|
Plagegeister aller Art und deren Bekämpfung: Fehlermeldung RUNDLL......flacor.dat Malware?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
19.05.2010, 15:25 | #31 |
| Fehlermeldung RUNDLL......flacor.dat Malware? regfind"adobe" SystemLook v1.0 by jpshortstuff (11.01.10) Log created at 22:38 on 18/05/2010 by Alle (Limited User) ========== regfind ========== Searching for "flacor" No data found. Searching for "getdo" No data found. Searching for "Adobe" [HKEY_CURRENT_USER\Software\Adobe] [HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\7.0\AdobeViewer] [HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0\AdobeViewer] [HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat] [HKEY_CURRENT_USER\Software\Adobe\Adobe Synchronizer] [HKEY_CURRENT_USER\Software\AppDataLow\Software\Adobe] [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe] [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Acrobat Reader\9.0\AdobeViewer] [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Acrobat Reader\9.0\Installer\IOD] @=""C:\Programme\Adobe\Reader 9.0\Esl\AiodLite.dll"" [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Acrobat Reader\9.0\Installer\IOD] @=""C:\Programme\Adobe\Reader 9.0\Esl\AiodLite.dll"" [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Acrobat Reader\9.0\InstallPath] @="C:\Programme\Adobe\Reader 9.0\Reader" [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Adobe AIR] [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Adobe ARM] [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Adobe Type Manager] [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\PDF Settings] @="C:\Dokumente und Einstellungen\All Users\Dokumente\Adobe PDF\Settings\" [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Repair\Acrobat Reader\9.0\IOD] @=""C:\Programme\Adobe\Reader 9.0\Esl\aiodlite.dll"" [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Repair\Acrobat Reader\9.0\IOD] @=""C:\Programme\Adobe\Reader 9.0\Esl\aiodlite.dll"" [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Shockwave 11\location\common] @="C:\WINDOWS\system32\Adobe\common\" [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Shockwave 11\location\coreplayer] @="C:\WINDOWS\system32\Adobe\Shockwave 11\" [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Shockwave 11\location\coreplayerxtras] @="C:\WINDOWS\system32\Adobe\Shockwave 11\xtras\" [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Shockwave 11\uicontrol\privacyinfourl] @="hxxp://www.adobe.com/de/shockwave/sw7install/privacy/" [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Shockwave 11\uicontrol\privacytext2] @="Der automatische Update-Service sendet anonyme Nutzungsdaten an Adobe. Dies hilft uns bei der Weiterentwicklung von Shockwave und beim Erkennen von neuen Versionen." [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Shockwave 11\uicontrol\privacytext3] @="Adobe respektiert die Privathaltung Ihrer Online-Daten. Klicken Sie auf 'Mehr Info', um unsere Richtlinien einzusehen und für eine Beschreibung der Daten, die an Adobe gesendet werden." [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Shockwave 11\uicontrol\privinfourl] @="hxxp://www.adobe.com/de/shockwave/swinstall/privacy/" [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Shockwave 11\uicontrol\privtext2] @="Sie werden benachrichtigt, sobald ein Update für Shockwave Player verfügbar ist. Ihre Nutzungsdaten werden anonym an Adobe gesendet, damit wir unsere Angebotspalette verbessern können." [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Shockwave 11\uicontrol\privtext3] @="Adobe respektiert Ihre Privatsphäre. Um unsere Richtlinien zu lesen und herauszufinden, welche Daten an Adobe gesendet werden, klicken Sie auf 'Mehr Infos'." [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Shockwave 11\uicontrol\remotehomeurl] @="hxxp://www.adobe.com/%1/software/shockwaveplayer" [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Shockwave 11\uicontrol\shockwavewelcomecenterurl] @="hxxp://www.adobe.com/de/shockwave/welcome/" [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe Systems] [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe Systems\Common Install\Shared Service\B2E57000] "Acrobat 7"="2.65.10 Adobe Systems Adobe LM Service Adobelmsvc.exe C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\ ADBELSRV" [HKEY_LOCAL_MACHINE\SOFTWARE\Adobe Systems\Licenses\Adobe LM Service] [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] "ProgramItem0000"="[Adobe AIR] (0x00000000)" [HKEY_LOCAL_MACHINE\SOFTWARE\ATI Technologies\CDS\Software\0] Ende Teil 1 |
19.05.2010, 15:28 | #32 |
| Fehlermeldung RUNDLL......flacor.dat Malware? [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.pdfxml]
__________________"Content Type"="application/vnd.adobe.pdfxml" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.pdfxml] "Content Type"="application/vnd.adobe.pdfxml" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.pdx] "Content Type"="application/vnd.adobe.pdx" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.pdx] "Content Type"="application/vnd.adobe.pdx" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.xdp] "Content Type"="application/vnd.adobe.xdp+xml" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.xdp] "Content Type"="application/vnd.adobe.xdp+xml" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.xfdf] "Content Type"="application/vnd.adobe.xfdf" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.xfdf] "Content Type"="application/vnd.adobe.xfdf" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\acrobat\shell\open\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" /u "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.acrobatsecuritysettings.1\shell\Open\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.acrobatsecuritysettings.1\shell\Print\command] @="""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe"" /p /h "%1" " [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.acrobatsecuritysettings.1\shell\Printto\command] @="""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe"" /t "%1" "%2" "%3" "%4"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.acrobatsecuritysettings.1\shell\Read] @="Mit Adobe Reader 9 öffnen" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.acrobatsecuritysettings.1\shell\Read\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.Document] @="Adobe Acrobat Document" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.Document] @="Adobe Acrobat Document" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.Document\Shell\Open\Command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.Document.7\protocol\StdFileEditing\server] @=""C:\Programme\Adobe\Reader 9.0\Acrobat\Acrobat.exe"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.Document.7\shell\Open\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.Document.7\shell\Print\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" /p /h "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.Document.7\shell\Printto\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" /t "%1" "%2" "%3" "%4"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.Document.7\shell\Read] @="Mit Adobe Reader 9 öffnen" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.Document.7\shell\Read\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.FDFDoc] @="Adobe Acrobat Forms-Dokument" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.FDFDoc] @="Adobe Acrobat Forms-Dokument" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.FDFDoc\shell\Open\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.FDFDoc\shell\Print\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" /p /h "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.FDFDoc\shell\Printto\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" /t "%1" "%2" "%3" "%4"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.FDFDoc\shell\Read] @="Mit Adobe Reader 9 öffnen" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.FDFDoc\shell\Read\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.FDFDoc\shell\Read\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.pdfxml.1\shell\Open\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.pdfxml.1\shell\Print\command] @="""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe"" /p /h "%1" " [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.pdfxml.1\shell\Printto\command] @="""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe"" /t "%1" "%2" "%3" "%4"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.pdfxml.1\shell\Read] @="Mit Adobe Reader 9 öffnen" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.pdfxml.1\shell\Read\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.XDPDoc] @="Adobe Acrobat XML-Formular" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.XDPDoc] @="Adobe Acrobat XML-Formular" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.XDPDoc\shell\Open\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.XDPDoc\shell\Print\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" /p /h "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.XDPDoc\shell\Printto\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" /t "%1" "%2" "%3" "%4"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.XDPDoc\shell\Read] @="Mit Adobe Reader 9 öffnen" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.XDPDoc\shell\Read\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.XDPDoc\shell\Read\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.XFDFDoc] @="Adobe Acrobat Forms-Dokument" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.XFDFDoc] @="Adobe Acrobat Forms-Dokument" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.XFDFDoc\shell\Open\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.XFDFDoc\shell\Print\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" /p /h "%1" " [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.XFDFDoc\shell\Printto\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" /t "%1" "%2" "%3" "%4"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.XFDFDoc\shell\Read] @="Mit Adobe Reader 9 öffnen" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.XFDFDoc\shell\Read\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroExch.XFDFDoc\shell\Read\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroIEHelper.AcroIEHlprObj] @="Adobe PDF Reader" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroIEHelper.AcroIEHlprObj.1] @="Adobe PDF Reader" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroIEHelperShim.AcroIEHelperShimObj] @="Adobe PDF Link Helper" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroIEHelperShim.AcroIEHelperShimObj.1] @="Adobe PDF Link Helper" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroPDF.PDF] @="Adobe PDF Reader" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AcroPDF.PDF.1] @="Adobe PDF Reader" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Adobe.AcrobatSearch] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Adobe.AcrobatSearch\CurVer] @="Adobe.AcrobatSearch.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Adobe.AcrobatSearch.1] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AIR.InstallerPackage\DefaultIcon] @="c:\PROGRA~1\GEMEIN~1\ADOBEA~1\Versions\1.0\ADOBEA~1.EXE,1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AIR.InstallerPackage\shell\open\command] @="c:\PROGRA~1\GEMEIN~1\ADOBEA~1\Versions\1.0\ADOBEA~1.EXE "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{B801CA65-A1FC-11D0-85AD-444553540000}] @="Adobe Acrobat 7.0 Document" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\AcroRD32.exe\shell\Read\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0103A448-2934-4B3D-A54E-FED761D472E0}\LocalServer32] @=""C:\WINDOWS\system32\Adobe\SHOCKW~1\SWHELP~2.EXE"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] @="Adobe PDF Reader" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{12BA069D-0FC6-4577-97C6-5DF634CE6E84}\InProcServer32] @="C:\Programme\Adobe\Reader 9.0\Reader\viewerps.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{12BA069D-0FC6-4577-97C6-5DF634CE6E84}\InProcServer32] @="C:\Programme\Adobe\Reader 9.0\Reader\viewerps.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{166B1BCA-3F9C-11CF-8075-444553540000}\InprocServer32] @="C:\WINDOWS\system32\Adobe\Director\SwDir.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{166B1BCA-3F9C-11CF-8075-444553540000}\InprocServer32] @="C:\WINDOWS\system32\Adobe\Director\SwDir.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{166B1BCA-3F9C-11CF-8075-444553540000}\ToolboxBitmap32] @="C:\WINDOWS\system32\Adobe\Shockwave 11\Control.dll, 203" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{17F2E344-8227-4AA7-A25A-E89424566BBA}\InProcServer32] @="C:\Programme\Adobe\Reader 9.0\Reader\pdfprevhndlr.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{17F2E344-8227-4AA7-A25A-E89424566BBA}\InProcServer32] @="C:\Programme\Adobe\Reader 9.0\Reader\pdfprevhndlr.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] @="Adobe PDF Link Helper" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}] @="Adobe PDF Link Helper" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}\InprocServer32] @="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}\InprocServer32] @="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3CB77D-D339-49e0-B8E4-FECD6D6F8CB8}\LocalServer32] @=""C:\WINDOWS\system32\Adobe\SHOCKW~1\SWHELP~2.EXE"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{233C1507-6A77-46A4-9443-F871F945D258}\InprocServer32] @="C:\WINDOWS\system32\Adobe\Director\SwDir.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{233C1507-6A77-46A4-9443-F871F945D258}\InprocServer32] @="C:\WINDOWS\system32\Adobe\Director\SwDir.