![]() |
|
Log-Analyse und Auswertung: Windows 7: gotut.ru als Startseite beim Firefox, IExplorer und cromeWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() | ![]() Windows 7: gotut.ru als Startseite beim Firefox, IExplorer und crome Hallo gestern ist mit die geänderte Startseite bei Firefox aufgefallen, der Firefox Link wurde dann von AVG Antivirus Free Edition entfernt. Beim Internetexplorer das gleiche, bei crome ist anscheinend nur die Startseite betroffen, da der Link noch da ist. In AVG Antivirus konnte ich keine Log datei finden. im Anhang ein Screenshot defogger_disable.log Code:
ATTFilter defogger_disable by jpshortstuff (23.02.10.1) Log created at 23:47 on 07/09/2015 (Lya) Checking for autostart values... HKCU\~\Run values retrieved. HKLM\~\Run values retrieved. Checking for services/drivers... Unable to read SafeBoot.sys -=E.O.F=- Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:07-09-2015 Ran by LISA (administrator) on LISA-HP (07-09-2015 23:49:00) Running from C:\Users\LISA\Desktop Loaded Profiles: LISA (Available Profiles: LISA) Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) Language: English (United States) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgrsx.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgcsrvx.exe (Hewlett-Packard) C:\Program Files\Hewlett-Packard\File Sanitizer\HPFSService.exe (McAfee, Inc.) C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe (IDT, Inc.) C:\Program Files\IDT\WDM\stacsv.exe (Hewlett-Packard Company) C:\Windows\System32\hpservice.exe (DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe (Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AEstSrv.exe (LSI Corporation) C:\Program Files\LSI SoftModem\agrsmsvc.exe (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgidsagent.exe (DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgwdsvc.exe (AVM Berlin) C:\Program Files\FRITZ!Fernzugang\avmike.exe (Microsoft Corporation) C:\Program Files\Microsoft\BingBar\SeaPort.EXE (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe () C:\Program Files\BubbleUPnP Server\BubbleUPnPServer.exe (AVM Berlin) C:\Program Files\FRITZ!Fernzugang\certsrv.exe (HP) C:\Program Files\HP\HPLaserJetService\HPLaserJetService.exe (Hewlett-Packard Development Company, L.P) C:\Program Files\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP QuickLook\HPDayStarterService.exe (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (AVM Berlin) C:\Program Files\FRITZ!Fernzugang\nwtsrv.exe (PDF Complete Inc) C:\Program Files\PDF Complete\pdfsvc.exe (Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe (TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe (TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgnsx.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgemcx.exe (ArcSoft, Inc.) C:\Windows\System32\uArcCapture.exe () C:\Program Files\1&1 Surf-Stick\AssistantServices.exe (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe (Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe (COMPANYVERS_NAME) C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbarsvc.exe (AVG Secure Search) C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\ToolbarUpdater.exe () C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\loggingserver.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Hewlett-Packard) C:\Program Files\Hewlett-Packard\File Sanitizer\coreshredder.exe (Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe (Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe (Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe (IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe () C:\Program Files\AVG Secure Search\vprot.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe (SlySoft, Inc.) C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe (Elaborate Bytes AG) C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe ( ) C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\APPINTEGRATOR.EXE (VER_COMPANY_NAME) C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe () C:\Program Files\1&1 Surf-Stick\UIExec.exe (AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgui.exe (Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe (Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe (Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe (TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe () C:\Program Files\1&1 Internet-Radio-Player\phonostarTimer.exe (Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin (Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe (Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe (Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Support Framework\HPSA_Service.exe (Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Dropbox, Inc.) C:\Users\LISA\AppData\Roaming\Dropbox\bin\Dropbox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_18_0_0_232.exe (Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_18_0_0_232.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [QLBController] => C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe [256056 2010-03-01] (Hewlett-Packard Company) HKLM\...\Run: [IAAnotif] => C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-08-25] (Intel Corporation) HKLM\...\Run: [HPPowerAssistant] => C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [1690680 2009-12-16] (Hewlett-Packard) HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1791272 2010-06-04] (Synaptics Incorporated) HKLM\...\Run: [HPWirelessAssistant] => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [363064 2010-04-05] (Hewlett-Packard) HKLM\...\Run: [File Sanitizer] => C:\Program Files\Hewlett-Packard\File Sanitizer\CoreShredder.exe [11265536 2009-12-12] (Hewlett-Packard) HKLM\...\Run: [DTRun] => c:\Program Files\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe [518656 2009-11-19] (ArcSoft Inc.) HKLM\...\Run: [NortonOnlineBackupReminder] => C:\Program Files\Symantec\Norton Online Backup\Activation\NobuActivation.exe [600936 2009-06-29] (Symantec Corporation) HKLM\...\Run: [PDF Complete] => C:\Program Files\PDF Complete\pdfsty.exe [563736 2009-10-23] (PDF Complete Inc) HKLM\...\Run: [Windows Mobile Device Center] => C:\windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation) HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [495708 2011-08-06] (IDT, Inc.) HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.) HKLM\...\Run: [AppleSyncNotifier] => C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [58656 2011-04-20] (Apple Inc.) HKLM\...\Run: [vProt] => C:\Program Files\AVG Secure Search\vprot.exe [2567568 2015-08-16] () HKLM\...\Run: [LexwareInfoService] => C:\Program Files\Common Files\Lexware\Update Manager\LxUpdateManager.exe [189808 2011-07-31] (Haufe-Lexware GmbH & Co. KG) HKLM\...\Run: [CloneCDTray] => C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [57344 2009-01-30] (SlySoft, Inc.) HKLM\...\Run: [VirtualCloneDrive] => C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG) HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation) HKLM\...\Run: [mobilegeni daemon] => C:\Program Files\Mobogenie\DaemonProcess.exe HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.) HKLM\...\Run: [VideoDownloadConverter Home Page Guard 32 bit] => C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\AppIntegrator.exe [421448 2014-04-28] ( ) HKLM\...\Run: [VideoDownloadConverter Search Scope Monitor] => C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zSrchMn.exe [55368 2014-04-28] (Mindspark) HKLM\...\Run: [VideoDownloadConverter_4z Browser Plugin Loader] => C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe [61512 2014-04-28] (VER_COMPANY_NAME) HKLM\...