000000 ____D C:\Program Files\iPod
2015-07-23 23:57 - 2015-07-23 23:57 - 00000000 ____D C:\Program Files (x86)\iTunes

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-02 22:56 - 2014-09-02 18:43 - 01173679 _____ C:\Windows\WindowsUpdate.log
2015-08-02 22:53 - 2014-12-16 23:45 - 00000000 ____D C:\Users\N1tro\AppData\Local\Spotify
2015-08-02 22:53 - 2014-12-16 23:43 - 00000000 ____D C:\Users\N1tro\AppData\Roaming\Spotify
2015-08-02 22:37 - 2009-07-14 06:45 - 00022832 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-02 22:37 - 2009-07-14 06:45 - 00022832 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-02 22:32 - 2014-09-18 18:52 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2015-08-02 22:32 - 2014-09-03 04:38 - 00000000 ____D C:\Windows\Panther
2015-08-02 22:22 - 2015-04-04 11:22 - 00001326 _____ C:\Windows\Tasks\trivia_games_notification_service.job
2015-08-02 22:18 - 2014-12-17 12:51 - 00000000 ____D C:\Program Files (x86)\WinZipper
2015-08-02 22:17 - 2014-09-03 23:17 - 00002382 _____ C:\Windows\Tasks\1a27c454-7ff3-4add-830f-47b581b1dae9-6.job
2015-08-02 22:15 - 2015-06-22 16:51 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-02 22:15 - 2015-05-28 17:24 - 00000538 _____ C:\Windows\Tasks\monster_shopping_helper_service.job
2015-08-02 22:15 - 2015-04-04 12:22 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-08-02 22:15 - 2015-04-04 11:22 - 00000688 _____ C:\Windows\Tasks\trivia_games_updating_service.job
2015-08-02 22:15 - 2014-09-03 23:17 - 00004480 _____ C:\Windows\Tasks\1a27c454-7ff3-4add-830f-47b581b1dae9-11.job
2015-08-02 22:15 - 2014-09-03 23:17 - 00002748 _____ C:\Windows\Tasks\1a27c454-7ff3-4add-830f-47b581b1dae9-4.job
2015-08-02 22:15 - 2014-09-03 23:17 - 00002254 _____ C:\Windows\Tasks\1a27c454-7ff3-4add-830f-47b581b1dae9-7.job
2015-08-02 22:15 - 2014-09-03 23:17 - 00001822 _____ C:\Windows\Tasks\1a27c454-7ff3-4add-830f-47b581b1dae9-1.job
2015-08-02 22:15 - 2014-09-03 23:17 - 00001762 _____ C:\Windows\Tasks\1a27c454-7ff3-4add-830f-47b581b1dae9-5_user.job
2015-08-02 22:15 - 2014-09-03 23:17 - 00001742 _____ C:\Windows\Tasks\1a27c454-7ff3-4add-830f-47b581b1dae9-5.job
2015-08-02 22:15 - 2014-09-03 23:17 - 00001438 _____ C:\Windows\Tasks\1a27c454-7ff3-4add-830f-47b581b1dae9-2.job
2015-08-02 22:15 - 2014-09-03 23:17 - 00000946 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-08-02 22:15 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-02 22:15 - 2009-07-14 06:51 - 00060532 _____ C:\Windows\setupact.log
2015-07-30 10:03 - 2015-06-22 16:51 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-29 23:22 - 2014-09-03 23:17 - 00000950 _____ C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-07-29 23:08 - 2015-06-19 17:08 - 00000322 _____ C:\Windows\Tasks\PrivateFiles.job
2015-07-29 15:16 - 2014-09-03 04:38 - 00699342 _____ C:\Windows\system32\perfh007.dat
2015-07-29 15:16 - 2014-09-03 04:38 - 00149450 _____ C:\Windows\system32\perfc007.dat
2015-07-29 15:16 - 2009-07-14 07:13 - 01619284 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-29 00:03 - 2014-09-03 22:41 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-28 10:03 - 2015-05-21 17:44 - 00000000 ____D C:\Program Files (x86)\Elex-tech
2015-07-28 10:03 - 2014-09-04 16:53 - 00109358 _____ C:\Windows\PFRO.log
2015-07-25 18:06 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-07-25 11:33 - 2015-04-04 21:47 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-24 23:53 - 2009-07-14 06:45 - 00269272 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-24 23:50 - 2015-04-04 21:47 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-07-24 23:50 - 2014-12-11 23:54 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-24 23:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-24 01:28 - 2014-09-15 22:24 - 00000000 ____D C:\Users\N1tro\AppData\Roaming\Apple Computer
2015-07-23 23:57 - 2014-09-15 22:22 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2015-07-23 23:57 - 2014-09-15 22:21 - 00000000 ____D C:\Program Files\Common Files\Apple
2015-07-23 23:24 - 2015-06-07 19:21 - 00000000 ____D C:\Users\N1tro\AppData\Roaming\GoPro
2015-07-23 21:56 - 2015-06-22 16:51 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-23 21:56 - 2015-06-22 16:51 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-05-19 13:47 - 2015-05-19 13:47 - 0000079 _____ () C:\Program Files (x86)\prefs.js
2015-06-19 17:11 - 2015-06-19 17:11 - 0000024 _____ () C:\Users\N1tro\AppData\Roaming\appdataFr25.bin
2014-10-29 19:08 - 2014-10-29 19:13 - 0001264 _____ () C:\ProgramData\hpzinstall.log

Einige Dateien in TEMP:
====================
C:\Users\N1tro\AppData\Local\Temp\Hibiki.dll
C:\Users\N1tro\AppData\Local\Temp\ntwdblib.dll


==================== Bamital & volsnap Check =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-07-23 23:16

==================== Ende von log ============================

Addition

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:02-08-2015 01
durchgeführt von N1tro (2015-08-02 22:58:18)
Gestartet von C:\Users\N1tro\Downloads
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3492612163-2341442985-4162812709-500 - Administrator - Disabled)
Gast (S-1-5-21-3492612163-2341442985-4162812709-501 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-3492612163-2341442985-4162812709-1003 - Limited - Enabled)
N1tro (S-1-5-21-3492612163-2341442985-4162812709-1000 - Administrator - Enabled) => C:\Users\N1tro
UpdatusUser (S-1-5-21-3492612163-2341442985-4162812709-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Kaspersky Internet Security (Enabled - Up to date) {179979E8-273D-D14E-0543-2861940E4886}
AS: Kaspersky Internet Security (Enabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

64 Bit HP CIO Components Installer (Version: 6.2.1 - Hewlett-Packard) Hidden
Adobe Flash Player 10 ActiveX (HKLM-x32\...\{B7B3E9B3-FB14-4927-894B-E9124509AF5A}) (Version: 10.0.32.18 - Adobe Systems, Inc.)
Adobe Reader XI (11.0.11) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
AIO_CDA_ProductContext (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_CDA_Software (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
AIO_Scan (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
Amazon Music (HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\...\Amazon Amazon Music) (Version: 3.7.1.698 - Amazon Services LLC)
Apple Application Support (32-Bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
C4100 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
c4100_Help (x32 Version: 82.0.256.000 - Hewlett-Packard) Hidden
Command & Conquer Generals (HKLM-x32\...\InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}) (Version: 0.50.0000 - Electronic Arts)
Command & Conquer Generals (x32 Version: 0.50.0000 - Electronic Arts) Hidden
Command and Conquer(TM) Generäle Die Stunde Null  (HKLM-x32\...\InstallShield_{F3E9C243-122E-4D6B-ACC1-E1FEC02F6CA1}) (Version: 1.00.0000 - Electronic Arts)
Command and Conquer(TM) Generäle Die Stunde Null  (x32 Version: 1.00.0000 - Electronic Arts) Hidden
Commander Keen Complete Pack (HKLM-x32\...\Steam App 9180) (Version:  - id Software)
Copy (x32 Version: 130.0.428.000 - Hewlett-Packard) Hidden
Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden
Free Audio Converter version 5.0.47.906 (HKLM-x32\...\Free Audio Converter_is1) (Version: 5.0.47.906 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 44.0.2403.125 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Hotkey 3.3044 (HKLM-x32\...\InstallShield_{164714B6-46BC-4649-9A30-A6ED32F03B5A}) (Version: 3.3044 - NoteBook)
Hotkey 3.3044 (x32 Version: 3.3044 - NoteBook) Hidden
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Photosmart All-In-One Driver Software 13.0 Rel. A (HKLM\...\{17016DA1-F040-4032-BD36-34DD317BC9D5}) (Version: 13.0 - HP)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Update (HKLM-x32\...\{7059BDA7-E1DB-442C-B7A1-6144596720A4}) (Version: 4.000.011.006 - Hewlett-Packard)
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2476 - Intel Corporation)
Intel(R) PROSet/Wireless WiFi-Software (HKLM\...\{1927E640-A2C6-4BA7-8F43-FFD2AE3DFCF3}) (Version: 14.0.2000 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.5.0.1026 - Intel Corporation)
iTunes (HKLM\...\{6CF1A7E2-8001-4870-9F18-3C6CDD6FE9E3}) (Version: 12.2.1.16 - Apple Inc.)
JMicron Ethernet Adapter NDIS Driver (HKLM-x32\...\{96DCEE2F-98EE-4F80-8C0F-7C04D1FB9D7F}) (Version: 6.0.26.6 - JMicron Technology Corp.)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.62.0 - JMicron Technology Corp.)
Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{653C1B5A-3287-47B1-8613-0745D4E771C4}) (Version: 15.0.0.463 - Kaspersky Lab)
Kaspersky Internet Security (x32 Version: 15.0.0.463 - Kaspersky Lab) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Mozilla Firefox 37.0.2 (x86 de) (HKLM-x32\...\Mozilla Firefox 37.0.2 (x86 de)) (Version: 37.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 37.0.2 - Mozilla)
Mozilla Thunderbird 31.7.0 (x86 de) (HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\...\Mozilla Thunderbird 31.7.0 (x86 de)) (Version: 31.7.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Network64 (Version: 130.0.572.000 - Hewlett-Packard) Hidden
NVIDIA 3D Vision Controller-Treiber 280.19 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 280.19 - NVIDIA Corporation)
NVIDIA Grafiktreiber 280.26 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 280.26 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.10.0514 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.10.0514 - NVIDIA Corporation)
NVIDIA Update 1.4.28 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.4.28 - NVIDIA Corporation)
OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6301 - Realtek Semiconductor Corp.)
Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
Spotify (HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\...\Spotify) (Version: 1.0.6.80.g2a801a53 - Spotify AB)
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.1.14.0 - Synaptics Incorporated)
THX TruStudio Pro (HKLM-x32\...\{82F99DC9-389A-4528-940C-88248731A620}) (Version: TAMB-CVS1D-1-LB R07 - Creative Technology Limited)
TI USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{EB3C6814-1327-4B63-85CB-8A69AF09BAA6}) (Version: 1.12.7.0 - Ihr Firmenname)
TI USB3 Host Driver (x32 Version: 1.12.7.0 - Ihr Firmenname) Hidden
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
TrimModule (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{f0e9047b}) (Version:  - Software Publisher) <==== ACHTUNG
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
UpdateAdmin (HKLM-x32\...\{07B4B423-E4DA-47D1-8327-B589EB4BEB58}) (Version: 2.0.1885 - DownloadAdmin) <==== ACHTUNG
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Windows Mobile Device Center Driver Update (HKLM\...\{92DBCA36-9B41-4DD1-941A-AED149DD37F0}) (Version: 6.1.6965.0 - Microsoft Corporation)
Windows Mobile-Gerätecenter (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation)
WinZipper (HKLM-x32\...\WinZipper) (Version: 1.5.96 - Taiwan Shui Mu Chih Ching Technology Limited.) <==== ACHTUNG
Yahoo! Toolbar (HKLM-x32\...\Yahoo! Companion) (Version:  - )

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Wiederherstellungspunkte =========================

26-06-2015 15:25:35 Windows Update
30-06-2015 19:09:17 Windows Update
23-07-2015 23:22:46 GoPro Studio 2.5.5
24-07-2015 09:55:17 Windows Update
24-07-2015 10:34:35 Windows Update
25-07-2015 01:13:23 Windows Update
28-07-2015 22:31:09 Windows Update
29-07-2015 00:03:41 Windows Update
02-08-2015 22:24:21 Windows Update

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {06800C4C-ADCC-48C0-B4BE-23847F207636} - \1a27c454-7ff3-4add-830f-47b581b1dae9-4 No Task File <==== ACHTUNG
Task: {1FD8EF9F-D41D-4293-B0CF-BA6290D1A8EA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-22] (Google Inc.)
Task: {255E426A-72F9-4DAF-A40E-50DF3FF38D53} - System32\Tasks\PrivateFiles => c:\programdata\{ed131e7b-5664-9fd1-ed13-31e7b56679ed}\8786.exe [2014-06-19] () <==== ACHTUNG
Task: {30A0977C-F1B5-47D2-934B-C87543050037} - \1a27c454-7ff3-4add-830f-47b581b1dae9-1 No Task File <==== ACHTUNG
Task: {315CF2B9-5D6C-4C59-992E-FD530BA8106C} - System32\Tasks\monster_shopping_helper_service => C:\Program Files (x86)\Monster Shopping\monster_shopping_helper_service.exe [2015-05-28] ()
Task: {48241527-F7BC-4F03-A44F-0369470686FC} - System32\Tasks\UpdateAdmin => C:\Users\N1tro\AppData\Local\UpdateAdmin\UpdateAdmin.exe [2014-10-16] (DownloadAdmin) <==== ACHTUNG
Task: {549E08F0-EBA2-4898-985F-069607780DB3} - System32\Tasks\{BCEED641-EF32-4DC2-87D5-25F4DFEEB3EC} => pcalua.exe -a C:\Users\N1tro\AppData\Roaming\webssearches\UninstallManager.exe -c  -ptid=adks <==== ACHTUNG
Task: {56AF428E-CA7D-448A-9AF8-A3A4BC1ECB3D} - \1a27c454-7ff3-4add-830f-47b581b1dae9-7 No Task File <==== ACHTUNG
Task: {630319D7-0D4E-4D2D-9FED-E7A4C729C32E} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe <==== ACHTUNG
Task: {67EBE436-F39D-4A14-8A63-96C3F78757E9} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-09-03] (globalUpdate) <==== ACHTUNG
Task: {6F06223C-6BC3-4DD4-B043-778811D82F0C} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-09-03] (globalUpdate) <==== ACHTUNG
Task: {75E39051-16DD-4D93-B57A-47CA73C2AB6F} - \1a27c454-7ff3-4add-830f-47b581b1dae9-5_user No Task File <==== ACHTUNG
Task: {8F1ED862-D950-47D9-ADDD-AE77173F2DAC} - \1a27c454-7ff3-4add-830f-47b581b1dae9-2 No Task File <==== ACHTUNG
Task: {9329642A-FAAE-4F1E-99CA-CE07B79950CD} - \trivia_games_updating_service No Task File <==== ACHTUNG
Task: {BB62FE4F-411C-4C25-9F5B-08CF25E094FC} - \1a27c454-7ff3-4add-830f-47b581b1dae9-6 No Task File <==== ACHTUNG
Task: {C3603393-9F7A-4002-908E-ED6395AB6D08} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-06-22] (Google Inc.)
Task: {CBA07A15-69F3-4B26-A16E-DD274DBD0FC3} - System32\Tasks\trivia_games_notification_service => C:\Program Files (x86)\trivia games\trivia_games_notification_service.exe [2015-04-04] (FileProperties_CompanyName) <==== ACHTUNG
Task: {EEA14C37-0D53-4B6D-96A3-6C13EEE039EE} - \1a27c454-7ff3-4add-830f-47b581b1dae9-11 No Task File <==== ACHTUNG
Task: {EED9AFE7-8F3E-418B-ABB2-D20845F4B8FD} - \1a27c454-7ff3-4add-830f-47b581b1dae9-5 No Task File <==== ACHTUNG
Task: {F0A13EA8-7144-4E4B-AF2A-363F22DB7E3A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19] (Adobe Systems Incorporated)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\1a27c454-7ff3-4add-830f-47b581b1dae9-1.job => C:\Program Files (x86)\Weather It Up\Weather It Up-codedownloader.exeˤ/reinstallapp /runfrom=task /agentregpath='Weather It Up' /appid=61756 /srcid='001101' /subid='0' /zdata='0' /bic=DDDD4AA7B68E43A19E56243B5A60C4BDIE /verifier=2adf8da0e258c328a354419d914aff83 /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1409779026 /statsdomain=http:/stats.loadgenclientservice.com /errorsdomain=http:/errors.loadgenclientservice.com /codedownloaddomain=http:/js.loadgenclientservice.com /defbro=ch /crregname='Weather It Up' /fbcodedownloaddomain=http:/js.clientdemocloud.com /allusers /addinfojson='{asw:[0, 1, 0],browser_name:__BROWSER_NAME__}' /autoupdateulr='http:/update.loadgenclientservice.com/ie_code_agent_updates/{CAMP_ID}/update.jso <==== ACHTUNG
Task: C:\Windows\Tasks\1a27c454-7ff3-4add-830f-47b581b1dae9-11.job => C:\Program Files (x86)\Weather It Up\1a27c454-7ff3-4add-830f-47b581b1dae9-11.exe <==== ACHTUNG
Task: C:\Windows\Tasks\1a27c454-7ff3-4add-830f-47b581b1dae9-2.job => C:\Program Files (x86)\Weather It Up\1a27c454-7ff3-4add-830f-47b581b1dae9-2.exeȚ/enablebho /agentregpath='Weather It Up' /appid=61756 /srcid='001101' /subid='0' /zdata='0' /bic=DDDD4AA7B68E43A19E56243B5A60C4BDIE /verifier=2adf8da0e258c328a354419d914aff83 /installerversion=1_34_08_12 /installationtime=1409779026 /statsdomain=http:/stats.loadgenclientservice.com /errorsdomain=http:/errors.loadgenclientservice.com /bhoguid=11111111-1111-1111-1111-110611171156 /defbro=ch /allusers /autoupdateulr='http:/update.loadgenclientservice.com/ie_enable_agent_updates/{CAMP_ID}/update.jso <==== ACHTUNG
Task: C:\Windows\Tasks\1a27c454-7ff3-4add-830f-47b581b1dae9-4.job => C:\Program Files (x86)\Weather It Up\1a27c454-7ff3-4add-830f-47b581b1dae9-4.exeҩ/installxpi /agentregpath='Weather It Up' /extensionfilepath C:\Program Files (x86)\Weather It Up\1a27c454-7ff3-4add-830f-47b581b1dae9.xpi' /appid=61756 /srcid='001101' /subid='0' /zdata='0' /bic=DDDD4AA7B68E43A19E56243B5A60C4BDIE /verifier=2adf8da0e258c328a354419d914aff83 /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1409779026 /statsdomain=http:/stats.loadgenclientservice.com /errorsdomain=http:/errors.loadgenclientservice.com /waitforbrowser=300 /extensionid=8bad10e6f7cd46cfaad80382@a191dbb9c65e4d04b952f8901b1fc4.com /extensionversion=0.95 /prefsbranch=a8bad10e6f7cd46cfaad80382a191dbb9c65e4d04b952f8901b1fc4com61756 /updateurl=https:/w9u6a2p6.ssl.hwcdn.net/plugin/ff/update/61756.rdf /extensionname='Weather It Up' /extensiondesc='Weather it up is a simple browser extension that provides the latest weather information.' /publishername='Phoenix Media' /defbro=ch /sid=S-1-5-21-3492612163-2341442985-4162812709-1000 /addinfojson='{asw:[0, 1, 0],browser_name:__BROWSER_NAME__}' /allusers /allprofiles /checkfflist /autoupdateulr='http:/update.loadgenclientservice.com/ff_agent_updates/{CAMP_ID}/update.jso <==== ACHTUNG
Task: C:\Windows\Tasks\1a27c454-7ff3-4add-830f-47b581b1dae9-5.job => C:\Program Files (x86)\Weather It Up\1a27c454-7ff3-4add-830f-47b581b1dae9-5.exeʲ/runupdater /agentregpath='Weather It Up' /appid=61756 /srcid='001101' /subid='0' /zdata='0' /bic=DDDD4AA7B68E43A19E56243B5A60C4BDIE /verifier=2adf8da0e258c328a354419d914aff83 /installerversion=1_34_08_12 /installationtime=1409779026 /statsdomain=http:/stats.loadgenclientservice.com /errorsdomain=http:/errors.loadgenclientservice.com /geoserviceurl=http:/ipgeoapi.com/ /updatejsondomain=http:/update.loadgenclientservice.com /sid=S-1-5-21-3492612163-2341442985-4162812709-1000 /updaterversion=6 /monetizationdomain=http:/logs.loadgenclientservice.com /autoupdateulr='http:/update.loadgenclientservice.com/updater_agent_updates/{CAMP_ID}/update.jso <==== ACHTUNG
Task: C:\Windows\Tasks\1a27c454-7ff3-4add-830f-47b581b1dae9-5_user.job => C:\Program Files (x86)\Weather It Up\1a27c454-7ff3-4add-830f-47b581b1dae9-5.exeʼ/runupdater /agentregpath='Weather It Up' /appid=61756 /srcid='001101' /subid='0' /zdata='0' /bic=DDDD4AA7B68E43A19E56243B5A60C4BDIE /verifier=2adf8da0e258c328a354419d914aff83 /installerversion=1_34_08_12 /installationtime=1409779026 /statsdomain=http:/stats.loadgenclientservice.com /errorsdomain=http:/errors.loadgenclientservice.com /geoserviceurl=http:/ipgeoapi.com/ /updatejsondomain=http:/update.loadgenclientservice.com /sid=S-1-5-21-3492612163-2341442985-4162812709-1000 /updaterversion=6 /monetizationdomain=http:/logs.loadgenclientservice.com /autoupdateulr='http:/update.loadgenclientservice.com/updater_agent_updates/{CAMP_ID}/update.jso <==== ACHTUNG
Task: C:\Windows\Tasks\1a27c454-7ff3-4add-830f-47b581b1dae9-6.job => C:\Program Files (x86)\Weather It Up\1a27c454-7ff3-4add-830f-47b581b1dae9-6.exeϲ/agentregpath='Weather It Up-nv' /appid=61756 /srcid='001101' /subid='0' /zdata='0' /bic=DDDD4AA7B68E43A19E56243B5A60C4BDIE /verifier=2adf8da0e258c328a354419d914aff83 /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1409779026 /statsdomain=http:/stats.loadgenclientservice.com /errorsdomain=http:/errors.loadgenclientservice.com /codedownloaddomain=http:/js.loadgenclientservice.com /defbro=ch /DllName32ToInjectToChrome='df16bcdb-eb86-408c-af9e-f28cd259aee9.dll' /DllName64ToInjectToChrome='2822cd35-9d0c-4ee5-8cab-83698bd15b14.dll' /nova64bitexe='1a27c454-7ff3-4add-830f-47b581b1dae9-64.exe' /browsername='nova' /usehklm /crregname='Weather It Up' /fbcodedownloaddomain=http:/js.clientdemocloud.com /addinfojson='{asw:[0, 1, 0],browser_name:__BROWSER_NAME__}' /autoupdateulr='http:/update.loadgenclientservice.com/novarun/{CAMP_ID}/update.json' /autoupdate64url='http:/update.loadgenclientservice.com/novarun64/{CAMP_ID}/update.jso <==== ACHTUNG
Task: C:\Windows\Tasks\1a27c454-7ff3-4add-830f-47b581b1dae9-7.job => C:\Program Files (x86)\Weather It Up\1a27c454-7ff3-4add-830f-47b581b1dae9-7.exeβ/updateapp /agentregpath='Weather It Up-nv' /appid=61756 /srcid='001101' /subid='0' /zdata='0' /bic=DDDD4AA7B68E43A19E56243B5A60C4BDIE /verifier=2adf8da0e258c328a354419d914aff83 /installerversion=1_34_08_12 /installerfullversion=1.34.8.12 /installationtime=1409779026 /statsdomain=http:/stats.loadgenclientservice.com /errorsdomain=http:/errors.loadgenclientservice.com /codedownloaddomain=http:/js.loadgenclientservice.com /defbro=ch /DllName32ToInjectToChrome='df16bcdb-eb86-408c-af9e-f28cd259aee9.dll' /DllName64ToInjectToChrome='2822cd35-9d0c-4ee5-8cab-83698bd15b14.dll' /nova64bitexe='1a27c454-7ff3-4add-830f-47b581b1dae9-64.exe' /browsername='nova' /usehklm /crregname='Weather It Up' /fbcodedownloaddomain=http:/js.clientdemocloud.com /addinfojson='{asw:[0, 1, 0],browser_name:__BROWSER_NAME__}' /runfrom=task /autoupdateulr='http:/update.loadgenclientservice.com/novacode/{CAMP_ID}/update.jso <==== ACHTUNG
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ACHTUNG
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ACHTUNG
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\monster_shopping_helper_service.job => C:\Program Files (x86)\Monster Shopping\monster_shopping_helper_service.exe
Task: C:\Windows\Tasks\PrivateFiles.job => c:\programdata\{ed131e7b-5664-9fd1-ed13-31e7b56679ed}\8786.exe <==== ACHTUNG
Task: C:\Windows\Tasks\trivia_games_notification_service.job => C:\Program Files (x86)\trivia games\trivia_games_notification_service.exeǨ/url='http:/cdn.selectbestopt.com/notf_sys/index.html' /crregname='trivia games' /appid='73143' /srcid='2913' /bic='5f8853f827cb71292441903201476696' /verifier='0579a83d6ad7a079fb7f108f43036dbb' /installerversion='1.50.3.10' /statsdomain='http:/stats.buildomserv.com/data.gif?' /errorsdomain='http:/stats.buildomserv.com/data.gif?' /monetizationdomain='http:/logs.buildomserv.com/monetization.gif <==== ACHTUNG
Task: C:\Windows\Tasks\trivia_games_updating_service.job => C:\Program Files (x86)\trivia games\trivia_games_updating_service.exe* /campid=2913 /verid=1 /url=http:/cdn.buildomserv.com/txt/@CAMPID@/@VER@/file.txt /appid=73143 /taskname=trivia_games_updating_service /funurl=http:/stats.buildomserv.com <==== ACHTUNG