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{233C1507-6A77-46A4-9443-F871F945D258}\ToolboxBitmap32] @="C:\WINDOWS\system32\Adobe\Director\SwDir.dll, 203" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}\ProgID] @="Adobe.AcrobatSearch.1" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2CE4D4CF-B278-4126-AD1E-B622DA2E8339}\VersionIndependentProgID] @="Adobe.AcrobatSearch" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{49400A7C-81A8-4F52-8CCE-D54739EE87EC}] @="Adobe PDF Preview Handler" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{49400A7C-81A8-4F52-8CCE-D54739EE87EC}] @="Adobe PDF Preview Handler" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{49400A7C-81A8-4F52-8CCE-D54739EE87EC}] @="Adobe PDF Preview Handler" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{49400A7C-81A8-4F52-8CCE-D54739EE87EC}\LocalServer32] @=""C:\Programme\Adobe\Reader 9.0\Reader\pdfprevhndlrshim.exe"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4DB2E429-B905-479A-9EFF-F7CBD9FD52DE}\InprocServer32] @="C:\WINDOWS\system32\Adobe\Director\SwDir.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4DB2E429-B905-479A-9EFF-F7CBD9FD52DE}\InprocServer32] @="C:\WINDOWS\system32\Adobe\Director\SwDir.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4DB2E429-B905-479A-9EFF-F7CBD9FD52DE}\ToolboxBitmap32] @="C:\WINDOWS\system32\Adobe\Director\SwDir.dll, 104" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5BB2200E-5672-4A32-902A-5A98DB1C58DC}\InprocServer32] @="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroPDF.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5BB2200E-5672-4A32-902A-5A98DB1C58DC}\InprocServer32] @="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroPDF.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5E628A96-1BE5-42FE-9117-EDAD9A9C479C}\InProcServer32] @="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\pdfshell.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5E628A96-1BE5-42FE-9117-EDAD9A9C479C}\InProcServer32] @="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\pdfshell.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{633D6DA1-70AB-49A5-9539-54E90F132763}\LocalServer32] @=""C:\Programme\Adobe\Reader 9.0\Reader\A3DUtility.exe"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{633D6DA1-70AB-49A5-9539-54E90F132763}\LocalServer32] @=""C:\Programme\Adobe\Reader 9.0\Reader\A3DUtility.exe"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8215BA54-B69F-4275-AE11-31CB63593B09}\InProcServer32] @="C:\Programme\Adobe\Reader 9.0\Reader\AcroRdIF.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8215BA54-B69F-4275-AE11-31CB63593B09}\InProcServer32] @="C:\Programme\Adobe\Reader 9.0\Reader\AcroRdIF.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C}\LocalServer32] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32Info.exe" /PDFShell" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B22D0C7B-1E65-4533-97FA-A7335B8BCD94}\LocalServer32] @=""C:\Programme\Adobe\Reader 9.0\Reader\A3DUtility.exe"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B22D0C7B-1E65-4533-97FA-A7335B8BCD94}\LocalServer32] @=""C:\Programme\Adobe\Reader 9.0\Reader\A3DUtility.exe"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B801CA65-A1FC-11D0-85AD-444553540000}\AuxUserType\3] @="Adobe Acrobat 8.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B801CA65-A1FC-11D0-85AD-444553540000}\LocalServer32] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{BD57A9B2-4E7D-4892-9107-9F4106472DA4}\LocalServer32] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroBroker.exe"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C523F39F-9C83-11D3-9094-00104BD0D535}\InprocServer32] @="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\Accessibility.api" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C523F39F-9C83-11D3-9094-00104BD0D535}\InprocServer32] @="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\Accessibility.api" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}] @="Adobe PDF Reader" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}] @="Adobe PDF Reader" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\InprocServer32] @="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroPDF.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\InprocServer32] @="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroPDF.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CA8A9780-280D-11CF-A24D-444553540000}\ToolboxBitmap32] @="C:\PROGRA~1\GEMEIN~1\Adobe\Acrobat\ActiveX\AcroPDF.dll, 102" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D38406DA-E8AA-484b-B80D-3D3DBDCC2FB2}\LocalServer32] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32Info.exe" /PDFShell" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DC6EFB56-9CFA-464D-8880-44885D7DC193}] @="Adobe PDF Preview Handler for Vista" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DC6EFB56-9CFA-464D-8880-44885D7DC193}] @="Adobe PDF Preview Handler for Vista" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DC6EFB56-9CFA-464D-8880-44885D7DC193}] @="Adobe PDF Preview Handler for Vista" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DC6EFB56-9CFA-464D-8880-44885D7DC193}\InprocServer32] @="C:\Programme\Adobe\Reader 9.0\Reader\pdfprevhndlr.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DC6EFB56-9CFA-464D-8880-44885D7DC193}\InprocServer32] @="C:\Programme\Adobe\Reader 9.0\Reader\pdfprevhndlr.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E8978DA6-047F-4E3D-9C78-CDBE46041603}\InprocServer32] @="C:\Programme\Adobe\Reader 9.0\Reader\AcroRdIF.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E8978DA6-047F-4E3D-9C78-CDBE46041603}\InprocServer32] @="C:\Programme\Adobe\Reader 9.0\Reader\AcroRdIF.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE5A151A-AD2A-4CEE-AD65-228B59F5B4AD}\InProcServer32] @="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroPDF.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EE5A151A-AD2A-4CEE-AD65-228B59F5B4AD}\InProcServer32] @="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroPDF.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F9DB5320-233E-11D1-9F84-707F02C10627}\InprocServer32] @="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F9DB5320-233E-11D1-9F84-707F02C10627}\InprocServer32] @="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Patches\68AB67CA7DA700005205A7C804009023\SourceList\Net] "1"="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Adobe\Reader\9.3\ARM\" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\1F9ACB2AC6655084791DF7CD39837632] "ProductName"="Adobe AIR" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\1F9ACB2AC6655084791DF7CD39837632] "ProductName"="Adobe AIR" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\1F9ACB2AC6655084791DF7CD39837632] "ProductName"="Adobe AIR" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\68AB67CA7DA71301B7449A0300000010] "ProductName"="Adobe Reader 9.3.2 - Deutsch" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\68AB67CA7DA71301B7449A0300000010] "ProductName"="Adobe Reader 9.3.2 - Deutsch" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\68AB67CA7DA71301B7449A0300000010] "ProductName"="Adobe Reader 9.3.2 - Deutsch" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\68AB67CA7DA71301B7449A0300000010] "ProductName"="Adobe Reader 9.3.2 - Deutsch" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\68AB67CA7DA71301B7449A0300000010\SourceList\Net] "1"="C:\Dokumente und Einstellungen\All Users\Desktop\Installationsprogramm für Adobe Reader 9\" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\68AB67CA7DA71301B7449A0300000010\SourceList\Net] "1"="C:\Dokumente und Einstellungen\All Users\Desktop\Installationsprogramm für Adobe Reader 9\" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/vnd.adobe.acrobat-security-settings] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/vnd.adobe.pdfxml] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/vnd.adobe.pdx] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/vnd.adobe.xdp+xml] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/vnd.adobe.xfd+xml] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/vnd.adobe.xfdf] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PDFPrevHndlr.PDFPreviewHandler] @="Adobe PDF Preview Handler for Vista" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PDFPrevHndlr.PDFPreviewHandler.1] @="Adobe PDF Preview Handler for Vista" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PDFPrevHndlrShim.PDFPrevHndlrShim] @="Adobe PDF Preview Handler" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PDFPrevHndlrShim.PDFPrevHndlrShim.1] @="Adobe PDF Preview Handler" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PDFShell.PDFShell] @="Adobe PDF Shell Extension" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PDFShell.PDFShell.1] @="Adobe PDF Shell Extension " [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PDXFileType\shell\Read] @="Mit Adobe Reader 9 öffnen" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PDXFileType\shell\Read\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PDXFileType\shell\Read\command] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" "%1"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Adobe] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Adobe\Acrobat\Distiller] "Exe"="C:\Programme\Adobe\Acrobat 7.0\Distillr\ACRODISTDLL.DLL" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Adobe\Acrobat\Exe] @=""C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe"" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{05BFD3F1-6319-4F30-B752-C7A22889BCC4}\1.0] @="Adobe Acrobat 7.0 Browser Control Type Library 1.0" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{05BFD3F1-6319-4F30-B752-C7A22889BCC4}\1.0\0\win32] @="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroPDF.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{05BFD3F1-6319-4F30-B752-C7A22889BCC4}\1.0\HELPDIR] @="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{0F6D3808-7974-4B1A-94C2-3200767EACE8}\1.0\0\win32] @="C:\Programme\Adobe\Reader 9.0\Reader\pdfprevhndlr.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{0F6D3808-7974-4B1A-94C2-3200767EACE8}\1.0\HELPDIR] @="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{166B1BC7-3F9C-11CF-8075-444553540000}\1.0\0\win32] @="C:\WINDOWS\system32\Adobe\Director\SwDir.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{2991F100-D9C3-4243-82A2-A718747FC0CF}\1.0\0\win32] @="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{41738EEA-442F-477F-92CF-2889BD6CD7E7}\1.0\0\win32] @="C:\Programme\Adobe\Reader 9.0\Reader\AcroBroker.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{41C5FFFE-36DD-415D-9ED0-2976A342A1C8}\1.0\0\win32] @="C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.dll\2" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{41C5FFFE-36DD-415D-9ED0-2976A342A1C8}\1.0\HELPDIR] @="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{5F226421-415D-408D-9A09-0DCD94E25B48}\1.0\0\win32] @="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{5F226421-415D-408D-9A09-0DCD94E25B48}\1.0\HELPDIR] @="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{67E94227-7662-4050-9C72-746983CF37A2}\1.0\0\win32] @="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\pdfshell.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{67E94227-7662-4050-9C72-746983CF37A2}\1.0\HELPDIR] @="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{6EF568F4-D437-4466-AA63-A3645136D93E}\1.0\0\win32] @="C:\WINDOWS\system32\Adobe\SHOCKW~1\SWHELP~2.EXE" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{6EF568F4-D437-4466-AA63-A3645136D93E}\1.0\HELPDIR] @="C:\WINDOWS\system32\Adobe\SHOCKW~1\" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{789AD2D7-E1C2-4EC7-A049-2DB5BB4CB57A}\1.0\0\win32] @="C:\Programme\Adobe\Reader 9.0\Reader\AcroRdIF.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{789AD2D7-E1C2-4EC7-A049-2DB5BB4CB57A}\1.0\HELPDIR] @="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{7CD06992-50AA-11D1-B8F0-00A0C9259304}\1.0\0\win32] @="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\AcroForm.api" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{7CD06992-50AA-11D1-B8F0-00A0C9259304}\1.0\HELPDIR] @="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{A58FB5B3-CF96-4C63-B0D2-232A1AEA1A1B}\1.0\0\win32] @="C:\Programme\Adobe\Reader 9.0\Reader\pdfprevhndlrshim.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{A58FB5B3-CF96-4C63-B0D2-232A1AEA1A1B}\1.0\HELPDIR] @="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{A7D71146-EBCD-4E6C-916C-E77865BCC53B}\1.0] @="Adobe 3D Utility 1.0 Type Library" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{A7D71146-EBCD-4E6C-916C-E77865BCC53B}\1.0\0\win32] @="C:\Programme\Adobe\Reader 9.0\Reader\A3DUtility.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{A7D71146-EBCD-4E6C-916C-E77865BCC53B}\1.0\HELPDIR] @="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{AC4C21AD-9194-416E-9D34-D6C1350F28F6}\1.0\0\win32] @="C:\WINDOWS\system32\Adobe\Director\SwDir.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{AC4C21AD-9194-416E-9D34-D6C1350F28F6}\1.0\HELPDIR] @="C:\WINDOWS\system32\Adobe\Director\" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C523F390-9C83-11D3-9094-00104BD0D535}\2.0\0\win32] @="C:\Programme\Adobe\Acrobat 6.0\Reader\plug_ins\Accessibility.api" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C523F390-9C83-11D3-9094-00104BD0D535}\2.0\HELPDIR] @="C:\Programme\Adobe\Acrobat 6.