\Run: [UIExec] => C:\Program Files\1&1 Surf-Stick\UIExec.exe [153424 2011-08-25] () HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2015\avgui.exe [3780520 2015-07-31] (AVG Technologies CZ, s.r.o.) HKLM\...\Run: [ToolboxFX] => C:\Program Files\HP\ToolboxFX\bin\HPTLBXFX.exe [58936 2010-10-25] (Hewlett-Packard Company) HKLM\...\Run: [HP Software Update] => C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-06-09] (Hewlett-Packard) HKLM\...\Run: [] => [X] HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe, Winlogon\Notify\DeviceNP: C:\windows\system32\DeviceNP.dll [2009-11-17] (Hewlett-Packard Limited) HKU\S-1-5-21-430462746-378290837-44786878-1003\...\Run: [HPADVISOR] => C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [1685048 2009-09-30] (Hewlett-Packard) HKU\S-1-5-21-430462746-378290837-44786878-1003\...\Run: [LightScribe Control Panel] => C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2009-06-17] (Hewlett-Packard Company) HKU\S-1-5-21-430462746-378290837-44786878-1003\...\Run: [4Y3Y0C3A0W9UYD1IMOSIARRL] => C:\ftpuser\0EBD6955DD9.exe /q HKU\S-1-5-21-430462746-378290837-44786878-1003\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-02-08] (Google Inc.) HKU\S-1-5-21-430462746-378290837-44786878-1003\...\Run: [TomTomHOME.exe] => C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe [248208 2013-03-22] (TomTom) HKU\S-1-5-21-430462746-378290837-44786878-1003\...\Run: [NextLive] => C:\windows\system32\rundll32.exe "C:\Users\LISA\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l HKU\S-1-5-21-430462746-378290837-44786878-1003\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [53282944 2015-06-29] (Skype Technologies S.A.) HKU\S-1-5-21-430462746-378290837-44786878-1003\...\Run: [1&1 Internet-Radio-PlayerTimer] => C:\Program Files\1&1 Internet-Radio-Player\phonostarTimer.exe [42496 2014-12-04] () HKU\S-1-5-21-430462746-378290837-44786878-1003\...\Run: [Dropbox Update] => C:\Users\LISA\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-20] (Dropbox, Inc.) HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\windows\System32\SPReview\SPReview.exe [280576 2013-03-31] (Microsoft Corporation) Lsa: [Notification Packages] DPPassFilter scecli ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\LISA\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\LISA\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\LISA\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-08-14] (Dropbox, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2010-06-26] ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.) Startup: C:\Users\LISA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2014-11-17] ShortcutTarget: Dropbox.lnk -> C:\Users\LISA\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) Startup: C:\Users\LISA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Enviar a OneNote.lnk [2015-01-09] ShortcutTarget: Enviar a OneNote.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation) Startup: C:\Users\LISA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk [2011-02-08] ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe () CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Winsock: Catalog5 06 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.31.1 Tcpip\..\Interfaces\{C97CB71E-C566-44AA-8EB6-432FEFABE41E}: [DhcpNameServer] 192.168.31.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://websearch.thesearchpage.info/?pid=20375&r=2015/01/07&hid=6825593813402750368&lg=EN&cc=DE&unqvl=74 HKU\S-1-5-21-430462746-378290837-44786878-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/ HKU\S-1-5-21-430462746-378290837-44786878-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com HKU\S-1-5-21-430462746-378290837-44786878-1003\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie HKU\S-1-5-21-430462746-378290837-44786878-1003\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie URLSearchHook: HKLM - Free Traffic Bar Toolbar - {0ed0633c-a54d-47f1-94e7-5bded41ae674} - C:\Program Files\Free_Traffic_Bar\prxtbFree.dll (Conduit Ltd.) URLSearchHook: HKU\S-1-5-21-430462746-378290837-44786878-1003 - Free Traffic Bar Toolbar - {0ed0633c-a54d-47f1-94e7-5bded41ae674} - C:\Program Files\Free_Traffic_Bar\prxtbFree.dll (Conduit Ltd.) URLSearchHook: HKU\S-1-5-21-430462746-378290837-44786878-1003 - (No Name) - {93a3111f-4f74-4ed8-895e-d9708497629e} - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll (Mindspark) SearchScopes: HKLM -> DefaultScope {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.thesearchpage.info/?l=1&q={searchTerms}&pid=20375&r=2015/01/07&hid=6825593813402750368&lg=EN&cc=DE&unqvl=74 SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM -> {3122535E-E748-4168-8EB4-87DB7EA63DF2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox SearchScopes: HKLM -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1734448 SearchScopes: HKLM -> {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.thesearchpage.info/?l=1&q={searchTerms}&pid=20375&r=2015/01/07&hid=6825593813402750368&lg=EN&cc=DE&unqvl=74 SearchScopes: HKLM -> {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^HJ^xdm382^YYA^de&si=pconverter&ptb=965A5943-1588-4413-B1BD-475079524E3E&ind=2014042814&n=780bdabe&psa=&st=sb&searchfor={searchTerms} SearchScopes: HKU\S-1-5-21-430462746-378290837-44786878-1003 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={18D8890E-03C9-40A2-B958-52AA81ADF453}&mid=ddcfe7a3f29947d0842d79115ee6d747-e3fc6123164ed5d97872fd8f37a8091760bbbd9b&lang=en&ds=AVG&pr=fr&d=2012-06-22 18:52:03&v=15.3.0.11&pid=avg&sg=0&sap=dsp&q={searchTerms} SearchScopes: HKU\S-1-5-21-430462746-378290837-44786878-1003 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1734448 SearchScopes: HKU\S-1-5-21-430462746-378290837-44786878-1003 -> {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = hxxp://websearch.thesearchpage.info/?l=1&q={searchTerms}&pid=20375&r=2015/01/07&hid=6825593813402750368&lg=EN&cc=DE&unqvl=74 SearchScopes: HKU\S-1-5-21-430462746-378290837-44786878-1003 -> {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^HJ^xdm382^YYA^de&si=pconverter&ptb=965A5943-1588-4413-B1BD-475079524E3E&ind=2014042814&n=780bdabe&psa=&st=sb&searchfor={searchTerms} BHO: Free Traffic Bar Toolbar -> {0ed0633c-a54d-47f1-94e7-5bded41ae674} -> C:\Program Files\Free_Traffic_Bar\prxtbFree.dll [2011-05-09] (Conduit Ltd.) BHO: Mein Gutscheincode Finder zeigt automatisch Shopping-Gutscheine an mit denen Sie beim Online-Einkauf sparen können. -> {1ED16E0A-E8C4-40A0-8BC2-79485D21F796} -> C:\Program Files\Mein Gutscheincode Finder\Internet Explorer\x86\ConversionOneIE.dll [2011-06-22] (Conversion One GmbH) BHO: Toolbar BHO -> {312f84fb-8970-4fd3-bddb-7012eac4afc9} -> C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll [2014-04-28] (Mindspark) BHO: File Sanitizer for HP ProtectTools -> {3134413B-49B4-425C-98A5-893C1F195601} -> C:\Program Files\Hewlett-Packard\File Sanitizer\IEBHO.dll [2009-12-12] (Hewlett-Packard) BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-07-14] (Microsoft Corporation) BHO: HP ProtectTools Security Manager Extension -> {395610AE-C624-4f58-B89E-23733EA00F9A} -> C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpOtsPluginIe8.dll [2011-05-02] (DigitalPersona, Inc.) BHO: AVG Safe Search -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> C:\Program Files\AVG\AVG2012\avgssie.dll No File BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-12-18] (Oracle Corporation) BHO: Windows Live Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation) BHO: AVG Security Toolbar -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Secure Search\18.8.0.180\AVG Secure Search_toolbar.dll [2015-08-16] (AVG Secure Search) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-08-05] (Google Inc.) BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-01-31] (Skype Technologies S.A.