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2011-01-05 12:53 - 2011-01-05 12:53 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll
2015-05-28 17:24 - 2015-05-28 17:24 - 00191696 _____ () C:\Program Files (x86)\Monster Shopping\monster_shopping_helper_service.exe
2015-05-15 16:26 - 2015-05-15 16:26 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-05-15 16:26 - 2015-05-15 16:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2011-02-15 17:16 - 2011-02-15 17:16 - 00033792 _____ () C:\Program Files (x86)\Hotkey\PowerBiosServer.exe
2014-09-02 19:39 - 2011-08-09 01:44 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-01-05 12:53 - 2011-01-05 12:53 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll
2014-09-02 23:09 - 2010-11-12 12:38 - 00241152 _____ () C:\Windows\SYSTEM32\APOMgr64.DLL
2015-02-01 21:54 - 2014-12-08 08:27 - 06277952 _____ () C:\Users\N1tro\AppData\Local\Amazon Music\Amazon Music Helper.exe
2011-09-06 14:40 - 2011-09-06 14:40 - 03080192 _____ () C:\Program Files (x86)\Hotkey\Hotkey.exe
2015-05-15 16:26 - 2015-05-15 16:26 - 00306984 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxslt.dll
2015-07-30 10:03 - 2015-07-25 17:31 - 01763144 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.125\libglesv2.dll
2015-07-30 10:03 - 2015-07-25 17:31 - 00093000 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.125\libegl.dll
2014-12-17 12:51 - 2014-11-26 05:42 - 00612528 _____ () C:\Program Files (x86)\WinZipper\sqlite3.dll
2014-03-06 15:00 - 2014-03-06 15:00 - 01269952 _____ () C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\kpcengine.2.3.dll
2014-09-02 19:41 - 2011-08-03 13:50 - 00004096 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2015-05-27 21:13 - 2015-07-03 18:12 - 00778240 _____ () F:\steam\SDL2.dll
2015-05-27 21:13 - 2015-07-03 18:12 - 04962816 _____ () F:\steam\v8.dll
2015-05-27 21:13 - 2015-07-03 18:12 - 01556992 _____ () F:\steam\icui18n.dll
2015-05-27 21:13 - 2015-07-03 18:12 - 01187840 _____ () F:\steam\icuuc.dll
2015-05-27 21:13 - 2015-07-24 01:24 - 02410176 _____ () F:\steam\video.dll
2015-05-27 21:13 - 2014-12-01 23:31 - 02396672 _____ () F:\steam\libavcodec-56.dll
2015-05-27 21:13 - 2014-12-01 23:31 - 00442880 _____ () F:\steam\libavutil-54.dll
2015-05-27 21:13 - 2014-12-01 23:31 - 00479744 _____ () F:\steam\libavformat-56.dll
2015-05-27 21:13 - 2014-12-01 23:31 - 00332800 _____ () F:\steam\libavresample-2.dll
2015-05-27 21:13 - 2014-12-01 23:31 - 00485888 _____ () F:\steam\libswscale-3.dll
2015-05-27 21:13 - 2015-07-24 01:23 - 00703168 _____ () F:\steam\bin\chromehtml.DLL
2015-07-24 09:41 - 2015-07-07 22:41 - 00169984 _____ () F:\steam\bin\openvr_api.dll
2009-06-06 14:50 - 2009-06-06 14:50 - 00019968 _____ () C:\Program Files (x86)\Hotkey\Audiodll.dll
2006-12-11 02:10 - 2006-12-11 02:10 - 00049152 _____ () C:\Program Files (x86)\Hotkey\AudioControlDLL.dll
2015-05-27 21:13 - 2015-07-03 18:12 - 39553928 _____ () F:\steam\bin\libcef.dll
2014-09-02 23:09 - 2010-11-01 17:34 - 00159744 ____N () C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\de-DE\THXAudio.resources.dll
2014-10-23 09:53 - 2014-10-23 09:53 - 00172544 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\c152a64e30c5b94894d75ac86aa7aad2\IsdiInterop.ni.dll
2014-09-02 23:10 - 2011-04-30 00:28 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2015-05-15 16:27 - 2015-05-15 16:27 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2014-07-31 12:16 - 2014-07-31 12:16 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2015-03-06 10:39 - 2015-05-31 00:26 - 41287224 _____ () C:\Users\N1tro\AppData\Roaming\Spotify\libcef.dll
2015-03-06 10:39 - 2015-05-31 00:26 - 01488440 _____ () C:\Users\N1tro\AppData\Roaming\Spotify\libglesv2.dll
2015-03-06 10:39 - 2015-05-31 00:26 - 00079928 _____ () C:\Users\N1tro\AppData\Roaming\Spotify\libegl.dll
2015-03-06 10:39 - 2015-03-06 10:39 - 09305656 _____ () C:\Users\N1tro\AppData\Roaming\Spotify\pdf.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer trusted/restricted ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\N1tro\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{48DAE3F0-441A-412E-AC2F-870E58B4BFB2}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{7691D7E0-6FB5-47FD-95A0-FF63E84B74C9}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
FirewallRules: [{8AC5CFA0-0CB5-457C-9814-A5439D2E3986}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [TCP Query User{FD13B607-FCCD-4F7D-AEC8-296A2D8142D5}F:\games\cod von philipp\codmp.exe] => (Allow) F:\games\cod von philipp\codmp.exe
FirewallRules: [UDP Query User{BC6CA03C-4E7D-43D7-94ED-8F84E451FA0D}F:\games\cod von philipp\codmp.exe] => (Allow) F:\games\cod von philipp\codmp.exe
FirewallRules: [TCP Query User{565B3E92-BDED-4254-9474-2944DE9EDBDE}F:\games\cod von philipp\coduomp.exe] => (Allow) F:\games\cod von philipp\coduomp.exe
FirewallRules: [UDP Query User{F28C27C7-9B76-46BC-BFFB-DB224BD75F5A}F:\games\cod von philipp\coduomp.exe] => (Allow) F:\games\cod von philipp\coduomp.exe
FirewallRules: [{D8527387-0A01-41F0-8594-61B5910633B9}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{E98754A0-9A7F-4D2D-833B-11640A6BF42C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{88C5F60B-E9D7-44C3-AAA0-9DB062ED9D71}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{3AD84E0E-72CA-4599-8B87-4DA9F153FBAA}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{7C9B4F8D-D8FB-492E-BA21-C08E6372FD93}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{3FF88319-D610-4096-8AB5-AAF28AF4F7C1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{3E2E72BA-D326-4A68-AF80-F4E4972724BC}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{10FFE702-D83F-4B2B-87AA-93349081FA12}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{25219887-236B-452E-8D43-0D7CB61C80C8}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{D5CB2A8A-2094-4AFD-B24C-4E8B786A971A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{35B464EB-2F90-4911-BD06-DB24EB813E36}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe
FirewallRules: [{72D9DBBB-259A-49F2-B08C-C3CDC317A6D7}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{BC9B8941-88B3-4E85-A8DA-3DFA7B13DDC7}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{9739D323-DFC8-4372-B841-4717BBA233D0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{2E94533A-21F2-4B84-BAAD-3CE76BD8357F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqnrs08.exe
FirewallRules: [{F1D5352B-54D2-4FAA-A3A0-92001698756F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{FC083E9C-756A-46FC-BF94-51DFD4C8156C}] => (Allow) C:\Program Files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe
FirewallRules: [{D62A8851-C0EB-4485-B596-B2DE2D1AACD0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqsudi.exe
FirewallRules: [{07DAC27C-0FEF-432F-A0B7-3A247D2207F2}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpsapp.exe
FirewallRules: [{BA49870D-2914-4706-AF1E-6B72F8017EFE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{FBFDA33A-0DF9-4616-A1FE-B76B2B704C40}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{0F832454-812E-4DA9-8C0E-F73A4DF6D892}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpse.exe
FirewallRules: [{827EF614-E01A-4842-B152-DCBA45FF72D2}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{055A2BF9-6BE5-4857-9F4B-072999699896}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{AA3E6D17-BC6C-4DA8-8933-BB963986F123}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{AEE27137-B092-4274-A14A-96F36CC38711}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{EDB6D5E2-97F2-4062-8678-BB99956178C4}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{CC723F92-81B9-4CD5-9498-508375700EDF}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe
FirewallRules: [{BA1D2C48-B9EA-4696-B1F7-0BF701059286}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{E497C0D0-86E2-4BD6-9B8D-77C1214121FF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{17BA5340-3D3F-43D0-B90D-934397D3E72F}C:\users\n1tro\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\n1tro\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{438F02F4-7468-4D76-8EB2-EA790880D439}C:\users\n1tro\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\n1tro\appdata\roaming\spotify\spotify.exe
FirewallRules: [{87282E47-2806-48D5-A374-16C66123086A}] => (Block) C:\users\n1tro\appdata\roaming\spotify\spotify.exe
FirewallRules: [{FBE03D5A-EF2E-47EF-8F95-6C070B236652}] => (Block) C:\users\n1tro\appdata\roaming\spotify\spotify.exe
FirewallRules: [{8B1DF84E-9F4D-4A99-80ED-2A65D110FD1D}] => (Allow) F:\steam\Steam.exe
FirewallRules: [{71D6B5E6-DAAD-41B3-A9DB-E6CE118376AC}] => (Allow) F:\steam\Steam.exe
FirewallRules: [{C326DBAA-117A-4643-BB44-B99E3686497F}] => (Allow) F:\steam\bin\steamwebhelper.exe
FirewallRules: [{92E238D5-FAF3-41A3-8DC6-167E51DE0E36}] => (Allow) F:\steam\bin\steamwebhelper.exe
FirewallRules: [{26FA42C1-DC05-4912-9FC0-92133E1E3F46}] => (Allow) F:\steam\steamapps\common\Commander Keen\base1\dosbox.exe
FirewallRules: [{D420C35C-C8DF-4804-9FA0-29D19443B245}] => (Allow) F:\steam\steamapps\common\Commander Keen\base1\dosbox.exe
FirewallRules: [{8937F655-795B-46C3-8B82-C354B7A7982B}] => (Allow) F:\steam\steamapps\common\Commander Keen\base2\dosbox.exe
FirewallRules: [{A0CE0263-B8B6-4B1B-8714-C576983A3603}] => (Allow) F:\steam\steamapps\common\Commander Keen\base2\dosbox.exe
FirewallRules: [{312162E1-5FB4-42F9-BE29-48F7A5E1C681}] => (Allow) F:\steam\steamapps\common\Commander Keen\base3\dosbox.exe
FirewallRules: [{6F458BF6-0D52-4AC8-8D65-A6CB0BAC8720}] => (Allow) F:\steam\steamapps\common\Commander Keen\base3\dosbox.exe
FirewallRules: [{9A0BEF2B-3CCB-46B9-AF17-3DB06C6EBC58}] => (Allow) F:\steam\steamapps\common\Commander Keen\base4\dosbox.exe
FirewallRules: [{52D8D7FF-AE6B-4113-A5C8-AD2B6A1B3C4D}] => (Allow) F:\steam\steamapps\common\Commander Keen\base4\dosbox.exe
FirewallRules: [{6A1121BF-E210-4DDA-97EA-797049FF2556}] => (Allow) F:\steam\steamapps\common\Commander Keen\base5\dosbox.exe
FirewallRules: [{193BB647-A4A9-4551-9F0E-120F64583DB3}] => (Allow) F:\steam\steamapps\common\Commander Keen\base5\dosbox.exe
FirewallRules: [{969C97D9-8456-4CBD-8144-67316D889BD0}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{75640262-96FC-4317-8F3B-6CB3F13965AD}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Microsoft-Adapter für Miniports virtueller WiFis
Description: Microsoft-Adapter für Miniports virtueller WiFis
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: JMicron PCI Express Gigabit Ethernet Adapter
Description: JMicron PCI Express Gigabit Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: JMicron Technology Corp.
Service: JME
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (06/15/2015 11:08:09 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm iTunes.exe, Version 11.4.0.18 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 19a4

Startzeit: 01d0a74a6aaeb513

Endzeit: 7

Anwendungspfad: F:\itunes neu\iTunes.exe

Berichts-ID:

Error: (06/08/2015 10:23:29 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 8158

Error: (06/08/2015 10:23:29 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 8158

Error: (06/08/2015 10:05:50 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/08/2015 10:05:52 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7004

Error: (06/08/2015 10:05:52 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7004

Error: (06/08/2015 10:05:52 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/08/2015 10:05:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5990

Error: (06/08/2015 10:05:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5990

Error: (06/08/2015 10:05:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


Systemfehler:
=============
Error: (08/02/2015 10:16:29 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst AVP15.0.0 erreicht.

Error: (07/30/2015 09:47:39 AM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 40.

Error: (07/29/2015 10:20:50 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst AVP15.0.0 erreicht.

Error: (07/29/2015 03:13:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Apple Mobile Device Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (07/29/2015 03:13:03 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Apple Mobile Device Service erreicht.

Error: (07/28/2015 10:22:41 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (07/28/2015 10:22:41 PM) (Source: Disk) (EventID: 11) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden.

Error: (07/27/2015 10:41:15 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst DiagTrack erreicht.

Error: (07/25/2015 06:47:12 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "YAC Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (07/25/2015 11:25:13 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053


Microsoft Office:
=========================
Error: (06/15/2015 11:08:09 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: iTunes.exe11.4.0.1819a401d0a74a6aaeb5137F:\itunes neu\iTunes.exe

Error: (06/08/2015 10:23:29 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 8158

Error: (06/08/2015 10:23:29 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 8158

Error: (06/08/2015 10:05:50 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/08/2015 10:05:52 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 7004

Error: (06/08/2015 10:05:52 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 7004

Error: (06/08/2015 10:05:52 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (06/08/2015 10:05:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 5990

Error: (06/08/2015 10:05:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 5990

Error: (06/08/2015 10:05:51 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second


CodeIntegrity:
===================================
  Date: 2015-02-16 15:05:46.638
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-02-16 15:05:46.566
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-12 16:38:49.152
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-12 16:38:49.137
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-12 16:36:42.820
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-12-12 16:36:42.695
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-15 23:50:38.684
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-15 23:50:38.681
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-15 23:50:38.646
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-11-15 23:50:38.644
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume1\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\KLELAMX64\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Speicherinformationen =========================== 

Processor: Intel(R) Core(TM) i5-2520M CPU @ 2.50GHz
Percentage of memory in use: 41%
Total physical RAM: 8097.94 MB
Available physical RAM: 4720.16 MB
Total Virtual: 16194.08 MB
Available Virtual: 12334.3 MB

==================== Drives ================================

Drive c: (System) (Fixed) (Total:298.09 GB) (Free:67.13 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: (REDEMPTION) (CDROM) (Total:7.56 GB) (Free:0 GB) UDF
Drive f: (Roomstorm) (Fixed) (Total:465.76 GB) (Free:120.88 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 2E01DF42)
Partition 1: (Active) - (Size=298.1 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 465.8 GB) (Disk ID: 8E52DD24)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== Ende von log ============================

schrauber · 03.08.2015, 13:04

FRST löschen und neu laden, war ein Bug drin

Lade Dir bitte von hier

Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den Programmen:

TrimModule

UpdateAdmin

WinZipper
Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Electropuls · 04.08.2015, 11:47

Guten Tag,
achso ok das erklärt die Sache =]
Jedenfalls habe ich jetzt deine angegebenen Programme per Revo Uninstaller gelöscht.
Wars das?
Schon mal vielen Dank für deine Hilfe.

schrauber · 04.08.2015, 15:34

Da steht doch bissl mehr in meinem obigen Post oder nicht?

Combofix fehlt noch.

Electropuls · 12.08.2015, 23:46

Guten Abend/Nacht,
also das Fenster ist schon seit der Sache mit dem Revo Uninstaller nicht mehr erschienen. Falls es wieder erscheinen sollte, melde ich mich wieder =]
An dieser Stelle, vielen Dank für deine Hilfe bro.
Sollten wir nicht mehr mit einander schreiben, wünsche ich dir von Herzen Gottes Segen für dein weiteres Leben.
Lg

schrauber · 13.08.2015, 14:50

Ich suche gerade den Teil wo ich geschrieben haben soll dass die Kiste nach Revo sauber ist........

Electropuls · 22.10.2015, 11:27

Guten Tag,
nach einigen Wochen ist das Fenster wieder einmal erschienen

Somit habe ich den Scan mit Combofix durchgeführt. Schon mal vielen Dank für deine Hilfe weiterhin.
Hier die Log-Datei:

Code:

ATTFilter

ComboFix 15-10-21.01 - N1tro 22.10.2015  11:37:36.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.8098.5674 [GMT 2:00]
ausgeführt von:: c:\users\N1tro\Downloads\ComboFix.exe
AV: Kaspersky Internet Security *Disabled/Updated* {B41C7598-35F6-4D89-7D0E-7ADE69B4047B}
FW: Kaspersky Internet Security *Disabled* {8C27F4BD-7F99-4CD1-5651-D3EB97674300}
SP: Kaspersky Internet Security *Disabled/Updated* {0F7D947C-13CC-4207-47BE-41AC12334EC6}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\END
C:\Install.exe
c:\program files (x86)\premieropinion
c:\program files (x86)\premieropinion\chrome.manifest
c:\program files (x86)\premieropinion\firefox\bootstrap.js
c:\program files (x86)\premieropinion\firefox\defaults\preferences\prefs.js
c:\program files (x86)\premieropinion\firefox\harness-options.json
c:\program files (x86)\premieropinion\firefox\install.rdf
c:\program files (x86)\premieropinion\firefox\locales.json
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\addon\runner.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\base64.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\console\plain-text.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\console\traceback.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\content\content-proxy.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\content\content-worker.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\content\loader.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\content\thumbnail.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\content\worker.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\core\heritage.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\core\namespace.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\core\promise.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\deprecated\api-utils.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\deprecated\cortex.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\deprecated\errors.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\deprecated\events.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\deprecated\events\assembler.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\deprecated\light-traits.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\deprecated\list.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\deprecated\memory.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\deprecated\observer-service.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\deprecated\traits.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\deprecated\traits\core.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\deprecated\window-utils.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\dom\events.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\event\core.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\event\target.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\io\byte-streams.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\io\data.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\io\file.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\io\text-streams.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\l10n\core.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\l10n\html.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\l10n\loader.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\l10n\locale.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\l10n\prefs.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\lang\functional.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\loader\cuddlefish.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\loader\sandbox.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\net\url.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\page-mod.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\page-mod\match-pattern.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\platform\xpcom.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\preferences\service.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\private-browsing.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\private-browsing\utils.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\private-browsing\window\utils.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\self.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\system.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\system\environment.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\system\events.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\system\globals.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\system\runtime.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\system\unload.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\system\xul-app.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\tabs.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\tabs\common.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\tabs\events.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\tabs\helpers.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\tabs\namespace.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\tabs\observer.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\tabs\tab-fennec.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\tabs\tab-firefox.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\tabs\tab.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\tabs\tabs-firefox.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\tabs\tabs.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\tabs\utils.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\tabs\worker.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\timers.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\url.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\util\array.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\util\deprecate.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\util\list.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\util\object.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\util\registry.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\util\uuid.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\window\browser.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\window\namespace.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\window\utils.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\windows.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\windows\dom.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\windows\fennec.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\windows\firefox.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\windows\loader.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\windows\observer.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\windows\tabs-fennec.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\sdk\windows\tabs-firefox.js
c:\program files (x86)\premieropinion\firefox\resources\addon-sdk\lib\toolkit\loader.js
c:\program files (x86)\premieropinion\firefox\resources\chrome.manifest
c:\program files (x86)\premieropinion\firefox\resources\dpjs\data\content.js
c:\program files (x86)\premieropinion\firefox\resources\dpjs\lib\dompilot.js
c:\program files (x86)\premieropinion\firefox\resources\dpjs\lib\dputil.js
c:\program files (x86)\premieropinion\firefox\resources\dpjs\lib\main.js
c:\program files (x86)\premieropinion\install.rdf
c:\program files (x86)\premieropinion\nscf.dat
c:\program files (x86)\premieropinion\pmcm.crx
c:\program files (x86)\premieropinion\pmcm.txt
c:\program files (x86)\premieropinion\pmoci.bin
c:\program files (x86)\premieropinion\readme.txt
c:\program files (x86)\premieropinion\shfscp.dat
c:\programdata\15014817923665902329
c:\programdata\15014817923665902329\2ae705141b104f7e9290ac09dfdf6f72.ini
c:\programdata\15014817923665902329\b414867412abfd789290ac09dfdf6f72.ini
c:\programdata\15014817923665902329\c82ba59a4fab6da99290ac09dfdf6f72.ini
c:\programdata\15014817923665902329\cba7e870448052ac9290ac09dfdf6f72.ini
c:\programdata\15014817923665902329\f91231144eed79319290ac09dfdf6f72.ini
c:\programdata\Microsoft\Windows\Start Menu\Programs\PremierOpinion
c:\programdata\Microsoft\Windows\Start Menu\Programs\PremierOpinion\About PremierOpinion.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\PremierOpinion\Member of GRID -  Goodware Repository Information Database.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\PremierOpinion\Privacy Policy and User License Agreement.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\PremierOpinion\Support.lnk
c:\programdata\Microsoft\Windows\Start Menu\Programs\PremierOpinion\Uninstall Instructions.lnk
c:\programdata\Roaming
c:\users\N1tro\AppData\Local\Microsoft\Windows\Temporary Internet Files\update_14.exe
c:\windows\IsUn0407.exe
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_globalUpdate
.
.
(((((((((((((((((((((((   Dateien erstellt von 2015-09-22 bis 2015-10-22  ))))))))))))))))))))))))))))))
.
.
2015-10-21 21:00 . 2015-10-13 09:47	11140960	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{CD2D9C19-5DB5-4243-AAFE-3CD2289C0344}\mpengine.dll
2015-10-15 20:00 . 2015-09-18 19:19	700416	----a-w-	c:\windows\system32\invagent.dll
2015-10-15 20:00 . 2015-09-18 19:19	766464	----a-w-	c:\windows\system32\generaltel.dll
2015-10-15 20:00 . 2015-09-18 19:19	503808	----a-w-	c:\windows\system32\devinv.dll
2015-10-15 20:00 . 2015-09-18 19:19	1291264	----a-w-	c:\windows\system32\appraiser.dll
2015-10-15 20:00 . 2015-09-18 19:09	1163776	----a-w-	c:\windows\system32\aeinv.dll
2015-10-15 20:00 . 2015-09-18 19:22	25432	----a-w-	c:\windows\system32\CompatTelRunner.exe
2015-10-15 20:00 . 2015-09-18 19:19	73216	----a-w-	c:\windows\system32\acmigration.dll
2015-10-14 13:08 . 2015-09-25 18:07	3168768	----a-w-	c:\windows\system32\wucltux.dll
2015-10-09 19:20 . 2015-10-09 19:20	--------	d-----w-	c:\users\N1tro\AppData\Roaming\OpenOffice.org
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-09-29 02:58 . 2015-10-14 13:08	44032	----a-w-	c:\windows\apppatch\acwow64.dll
2015-09-02 03:04 . 2015-09-08 20:23	41984	----a-w-	c:\windows\system32\lpk.dll
2015-09-02 03:04 . 2015-09-08 20:23	100864	----a-w-	c:\windows\system32\fontsub.dll
2015-09-02 03:04 . 2015-09-08 20:23	14336	----a-w-	c:\windows\system32\dciman32.dll
2015-09-02 03:04 . 2015-09-08 20:23	46080	----a-w-	c:\windows\system32\atmlib.dll
2015-09-02 02:48 . 2015-09-08 20:23	70656	----a-w-	c:\windows\SysWow64\fontsub.dll
2015-09-02 02:48 . 2015-09-08 20:23	10240	----a-w-	c:\windows\SysWow64\dciman32.dll
2015-09-02 02:48 . 2015-09-08 20:23	34304	----a-w-	c:\windows\SysWow64\atmlib.dll
2015-09-02 02:47 . 2015-09-08 20:23	25600	----a-w-	c:\windows\SysWow64\lpk.dll
2015-09-02 01:51 . 2015-09-08 20:23	3209216	----a-w-	c:\windows\system32\win32k.sys
2015-09-02 01:47 . 2015-09-08 20:23	372736	----a-w-	c:\windows\system32\atmfd.dll
2015-09-02 01:33 . 2015-09-08 20:23	299520	----a-w-	c:\windows\SysWow64\atmfd.dll
2015-08-27 18:18 . 2015-09-08 20:24	2004480	----a-w-	c:\windows\system32\msxml6.dll
2015-08-27 18:18 . 2015-09-08 20:24	1887232	----a-w-	c:\windows\system32\msxml3.dll
2015-08-27 18:13 . 2015-09-08 20:24	2048	----a-w-	c:\windows\system32\msxml6r.dll
2015-08-27 18:13 . 2015-09-08 20:24	2048	----a-w-	c:\windows\system32\msxml3r.dll
2015-08-27 17:58 . 2015-09-08 20:24	1391104	----a-w-	c:\windows\SysWow64\msxml6.dll
2015-08-27 17:58 . 2015-09-08 20:24	1241088	----a-w-	c:\windows\SysWow64\msxml3.dll
2015-08-27 17:51 . 2015-09-08 20:24	2048	----a-w-	c:\windows\SysWow64\msxml6r.dll
2015-08-27 17:51 . 2015-09-08 20:24	2048	----a-w-	c:\windows\SysWow64\msxml3r.dll
2015-08-05 17:56 . 2015-09-08 20:25	1110016	----a-w-	c:\windows\system32\schedsvc.dll
2015-08-05 17:56 . 2015-09-08 20:25	24576	----a-w-	c:\windows\system32\jnwmon.dll
2015-08-05 17:56 . 2015-09-08 20:25	275456	----a-w-	c:\windows\system32\InkEd.dll
2015-08-05 17:40 . 2015-09-08 20:25	216064	----a-w-	c:\windows\SysWow64\InkEd.dll
2015-07-30 18:06 . 2015-08-12 14:47	1180160	----a-w-	c:\windows\system32\FntCache.dll
2015-07-30 18:06 . 2015-08-12 14:47	1648128	----a-w-	c:\windows\system32\DWrite.dll
2015-07-30 18:06 . 2015-08-12 14:46	2565120	----a-w-	c:\windows\system32\d3d10warp.dll
2015-07-30 17:57 . 2015-08-12 14:47	1251328	----a-w-	c:\windows\SysWow64\DWrite.dll
2015-07-30 17:57 . 2015-08-12 14:46	1987584	----a-w-	c:\windows\SysWow64\d3d10warp.dll
2015-07-30 13:13 . 2015-08-12 20:34	103120	----a-w-	c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll
2015-07-30 13:13 . 2015-08-12 20:34	124624	----a-w-	c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-19 11:47 . 2015-05-19 11:47	79	----a-w-	c:\program files (x86)\prefs.js
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Spotify Web Helper"="c:\users\N1tro\AppData\Roaming\Spotify\SpotifyWebHelper.exe" [2015-10-20 2030912]
"Amazon Music"="c:\users\N1tro\AppData\Local\Amazon Music\Amazon Music Helper.exe" [2014-12-08 6277952]
"Steam"="f:\steam\steam.exe" [2015-10-14 2901584]
"Spotify"="c:\users\N1tro\AppData\Roaming\Spotify\Spotify.exe" [2015-10-20 7736128]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"THX Audio Control Panel"="c:\program files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe" [2010-11-01 1374720]
"UpdReg"="c:\windows\UpdReg.EXE" [2000-05-10 90112]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2011-04-29 284440]
"hpqSRMon"="c:\program files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528]
"HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2007-05-08 54840]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-12-19 1022152]
.
c:\users\N1tro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
hqghumeaylnlf.lnk - c:\programdata\{a940e77c-981e-25f6-a940-0e77c9819df2}\hqghumeaylnlf.exe /startup [2014-4-29 6368728]
OpenOffice.org 3.2.lnk - f:\openoffice\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Hotkey.lnk - c:\program files (x86)\Hotkey\Hotkey.exe [2011-9-6 3080192]
HP Digital Imaging Monitor.lnk - c:\program files (x86)\HP\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R3 globalUpdatem;globalUpdate Update Service (globalUpdatem);c:\program files (x86)\globalUpdate\Update\GoogleUpdate.exe;c:\program files (x86)\globalUpdate\Update\GoogleUpdate.exe [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 JME;JMicron Ethernet Adapter NDIS6.20 Driver (Amd64 Bits);c:\windows\system32\DRIVERS\JME.sys;c:\windows\SYSNATIVE\DRIVERS\JME.sys [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S1 klhk;klhk;c:\windows\system32\DRIVERS\klhk.sys;c:\windows\SYSNATIVE\DRIVERS\klhk.sys [x]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys;c:\windows\SYSNATIVE\DRIVERS\klim6.sys [x]
S1 klpd;klpd;c:\windows\system32\DRIVERS\klpd.sys;c:\windows\SYSNATIVE\DRIVERS\klpd.sys [x]
S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys;c:\windows\SYSNATIVE\DRIVERS\kltdi.sys [x]
S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys;c:\windows\SYSNATIVE\DRIVERS\kneps.sys [x]
S2 Apple Mobile Device Service;Apple Mobile Device Service;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe;c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [x]
S2 AVP15.0.0;Kaspersky Anti-Virus Service 15.0.0;c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe;c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe [x]
S2 DiagTrack;Diagnostics Tracking Service;c:\windows\System32\svchost.exe;c:\windows\SYSNATIVE\svchost.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 PowerBiosServer;PowerBiosServer;c:\program files (x86)\Hotkey\PowerBiosServer.exe;c:\program files (x86)\Hotkey\PowerBiosServer.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys;c:\windows\SYSNATIVE\DRIVERS\jmcr.sys [x]
S3 klflt;Kaspersky Lab Kernel DLL;c:\windows\system32\DRIVERS\klflt.sys;c:\windows\SYSNATIVE\DRIVERS\klflt.sys [x]
S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys;c:\windows\SYSNATIVE\DRIVERS\klkbdflt.sys [x]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys;c:\windows\SYSNATIVE\DRIVERS\klmouflt.sys [x]
S3 tihub3;TI USB3 Hub Service;c:\windows\system32\DRIVERS\tihub3.sys;c:\windows\SYSNATIVE\DRIVERS\tihub3.sys [x]
S3 tixhci;TI XHCI Service;c:\windows\system32\DRIVERS\tixhci.sys;c:\windows\SYSNATIVE\DRIVERS\tixhci.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
hpdevmgmt	REG_MULTI_SZ   	hpqcxs08 hpqddsvc
.
Inhalt des "geplante Tasks" Ordners
.
2015-10-22 c:\windows\Tasks\globalUpdateUpdateTaskMachineCore.job
- c:\program files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-09-03 21:17]
.
2015-10-22 c:\windows\Tasks\globalUpdateUpdateTaskMachineUA.job
- c:\program files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-09-03 21:17]
.
2015-10-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-06-22 14:51]
.
2015-10-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2015-06-22 14:51]
.
2015-10-22 c:\windows\Tasks\monster_shopping_helper_service.job
- c:\program files (x86)\Monster Shopping\monster_shopping_helper_service.exe [2015-05-28 15:24]
.
2015-10-22 c:\windows\Tasks\trivia_games_notification_service.job
- c:\program files (x86)\trivia games\trivia_games_notification_service.exe [2015-04-04 09:22]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-01-26 11775592]
"IntelWireless"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2011-01-05 1933584]
"THXCfg64"="c:\windows\system32\THXCfg64.dll" [2010-09-14 25600]
"Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 660360]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2015-07-11 170280]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2015-06-01 183216]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2015-06-01 411056]
"Persistence"="c:\windows\system32\igfxpers.exe" [2015-06-01 453552]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
uDefault_Search_URL = hxxp://search.delta-homes.com/web/?type=ds&ts=1418813419&from=wpm12173&uid=WDCXWD3200BEKT-60PVMT0_WD-WX11A81J4024J4024&q={searchTerms}
mDefault_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1409778935&from=adks&uid=WDCXWD3200BEKT-60PVMT0_WD-WX11A81J4024J4024&q={searchTerms}
mDefault_Page_URL = hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
mStart Page = hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
mLocal Page = c:\windows\SysWOW64\blank.htm
mSearch Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1409778935&from=adks&uid=WDCXWD3200BEKT-60PVMT0_WD-WX11A81J4024J4024&q={searchTerms}
uInternet Settings,ProxyOverride = <-loopback>;*.local
IE: Zu Anti-Banner hinzufügen - c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\ie_banner_deny.htm
TCP: DhcpNameServer = 192.168.1.1
FF - ProfilePath - c:\users\N1tro\AppData\Roaming\Mozilla\Firefox\Profiles\bddbcq0c.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
FF - user.js: plugin.state.npcontentblocker - 2
FF - user.js: plugin.state.nponlinebanking - 2
FF - user.js: plugin.state.npvkplugin - 2
FF - user.js: plugin.state.anti_banner_native_proxy - 2
FF - user.js: plugin.state.url_advisor - 2
FF - user.js: plugin.state.npcontentblocker - 2
FF - user.js: plugin.state.nponlinebanking - 2
FF - user.js: plugin.state.npvkplugin - 2
FF - user.js: plugin.state.anti_banner_native_proxy - 2
FF - user.js: plugin.state.url_advisor - 2
FF - user.js: plugin.state.npcontentblocker - 2
FF - user.js: plugin.state.nponlinebanking - 2
FF - user.js: plugin.state.npvkplugin - 2
FF - user.js: plugin.state.anti_banner_native_proxy - 2
FF - user.js: plugin.state.url_advisor - 2
FF - user.js: plugin.state.npcontentblocker - 2
FF - user.js: plugin.state.nponlinebanking - 2
FF - user.js: plugin.state.npvkplugin - 2
FF - user.js: plugin.state.anti_banner_native_proxy - 2
FF - user.js: plugin.state.url_advisor - 2
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil10c.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\LocalServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\FlashUtil10c.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{19114156-8E9A-4D4E-9EE9-17A0E48D3BBB}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWow64\\Macromed\\Flash\\Flash10c.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}]
@Denied: (A 2) (Everyone)
@="IFlashBroker3"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1D4C8A81-B7AC-460A-8C23-98713C41D6B3}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*]
@="?????????????????? v1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*1*\CLSID]
@="{E23FE9C6-778E-49D4-B537-38FCDE4887D8}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*]
@="?????????????????? v2"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\VideoLAN.VLCPlugin.*2*\CLSID]
@="{9BE31822-FDAD-461B-AD51-BE1D1C159921}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
c:\program files (x86)\Adobe\Reader 11.0\Reader\Reader_sl.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2015-10-22  12:04:05 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2015-10-22 10:03
.
Vor Suchlauf: 17 Verzeichnis(se), 71.357.751.296 Bytes frei
Nach Suchlauf: 26 Verzeichnis(se), 72.299.040.768 Bytes frei
.
- - End Of File - - 67BA841D9D7D2524F15DEA7D3B50289E