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C523F390-9C83-11D3-9094-00104BD0D535}\3.0\0\win32] @="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\Accessibility.api" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{C523F390-9C83-11D3-9094-00104BD0D535}\3.0\HELPDIR] @="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{E64169B3-3592-47d2-816E-602C5C13F328}\1.1] @="Adobe Acrobat 8.0 Type Library" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{E64169B3-3592-47d2-816E-602C5C13F328}\1.1\0\win32] @="C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{E64169B3-3592-47d2-816E-602C5C13F328}\1.1\HELPDIR] @="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Macromedia\Shockwave 10\uicontrol\privacyinfourl] @="hxxp://www.adobe.com/de/shockwave/sw7install/privacy/" [HKEY_LOCAL_MACHINE\SOFTWARE\Macromedia\Shockwave 10\uicontrol\privacytext2] @="Der automatische Update-Service sendet anonyme Nutzungsdaten an Adobe. Dies hilft uns bei der Weiterentwicklung von Shockwave und beim Erkennen von neuen Versionen." [HKEY_LOCAL_MACHINE\SOFTWARE\Macromedia\Shockwave 10\uicontrol\privacytext3] @="Adobe respektiert die Privathaltung Ihrer Online-Daten. Klicken Sie auf 'Mehr Info', um unsere Richtlinien einzusehen und für eine Beschreibung der Daten, die an Adobe gesendet werden." [HKEY_LOCAL_MACHINE\SOFTWARE\Macromedia\Shockwave 10\uicontrol\privinfourl] @="hxxp://www.adobe.com/de/shockwave/swinstall/privacy/" [HKEY_LOCAL_MACHINE\SOFTWARE\Macromedia\Shockwave 10\uicontrol\privtext2] @="Sie werden benachrichtigt, sobald ein Update für Shockwave Player verfügbar ist. Ihre Nutzungsdaten werden anonym an Adobe gesendet, damit wir unsere Angebotspalette verbessern können." [HKEY_LOCAL_MACHINE\SOFTWARE\Macromedia\Shockwave 10\uicontrol\privtext3] @="Adobe respektiert Ihre Privatsphäre. Um unsere Richtlinien zu lesen und herauszufinden, welche Daten an Adobe gesendet werden, klicken Sie auf 'Mehr Infos'." [HKEY_LOCAL_MACHINE\SOFTWARE\Macromedia\Shockwave 10\uicontrol\remotehomeurl] @="hxxp://www.adobe.com/%1/software/shockwaveplayer" [HKEY_LOCAL_MACHINE\SOFTWARE\Macromedia\Shockwave 10\uicontrol\shockwavewelcomecenterurl] @="hxxp://www.adobe.com/de/shockwave/welcome/" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @="Adobe Flash Player" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @="Adobe Flash Player" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @="Adobe Flash Player" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @="Adobe Flash Player" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\DownloadInformation] "CODEBASE"="hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\DownloadInformation] "CODEBASE"="hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{08E8D305-8D6D-49fe-8603-03A926E46AE0}] "AppPath"="C:\Programme\Gemeinsame Dateien\Adobe\Updater6" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{08E8D305-8D6D-49fe-8603-03A926E46AE0}] "AppPath"="C:\Programme\Gemeinsame Dateien\Adobe\Updater6" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{76E2369A-75BA-41F9-8B9E-16059E5CF9A6}] "AppName"="AdobeARM.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{76E2369A-75BA-41F9-8B9E-16059E5CF9A6}] "AppName"="AdobeARM.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8E1F80F4-953F-41E7-8460-E64AE5BE4ED3}] "AppPath"="C:\Programme\Adobe\Reader 9.0\Reader" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8E1F80F4-953F-41E7-8460-E64AE5BE4ED3}] "AppPath"="C:\Programme\Adobe\Reader 9.0\Reader" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Adobe Reader - Schnellstart.lnk] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Adobe Reader - Schnellstart.lnk] "path"="C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader - Schnellstart.lnk" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Adobe Reader - Schnellstart.lnk] "path"="C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader - Schnellstart.lnk" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Adobe Reader - Schnellstart.lnk] "path"="C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader - Schnellstart.lnk" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Adobe Reader - Schnellstart.lnk] "path"="C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader - Schnellstart.lnk" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Adobe Reader - Schnellstart.lnk] "path"="C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader - Schnellstart.lnk" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Adobe AIR] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Adobe Flash Player ActiveX] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Adobe Flash Player Plugin] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\Adobe Shockwave Player] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AcroRd32.exe] @="C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\AcroRd32.exe] @="C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0074977F9C901354A83984F1AB34A059] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins3d\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0166F5B2D5C830A488E8308565152A9E] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01879F8C8CCAA7F44ABF2EAA6296047E] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Gemeinsame Dateien\Adobe\Help\en_US\Adobe Reader\9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01B115A1CF11BAC4C9848646F190FC00] "1F9ACB2AC6655084791DF7CD39837632"="c:\Programme\Gemeinsame Dateien\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0383A09582CE9AA4AB5EEF4EA0A55DA9] "00000000000000000000000000000000"="C:\Dokumente und Einstellungen\All Users\Dokumente\Adobe PDF\Settings\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\04B7C98CCE0F21F4E9EB7F0057A20EA0] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\ENU\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0535F2AF869537D4E85B11582D409E29] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1254.TXT" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0A0B4A900EA9F4542AA7CD9088981A69] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\NC-L3S4PNTX\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0C232E42ED32FF348809F7352CA2D5DD] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CB83B9B36C901D4383DB76151FD52A4] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\CENTEURO.TXT" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFEEC395F300BF4F81FA50F3C665354] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\101E81DEBEAC18543939D4B1989AFB7C] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\PDFPrevHndlr.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\112D0333A0D44E047BF983A4106A3C58] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1188E4B1BA68B5C4A81AC6805D282C7A] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\12AFFDB8704BC3F4BABE172B2D01C383] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Gemeinsame Dateien\Adobe\Updater6\AdobeUpdater.cer" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\141C376007C4757429A02A9CAEBF8EA8] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\UKRAINE.TXT" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1588992C469F2174F8431F888FBBDF73] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\17313E9FB942C7B4B99382BB93E9C444] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins3d\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1816EA95F4B8B654F91E8E476E916793] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1963DDD4CC5F2CA4FB3CDBEEDA7D2D59] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\PDFPrevHndlrShim.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1AE339F0568D45C489F213DC56E50B66] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1C8E4787584BCC14490C45A01727A6B9] "00000000000000000000000000000000"="C:\Programme\Adobe\Acrobat 7.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1CDB41C11E58E884AAD672755E5124D2] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\ICELAND.TXT" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1DE7F110AFAA90C49809BCC45C22CCB7] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\pdfshell.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F0AC60FFABAA3E40AE3F14B43F9EA06] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\Multimedia.DEU" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F98C3CD2462EF54295C66C127342C05] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\CORPCHAR.TXT" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\20210CF88F93C2842856E36A86DB943F] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1257.TXT" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\206097A43463626498893D00E537F7D2] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\22F4DAC0B3D560C48B6ED1CFE16DED9D] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\AcroRdIF.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\25E1F06034CBD4D4D9DA91E700CD5D9C] "1F9ACB2AC6655084791DF7CD39837632"="c:\Programme\Gemeinsame Dateien\Adobe AIR\Versions\1.0\Resources\AdobeCP.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2726F11498D467246901B2FCB42E5182] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins3d\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\27E36364CE095194D8B6C937FF83917E] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\28FFA3EFCDE9E884B97B46B476985CE5] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2934E2C16CAF7964990D1969CD576B18] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\Browser\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2A4D8AB86BB6FAA44904FF993E807778] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Adobe\zdingbat.txt" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2C57A490AF97AE74D9215D97D61DB8CB] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2D5017249329336499284F4F3B4F5A37] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E4EB1CE0F6039A47AA5D12B8FC977CA] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\Browser\nppdf32.DEU" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2F0C989D69A934345B65914C5A8CCCF0] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\SYMBOL.TXT" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\321519DC6CD473D47B9CB9A3D015BEA9] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\32A0BC59DE462384C8C2E8611776E88A] "1F9ACB2AC6655084791DF7CD39837632"="02:\Software\Adobe\Adobe AIR\FileTypeRegistration\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\337ABE535D078D14099C57A239EF250D] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\BIBUtils.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3441BFA836FB1C34BA6C144E93FBBA96] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroPDF.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34865792D36728C42B48B728231F7227] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Gemeinsame Dateien\Adobe\Updater6\AdobeUpdaterInstallMgr.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3697D7484FCAE7E4CBEB71B9AC30911F] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\36AF20128E89D6F4A920F2A4636AC354] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\ACE.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\36C55021C8CF0CC4185A830E75309920] "1F9ACB2AC6655084791DF7CD39837632"="02:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe AIR\UninstallString" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\378FC2EF63F82AB44BC07C8B6423ECB7] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\pe.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\38E84C7FF90C1F14A81D6ECDBECE7D11] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\ENU\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3BAEA108B4F648940BB38C607D5B66E6] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\ahclient.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3F3964B053B48BC4ABC2C5778A72B8EF] "68AB67CA7DA71301B7449A0300000010"="02:\SOFTWARE\Adobe\Acrobat Reader\9.0\Installer\VersionMax" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3F65A1E87DCF61D499D7190C1E8C8987] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\atl.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3FA23BFB0DE8BDD4BA12A04347309859] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\Legal\ENU\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4092152B411BF7B4EB862533C938D699] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\AXSLE.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4210D39FE9C0D214DA66C66F9C686753] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\Javascripts\JSByteCodeWin.bin" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\422B819BB22CE78499BB4A3C5FC7727F] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\IDTemplates\ENU\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\434538F32B80FBC4BA257CF66F4BB68F] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\Optional\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\438256CEC1FA32847B45768EE56D453C] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\AcroTextExtractor.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\45188A526A5690E4F809F396EF4519B8] "00000000000000000000000000000000"="C:\Dokumente und Einstellungen\All Users\Dokumente\Adobe PDF\Settings\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4796961B129629C43B2ECBC93961C5C8] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\47F704F177BAC3741AAF03FF2B4BA243] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\sqlite.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4812EE4679960B942AC118D774CFEC69] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\482917649713B3247A115F57A55E92C1] "68AB67CA7DA71301B7449A0300000010"="02:\SOFTWARE\Adobe\Acrobat Reader\9.0\Language\UI" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\492D11F7213901C4CB94E0E4B118E251] "68AB67CA7DA71301B7449A0300000010"="C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Adobe\Acrobat\9.0\Replicate\Security\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49CED8721D0CF6841B27BB5ECC02FDED] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4A427CF168311F943AFCC1CCBD97FBED] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins3d\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4BBDDEE59EF5395479E0F98DF8FE7B4E] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\SPPlugins\ADMPlugin.apl" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CC4B8FA1619E6F42A47B70FA255C113] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Resource\Font\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4D9D2A26FB54664499A4A5B702423D40] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4ECAE57206DAFF14D9731DD187ED0086] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\AIR\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4F25A90420A18F145BD771D4A9C7AD52] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5093AC69067959D408962E50AB061B60] "68AB67CA7DA71301B7449A0300000010"="02:\SOFTWARE\Adobe\Acrobat Reader\9.0\Installer\IOD\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\50998A8DA27A69B4D9116E985BAA8021] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\50C0E48A6F8DE87468CB58D9E92D07E0] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53CB826E3D8A2B24EAC599DC3FAB5D5E] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\ICU\icudt26l.dat" (Teil 2) |
19.05.2010, 15:29 | #33 |