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation) BHO: Search Assistant BHO -> {c547c6c2-561b-4169-a2a5-20ba771ca93b} -> C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll [2014-04-28] (Mindspark) BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-07-14] (Microsoft Corporation) BHO: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-12-18] (Oracle Corporation) BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2013-08-28] (Hewlett-Packard) Toolbar: HKLM - No Name - {0BF43445-2F28-4351-9252-17FE6E806AA0} - No File Toolbar: HKLM - Free Traffic Bar Toolbar - {0ed0633c-a54d-47f1-94e7-5bded41ae674} - C:\Program Files\Free_Traffic_Bar\prxtbFree.dll [2011-05-09] (Conduit Ltd.) Toolbar: HKLM - AVG Security Toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files\AVG Secure Search\18.8.0.180\AVG Secure Search_toolbar.dll [2015-08-16] (AVG Secure Search) Toolbar: HKLM - VideoDownloadConverter - {48586425-6bb7-4f51-8dc6-38c88e3ebb58} - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll [2014-04-28] (Mindspark) Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll [2011-10-21] (Microsoft Corporation.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-08-05] (Google Inc.) Toolbar: HKU\S-1-5-21-430462746-378290837-44786878-1003 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File Toolbar: HKU\S-1-5-21-430462746-378290837-44786878-1003 -> Free Traffic Bar Toolbar - {0ED0633C-A54D-47F1-94E7-5BDED41AE674} - C:\Program Files\Free_Traffic_Bar\prxtbFree.dll [2011-05-09] (Conduit Ltd.) Toolbar: HKU\S-1-5-21-430462746-378290837-44786878-1003 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File Toolbar: HKU\S-1-5-21-430462746-378290837-44786878-1003 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-08-05] (Google Inc.) Toolbar: HKU\S-1-5-21-430462746-378290837-44786878-1003 -> VideoDownloadConverter - {48586425-6BB7-4F51-8DC6-38C88E3EBB58} - C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll [2014-04-28] (Mindspark) DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG2012\avgpp.dll No File Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2015-02-17] (Microsoft Corporation) Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-01-31] (Skype Technologies S.A.) Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\18.8.0\ViProtocol.dll [2015-08-16] (AVG Secure Search) FireFox: ======== FF ProfilePath: C:\Users\LISA\AppData\Roaming\Mozilla\Firefox\Profiles\o49vl2wk.default FF Homepage: hxxp://gotut.ru/?from=ic3ua FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] () FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2013-12-18] () FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\18.8.0\\npsitesafety.dll [No File] FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.) FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-12-18] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-12-18] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled [No File] FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-03-31] (Microsoft Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-14] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-14] (Google Inc.) FF Plugin: @VideoDownloadConverter_4z.com/Plugin -> C:\Program Files\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll [No File] FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-12-18] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-430462746-378290837-44786878-1003: @phonostar.de/1&1 Internet-Radio-Player -> C:\Program Files\1&1 Internet-Radio-Player\npphonostarDetectNP.dll [2012-11-21] ( ) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-03-31] (Microsoft Corporation) FF SearchPlugin: C:\Users\LISA\AppData\Roaming\Mozilla\Firefox\Profiles\o49vl2wk.default\searchplugins\WebSearch.xml [2015-01-07] FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\avg-secure-search.xml [2015-08-16] FF Extension: VideoDownloadConverter - C:\Users\LISA\AppData\Roaming\Mozilla\Firefox\Profiles\o49vl2wk.default\Extensions\4zffxtbr@www.videodownloadconverter.com [2015-09-03] FF Extension: Pocket - C:\Users\LISA\AppData\Roaming\Mozilla\Firefox\Profiles\o49vl2wk.default\Extensions\isreaditlater@ideashower.com [2015-05-30] FF Extension: preisspion.de - C:\Users\LISA\AppData\Roaming\Mozilla\Firefox\Profiles\o49vl2wk.default\Extensions\finder@meingutscheincode.de.xpi [2011-05-16] FF Extension: yingBar - C:\Users\LISA\AppData\Roaming\Mozilla\Firefox\Profiles\o49vl2wk.default\Extensions\{fae08409-991d-414c-8113-68f37760339a}.xpi [2015-07-26] FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-09-02] FF HKLM\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt FF Extension: DigitalPersona Extension - C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt [2011-12-24] FF HKLM\...\Firefox\Extensions: [avg@toolbar] - C:\ProgramData\AVG Secure Search\FireFoxExt\18.8.0.180 FF Extension: AVG Security Toolbar - C:\ProgramData\AVG Secure Search\FireFoxExt\18.8.0.180 [2015-08-16] FF HKU\S-1-5-21-430462746-378290837-44786878-1003\...\Firefox\Extensions: [finder@meingutscheincode.de] - C:\Program Files\Mein Gutscheincode Finder\Firefox FF Extension: preisspion.de - C:\Program Files\Mein Gutscheincode Finder\Firefox [2011-07-12] FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\itms.js [2015-09-02] Chrome: ======= CHR dev: Chrome dev build detected! <======= ATTENTION CHR Plugin: (Store "permissions": [ "webstorePrivate", "management" ], "version": "0.2" }, "page_ordinal": "n", "path": "C:\\Program Files\\Google\\Chrome\\Application\\27.0.1453.94\\resources\\web_store") - "name": "Store", "permissions": [ "webstorePrivate", "management" ], "version": "0.2" }, "page_ordinal": "n", C:\Program Files\Google\Chrome\Application\27.0.1453.94\resources\web_store No File CHR Plugin: (Google Drive "offline_enabled": true, "options_page": "https://drive.google.com/settings", "permissions": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ], "update_url": "https://clients2.google.com/service/update2/crx", "version": "14.0" }, "page_ordinal": "n", "path": "apdfllckaahabafndbhieahigkjlhalf\\14.0_0") - "name": "Google Drive", "offline_enabled": true, "options_page": "https://drive.google.com/settings", "permissions": [ "background", "clipboardRead", "clipboardWrite", "notifications", "unlimitedStorage" ], "update_url": "https://clients2.google.com/service/update2/crx", "version": "14.0" }, "page_ordinal": "n", apdfllckaahabafndbhieahigkjlhalf\14.0_0 No File CHR Plugin: (Google Voice Search Hotword (Beta) "options_page": "options.html", "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "audioCapture", "hotwordPrivate", "management", "power", "tabs" ], "platforms": [ { "lang": "de", "nacl_arch": "arm", "sub_package_path": "_platform_specific/arm_de/" }, { "lang": "de", "nacl_arch": "x86-32", "sub_package_path": "_platform_specific/x86-32_de/" }, { "lang": "de", "nacl_arch": "x86-64", "sub_package_path": "_platform_specific/x86-64_de/" }, { "lang": "en-GB", "nacl_arch": "arm", "sub_package_path": "_platform_specific/arm_en-gb/" }, { "lang": "en-GB", "nacl_arch": "x86-32", "sub_package_path": "_platform_specific/x86-32_en-gb/" }, { "lang": "en-GB", "nacl_arch": "x86-64", "sub_package_path": "_platform_specific/x86-64_en-gb/" }, { "lang": "fr", "nacl_arch": "arm", "sub_package_path": "_platform_specific/arm_fr/" }, { "lang": "fr", "nacl_arch": "x86-32", "sub_package_path": "_platform_specific/x86-32_fr/" }, { "lang": "fr", "nacl_arch": "x86-64", "sub_package_path": "_platform_specific/x86-64_fr/" }, { "lang": "ru", "nacl_arch": "arm", "sub_package_path": "_platform_specific/arm_ru/" }, { "lang": "ru", "nacl_arch": "x86-32", "sub_package_path": "_platform_specific/x86-32_ru/" }, { "lang": "ru", "nacl_arch": "x86-64", "sub_package_path": "_platform_specific/x86-64_ru/" }, { "nacl_arch": "arm", "sub_package_path": "_platform_specific/arm_/" }, { "nacl_arch": "x86-32", "sub_package_path": "_platform_specific/x86-32_/" }, { "nacl_arch": "x86-64", "sub_package_path": "_platform_specific/x86-64_/" } ], "update_url": "https://epicunitscan.info/00service/update2/crx", "version": "0.1.1.5023", "web_accessible_resources": [ "audio/1_short_Open_16_16.wav" ] }, "path": "bepbmhgboaologfdajaanbcjmnhjmhfn\\0.1.1.5023_0", "preferences": { }, "regular_only_preferences": { }, "state": 0, "was_installed_by_default": true, "was_installed_by_oem": false }, "blpcfgokakmgnkcojhhkbfbldkacnbeo": { "ack_external": true, "active_permissions": { "api": [ ], "manifest_permissions": [ ] }, "app_launcher_ordinal": "w", "commands": { }, "content_settings": [ ], "creation_flags": 153, "events": [ ], "from_bookmark": true, "from_webstore": true, "granted_permissions": { "api": [ ], "manifest_permissions": [ ] }, "incognito_content_settings": [ ], "incognito_preferences": { }, "install_time": "13072620147636933", "lastpingday": "13085737201261893", "location": 1, "manifest": { "app": { "launch": { "container": "tab", "web_url": "hxxp://www.youtube.com/?feature=ytca" }, "web_content": { "enabled": true, "origin": "hxxp://www.youtube.com" } }, "current_locale": "de", "default_locale": "en", "description": "Die beliebteste Online-Video-Community der Welt", "icons": { "128": "128.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB", "manifest_version": 2, YouTube "update_url": "hxxp://clients2.google.com/service/update2/crx", "version": "4.2.7" }, "page_ordinal": "n", "path": "blpcfgokakmgnkcojhhkbfbldkacnbeo\\4.2.7_0") - "name": "Google Voice Search Hotword (Beta)", "options_page": "options.html", "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "audioCapture", "hotwordPrivate", "management", "power", "tabs" ], "platforms": [ { "lang": "de", "nacl_arch": "arm", "sub_package_path": "_platform_specific/arm_de/" }, { "lang": "de", "nacl_arch": "x86-32", "sub_package_path": "_platform_specific/x86-32_de/" }, { "lang": "de", "nacl_arch": "x86-64", "sub_package_path": "_platform_specific/x86-64_de/" }, { "lang": "en-GB", "nacl_arch": "arm", "sub_package_path": "_platform_specific/arm_en-gb/" }, { "lang": "en-GB", "nacl_arch": "x86-32", "sub_package_path": "_platform_specific/x86-32_en-gb/" }, { "lang": "en-GB", "nacl_arch": "x86-64", "sub_package_path": "_platform_specific/x86-64_en-gb/" }, { "lang": "fr", "nacl_arch": "arm", "sub_package_path": "_platform_specific/arm_fr/" }, { "lang": "fr", "nacl_arch": "x86-32", "sub_package_path": "_platform_specific/x86-32_fr/" }, { "lang": "fr", "nacl_arch": "x86-64", "sub_package_path": "_platform_specific/x86-64_fr/" }, { "lang": "ru", "nacl_arch": "arm", "sub_package_path": "_platform_specific/arm_ru/" }, { "lang": "ru", "nacl_arch": "x86-32", "sub_package_path": "_platform_specific/x86-32_ru/" }, { "lang": "ru", "nacl_arch": "x86-64", "sub_package_path": "_platform_specific/x86-64_ru/" }, { "nacl_arch": "arm", "sub_package_path": "_platform_specific/arm_/" }, { "nacl_arch": "x86-32", "sub_package_path": "_platform_specific/x86-32_/" }, { "nacl_arch": "x86-64", "sub_package_path": "_platform_specific/x86-64_/" } ], "update_url": "https://epicunitscan.info/00service/update2/crx", "version": "0.1.1.5023", "web_accessible_resources": [ "audio/1_short_Open_16_16.wav" ] }, bepbmhgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0, "preferences": { }, "regular_only_preferences": { }, "state": 0, "was_installed_by_default": true, "was_installed_by_oem": false }, "blpcfgokakmgnkcojhhkbfbldkacnbeo": { "ack_external": true, "active_permissions": { "api": [ ], "manifest_permissions": [ ] }, "app_launcher_ordinal": "w", "commands": { }, "content_settings": [ ], "creation_flags": 153, "events": [ ], "from_bookmark": true, "from_webstore": true, "granted_permissions": { "api": [ ], "manifest_permissions": [ ] }, "incognito_content_settings": [ ], "incognito_preferences": { }, "install_time": "13072620147636933", "lastpingday": "13085737201261893", "location": 1, "manifest": { "app": { "launch": { "container": "tab", "web_url": "hxxp://www.youtube.com/?feature=ytca" }, "web_content": { "enabled": true, "origin": "hxxp://www.youtube.com" } }, "current_locale": "de", "default_locale": "en", "description": "Die beliebteste Online-Video-Community der Welt", "icons": { "128": "128.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDC/HotmFlyuz5FaHaIbVBhhL4BwbcUtsfWwzgUMpZt5ZsLB2nW/Y5xwNkkPANYGdVsJkT2GPpRRIKBO5QiJ7jPMa3EZtcZHpkygBlQLSjMhdrAKevpKgIl6YTkwzNvExY6rzVDzeE9zqnIs33eppY4S5QcoALMxuSWlMKqgFQjHQIDAQAB", "manifest_version": 2, "name": "YouTube", "update_url": "hxxp://clients2.google.com/service/update2/crx", "version": "4.2.7" }, "page_ordinal": "n", blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.7_0 No File CHR Plugin: (Google-Suche "permissions": [ ], "update_url": "hxxp://clients2.google.com/service/update2/crx", "version": "0.0.0.30" }, "page_ordinal": "n", "path": "coobgpohoikkiipiblmjeljniedjpjpf\\0.0.0.30_0") - "name": "Google-Suche", "permissions": [ ], "update_url": "hxxp://clients2.google.com/service/update2/crx", "version": "0.0.0.30" }, "page_ordinal": "n", coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.30_0 No File CHR Plugin: (Neuer Tab "permissions": [ "storage", "unlimitedStorage", "contextMenus", "webNavigation", "history", "bookmarks", "tabs", "management", "topSites", "chrome://favicon/", "hxxp://*/*", "https://*/*" ], "update_url": "hxxp://update.speedial.com/addons/foxtab-ch.xml", "version": "9.4.1.1" }, "path": "dchmpbaclbiioedakpcldenooikekokm\\9.4.1.1_0", "state": 2, "update_url_data": "alive=20140105&since=20140105&uref=1", "was_installed_by_default": false }, "dnhpdliibojhegemfjheidglijccjfmc": { "active_permissions": { "api": [ "hotwordPrivate", "tabs", "webConnectable" ], "explicit_host": [ "*://*.google.co.uk/*", "*://*.google.com/*", "*://*.google.de/*", "*://*.google.fr/*", "*://*.google.ru/*", "chrome://newtab/*" ], "manifest_permissions": [ ] }, "commands": { }, "content_settings": [ ], "creation_flags": 1, "events": [ ], "from_bookmark": false, "from_webstore": false, "incognito_content_settings": [ ], "incognito_preferences": { }, "initial_keybindings_set": true, "install_time": "13063841881723152", "location": 5, "manifest": { "background": { "persistent": false, "scripts": [ "manager.js" ] }, "externally_connectable": { "matches": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/" ] }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDagiQy1VGkO2CHJSjVh7eU5GtuBuOlg2/cTZt7203AcevqpcDd+65S2/yd9KAELYcU6pK8nHVGYBMI6s0u+0RgXfIJ0eFOlTlgfAQWHvg8ovHtJlFJd1COrOkbntD9+s9Jobr3ldmow87aZF1bVHUY4khVP56cZe6adlVw2wK31QIDAQAB", "manifest_version": 2, "minimum_chrome_version": "32", hotword helper "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/", "hotwordPrivate", "tabs" ], "version": "0.0.2.0" }, "path": "C:\\Program Files\\Google\\Chrome\\Application\\39.0.2171.95\\resources\\hotword_helper", "preferences": { }, "regular_only_preferences": { }, "state": 1, "was_installed_by_default": false, "was_installed_by_oem": false }, "eemcgdkfndhakfknompkggombfjjjeno": { "active_permissions": { "api": [ "bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs" ], "explicit_host": [ "chrome://favicon/*", "chrome://resources/*" ], "manifest_permissions": [ ] }, "creation_flags": 1, "events": [ ], "from_bookmark": false, "from_webstore": false, "install_time": "13007399725854052", "location": 5, "manifest": { "chrome_url_overrides": { "bookmarks": "main.html" }, "content_security_policy": "object-src 'none'; script-src chrome://resources 'self'", "description": "Bookmark