schrauber · 23.10.2015, 07:53

Solange mit machen bis ich sage die Kiste ist sauber

Downloade Dir bitte

Malwarebytes Anti-Malware

Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

und ein frisches FRST log bitte.

Electropuls · 26.10.2015, 00:45

Guten Abend,
also hier die mbam.txt:

Code:

ATTFilter

 Malwarebytes Anti-Malware 
www.malwarebytes.org


Scan, 26.10.2015 00:11, SYSTEM, N1TROGLYZERIEN, Manual, Start: 25.10.2015 23:29, Dauer: 39 Min. 48 Sek., Bedrohungssuchlauf, Abgeschlossen, 1 Malware-Erkennung, 516 Nicht-Malware-Erkennungen, 
Error, 26.10.2015 00:13, SYSTEM, N1TROGLYZERIEN, Protection, IsLicensed, 13, 
Protection, 26.10.2015 00:13, SYSTEM, N1TROGLYZERIEN, Protection, Malware Protection, Stopping, 
Protection, 26.10.2015 00:13, SYSTEM, N1TROGLYZERIEN, Protection, Malware Protection, Stopped, 

(end)

AdwCleaner:

Code:

ATTFilter

# AdwCleaner v5.014 - Bericht erstellt am 26/10/2015 um 00:26:49
# Aktualisiert am 18/10/2015 von Xplode
# Datenbank : 2015-10-18.5 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : N1tro - N1TROGLYZERIEN
# Gestartet von : C:\Users\N1tro\Downloads\AdwCleaner_5.014.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****

[-] Ordner Gelöscht : C:\Program Files (x86)\globalUpdate
[-] Ordner Gelöscht : C:\Program Files (x86)\Elex-tech
[-] Ordner Gelöscht : C:\Program Files (x86)\Yahoo!\Companion
[-] Ordner Gelöscht : C:\Program Files (x86)\TrimModule
[-] Ordner Gelöscht : C:\Program Files (x86)\cheap4aalle
[-] Ordner Gelöscht : C:\Program Files (x86)\cuheeAp4aLl
[-] Ordner Gelöscht : C:\Program Files (x86)\Monster Shopping
[-] Ordner Gelöscht : C:\ProgramData\Yahoo! Companion
[-] Ordner Gelöscht : C:\ProgramData\36a7048e000046f7
[-] Ordner Gelöscht : C:\ProgramData\{ed131e7b-5664-9fd1-ed13-31e7b56679ed}
[-] Ordner Gelöscht : C:\Users\N1tro\AppData\Local\globalUpdate
[-] Ordner Gelöscht : C:\Users\N1tro\AppData\Roaming\WinZipper
[-] Ordner Gelöscht : C:\Users\N1tro\AppData\Roaming\Yahoo!\Companion

***** [ Dateien ] *****

[-] Datei Gelöscht : C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ogminpmldncgcmokldnmmapddoccmhfl_0.localstorage
[-] Datei Gelöscht : C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ogminpmldncgcmokldnmmapddoccmhfl_0.localstorage-journal
[-] Datei Gelöscht : C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\local storage\hxxp_www.best-deals-products.com_0.localstorage-journal
[-] Datei Gelöscht : C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
[-] Datei Gelöscht : C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
[-] Datei Gelöscht : C:\Users\N1tro\AppData\Roaming\Mozilla\Firefox\Profiles\bddbcq0c.default\user.js
[-] Datei Gelöscht : C:\Windows\SysNative\log\iSafeKrnlCall.log

***** [ DLLs ] *****


***** [ Verknüpfungen ] *****


***** [ Geplante Tasks ] *****

[-] Task Gelöscht : LaunchSignup
[-] Task Gelöscht : monster_shopping_helper_service
[-] Task Gelöscht : monster_shopping_helper_service
[-] Task Gelöscht : monster_shopping_helper_service

***** [ Registrierungsdatenbank ] *****

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\YMERemote.DLL
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar.1
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserToolbar
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\df16bcdb-eb86-408c-af9e-f28cd259aee9
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\ff8f29d7-4fa4-1a4d-c56b-4af3213ae929
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Schlüssel Gelöscht : HKCU\Software\Classes\CLSID\{F28C2F70-47DE-4EA5-8F6D-7D1476CD1EF5}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{81017EA9-9AA8-4A6A-9734-7AF40E7D593F}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8233093C-178B-484B-979E-3C6B5B147DBC}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D14D64BC-A0E4-42E3-BB72-FB41EA43C198}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DD1F043F-ABC8-4643-8B95-D2C5B22BB019}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E3F3E8F9-F747-4DD6-BA6B-82A6CE1E0860}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED0B64D4-BF27-4521-AD27-190F49BF5EA7}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{023E9EC8-B147-40EB-B0B3-DF90618FB371}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0522D9A4-4D57-437D-978D-E5B3B6C9005D}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{07F41522-AF7D-4F26-B394-094F059FDB8A}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0C40F472-7407-4467-8914-1DEA7C326972}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{212E6D43-6062-492A-B8CC-144669FF11ED}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{224FE662-1E6D-4BC0-AEBB-9E2FB4057BE9}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A807417-B46D-4D37-8C9A-19AC6DE204F9}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3CC60715-D6C5-429D-830E-43FA3F86C61D}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4517D94C-19BA-46FA-BE66-2A30CEAC4A85}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{555D7146-94A8-4C94-AE76-C39CDC7F7705}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8120D9D6-785C-4413-9C0C-DF2028C56FAD}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{823AE2EB-E62C-4847-B192-C99B91B92416}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9B4F7CFE-987D-410E-A8E4-20182E0B3C24}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9B9A45F4-18FC-484A-BACA-076D78273D8E}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A6D54287-7939-466A-8579-92546D946C8C}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A78EDAFB-926F-4D93-AB13-8232D7378EB1}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{B722ED8B-0B38-408E-BB89-260C73BCF3D4}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{96BB8E60-6EF9-47E0-9ED8-4AD477ECF427}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FDAD4DA1-61A2-4FD8-9C17-86F7AC245081}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
[-] Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{EF99BD32-C1FB-11D2-892F-0090271D4F88}]
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8233093C-178B-484B-979E-3C6B5B147DBC}
[-] Schlüssel Gelöscht : HKU\.DEFAULT\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
[-] Schlüssel Gelöscht : HKCU\Software\APN PIP
[-] Schlüssel Gelöscht : HKCU\Software\Conduit
[-] Schlüssel Gelöscht : HKCU\Software\GlobalUpdate
[-] Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions
[-] Schlüssel Gelöscht : HKCU\Software\OCS
[-] Schlüssel Gelöscht : HKCU\Software\simplytech
[-] Schlüssel Gelöscht : HKCU\Software\V9
[-] Schlüssel Gelöscht : HKCU\Software\Linkey
[-] Schlüssel Gelöscht : HKCU\Software\Kromtech
[-] Schlüssel Gelöscht : HKCU\Software\Yahoo\Companion
[-] Schlüssel Gelöscht : HKCU\Software\Yahoo\YFriendsBar
[-] Schlüssel Gelöscht : HKCU\Software\WEBAPP
[-] Schlüssel Gelöscht : HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
[-] Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Yahoo\Companion
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Conduit
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\GlobalUpdate
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\hdcode
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\InstalledBrowserExtensions
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\SearchProtect
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\SupDp
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\V9
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\winzipersvc
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\SpeedBit
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\AIM Toolbar
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Yahoo\Companion
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D01A33E2-0A34-4659-82AA-8A90C51C0D21}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Toolbar
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Companion
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Linkey
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D01A33E2-0A34-4659-82AA-8A90C51C0D21}
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\APN PIP
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\Conduit
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\GlobalUpdate
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\InstalledBrowserExtensions
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\OCS
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\simplytech
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\V9
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\Linkey
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\Kromtech
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\Yahoo\Companion
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\Yahoo\YFriendsBar
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\WEBAPP
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
[!] Schlüssel Nicht Gelöscht : HKU\.DEFAULT\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
[!] Schlüssel Nicht Gelöscht : HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
[!] Schlüssel Nicht Gelöscht : HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\Software\AppDataLow\Software\Yahoo\Companion
[!] Schlüssel Nicht Gelöscht : HKU\S-1-5-18\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}

***** [ Internetbrowser ] *****

[-] [C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : v9
[-] [C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Default_Search_Provider_Data] Gelöscht : hxxp://www.v9.com/web?type=ds&ts=1433617800&from=zzgbkk123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo&q={searchTerms}
[-] [C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : noajmlkipclmeolfcnflkjhijkigpfjh
[-] [C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : ogminpmldncgcmokldnmmapddoccmhfl
[-] [C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Homepage] Gelöscht : hxxp://www.v9.com?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo

*************************

:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [14028 Bytes] ##########

Junkware:

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.6.4 (09.28.2015:1)
OS: Windows 7 Home Premium x64
Ran by N1tro on 26.10.2015 at  0:34:22,02
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220622172256}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550655175556}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660666176656}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440644174456}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622172256}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550655175556}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660666176656}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644174456}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550655175556}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660666176656}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440644174456}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550655175556}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660666176656}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644174456}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110611171156}



~~~ Files

Successfully deleted: [File] C:\Users\N1tro\AppData\Roaming\appdataFr25.bin
Successfully deleted: [File] C:\Users\N1tro\Appdata\Local\google\chrome\user data\default\local storage\hxxp_static.audienceinsights.net_0.localstorage
Successfully deleted: [File] C:\Users\N1tro\Appdata\Local\google\chrome\user data\default\local storage\hxxp_static.audienceinsights.net_0.localstorage-journal
Successfully deleted: [File] C:\Users\N1tro\Appdata\Local\google\chrome\user data\default\local storage\hxxp_www.best-deals-products.com_0.localstorage



~~~ Folders



~~~ FireFox

Successfully deleted the following from C:\Users\N1tro\AppData\Roaming\mozilla\firefox\profiles\bddbcq0c.default\prefs.js

user_pref(browser.search.searchengine.alias, );
user_pref(browser.search.searchengine.iconURL, hxxp://www.v9.com/favicon.ico?t=1);
user_pref(browser.search.searchengine.name, V9 );
user_pref(browser.search.searchengine.ref, );
user_pref(browser.search.searchengine.ts, 1433617800);
user_pref(browser.search.searchengine.type, );
user_pref(browser.search.searchengine.uid, wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024);
user_pref(browser.search.searchengine.url, hxxp://www.v9.com/web?type=ds&ts=1433617800&from=zzgbkk123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a2



~~~ Chrome


[C:\Users\N1tro\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\N1tro\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\N1tro\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\N1tro\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 26.10.2015 at  0:39:05,89
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

und zuletzt die FRST:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:25-10-2015 02
durchgeführt von N1tro (Administrator) auf N1TROGLYZERIEN (26-10-2015 00:43:16)
Gestartet von C:\Users\N1tro\Downloads
Geladene Profile: N1tro (Verfügbare Profile: N1tro & UpdatusUser)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(OpenOffice.org) F:\openoffice\OpenOffice.org 3\program\soffice.bin
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\Hotkey\PowerBiosServer.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Spotify Ltd) C:\Users\N1tro\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\N1tro\AppData\Roaming\Spotify\SpotifyCrashService.exe
(Spotify Ltd) C:\Users\N1tro\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\N1tro\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Spotify Ltd) C:\Users\N1tro\AppData\Roaming\Spotify\Spotify.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2328360 2010-09-16] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11775592 2011-01-26] (Realtek Semiconductor)
HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2011-01-05] (Intel(R) Corporation)
HKLM\...\Run: [THXCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64
HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170280 2015-07-11] (Apple Inc.)
HKLM-x32\...\Run: [THX Audio Control Panel] => C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [1374720 2010-11-01] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-04-29] (Intel Corporation)
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [54840 2007-05-08] (Hewlett-Packard)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\...\Run: [Spotify Web Helper] => C:\Users\N1tro\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2030912 2015-10-20] (Spotify Ltd)
HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\...\Run: [Amazon Music] => C:\Users\N1tro\AppData\Local\Amazon Music\Amazon Music Helper.exe [6277952 2014-12-08] ()
HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\...\Run: [Steam] => F:\steam\steam.exe [2901584 2015-10-14] (Valve Corporation)
HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\...\Run: [Spotify] => C:\Users\N1tro\AppData\Roaming\Spotify\Spotify.exe [7736128 2015-10-20] (Spotify Ltd)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [141336 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs-x32:  C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-09-05] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Hotkey.lnk [2015-10-26]
ShortcutTarget: Hotkey.lnk -> C:\Program Files (x86)\Hotkey\Hotkey.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-10-26]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\N1tro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk [2015-10-26]
ShortcutTarget: OpenOffice.org 3.2.lnk -> F:\openoffice\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{BCEB4ADB-12D2-4A80-8281-C80BAB55764E}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{FB6369E3-C003-4944-ACD8-B1976DD78985}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\S-1-5-21-3492612163-2341442985-4162812709-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