| Fehlermeldung RUNDLL......flacor.dat Malware? [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\56EF89D7D967137459AE9EAD76B91025]
__________________"68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\57428418D0241C94990E116C72A6C439] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5793E47562741524FB15C6C7D2254A71] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\57F7754A38053244889B787E286D73F8] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\58425B8C9E5AC00428A391BFFC0DF99F] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\590103CABE6EB194EB62479CF0EDF2F4] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\595BB847F9B71134A80E40B16FDF3F29] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5B493E936BC1A884CB7A43D5F1B846B5] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Adobe\symbol.txt" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5B8A5F9BB528C8A41BAFB0CD822BF716] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\ViewerPS.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5BBBC49BED1E9BC4FB408C4FEA9D517C] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Resource\SaslPrep\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5CC01BF645030CC4D9604E9094A7C322] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D0E502A00E4341458F9CDBC6F0EE22E] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\Tracker\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D95C551E705E1C4188087292E0F00A2] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Gemeinsame Dateien\Adobe\Updater6\AdobeAUM_rootCert.cer" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5E9C0C2FF69DFB54C943471315E682C0] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1258.TXT" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5F101315C3783504C8589A06E0D21C9C] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5FB80C2CE2A1EA94A85A492E20F97ECA] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\63CF2C67468BA7E4C9699F8BC0EDA931] "1F9ACB2AC6655084791DF7CD39837632"="c:\Programme\Gemeinsame Dateien\Adobe AIR\Versions\1.0\Resources\Adobe Root Certificate.cer" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\64C46DA4D52AF434FAEE5B9141C4642B] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\658C16E8DF1093B4D981092B622C10C3] "1F9ACB2AC6655084791DF7CD39837632"="c:\Programme\Gemeinsame Dateien\Adobe AIR\Versions\1.0\Resources\template.msi" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\66FC6AD25F3A2DC4784FD75E529FA5DA] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\673AE176A8D551B4685D2F64D2BE8783] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE38481F2C43AE4FB1E414467F56892] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1250.TXT" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B575167E61A6914E9C9B25DD8368F48] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\pmd.cer" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6B87CB045C4506C4CB704DCC861161A3] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C01BF9039281F844B4D860591FA377A] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C3C47CD8BAC94C4EB81B5D1DCD091E7] "1F9ACB2AC6655084791DF7CD39837632"="c:\Programme\Gemeinsame Dateien\Adobe AIR\sentinel" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6E3DFC5FE989BC54AA0A31C11E5E9951] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\721B0771CE7953B41B4784D92724CFAA] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75B88BAA6A245EA45B51DBEF8EDA3CC0] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75DC0144DC6E532459BBB60A83579641] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75DE182506DA53243AD47F75E182CFC4] "1F9ACB2AC6655084791DF7CD39837632"="c:\Programme\Gemeinsame Dateien\Adobe AIR\Versions\1.0\Resources\WebKit.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\763B1DCFB6D19E947A5FAA959F3D3964] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\78016CF32F4B4004CA91D4A2FB34A1ED] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\78C077C4E1E4DFD4795BEFEA84D3FF2B] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\AMT\AUMProduct.aup" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\79CE744C44A51564F8EBD2B8928FE4EA] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins3d\prc\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7A11E946102B22241B413AE2EEBAB671] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\JP2KLib.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7B64C656226247049A1950EF88B75505] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7C832BFAEC9E17843957D9F6B45CDED8] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FC201AD0BD12A34286188A3F8DA6C36] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\BIB.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FD888F8FE5FDDD4C80D678C3F00AEC6] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8094EE68166F12246B4E62D2E41E099F] "68AB67CA7DA71301B7449A0300000010"="02:\SOFTWARE\Adobe\Acrobat Reader\9.0\Installer\ServiceControl" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\81440F9466EA0E0479107C5D0A3956FC] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\834F627ACFBD79944A149F5209470F12] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\84518F706626D5F4AB1A603EBB0598F0] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Resource\Linguistics\LanguageNames2\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\850193B30EC5DA144B0582CB84538CDB] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\85D8DD0E24C00DB40B10F9F38632A253] "68AB67CA7DA71301B7449A0300000010"="02:\Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockDown\cDefaultLaunchAttachmentPerms\tBuiltInPermList" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8685EE230B18503429FE4BEE830B449C] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\874DE6B7ECA16224199E1ADC1CFC7C5F] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8A284E42869887447B261E8BA5A3D35F] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8A93F47DD7BD2EC40B3A3DEA9FD31859] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\TURKISH.TXT" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8BA0896E5F9859447919FF72C7BFF616] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\ReaderUpdater.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8E479124B10B33A4787577B1D4411338] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Setup Files\{AC76BA86-7AD7-1031-7B44-A93000000001}\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8F1AE0C9111C4CA4186FF4C932C8AB0E] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\Acrofx32.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\90A2D107EB418F542933C10EDE00329A] "1F9ACB2AC6655084791DF7CD39837632"="c:\Programme\Gemeinsame Dateien\Adobe AIR\Versions\1.0\Adobe AIR.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9190913D7791A0F49B087C21FE93A5CC] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1253.TXT" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9190D563D8CD7334A931DBF84A370139] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Gemeinsame Dateien\Adobe\Help\de_DE\Adobe Reader\9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9198C92670EA8594EA1950F35F321395] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins3d\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\946262754EEA9D34EA0294B324BEBBC5] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9579C59FFA3114E44AB6BD2D1806D835] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98D0EE5F5CB32574E9BB35B330E68A90] "1F9ACB2AC6655084791DF7CD39837632"="c:\Programme\Gemeinsame Dateien\Adobe AIR\Versions\1.0\Adobe AIR Application Installer.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\99A6DAE1043137645977AA29BBF9CCAF] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\AdobeLinguistic.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A024B06C9FB7194698202D58EE628E3] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\GREEK.TXT" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9C57278595DD8FA4A88153B1180C4A27] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D662FD830DA67B4AA73849147C05F24] "68AB67CA7DA71301B7449A0300000010"="00:\SOFTWARE\Adobe\Acrobat\Exe\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E39618117597154ABEB6BC4EC451F15] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9EB9F2B71F1DD4E4A90FDA80F570B333] "1F9ACB2AC6655084791DF7CD39837632"="c:\Programme\Gemeinsame Dateien\Adobe AIR\Versions\1.0\Resources\airappinstaller.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A1495754F40101448A735EEF06175BF2] "68AB67CA7DA71301B7449A0300000010"="02:\SOFTWARE\Adobe\Acrobat Reader\9.0\Installer\Optimization\Enabled" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A1BF16734F09DF24787B7AE363E01A86] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A65A6A7EBB912144880C7E5CBDAC1784] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A73D5C96CC6CD4B47B48407E289BBE9D] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A7FF64D6B8004E94DA3B543C6CD60E3F] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroPDF.DEU" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A87088AA12EF4464A99D1C888ACA6537] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A938B3E59847D194595872515155DB6B] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMANIAN.TXT" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB24846694174F446ADCC2FCA3CB1800] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\VDKHome\DEU\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB53C2CEB1F9DA94B941AB6143866A46] "68AB67CA7DA71301B7449A0300000010"="02:\SOFTWARE\Adobe\Acrobat Reader\9.0\InstallPath\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ABD3E61290587454494D7FE225C5D20E] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AD07A3D77E386CD418532F2048920D7E] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1252.TXT" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AD71E371BC38E864F82DB6404D2BF408] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AE8296B487CFCD14BB402788E8177330] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\RdLang32.DEU" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF196EEBEA15BD84D8D2A0290C85E08D] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins3d\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AFB9236F13E0E3546AB206A801F0743F] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\CROATIAN.TXT" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B132847F062053E4FB8BF7CADFEC7111] "1F9ACB2AC6655084791DF7CD39837632"="c:\Programme\Gemeinsame Dateien\Adobe AIR\Versions\1.0\Resources\template.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B1A6FFBA3C8218E4F9C09CA399AA40EF] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Gemeinsame Dateien\Adobe\Updater6\AdobeUpdate.cer" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B31492ABDE5EA584CA42E924A1EDC230] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\CoolType.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B82ABB1D0C7664C4F8E6C16423F57234] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Resource\CMap\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BE0439BDC9A27184ABA6F97FF4681F69] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BE76566F0CDDC944790A954EB6316789] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\ROMAN.TXT" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BFBC5C8C7FF632D43BEFE50028D06EFA] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\AGM.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C0BE11AE8E6F33B42B5281BA5B4EA4F8] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Gemeinsame Dateien\Adobe\Updater6\AdobeUpdater.de_DE" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C13F30E39EFCD4E408010E1B44DAAB0F] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\IDTemplates\DEU\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C1C4C10236F37B6468D9370E57370193] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C26B3A07203BBC040B739782ED0AED61] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins3d\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C37BC61A283EBF941A5A3A136A36263F] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C3C19C1FA44616F44BB254F47F629665] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\reader_sl.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C402CF38255EAB542BC8F1847A1352FB] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\DEU\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C4C318415709B5246B9C7A8891763C65] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C4E7397337911BB48ACFF35FB9685200] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C52A33B7AA9533F4D825F59372509040] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C5D9CDEE220C9F046A62F346C343C567] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C6EE05B6C7C9F194CB835839C6ABB225] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C73D5622C55908E4D83D6970D248A3DB] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C7612D845DA6E394AB7A7B91438B35FA] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\AdobeUpdater.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C8DB096FC15652A498DB72F68B694871] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CB02577932EA91E49AAD2062AF1DD2A3] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AcrobatUpdater.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CC275594575BF0943AAEA81F6079425E] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32Info.