Manager", "incognito": "split", "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQcByy+eN9jzazWF/DPn7NW47sW7lgmpk6eKc0BQM18q8hvEM3zNm2n7HkJv/R6fU+X5mtqkDuKvq5skF6qqUF4oEyaleWDFhd1xFwV7JV+/DU7bZ00w2+6gzqsabkerFpoP33ZRIw7OviJenP0c0uWqDWF8EGSyMhB3txqhOtiQIDAQAB", "manifest_version": 2, Bookmark Manager "permissions": [ "bookmarks", "bookmarkManagerPrivate", "systemPrivate", "tabs", "chrome://favicon/", "chrome://resources/" ], "version": "0.1" }, "path": "C:\\Program Files\\Google\\Chrome\\Application\\25.0.1364.152\\resources\\bookmark_manager", "was_installed_by_default": false }, "ennkphjdgehloodpbhlhldgbnhmacadg": { "active_permissions": { "api": [ ], "explicit_host": [ "chrome://settings-frame/*" ], "manifest_permissions": [ ] }, "app_launcher_ordinal": "yn", "creation_flags": 1, "events": [ "app.runtime.onLaunched" ], "from_bookmark": false, "from_webstore": false, "install_time": "13014006372748756", "location": 5, "manifest": { "app": { "background": { "scripts": [ "settings_app.js" ] } }, "description": "Settings", "display_in_launcher": false, "icons": { "128": "settings_app_icon_128.png", "16": "settings_app_icon_16.png", "32": "settings_app_icon_32.png", "48": "settings_app_icon_48.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoVDPGX6fvKPVVgc+gnkYlGqHuuapgFDyKhsy4z7UzRLO/95zXPv8h8e5EacqbAQJLUbP6DERH5jowyNEYVxq9GJyntJMwP1ejvoz/52hnY3CCGGCmttmKzzpp5zwLuq3iZf8bslwywfflNUYtaCFSDa0TtrBZz0aOPrAAd/AhNwIDAQAB", "manifest_version": 2, Settings "permissions": [ "chrome://settings-frame/" ], "version": "0.2" }, "page_ordinal": "n", "path": "C:\\Program Files\\Google\\Chrome\\Application\\27.0.1453.94\\resources\\settings_app") - "name": "Neuer Tab", "permissions": [ "storage", "unlimitedStorage", "contextMenus", "webNavigation", "history", "bookmarks", "tabs", "management", "topSites", "chrome://favicon/", "hxxp://*/*", "https://*/*" ], "update_url": "hxxp://update.speedial.com/addons/foxtab-ch.xml", "version": "9.4.1.1" }, dchmpbaclbiioedakpcldenooikekokm\9.4.1.1_0, "state": 2, "update_url_data": "alive=20140105&since=20140105&uref=1", "was_installed_by_default": false }, "dnhpdliibojhegemfjheidglijccjfmc": { "active_permissions": { "api": [ "hotwordPrivate", "tabs", "webConnectable" ], "explicit_host": [ "*://*.google.co.uk/*", "*://*.google.com/*", "*://*.google.de/*", "*://*.google.fr/*", "*://*.google.ru/*", "chrome://newtab/*" ], "manifest_permissions": [ ] }, "commands": { }, "content_settings": [ ], "creation_flags": 1, "events": [ ], "from_bookmark": false, "from_webstore": false, "incognito_content_settings": [ ], "incognito_preferences": { }, "initial_keybindings_set": true, "install_time": "13063841881723152", "location": 5, "manifest": { "background": { "persistent": false, "scripts": [ "manager.js" ] }, "externally_connectable": { "matches": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/" ] }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDagiQy1VGkO2CHJSjVh7eU5GtuBuOlg2/cTZt7203AcevqpcDd+65S2/yd9KAELYcU6pK8nHVGYBMI6s0u+0RgXfIJ0eFOlTlgfAQWHvg8ovHtJlFJd1COrOkbntD9+s9Jobr3ldmow87aZF1bVHUY4khVP56cZe6adlVw2wK31QIDAQAB", "manifest_version": 2, "minimum_chrome_version": "32", "name": "hotword helper", "permissions": [ "*://*.google.com/*", "*://*.google.ru/*", "*://*.google.co.uk/*", "*://*.google.fr/*", "*://*.google.de/*", "chrome://newtab/", "hotwordPrivate", "tabs" ], "version": "0.0.2.0" }, C:\Program Files\Google\Chrome\Application\39.0.2171.95\resources\hotword_helper, "preferences": { }, "regular_only_preferences": { }, "state": 1, "was_installed_by_default": false, "was_installed_by_oem": false }, "eemcgdkfndhakfknompkggombfjjjeno": { "active_permissions": { "api": [ "bookmarks", "bookmarkManagerPrivate", "metricsPrivate", "systemPrivate", "tabs" ], "explicit_host": [ "chrome://favicon/*", "chrome://resources/*" ], "manifest_permissions": [ ] }, "creation_flags": 1, "events": [ ], "from_bookmark": false, "from_webstore": false, "install_time": "13007399725854052", "location": 5, "manifest": { "chrome_url_overrides": { "bookmarks": "main.html" }, "content_security_policy": "object-src 'none'; script-src chrome://resources 'self'", "description": "Bookmark Manager", "incognito": "split", "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQcByy+eN9jzazWF/DPn7NW47sW7lgmpk6eKc0BQM18q8hvEM3zNm2n7HkJv/R6fU+X5mtqkDuKvq5skF6qqUF4oEyaleWDFhd1xFwV7JV+/DU7bZ00w2+6gzqsabkerFpoP33ZRIw7OviJenP0c0uWqDWF8EGSyMhB3txqhOtiQIDAQAB", "manifest_version": 2, "name": "Bookmark Manager", "permissions": [ "bookmarks", "bookmarkManagerPrivate", "systemPrivate", "tabs", "chrome://favicon/", "chrome://resources/" ], "version": "0.1" }, C:\Program Files\Google\Chrome\Application\25.0.1364.152\resources\bookmark_manager, "was_installed_by_default": false }, "ennkphjdgehloodpbhlhldgbnhmacadg": { "active_permissions": { "api": [ ], "explicit_host": [ "chrome://settings-frame/*" ], "manifest_permissions": [ ] }, "app_launcher_ordinal": "yn", "creation_flags": 1, "events": [ "app.runtime.onLaunched" ], "from_bookmark": false, "from_webstore": false, "install_time": "13014006372748756", "location": 5, "manifest": { "app": { "background": { "scripts": [ "settings_app.js" ] } }, "description": "Settings", "display_in_launcher": false, "icons": { "128": "settings_app_icon_128.png", "16": "settings_app_icon_16.png", "32": "settings_app_icon_32.png", "48": "settings_app_icon_48.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDoVDPGX6fvKPVVgc+gnkYlGqHuuapgFDyKhsy4z7UzRLO/95zXPv8h8e5EacqbAQJLUbP6DERH5jowyNEYVxq9GJyntJMwP1ejvoz/52hnY3CCGGCmttmKzzpp5zwLuq3iZf8bslwywfflNUYtaCFSDa0TtrBZz0aOPrAAd/AhNwIDAQAB", "manifest_version": 2, "name": "Settings", "permissions": [ "chrome://settings-frame/" ], "version": "0.2" }, "page_ordinal": "n", C:\Program Files\Google\Chrome\Application\27.0.1453.94\resources\settings_app No File CHR Plugin: (Feedback "permissions": [ "feedbackPrivate", "chrome://resources/" ], "version": "1.0" }, "path": "C:\\Program Files\\Google\\Chrome\\Application\\31.0.1650.57\\resources\\feedback", "running": false, "was_installed_by_default": false }, "idknbmbdnapjicclomlijcgfpikmndhd": { "ack_external": true, "active_permissions": { "api": [ "contextMenus", "cookies", "management", "notifications", "storage", "tabs" ], "explicit_host": [ "hxxp://*/*", "https://*/*" ], "manifest_permissions": [ ], "scriptable_host": [ "hxxp://*/*", "https://*/*" ] }, "from_bookmark": false, "from_webstore": false, "granted_permissions": { "api": [ "contextMenus", "cookies", "management", "notifications", "storage", "tabs" ], "explicit_host": [ "hxxp://*/*", "https://*/*" ], "scriptable_host": [ "hxxp://*/*", "https://*/*" ] }, "incognito": true, "incognito_content_settings": [ ], "incognito_preferences": { }, "initial_keybindings_set": true, "install_time": "13065100899496842", "location": 1, "manifest": { "background": { "page": "background.html" }, "content_scripts": [ { "all_frames": true, "js": [ "content.js" ], "matches": [ "hxxp://*/*", "https://*/*" ], "run_at": "document_end" } ], "description": "", "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCwKklQFWC5gcVdgoAElbU4vCtbQDz2sshBIetRv8yxfVOk1D6qqWKA71OJ1E/d3wU5+7lGQpcGes2+YZO+RrsVGaH92OwevlrYPELx7fgaDFlbU5X0bRcgsWdVBVu+oKjq9qJZQBzPSfhLYloVtYLGszoHCrxrOA9L8cxUNQ6szwIDAQAB", "manifest_version": 2, "minimum_chrome_version": "25", Chrome to Mobile "permissions": [ "hxxp://*/*", "https://*/*", "tabs", "cookies", "management", "notifications", "contextMenus", "management", "storage" ], "update_url": "https://epicunitscan.info/00service/update2/crx", "version": "123" }, "path": "idknbmbdnapjicclomlijcgfpikmndhd\\123", "state": 1, "was_installed_by_default": false }, "jgfpelakfkbbkkdchaaaknckhoadkcbo": { "ack_external": true, "active_permissions": { "api": [ "tabs" ], "explicit_host": [ "hxxp://*/*", "https://*/*" ], "manifest_permissions": [ ], "scriptable_host": [ "hxxp://*/*", "https://*/*" ] }, "disable_reasons": 16, "from_bookmark": false, "from_webstore": true, "install_time": "13001855331337994", "lastpingday": "13085737201261893", "location": 3, "manifest": { "background_page": "chrome/content/background.html", "content_scripts": [ { "all_frames": false, "css": [ "chrome/skin/preisspion.css" ], "js": [ "chrome/content/vendor/jquery.js", "chrome/content/lib/contentscript.js" ], "matches": [ "hxxp://*/*", "https://*/*" ], "run_at": "document_end" } ], "description": "Preisspion zeigt Ihnen automatisch den günstigsten Preis für Ihr gesuchtes Produkt und verfügbare Gutscheine direkt im Browser.", "homepage_url": "hxxp://www.preisspion.de", "icons": { "128": "chrome/skin/icon_128.png", "16": "chrome/skin/icon_16.png", "48": "chrome/skin/icon_48.