FireFox:
========
FF ProfilePath: C:\Users\N1tro\AppData\Roaming\Mozilla\Firefox\Profiles\bddbcq0c.default
FF Homepage: hxxps://www.malwarebytes.org/restorebrowser/?type=hp&ts=1433617800&from=mych123&uid=wdcxwd3200bekt-60pvmt0_wd-wx11a81j4024j4024&z=0300f7ff68c55ad6e2a25a6g9z5c1c1qeg6m8b5ofo
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-01-06] ()
FF Plugin-x32: @kaspersky.com/content_blocker -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com [2014-10-22] ()
FF Plugin-x32: @kaspersky.com/online_banking -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com [2014-10-22] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-10-22] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-19] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.3 -> F:\vlc\neu\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com [2014-10-22] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-10-22] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions:  - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\url_advisor@kaspersky.com [2014-10-22] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\anti_banner@kaspersky.com [2014-10-22] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com [2014-10-22] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-10-29] [ist nicht signiert]
FF HKLM-x32\...\Firefox\Extensions: [arthurj8283@gmail.com] - C:\Users\N1tro\AppData\Roaming\Mozilla\Firefox\Profiles\bddbcq0c.default\extensions\arthurj8283@gmail.com => nicht gefunden
FF HKU\S-1-5-21-3492612163-2341442985-4162812709-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://www.google.de/"
CHR Profile: C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Poper Blocker) - C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkkbcggnhapdmkeljlodobbkopceiche [2015-05-23] [UpdateUrl: hxxps://epicunitscan.info/00service/update2/crx] <==== ACHTUNG
CHR Extension: (YouTube) - C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-08]
CHR Extension: (Adblock Plus) - C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-10-08]
CHR Extension: (Google-Suche) - C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-24]
CHR Extension: (Google Mail) - C:\Users\N1tro\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-01]
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - hxxps://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - hxxps://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)
R2 AVP15.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe [233552 2014-04-20] (Kaspersky Lab ZAO)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1037824 2009-09-20] (Hewlett-Packard Co.) [Datei ist nicht signiert]
S2 MBAMService; F:\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-01-05] ()
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [Datei ist nicht signiert]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [Datei ist nicht signiert]
R2 PowerBiosServer; C:\Program Files (x86)\Hotkey\PowerBiosServer.exe [33792 2011-02-15] () [Datei ist nicht signiert]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2014-12-25] (DT Soft Ltd)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [457824 2014-02-20] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [141320 2014-10-22] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [243808 2014-04-10] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [793800 2014-10-22] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2014-03-25] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179296 2014-03-26] (Kaspersky Lab ZAO)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-10-26 00:43 - 2015-10-26 00:43 - 00000000 ____D C:\Users\N1tro\Downloads\FRST-OlderVersion
2015-10-26 00:39 - 2015-10-26 00:39 - 00004258 _____ C:\Users\N1tro\Desktop\JRT.txt
2015-10-26 00:36 - 2015-10-26 00:36 - 00014168 _____ C:\Users\N1tro\Desktop\AdwCleaner[C1].txt
2015-10-26 00:34 - 2015-10-05 23:26 - 01801288 _____ (Malwarebytes) C:\Users\N1tro\Desktop\JRT.exe
2015-10-26 00:33 - 2015-10-26 00:33 - 01798976 _____ (Malwarebytes) C:\Users\N1tro\Downloads\JRT.exe
2015-10-26 00:25 - 2015-10-26 00:26 - 00000000 ____D C:\AdwCleaner
2015-10-26 00:22 - 2015-10-26 00:22 - 00000528 _____ C:\Users\N1tro\Desktop\mbam.txt
2015-10-25 23:33 - 2015-10-25 23:33 - 01691648 _____ C:\Users\N1tro\Downloads\AdwCleaner_5.014.exe
2015-10-25 23:28 - 2015-10-26 00:20 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-10-25 23:28 - 2015-10-26 00:11 - 00000622 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-10-25 23:28 - 2015-10-25 23:28 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-10-25 23:28 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-10-25 23:28 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-10-25 23:28 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-10-25 23:25 - 2015-10-25 23:26 - 22908888 _____ (Malwarebytes ) C:\Users\N1tro\Downloads\mbam-setup-2.2.0.1024.exe
2015-10-22 11:04 - 2015-10-22 11:04 - 00031446 _____ C:\ComboFix.txt
2015-10-22 10:36 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2015-10-22 10:36 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2015-10-22 10:36 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2015-10-22 10:36 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2015-10-22 10:36 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2015-10-22 10:36 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2015-10-22 10:36 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2015-10-22 10:36 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2015-10-22 10:35 - 2015-10-22 11:04 - 00000000 ____D C:\Qoobox
2015-10-22 10:35 - 2015-10-22 11:01 - 00000000 ____D C:\Windows\erdnt
2015-10-22 10:33 - 2015-10-22 10:34 - 05637184 ____R (Swearware) C:\Users\N1tro\Downloads\ComboFix.exe
2015-10-15 21:00 - 2015-09-18 20:22 - 00025432 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-10-15 21:00 - 2015-09-18 20:19 - 01291264 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-10-15 21:00 - 2015-09-18 20:19 - 00766464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-10-15 21:00 - 2015-09-18 20:19 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-10-15 21:00 - 2015-09-18 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-10-15 21:00 - 2015-09-18 20:19 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-10-15 21:00 - 2015-09-18 20:09 - 01163776 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-10-14 14:12 - 2015-09-18 20:31 - 00391784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-10-14 14:12 - 2015-09-18 19:58 - 00345688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-10-14 14:12 - 2015-09-16 05:48 - 25851904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-10-14 14:12 - 2015-09-16 05:36 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-10-14 14:12 - 2015-09-16 05:36 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-10-14 14:12 - 2015-09-16 05:22 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-10-14 14:12 - 2015-09-16 05:21 - 02886656 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-10-14 14:12 - 2015-09-16 05:21 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-10-14 14:12 - 2015-09-16 05:21 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-10-14 14:12 - 2015-09-16 05:21 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-10-14 14:12 - 2015-09-16 05:21 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-10-14 14:12 - 2015-09-16 05:14 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-10-14 14:12 - 2015-09-16 05:13 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-10-14 14:12 - 2015-09-16 05:10 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-10-14 14:12 - 2015-09-16 05:09 - 05990912 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-10-14 14:12 - 2015-09-16 05:08 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-10-14 14:12 - 2015-09-16 05:08 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-10-14 14:12 - 2015-09-16 05:08 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-10-14 14:12 - 2015-09-16 05:08 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-10-14 14:12 - 2015-09-16 05:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-10-14 14:12 - 2015-09-16 04:58 - 20357632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-10-14 14:12 - 2015-09-16 04:58 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-10-14 14:12 - 2015-09-16 04:50 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-10-14 14:12 - 2015-09-16 04:46 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-10-14 14:12 - 2015-09-16 04:45 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-10-14 14:12 - 2015-09-16 04:45 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-10-14 14:12 - 2015-09-16 04:43 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-10-14 14:12 - 2015-09-16 04:41 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-10-14 14:12 - 2015-09-16 04:33 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-10-14 14:12 - 2015-09-16 04:33 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-10-14 14:12 - 2015-09-16 04:32 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-10-14 14:12 - 2015-09-16 04:32 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-10-14 14:12 - 2015-09-16 04:31 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-10-14 14:12 - 2015-09-16 04:31 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-10-14 14:12 - 2015-09-16 04:29 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-10-14 14:12 - 2015-09-16 04:29 - 00720896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-10-14 14:12 - 2015-09-16 04:28 - 02279936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-10-14 14:12 - 2015-09-16 04:28 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-10-14 14:12 - 2015-09-16 04:26 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-10-14 14:12 - 2015-09-16 04:26 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-10-14 14:12 - 2015-09-16 04:26 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-10-14 14:12 - 2015-09-16 04:24 - 00480256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-10-14 14:12 - 2015-09-16 04:23 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-10-14 14:12 - 2015-09-16 04:22 - 14458368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-10-14 14:12 - 2015-09-16 04:22 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-10-14 14:12 - 2015-09-16 04:22 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-10-14 14:12 - 2015-09-16 04:15 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-10-14 14:12 - 2015-09-16 04:11 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-10-14 14:12 - 2015-09-16 04:10 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-10-14 14:12 - 2015-09-16 04:07 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-10-14 14:12 - 2015-09-16 04:06 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-10-14 14:12 - 2015-09-16 04:05 - 04527616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-10-14 14:12 - 2015-09-16 04:05 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-10-14 14:12 - 2015-09-16 04:04 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-10-14 14:12 - 2015-09-16 03:59 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-10-14 14:12 - 2015-09-16 03:58 - 12853760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-10-14 14:12 - 2015-09-16 03:58 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-10-14 14:12 - 2015-09-16 03:56 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-10-14 14:12 - 2015-09-16 03:55 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-10-14 14:12 - 2015-09-16 03:55 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-10-14 14:12 - 2015-09-16 03:48 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-10-14 14:12 - 2015-09-16 03:37 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-10-14 14:12 - 2015-09-16 03:34 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-10-14 14:12 - 2015-09-16 03:32 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-10-14 14:12 - 2015-08-06 19:04 - 14176768 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-10-14 14:12 - 2015-08-06 19:03 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2015-10-14 14:12 - 2015-08-06 18:44 - 12875776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-10-14 14:12 - 2015-08-06 18:44 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2015-10-14 14:08 - 2015-10-01 19:06 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-10-14 14:08 - 2015-10-01 19:04 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-10-14 14:08 - 2015-10-01 19:00 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-10-14 14:08 - 2015-10-01 19:00 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-10-14 14:08 - 2015-10-01 19:00 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-10-14 14:08 - 2015-10-01 19:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-10-14 14:08 - 2015-10-01 19:00 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-10-14 14:08 - 2015-10-01 18:50 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-10-14 14:08 - 2015-10-01 18:00 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-10-14 14:08 - 2015-09-29 04:16 - 05569472 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-10-14 14:08 - 2015-09-29 04:13 - 01730496 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-10-14 14:08 - 2015-09-29 04:11 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-10-14 14:08 - 2015-09-29 04:11 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-10-14 14:08 - 2015-09-29 04:11 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-10-14 14:08 - 2015-09-29 04:11 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-10-14 14:08 - 2015-09-29 04:11 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-10-14 14:08 - 2015-09-29 04:11 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-10-14 14:08 - 2015-09-29 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-10-14 14:08 - 2015-09-29 04:11 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-10-14 14:08 - 2015-09-29 04:10 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-10-14 14:08 - 2015-09-29 04:10 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-10-14 14:08 - 2015-09-29 04:10 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-10-14 14:08 - 2015-09-29 04:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-10-14 14:08 - 2015-09-29 04:10 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-10-14 14:08 - 2015-09-29 04:10 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-10-14 14:08 - 2015-09-29 04:10 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-10-14 14:08 - 2015-09-29 04:10 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-10-14 14:08 - 2015-09-29 04:10 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-10-14 14:08 - 2015-09-29 04:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-10-14 14:08 - 2015-09-29 04:10 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-10-14 14:08 - 2015-09-29 04:09 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-10-14 14:08 - 2015-09-29 04:09 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-10-14 14:08 - 2015-09-29 04:05 - 03990976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-10-14 14:08 - 2015-09-29 04:05 - 03936192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-10-14 14:08 - 2015-09-29 04:05 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-10-14 14:08 - 2015-09-29 04:05 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-10-14 14:08 - 2015-09-29 04:02 - 01311768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 04:01 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:59 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-10-14 14:08 - 2015-09-29 03:59 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-10-14 14:08 - 2015-09-29 03:59 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-10-14 14:08 - 2015-09-29 03:59 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-10-14 14:08 - 2015-09-29 03:59 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-10-14 14:08 - 2015-09-29 03:59 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-10-14 14:08 - 2015-09-29 03:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-10-14 14:08 - 2015-09-29 03:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-10-14 14:08 - 2015-09-29 03:58 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-10-14 14:08 - 2015-09-29 03:58 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-10-14 14:08 - 2015-09-29 03:57 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-10-14 14:08 - 2015-09-29 03:57 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-10-14 14:08 - 2015-09-29 03:57 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-10-14 14:08 - 2015-09-29 03:57 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-10-14 14:08 - 2015-09-29 03:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-10-14 14:08 - 2015-09-29 03:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 03:49 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 02:50 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-10-14 14:08 - 2015-09-29 02:49 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-10-14 14:08 - 2015-09-29 02:49 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-10-14 14:08 - 2015-09-29 02:43 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-10-14 14:08 - 2015-09-29 02:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-10-14 14:08 - 2015-09-29 02:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 02:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 02:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-10-14 14:08 - 2015-09-29 02:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-10-14 14:08 - 2015-09-25 19:07 - 03168768 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-10-14 14:08 - 2015-09-25 19:07 - 02607104 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-10-14 14:08 - 2015-09-25 19:07 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-10-14 14:08 - 2015-09-25 19:07 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-10-14 14:08 - 2015-09-25 19:07 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-10-14 14:08 - 2015-09-25 19:07 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-10-14 14:08 - 2015-09-25 19:07 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-10-14 14:08 - 2015-09-25 19:06 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-10-14 14:08 - 2015-09-25 19:06 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-10-14 14:08 - 2015-09-25 19:06 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-10-14 14:08 - 2015-09-25 19:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-10-14 14:08 - 2015-09-25 18:59 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-10-14 14:08 - 2015-09-25 18:59 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-10-14 14:08 - 2015-09-25 18:59 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-10-14 14:08 - 2015-09-25 18:59 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-10-14 14:08 - 2015-09-25 18:58 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-10-14 14:08 - 2015-09-15 19:17 - 00157016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-10-14 14:08 - 2015-09-15 19:17 - 00097112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-10-14 14:08 - 2015-09-15 19:11 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-10-14 14:08 - 2015-09-15 19:11 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-10-14 14:08 - 2015-09-15 19:11 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-10-14 14:08 - 2015-09-15 19:11 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-10-14 14:08 - 2015-09-15 19:11 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-10-14 14:08 - 2015-09-15 19:11 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-10-14 14:08 - 2015-09-15 19:10 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-10-14 14:08 - 2015-09-15 18:36 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-10-14 14:08 - 2015-09-15 18:36 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-10-14 14:08 - 2015-09-15 18:36 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-10-14 14:08 - 2015-09-15 18:35 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2015-10-14 14:08 - 2015-07-18 14:08 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2015-10-09 20:20 - 2015-10-09 20:20 - 00000000 ____D C:\Users\N1tro\AppData\Roaming\OpenOffice.org

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-10-26 00:43 - 2015-08-02 21:57 - 00017091 _____ C:\Users\N1tro\Downloads\FRST.txt
2015-10-26 00:43 - 2015-08-02 21:57 - 00000000 ____D C:\FRST
2015-10-26 00:43 - 2015-08-02 21:56 - 02197504 _____ (Farbar) C:\Users\N1tro\Downloads\FRST64.exe
2015-10-26 00:43 - 2014-12-16 22:43 - 00000000 ____D C:\Users\N1tro\AppData\Roaming\Spotify
2015-10-26 00:42 - 2009-07-14 05:45 - 00022832 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-10-26 00:42 - 2009-07-14 05:45 - 00022832 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-10-26 00:39 - 2014-12-16 22:45 - 00000000 ____D C:\Users\N1tro\AppData\Local\Spotify
2015-10-26 00:34 - 2014-09-03 03:38 - 00699342 _____ C:\Windows\system32\perfh007.dat
2015-10-26 00:34 - 2014-09-03 03:38 - 00149450 _____ C:\Windows\system32\perfc007.dat
2015-10-26 00:34 - 2009-07-14 06:13 - 01619284 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-26 00:29 - 2014-09-18 17:52 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2015-10-26 00:28 - 2015-06-22 15:51 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-10-26 00:28 - 2014-09-04 15:53 - 00178778 _____ C:\Windows\PFRO.log
2015-10-26 00:28 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-10-26 00:28 - 2009-07-14 05:51 - 00069531 _____ C:\Windows\setupact.log
2015-10-26 00:27 - 2014-09-02 17:43 - 01166723 _____ C:\Windows\WindowsUpdate.log
2015-10-26 00:26 - 2015-01-15 23:51 - 00000000 ____D C:\Windows\system32\log
2015-10-26 00:26 - 2014-10-29 18:11 - 00000000 ____D C:\Users\N1tro\AppData\Roaming\Yahoo!
2015-10-26 00:26 - 2014-10-29 18:11 - 00000000 ____D C:\Program Files (x86)\Yahoo!
2015-10-26 00:16 - 2015-06-22 15:51 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-10-26 00:12 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\IME
2015-10-26 00:11 - 2015-05-09 09:15 - 00001157 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-10-26 00:11 - 2015-02-06 21:45 - 00002395 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Mobile Device Center.lnk
2015-10-26 00:11 - 2015-02-01 12:36 - 00002429 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-10-26 00:11 - 2014-10-29 18:10 - 00001052 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-Registrierung.lnk
2015-10-26 00:11 - 2014-09-15 21:21 - 00002507 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-10-26 00:11 - 2014-09-02 17:45 - 00002423 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2010.lnk
2015-10-26 00:11 - 2014-09-02 17:43 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2015-10-26 00:11 - 2014-09-02 17:43 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2015-10-26 00:11 - 2009-07-14 05:57 - 00001511 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-10-26 00:11 - 2009-07-14 05:57 - 00001340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2015-10-26 00:11 - 2009-07-14 05:57 - 00001292 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2015-10-26 00:11 - 2009-07-14 05:57 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2015-10-26 00:11 - 2009-07-14 05:54 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2015-10-26 00:10 - 2015-05-09 09:15 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-10-26 00:10 - 2014-12-16 22:45 - 00001759 _____ C:\Users\N1tro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2015-10-26 00:10 - 2014-10-29 18:10 - 00001363 _____ C:\ProgramData\Microsoft\Windows\Start Menu\HP Solution Center.lnk
2015-10-26 00:10 - 2014-09-02 18:36 - 00001431 _____ C:\Users\N1tro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-10-26 00:10 - 2009-07-14 06:01 - 00001218 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2015-10-26 00:10 - 2009-07-14 05:49 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2015-10-26 00:02 - 2015-04-25 23:52 - 00000000 ____D C:\Users\N1tro\AppData\Roaming\dvdcss
2015-10-25 22:42 - 2015-04-04 11:22 - 00000004 _____ C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-10-22 10:53 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2015-10-22 10:50 - 2009-07-14 03:34 - 79167488 _____ C:\Windows\system32\config\SOFTWARE.bak
2015-10-22 10:50 - 2009-07-14 03:34 - 55836672 _____ C:\Windows\system32\config\COMPONENTS.bak
2015-10-22 10:50 - 2009-07-14 03:34 - 20185088 _____ C:\Windows\system32\config\SYSTEM.bak
2015-10-22 10:50 - 2009-07-14 03:34 - 00524288 _____ C:\Windows\system32\config\DEFAULT.bak
2015-10-22 10:50 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\SECURITY.bak
2015-10-22 10:50 - 2009-07-14 03:34 - 00262144 _____ C:\Windows\system32\config\SAM.bak
2015-10-22 08:39 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2015-10-21 22:51 - 2014-09-14 14:02 - 01593564 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2015-10-19 13:30 - 2014-12-12 18:19 - 00000000 ____D C:\Users\N1tro\AppData\Roaming\vlc
2015-10-16 00:08 - 2014-12-11 22:54 - 00000000 ____D C:\Windows\system32\appraiser
2015-10-16 00:08 - 2014-09-03 21:41 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-10-13 13:17 - 2015-04-04 20:47 - 00000000 ___SD C:\Windows\system32\GWX
2015-10-08 16:21 - 2015-04-04 20:47 - 00000000 ___SD C:\Windows\SysWOW64\GWX

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-05-19 12:47 - 2015-05-19 12:47 - 0000079 _____ () C:\Program Files (x86)\prefs.js
2014-10-29 18:08 - 2014-10-29 18:13 - 0001264 _____ () C:\ProgramData\hpzinstall.log

Einige Dateien in TEMP:
====================
C:\Users\N1tro\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-10-22 08:31

==================== Ende von FRST.txt ============================

So nochmal vielen Dank.
Gute Nacht

schrauber · 26.10.2015, 19:04

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Downloade Dir bitte

SecurityCheck und:

Speichere es auf dem Desktop.
Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.

Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?

Electropuls · 28.10.2015, 21:58

Gute Abend,
hier ist der erste Teil der ESET Logfile:

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=fc5b87b06d68554ba9aa181314273488
# end=init
# utc_time=2015-10-28 10:32:26
# local_time=2015-10-28 11:32:26 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 26450
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=fc5b87b06d68554ba9aa181314273488
# end=updated
# utc_time=2015-10-28 10:37:44
# local_time=2015-10-28 11:37:44 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=fc5b87b06d68554ba9aa181314273488
# engine=26450
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-10-28 05:49:33
# local_time=2015-10-28 06:49:33 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='Kaspersky Internet Security'
# compatibility_mode=1296 16777213 100 100 31334 50130855 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 101812 197684423 0 0
# scanned=1059281
# found=1458
# cleaned=0
# scan_time=25908
sh=89AB0DA96607E0B0E3CDF569E120FD6095470CB9 ft=1 fh=1ab80e550a5d5237 vn="Variante von Win32/Toolbar.CrossRider.CR evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Monster Shopping\monster_shopping_helper_service.exe.vir"
sh=545976220D62E6BCEFDF473A1B27756F4F9FC503 ft=1 fh=627c149646cc95bd vn="Variante von Win32/DownloadAdmin.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Qoobox\Quarantine\C\Users\N1tro\AppData\Local\Microsoft\Windows\Temporary Internet Files\update_14.exe.vir"
sh=5A10808918F9353926F9369B35371F78BA79FCA8 ft=1 fh=1ddd8e40be133363 vn="Win32/ELEX.BF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\N1tro\AppData\Local\Temp{505CA64F-BF7F-4FCB-9887-FA6E97133B0A}\eUpgrade\eupgrade.exe"
sh=9A91EB442FDF6361DF105CB94935C90FE55D9D97 ft=1 fh=5969f3b707a8482f vn="Variante von Win32/ELEX.EM evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\N1tro\AppData\Local\Temp{505CA64F-BF7F-4FCB-9887-FA6E97133B0A}\OmigaZip_patch\airzip_ws.exe"
sh=A835CCD73EAD76A67D91EE2BF9F4AC9A7B55E189 ft=1 fh=f190e3e22eb52d9f vn="Variante von Win32/ELEX.FP evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\N1tro\AppData\Local\Temp{505CA64F-BF7F-4FCB-9887-FA6E97133B0A}\OmigaZip_patch\dup.exe"
sh=0147937D9077F226E60DF191DA2175A4AC9EE45E ft=1 fh=88de78e712e5bb20 vn="Variante von Win32/ELEX.Y evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\N1tro\AppData\Local\Temp{505CA64F-BF7F-4FCB-9887-FA6E97133B0A}\OmigaZip_patch\winzipersvc.exe"
sh=69C56C9B1DB8EBBBD594A2863218063AF1B6DA53 ft=1 fh=5e7d95f270db1829 vn="Variante von Win32/ELEX.BI evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\N1tro\AppData\Local\Temp{505CA64F-BF7F-4FCB-9887-FA6E97133B0A}\OmigaZip_patch\wz_ydl.exe"
sh=80D1318B2A21A852FA4612C8A358A4C2DBB66277 ft=1 fh=4997b222aeaab8c5 vn="Variante von Win32/DownloadAdmin.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\N1tro\Downloads\4keenc.exe"
sh=D205B153EC8C0E944FF2C4241D29E156E6D0F95A ft=1 fh=76ada7282bffe46b vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\N1tro\Downloads\BS Player - CHIP-Installer.exe"
sh=9598767A6862B00C2B7F5F1D0ABF2A4059130894 ft=1 fh=b95bf0e280b400bb vn="Variante von Win32/DownloadSponsor.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\N1tro\Downloads\Firefox - CHIP-Installer.exe"
sh=0E2B306577FD2EA74AA2F0CA6A0D374D87AD6EF3 ft=1 fh=e082361eaeaab8c5 vn="Variante von Win32/DownloadAdmin.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\N1tro\Downloads\keendrms.exe"
sh=D5E781731ADDB6BB5293264D437FE653FD082872 ft=1 fh=f45b61cadf02af8f vn="Variante von Win32/AdWare.iBryte.BC Anwendung" ac=I fn="C:\Users\N1tro\Downloads\Setup (1).exe"
sh=C936B29AFAC62B84635F7F330DEE006858D32DB1 ft=1 fh=d0dd964c698bda67 vn="Variante von Win32/Bundlore.N evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\N1tro\Downloads\Setup (2).exe"
sh=AA1BDB4D804C398BDA42727347E7702D5779F63A ft=1 fh=6e8416c994a1d578 vn="Variante von Win32/AdWare.iBryte.BC Anwendung" ac=I fn="C:\Users\N1tro\Downloads\Setup.exe"
sh=27C9BD6A05DA87C72B722534F115E411C53D2DC4 ft=1 fh=dd66c373406c8aae vn="Win32/Systweak.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\N1tro\Downloads\tamnsp_030909123297291970.exe"
sh=27C9BD6A05DA87C72B722534F115E411C53D2DC4 ft=1 fh=dd66c373406c8aae vn="Win32/Systweak.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\N1tro\Downloads\tamnsp_030909124612392419.exe"
sh=43FAC9E9DA946E2B84CEB71D10CBA8C25A8D2047 ft=0 fh=0000000000000000 vn="JS/Trackware.Agent.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\N1tro\Downloads\maahi ve_files\det.js"
sh=43FAC9E9DA946E2B84CEB71D10CBA8C25A8D2047 ft=0 fh=0000000000000000 vn="JS/Trackware.Agent.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Users\N1tro\Downloads\sexy movimiento_files\det.js"
sh=96670FB575C7F9DBF109DAED128C56D32096BE24 ft=1 fh=94ef86dfb66d56cf vn="Variante von Win64/Agent.BE Trojaner" ac=I fn="C:\Windows\System32\Hibiki.dll"
sh=2A58EF9925B78DB27409BAD75BDC8509C5270567 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5\104[1].js"
sh=C87C58F7745BC06A59658F7CA9FD4B4189090CD7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5\91[1].js"
sh=246DDBC3A2C223A6B9072637D93DC2A2832D097A ft=1 fh=c71c0011b04f613a vn="Win32/Toolbar.Babylon.Y evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\All Users\DSearchLink\DSearchLink.exe"
sh=E1C99225C4C16710DE3AF3D52300E1E943F7C84F ft=1 fh=f891ef12b7700e02 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\All Users\SweetIM\Messenger\update\sweetimsetup.exe"
sh=1549CF4F9282F1B42A58B5E050E12EF0AD669798 ft=1 fh=ffe6693d8bc7d6c5 vn="Win32/Toolbar.Babylon.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\BabSolution\Shared\BabMaint.exe"
sh=671E3E4E9E4C9A039D9AD1479A0C91E670AF18E3 ft=1 fh=d643e79c9fb8f862 vn="Win32/Toolbar.Babylon.AE evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\BabSolution\Shared\BUSolution.dll"
sh=BAFA6DD81186B508DC4DF6E3C85F84AFEFEDE66B ft=1 fh=d47ea16ce26bdfeb vn="Win32/InstallCore.BM evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\DealPly\UpdateProc\UpdateTask.exe"
sh=73EEB1BF64EE520BD69D1E3A1173A0CEF71C4A59 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\chrome\content\core\xhr.js"
sh=8E404BAFA9CEAC0628F089B4F1AA879EB5A3404E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\101_cortica_m.js"
sh=A2A4635BF27718AF19D3E9BD90E8D4EF7205CAF8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\102_dealply_m.js"
sh=7FB2B410D7A3C932D5B739BEAEFD74BBBB94FE44 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\103_intext_5_m.js"
sh=2A58EF9925B78DB27409BAD75BDC8509C5270567 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\104_jollywallet_m.js"
sh=928B3A0AAB8E65FB9E3A586D99E80AD24A68A831 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\105_corticas_m.js"
sh=A69DBD3502EA9C4EDD7DEAFB23A8FC1C97BAB232 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\107_coupish_m.js"
sh=723041AFAA11FE75C1E748C4BCD3D15B4F61145F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\108_icm_m.js"
sh=E531E2197FC767CFACEA72A75E1CE492D08F92DA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\116_ads_only_5_m.js"
sh=C3D3CCADC78D71D7482BB5DBA16FBB0534200D12 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\117_coupons_intext_ads_5_m.js"
sh=8C65267C1AADD4AB670D6D979C4A686D16A86869 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\119_similar_web_m.js"
sh=D10EA105AB5DB329186B0B6F10541DD58058AEB8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\120_luck_m.js"
sh=9D0040A52CBC49955031A7B1DA89AC5E4087CE5B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\123_intext_adv_m.js"
sh=A10DC85BE857C7F24E7E88CA57ABD24ECE131DC8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\124_superfish_no_search_no_coupons_m.js"
sh=62B063E0D121966E9A83C9AB518DADAE47423555 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\125_arcadi2_m.js"
sh=B1FD213981E274BCEE2697A82C7E87CA7418C39B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\126_revizer_ws_m.js"
sh=2536CE239CC1E9DCCB8931BC82F1CF8520F55686 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\127_revizer_p_m.js"
sh=EF36C9502A12C97CF29A90C0ACE3DCF72ACD389E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\128_superfish_pricora_m.js"
sh=D9E89F57D3A13498640961F3B9954D67D7EA1039 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\129_widdit_m.js"
sh=B9CFC11B067C54952D592C618BD391AA26B3393B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\135_arcadi3_m.js"
sh=17483832BF1FA23335B7C1E04A0530AB60CBEDC6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\138_getdeal_m.js"
sh=90A4F559561CF603A203F93D56C80B17B8152325 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\141_corticas_ru_m.js.js"
sh=8395A2B6D59D2F3EDDCFC863DDA2F674396DC74C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\142_intext_fa_m.js"
sh=51822FF4DBA10C1C71FCA1C6CDE317212E909C16 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\14_CrossriderUtils.js"
sh=736E2498BA47FECD737FE362E155DFD1850D096E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\155_ibario_pops_m.js"
sh=FA8C6C2029BA73EB8FD626C234D88B1B57E953C5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\158_50onred_ads_only_no_fb_m.js"
sh=18C46AE5CB67274764D17F8A40975EEB5C67F795 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\159_cortica_rollover_m.js"
sh=3DA0E458C1D4F5CECA7F012A2B0DA4CC1C7B63A1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\170_icm1_5_m.js"
sh=EDAF8A2B6318DD482F0BBDC2A96C109697D86E5A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\171_arcadi2_sourceID_m.js"
sh=2184DFBF93B03726607BF2C44682CF058FB2987B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js"
sh=F6FA9D82AEFE95E8544F0B7EE8D1784E6A3D02A9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\175_coolmirage_m.js"
sh=FC86A52994A26E8F6F944D2BB1A1955BDE928100 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\178_revizer_ws_dynamic_m.js"
sh=A2F229B2BBCDAFC3A740DD205122E858DFF5E794 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\179_revizer_p_dynamic_m.js"
sh=BD70E8BC50324F58EFD302B6A17C16D6A2C68413 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\180_bpo_serp_m.js"
sh=8AF7DA529E5BE7EB53201E9E982A0EF9C1718675 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\184_noproblemppc_m.js"
sh=541F6B364455354268941C1D81E2E0FCAA633FC9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\189_active_sanity.js"
sh=06107E2CB2818761C26753E71FE096DFDE882F3F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\190_pops_5_m.js"
sh=4168C15341DD91504013B4DD0A19F9016D268AA3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\191_ciuvo_m.js"
sh=BAD6F905DCD72B7D2A93D06582B026F3CCF3616E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\192_revizer_ws_dynamic_b2b_m.js"
sh=5B3338E8C3C20A95C180626940F7C6BC46D49F5D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\193_revizer_p_dynamic_b2b_m.js"
sh=7F88F1865FBE0A134FAEA5DA7B88C7264BBC1606 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\194_retargeting_bi_m.js.js"
sh=FCD343976905A1CE3BB880C1C4A251AEDA3E140B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\195_icm_convertmedia_m.js"
sh=675F44991136237FD89C48DFCB5C60FDED223BD8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\197_kreapixel_pops_m.js"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\198_superfish_no_search_no_coupons_plushd_m.js"
sh=07EDC29FCB544EFD7D231A67B2437BB2E5E7B917 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\199_superfish_no_coupons_plushd_m.js"
sh=41247167B9CCDA7B7301B0647606AD3DB1304E45 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\200_foxydeal_m.js"
sh=7922F11759DB9C0610F7DAC3FC6540F2C98FC31B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\204_pricedetect_m.js"
sh=4763DEF2AC4EC29A3B0298F0DB54D4BE8E5931F7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\208_gam_manager.js"
sh=5902FC10054355A5B8B9CC41620445BAA0F1D0AB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\21_debug.js"
sh=5DD581E41A53887D16BAC93BCFEA8237158B7712 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\221_icm_downloads_m.js"
sh=390A4CC4D1B2877516D08A9AF727494C3A793D9C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\223_imonomy_m.js"
sh=D00B280C5C3A849C6A88A11BF37643A943BF03BC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\226_set_campaign_id_m.js"
sh=631ED8ED094774350B464DCD774ED5B297FD2F99 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\230_revizer_ws_dynamic_b2b_2_m.js"
sh=ABD00A535A977E2E3FDDB6E316F17F2EF37C2489 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\231_revizer_ws_dynamic_2_m.js"
sh=EC15A1F579BD66B90DACE75A468FF9AE49958F4F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\233_revizer_p_dynamic_b2b_2_m.js"
sh=5D5F61F18A317DF935B86EC4BDD4A5D6A7AEAF8C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\242_price_gong_m.js"
sh=602A8F0ABF9E608FA1C5193A97CC7AF608CED469 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\244_engageya_inner_m.js"
sh=8CA0579B9753600D9AF05D837F9340F2A3AD7FC4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\260_pricedetect_sidebar_m.js"
sh=2819F5D81CAA3D85A770EF11D5039297328E4636 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\262_pops_5_j_m.js"
sh=1A30610C243DF37176386AF45C43C24913D8B235 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\263_intext_5_j_m.js"
sh=F7AED4464DF92C3350E65E499BE40A9685A1883C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\268_stats_ff.js"
sh=6D0A5C89885FA87550DF678D8B5CF3FA07B6ACD5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\273_aedgency_back_button_m.js"
sh=C73163CD43855A22A94B96091468B962503C19FD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\281_ibario_tier3_pops_m.js"
sh=FBB87C180584CC593BBEF71609A5AE0528AFCB57 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\289_covus_logos_m.js"
sh=4666A52D4EEF9AD0B5BEF9DFF1A9163C17D03398 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\28_initializer.js"
sh=2EBC101982648313FFE20510A6C6754410F9D89B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.M evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\47_resources_background.js"
sh=148CA44D7C0A3E2F5E2A3D38EFC5D999D2701A84 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.P evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\64_appApiMessage.js"
sh=0780C0833DF3CDE93600966150D8DB918700832F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\91_monetizationLoader.js.js"
sh=93022F69189E8D2F1B4B8717522CA1AFFA59F708 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\92_superfish_m.js"
sh=F9B8598D93FB23CD506875B942368184AB47EDD2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\93_superfish_no_coupons_m.js"
sh=282E43766D30716E793A5122951C2AE76FD8CBCC ft=0 fh=0000000000000000 vn="Win32/DealPly.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}\chrome\content\dealply.xul"
sh=BD70E8BC50324F58EFD302B6A17C16D6A2C68413 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\33ZPNKMW\180[1].js"
sh=FCD343976905A1CE3BB880C1C4A251AEDA3E140B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\33ZPNKMW\195[1].js"
sh=ABD00A535A977E2E3FDDB6E316F17F2EF37C2489 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\33ZPNKMW\231[1].js"
sh=602A8F0ABF9E608FA1C5193A97CC7AF608CED469 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\33ZPNKMW\244[1].js"
sh=F9B8598D93FB23CD506875B942368184AB47EDD2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\33ZPNKMW\93[1].js"
sh=6BB5FEB5591E628AFCBE7ECE24818D694288178C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\33ZPNKMW\ciuvo_m[1].js"
sh=2A58EF9925B78DB27409BAD75BDC8509C5270567 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\104[1].js"
sh=9D0040A52CBC49955031A7B1DA89AC5E4087CE5B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\123[1].js"
sh=390A4CC4D1B2877516D08A9AF727494C3A793D9C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\223[1].js"
sh=631ED8ED094774350B464DCD774ED5B297FD2F99 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\230[1].js"
sh=6D0A5C89885FA87550DF678D8B5CF3FA07B6ACD5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\273[1].js"
sh=089CC10FABD94FCFF67B2C2A2A0FE6437CC67E5C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.P evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\appApiMessage[1].js"
sh=C7C186E54D042C9DCAACD170347F10C188AEC85D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\arcadi2_m[1].js"
sh=91F440A8F2A0FFC91EDA87FE5410B93141B1C6B0 ft=1 fh=1ce5d7cf83504dfe vn="Win32/Toolbar.Conduit.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\checktbexist[1].exe"
sh=DED4D5AC65600899CE571E960D7B9D20DBEFD9BB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\coupish_m[1].js"
sh=83CDCE21D2E22142F1D24D0C225529B9D8485EAB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\dealply_m[1].js"
sh=BA13B61D2A823E7CBBDC85CD5CE511946BC86E65 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\debug[1].js"
sh=EBBF4F0191C6877E61F5B4AF7ADDA486317B1892 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\icm1_5_m[1].js"
sh=6E13058E4E3C707DB2419E5173252AC9742A4F7F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\intext_adv_m[1].js"
sh=64E1E6B4EF399CFE19D4D144505F344FF97E8CCB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\intext_fa_m[1].js"
sh=E008307C95AD4C1D040B009D307E13C03146B1BF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\jollywallet_m[1].js"
sh=CC9B5D471D8C379CBAA0E63FE16033287F90F82D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\jollywallet_m[2].js"
sh=52E4B498947D3D88D7C6042611258238D71CA0C4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\monetizationLoader[1].js"
sh=C44FEB9DD6271C71E9D4B4899D73CAA0F5F93746 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\monetizationLoader[2].js"
sh=B4853CCBF4F400FB3A12155815CFFD0D74C8EEAC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\noproblemppc_m[1].js"
sh=DC1023F5B4F5492886AACAAD2D9F89CAB5099140 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\revizer_ws_dynamic_2_m[1].js"
sh=57F74C3FAF6723290F6FA3341542A17948A76BCD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\revizer_ws_dynamic_m[1].js"
sh=8C65267C1AADD4AB670D6D979C4A686D16A86869 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\similar_web_m[1].js"
sh=BFD0F29067CAE71544784708FE5554D6518AD6AD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\superfish_no_coupons_m[1].js"
sh=176D4038122B1FF7370825F721F36F73103C5873 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\superfish_pricora_m[1].js"
sh=7FB2B410D7A3C932D5B739BEAEFD74BBBB94FE44 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EX0FY0B8\intext_5_m[1].js"
sh=93BC0753E3E9A3C7A8D1AA09D7E4AE6BDA169F51 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EX0FY0B8\superfish_no_search_no_coupons_m[1].js"
sh=A2F229B2BBCDAFC3A740DD205122E858DFF5E794 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\179[1].js"
sh=4168C15341DD91504013B4DD0A19F9016D268AA3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\191[1].js"
sh=0D8089E7A813AEBF2DDCC2DD72D2B2CADE68DAF5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\263[1].js"
sh=40364CD66B83A2B2D060BAF8948B89BBEF4E024B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\50onred_ads_only_no_fb_m[1].js"
sh=FA8C6C2029BA73EB8FD626C234D88B1B57E953C5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\50onred_ads_only_no_fb_m[2].js"
sh=D67303051C4C06CDA7B352169D649F4AEFF862B6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\arcadi3_m[1].js"
sh=FBB7D706F207407D497E9D92FFAEB182CCDEECC6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\base[1].js"
sh=140BE41E58E7CB6E9B38B4ED892886CED78C2E58 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\corticas_m[1].js"
sh=6D2F2235E6E222A4C85EEA5503BBA4FC94C3D81C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\CrossriderUtils[1].js"
sh=A25A0BC1A2A0420B02091E83382150FEFF594239 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\ibario_pops_m[1].js"
sh=1D0D0004624903CF66D059CC3EFB513926B2B8BC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\icm_m[1].js"
sh=066D67D3C0F4110A52C2843171BCB750FA7A6E6B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\intext_5_m[1].js"
sh=24AA0A999D9AA9ED69DBD3AD37D4C0C1A4D8DC89 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\intext_adv_m[1].js"
sh=63362C65C083ABF77E174E7351F333927EB9A5C9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\luck_m[1].js"
sh=99ED957925C94680B2842F0C146CF7F28A86CCD0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\monetizationLoader[1].js"
sh=7F88F1865FBE0A134FAEA5DA7B88C7264BBC1606 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\retargeting_bi_m[1].js"
sh=09E41DAB84A351A234F471879A1C5FC682957ABA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\revizer_p_dynamic_m[1].js"
sh=2DC335A206411AD5B2CB8E8AB2B1333596493CB9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\set_campaign_id_m[1].js"
sh=D00B280C5C3A849C6A88A11BF37643A943BF03BC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\set_campaign_id_m[2].js"
sh=F89D0D35647789000A23E8BD1E557BEE519A6BAE ft=1 fh=4f81c51847428f3f vn="Win32/Toolbar.Conduit evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\statisticsstub[1].exe"
sh=69C3AF55C20BCCC3E20E0FD53946E475A79FC691 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\superfish_m[1].js"
sh=DE77AF1BC7040DB9F309A8151B29B79CCC948372 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\superfish_no_coupons_m[1].js"
sh=A10DC85BE857C7F24E7E88CA57ABD24ECE131DC8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NOE71Y11\124[1].js"
sh=120A1897CDAF91977081CA628B33BB478348DCF2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NOE71Y11\198[1].js"
sh=5D5F61F18A317DF935B86EC4BDD4A5D6A7AEAF8C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NOE71Y11\242[1].js"
sh=C73163CD43855A22A94B96091468B962503C19FD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NOE71Y11\281[1].js"
sh=631208AA15917E2265B37C9DE13EBF01FC31DAAA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NOE71Y11\91[1].js"
sh=11376809A5A6927852EB7A33F74A50F3641187A1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NOE71Y11\ibario_pops_m[1].js"
sh=CA8EB6A3D414C06F4A4A55BC59116ACCAD6E9E27 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NOE71Y11\setup[1].js"
sh=2DC335A206411AD5B2CB8E8AB2B1333596493CB9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NOE71Y11\set_campaign_id_m[1].js"
sh=FBB7D706F207407D497E9D92FFAEB182CCDEECC6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\base[1].js"
sh=B683C210045A4133B80E4ECC0C23BC3196B66514 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\bpo_serp_m[1].js"
sh=EE0C01CA81EBB2B46504012816E1B3EC0FE5F29C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\cortica_m[1].js"
sh=288FB4BEC59EEF7E0827216B4286A69802EDC05F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\cortica_rollover_m[1].js"
sh=A7400B116369A3142513FD9A3E93134369137036 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\coupons_intext_ads_5_m[1].js"
sh=0967FA27EE3C8C806CA6F556814F647D73F51EB8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\dealply_m[1].js"
sh=BAFD0049395B7968BFFBC54723176162D6687D58 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\gam_manager[1].js"
sh=5F4085D36D3743A164582B9628469218ECD72EBA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\getdeal_m[1].js"
sh=705F7674C554A2BDA26E88C6776C54FDBF379002 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\icm_convertmedia_m[1].js"
sh=4666A52D4EEF9AD0B5BEF9DFF1A9163C17D03398 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\initializer[1].js"