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CC3511D9C3419B14BA805A322AC27004] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CC352FACC3D14B34EBDD4501C310B03B] "00000000000000000000000000000000"="C:\Dokumente und Einstellungen\All Users\Dokumente\Adobe PDF\Extras\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D118F941DC2D23F4EACCC35E39918A30] "00000000000000000000000000000000"="02*68*\SOFTWARE\Adobe\Uninstall\{AC76BA86-0000-0000-0000-000000000000}\HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Uninstall\{AC76BA86-0000-0000-0000-000000000000}\ToRemove" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D1D233CC1E8669F49A72D1724E931D74] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\pdfshell.DEU" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D24A2D4EF3BB5BC4DB5954CDC3ECF186] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D37F9C8794107AE4EB7242C863E97348] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Esl\AiodLite.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D4C58EE3C9AA32C448978D5F7DA944B4] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D4E0BF3F43A3AA94FB943174F1BD0864] "68AB67CA7DA71301B7449A0300000010"="02:\Software\Policies\Adobe\Acrobat Reader\9.0\FeatureLockDown\cDefaultExecMenuItems\tWhiteList" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D6D5120B2BE8BE64EB95103A52283D2E] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\A3DUtility.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D7FF3275FE30C1F47B84DE2F326E15FB] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D85C36CF81D65F94EA47A9BA8395FB62] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\Mac\CYRILLIC.TXT" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DC54B29B2C1A91D4E90228F71532EF25] "68AB67CA7DA71301B7449A0300000010"="02:\SOFTWARE\Adobe\Repair\Acrobat Reader\9.0\IOD\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DC6266E534349FF4D80BFC6B423730E7] "1F9ACB2AC6655084791DF7CD39837632"="c:\Programme\Gemeinsame Dateien\Adobe AIR\Versions\1.0\Resources\Thawte Root Certificate.cer" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD10177D5EA9F6F4695D4409BF5B95BC] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\Legal\DEU\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DEA8E823AE59AFB43997F28B83C8E84C] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Resource\Font\PFM\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF04A04FABF95864FA1CDE477D00E357] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E3516D2B9029C1147937BF5DE91648E5] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E3A377A9AA6AD014AB28757CDAD646AA] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E3FC65AB64CE51E4A99DF582E4B1CEAB] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\AcroRd32.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E61243063A2F4804B8F1DF4E93942D52] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\AcroForm\PMP\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E7EA0B4E57D2DD44691EF1775E71128A] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E862F874AB149324190BDE000229BE89] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeExtractFiles.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EA2137F8571F70C4CA0806AD4B51D9A7] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Gemeinsame Dateien\Adobe\Updater6\Adobe_Updater.exe" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EE06675C493AA6741939DF0099DEFF7E] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F091063C0C8D0FA4CA6E99DD245B70E5] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F1AF9438CC8E2AA45A46CF95546A469C] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F1BC8F95270E2264A94F91ABF943EF71] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\AXE8SharedExpat.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F2972C139BD83DC4B839D3A8D8AB621A] "68AB67CA7DA71301B7449A0300000010"="02:\SOFTWARE\Adobe\Acrobat Reader\9.0\Installer\ENU_GUID" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F4397F6D435ECA24D81D699D63B6F39D] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\AdobeXMP.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F5678751A1B3F6540861D057FDB0044D] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F60B1F509D23041488382BD1FD2168D3] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F6DDF9A6A414A3B4099754ACAF7D735C] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Resource\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7FDB3F33D20E9B4A87961F0A356C405] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F96CF9892B6DF564FB1776FEA06B4FDF] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\plug_ins\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FBF034B044C31FC48AB364A777A80ABB] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\AMT\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FC8775A70DB513942842346B032C2437] "1F9ACB2AC6655084791DF7CD39837632"="c:\Programme\Gemeinsame Dateien\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FE8D5430B37D66D4998D88A8CEC87799] "68AB67CA7DA71301B7449A0300000010"="C:\Programme\Adobe\Reader 9.0\Reader\" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FFEE697F06793C44B974A712BAEF41C2] "68AB67CA7DA71301B7449A0300000010"="C?\Programme\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1251.TXT" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PreviewHandlers] "{DC6EFB56-9CFA-464D-8880-44885D7DC193}"="Adobe PDF Preview Handler for Vista" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PreviewHandlers] "{DC6EFB56-9CFA-464D-8880-44885D7DC193}"="Adobe PDF Preview Handler for Vista" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe AIR] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe AIR] "DisplayIcon"="c:\PROGRA~1\GEMEIN~1\ADOBEA~1\Versions\1.0\RESOUR~1\ADOBEA~1.EXE" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe AIR] "DisplayIcon"="c:\PROGRA~1\GEMEIN~1\ADOBEA~1\Versions\1.0\RESOUR~1\ADOBEA~1.EXE" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe AIR] "DisplayIcon"="c:\PROGRA~1\GEMEIN~1\ADOBEA~1\Versions\1.0\RESOUR~1\ADOBEA~1.EXE" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe AIR] "DisplayIcon"="c:\PROGRA~1\GEMEIN~1\ADOBEA~1\Versions\1.0\RESOUR~1\ADOBEA~1.EXE" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe AIR] "DisplayIcon"="c:\PROGRA~1\GEMEIN~1\ADOBEA~1\Versions\1.0\RESOUR~1\ADOBEA~1.EXE" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe AIR] "DisplayIcon"="c:\PROGRA~1\GEMEIN~1\ADOBEA~1\Versions\1.0\RESOUR~1\ADOBEA~1.EXE" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX] "DisplayName"="Adobe Flash Player 10 ActiveX" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX] "DisplayName"="Adobe Flash Player 10 ActiveX" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX] "DisplayName"="Adobe Flash Player 10 ActiveX" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX] "DisplayName"="Adobe Flash Player 10 ActiveX" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX] "DisplayName"="Adobe Flash Player 10 ActiveX" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX] "DisplayName"="Adobe Flash Player 10 ActiveX" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX] "DisplayName"="Adobe Flash Player 10 ActiveX" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX] "DisplayName"="Adobe Flash Player 10 ActiveX" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX] "DisplayName"="Adobe Flash Player 10 ActiveX" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX] "DisplayName"="Adobe Flash Player 10 ActiveX" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX] "DisplayName"="Adobe Flash Player 10 ActiveX" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Plugin] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Plugin] "DisplayName"="Adobe Flash Player 10 Plugin" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Plugin] "DisplayName"="Adobe Flash Player 10 Plugin" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Plugin] "DisplayName"="Adobe Flash Player 10 Plugin" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Plugin] "DisplayName"="Adobe Flash Player 10 Plugin" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Plugin] "DisplayName"="Adobe Flash Player 10 Plugin" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Plugin] "DisplayName"="Adobe Flash Player 10 Plugin" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Shockwave Player] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Font Drivers] "Adobe Type Manager"="atmfd.dll" [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer] [HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Adobe] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ADOBE_LM_SERVICE] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ADOBE_LM_SERVICE\0000] "Service"="Adobe LM Service" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ADOBE_LM_SERVICE\0000] "Service"="Adobe LM Service" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ADOBE_LM_SERVICE\0000] "Service"="Adobe LM Service" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_ADOBE_LM_SERVICE\0000] "Service"="Adobe LM Service" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Adobe LM Service] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Adobe LM Service] "ImagePath"=""C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Adobe LM Service] "ImagePath"=""C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Adobe LM Service] "ImagePath"=""C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Adobe LM Service] "ImagePath"=""C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Adobe LM Service\Enum] "0"="Root\LEGACY_ADOBE_LM_SERVICE\0000" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_ADOBE_LM_SERVICE] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_ADOBE_LM_SERVICE\0000] "Service"="Adobe LM Service" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_ADOBE_LM_SERVICE\0000] "Service"="Adobe LM Service" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_ADOBE_LM_SERVICE\0000] "Service"="Adobe LM Service" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_ADOBE_LM_SERVICE\0000] "Service"="Adobe LM Service" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Adobe LM Service] [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Adobe LM Service] "ImagePath"=""C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Adobe LM Service] "ImagePath"=""C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Adobe LM Service] "ImagePath"=""C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Adobe LM Service] "ImagePath"=""C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ADOBE_LM_SERVICE] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ADOBE_LM_SERVICE\0000] "Service"="Adobe LM Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ADOBE_LM_SERVICE\0000] "Service"="Adobe LM Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ADOBE_LM_SERVICE\0000] "Service"="Adobe LM Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_ADOBE_LM_SERVICE\0000] "Service"="Adobe LM Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Adobe LM Service] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Adobe LM Service] "ImagePath"=""C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Adobe LM Service] "ImagePath"=""C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Adobe LM Service] "ImagePath"=""C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Adobe LM Service] "ImagePath"=""C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe"" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Adobe LM Service\Enum] "0"="Root\LEGACY_ADOBE_LM_SERVICE\0000" [HKEY_USERS\.DEFAULT\Software\Adobe] [HKEY_USERS\.DEFAULT\Software\Adobe\Acrobat Reader\9.0\AdobeViewer] [HKEY_USERS\.DEFAULT\Software\Adobe\Acrobat Reader\9.0\InstallPath] @="C:\Programme\Adobe\Reader 9.0\Reader" [HKEY_USERS\S-1-5-21-57989841-813497703-1708537768-1010\Software\Adobe] [HKEY_USERS\S-1-5-21-57989841-813497703-1708537768-1010\Software\Adobe\Acrobat Reader\7.0\AdobeViewer] [HKEY_USERS\S-1-5-21-57989841-813497703-1708537768-1010\Software\Adobe\Acrobat Reader\9.0\AdobeViewer] [HKEY_USERS\S-1-5-21-57989841-813497703-1708537768-1010\Software\Adobe\Adobe Acrobat] [HKEY_USERS\S-1-5-21-57989841-813497703-1708537768-1010\Software\Adobe\Adobe Synchronizer] [HKEY_USERS\S-1-5-21-57989841-813497703-1708537768-1010\Software\AppDataLow\Software\Adobe] [HKEY_USERS\S-1-5-18\Software\Adobe] [HKEY_USERS\S-1-5-18\Software\Adobe\Acrobat Reader\9.0\AdobeViewer] [HKEY_USERS\S-1-5-18\Software\Adobe\Acrobat Reader\9.0\InstallPath] @="C:\Programme\Adobe\Reader 9.0\Reader" -=End Of File=- |
19.05.2010, 15:40 | #34 |
/// Selecta Jahrusso | Fehlermeldung RUNDLL......flacor.dat Malware? Irgendetwas sagt der rundll sie soll die Flacor.dat laden, ich sehe aber nicht was. Lade ComboFix von einem dieser Download-Spiegel herunter: BleepingComputer - ForoSpyware * Wichtig !! Speichere ComboFix auf dem Desktop
Sobald die Wiederherstellungskonsole durch ComboFix installiert wurde, solltest Du folgende Nachricht sehen: Klicke "Ja", um mit dem Suchlauf nach Malware fortzufahren. Wenn ComboFix fertig ist, wird es ein Log erstellen. Bitte füge die C:\ComboFix.txt Deiner nächsten Antwort bei.
__________________ mfg, Daniel ASAP & UNITE Member Alliance of Security Analysis Professionals Unified Network of Instructors and Trusted Eliminators Lerne, zurück zu schlagen und unterstütze uns! TB Akademie |
19.05.2010, 15:46 | #35 |
| Fehlermeldung RUNDLL......flacor.dat Malware? |
19.05.2010, 15:51 | #36 |
| Fehlermeldung RUNDLL......flacor.dat Malware? sorry nochmal.........im Gastkonto, oder soll ich mich wieder als admin "Kurz" anmelden. Im abgesicherten Modus gibt es ja noch ein admin Konto, ausser meinem "KURZ", welches "Admin" heisst, aber das ist wohl von windows, glaub´ich jedenfalls- |
19.05.2010, 15:55 | #37 |
/// Selecta Jahrusso | Fehlermeldung RUNDLL......flacor.dat Malware? Als Admin. Aha und woher kommt die Fehlermeldung? Wann kam die, durch Combofix, durch Stromkabel ziehen,...? Tut leid aber ich hab nicht die Lust derzeit jeden alles aus der Nase zu ziehen.
__________________ mfg, Daniel ASAP & UNITE Member Alliance of Security Analysis Professionals Unified Network of Instructors and Trusted Eliminators Lerne, zurück zu schlagen und unterstütze uns! TB Akademie |
19.05.2010, 15:57 | #38 |