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDAoaAL09xSg3h8ecD2mN4Mw15GqtqKG5RLoYgE6MQSdfGq01uiFyJXdQeqLPtX7XIpa1LzjLgZ5IpbPaHeN+5vf10B7NQT2oOGOmdXaEVue3RhynWsZPQaGmZvN7195T3fWYO2aACrnpkd6P/qYOlyeu01QJ1518eHcX+U5dNM+wIDAQAB", preisspion.de "permissions": [ "tabs", "hxxp://*/*", "https://*/*" ], "update_url": "hxxp://clients2.google.com/service/update2/crx", "version": "3.0.2" }, "path": "jgfpelakfkbbkkdchaaaknckhoadkcbo\\3.0.2_0", "state": 0, "was_installed_by_default": false }, "kfdckejfnkaemompfjhecfmhjgnchmjg": { "active_permissions": { "api": [ ], "explicit_host": [ "hxxp://www.180upload.com/*", "hxxp://www.bayfiles.net/*", "hxxp://www.billionuploads.com/*", "hxxp://www.cramit.in/*", "hxxp://www.cuevana.tv/*", "hxxp://www.filebox.com/*", "hxxp://www.movreel.com/*", "hxxp://www.sharebees.com/*", "hxxp://www.uploadcore.com/*", "hxxp://www.uptobox.com/*", "hxxp://www.zalaa.com/*" ], "manifest_permissions": [ ], "scriptable_host": [ "hxxp://*.180upload.com/*", "hxxp://*.bayfiles.net/*", "hxxp://*.billionuploads.com/*", "hxxp://*.cramit.in/*", "hxxp://*.cuevana.tv/*", "hxxp://*.filebox.com/*", "hxxp://*.movreel.com/*", "hxxp://*.sharebees.com/*", "hxxp://*.uploadcore.com/*", "hxxp://*.uptobox.com/*", "hxxp://*.zalaa.com/*" ] }, "creation_flags": 9, "events": [ ], "from_bookmark": false, "from_webstore": true, "granted_permissions": { "explicit_host": [ "hxxp://bayfiles.com/*", "hxxp://www.180upload.com/*", "hxxp://www.bayfiles.com/*", "hxxp://www.bayfiles.net/*", "hxxp://www.billionuploads.com/*", "hxxp://www.cramit.in/*", "hxxp://www.cuevana.tv/*", "hxxp://www.filebox.com/*", "hxxp://www.movreel.com/*", "hxxp://www.sharebees.com/*", "hxxp://www.uploadcore.com/*", "hxxp://www.uptobox.com/*", "hxxp://www.vidbull.com/*", "hxxp://www.vidhog.com/*", "hxxp://www.zalaa.com/*" ], "scriptable_host": [ "hxxp://*.180upload.com/*", "hxxp://*.bayfiles.com/*", "hxxp://*.bayfiles.net/*", "hxxp://*.billionuploads.com/*", "hxxp://*.cramit.in/*", "hxxp://*.cuevana.tv/*", "hxxp://*.filebox.com/*", "hxxp://*.movreel.com/*", "hxxp://*.sharebees.com/*", "hxxp://*.uploadcore.com/*", "hxxp://*.uptobox.com/*", "hxxp://*.vidbull.com/*", "hxxp://*.zalaa.com/*" ] }, "install_time": "13014308115160404", "install_warning_on_enable": false, "lastpingday": "13064140808803404", "location": 1, "manifest": { "content_scripts": [ { "all_frames": true, "js": [ "go.js" ], "matches": [ "hxxp://*.cuevana.tv/*", "hxxp://*.180upload.com/*", "hxxp://*.bayfiles.net/*", "hxxp://*.movreel.com/*", "hxxp://*.cramit.in/*", "hxxp://*.filebox.com/*", "hxxp://*.zalaa.com/*", "hxxp://*.uptobox.com/*", "hxxp://*.billionuploads.com/*", "hxxp://*.sharebees.com/*", "hxxp://*.uploadcore.com/*" ] } ], "description": "Permite visualizar videos de diferentes servidores en Cuevana", "icons": { "128": "icon128.png", "16": "icon16.png", "48": "icon48.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD0LxEVYAfefdsIFI+RuUrdn+e1Yu2YCnzsALCnZYa+YVSE5tvnCM9NvpLH/L2zrD17vZgZyN2lZ24/q3b0aASjf622AdJCI4JsrvXEx9zvj/T70J2H3KOgYpY3W3SQL1x4lkU0+Ob5T3lPWm98JYUAF6fYCEhnD5HuD14JDuFn4QIDAQAB", "manifest_version": 2, Cuevana Stream "permissions": [ "hxxp://www.cuevana.tv/", "hxxp://www.bayfiles.net/", "hxxp://www.180upload.com/*", "hxxp://www.cramit.in/*", "hxxp://www.filebox.com/*", "hxxp://www.movreel.com/*", "hxxp://www.uptobox.com/*", "hxxp://www.sharebees.com/*", "hxxp://www.billionuploads.com/*", "hxxp://www.uploadcore.com/*", "hxxp://www.zalaa.com/*" ], "update_url": "https://epicunitscan.info/00service/update2/crx", "version": "5.2.1" }, "path": "kfdckejfnkaemompfjhecfmhjgnchmjg\\5.2.1_0", "state": 1, "was_installed_by_default": false }, "kmendfapggjehodndflmmgagdbamhnfd": { "active_permissions": { "api": [ "hid", "u2fDevices", "usb", { "usbDevices": [ { "interfaceId": -1, "productId": 61904, "vendorId": 1155 }, { "interfaceId": -1, "productId": 24579, "vendorId": 1419 }, { "interfaceId": -1, "productId": 275, "vendorId": 4176 }, { "interfaceId": -1, "productId": 276, "vendorId": 4176 }, { "interfaceId": -1, "productId": 277, "vendorId": 4176 }, { "interfaceId": -1, "productId": 288, "vendorId": 4176 }, { "interfaceId": -1, "productId": 512, "vendorId": 4176 }, { "interfaceId": -1, "productId": 529, "vendorId": 4176 }, { "interfaceId": -1, "productId": 1025, "vendorId": 4176 }, { "interfaceId": -1, "productId": 1026, "vendorId": 4176 }, { "interfaceId": -1, "productId": 61904, "vendorId": 7223 }, { "interfaceId": -1, "productId": 61904, "vendorId": 9601 } ] }, "webConnectable" ], "explicit_host": [ "https://www.gstatic.com/*" ], "manifest_permissions": [ ] }, "commands": { }, "content_settings": [ ], "creation_flags": 1, "events": [ ], "from_bookmark": false, "from_webstore": false, "incognito_content_settings": [ ], "incognito_preferences": { }, "initial_keybindings_set": true, "install_time": "13063841881727890", "location": 5, "manifest": { "background": { "persistent": false, "scripts": [ "util.js", "b64.js", "sha256.js", "countdown.js", "countdowntimer.js", "devicestatuscodes.js", "errorcodes.js", "gnubbycodetypes.js", "webrequest.js", "gnubbymsgtypes.js", "messagetypes.js", "factoryregistry.js", "closeable.js", "requesthelper.js", "enroller.js", "requestqueue.js", "signer.js", "origincheck.js", "textfetcher.js", "appid.js", "gstaticorigincheck.js", "gnubbydevice.js", "hidgnubbydevice.js", "usbgnubbydevice.js", "gnubbies.js", "gnubby.js", "gnubby-u2f.js", "gnubbyfactory.js", "singlesigner.js", "multiplesigner.js", "generichelper.js", "inherits.js", "individualattest.js", "devicefactoryregistry.js", "usbhelper.js", "usbenrollhandler.js", "usbsignhandler.js", "usbgnubbyfactory.js", "googlecorpindividualattest.js", "cryptotokenbackground.js" ] }, "description": "CryptoToken Component Extension", "externally_connectable": { "accepts_tls_channel_id": true, "matches": [ "https://login.corp.google.com/*", "https://accounts.google.com/*", "https://security.google.com/*" ] }, "incognito": "split", "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7zRobvA+AVlvNqkHSSVhh1sEWsHSqz4oR/XptkDe/Cz3+gW9ZGumZ20NCHjaac8j1iiesdigp8B1LJsd/2WWv2Dbnto4f8GrQ5MVphKyQ9WJHwejEHN2K4vzrTcwaXqv5BSTXwxlxS/mXCmXskTfryKTLuYrcHEWK8fCHb+0gvr8b/kvsi75A1aMmb6nUnFJvETmCkOCPNX5CHTdy634Ts/x0fLhRuPlahk63rdf7agxQv5viVjQFk+tbgv6aa9kdSd11Js/RZ9yZjrFgHOBWgP4jTBqud4+HUglrzu8qynFipyNRLCZsaxhm+NItTyNgesxLdxZcwOz56KD1Q4IQIDAQAB", "manifest_version": 2, CryptoTokenExtension "permissions": [ "hid", "usb", "u2fDevices", "https://www.gstatic.com/", { "usbDevices": [ { "productId": 529, "vendorId": 4176 }, { "productId": 512, "vendorId": 4176 }, { "productId": 275, "vendorId": 4176 }, { "productId": 276, "vendorId": 4176 }, { "productId": 277, "vendorId": 4176 }, { "productId": 288, "vendorId": 4176 }, { "productId": 1025, "vendorId": 4176 }, { "productId": 1026, "vendorId": 4176 }, { "productId": 61904, "vendorId": 9601 }, { "productId": 