Electropuls · 28.10.2015, 21:59

zweiter Teil:

Code:

ATTFilter

sh=9832E303AF1F020C6DD37DB8D8E7A0FF40979142 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\intext_adv_m[1].js"
sh=495ADA4EE9CA2DC352A81211D32F1314E46F2D72 ft=1 fh=53d6f5fcee269c1b vn="Win32/Toolbar.Conduit.AP evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\ism[1].exe"
sh=431AC6F8406F059B0E9126386C40A2EE543E5EC3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.M evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\resources_background[1].js"
sh=136A896CF87EB4A77AB67B0F7336A95EB33E4EB7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\revizer_p_dynamic_m[1].js"
sh=4FBFF27F955D2D65199D5E28BC62358ABF619C04 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\revizer_p_m[1].js"
sh=17455E3C3ACDC5230501BB3BA992829B8669DDC5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\superfish_no_coupons_m[1].js"
sh=CF138C16214F3451EE8CF965CB30532461AA0614 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\superfish_no_search_no_coupons_m[1].js"
sh=C8E1096B9DFA740D5A50D39A86B19D7E92CCAAB3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\superfish_no_search_no_coupons_m[2].js"
sh=96876E22992058E2DAF3AE9738C9FE95F7DC4F8C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\superfish_no_search_no_coupons_plushd_m[1].js"
sh=FC86A52994A26E8F6F944D2BB1A1955BDE928100 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\178[1].js"
sh=5DD581E41A53887D16BAC93BCFEA8237158B7712 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\221[1].js"
sh=8CA0579B9753600D9AF05D837F9340F2A3AD7FC4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\260[1].js"
sh=D0F1CA6766DDDA77AC04D613EF26D48EEA5DA5E4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\262[1].js"
sh=33BAF57529341A52E67FD88769C280CD75EAEA1A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\269[1].js"
sh=2CF9673BEBBF43F647E03F92E7B59240B7339E06 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\50onred_ads_only_no_fb_m[1].js"
sh=F8BD38D50F0348CEF64D0B397BF6BAC1EC8A3CD0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\ads_only_5_m[1].js"
sh=EDAF8A2B6318DD482F0BBDC2A96C109697D86E5A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\arcadi2_sourceID_m[1].js"
sh=BD99029E3E064DE3BDC009BED86CE5F9F6556130 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\ciuvo_m[1].js"
sh=414BA1B7AEF9A844B50F88BC0548E60F296EF5F5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\corticas_ru_m[1].js"
sh=FF68239BA1F9AFA35E039DEB47E536BF1DA6217B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\CrossriderUtils[1].js"
sh=C403B988AF2EFC2B9DD070F5C5A3070244B7DEE2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\dealply_m[1].js"
sh=B8B5897BC3983B6CE75447868BDAE3EB1441E61C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\ibario_pops_m[1].js"
sh=723041AFAA11FE75C1E748C4BCD3D15B4F61145F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\icm_m[1].js"
sh=60D25EF0BC5392D5A28A39F59C89C2D51915213B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\intext_5_m[1].js"
sh=06107E2CB2818761C26753E71FE096DFDE882F3F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\pops_5_m[1].js"
sh=1D99BB2929871C3A9B94B31AB34B0257069520D0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\revizer_ws_dynamic_m[1].js"
sh=19168753DB0183D5DEFC42DBC9AF43E2EBD86BEB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\revizer_ws_m[1].js"
sh=1F2641FFCA5C1DACAAA217BE7C9989F7AC05C1A1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\similar_web_m[1].js"
sh=2A6234AC2FF85E104F854C0BCDEE42E70CA0A6EE ft=1 fh=04909f28e8d9c2a4 vn="Win32/Toolbar.Conduit.S evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\stublogic[1].exe"
sh=5A2E194F65251D63A145311F957D0A94061D2159 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\superfish_no_search_no_coupons_plushd_m[1].js"
sh=5BD7B82662A263F1138F5E2A90138A8BFA5C4853 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\widdit_m[1].js"
sh=A2A4635BF27718AF19D3E9BD90E8D4EF7205CAF8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0FV3Y3R\102[1].js"
sh=8AF7DA529E5BE7EB53201E9E982A0EF9C1718675 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0FV3Y3R\184[1].js"
sh=EC15A1F579BD66B90DACE75A468FF9AE49958F4F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0FV3Y3R\233[1].js"
sh=FBB87C180584CC593BBEF71609A5AE0528AFCB57 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0FV3Y3R\289[1].js"
sh=81762DED63040E42A925A293E650EB0275C3B3EC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0FV3Y3R\bpo_serp_m[1].js"
sh=06A8A2563355C9618B1F3AF11748C1C42F98F901 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0FV3Y3R\gam_manager[1].js"
sh=D767D39DA00E1507AB72DF2BBF0DF984E5F67F87 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0FV3Y3R\icm_downloads_m[1].js"
sh=89704379C68557B0711B238ED63862E1CF1013B0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0FV3Y3R\imonomy_m[1].js"
sh=19716D7C7440A9C3717A84FAA43FBA1EEBABD61B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0FV3Y3R\revizer_ws_dynamic_2_m[1].js"
sh=E0C5DA830661148F1D2401700F094155E38A2BA0 ft=1 fh=53f7a24e2a3a886d vn="MSIL/MyPCBackup.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\BackupSetup.exe"
sh=F7C903191EA312D9FDF7D8C9BBE2F1F418402F67 ft=1 fh=fb93c680c7db8c27 vn="Win32/DealPly.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\dealply.exe"
sh=6160D7E55C91DD36A3D48D07B525BB9F238C20E0 ft=1 fh=6378d94e0742c92e vn="Variante von Win32/Toolbar.Babylon.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\MyDelta_sftnc.exe"
sh=D2C5BBB4CD52FF1F63CB84FF7E6EA5D3F4034C5C ft=1 fh=8ebab0a3d0a12b9c vn="Win32/Packed.ScrambleWrapper.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\plus-hd-2-6.exe"
sh=512C96C070CE041B287293692F3E6B1373881CEE ft=1 fh=363c26ad9d3ef7f9 vn="Variante von Win32/SpeedUpMyPC.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\speedupmypc.exe"
sh=353F2132ACA133914DDB694BC38DE813C8E4A781 ft=1 fh=2d870d31e4c6b62f vn="Win32/SweetIM.N evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\toolbar_vit_sweetim.exe"
sh=F3C848B67FD2914516F83FB65B204F61768C4EFB ft=1 fh=b7e14907d3f07c71 vn="Win32/Somoto.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\UpdateCheckerSetup.exe"
sh=1549CF4F9282F1B42A58B5E050E12EF0AD669798 ft=1 fh=ffe6693d8bc7d6c5 vn="Win32/Toolbar.Babylon.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\8547BE11-BAB0-7891-8255-95ABBF0197C6\Latest\BabMaint.exe"
sh=DED201AE02FB9EA3646489AFEDA49270C4620D9C ft=1 fh=c71c001196f8c3ac vn="Variante von Win32/Toolbar.Babylon.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\8547BE11-BAB0-7891-8255-95ABBF0197C6\Latest\BExternal.dll"
sh=EEFF60A396BED04892CA52676900D8587DDBF535 ft=1 fh=68bfd67c0e83835c vn="Win32/Toolbar.Babylon.AE evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\8547BE11-BAB0-7891-8255-95ABBF0197C6\Latest\BUSolForMontiera.dll"
sh=671E3E4E9E4C9A039D9AD1479A0C91E670AF18E3 ft=1 fh=d643e79c9fb8f862 vn="Win32/Toolbar.Babylon.AE evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\8547BE11-BAB0-7891-8255-95ABBF0197C6\Latest\BUSolution.dll"
sh=3B15680A3589647FF70A88674775D76A6091CA58 ft=1 fh=f4428b42dcd5e354 vn="Win32/Toolbar.Babylon.AE evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\8547BE11-BAB0-7891-8255-95ABBF0197C6\Latest\ChromeToolbarSetup.dll"
sh=1466BC1893B6D4B277A177CD2C7D1BEF65F6AAEB ft=1 fh=407239d3cdeb51cc vn="Win32/Toolbar.Babylon.U evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\8547BE11-BAB0-7891-8255-95ABBF0197C6\Latest\CrxInstaller.dll"
sh=246DDBC3A2C223A6B9072637D93DC2A2832D097A ft=1 fh=c71c0011b04f613a vn="Win32/Toolbar.Babylon.Y evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\8547BE11-BAB0-7891-8255-95ABBF0197C6\Latest\DSearchLink.exe"
sh=7759A3318DE2ABC3755EBB7F50322C6D586B5286 ft=1 fh=e3d39714b3bfb2a0 vn="Win32/Toolbar.Babylon.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\8547BE11-BAB0-7891-8255-95ABBF0197C6\Latest\IEHelper.dll"
sh=25EA5C7F4A48D166A2006CA37B936ECA340F58ED ft=1 fh=c71c0011e4611a52 vn="Win32/Toolbar.Babylon.V evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\8547BE11-BAB0-7891-8255-95ABBF0197C6\Latest\MntrDLLInstall.dll"
sh=63B9ACAA33978D6BA181B45C51DABE9FF76B50AA ft=1 fh=75ac944de1f3f413 vn="Variante von Win32/Toolbar.Babylon.H evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\8547BE11-BAB0-7891-8255-95ABBF0197C6\Latest\Setup.exe"
sh=FD77BC87BEE4F586A299540541FE37A2F7180FBE ft=1 fh=5fa0813bf2381fde vn="Win32/Toolbar.Babylon.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\bus2819\CrxUpdater_d.exe"
sh=FD77BC87BEE4F586A299540541FE37A2F7180FBE ft=1 fh=5fa0813bf2381fde vn="Win32/Toolbar.Babylon.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\bus53F9\CrxUpdater_d.exe"
sh=FD77BC87BEE4F586A299540541FE37A2F7180FBE ft=1 fh=5fa0813bf2381fde vn="Win32/Toolbar.Babylon.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\bus5BE5\CrxUpdater_d.exe"
sh=FD77BC87BEE4F586A299540541FE37A2F7180FBE ft=1 fh=5fa0813bf2381fde vn="Win32/Toolbar.Babylon.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\bus79B1\CrxUpdater_d.exe"
sh=FD77BC87BEE4F586A299540541FE37A2F7180FBE ft=1 fh=5fa0813bf2381fde vn="Win32/Toolbar.Babylon.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\bus7A6C\CrxUpdater_d.exe"
sh=FD77BC87BEE4F586A299540541FE37A2F7180FBE ft=1 fh=5fa0813bf2381fde vn="Win32/Toolbar.Babylon.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\bus8B9C\CrxUpdater_d.exe"
sh=FD77BC87BEE4F586A299540541FE37A2F7180FBE ft=1 fh=5fa0813bf2381fde vn="Win32/Toolbar.Babylon.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\bus8D41\CrxUpdater_d.exe"
sh=FD77BC87BEE4F586A299540541FE37A2F7180FBE ft=1 fh=5fa0813bf2381fde vn="Win32/Toolbar.Babylon.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\busA756\CrxUpdater_d.exe"
sh=FD77BC87BEE4F586A299540541FE37A2F7180FBE ft=1 fh=5fa0813bf2381fde vn="Win32/Toolbar.Babylon.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\busB4DD\CrxUpdater_d.exe"
sh=CCD90EE6E9B1ADFF9657E8F2C126BC6CB5C2EB24 ft=1 fh=91473923cd86549e vn="Variante von Win32/SProtector.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\is-E08V7.tmp\OptProCrash.dll"
sh=3C2B223177349FB007AF167729C5D0DB484C861A ft=1 fh=c71c0011b0d87986 vn="Variante von Win32/Packed.VMDetector.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\nsg2F0.tmp\InstallerUtils.dll"
sh=608017C168EB1D6FA595F85FC1E4D2DDAB9B3024 ft=1 fh=ffa22ada16ac070f vn="Variante von Win32/Toolbar.CrossRider.S evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\nsg2F0.tmp\temp_file_after.tmp"
sh=0FEC8D08A5F976C1A12BD368628DEB99942BB901 ft=1 fh=bb5c240993263018 vn="Variante von Win32/DownloadSponsor.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\OCS\ocs_v6r.exe"
sh=16068B8977B4DC562AE782D91BC009472667E331 ft=1 fh=c3b5a87b7d152749 vn="Variante von Win32/DownloadSponsor.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\OCS\ocs_v71a.exe"
sh=E1C99225C4C16710DE3AF3D52300E1E943F7C84F ft=1 fh=f891ef12b7700e02 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\OfferID11\chromeupdaterfull.exe"
sh=492EB7C103E9B4AA46FE06DD5AA6FE478BC0D97E ft=1 fh=2fd36c62b93fd8b1 vn="Variante von Win64/Toolbar.Perion.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\OfferID15\wssetup.exe"
sh=7B7E4E52765348CED0920A132E59503234D2FF79 ft=1 fh=1e504b80cfce12e0 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\OfferID4\simupdater.exe"
sh=ED351854DD30C0B88DAAA73E949B78E0909BFD08 ft=1 fh=293498a29fc67357 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\OfferID5\simboapp.exe"
sh=A836A8346F791EC8A83B51BC78E84B2F6659E6DA ft=1 fh=0a2e45c370149901 vn="Win32/Wajam.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\sevcgyqbysux\wajam_validate.exe"
sh=D2EAFFAD45CC86DE6E07E9D8E42440CD25DA5754 ft=1 fh=855d8e396d7ffddb vn="Win32/MyPCBackup.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\sevcgyqbysux\software\Cloud_Backup_Setup.exe"
sh=F1992C0BA233D93EBD10268642B5C91EE3CDC951 ft=1 fh=ee6cd84454072312 vn="Variante von Win32/Toolbar.Linkury.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\sevcgyqbysux\software\Installer.exe"
sh=F5F973DA9E1ACB7CA961E4DD91E98694E80F7CD6 ft=1 fh=43e54f3d5cc39dd7 vn="Variante von Win32/AdWare.SpeedingUpMyPC.E Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\sevcgyqbysux\software\OptimizerPro.exe"
sh=ADA18AF6430214E020AB65D7035050117351BA47 ft=1 fh=fa6e7bb89a1582fa vn="Win32/AdWare.AddLyrics.AB Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temp\sevcgyqbysux\software\Re-markit_2040-2081.exe"
sh=BD70E8BC50324F58EFD302B6A17C16D6A2C68413 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\33ZPNKMW\180[1].js"
sh=FCD343976905A1CE3BB880C1C4A251AEDA3E140B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\33ZPNKMW\195[1].js"
sh=ABD00A535A977E2E3FDDB6E316F17F2EF37C2489 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\33ZPNKMW\231[1].js"
sh=602A8F0ABF9E608FA1C5193A97CC7AF608CED469 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\33ZPNKMW\244[1].js"
sh=F9B8598D93FB23CD506875B942368184AB47EDD2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\33ZPNKMW\93[1].js"
sh=6BB5FEB5591E628AFCBE7ECE24818D694288178C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\33ZPNKMW\ciuvo_m[1].js"
sh=2A58EF9925B78DB27409BAD75BDC8509C5270567 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\104[1].js"
sh=9D0040A52CBC49955031A7B1DA89AC5E4087CE5B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\123[1].js"
sh=390A4CC4D1B2877516D08A9AF727494C3A793D9C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\223[1].js"
sh=631ED8ED094774350B464DCD774ED5B297FD2F99 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\230[1].js"
sh=6D0A5C89885FA87550DF678D8B5CF3FA07B6ACD5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\273[1].js"
sh=089CC10FABD94FCFF67B2C2A2A0FE6437CC67E5C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.P evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\appApiMessage[1].js"
sh=C7C186E54D042C9DCAACD170347F10C188AEC85D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\arcadi2_m[1].js"
sh=91F440A8F2A0FFC91EDA87FE5410B93141B1C6B0 ft=1 fh=1ce5d7cf83504dfe vn="Win32/Toolbar.Conduit.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\checktbexist[1].exe"
sh=DED4D5AC65600899CE571E960D7B9D20DBEFD9BB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\coupish_m[1].js"
sh=83CDCE21D2E22142F1D24D0C225529B9D8485EAB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\dealply_m[1].js"
sh=BA13B61D2A823E7CBBDC85CD5CE511946BC86E65 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\debug[1].js"
sh=EBBF4F0191C6877E61F5B4AF7ADDA486317B1892 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\icm1_5_m[1].js"
sh=6E13058E4E3C707DB2419E5173252AC9742A4F7F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\intext_adv_m[1].js"
sh=64E1E6B4EF399CFE19D4D144505F344FF97E8CCB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\intext_fa_m[1].js"
sh=E008307C95AD4C1D040B009D307E13C03146B1BF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\jollywallet_m[1].js"
sh=CC9B5D471D8C379CBAA0E63FE16033287F90F82D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\jollywallet_m[2].js"
sh=52E4B498947D3D88D7C6042611258238D71CA0C4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\monetizationLoader[1].js"
sh=C44FEB9DD6271C71E9D4B4899D73CAA0F5F93746 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\monetizationLoader[2].js"
sh=B4853CCBF4F400FB3A12155815CFFD0D74C8EEAC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\noproblemppc_m[1].js"
sh=DC1023F5B4F5492886AACAAD2D9F89CAB5099140 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\revizer_ws_dynamic_2_m[1].js"
sh=57F74C3FAF6723290F6FA3341542A17948A76BCD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\revizer_ws_dynamic_m[1].js"
sh=8C65267C1AADD4AB670D6D979C4A686D16A86869 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\similar_web_m[1].js"
sh=BFD0F29067CAE71544784708FE5554D6518AD6AD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\superfish_no_coupons_m[1].js"
sh=176D4038122B1FF7370825F721F36F73103C5873 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\D82VF5UH\superfish_pricora_m[1].js"
sh=7FB2B410D7A3C932D5B739BEAEFD74BBBB94FE44 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\EX0FY0B8\intext_5_m[1].js"
sh=93BC0753E3E9A3C7A8D1AA09D7E4AE6BDA169F51 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\EX0FY0B8\superfish_no_search_no_coupons_m[1].js"
sh=A2F229B2BBCDAFC3A740DD205122E858DFF5E794 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\179[1].js"
sh=4168C15341DD91504013B4DD0A19F9016D268AA3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\191[1].js"
sh=0D8089E7A813AEBF2DDCC2DD72D2B2CADE68DAF5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\263[1].js"
sh=40364CD66B83A2B2D060BAF8948B89BBEF4E024B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\50onred_ads_only_no_fb_m[1].js"
sh=FA8C6C2029BA73EB8FD626C234D88B1B57E953C5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\50onred_ads_only_no_fb_m[2].js"
sh=D67303051C4C06CDA7B352169D649F4AEFF862B6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\arcadi3_m[1].js"
sh=FBB7D706F207407D497E9D92FFAEB182CCDEECC6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\base[1].js"
sh=140BE41E58E7CB6E9B38B4ED892886CED78C2E58 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\corticas_m[1].js"
sh=6D2F2235E6E222A4C85EEA5503BBA4FC94C3D81C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\CrossriderUtils[1].js"
sh=A25A0BC1A2A0420B02091E83382150FEFF594239 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\ibario_pops_m[1].js"
sh=1D0D0004624903CF66D059CC3EFB513926B2B8BC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\icm_m[1].js"
sh=066D67D3C0F4110A52C2843171BCB750FA7A6E6B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\intext_5_m[1].js"
sh=24AA0A999D9AA9ED69DBD3AD37D4C0C1A4D8DC89 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\intext_adv_m[1].js"
sh=63362C65C083ABF77E174E7351F333927EB9A5C9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\luck_m[1].js"
sh=99ED957925C94680B2842F0C146CF7F28A86CCD0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\monetizationLoader[1].js"
sh=7F88F1865FBE0A134FAEA5DA7B88C7264BBC1606 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\retargeting_bi_m[1].js"
sh=09E41DAB84A351A234F471879A1C5FC682957ABA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\revizer_p_dynamic_m[1].js"
sh=2DC335A206411AD5B2CB8E8AB2B1333596493CB9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\set_campaign_id_m[1].js"
sh=D00B280C5C3A849C6A88A11BF37643A943BF03BC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\set_campaign_id_m[2].js"
sh=F89D0D35647789000A23E8BD1E557BEE519A6BAE ft=1 fh=4f81c51847428f3f vn="Win32/Toolbar.Conduit evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\statisticsstub[1].exe"
sh=69C3AF55C20BCCC3E20E0FD53946E475A79FC691 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\superfish_m[1].js"
sh=DE77AF1BC7040DB9F309A8151B29B79CCC948372 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\IGKZ0OTN\superfish_no_coupons_m[1].js"
sh=A10DC85BE857C7F24E7E88CA57ABD24ECE131DC8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\NOE71Y11\124[1].js"
sh=120A1897CDAF91977081CA628B33BB478348DCF2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\NOE71Y11\198[1].js"
sh=5D5F61F18A317DF935B86EC4BDD4A5D6A7AEAF8C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\NOE71Y11\242[1].js"
sh=C73163CD43855A22A94B96091468B962503C19FD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\NOE71Y11\281[1].js"
sh=631208AA15917E2265B37C9DE13EBF01FC31DAAA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\NOE71Y11\91[1].js"
sh=11376809A5A6927852EB7A33F74A50F3641187A1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\NOE71Y11\ibario_pops_m[1].js"
sh=CA8EB6A3D414C06F4A4A55BC59116ACCAD6E9E27 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\NOE71Y11\setup[1].js"
sh=2DC335A206411AD5B2CB8E8AB2B1333596493CB9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\NOE71Y11\set_campaign_id_m[1].js"
sh=FBB7D706F207407D497E9D92FFAEB182CCDEECC6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\O6IK62G2\base[1].js"
sh=B683C210045A4133B80E4ECC0C23BC3196B66514 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\O6IK62G2\bpo_serp_m[1].js"
sh=EE0C01CA81EBB2B46504012816E1B3EC0FE5F29C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\O6IK62G2\cortica_m[1].js"
sh=288FB4BEC59EEF7E0827216B4286A69802EDC05F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\O6IK62G2\cortica_rollover_m[1].js"
sh=A7400B116369A3142513FD9A3E93134369137036 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\O6IK62G2\coupons_intext_ads_5_m[1].js"
sh=0967FA27EE3C8C806CA6F556814F647D73F51EB8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\O6IK62G2\dealply_m[1].js"
sh=BAFD0049395B7968BFFBC54723176162D6687D58 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\O6IK62G2\gam_manager[1].js"
sh=5F4085D36D3743A164582B9628469218ECD72EBA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\O6IK62G2\getdeal_m[1].js"
sh=705F7674C554A2BDA26E88C6776C54FDBF379002 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\O6IK62G2\icm_convertmedia_m[1].js"
sh=4666A52D4EEF9AD0B5BEF9DFF1A9163C17D03398 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\O6IK62G2\initializer[1].js"