| Fehlermeldung RUNDLL......flacor.dat Malware? nein nein, das ist die Meldung, die kommt wenn ich mich im Gäste konto einlogge; ich dachte das intressiert dich. sorry (bin im Mom. als "Gäste" angemeldet.............. mache mich dann an die Arbeit, nachdem ich mich als "Kurz" angemeldet habe. |
19.05.2010, 16:02 | #39 | |
/// Selecta Jahrusso | Fehlermeldung RUNDLL......flacor.dat Malware? Du verwirrst mich komplett -.- Zitat:
Oder ist das die wenn du MSCONFIG eingibst? Beschreibe jetzt dein Problem mal genau. Sonst sitzen wir hier noch 2 Jahre
__________________ mfg, Daniel ASAP & UNITE Member Alliance of Security Analysis Professionals Unified Network of Instructors and Trusted Eliminators Lerne, zurück zu schlagen und unterstütze uns! TB Akademie |
19.05.2010, 16:23 | #40 |
| Fehlermeldung RUNDLL......flacor.dat Malware? ja, sorry........ich bin auch total wirr; das ist wenn ich msconfig eingebe; sorry. die Log ist auch fertig; zwischendurch, kurz vor Ende des Suchlaufs hat mich mein avira dreimal gewarnt, vor "Combofix" Dingen, obwohl ich diesen wie du gesagt hast, deaktiviert hatte; komisch. Ich habe dann auf weiter Aktionen "ignorieren" geklickt; hoffe, das war richtig so. Grüsse, Sascha Code:
ATTFilter ComboFix 10-05-17.05 - Kurz 19.05.2010 17:03:58.3.1 - x86 Microsoft Windows XP Home Edition 5.1.2600.3.1252.49.1031.18.2047.1628 [GMT 2:00] ausgeführt von:: c:\dokumente und einstellungen\Kurz\Desktop\ComboFix.exe AV: AntiVir Desktop *On-access scanning disabled* (Updated) {C19476D9-52BC-4E93-8AF3-CCF59F7AE8FE} . ((((((((((((((((((((((( Dateien erstellt von 2010-04-19 bis 2010-05-19 )))))))))))))))))))))))))))))) . 2010-05-18 14:01 . 2010-05-18 14:02 53319 ----a-w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Temp\{8C20787A-7402-4FA7-BF25-6E5750930FDC}\PostBuild.exe 2010-05-16 21:53 . 2010-05-17 23:40 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Network Security Task Manager 2010-05-16 21:52 . 2010-05-16 21:52 -------- d-----w- c:\programme\Network Security Taskmanager 2010-05-16 20:26 . 2010-05-16 20:26 814 ----a-w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\SecTaskMan\icn_1692A0035B2B9884C99BC5A275D080DA.dll 2010-05-16 20:18 . 2010-05-16 20:19 -------- d-----w- c:\programme\Debugging Tools for Windows (x86) 2010-05-16 14:26 . 2010-05-16 14:41 -------- d-----w- c:\programme\Security Task Manager 2010-05-14 18:04 . 2010-05-14 18:04 -------- d-----w- c:\dokumente und einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Apple 2010-05-14 17:27 . 2010-05-14 17:27 38784 ----a-w- c:\dokumente und einstellungen\Kurz\Anwendungsdaten\Macromedia\Flash Player\http://www.macromedia.com\bin\airapp...pinstaller.exe 2010-05-14 17:27 . 2010-05-14 17:27 -------- d-----w- c:\programme\Gemeinsame Dateien\Adobe AIR 2010-05-13 23:13 . 2010-05-13 23:13 -------- d-----w- c:\programme\Gemeinsame Dateien\Skype 2010-05-13 23:13 . 2010-05-14 16:14 -------- d-----r- c:\programme\Skype 2010-05-13 23:00 . 2010-05-13 23:00 45056 ----a-w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\ThinShims\rpnpshimwmp.dll 2010-05-13 22:55 . 2010-05-13 22:55 738824 ----a-w- c:\dokumente und einstellungen\Kurz\Anwendungsdaten\Real\RealPlayer\setup\AU_setup20100217.exe 2010-05-13 22:51 . 2010-05-13 22:51 -------- d-----w- c:\dokumente und einstellungen\Kurz\Anwendungsdaten\Apple Computer 2010-05-13 22:48 . 2010-05-13 22:49 -------- d-----w- c:\programme\QuickTime 2010-05-13 22:48 . 2010-05-13 22:48 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Apple Computer 2010-05-13 22:48 . 2010-05-13 22:48 -------- d-----w- c:\programme\Gemeinsame Dateien\Apple 2010-05-13 22:48 . 2010-05-13 22:48 -------- d-----w- c:\dokumente und einstellungen\Kurz\Lokale Einstellungen\Anwendungsdaten\Apple 2010-05-13 22:48 . 2010-05-13 22:48 -------- d-----w- c:\programme\Apple Software Update 2010-05-13 22:48 . 2010-05-13 22:48 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Apple 2010-05-13 22:47 . 2010-05-13 22:47 -------- d-----w- c:\dokumente und einstellungen\Kurz\Lokale Einstellungen\Anwendungsdaten\Apple Computer 2010-05-02 19:59 . 2010-05-02 20:36 -------- d-----w- c:\programme\coolspot AG 2010-04-30 13:12 . 2010-05-13 23:51 411368 ----a-w- c:\windows\system32\deployJava1.dll 2010-04-21 17:29 . 2010-05-03 16:16 -------- d-----w- c:\dokumente und einstellungen\Alle\Lokale Einstellungen\Anwendungsdaten\Paint.NET . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2010-05-18 14:05 . 2005-05-17 15:44 -------- d--h--w- c:\programme\InstallShield Installation Information 2010-05-18 14:01 . 2010-04-03 19:19 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Temp 2010-05-17 23:42 . 2008-07-22 23:54 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\SecTaskMan 2010-05-16 19:27 . 2005-05-31 18:07 -------- d-----w- c:\programme\Gemeinsame Dateien\Adobe 2010-05-15 22:30 . 2010-04-08 19:03 -------- d-----w- c:\programme\a-squared Free 2010-05-15 13:44 . 2005-05-17 14:50 -------- d-----w- c:\programme\Java 2010-05-15 13:44 . 2005-05-17 14:50 -------- d-----w- c:\programme\Gemeinsame Dateien\Java 2010-05-14 17:22 . 2008-09-16 18:43 -------- d-----w- c:\dokumente und einstellungen\Kurz\Anwendungsdaten\Skype 2010-05-14 17:22 . 2008-09-16 18:46 -------- d-----w- c:\dokumente und einstellungen\Kurz\Anwendungsdaten\skypePM 2010-05-14 16:41 . 2010-04-02 14:16 -------- d-----w- c:\programme\CCleaner 2010-05-14 15:39 . 2005-05-31 18:08 -------- d-----w- c:\dokumente und einstellungen\Kurz\Anwendungsdaten\AdobeUM 2010-05-14 15:35 . 2007-05-23 20:14 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Adobe(2) 2010-05-14 15:35 . 2005-05-17 15:37 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Adobe Systems 2010-05-13 23:13 . 2008-09-16 18:42 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Skype 2010-05-13 23:00 . 2010-05-13 23:00 45056 ----a-w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\ThinShims\rpnpshimswf.dll 2010-05-13 23:00 . 2010-05-13 23:00 49152 ----a-w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext\Components\nprpffbrowserrecordext.dll 2010-05-13 23:00 . 2010-05-13 23:00 45056 ----a-w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\ThinShims\rpnpshimrp.dll 2010-05-13 23:00 . 2010-05-13 23:00 45056 ----a-w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\ThinShims\rpnpshimqt.dll 2010-05-13 23:00 . 2010-05-13 23:00 40960 ----a-w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\Chrome\Hook\rpchromebrowserrecordhelper.dll 2010-05-13 23:00 . 2010-05-13 23:00 308808 ----a-w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\Common\rpmainbrowserrecordplugin.dll 2010-05-13 23:00 . 2010-05-13 23:00 14848 ----a-w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll 2010-05-13 23:00 . 2010-05-13 23:00 341600 ----a-w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll 2010-05-13 23:00 . 2007-09-03 18:05 -------- d-----w- c:\programme\Gemeinsame Dateien\Real 2010-05-13 23:00 . 2007-09-03 18:05 -------- d-----w- c:\programme\Real 2010-05-13 22:59 . 2010-05-13 22:59 -------- d-----w- c:\programme\Gemeinsame Dateien\xing shared 2010-05-13 02:15 . 2010-04-08 10:17 -------- d-----w- c:\programme\Malwarebytes' Anti-Malware 2010-04-29 13:39 . 2010-04-08 10:17 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys 2010-04-29 13:39 . 2010-04-08 10:17 20952 ----a-w- c:\windows\system32\drivers\mbam.sys 2010-04-13 13:49 . 2005-05-17 15:44 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\CyberLink 2010-04-11 18:50 . 2010-04-11 18:32 -------- d-----w- c:\dokumente und einstellungen\Alle\Anwendungsdaten\Nero 2010-04-09 15:03 . 2009-07-08 18:28 -------- d-----w- c:\programme\Full Tilt Poker 2010-04-09 11:40 . 2010-04-09 11:40 0 ----a-w- c:\windows\system32\atiicdxx.dat 2010-04-09 09:38 . 2010-04-09 09:38 -------- d-----w- c:\dokumente und einstellungen\Administrator\Anwendungsdaten\Sony Ericsson 2010-04-09 08:09 . 2010-04-09 08:09 -------- d-----w- c:\dokumente und einstellungen\Administrator\Anwendungsdaten\Avira 2010-04-08 23:42 . 2008-12-22 11:28 -------- d-----w- c:\programme\PokerStars 2010-04-08 10:18 . 2010-04-08 10:18 -------- d-----w- c:\dokumente und einstellungen\Kurz\Anwendungsdaten\Malwarebytes 2010-04-08 10:17 . 2010-04-08 10:17 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Malwarebytes 2010-04-06 20:54 . 2010-04-06 18:30 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy 2010-04-06 17:08 . 2006-02-14 14:02 32768 ----a-w- c:\windows\system32\drivers\sisnicxp.sys 2010-04-06 15:34 . 2010-04-06 15:28 -------- d-----w- c:\programme\ATI 2010-04-04 18:41 . 2009-02-15 15:47 19280 ----a-w- c:\dokumente und einstellungen\Alle\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT 2010-04-04 18:41 . 2010-04-04 18:41 -------- d-----w- c:\dokumente und einstellungen\Alle\Anwendungsdaten\CyberLink 2010-04-04 15:54 . 2010-04-04 15:23 -------- d-----w- c:\programme\CyberLink 2010-04-04 15:23 . 2010-04-03 19:19 53319 ----a-w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Temp\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}\PostBuild.exe 2010-04-04 14:02 . 2010-04-04 14:02 -------- d-----w- c:\programme\Microsoft Windows 7 Upgrade Advisor 2010-04-03 19:34 . 2010-04-03 19:34 -------- d-----w- c:\dokumente und einstellungen\Kurz\Anwendungsdaten\CyberLink 2010-04-03 19:27 . 2010-04-03 19:27 -------- d-----w- c:\programme\Gemeinsame Dateien\CyberLink 2010-04-03 19:06 . 2010-04-03 02:31 -------- d-----w- c:\programme\AVS4YOU 2010-04-03 02:45 . 2010-04-03 02:45 -------- d-----w- c:\dokumente und einstellungen\Kurz\Anwendungsdaten\AVS4YOU 2010-04-03 02:33 . 2005-05-17 15:31 19280 ----a-w- c:\dokumente und einstellungen\Kurz\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT 2010-04-03 02:33 . 2010-04-03 02:33 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\AVS4YOU 2010-04-03 02:32 . 2010-04-03 02:31 -------- d-----w- c:\programme\Gemeinsame Dateien\AVSMedia 2010-04-03 01:49 . 2010-04-02 16:14 -------- d-----w- c:\programme\Videoload Manager 2010-04-03 00:08 . 2010-04-02 16:14 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\mpDRM 2010-04-02 19:38 . 2010-04-02 19:38 15271 ----a-w- c:\windows\system32\drivers\FIDE.SYS 2010-04-02 16:24 . 2010-04-02 16:14 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\fluxDVD 2010-04-02 16:15 . 2010-04-02 16:14 -------- d-----w- c:\programme\Gemeinsame Dateien\fluxDVD 2010-04-02 16:15 . 2010-04-02 16:14 -------- d-----w- c:\programme\Gemeinsame Dateien\mpDRM 2010-04-02 15:14 . 2004-08-04 12:00 84326 ----a-w- c:\windows\system32\perfc007.dat 2010-04-02 15:14 . 2004-08-04 12:00 458822 ----a-w- c:\windows\system32\perfh007.dat 2010-03-31 14:36 . 2010-03-31 14:36 503808 ----a-w- c:\dokumente und einstellungen\Alle\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-10188881-n\msvcp71.dll 2010-03-31 14:36 . 2010-03-31 14:36 499712 ----a-w- c:\dokumente und einstellungen\Alle\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-10188881-n\jmc.dll 2010-03-31 14:36 . 2010-03-31 14:36 348160 ----a-w- c:\dokumente und einstellungen\Alle\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-10188881-n\msvcr71.dll 2010-03-31 14:36 . 2010-03-31 14:36 61440 ----a-w- c:\dokumente und einstellungen\Alle\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-51ee2a49-n\decora-sse.dll 2010-03-31 14:36 . 2010-03-31 14:36 12800 ----a-w- c:\dokumente und einstellungen\Alle\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-51ee2a49-n\decora-d3d.dll 2010-03-30 16:12 . 2010-03-30 16:12 503808 ----a-w- c:\dokumente und einstellungen\Kurz\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-5a37007e-n\msvcp71.dll 2010-03-30 16:12 . 2010-03-30 16:12 499712 ----a-w- c:\dokumente und einstellungen\Kurz\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-5a37007e-n\jmc.dll 2010-03-30 16:12 . 2010-03-30 16:12 348160 ----a-w- c:\dokumente und einstellungen\Kurz\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\54\1a209876-5a37007e-n\msvcr71.dll 2010-03-30 16:12 . 2010-03-30 16:12 61440 ----a-w- c:\dokumente und einstellungen\Kurz\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-5d428823-n\decora-sse.dll 2010-03-30 16:12 . 2010-03-30 16:12 12800 ----a-w- c:\dokumente und einstellungen\Kurz\Anwendungsdaten\Sun\Java\Deployment\SystemCache\6.0\17\6d0ad391-5d428823-n\decora-d3d.dll 2010-03-29 20:53 . 2010-03-29 20:53 -------- d-----w- c:\dokumente und einstellungen\Alle\Anwendungsdaten\Avira 2010-03-29 20:03 . 2010-03-29 20:03 -------- d-----w- c:\dokumente und einstellungen\Kurz\Anwendungsdaten\Avira 2010-03-29 19:59 . 2010-03-29 19:59 -------- d-----w- c:\programme\Avira 2010-03-29 19:59 . 2007-12-20 23:13 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Avira 2010-03-29 19:53 . 2010-03-29 19:59 124784 ----a-w- c:\windows\system32\drivers\avipbb.sys 2010-03-29 19:53 . 2010-03-29 19:59 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys 2010-03-29 19:53 . 2010-03-29 19:59 60936 ----a-w- c:\windows\system32\drivers\avgntflt.sys 2010-03-29 19:53 . 2010-03-29 19:59 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys 2010-03-26 21:34 . 2010-03-26 21:34 -------- d-----w- c:\programme\ATI Technologies 2010-03-21 19:34 . 2010-03-21 16:05 -------- d-----w- c:\dokumente und einstellungen\Kurz\Anwendungsdaten\Nero 2010-03-21 16:04 . 2010-03-21 16:03 -------- d-----w- c:\programme\Gemeinsame Dateien\Nero 2010-03-21 16:04 . 2010-03-21 16:03 -------- d-----w- c:\programme\Nero 2010-03-21 16:03 . 2010-03-21 16:03 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Nero 2010-03-21 15:19 . 2010-03-21 15:19 -------- d-----w- c:\dokumente und einstellungen\Kurz\Anwendungsdaten\Canneverbe Limited 2010-03-21 15:19 . 2010-03-21 15:19 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\Canneverbe Limited 2010-03-21 14:20 . 2010-03-21 14:17 -------- d-----w- c:\dokumente und einstellungen\All Users\Anwendungsdaten\DVD Shrink 2010-03-21 12:32 . 2010-03-21 12:32 -------- d-----w- c:\programme\vso 2010-03-10 06:15 . 2004-08-04 12:00 420352 ----a-w- c:\windows\system32\vbscript.dll 2010-02-25 06:15 . 