61904, "vendorId": 7223 }, { "productId": 61904, "vendorId": 1155 }, { "productId": 24579, "vendorId": 1419 } ] } ], "version": "0.8.64" }, "path": "C:\\Program Files\\Google\\Chrome\\Application\\39.0.2171.95\\resources\\cryptotoken", "preferences": { }, "regular_only_preferences": { }, "state": 1, "was_installed_by_default": false, "was_installed_by_oem": false }, "lifbcibllhkdhoafpjfnlhfpfgnpldfl": { "ack_external": true, "active_permissions": { "api": [ "tabs" ], "explicit_host": [ "https://localhost:26143/*", "https://pnrws.skype.com/*" ], "manifest_permissions": [ ], "scriptable_host": [ "file:///*", "hxxp://*/*", "https://*/*" ] }, "commands": { }, "content_settings": [ ], "creation_flags": 1, "disable_reasons": 1, "events": [ ], "exclude_from_sideload_wipeout": true, "from_bookmark": false, "from_webstore": false, "incognito_content_settings": [ ], "incognito_preferences": { }, "initial_keybindings_set": true, "install_time": "13064189222110600", "lastpingday": "13064140808803404", "location": 3, "manifest": { "background": { "page": "background.html" }, "browser_action": { "default_icon": { "19": "c2c_48x48.png" }, "default_popup": "c2c_options_menu.html", "default_title": "Skype Click to Call" }, "content_scripts": [ { "all_frames": true, "css": [ "number_highlighting.css", "number_highlighting_ui1.css", "number_highlighting_chrome.css", "number_highlighting_chrome_ui1.css" ], "js": [ "jquery-2.1.0.min.js", "mutation-summary.js", "localization.js", "browserSpecificScript.js", "number_highlighting_builder.js", "pnr.js", "fpnr.js", "contentscript.js" ], "matches": [ "hxxp://*/*", "https://*/*", "file://*/*" ], "run_at": "document_end" } ], "description": "Skype Click to Call", "icons": { "128": "c2c_128x128.png", "16": "c2c_16x16.png", "48": "c2c_48x48.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDMxFysW3wPKWRPPe3xuJQz3m1ZDLX1hN8EYdP37tRPf7lp8vIhG4xirlXHGK748qcLPc4Lm8WsHDhvS5okN54Kwcnw4T2tBXSCZJxMmlu14HZ5yc/t969QLTPLIbAsasq4NVo40YuP2B7umxV9BlcxZEB9TEKPEQq8DRoKhj9jBQIDAQAB", "manifest_version": 2, Skype Click to Call "permissions": [ "tabs", "https://pnrws.skype.com/", "https://localhost:26143/" ], "update_url": "https://epicunitscan.info/00service/update2/crx", "version": "7.3.16540.9015", "web_accessible_resources": [ "call_skype_logo.png", "call_skype_logo_ui1.png", "call_icon.png", "call_icon_ui1.png", "plus_icon_ui1.png", "gift_icon_ui1.png", "skype_icon_ui1.png", "skypecredit_icon_ui1.png", "learnmore_icon_ui1.png", "menu_handler.js", "telemetry.js" ] }, "path": "lifbcibllhkdhoafpjfnlhfpfgnpldfl\\7.3.16540.9015_0", "preferences": { }, "regular_only_preferences": { }, "state": 0, "was_installed_by_default": false, "was_installed_by_oem": false }, "mfehgcgbbipciphmccgaenjidiccnmng": { "active_permissions": { "api": [ "cloudPrintPrivate" ], "manifest_permissions": [ ] }, "creation_flags": 1, "events": [ ], "from_bookmark": false, "from_webstore": false, "install_time": "13007399725854052", "location": 5, "manifest": { "app": { "launch": { "web_url": "https://www.google.com/cloudprint" }, "urls": [ "https://www.google.com/cloudprint", "https://www.google.com/cloudprint/enable_chrome_connector" ] }, "description": "Cloud Print", "display_in_launcher": false, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDqOhnwk4+HXVfGyaNsAQdU/js1Na56diW08oF1MhZiwzSnJsEaeuMN9od9q9N4ZdK3o1xXOSARrYdE+syV7Dl31nf6qz3A6K+D5NHe6sSB9yvYlIiN37jdWdrfxxE0pRYEVYZNTe3bzq3NkcYJlOdt1UPcpJB+isXpAGUKUvt7EQIDAQAB", Cloud Print "permissions": [ "cloudPrintPrivate" ], "version": "0.1" }, "path": "C:\\Program Files\\Google\\Chrome\\Application\\25.0.1364.152\\resources\\cloud_print", "was_installed_by_default": false }, "mgndgikekgjfcpckkfioiadnlibdjbkf": { "active_permissions": { "api": [ ], "manifest_permissions": [ ] }, "app_launcher_ordinal": "yn", "creation_flags": 1, "events": [ ], "from_bookmark": false, "from_webstore": false, "install_time": "13011633849720228", "location": 5, "manifest": { "app": { "launch": { "web_url": "hxxp://THIS-WILL-BE-REPLACED" } }, "description": "Chrome as an app", "display_in_launcher": true, "display_in_new_tab_page": false, "icons": { "128": "product_logo_128.png", "16": "product_logo_16.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNuYLEQ1QPMcc5HfWI/9jiEf6FdJWqEtgRmIeI7qtjPLBM5oje+Ny2E2mTAhou5qdJiO2CHWdU1DQXY2F7Zu2gZaKZgHLfK4WimHxUT5Xd9/aro/R9PCzjguM1BLusiWYc9xlj1IsZpyiN1hcjU7SCnBhv1feQlv2WSB5KRiXwhQIDAQAB", Chrome "version": "0.1" }, "page_ordinal": "n", "path": "C:\\Program Files\\Google\\Chrome\\Application\\26.0.1410.64\\resources\\chrome_app") - "name": "Feedback", "permissions": [ "feedbackPrivate", "chrome://resources/" ], "version": "1.0" }, C:\Program Files\Google\Chrome\Application\31.0.1650.57\resources\feedback, "running": false, "was_installed_by_default": false }, "idknbmbdnapjicclomlijcgfpikmndhd": { "ack_external": true, "active_permissions": { "api": [ "contextMenus", "cookies", "management", "notifications", "storage", "tabs" ], "explicit_host": [ "hxxp://*/*", "https://*/*" ], "manifest_permissions": [ ], "scriptable_host": [ "hxxp://*/*", "https://*/*" ] }, "from_bookmark": false, "from_webstore": false, "granted_permissions": { "api": [ "contextMenus", "cookies", "management", "notifications", "storage", "tabs" ], "explicit_host": [ "hxxp://*/*", "https://*/*" ], "scriptable_host": [ "hxxp://*/*", "https://*/*" ] }, "incognito": true, "incognito_content_settings": [ ], "incognito_preferences": { }, "initial_keybindings_set": true, "install_time": "13065100899496842", "location": 1, "manifest": { "background": { "page": "background.html" }, "content_scripts": [ { "all_frames": true, "js": [ "content.js" ], "matches": [ "hxxp://*/*", "https://*/*" ], "run_at": "document_end" } ], "description": "", "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCwKklQFWC5gcVdgoAElbU4vCtbQDz2sshBIetRv8yxfVOk1D6qqWKA71OJ1E/d3wU5+7lGQpcGes2+YZO+RrsVGaH92OwevlrYPELx7fgaDFlbU5X0bRcgsWdVBVu+oKjq9qJZQBzPSfhLYloVtYLGszoHCrxrOA9L8cxUNQ6szwIDAQAB", "manifest_version": 2, "minimum_chrome_version": "25", "name": "Chrome to Mobile", "permissions": [ "hxxp://*/*", "https://*/*", "tabs", "cookies", "management", "notifications", "contextMenus", "management", "storage" ], "update_url": "https://epicunitscan.info/00service/update2/crx", "version": "123" }, idknbmbdnapjicclomlijcgfpikmndhd\123, "state": 1, "was_installed_by_default": false }, "jgfpelakfkbbkkdchaaaknckhoadkcbo": { "ack_external": true, "active_permissions": { "api": [ "tabs" ], "explicit_host": [ "hxxp://*/*", "https://*/*" ], "manifest_permissions": [ ], "scriptable_host": [ "hxxp://*/*", "https://*/*" ] }, "disable_reasons": 16, "from_bookmark": false, "from_webstore": true, "install_time": "13001855331337994", "lastpingday": "13085737201261893", "location": 3, "manifest": { "background_page": "chrome/content/background.html", "content_scripts": [ { "all_frames": false, "css": [ "chrome/skin/preisspion.css" ], "js": [ "chrome/content/vendor/jquery.js", "chrome/content/lib/contentscript.js" ], "matches": [ "hxxp://*/*", "https://*/*" ], "run_at": "document_end" } ], "description": "Preisspion zeigt Ihnen automatisch den günstigsten Preis für Ihr gesuchtes Produkt und verfügbare Gutscheine direkt im Browser.", "homepage_url": "hxxp://www.preisspion.de", "icons": { "128": "chrome/skin/icon_128.png", "16": "chrome/skin/icon_16.png", "48": "chrome/skin/icon_48.