sh=9832E303AF1F020C6DD37DB8D8E7A0FF40979142 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\O6IK62G2\intext_adv_m[1].js"
sh=495ADA4EE9CA2DC352A81211D32F1314E46F2D72 ft=1 fh=53d6f5fcee269c1b vn="Win32/Toolbar.Conduit.AP evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\O6IK62G2\ism[1].exe"
sh=431AC6F8406F059B0E9126386C40A2EE543E5EC3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.M evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\O6IK62G2\resources_background[1].js"
sh=136A896CF87EB4A77AB67B0F7336A95EB33E4EB7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\O6IK62G2\revizer_p_dynamic_m[1].js"
sh=4FBFF27F955D2D65199D5E28BC62358ABF619C04 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\O6IK62G2\revizer_p_m[1].js"
sh=17455E3C3ACDC5230501BB3BA992829B8669DDC5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\O6IK62G2\superfish_no_coupons_m[1].js"
sh=CF138C16214F3451EE8CF965CB30532461AA0614 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\O6IK62G2\superfish_no_search_no_coupons_m[1].js"
sh=C8E1096B9DFA740D5A50D39A86B19D7E92CCAAB3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\O6IK62G2\superfish_no_search_no_coupons_m[2].js"
sh=96876E22992058E2DAF3AE9738C9FE95F7DC4F8C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\O6IK62G2\superfish_no_search_no_coupons_plushd_m[1].js"
sh=FC86A52994A26E8F6F944D2BB1A1955BDE928100 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\178[1].js"
sh=5DD581E41A53887D16BAC93BCFEA8237158B7712 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\221[1].js"
sh=8CA0579B9753600D9AF05D837F9340F2A3AD7FC4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\260[1].js"
sh=D0F1CA6766DDDA77AC04D613EF26D48EEA5DA5E4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\262[1].js"
sh=33BAF57529341A52E67FD88769C280CD75EAEA1A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\269[1].js"
sh=2CF9673BEBBF43F647E03F92E7B59240B7339E06 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\50onred_ads_only_no_fb_m[1].js"
sh=F8BD38D50F0348CEF64D0B397BF6BAC1EC8A3CD0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\ads_only_5_m[1].js"
sh=EDAF8A2B6318DD482F0BBDC2A96C109697D86E5A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\arcadi2_sourceID_m[1].js"
sh=BD99029E3E064DE3BDC009BED86CE5F9F6556130 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\ciuvo_m[1].js"
sh=414BA1B7AEF9A844B50F88BC0548E60F296EF5F5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\corticas_ru_m[1].js"
sh=FF68239BA1F9AFA35E039DEB47E536BF1DA6217B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\CrossriderUtils[1].js"
sh=C403B988AF2EFC2B9DD070F5C5A3070244B7DEE2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\dealply_m[1].js"
sh=B8B5897BC3983B6CE75447868BDAE3EB1441E61C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\ibario_pops_m[1].js"
sh=723041AFAA11FE75C1E748C4BCD3D15B4F61145F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\icm_m[1].js"
sh=60D25EF0BC5392D5A28A39F59C89C2D51915213B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\intext_5_m[1].js"
sh=06107E2CB2818761C26753E71FE096DFDE882F3F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\pops_5_m[1].js"
sh=1D99BB2929871C3A9B94B31AB34B0257069520D0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\revizer_ws_dynamic_m[1].js"
sh=19168753DB0183D5DEFC42DBC9AF43E2EBD86BEB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\revizer_ws_m[1].js"
sh=1F2641FFCA5C1DACAAA217BE7C9989F7AC05C1A1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\similar_web_m[1].js"
sh=2A6234AC2FF85E104F854C0BCDEE42E70CA0A6EE ft=1 fh=04909f28e8d9c2a4 vn="Win32/Toolbar.Conduit.S evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\stublogic[1].exe"
sh=5A2E194F65251D63A145311F957D0A94061D2159 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\superfish_no_search_no_coupons_plushd_m[1].js"
sh=5BD7B82662A263F1138F5E2A90138A8BFA5C4853 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\YDF8HPGR\widdit_m[1].js"
sh=A2A4635BF27718AF19D3E9BD90E8D4EF7205CAF8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\Z0FV3Y3R\102[1].js"
sh=8AF7DA529E5BE7EB53201E9E982A0EF9C1718675 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\Z0FV3Y3R\184[1].js"
sh=EC15A1F579BD66B90DACE75A468FF9AE49958F4F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\Z0FV3Y3R\233[1].js"
sh=FBB87C180584CC593BBEF71609A5AE0528AFCB57 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\Z0FV3Y3R\289[1].js"
sh=81762DED63040E42A925A293E650EB0275C3B3EC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\Z0FV3Y3R\bpo_serp_m[1].js"
sh=06A8A2563355C9618B1F3AF11748C1C42F98F901 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\Z0FV3Y3R\gam_manager[1].js"
sh=D767D39DA00E1507AB72DF2BBF0DF984E5F67F87 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\Z0FV3Y3R\icm_downloads_m[1].js"
sh=89704379C68557B0711B238ED63862E1CF1013B0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\Z0FV3Y3R\imonomy_m[1].js"
sh=19716D7C7440A9C3717A84FAA43FBA1EEBABD61B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Local\Temporary Internet Files\Content.IE5\Z0FV3Y3R\revizer_ws_dynamic_2_m[1].js"
sh=1549CF4F9282F1B42A58B5E050E12EF0AD669798 ft=1 fh=ffe6693d8bc7d6c5 vn="Win32/Toolbar.Babylon.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\BabSolution\Shared\BabMaint.exe"
sh=671E3E4E9E4C9A039D9AD1479A0C91E670AF18E3 ft=1 fh=d643e79c9fb8f862 vn="Win32/Toolbar.Babylon.AE evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\BabSolution\Shared\BUSolution.dll"
sh=BAFA6DD81186B508DC4DF6E3C85F84AFEFEDE66B ft=1 fh=d47ea16ce26bdfeb vn="Win32/InstallCore.BM evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\DealPly\UpdateProc\UpdateTask.exe"
sh=73EEB1BF64EE520BD69D1E3A1173A0CEF71C4A59 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\chrome\content\core\xhr.js"
sh=8E404BAFA9CEAC0628F089B4F1AA879EB5A3404E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\101_cortica_m.js"
sh=A2A4635BF27718AF19D3E9BD90E8D4EF7205CAF8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\102_dealply_m.js"
sh=7FB2B410D7A3C932D5B739BEAEFD74BBBB94FE44 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\103_intext_5_m.js"
sh=2A58EF9925B78DB27409BAD75BDC8509C5270567 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\104_jollywallet_m.js"
sh=928B3A0AAB8E65FB9E3A586D99E80AD24A68A831 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\105_corticas_m.js"
sh=A69DBD3502EA9C4EDD7DEAFB23A8FC1C97BAB232 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\107_coupish_m.js"
sh=723041AFAA11FE75C1E748C4BCD3D15B4F61145F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\108_icm_m.js"
sh=E531E2197FC767CFACEA72A75E1CE492D08F92DA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\116_ads_only_5_m.js"
sh=C3D3CCADC78D71D7482BB5DBA16FBB0534200D12 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\117_coupons_intext_ads_5_m.js"
sh=8C65267C1AADD4AB670D6D979C4A686D16A86869 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\119_similar_web_m.js"
sh=D10EA105AB5DB329186B0B6F10541DD58058AEB8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\120_luck_m.js"
sh=9D0040A52CBC49955031A7B1DA89AC5E4087CE5B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\123_intext_adv_m.js"
sh=A10DC85BE857C7F24E7E88CA57ABD24ECE131DC8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\124_superfish_no_search_no_coupons_m.js"
sh=62B063E0D121966E9A83C9AB518DADAE47423555 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\125_arcadi2_m.js"
sh=B1FD213981E274BCEE2697A82C7E87CA7418C39B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\126_revizer_ws_m.js"
sh=2536CE239CC1E9DCCB8931BC82F1CF8520F55686 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\127_revizer_p_m.js"
sh=EF36C9502A12C97CF29A90C0ACE3DCF72ACD389E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\128_superfish_pricora_m.js"
sh=D9E89F57D3A13498640961F3B9954D67D7EA1039 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\129_widdit_m.js"
sh=B9CFC11B067C54952D592C618BD391AA26B3393B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\135_arcadi3_m.js"
sh=17483832BF1FA23335B7C1E04A0530AB60CBEDC6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\138_getdeal_m.js"
sh=90A4F559561CF603A203F93D56C80B17B8152325 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\141_corticas_ru_m.js.js"
sh=8395A2B6D59D2F3EDDCFC863DDA2F674396DC74C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\142_intext_fa_m.js"
sh=51822FF4DBA10C1C71FCA1C6CDE317212E909C16 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\14_CrossriderUtils.js"
sh=736E2498BA47FECD737FE362E155DFD1850D096E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\155_ibario_pops_m.js"
sh=FA8C6C2029BA73EB8FD626C234D88B1B57E953C5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\158_50onred_ads_only_no_fb_m.js"
sh=18C46AE5CB67274764D17F8A40975EEB5C67F795 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\159_cortica_rollover_m.js"
sh=3DA0E458C1D4F5CECA7F012A2B0DA4CC1C7B63A1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\170_icm1_5_m.js"
sh=EDAF8A2B6318DD482F0BBDC2A96C109697D86E5A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\171_arcadi2_sourceID_m.js"
sh=2184DFBF93B03726607BF2C44682CF058FB2987B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js"
sh=F6FA9D82AEFE95E8544F0B7EE8D1784E6A3D02A9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\175_coolmirage_m.js"
sh=FC86A52994A26E8F6F944D2BB1A1955BDE928100 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\178_revizer_ws_dynamic_m.js"
sh=A2F229B2BBCDAFC3A740DD205122E858DFF5E794 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\179_revizer_p_dynamic_m.js"
sh=BD70E8BC50324F58EFD302B6A17C16D6A2C68413 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\180_bpo_serp_m.js"
sh=8AF7DA529E5BE7EB53201E9E982A0EF9C1718675 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\184_noproblemppc_m.js"
sh=541F6B364455354268941C1D81E2E0FCAA633FC9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\189_active_sanity.js"
sh=06107E2CB2818761C26753E71FE096DFDE882F3F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\190_pops_5_m.js"
sh=4168C15341DD91504013B4DD0A19F9016D268AA3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\191_ciuvo_m.js"
sh=BAD6F905DCD72B7D2A93D06582B026F3CCF3616E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\192_revizer_ws_dynamic_b2b_m.js"
sh=5B3338E8C3C20A95C180626940F7C6BC46D49F5D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\193_revizer_p_dynamic_b2b_m.js"
sh=7F88F1865FBE0A134FAEA5DA7B88C7264BBC1606 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\194_retargeting_bi_m.js.js"
sh=FCD343976905A1CE3BB880C1C4A251AEDA3E140B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\195_icm_convertmedia_m.js"
sh=675F44991136237FD89C48DFCB5C60FDED223BD8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\197_kreapixel_pops_m.js"
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\198_superfish_no_search_no_coupons_plushd_m.js"
sh=07EDC29FCB544EFD7D231A67B2437BB2E5E7B917 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\199_superfish_no_coupons_plushd_m.js"
sh=41247167B9CCDA7B7301B0647606AD3DB1304E45 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\200_foxydeal_m.js"
sh=7922F11759DB9C0610F7DAC3FC6540F2C98FC31B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\204_pricedetect_m.js"
sh=4763DEF2AC4EC29A3B0298F0DB54D4BE8E5931F7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\208_gam_manager.js"
sh=5902FC10054355A5B8B9CC41620445BAA0F1D0AB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\21_debug.js"
sh=5DD581E41A53887D16BAC93BCFEA8237158B7712 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\221_icm_downloads_m.js"
sh=390A4CC4D1B2877516D08A9AF727494C3A793D9C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\223_imonomy_m.js"
sh=D00B280C5C3A849C6A88A11BF37643A943BF03BC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\226_set_campaign_id_m.js"
sh=631ED8ED094774350B464DCD774ED5B297FD2F99 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\230_revizer_ws_dynamic_b2b_2_m.js"
sh=ABD00A535A977E2E3FDDB6E316F17F2EF37C2489 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\231_revizer_ws_dynamic_2_m.js"
sh=EC15A1F579BD66B90DACE75A468FF9AE49958F4F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\233_revizer_p_dynamic_b2b_2_m.js"
sh=5D5F61F18A317DF935B86EC4BDD4A5D6A7AEAF8C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\242_price_gong_m.js"
sh=602A8F0ABF9E608FA1C5193A97CC7AF608CED469 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\244_engageya_inner_m.js"
sh=8CA0579B9753600D9AF05D837F9340F2A3AD7FC4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\260_pricedetect_sidebar_m.js"
sh=2819F5D81CAA3D85A770EF11D5039297328E4636 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\262_pops_5_j_m.js"
sh=1A30610C243DF37176386AF45C43C24913D8B235 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\263_intext_5_j_m.js"
sh=F7AED4464DF92C3350E65E499BE40A9685A1883C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\268_stats_ff.js"
sh=6D0A5C89885FA87550DF678D8B5CF3FA07B6ACD5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\273_aedgency_back_button_m.js"
sh=C73163CD43855A22A94B96091468B962503C19FD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\281_ibario_tier3_pops_m.js"
sh=FBB87C180584CC593BBEF71609A5AE0528AFCB57 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\289_covus_logos_m.js"
sh=4666A52D4EEF9AD0B5BEF9DFF1A9163C17D03398 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\28_initializer.js"
sh=2EBC101982648313FFE20510A6C6754410F9D89B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.M evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\47_resources_background.js"
sh=148CA44D7C0A3E2F5E2A3D38EFC5D999D2701A84 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.P evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\64_appApiMessage.js"
sh=0780C0833DF3CDE93600966150D8DB918700832F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\91_monetizationLoader.js.js"
sh=93022F69189E8D2F1B4B8717522CA1AFFA59F708 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\92_superfish_m.js"
sh=F9B8598D93FB23CD506875B942368184AB47EDD2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\93_superfish_no_coupons_m.js"
sh=282E43766D30716E793A5122951C2AE76FD8CBCC ft=0 fh=0000000000000000 vn="Win32/DealPly.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\AppData\Roaming\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}\chrome\content\dealply.xul"
sh=871AED39745F87D3E7D72B8088563DEFAA6BEB1C ft=1 fh=a90444900d002ec9 vn="Variante von Win32/DownloadSponsor.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Downloads\Apache_OpenOffice_incubating_3.4.1_Win_x86_install_de-Downloader.exe"
sh=7D322813B33F6DD64AFFBB284E6BA42231F49605 ft=1 fh=f0a6ef37ed4c7612 vn="Win32/Toolbar.Conduit.S evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Downloads\FreeAudioConverter_5.0.23.320.exe"
sh=72214C67D40B4FF571B6960BEDEC2DB01651B340 ft=1 fh=0443bdc6d0597ba4 vn="Win32/Vittalia.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Downloads\installer_openoffice_Deutsch.exe"
sh=57B39EDF53486A9654EFE41DC95046FCE338B238 ft=1 fh=0c20e58af1de4efe vn="Win32/Toolbar.Conduit evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Downloads\LF2_v20a_Install.exe"
sh=8BDEFC4D11D819A960D64F9D2EBC6E8F68FA2498 ft=1 fh=ef8a5e64f1c548ba vn="Win32/Somoto evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Downloads\MCPatcher_downloader_by_MCPatcher(1).exe"
sh=1A4B5A0341E3F460364E46D31A2EE1047AA731C2 ft=1 fh=84b0657758f937f2 vn="Mehrere Bedrohungen" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Downloads\setup.exe"
sh=61260FBBBBC35039AB3DA430225F5548B3365F8B ft=1 fh=1e56431a1259aaa9 vn="Variante von Win32/SoftonicDownloader.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Downloads\SoftonicDownloader_for_little-fighter-2.exe"
sh=2552857DB078DCB507E1E478A651A77EFB4CB78D ft=1 fh=b534a22763b0bb3c vn="Variante von Win32/DownloadSponsor.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Downloads\Thunderbird - CHIP-Downloader.exe"
sh=BD70E8BC50324F58EFD302B6A17C16D6A2C68413 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\33ZPNKMW\180[1].js"
sh=FCD343976905A1CE3BB880C1C4A251AEDA3E140B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\33ZPNKMW\195[1].js"
sh=ABD00A535A977E2E3FDDB6E316F17F2EF37C2489 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\33ZPNKMW\231[1].js"
sh=602A8F0ABF9E608FA1C5193A97CC7AF608CED469 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\33ZPNKMW\244[1].js"
sh=F9B8598D93FB23CD506875B942368184AB47EDD2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\33ZPNKMW\93[1].js"
sh=6BB5FEB5591E628AFCBE7ECE24818D694288178C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\33ZPNKMW\ciuvo_m[1].js"
sh=2A58EF9925B78DB27409BAD75BDC8509C5270567 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\104[1].js"
sh=9D0040A52CBC49955031A7B1DA89AC5E4087CE5B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\123[1].js"
sh=390A4CC4D1B2877516D08A9AF727494C3A793D9C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\223[1].js"
sh=631ED8ED094774350B464DCD774ED5B297FD2F99 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\230[1].js"
sh=6D0A5C89885FA87550DF678D8B5CF3FA07B6ACD5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\273[1].js"
sh=089CC10FABD94FCFF67B2C2A2A0FE6437CC67E5C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.P evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\appApiMessage[1].js"
sh=C7C186E54D042C9DCAACD170347F10C188AEC85D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\arcadi2_m[1].js"
sh=91F440A8F2A0FFC91EDA87FE5410B93141B1C6B0 ft=1 fh=1ce5d7cf83504dfe vn="Win32/Toolbar.Conduit.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\checktbexist[1].exe"
sh=DED4D5AC65600899CE571E960D7B9D20DBEFD9BB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\coupish_m[1].js"
sh=83CDCE21D2E22142F1D24D0C225529B9D8485EAB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\dealply_m[1].js"
sh=BA13B61D2A823E7CBBDC85CD5CE511946BC86E65 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\debug[1].js"
sh=EBBF4F0191C6877E61F5B4AF7ADDA486317B1892 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\icm1_5_m[1].js"
sh=6E13058E4E3C707DB2419E5173252AC9742A4F7F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\intext_adv_m[1].js"
sh=64E1E6B4EF399CFE19D4D144505F344FF97E8CCB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\intext_fa_m[1].js"
sh=E008307C95AD4C1D040B009D307E13C03146B1BF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\jollywallet_m[1].js"
sh=CC9B5D471D8C379CBAA0E63FE16033287F90F82D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\jollywallet_m[2].js"
sh=52E4B498947D3D88D7C6042611258238D71CA0C4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\monetizationLoader[1].js"
sh=C44FEB9DD6271C71E9D4B4899D73CAA0F5F93746 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\monetizationLoader[2].js"
sh=B4853CCBF4F400FB3A12155815CFFD0D74C8EEAC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\noproblemppc_m[1].js"
sh=DC1023F5B4F5492886AACAAD2D9F89CAB5099140 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\revizer_ws_dynamic_2_m[1].js"
sh=57F74C3FAF6723290F6FA3341542A17948A76BCD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\revizer_ws_dynamic_m[1].js"
sh=8C65267C1AADD4AB670D6D979C4A686D16A86869 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\similar_web_m[1].js"
sh=BFD0F29067CAE71544784708FE5554D6518AD6AD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\superfish_no_coupons_m[1].js"
sh=176D4038122B1FF7370825F721F36F73103C5873 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\D82VF5UH\superfish_pricora_m[1].js"
sh=7FB2B410D7A3C932D5B739BEAEFD74BBBB94FE44 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\EX0FY0B8\intext_5_m[1].js"
sh=93BC0753E3E9A3C7A8D1AA09D7E4AE6BDA169F51 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\EX0FY0B8\superfish_no_search_no_coupons_m[1].js"
sh=A2F229B2BBCDAFC3A740DD205122E858DFF5E794 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\179[1].js"
sh=4168C15341DD91504013B4DD0A19F9016D268AA3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\191[1].js"
sh=0D8089E7A813AEBF2DDCC2DD72D2B2CADE68DAF5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\263[1].js"
sh=40364CD66B83A2B2D060BAF8948B89BBEF4E024B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\50onred_ads_only_no_fb_m[1].js"
sh=FA8C6C2029BA73EB8FD626C234D88B1B57E953C5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\50onred_ads_only_no_fb_m[2].js"
sh=D67303051C4C06CDA7B352169D649F4AEFF862B6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\arcadi3_m[1].js"
sh=FBB7D706F207407D497E9D92FFAEB182CCDEECC6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\base[1].js"
sh=140BE41E58E7CB6E9B38B4ED892886CED78C2E58 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\corticas_m[1].js"
sh=6D2F2235E6E222A4C85EEA5503BBA4FC94C3D81C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\CrossriderUtils[1].js"
sh=A25A0BC1A2A0420B02091E83382150FEFF594239 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\ibario_pops_m[1].js"
sh=1D0D0004624903CF66D059CC3EFB513926B2B8BC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\icm_m[1].js"
sh=066D67D3C0F4110A52C2843171BCB750FA7A6E6B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\intext_5_m[1].js"