2004-08-04 12:00 916480 ------w- c:\windows\system32\wininet.dll 2010-02-24 13:11 . 2004-08-04 12:00 455680 ----a-w- c:\windows\system32\drivers\mrxsmb.sys . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SiS Tray"="c:\windows\system32\sistray.EXE" [2003-10-30 667648] "QuickTime Task"="c:\programme\QuickTime\qttask.exe" [2010-03-17 421888] "LifeCam"="c:\programme\Microsoft LifeCam\LifeExp.exe" [2007-05-17 279912] "VX1000"="c:\windows\vVX1000.exe" [2007-04-10 709992] "SiSUSBRG"="c:\windows\SiSUSBrg.exe" [2008-11-25 106496] "avgnt"="c:\programme\Avira\AntiVir Desktop\avgnt.exe" [2010-03-29 282792] "RemoteControl10"="c:\programme\CyberLink\PowerDVD10\PDVD10Serv.exe" [2010-02-02 87336] "TkBellExe"="c:\programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" [2010-05-13 202256] "Adobe Reader Speed Launcher"="c:\programme\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-04-04 36272] "Adobe ARM"="c:\programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe" [2010-03-24 952768] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360] [HKLM\~\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Adobe Reader - Schnellstart.lnk] path=c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Reader - Schnellstart.lnk backup=c:\windows\pss\Adobe Reader - Schnellstart.lnkCommon Startup [HKLM\~\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^HP Digital Imaging Monitor.lnk] path=c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\HP Digital Imaging Monitor.lnk backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup [HKLM\~\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^HP Image Zone Schnellstart.lnk] path=c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\HP Image Zone Schnellstart.lnk backup=c:\windows\pss\HP Image Zone Schnellstart.lnkCommon Startup [HKLM\~\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Kodak EasyShare Software.lnk] path=c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\Kodak EasyShare Software.lnk backup=c:\windows\pss\Kodak EasyShare Software.lnkCommon Startup [HKLM\~\startupfolder\C:^Dokumente und Einstellungen^All Users^Startmenü^Programme^Autostart^Microsoft Office.lnk] path=c:\dokumente und einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk backup=c:\windows\pss\Microsoft Office.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Component Manager] 2004-05-12 14:18 241664 ----a-w- c:\programme\HP\hpcoretech\hpcmpmgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] 2004-02-12 11:38 49152 ----a-w- c:\programme\HP\HP Software Update\hpwuSchd2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] 2008-04-14 02:22 1695232 --sh--w- c:\programme\Messenger\msmsgs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] 2001-07-09 09:50 155648 ----a-w- c:\windows\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] 2010-03-17 19:53 421888 ----a-w- c:\programme\QuickTime\QTTask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite] 2007-06-13 06:16 528384 ----a-r- c:\programme\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "WLSetupSvc"=3 (0x3) "usnjsvc"=3 (0x3) "WMPNetworkSvc"=3 (0x3) "Prime95 Service"=2 (0x2) "Adobe LM Service"=3 (0x3) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "c:\\Programme\\Microsoft LifeCam\\LifeCam.exe"= "c:\\Programme\\Microsoft LifeCam\\LifeExp.exe"= "c:\\WINDOWS\\system32\\dpnsvr.exe"= "c:\\WINDOWS\\system32\\dxdiag.exe"= "c:\\WINDOWS\\system32\\mmc.exe"= "c:\\WINDOWS\\Network Diagnostic\\xpnetdiag.exe"= "c:\\Programme\\Full Tilt Poker\\FullTiltPoker.exe"= "c:\\Programme\\Windows Live\\Messenger\\wlcsdk.exe"= "c:\\Programme\\Windows Live\\Messenger\\msnmsgr.exe"= "c:\\Programme\\Windows Live\\Sync\\WindowsLiveSync.exe"= "c:\\Programme\\Skype\\Phone\\Skype.exe"= "c:\\Programme\\Skype\\Plugin Manager\\skypePM.exe"= R2 a2free;a-squared Free Service;c:\programme\a-squared Free\a2service.exe [08.04.2010 21:03 1872320] R2 AntiVirMailService;Avira AntiVir MailGuard;c:\programme\Avira\AntiVir Desktop\avmailc.exe [29.03.2010 21:59 337064] R2 AntiVirSchedulerService;Avira AntiVir Planer;c:\programme\Avira\AntiVir Desktop\sched.exe [29.03.2010 21:59 135336] R2 AntiVirWebService;Avira AntiVir WebGuard;c:\programme\Avira\AntiVir Desktop\avwebgrd.exe [29.03.2010 21:59 405672] S0 sptd;sptd;c:\windows\system32\Drivers\sptd.sys --> c:\windows\system32\Drivers\sptd.sys [?] S3 aaudstum;aaudstum;\??\c:\dokume~1\Kurz\LOKALE~1\Temp\aaudstum.sys --> c:\dokume~1\Kurz\LOKALE~1\Temp\aaudstum.sys [?] S3 dsltestSp5;dsltestSp5 NDIS Protocol Driver;c:\windows\system32\drivers\DslTestSp5.sys [11.02.2008 11:22 26816] S3 MIINPazX;MIINPazX NDIS Protocol Driver;c:\progra~1\GEMEIN~1\MARMIK~1\MInfraIS\MIINPazX.SYS [02.07.2007 20:00 17152] S3 MTK;Media Technology Kernel Driver;c:\windows\system32\drivers\FIDE.SYS [02.04.2010 21:38 15271] S3 MTOnlPktAlyX;MTOnlPktAlyX NDIS Protocol Driver;c:\progra~1\T-Online\T-ONLI~2\BASIS-~1\Basis1\MTOnlPktAlyX.SYS [02.07.2007 20:00 17536] S3 s816bus;Sony Ericsson Device 816 driver (WDM);c:\windows\system32\drivers\s816bus.sys [17.09.2009 19:55 81832] S3 s816mdfl;Sony Ericsson Device 816 USB WMC Modem Filter;c:\windows\system32\drivers\s816mdfl.sys [17.09.2009 19:56 13864] S3 s816mdm;Sony Ericsson Device 816 USB WMC Modem Driver;c:\windows\system32\drivers\s816mdm.sys [17.09.2009 19:56 107304] S3 s816mgmt;Sony Ericsson Device 816 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s816mgmt.sys [17.09.2009 20:14 99112] S3 s816nd5;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (NDIS);c:\windows\system32\drivers\s816nd5.sys [17.09.2009 20:14 21928] S3 s816obex;Sony Ericsson Device 816 USB WMC OBEX Interface;c:\windows\system32\drivers\s816obex.sys [17.09.2009 20:13 97320] S3 s816unic;Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (WDM);c:\windows\system32\drivers\s816unic.sys [17.09.2009 20:14 97704] S3 SiS7012;Service for AC'97 Sample Driver (WDM);c:\windows\system32\drivers\sis7012.sys [17.05.2005 17:25 61312] S3 Slnt7554;USB Soft Modem Driver;c:\windows\system32\drivers\slnt7554.sys [17.05.2005 18:56 129535] S3 TSMPacket;DSL-Manager Service;c:\windows\system32\DRIVERS\tsmpkt.sys --> c:\windows\system32\DRIVERS\tsmpkt.sys [?] . Inhalt des "geplante Tasks" Ordners 2010-05-14 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\programme\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34] 2010-05-19 c:\windows\Tasks\RealUpgradeLogonTaskS-1-5-21-57989841-813497703-1708537768-1005.job - c:\programme\Real\RealUpgrade\realupgrade.exe [2010-02-24 20:09] 2010-05-13 c:\windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-57989841-813497703-1708537768-1005.job - c:\programme\Real\RealUpgrade\realupgrade.exe [2010-02-24 20:09] . . ------- Zusätzlicher Suchlauf ------- . uStart Page = hxxp://www.t-online.de/ uInternet Settings,ProxyOverride = 192*** LSP: c:\programme\Avira\AntiVir Desktop\avsda.dll Handler: fluxhttp - {8E2D00A0-82C6-4821-90BC-07F290841BB6} - c:\programme\Gemeinsame Dateien\fluxDVD\Lib\XEB\xebnavigation.ax Handler: fluxhttp\0x00000007 - {8E2D00A0-82C6-4821-90BC-07F290841BB6} - c:\programme\Gemeinsame Dateien\fluxDVD\Lib\XEB\xebnavigation.ax . - - - - Entfernte verwaiste Registrierungseinträge - - - - MSConfigStartUp-NvCplDaemon - c:\windows\system32\NvCpl.dll MSConfigStartUp-NvMediaCenter - NvMCTray.dll MSConfigStartUp-nwiz - nwiz.exe MSConfigStartUp-SunJavaUpdateSched - c:\programme\Java\jre1.6.0_02\bin\jusched.exe ************************************************************************** catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2010-05-19 17:10 Windows 5.1.2600 Service Pack 3 NTFS Scanne versteckte Prozesse... Scanne versteckte Autostarteinträge... Scanne versteckte Dateien... Scan erfolgreich abgeschlossen versteckte Dateien: 0 ************************************************************************** . --------------------- Gesperrte Registrierungsschluessel --------------------- [HKEY_LOCAL_MACHINE\software\mpDRM\LicenseStore*] "CheckValue"=dword:5e0bb278 "37CD50B2"="293D9ADF" . --------------------- Durch laufende Prozesse gestartete DLLs --------------------- - - - - - - - > 'winlogon.exe'(572) c:\windows\system32\Ati2evxx.dll - - - - - - - > 'lsass.exe'(628) c:\programme\Avira\AntiVir Desktop\avsda.dll - - - - - - - > 'explorer.exe'(516) c:\programme\Windows Media Player\wmpband.dll c:\windows\system32\webcheck.dll c:\windows\system32\WPDShServiceObj.dll c:\windows\system32\PortableDeviceTypes.dll c:\windows\system32\PortableDeviceApi.dll . Zeit der Fertigstellung: 2010-05-19 17:15:21 ComboFix-quarantined-files.txt 2010-05-19 15:15 ComboFix2.txt 2010-04-08 15:53 Vor Suchlauf: 13 Verzeichnis(se), 70.069.669.888 Bytes frei Nach Suchlauf: 14 Verzeichnis(se), 70.040.985.600 Bytes frei - - End Of File - - 788830D6B5832AE66F214C5AFB57FE6B |
19.05.2010, 18:59 | #41 |
/// Selecta Jahrusso | Fehlermeldung RUNDLL......flacor.dat Malware? CustomScan mit OTL Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
Code:
ATTFilter /md5start rundll32.exe /md5stop
__________________ mfg, Daniel ASAP & UNITE Member Alliance of Security Analysis Professionals Unified Network of Instructors and Trusted Eliminators Lerne, zurück zu schlagen und unterstütze uns! TB Akademie |
19.05.2010, 19:14 | #42 |
| Fehlermeldung RUNDLL......flacor.dat Malware? so, hier der otl.txt (Mein Antivir Guard hatte nicht beendet, war doch ok?) Code:
ATTFilter OTL logfile created on: 19.05.2010 20:06:31 - Run 2 OTL by OldTimer - Version 3.2.5.0 Folder = C:\Dokumente und Einstellungen\Kurz\Desktop Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 78,00% Memory free 4,00 Gb Paging File | 4,00 Gb Available in Paging File | 91,00% Paging File free Paging file location(s): C:\pagefile.sys 0 0 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 103,18 Gb Total Space | 65,25 Gb Free Space | 63,24% Space Free | Partition Type: NTFS Drive D: | 129,71 Gb Total Space | 109,90 Gb Free Space | 84,73% Space Free | Partition Type: NTFS E: Drive not present or media not loaded F: Drive not present or media not loaded Drive G: | 76,33 Gb Total Space | 46,93 Gb Free Space | 61,48% Space Free | Partition Type: NTFS H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: XP1600 Current User Name: Kurz Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Company Name Whitelist: On Skip Microsoft Files: On File Age = 90 Days Output = Standard Quick Scan ========== Processes (SafeList) ========== PRC - [2010.05.19 20:04:53 | 000,571,904 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Kurz\Desktop\OTL.exe PRC - [2010.05.14 00:59:27 | 000,202,256 | ---- | M] (RealNetworks, Inc.) -- C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe PRC - [2010.05.13 17:29:40 | 001,872,320 | ---- | M] (Emsi Software GmbH) -- C:\Programme\a-squared Free\a2service.exe PRC - [2010.04.19 15:44:28 | 000,405,672 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avwebgrd.exe PRC - [2010.04.19 15:44:28 | 000,337,064 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avmailc.exe PRC - [2010.04.19 15:44:28 | 000,267,432 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe PRC - [2010.03.29 21:53:12 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\sched.exe PRC - [2010.03.29 21:52:47 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe PRC - [2010.03.29 21:52:42 | 000,282,792 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe PRC - [2010.02.03 00:08:56 | 000,087,336 | ---- | M] (CyberLink Corp.) -- C:\Programme\CyberLink\PowerDVD10\PDVD10Serv.exe PRC - [2008.04.14 04:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007.05.17 23:45:33 | 000,271,720 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft LifeCam\MSCamS32.exe PRC - [2003.10.30 14:10:20 | 000,667,648 | ---- | M] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\system32\sistray.exe ========== Modules (SafeList) ========== MOD - [2010.05.19 20:04:53 | 000,571,904 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Kurz\Desktop\OTL.exe MOD - [2008.04.14 04:21:06 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\msscript.ocx ========== Win32 Services (SafeList) ========== SRV - File not found [Disabled | Stopped] -- -- (Prime95 Service) SRV - File not found [On_Demand | Stopped] -- -- (Adobe LM Service) SRV - [2010.05.13 17:29:40 | 001,872,320 | ---- | M] (Emsi Software GmbH) [Auto | Running] -- C:\Programme\a-squared Free\a2service.exe -- (a2free) SRV - [2010.04.19 15:44:28 | 000,405,672 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\AVWEBGRD.EXE -- (AntiVirWebService) SRV - [2010.04.19 15:44:28 | 000,337,064 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avmailc.exe -- (AntiVirMailService) SRV - [2010.04.19 15:44:28 | 000,267,432 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2010.03.29 21:53:12 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2007.05.17 23:45:33 | 000,271,720 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Microsoft LifeCam\MSCamS32.exe -- (MSCamSvc) SRV - [2005.04.04 00:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT) SRV - [2004.03.18 17:55:48 | 000,065,536 | ---- | M] (HP) [On_Demand | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel | On_Demand | Running] -- -- (catchme) DRV - [2010.04.06 19:08:03 | 000,032,768 | ---- | M] (SiS Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sisnicxp.sys -- (SISNICXP) DRV - [2010.04.02 21:38:22 | 000,015,271 | ---- | M] (MediaTek Corporation) [File_System | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\FIDE.SYS -- (MTK) DRV - [2010.03.29 21:53:34 | 000,124,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb) DRV - [2010.03.29 21:53:34 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2010.03.29 21:53:32 | 000,060,936 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt) DRV - [2010.03.29 21:52:41 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio) DRV - [2008.12.02 00:13:40 | 003,452,928 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag) DRV - [2008.09.24 12:29:25 | 000,029,184 | ---- | M] (Elaborate Bytes AG) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\VClone.sys -- (VClone) DRV - [2008.04.13 