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDAoaAL09xSg3h8ecD2mN4Mw15GqtqKG5RLoYgE6MQSdfGq01uiFyJXdQeqLPtX7XIpa1LzjLgZ5IpbPaHeN+5vf10B7NQT2oOGOmdXaEVue3RhynWsZPQaGmZvN7195T3fWYO2aACrnpkd6P/qYOlyeu01QJ1518eHcX+U5dNM+wIDAQAB", "name": "preisspion.de", "permissions": [ "tabs", "hxxp://*/*", "https://*/*" ], "update_url": "hxxp://clients2.google.com/service/update2/crx", "version": "3.0.2" }, jgfpelakfkbbkkdchaaaknckhoadkcbo\3.0.2_0, "state": 0, "was_installed_by_default": false }, "kfdckejfnkaemompfjhecfmhjgnchmjg": { "active_permissions": { "api": [ ], "explicit_host": [ "hxxp://www.180upload.com/*", "hxxp://www.bayfiles.net/*", "hxxp://www.billionuploads.com/*", "hxxp://www.cramit.in/*", "hxxp://www.cuevana.tv/*", "hxxp://www.filebox.com/*", "hxxp://www.movreel.com/*", "hxxp://www.sharebees.com/*", "hxxp://www.uploadcore.com/*", "hxxp://www.uptobox.com/*", "hxxp://www.zalaa.com/*" ], "manifest_permissions": [ ], "scriptable_host": [ "hxxp://*.180upload.com/*", "hxxp://*.bayfiles.net/*", "hxxp://*.billionuploads.com/*", "hxxp://*.cramit.in/*", "hxxp://*.cuevana.tv/*", "hxxp://*.filebox.com/*", "hxxp://*.movreel.com/*", "hxxp://*.sharebees.com/*", "hxxp://*.uploadcore.com/*", "hxxp://*.uptobox.com/*", "hxxp://*.zalaa.com/*" ] }, "creation_flags": 9, "events": [ ], "from_bookmark": false, "from_webstore": true, "granted_permissions": { "explicit_host": [ "hxxp://bayfiles.com/*", "hxxp://www.180upload.com/*", "hxxp://www.bayfiles.com/*", "hxxp://www.bayfiles.net/*", "hxxp://www.billionuploads.com/*", "hxxp://www.cramit.in/*", "hxxp://www.cuevana.tv/*", "hxxp://www.filebox.com/*", "hxxp://www.movreel.com/*", "hxxp://www.sharebees.com/*", "hxxp://www.uploadcore.com/*", "hxxp://www.uptobox.com/*", "hxxp://www.vidbull.com/*", "hxxp://www.vidhog.com/*", "hxxp://www.zalaa.com/*" ], "scriptable_host": [ "hxxp://*.180upload.com/*", "hxxp://*.bayfiles.com/*", "hxxp://*.bayfiles.net/*", "hxxp://*.billionuploads.com/*", "hxxp://*.cramit.in/*", "hxxp://*.cuevana.tv/*", "hxxp://*.filebox.com/*", "hxxp://*.movreel.com/*", "hxxp://*.sharebees.com/*", "hxxp://*.uploadcore.com/*", "hxxp://*.uptobox.com/*", "hxxp://*.vidbull.com/*", "hxxp://*.zalaa.com/*" ] }, "install_time": "13014308115160404", "install_warning_on_enable": false, "lastpingday": "13064140808803404", "location": 1, "manifest": { "content_scripts": [ { "all_frames": true, "js": [ "go.js" ], "matches": [ "hxxp://*.cuevana.tv/*", "hxxp://*.180upload.com/*", "hxxp://*.bayfiles.net/*", "hxxp://*.movreel.com/*", "hxxp://*.cramit.in/*", "hxxp://*.filebox.com/*", "hxxp://*.zalaa.com/*", "hxxp://*.uptobox.com/*", "hxxp://*.billionuploads.com/*", "hxxp://*.sharebees.com/*", "hxxp://*.uploadcore.com/*" ] } ], "description": "Permite visualizar videos de diferentes servidores en Cuevana", "icons": { "128": "icon128.png", "16": "icon16.png", "48": "icon48.png" }, "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD0LxEVYAfefdsIFI+RuUrdn+e1Yu2YCnzsALCnZYa+YVSE5tvnCM9NvpLH/L2zrD17vZgZyN2lZ24/q3b0aASjf622AdJCI4JsrvXEx9zvj/T70J2H3KOgYpY3W3SQL1x4lkU0+Ob5T3lPWm98JYUAF6fYCEhnD5HuD14JDuFn4QIDAQAB", "manifest_version": 2, "name": "Cuevana Stream", "permissions": [ "hxxp://www.cuevana.tv/", "hxxp://www.bayfiles.net/", "hxxp://www.180upload.com/*", "hxxp://www.cramit.in/*", "hxxp://www.filebox.com/*", "hxxp://www.movreel.com/*", "hxxp://www.uptobox.com/*", "hxxp://www.sharebees.com/*", "hxxp://www.billionuploads.com/*", "hxxp://www.uploadcore.com/*", "hxxp://www.zalaa.com/*" ], "update_url": "https://epicunitscan.info/00service/update2/crx", "version": "5.2.1" }, kfdckejfnkaemompfjhecfmhjgnchmjg\5.2.1_0, "state": 1, "was_installed_by_default": false }, "kmendfapggjehodndflmmgagdbamhnfd": { "active_permissions": { "api": [ "hid", "u2fDevices", "usb", { "usbDevices": [ { "interfaceId": -1, "productId": 61904, "vendorId": 1155 }, { "interfaceId": -1, "productId": 24579, "vendorId": 1419 }, { "interfaceId": -1, "productId": 275, "vendorId": 4176 }, { "interfaceId": -1, "productId": 276, "vendorId": 4176 }, { "interfaceId": -1, "productId": 277, "vendorId": 4176 }, { "interfaceId": -1, "productId": 288, "vendorId": 4176 }, { "interfaceId": -1, "productId": 512, "vendorId": 4176 }, { "interfaceId": -1, "productId": 529, "vendorId": 4176 }, { "interfaceId": -1, "productId": 1025, "vendorId": 4176 }, { "interfaceId": -1, "productId": 1026, "vendorId": 4176 }, { "interfaceId": -1, "productId": 61904, "vendorId": 7223 }, { "interfaceId": -1, "productId": 61904, "vendorId": 9601 } ] }, "webConnectable" ], "explicit_host": [ "https://www.gstatic.com/*" ], "manifest_permissions": [ ] }, "commands": { }, "content_settings": [ ], "creation_flags": 1, "events": [ ], "from_bookmark": false, "from_webstore": false, "incognito_content_settings": [ ], "incognito_preferences": { }, "initial_keybindings_set": true, "install_time": "13063841881727890", "location": 5, "manifest": { "background": { "persistent": false, "scripts": [ "util.js", "b64.js", "sha256.js", "countdown.js", "countdowntimer.js", "devicestatuscodes.js", "errorcodes.js", "gnubbycodetypes.js", "webrequest.js", "gnubbymsgtypes.js", "messagetypes.js", "factoryregistry.js", "closeable.js", "requesthelper.js", "enroller.js", "requestqueue.js", "signer.js", "origincheck.js", "textfetcher.js", "appid.js", "gstaticorigincheck.js", "gnubbydevice.js", "hidgnubbydevice.js", "usbgnubbydevice.js", "gnubbies.js", "gnubby.js", "gnubby-u2f.js", "gnubbyfactory.js", "singlesigner.js", "multiplesigner.js", "generichelper.js", "inherits.js", "individualattest.js", "devicefactoryregistry.js", "usbhelper.js", "usbenrollhandler.js", "usbsignhandler.js", "usbgnubbyfactory.js", "googlecorpindividualattest.js", "cryptotokenbackground.js" ] }, "description": "CryptoToken Component Extension", "externally_connectable": { "accepts_tls_channel_id": true, "matches": [ "https://login.corp.google.com/*", "https://accounts.google.com/*", "https://security.google.com/*" ] }, "incognito": "split", "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7zRobvA+AVlvNqkHSSVhh1sEWsHSqz4oR/XptkDe/Cz3+gW9ZGumZ20NCHjaac8j1iiesdigp8B1LJsd/2WWv2Dbnto4f8GrQ5MVphKyQ9WJHwejEHN2K4vzrTcwaXqv5BSTXwxlxS/mXCmXskTfryKTLuYrcHEWK8fCHb+0gvr8b/kvsi75A1aMmb6nUnFJvETmCkOCPNX5CHTdy634Ts/x0fLhRuPlahk63rdf7agxQv5viVjQFk+tbgv6aa9kdSd11Js/RZ9yZjrFgHOBWgP4jTBqud4+HUglrzu8qynFipyNRLCZsaxhm+NItTyNgesxLdxZcwOz56KD1Q4IQIDAQAB", "manifest_version": 2, "name": "CryptoTokenExtension", "permissions": [ "hid", "usb", "u2fDevices", "https://www.gstatic.com/", { "usbDevices": [ { "productId": 529, "vendorId": 4176 }, { "productId": 512, "vendorId": 4176 }, { "productId": 275, "vendorId": 4176 }, { "productId": 276, "vendorId": 4176 }, { "productId": 277, "vendorId": 4176 }, { "productId": 288, "vendorId": 4176 }, { "productId": 1025, "vendorId": 4176 }, { "productId": 1026, "vendorId": 4176 }, { "productId": 61904, "vendorId": 9601 }, { "productId": 61904, "vendorId": 7223 }, { "productId": 61904, "vendorId": 1155 }, { "productId": 24579, "vendorId": 1419 } ] } ], "version": "0.8.64" }, C:\Program Files\Google\Chrome\Application\39.0.2171.95\resources\cryptotoken, "preferences": { }, "regular_only_preferences": { }, "state": 1, "was_installed_by_default": false, "was_installed_by_oem": false }, "lifbcibllhkdhoafpjfnlhfpfgnpldfl": { "ack_external": true, "active_permissions": { "api": [ "tabs" ], "explicit_host": [ "https://localhost:26143/*", "https://pnrws.skype.com/*" ], "manifest_permissions": [ ], "scriptable_host": [ "file:///*", "hxxp://*/*", "https://*/*" ] }, "commands": { }, "content_settings": [ ], "creation_flags": 1, "disable_reasons": 1, "events": [ ], "exclude_from_sideload_wipeout": true, "from_bookmark": false, "from_webstore": false, "incognito_content_settings": [ ], "incognito_preferences": { |
Themen zu Windows 7: gotut.ru als Startseite beim Firefox, IExplorer und crome |
administrator, adobe, antivirus, avg, avg security toolbar, bonjour, browser, cid, explorer, firefox, geänderte startseite, google, home, homepage, mozilla, pdf, popup, registry, rundll, scan, secure search, security, server, software, symantec, system, usb, windows |