Electropuls · 28.10.2015, 22:01

dritter Teil:

Code:

ATTFilter

sh=24AA0A999D9AA9ED69DBD3AD37D4C0C1A4D8DC89 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\intext_adv_m[1].js"
sh=63362C65C083ABF77E174E7351F333927EB9A5C9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\luck_m[1].js"
sh=99ED957925C94680B2842F0C146CF7F28A86CCD0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\monetizationLoader[1].js"
sh=7F88F1865FBE0A134FAEA5DA7B88C7264BBC1606 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\retargeting_bi_m[1].js"
sh=09E41DAB84A351A234F471879A1C5FC682957ABA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\revizer_p_dynamic_m[1].js"
sh=2DC335A206411AD5B2CB8E8AB2B1333596493CB9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\set_campaign_id_m[1].js"
sh=D00B280C5C3A849C6A88A11BF37643A943BF03BC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\set_campaign_id_m[2].js"
sh=F89D0D35647789000A23E8BD1E557BEE519A6BAE ft=1 fh=4f81c51847428f3f vn="Win32/Toolbar.Conduit evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\statisticsstub[1].exe"
sh=69C3AF55C20BCCC3E20E0FD53946E475A79FC691 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\superfish_m[1].js"
sh=DE77AF1BC7040DB9F309A8151B29B79CCC948372 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\IGKZ0OTN\superfish_no_coupons_m[1].js"
sh=A10DC85BE857C7F24E7E88CA57ABD24ECE131DC8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\NOE71Y11\124[1].js"
sh=120A1897CDAF91977081CA628B33BB478348DCF2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\NOE71Y11\198[1].js"
sh=5D5F61F18A317DF935B86EC4BDD4A5D6A7AEAF8C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\NOE71Y11\242[1].js"
sh=C73163CD43855A22A94B96091468B962503C19FD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\NOE71Y11\281[1].js"
sh=631208AA15917E2265B37C9DE13EBF01FC31DAAA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\NOE71Y11\91[1].js"
sh=11376809A5A6927852EB7A33F74A50F3641187A1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\NOE71Y11\ibario_pops_m[1].js"
sh=CA8EB6A3D414C06F4A4A55BC59116ACCAD6E9E27 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\NOE71Y11\setup[1].js"
sh=2DC335A206411AD5B2CB8E8AB2B1333596493CB9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\NOE71Y11\set_campaign_id_m[1].js"
sh=FBB7D706F207407D497E9D92FFAEB182CCDEECC6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\base[1].js"
sh=B683C210045A4133B80E4ECC0C23BC3196B66514 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\bpo_serp_m[1].js"
sh=EE0C01CA81EBB2B46504012816E1B3EC0FE5F29C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\cortica_m[1].js"
sh=288FB4BEC59EEF7E0827216B4286A69802EDC05F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\cortica_rollover_m[1].js"
sh=A7400B116369A3142513FD9A3E93134369137036 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\coupons_intext_ads_5_m[1].js"
sh=0967FA27EE3C8C806CA6F556814F647D73F51EB8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\dealply_m[1].js"
sh=BAFD0049395B7968BFFBC54723176162D6687D58 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\gam_manager[1].js"
sh=5F4085D36D3743A164582B9628469218ECD72EBA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\getdeal_m[1].js"
sh=705F7674C554A2BDA26E88C6776C54FDBF379002 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\icm_convertmedia_m[1].js"
sh=4666A52D4EEF9AD0B5BEF9DFF1A9163C17D03398 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\initializer[1].js"
sh=9832E303AF1F020C6DD37DB8D8E7A0FF40979142 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\intext_adv_m[1].js"
sh=495ADA4EE9CA2DC352A81211D32F1314E46F2D72 ft=1 fh=53d6f5fcee269c1b vn="Win32/Toolbar.Conduit.AP evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\ism[1].exe"
sh=431AC6F8406F059B0E9126386C40A2EE543E5EC3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.M evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\resources_background[1].js"
sh=136A896CF87EB4A77AB67B0F7336A95EB33E4EB7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\revizer_p_dynamic_m[1].js"
sh=4FBFF27F955D2D65199D5E28BC62358ABF619C04 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\revizer_p_m[1].js"
sh=17455E3C3ACDC5230501BB3BA992829B8669DDC5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\superfish_no_coupons_m[1].js"
sh=CF138C16214F3451EE8CF965CB30532461AA0614 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\superfish_no_search_no_coupons_m[1].js"
sh=C8E1096B9DFA740D5A50D39A86B19D7E92CCAAB3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\superfish_no_search_no_coupons_m[2].js"
sh=96876E22992058E2DAF3AE9738C9FE95F7DC4F8C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\O6IK62G2\superfish_no_search_no_coupons_plushd_m[1].js"
sh=FC86A52994A26E8F6F944D2BB1A1955BDE928100 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\178[1].js"
sh=5DD581E41A53887D16BAC93BCFEA8237158B7712 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\221[1].js"
sh=8CA0579B9753600D9AF05D837F9340F2A3AD7FC4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\260[1].js"
sh=D0F1CA6766DDDA77AC04D613EF26D48EEA5DA5E4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\262[1].js"
sh=33BAF57529341A52E67FD88769C280CD75EAEA1A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\269[1].js"
sh=2CF9673BEBBF43F647E03F92E7B59240B7339E06 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\50onred_ads_only_no_fb_m[1].js"
sh=F8BD38D50F0348CEF64D0B397BF6BAC1EC8A3CD0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\ads_only_5_m[1].js"
sh=EDAF8A2B6318DD482F0BBDC2A96C109697D86E5A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\arcadi2_sourceID_m[1].js"
sh=BD99029E3E064DE3BDC009BED86CE5F9F6556130 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\ciuvo_m[1].js"
sh=414BA1B7AEF9A844B50F88BC0548E60F296EF5F5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\corticas_ru_m[1].js"
sh=FF68239BA1F9AFA35E039DEB47E536BF1DA6217B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\CrossriderUtils[1].js"
sh=C403B988AF2EFC2B9DD070F5C5A3070244B7DEE2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\dealply_m[1].js"
sh=B8B5897BC3983B6CE75447868BDAE3EB1441E61C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\ibario_pops_m[1].js"
sh=723041AFAA11FE75C1E748C4BCD3D15B4F61145F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\icm_m[1].js"
sh=60D25EF0BC5392D5A28A39F59C89C2D51915213B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\intext_5_m[1].js"
sh=06107E2CB2818761C26753E71FE096DFDE882F3F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\pops_5_m[1].js"
sh=1D99BB2929871C3A9B94B31AB34B0257069520D0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\revizer_ws_dynamic_m[1].js"
sh=19168753DB0183D5DEFC42DBC9AF43E2EBD86BEB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\revizer_ws_m[1].js"
sh=1F2641FFCA5C1DACAAA217BE7C9989F7AC05C1A1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\similar_web_m[1].js"
sh=2A6234AC2FF85E104F854C0BCDEE42E70CA0A6EE ft=1 fh=04909f28e8d9c2a4 vn="Win32/Toolbar.Conduit.S evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\stublogic[1].exe"
sh=5A2E194F65251D63A145311F957D0A94061D2159 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\superfish_no_search_no_coupons_plushd_m[1].js"
sh=5BD7B82662A263F1138F5E2A90138A8BFA5C4853 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\YDF8HPGR\widdit_m[1].js"
sh=A2A4635BF27718AF19D3E9BD90E8D4EF7205CAF8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0FV3Y3R\102[1].js"
sh=8AF7DA529E5BE7EB53201E9E982A0EF9C1718675 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0FV3Y3R\184[1].js"
sh=EC15A1F579BD66B90DACE75A468FF9AE49958F4F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0FV3Y3R\233[1].js"
sh=FBB87C180584CC593BBEF71609A5AE0528AFCB57 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0FV3Y3R\289[1].js"
sh=81762DED63040E42A925A293E650EB0275C3B3EC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0FV3Y3R\bpo_serp_m[1].js"
sh=06A8A2563355C9618B1F3AF11748C1C42F98F901 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0FV3Y3R\gam_manager[1].js"
sh=D767D39DA00E1507AB72DF2BBF0DF984E5F67F87 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0FV3Y3R\icm_downloads_m[1].js"
sh=89704379C68557B0711B238ED63862E1CF1013B0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0FV3Y3R\imonomy_m[1].js"
sh=19716D7C7440A9C3717A84FAA43FBA1EEBABD61B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z0FV3Y3R\revizer_ws_dynamic_2_m[1].js"
sh=E0C5DA830661148F1D2401700F094155E38A2BA0 ft=1 fh=53f7a24e2a3a886d vn="MSIL/MyPCBackup.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\BackupSetup.exe"
sh=F7C903191EA312D9FDF7D8C9BBE2F1F418402F67 ft=1 fh=fb93c680c7db8c27 vn="Win32/DealPly.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\dealply.exe"
sh=6160D7E55C91DD36A3D48D07B525BB9F238C20E0 ft=1 fh=6378d94e0742c92e vn="Variante von Win32/Toolbar.Babylon.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\MyDelta_sftnc.exe"
sh=D2C5BBB4CD52FF1F63CB84FF7E6EA5D3F4034C5C ft=1 fh=8ebab0a3d0a12b9c vn="Win32/Packed.ScrambleWrapper.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\plus-hd-2-6.exe"
sh=512C96C070CE041B287293692F3E6B1373881CEE ft=1 fh=363c26ad9d3ef7f9 vn="Variante von Win32/SpeedUpMyPC.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\speedupmypc.exe"
sh=353F2132ACA133914DDB694BC38DE813C8E4A781 ft=1 fh=2d870d31e4c6b62f vn="Win32/SweetIM.N evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\toolbar_vit_sweetim.exe"
sh=F3C848B67FD2914516F83FB65B204F61768C4EFB ft=1 fh=b7e14907d3f07c71 vn="Win32/Somoto.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\UpdateCheckerSetup.exe"
sh=1549CF4F9282F1B42A58B5E050E12EF0AD669798 ft=1 fh=ffe6693d8bc7d6c5 vn="Win32/Toolbar.Babylon.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\8547BE11-BAB0-7891-8255-95ABBF0197C6\Latest\BabMaint.exe"
sh=DED201AE02FB9EA3646489AFEDA49270C4620D9C ft=1 fh=c71c001196f8c3ac vn="Variante von Win32/Toolbar.Babylon.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\8547BE11-BAB0-7891-8255-95ABBF0197C6\Latest\BExternal.dll"
sh=EEFF60A396BED04892CA52676900D8587DDBF535 ft=1 fh=68bfd67c0e83835c vn="Win32/Toolbar.Babylon.AE evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\8547BE11-BAB0-7891-8255-95ABBF0197C6\Latest\BUSolForMontiera.dll"
sh=671E3E4E9E4C9A039D9AD1479A0C91E670AF18E3 ft=1 fh=d643e79c9fb8f862 vn="Win32/Toolbar.Babylon.AE evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\8547BE11-BAB0-7891-8255-95ABBF0197C6\Latest\BUSolution.dll"
sh=3B15680A3589647FF70A88674775D76A6091CA58 ft=1 fh=f4428b42dcd5e354 vn="Win32/Toolbar.Babylon.AE evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\8547BE11-BAB0-7891-8255-95ABBF0197C6\Latest\ChromeToolbarSetup.dll"
sh=1466BC1893B6D4B277A177CD2C7D1BEF65F6AAEB ft=1 fh=407239d3cdeb51cc vn="Win32/Toolbar.Babylon.U evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\8547BE11-BAB0-7891-8255-95ABBF0197C6\Latest\CrxInstaller.dll"
sh=246DDBC3A2C223A6B9072637D93DC2A2832D097A ft=1 fh=c71c0011b04f613a vn="Win32/Toolbar.Babylon.Y evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\8547BE11-BAB0-7891-8255-95ABBF0197C6\Latest\DSearchLink.exe"
sh=7759A3318DE2ABC3755EBB7F50322C6D586B5286 ft=1 fh=e3d39714b3bfb2a0 vn="Win32/Toolbar.Babylon.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\8547BE11-BAB0-7891-8255-95ABBF0197C6\Latest\IEHelper.dll"
sh=25EA5C7F4A48D166A2006CA37B936ECA340F58ED ft=1 fh=c71c0011e4611a52 vn="Win32/Toolbar.Babylon.V evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\8547BE11-BAB0-7891-8255-95ABBF0197C6\Latest\MntrDLLInstall.dll"
sh=63B9ACAA33978D6BA181B45C51DABE9FF76B50AA ft=1 fh=75ac944de1f3f413 vn="Variante von Win32/Toolbar.Babylon.H evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\8547BE11-BAB0-7891-8255-95ABBF0197C6\Latest\Setup.exe"
sh=FD77BC87BEE4F586A299540541FE37A2F7180FBE ft=1 fh=5fa0813bf2381fde vn="Win32/Toolbar.Babylon.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\bus2819\CrxUpdater_d.exe"
sh=FD77BC87BEE4F586A299540541FE37A2F7180FBE ft=1 fh=5fa0813bf2381fde vn="Win32/Toolbar.Babylon.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\bus53F9\CrxUpdater_d.exe"
sh=FD77BC87BEE4F586A299540541FE37A2F7180FBE ft=1 fh=5fa0813bf2381fde vn="Win32/Toolbar.Babylon.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\bus5BE5\CrxUpdater_d.exe"
sh=FD77BC87BEE4F586A299540541FE37A2F7180FBE ft=1 fh=5fa0813bf2381fde vn="Win32/Toolbar.Babylon.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\bus79B1\CrxUpdater_d.exe"
sh=FD77BC87BEE4F586A299540541FE37A2F7180FBE ft=1 fh=5fa0813bf2381fde vn="Win32/Toolbar.Babylon.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\bus7A6C\CrxUpdater_d.exe"
sh=FD77BC87BEE4F586A299540541FE37A2F7180FBE ft=1 fh=5fa0813bf2381fde vn="Win32/Toolbar.Babylon.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\bus8B9C\CrxUpdater_d.exe"
sh=FD77BC87BEE4F586A299540541FE37A2F7180FBE ft=1 fh=5fa0813bf2381fde vn="Win32/Toolbar.Babylon.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\bus8D41\CrxUpdater_d.exe"
sh=FD77BC87BEE4F586A299540541FE37A2F7180FBE ft=1 fh=5fa0813bf2381fde vn="Win32/Toolbar.Babylon.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\busA756\CrxUpdater_d.exe"
sh=FD77BC87BEE4F586A299540541FE37A2F7180FBE ft=1 fh=5fa0813bf2381fde vn="Win32/Toolbar.Babylon.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\busB4DD\CrxUpdater_d.exe"
sh=CCD90EE6E9B1ADFF9657E8F2C126BC6CB5C2EB24 ft=1 fh=91473923cd86549e vn="Variante von Win32/SProtector.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\is-E08V7.tmp\OptProCrash.dll"
sh=3C2B223177349FB007AF167729C5D0DB484C861A ft=1 fh=c71c0011b0d87986 vn="Variante von Win32/Packed.VMDetector.C evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\nsg2F0.tmp\InstallerUtils.dll"
sh=608017C168EB1D6FA595F85FC1E4D2DDAB9B3024 ft=1 fh=ffa22ada16ac070f vn="Variante von Win32/Toolbar.CrossRider.S evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\nsg2F0.tmp\temp_file_after.tmp"
sh=0FEC8D08A5F976C1A12BD368628DEB99942BB901 ft=1 fh=bb5c240993263018 vn="Variante von Win32/DownloadSponsor.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\OCS\ocs_v6r.exe"
sh=16068B8977B4DC562AE782D91BC009472667E331 ft=1 fh=c3b5a87b7d152749 vn="Variante von Win32/DownloadSponsor.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\OCS\ocs_v71a.exe"
sh=E1C99225C4C16710DE3AF3D52300E1E943F7C84F ft=1 fh=f891ef12b7700e02 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\OfferID11\chromeupdaterfull.exe"
sh=492EB7C103E9B4AA46FE06DD5AA6FE478BC0D97E ft=1 fh=2fd36c62b93fd8b1 vn="Variante von Win64/Toolbar.Perion.D evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\OfferID15\wssetup.exe"
sh=7B7E4E52765348CED0920A132E59503234D2FF79 ft=1 fh=1e504b80cfce12e0 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\OfferID4\simupdater.exe"
sh=ED351854DD30C0B88DAAA73E949B78E0909BFD08 ft=1 fh=293498a29fc67357 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\OfferID5\simboapp.exe"
sh=A836A8346F791EC8A83B51BC78E84B2F6659E6DA ft=1 fh=0a2e45c370149901 vn="Win32/Wajam.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\sevcgyqbysux\wajam_validate.exe"
sh=D2EAFFAD45CC86DE6E07E9D8E42440CD25DA5754 ft=1 fh=855d8e396d7ffddb vn="Win32/MyPCBackup.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\sevcgyqbysux\software\Cloud_Backup_Setup.exe"
sh=F1992C0BA233D93EBD10268642B5C91EE3CDC951 ft=1 fh=ee6cd84454072312 vn="Variante von Win32/Toolbar.Linkury.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\sevcgyqbysux\software\Installer.exe"
sh=F5F973DA9E1ACB7CA961E4DD91E98694E80F7CD6 ft=1 fh=43e54f3d5cc39dd7 vn="Variante von Win32/AdWare.SpeedingUpMyPC.E Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\sevcgyqbysux\software\OptimizerPro.exe"
sh=ADA18AF6430214E020AB65D7035050117351BA47 ft=1 fh=fa6e7bb89a1582fa vn="Win32/AdWare.AddLyrics.AB Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temp\sevcgyqbysux\software\Re-markit_2040-2081.exe"
sh=BD70E8BC50324F58EFD302B6A17C16D6A2C68413 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\33ZPNKMW\180[1].js"
sh=FCD343976905A1CE3BB880C1C4A251AEDA3E140B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\33ZPNKMW\195[1].js"
sh=ABD00A535A977E2E3FDDB6E316F17F2EF37C2489 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\33ZPNKMW\231[1].js"
sh=602A8F0ABF9E608FA1C5193A97CC7AF608CED469 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\33ZPNKMW\244[1].js"
sh=F9B8598D93FB23CD506875B942368184AB47EDD2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\33ZPNKMW\93[1].js"
sh=6BB5FEB5591E628AFCBE7ECE24818D694288178C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\33ZPNKMW\ciuvo_m[1].js"
sh=2A58EF9925B78DB27409BAD75BDC8509C5270567 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\104[1].js"
sh=9D0040A52CBC49955031A7B1DA89AC5E4087CE5B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\123[1].js"
sh=390A4CC4D1B2877516D08A9AF727494C3A793D9C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\223[1].js"
sh=631ED8ED094774350B464DCD774ED5B297FD2F99 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\230[1].js"
sh=6D0A5C89885FA87550DF678D8B5CF3FA07B6ACD5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\273[1].js"
sh=089CC10FABD94FCFF67B2C2A2A0FE6437CC67E5C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.P evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\appApiMessage[1].js"
sh=C7C186E54D042C9DCAACD170347F10C188AEC85D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\arcadi2_m[1].js"
sh=91F440A8F2A0FFC91EDA87FE5410B93141B1C6B0 ft=1 fh=1ce5d7cf83504dfe vn="Win32/Toolbar.Conduit.AF evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\checktbexist[1].exe"
sh=DED4D5AC65600899CE571E960D7B9D20DBEFD9BB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\coupish_m[1].js"
sh=83CDCE21D2E22142F1D24D0C225529B9D8485EAB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\dealply_m[1].js"
sh=BA13B61D2A823E7CBBDC85CD5CE511946BC86E65 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\debug[1].js"
sh=EBBF4F0191C6877E61F5B4AF7ADDA486317B1892 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\icm1_5_m[1].js"
sh=6E13058E4E3C707DB2419E5173252AC9742A4F7F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\intext_adv_m[1].js"
sh=64E1E6B4EF399CFE19D4D144505F344FF97E8CCB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\intext_fa_m[1].js"
sh=E008307C95AD4C1D040B009D307E13C03146B1BF ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\jollywallet_m[1].js"
sh=CC9B5D471D8C379CBAA0E63FE16033287F90F82D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\jollywallet_m[2].js"
sh=52E4B498947D3D88D7C6042611258238D71CA0C4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\monetizationLoader[1].js"
sh=C44FEB9DD6271C71E9D4B4899D73CAA0F5F93746 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\monetizationLoader[2].js"
sh=B4853CCBF4F400FB3A12155815CFFD0D74C8EEAC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\noproblemppc_m[1].js"
sh=DC1023F5B4F5492886AACAAD2D9F89CAB5099140 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\revizer_ws_dynamic_2_m[1].js"
sh=57F74C3FAF6723290F6FA3341542A17948A76BCD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\revizer_ws_dynamic_m[1].js"
sh=8C65267C1AADD4AB670D6D979C4A686D16A86869 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\similar_web_m[1].js"
sh=BFD0F29067CAE71544784708FE5554D6518AD6AD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\superfish_no_coupons_m[1].js"
sh=176D4038122B1FF7370825F721F36F73103C5873 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\D82VF5UH\superfish_pricora_m[1].js"
sh=7FB2B410D7A3C932D5B739BEAEFD74BBBB94FE44 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EX0FY0B8\intext_5_m[1].js"
sh=93BC0753E3E9A3C7A8D1AA09D7E4AE6BDA169F51 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\EX0FY0B8\superfish_no_search_no_coupons_m[1].js"
sh=A2F229B2BBCDAFC3A740DD205122E858DFF5E794 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\179[1].js"
sh=4168C15341DD91504013B4DD0A19F9016D268AA3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\191[1].js"
sh=0D8089E7A813AEBF2DDCC2DD72D2B2CADE68DAF5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\263[1].js"
sh=40364CD66B83A2B2D060BAF8948B89BBEF4E024B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\50onred_ads_only_no_fb_m[1].js"
sh=FA8C6C2029BA73EB8FD626C234D88B1B57E953C5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\50onred_ads_only_no_fb_m[2].js"
sh=D67303051C4C06CDA7B352169D649F4AEFF862B6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\arcadi3_m[1].js"
sh=FBB7D706F207407D497E9D92FFAEB182CCDEECC6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\base[1].js"
sh=140BE41E58E7CB6E9B38B4ED892886CED78C2E58 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\corticas_m[1].js"
sh=6D2F2235E6E222A4C85EEA5503BBA4FC94C3D81C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\CrossriderUtils[1].js"
sh=A25A0BC1A2A0420B02091E83382150FEFF594239 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\ibario_pops_m[1].js"
sh=1D0D0004624903CF66D059CC3EFB513926B2B8BC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\icm_m[1].js"
sh=066D67D3C0F4110A52C2843171BCB750FA7A6E6B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\intext_5_m[1].js"
sh=24AA0A999D9AA9ED69DBD3AD37D4C0C1A4D8DC89 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\intext_adv_m[1].js"
sh=63362C65C083ABF77E174E7351F333927EB9A5C9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\luck_m[1].js"
sh=99ED957925C94680B2842F0C146CF7F28A86CCD0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\monetizationLoader[1].js"
sh=7F88F1865FBE0A134FAEA5DA7B88C7264BBC1606 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\retargeting_bi_m[1].js"
sh=09E41DAB84A351A234F471879A1C5FC682957ABA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\revizer_p_dynamic_m[1].js"
sh=2DC335A206411AD5B2CB8E8AB2B1333596493CB9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\set_campaign_id_m[1].js"
sh=D00B280C5C3A849C6A88A11BF37643A943BF03BC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\set_campaign_id_m[2].js"
sh=F89D0D35647789000A23E8BD1E557BEE519A6BAE ft=1 fh=4f81c51847428f3f vn="Win32/Toolbar.Conduit evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\statisticsstub[1].exe"
sh=69C3AF55C20BCCC3E20E0FD53946E475A79FC691 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\superfish_m[1].js"
sh=DE77AF1BC7040DB9F309A8151B29B79CCC948372 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\IGKZ0OTN\superfish_no_coupons_m[1].js"
sh=A10DC85BE857C7F24E7E88CA57ABD24ECE131DC8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\NOE71Y11\124[1].js"
sh=120A1897CDAF91977081CA628B33BB478348DCF2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\NOE71Y11\198[1].js"
sh=5D5F61F18A317DF935B86EC4BDD4A5D6A7AEAF8C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\NOE71Y11\242[1].js"
sh=C73163CD43855A22A94B96091468B962503C19FD ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\NOE71Y11\281[1].js"
sh=631208AA15917E2265B37C9DE13EBF01FC31DAAA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\NOE71Y11\91[1].js"
sh=11376809A5A6927852EB7A33F74A50F3641187A1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\NOE71Y11\ibario_pops_m[1].js"
sh=CA8EB6A3D414C06F4A4A55BC59116ACCAD6E9E27 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\NOE71Y11\setup[1].js"
sh=2DC335A206411AD5B2CB8E8AB2B1333596493CB9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\NOE71Y11\set_campaign_id_m[1].js"
sh=FBB7D706F207407D497E9D92FFAEB182CCDEECC6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\O6IK62G2\base[1].js"
sh=B683C210045A4133B80E4ECC0C23BC3196B66514 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\O6IK62G2\bpo_serp_m[1].js"
sh=EE0C01CA81EBB2B46504012816E1B3EC0FE5F29C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\O6IK62G2\cortica_m[1].js"
sh=288FB4BEC59EEF7E0827216B4286A69802EDC05F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\O6IK62G2\cortica_rollover_m[1].js"
sh=A7400B116369A3142513FD9A3E93134369137036 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\O6IK62G2\coupons_intext_ads_5_m[1].js"
sh=0967FA27EE3C8C806CA6F556814F647D73F51EB8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\O6IK62G2\dealply_m[1].js"
sh=BAFD0049395B7968BFFBC54723176162D6687D58 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\O6IK62G2\gam_manager[1].js"
sh=5F4085D36D3743A164582B9628469218ECD72EBA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\O6IK62G2\getdeal_m[1].js"
sh=705F7674C554A2BDA26E88C6776C54FDBF379002 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\O6IK62G2\icm_convertmedia_m[1].js"
sh=4666A52D4EEF9AD0B5BEF9DFF1A9163C17D03398 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\O6IK62G2\initializer[1].js"
sh=9832E303AF1F020C6DD37DB8D8E7A0FF40979142 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\O6IK62G2\intext_adv_m[1].js"
sh=495ADA4EE9CA2DC352A81211D32F1314E46F2D72 ft=1 fh=53d6f5fcee269c1b vn="Win32/Toolbar.Conduit.AP evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\O6IK62G2\ism[1].exe"
sh=431AC6F8406F059B0E9126386C40A2EE543E5EC3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.M evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\O6IK62G2\resources_background[1].js"
sh=136A896CF87EB4A77AB67B0F7336A95EB33E4EB7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\O6IK62G2\revizer_p_dynamic_m[1].js"
sh=4FBFF27F955D2D65199D5E28BC62358ABF619C04 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\O6IK62G2\revizer_p_m[1].js"
sh=17455E3C3ACDC5230501BB3BA992829B8669DDC5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\O6IK62G2\superfish_no_coupons_m[1].js"
sh=CF138C16214F3451EE8CF965CB30532461AA0614 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\O6IK62G2\superfish_no_search_no_coupons_m[1].js"
sh=C8E1096B9DFA740D5A50D39A86B19D7E92CCAAB3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\O6IK62G2\superfish_no_search_no_coupons_m[2].js"
sh=96876E22992058E2DAF3AE9738C9FE95F7DC4F8C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\O6IK62G2\superfish_no_search_no_coupons_plushd_m[1].js"
sh=FC86A52994A26E8F6F944D2BB1A1955BDE928100 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\178[1].js"
sh=5DD581E41A53887D16BAC93BCFEA8237158B7712 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\221[1].js"
sh=8CA0579B9753600D9AF05D837F9340F2A3AD7FC4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\260[1].js"
sh=D0F1CA6766DDDA77AC04D613EF26D48EEA5DA5E4 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\262[1].js"
sh=33BAF57529341A52E67FD88769C280CD75EAEA1A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\269[1].js"
sh=2CF9673BEBBF43F647E03F92E7B59240B7339E06 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\50onred_ads_only_no_fb_m[1].js"
sh=F8BD38D50F0348CEF64D0B397BF6BAC1EC8A3CD0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\ads_only_5_m[1].js"
sh=EDAF8A2B6318DD482F0BBDC2A96C109697D86E5A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\arcadi2_sourceID_m[1].js"
sh=BD99029E3E064DE3BDC009BED86CE5F9F6556130 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\ciuvo_m[1].js"
sh=414BA1B7AEF9A844B50F88BC0548E60F296EF5F5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\corticas_ru_m[1].js"
sh=FF68239BA1F9AFA35E039DEB47E536BF1DA6217B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\CrossriderUtils[1].js"
sh=C403B988AF2EFC2B9DD070F5C5A3070244B7DEE2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\dealply_m[1].js"
sh=B8B5897BC3983B6CE75447868BDAE3EB1441E61C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\ibario_pops_m[1].js"
sh=723041AFAA11FE75C1E748C4BCD3D15B4F61145F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\icm_m[1].js"
sh=60D25EF0BC5392D5A28A39F59C89C2D51915213B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\intext_5_m[1].js"
sh=06107E2CB2818761C26753E71FE096DFDE882F3F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\pops_5_m[1].js"
sh=1D99BB2929871C3A9B94B31AB34B0257069520D0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\revizer_ws_dynamic_m[1].js"
sh=19168753DB0183D5DEFC42DBC9AF43E2EBD86BEB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\revizer_ws_m[1].js"
sh=1F2641FFCA5C1DACAAA217BE7C9989F7AC05C1A1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\similar_web_m[1].js"
sh=2A6234AC2FF85E104F854C0BCDEE42E70CA0A6EE ft=1 fh=04909f28e8d9c2a4 vn="Win32/Toolbar.Conduit.S evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\stublogic[1].exe"
sh=5A2E194F65251D63A145311F957D0A94061D2159 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\superfish_no_search_no_coupons_plushd_m[1].js"
sh=5BD7B82662A263F1138F5E2A90138A8BFA5C4853 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\YDF8HPGR\widdit_m[1].js"
sh=A2A4635BF27718AF19D3E9BD90E8D4EF7205CAF8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\Z0FV3Y3R\102[1].js"
sh=8AF7DA529E5BE7EB53201E9E982A0EF9C1718675 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\Z0FV3Y3R\184[1].js"
sh=EC15A1F579BD66B90DACE75A468FF9AE49958F4F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\Z0FV3Y3R\233[1].js"
sh=FBB87C180584CC593BBEF71609A5AE0528AFCB57 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\Z0FV3Y3R\289[1].js"
sh=81762DED63040E42A925A293E650EB0275C3B3EC ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\Z0FV3Y3R\bpo_serp_m[1].js"
sh=06A8A2563355C9618B1F3AF11748C1C42F98F901 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\Z0FV3Y3R\gam_manager[1].js"
sh=D767D39DA00E1507AB72DF2BBF0DF984E5F67F87 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\Z0FV3Y3R\icm_downloads_m[1].js"
sh=89704379C68557B0711B238ED63862E1CF1013B0 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\Z0FV3Y3R\imonomy_m[1].js"
sh=19716D7C7440A9C3717A84FAA43FBA1EEBABD61B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Documents and Settings\Nitro\Lokale Einstellungen\Temporary Internet Files\Content.IE5\Z0FV3Y3R\revizer_ws_dynamic_2_m[1].js"
sh=741518CA17409E0C108EA202464829E6C664ED1E ft=1 fh=52477f93f91d8732 vn="Variante von MSIL/DomaIQ.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files\Uninstaller\Uninstall.exe"
sh=CF6185A9EDFBA0217C9D36D25CA9F6ADCC9F6BC8 ft=1 fh=f90d49fcbe154eac vn="Win32/Toolbar.Conduit.S evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\Common Files\DVDVideoSoft\TB\ConduitInstaller.exe"
sh=AFD5B25F86CFD3045CCFF940A249A1DA89DEDE5D ft=1 fh=c55a3c08e5709f9a vn="Win32/Toolbar.Montiera.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\Delta\delta\1.8.24.6\uninstall.exe"
sh=36169F971F854C7C9BD52A3B7BFFA9174730AF27 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.E evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\Feven 1.2\38526.crx"
sh=608017C168EB1D6FA595F85FC1E4D2DDAB9B3024 ft=1 fh=ffa22ada16ac070f vn="Variante von Win32/Toolbar.CrossRider.S evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\Feven 1.2\Feven 1.2-chromeinstaller.exe"
sh=E850F308E639305F0186981CB29E2CFCF1456E83 ft=1 fh=85f00e087b48fc87 vn="Variante von Win32/Toolbar.CrossRider.BP evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\Feven 1.2\Uninstall.exe"
sh=63AC839470C8BBBC66782866CEA3D5B8F9207C08 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\Plus-HD-2.6\33440.xpi"
sh=AE39FDB922D2B5163FC2E1DF39D5A5C74D1A0699 ft=1 fh=a2ec2d83f0334aa9 vn="Variante von Win32/Toolbar.CrossRider.H evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-bg.exe"
sh=F2BCF8654217100BBBDD95946DE2130F1B8E93B1 ft=1 fh=bfbd897f01ffca57 vn="Variante von Win32/Toolbar.CrossRider.H evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-bho.dll"
sh=6ABFAB896846DA985F570FE32199CBB62ADB20D5 ft=1 fh=918b5744484477e9 vn="Variante von Win64/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-bho64.dll"
sh=010FB5217DCA3AEA962F3528FCADA10BA9CC27D2 ft=1 fh=73c9b85927e6ad2a vn="Variante von Win32/Toolbar.CrossRider.H evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-buttonutil.dll"
sh=F0DBA106B973D03A7FD19B6701DFBACD3F64C019 ft=1 fh=23aecafdc1aa58cb vn="Variante von Win32/Toolbar.CrossRider.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-buttonutil.exe"
sh=8DCB0818F0E706BECB4E87B5E875B170FD303A32 ft=1 fh=b7f7ac2c81fed7cc vn="Variante von Win64/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-buttonutil64.dll"
sh=469704992B5A39B202518DF1A0DF5C6F9822A20F ft=1 fh=ebe8cfcfb265d5d1 vn="Variante von Win64/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-buttonutil64.exe"
sh=D631BF98B1F31B323CE6174CAF1F277BACF4E9D1 ft=1 fh=2284448eb99a8a2c vn="Variante von Win32/Toolbar.CrossRider.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-codedownloader.exe"
sh=41F835FA152C8AC5E2214C1D4E419E785A8DD720 ft=1 fh=78c6094b6052b727 vn="Variante von Win32/Toolbar.CrossRider.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-enabler.exe"
sh=72EAE905732B7EE1A8F21E6C2E1494217AF7A8ED ft=1 fh=a1bf9314fec5bf9a vn="Variante von Win32/Toolbar.CrossRider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-firefoxinstaller.exe"
sh=67348568B44CDEE72143CC03428C3064A3840A3A ft=1 fh=24f521932a14ec20 vn="Variante von Win32/Toolbar.CrossRider.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-helper.exe"
sh=E7C0896ACA9A17D6D190D5289BC0B60ED1A33E77 ft=1 fh=c77e7218289cf0ee vn="Variante von Win32/Toolbar.CrossRider.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\Plus-HD-2.6\Plus-HD-2.6-updater.exe"
sh=7243AF2124B24A4C7AE382020320B9AC4E342184 ft=1 fh=736eab52356df221 vn="Win32/AdWare.AddLyrics.AE Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\Re-markit\Uninstall.exe"
sh=111A45CFC3B90E7EFC5F8A29CA7B671527AE3FC0 ft=1 fh=541dc356763bc3d1 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Communicator\mgcommon.dll"
sh=843091CC4B11E7DBCA7260148854EF0263B6FD41 ft=1 fh=75ffa605f15aa281 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Communicator\mgcommunication.dll"
sh=05B88F770FF4CF803620ECF6841DD6F8E4C7F55F ft=1 fh=c73269955da119f2 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Communicator\mgsimcommon.dll"
sh=477C9030A086A0EF33EE020061EECBBFFB711E34 ft=1 fh=69b06e9044e131f9 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Communicator\mgxml_wrapper.dll"
sh=8570D63803C2FC0F944F46C2144009209B573DFF ft=1 fh=099d200935a603cb vn="Variante von Win32/SweetIM.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Communicator\SweetPacksUpdateManager.exe"
sh=C8F1E3F28152C6C010B7AE8FA4D167E3C388FF0C ft=1 fh=84ff0b58ed098a1d vn="Win32/SweetIM.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Communicator\resources\sqlite\mgSqlite3.dll"
sh=FCD58D230710D97734D6DA825B84A66B45A8BC09 ft=1 fh=803c27236be703a2 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\ContentPackagesActivationHandler.exe"
sh=EEE7965935CF6D281022423AC2159E8E98BA1183 ft=1 fh=5f3499241d71f7e8 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\mgAdaptersProxy.dll"
sh=DDF643F34EBFAC73B7CEF5FE5A875CB09DD0E2D2 ft=1 fh=b287aa0c4066b7f1 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\mgArchive.dll"
sh=0829E23EE7973B55F5DF168CB5D582FB32A747A0 ft=1 fh=b9e26e741cf528be vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\mgcommon.dll"
sh=A94BB51780D1C0278A7919311ECDE9909ADCA4AE ft=1 fh=004d6f6a35d311a0 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\mgcommunication.dll"
sh=7ECF11D3C8AF8F92B5CFD83BD010F6E6A617E056 ft=1 fh=9a3f26a384aa5e3b vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\mgconfig.dll"
sh=459ABF1224EF48877D3DC5F0D13AE297EA631033 ft=1 fh=97f0ac65cb0f8992 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\mgFlashPlayer.dll"
sh=5787C377D42C3F387E1E5883E13C395CBC2FAD17 ft=1 fh=665600364462adc7 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\mghooking.dll"
sh=952EECCEC1E9D42E03B2DAB02F82DB0B0D24DAB5 ft=1 fh=59d1a94321a18fc7 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\mgICQAuto.dll"
sh=FAE653E979802BCCE1A0BA28CB38FC4B062B3322 ft=1 fh=c238cdbf722dbee1 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\mgICQMessengerAdapter.dll"
sh=45E3FF8B014EED68EE70BF58D7BC6E4A6327B9DC ft=1 fh=d0237264f583be01 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\mglogger.dll"
sh=7D3852E6F6C0E1D16DBC9DF4B9FC508859F6D340 ft=1 fh=dca258e402db5661 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\mgMediaPlayer.dll"
sh=058E85BD129D04CDCC1AB534E087D48DBB841E7D ft=1 fh=33bbb4ec6faf8720 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\mgMsnAuto.dll"
sh=E35AE873A58544486A7BAEA26F26876077F14B53 ft=1 fh=d188a05ec8ee9737 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\mgMsnMessengerAdapter.dll"
sh=D7BBC28B3666475C54CE31889A336C7DBE3B11A4 ft=1 fh=6456d5f63c8939a7 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\mgsimcommon.dll"
sh=BBA9639507F480CBC08BE81513D32189F75B0F6B ft=1 fh=8047d73f9b30c012 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\mgSweetIM.dll"
sh=DCDCF508E485BD9A7F268206321C60433175313E ft=1 fh=a2735164dfee87ca vn="Variante von Win32/SweetIM.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\mgUpdateSupport.dll"
sh=4D53F1C240E5B46AE22C2102CE8AB80B33EA83CB ft=1 fh=f802cb8ac448af36 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\mgxml_wrapper.dll"
sh=E28606C8AF455AA4C4264BE322028C28075C2943 ft=1 fh=8964a6b801489ba0 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\mgYahooAuto.dll"
sh=68025AE9EB81EC0DDC9AE3F88618DAD344807791 ft=1 fh=0983a28d994d94c9 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\mgYahooMessengerAdapter.dll"
sh=11DDADDAE588650F1540F6C6DB612B25A4EA2666 ft=1 fh=c047422c844ae7e1 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\SweetIM.exe"
sh=C8F1E3F28152C6C010B7AE8FA4D167E3C388FF0C ft=1 fh=84ff0b58ed098a1d vn="Win32/SweetIM.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Messenger\resources\sqlite\mgSqlite3.dll"
sh=364FBEB8C0BF1B72F829A1BE80DDBA91388AB8CD ft=1 fh=d67d10d428c2053f vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\ClearHist.exe"
sh=ED32BD47BF5D7B2EFDCE5CC890C0EEBB11F118BD ft=1 fh=4b203e3a44479d9f vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgcommon.dll"
sh=0D987DCCF06D033FFC9A981E6317B914205CCCFC ft=1 fh=6ce27c54eacb08fa vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgconfig.dll"
sh=AE604AD6B9887A6C8F621772D3B286E2C930B039 ft=1 fh=714e1e2c91c18969 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelper.dll"
sh=0618272A31DE4847AF329AA5F89A8E7C882F35CA ft=1 fh=984fb84c9f87deff vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgHelperApp.exe"
sh=9F462706270B509DDC0B28DA9A3F5D431C1A5D5F ft=1 fh=d29b8246cab153c5 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mghooking.dll"
sh=68AAF2564054206BA93785818A48AC90F70D71ED ft=1 fh=85552ef154dcf9af vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mglogger.dll"
sh=42DB281FBD792B359038D72E892F5CA66E12150F ft=1 fh=d872be9d0bac7a72 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgsimcommon.dll"
sh=4A06696CEDD675D33B56B66806823C5B44AE09F3 ft=1 fh=dca7ff07dc2e07be vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll"
sh=B12F03236DE73AE1B8C7FF578DE10CD3A118CD40 ft=1 fh=bef3fd6309f77fbe vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgToolbarProxy.dll"
sh=E65DC5506E58A33822A6F45E71A80A2E462DC8D9 ft=1 fh=032374e2b2c0d4ed vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Program Files (x86)\SweetIM\Toolbars\Internet Explorer\mgxml_wrapper.dll"
sh=246DDBC3A2C223A6B9072637D93DC2A2832D097A ft=1 fh=c71c0011b04f613a vn="Win32/Toolbar.Babylon.Y evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\ProgramData\DSearchLink\DSearchLink.exe"
sh=E1C99225C4C16710DE3AF3D52300E1E943F7C84F ft=1 fh=f891ef12b7700e02 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\ProgramData\SweetIM\Messenger\update\sweetimsetup.exe"
sh=246DDBC3A2C223A6B9072637D93DC2A2832D097A ft=1 fh=c71c0011b04f613a vn="Win32/Toolbar.Babylon.Y evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\All Users\DSearchLink\DSearchLink.exe"
sh=E1C99225C4C16710DE3AF3D52300E1E943F7C84F ft=1 fh=f891ef12b7700e02 vn="Variante von Win32/SweetIM.L evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\All Users\SweetIM\Messenger\update\sweetimsetup.exe"
sh=1549CF4F9282F1B42A58B5E050E12EF0AD669798 ft=1 fh=ffe6693d8bc7d6c5 vn="Win32/Toolbar.Babylon.I evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\BabSolution\Shared\BabMaint.exe"
sh=671E3E4E9E4C9A039D9AD1479A0C91E670AF18E3 ft=1 fh=d643e79c9fb8f862 vn="Win32/Toolbar.Babylon.AE evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\BabSolution\Shared\BUSolution.dll"
sh=BAFA6DD81186B508DC4DF6E3C85F84AFEFEDE66B ft=1 fh=d47ea16ce26bdfeb vn="Win32/InstallCore.BM evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\DealPly\UpdateProc\UpdateTask.exe"
sh=73EEB1BF64EE520BD69D1E3A1173A0CEF71C4A59 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.G evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\chrome\content\core\xhr.js"
sh=8E404BAFA9CEAC0628F089B4F1AA879EB5A3404E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\101_cortica_m.js"
sh=A2A4635BF27718AF19D3E9BD90E8D4EF7205CAF8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\102_dealply_m.js"
sh=7FB2B410D7A3C932D5B739BEAEFD74BBBB94FE44 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\103_intext_5_m.js"
sh=2A58EF9925B78DB27409BAD75BDC8509C5270567 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\104_jollywallet_m.js"
sh=928B3A0AAB8E65FB9E3A586D99E80AD24A68A831 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\105_corticas_m.js"
sh=A69DBD3502EA9C4EDD7DEAFB23A8FC1C97BAB232 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\107_coupish_m.js"
sh=723041AFAA11FE75C1E748C4BCD3D15B4F61145F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\108_icm_m.js"
sh=E531E2197FC767CFACEA72A75E1CE492D08F92DA ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\116_ads_only_5_m.js"
sh=C3D3CCADC78D71D7482BB5DBA16FBB0534200D12 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\117_coupons_intext_ads_5_m.js"
sh=8C65267C1AADD4AB670D6D979C4A686D16A86869 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\119_similar_web_m.js"
sh=D10EA105AB5DB329186B0B6F10541DD58058AEB8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\120_luck_m.js"
sh=9D0040A52CBC49955031A7B1DA89AC5E4087CE5B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\123_intext_adv_m.js"
sh=A10DC85BE857C7F24E7E88CA57ABD24ECE131DC8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\124_superfish_no_search_no_coupons_m.js"
sh=62B063E0D121966E9A83C9AB518DADAE47423555 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\125_arcadi2_m.js"
sh=B1FD213981E274BCEE2697A82C7E87CA7418C39B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\126_revizer_ws_m.js"
sh=2536CE239CC1E9DCCB8931BC82F1CF8520F55686 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\127_revizer_p_m.js"
sh=EF36C9502A12C97CF29A90C0ACE3DCF72ACD389E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\128_superfish_pricora_m.js"
sh=D9E89F57D3A13498640961F3B9954D67D7EA1039 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\129_widdit_m.js"
sh=B9CFC11B067C54952D592C618BD391AA26B3393B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\135_arcadi3_m.js"
sh=17483832BF1FA23335B7C1E04A0530AB60CBEDC6 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\138_getdeal_m.js"
sh=90A4F559561CF603A203F93D56C80B17B8152325 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\141_corticas_ru_m.js.js"
sh=8395A2B6D59D2F3EDDCFC863DDA2F674396DC74C ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\142_intext_fa_m.js"
sh=51822FF4DBA10C1C71FCA1C6CDE317212E909C16 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.O evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\14_CrossriderUtils.js"
sh=736E2498BA47FECD737FE362E155DFD1850D096E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\155_ibario_pops_m.js"
sh=FA8C6C2029BA73EB8FD626C234D88B1B57E953C5 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\158_50onred_ads_only_no_fb_m.js"
sh=18C46AE5CB67274764D17F8A40975EEB5C67F795 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\159_cortica_rollover_m.js"
sh=3DA0E458C1D4F5CECA7F012A2B0DA4CC1C7B63A1 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\170_icm1_5_m.js"
sh=EDAF8A2B6318DD482F0BBDC2A96C109697D86E5A ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\171_arcadi2_sourceID_m.js"
sh=2184DFBF93B03726607BF2C44682CF058FB2987B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.A evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\174_arcadi_serp_dynamic_id_m.js"
sh=F6FA9D82AEFE95E8544F0B7EE8D1784E6A3D02A9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\175_coolmirage_m.js"
sh=FC86A52994A26E8F6F944D2BB1A1955BDE928100 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\178_revizer_ws_dynamic_m.js"
sh=A2F229B2BBCDAFC3A740DD205122E858DFF5E794 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\179_revizer_p_dynamic_m.js"
sh=BD70E8BC50324F58EFD302B6A17C16D6A2C68413 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\180_bpo_serp_m.js"
sh=8AF7DA529E5BE7EB53201E9E982A0EF9C1718675 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\184_noproblemppc_m.js"
sh=541F6B364455354268941C1D81E2E0FCAA633FC9 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\189_active_sanity.js"
sh=06107E2CB2818761C26753E71FE096DFDE882F3F ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\190_pops_5_m.js"
sh=4168C15341DD91504013B4DD0A19F9016D268AA3 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\191_ciuvo_m.js"
sh=BAD6F905DCD72B7D2A93D06582B026F3CCF3616E ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\192_revizer_ws_dynamic_b2b_m.js"
sh=5B3338E8C3C20A95C180626940F7C6BC46D49F5D ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\193_revizer_p_dynamic_b2b_m.js"
sh=7F88F1865FBE0A134FAEA5DA7B88C7264BBC1606 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\194_retargeting_bi_m.js.js"
sh=FCD343976905A1CE3BB880C1C4A251AEDA3E140B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.K evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\195_icm_convertmedia_m.js"
sh=675F44991136237FD89C48DFCB5C60FDED223BD8 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\197_kreapixel_pops_m.js"
sh=120A1897CDAF91977081CA628B33BB478348DCF2 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.J evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\198_superfish_no_search_no_coupons_plushd_m.js"
sh=07EDC29FCB544EFD7D231A67B2437BB2E5E7B917 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\199_superfish_no_coupons_plushd_m.js"
sh=41247167B9CCDA7B7301B0647606AD3DB1304E45 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\200_foxydeal_m.js"
sh=7922F11759DB9C0610F7DAC3FC6540F2C98FC31B ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\204_pricedetect_m.js"
sh=4763DEF2AC4EC29A3B0298F0DB54D4BE8E5931F7 ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.B evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\208_gam_manager.js"
sh=5902FC10054355A5B8B9CC41620445BAA0F1D0AB ft=0 fh=0000000000000000 vn="JS/Toolbar.Crossrider.F evtl. unerwÃ¼nschte Anwendung" ac=I fn="C:\Windows.old.002\Users\Nitro\Anwendungsdaten\Mozilla\Firefox\Profiles\bu9fzbh4.default\extensions\7f404ccc-b0a9-4faf-b3c0-89ceea949aea@a6724a05-9380-4ebe-be02-e67e35a3402c.com\extensionData\plugins\21_debug.js"

04.08.2015, 15:34	#6
schrauber /// the machine /// TB-Ausbilder	trivia games - nervendes fenster erscheint immer wieder Da steht doch bissl mehr in meinem obigen Post oder nicht? Combofix fehlt noch. __________________ --> trivia games - nervendes fenster erscheint immer wieder

13.08.2015, 14:50	#8
schrauber /// the machine /// TB-Ausbilder	trivia games - nervendes fenster erscheint immer wieder Ich suche gerade den Teil wo ich geschrieben haben soll dass die Kiste nach Revo sauber ist........ __________________ gruß, schrauber *Proud Member of UNITE and ASAP since 2009* Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM!

trivia games - nervendes fenster erscheint immer wieder

Plagegeister aller Art und deren Bekämpfung: trivia games - nervendes fenster erscheint immer wieder