20:53:09 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm) DRV - [2008.04.13 20:45:29 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum) DRV - [2008.04.13 20:45:12 | 000,060,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\USBAUDIO.sys -- (usbaudio) USB-Audiotreiber (WDM) DRV - [2007.09.12 18:24:00 | 000,026,816 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\DslTestSp5.sys -- (dsltestSp5) DRV - [2007.07.03 16:47:27 | 000,028,672 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\CO_Mon.sys -- (CO_Mon) DRV - [2007.06.19 09:51:20 | 000,107,304 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s816mdm.sys -- (s816mdm) DRV - [2007.06.19 09:51:18 | 000,099,112 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s816mgmt.sys -- (s816mgmt) Sony Ericsson Device 816 USB WMC Device Management Drivers (WDM) DRV - [2007.06.19 09:51:18 | 000,097,704 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s816unic.sys -- (s816unic) Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (WDM) DRV - [2007.06.19 09:51:18 | 000,097,320 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s816obex.sys -- (s816obex) DRV - [2007.06.19 09:51:18 | 000,021,928 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s816nd5.sys -- (s816nd5) Sony Ericsson Device 816 USB Ethernet Emulation SEMCMR7 (NDIS) DRV - [2007.06.19 09:51:18 | 000,013,864 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s816mdfl.sys -- (s816mdfl) DRV - [2007.06.19 09:51:16 | 000,081,832 | R--- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s816bus.sys -- (s816bus) Sony Ericsson Device 816 driver (WDM) DRV - [2007.04.10 23:46:53 | 001,966,312 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\VX1000.sys -- (VX1000) DRV - [2006.10.09 14:03:56 | 000,017,152 | ---- | M] (Deutsche Telekom AG, Marmiko IT-Solutions GmbH) [Kernel | On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Marmiko Shared\MInfraIS\MIINPazx.sys -- (MIINPazX) DRV - [2006.10.09 13:46:44 | 000,017,536 | ---- | M] (Deutsche Telekom AG AG, Marmiko IT-Solutions GmbH) [Kernel | On_Demand | Stopped] -- C:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\MTOnlPktAlyx.sys -- (MTOnlPktAlyX) DRV - [2004.08.03 23:31:36 | 000,032,768 | ---- | M] (SiS Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\sisnic.sys -- (SISNIC) DRV - [2004.08.03 22:41:46 | 000,095,424 | ---- | M] (Smart Link) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\slnthal.sys -- (SlNtHal) DRV - [2004.08.03 22:41:46 | 000,013,240 | ---- | M] (Smart Link) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\slwdmsup.sys -- (SlWdmSup) DRV - [2004.08.03 22:41:42 | 000,129,535 | ---- | M] (Smart Link) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\slnt7554.sys -- (Slnt7554) DRV - [2004.08.03 22:41:40 | 000,180,360 | ---- | M] (Smart Link) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ntmtlfax.sys -- (NtMtlFax) DRV - [2004.08.03 22:41:40 | 000,126,686 | ---- | M] (Smart Link) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mtlmnt5.sys -- (Mtlmnt5) DRV - [2004.08.03 22:41:40 | 000,013,776 | ---- | M] (Smart Link) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\RecAgent.sys -- (RecAgent) DRV - [2004.08.03 22:41:38 | 001,309,184 | ---- | M] (Smart Link) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\mtlstrm.sys -- (Mtlstrm) DRV - [2003.10.29 21:36:36 | 000,011,264 | R--- | M] (Silicon Integrated Systems Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\srvkp.sys -- (SiSkp) DRV - [2003.10.29 20:54:58 | 000,427,776 | R--- | M] (Silicon Integrated Systems Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sisgrp.sys -- (SiS315) DRV - [2001.10.11 08:51:40 | 000,061,312 | R--- | M] (Silicon Integrated Systems Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sis7012.sys -- (SiS7012) Service for AC'97 Sample Driver (WDM) DRV - [2001.08.17 15:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401) DRV - [2001.08.17 13:57:38 | 000,016,128 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\MODEMCSA.sys -- (MODEMCSA) DRV - [2000.10.15 18:38:54 | 000,016,068 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\T-Com\DSLCheck\Pcandis5.sys -- (PCANDIS5) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.t-online.de/ IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = 192*** O1 HOSTS File: ([2010.04.06 21:41:35 | 000,000,961 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [LifeCam] C:\Programme\Microsoft LifeCam\LifeExp.exe (Microsoft Corporation) O4 - HKLM..\Run: [RemoteControl10] C:\Programme\CyberLink\PowerDVD10\PDVD10Serv.exe (CyberLink Corp.) O4 - HKLM..\Run: [SiS Tray] C:\WINDOWS\system32\sistray.exe (Silicon Integrated Systems Corporation) O4 - HKLM..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe (Silicon Integrated Systems Corp.) O4 - HKLM..\Run: [TkBellExe] C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe (RealNetworks, Inc.) O4 - HKLM..\Run: [VX1000] C:\WINDOWS\vVX1000.exe (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0 O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - Reg Error: Key error. File not found O9 - Extra Button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira GmbH) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira GmbH) O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira GmbH) O16 - DPF: {05317530-B882-449D-9421-18D94FA3ED34} http://www.sis.com/ocis/OSInfo.cab (OSInfo Control) O16 - DPF: {16095503-786F-4097-AED6-5D567A26D760} http://www.sis.com/ocis/SiSAutodetectNT.cab (SiS_OCX Control) O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/s...irector/sw.cab (Shockwave ActiveX Control) O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/downlo...eckControl.cab (Windows Genuine Advantage Validation Tool) O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} http://www.nvidia.com/content/Driver...sysreqlab3.cab (System Requirements Lab Class) O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} http://security.symantec.com/sscv6/S...in/AvSniff.cab (Symantec AntiVirus scanner) O16 - DPF: {40F576AD-8680-4F9E-9490-99D069CD665F} http://srtest-cdn.systemrequirements...qlabdetect.cab (Reg Error: Key error.) O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} http://security.symantec.com/sscv6/S.../bin/cabsa.cab (Symantec RuFSI Utility Class) O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} http://www.nvidia.com/content/Driver...aSmartScan.cab (NVIDIA Smart Scan) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/products/plugin/...ndows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} http://fpdownload.macromedia.com/get.../ultrashim.cab (Reg Error: Key error.) O16 - DPF: {A9F8D9EC-3D0A-4A60-BD82-FBD64BAD370D} http://h20264.www2.hp.com/ediags/dd/...osticsxp2k.cab (DDRevision Class) O16 - DPF: {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} http://tools.ebayimg.com/eps/wl/acti..._v1-0-29-0.cab (EPUImageControl Class) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/products/plugin/...ndows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/ge...sh/swflash.cab (Shockwave Flash Object) O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} http://3dlifeplayer.dl.3dvia.com/pla..._installer.exe (Reg Error: Key error.) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1 O18 - Protocol\Handler\cetihpz {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Programme\HP\hpcoretech\comp\hpuiprot.dll (Hewlett-Packard Company) O18 - Protocol\Handler\fluxhttp {8E2D00A0-82C6-4821-90BC-07F290841BB6} - C:\Programme\Gemeinsame Dateien\fluxDVD\Lib\XEB\xebnavigation.ax () O18 - Protocol\Handler\fluxhttp\0x00000007 {8E2D00A0-82C6-4821-90BC-07F290841BB6} - C:\Programme\Gemeinsame Dateien\fluxDVD\Lib\XEB\xebnavigation.ax () O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Kurz\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Kurz\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2005.05.17 16:47:30 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = ComFile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 90 Days ========== [2010.05.19 17:54:47 | 000,000,000 | -HSD | C] -- C:\RECYCLER [2010.05.19 17:00:15 | 000,000,000 | ---D | C] -- C:\Qoobox [2010.05.18 21:56:35 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Kurz\Recent [2010.05.17 21:19:41 | 000,571,904 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Kurz\Desktop\OTL.exe [2010.05.16 23:53:08 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Network Security Task Manager [2010.05.16 23:52:50 | 000,000,000 | ---D | C] -- C:\Programme\Network Security Taskmanager [2010.05.16 22:18:57 | 000,000,000 | ---D | C] -- C:\Programme\Debugging Tools for Windows (x86) [2010.05.16 16:26:48 | 000,000,000 | ---D | C] -- C:\Programme\Security Task Manager [2010.05.15 19:27:56 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Eigene Dateien\Autorun [2010.05.14 20:04:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\Apple [2010.05.14 19:27:48 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Adobe AIR [2010.05.14 18:58:14 | 000,000,000 | ---D | C] -- C:\Programme\Adobe [2010.05.14 01:13:18 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Skype [2010.05.14 01:13:13 | 000,000,000 | R--D | C] -- C:\Programme\Skype [2010.05.14 00:59:57 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\xing shared [2010.05.14 00:58:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Real [2010.05.14 00:51:11 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Anwendungsdaten\Apple Computer [2010.05.14 00:48:47 | 000,000,000 | ---D | C] -- C:\Programme\QuickTime [2010.05.14 00:48:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Apple Computer [2010.05.14 00:48:20 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Apple [2010.05.14 00:48:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Lokale Einstellungen\Anwendungsdaten\Apple [2010.05.14 00:48:06 | 000,000,000 | ---D | C] -- C:\Programme\Apple Software Update [2010.05.14 00:48:05 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Apple [2010.05.14 00:47:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Lokale Einstellungen\Anwendungsdaten\Apple Computer [2010.05.13 19:35:31 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Eigene Dateien\Registry13.05.10 [2010.05.13 03:09:28 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Eigene Dateien\CtfmonRemoverDE-v2.3 [2010.05.02 21:59:40 | 000,000,000 | ---D | C] -- C:\Programme\coolspot AG [2010.04.22 14:24:27 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Eigene Dateien\TreiberHP1315-Wind.7-64bit [2010.04.11 20:54:10 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Eigene Dateien\openoffice [2010.04.11 20:53:28 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Eigene Dateien\adobe [2010.04.08 21:03:24 | 000,000,000 | ---D | C] -- C:\Programme\a-squared Free [2010.04.08 21:03:24 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Eigene Dateien\a-squared Free [2010.04.08 17:02:51 | 000,000,000 | RHSD | C] -- C:\cmdcons [2010.04.08 16:58:54 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe [2010.04.08 16:58:54 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe [2010.04.08 16:58:54 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe [2010.04.08 16:58:54 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe [2010.04.08 16:58:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT [2010.04.08 12:18:10 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Anwendungsdaten\Malwarebytes [2010.04.08 12:17:56 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010.04.08 12:17:52 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010.04.08 12:17:52 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware [2010.04.08 12:17:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes [2010.04.06 22:45:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Eigene Dateien\Spybot.Reg.schlüssel [2010.04.06 20:30:28 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & Destroy [2010.04.06 19:16:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Lokale Einstellungen\Anwendungsdaten\eSupport.com [2010.04.06 17:28:22 | 000,000,000 | ---D | C] -- C:\Programme\ATI [2010.04.04 17:23:35 | 000,000,000 | ---D | C] -- C:\Programme\CyberLink [2010.04.04 16:02:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Lokale Einstellungen\Anwendungsdaten\Microsoft Corporation [2010.04.04 16:02:16 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Windows 7 Upgrade Advisor [2010.04.03 21:36:28 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Lokale Einstellungen\Anwendungsdaten\Cyberlink [2010.04.03 21:34:42 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Eigene Dateien\CyberLink [2010.04.03 21:34:41 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Anwendungsdaten\CyberLink [2010.04.03 21:27:35 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\CyberLink [2010.04.03 21:19:23 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Temp [2010.04.03 17:04:56 | 000,368,128 | ---- | C] (Avira GmbH) -- C:\Dokumente und Einstellungen\Kurz\Desktop\removaltool-win32-de.exe [2010.04.03 04:45:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Anwendungsdaten\AVS4YOU [2010.04.03 04:33:32 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AVS4YOU [2010.04.03 04:31:58 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\AVSMedia [2010.04.03 04:31:49 | 000,221,215 | ---- | C] (DivXNetworks, Inc.) -- C:\WINDOWS\System32\divxdec.ax [2010.04.03 04:31:49 | 000,082,944 | ---- | C] (Voxware, Inc.) -- C:\WINDOWS\System32\vct3216.acm [2010.04.03 04:31:49 | 000,081,920 | ---- | C] (fccHandler) -- C:\WINDOWS\System32\AC3ACM.acm [2010.04.03 04:31:49 | 000,038,912 | ---- | C] (NCT Company) -- C:\WINDOWS\System32\alf2cd.acm [2010.04.03 04:31:49 | 000,013,239 | ---- | C] (SHARP Corporation) -- C:\WINDOWS\System32\Scg726.acm [2010.04.03 04:31:48 | 000,638,976 | ---- | C] (DivXNetworks, Inc.) -- C:\WINDOWS\System32\divx.dll [2010.04.03 04:31:48 | 000,261,632 | ---- | C] (MainConcept) -- C:\WINDOWS\System32\mcdvd_32.dll [2010.04.03 04:31:47 | 000,000,000 | ---D | C] -- C:\Programme\AVS4YOU [2010.04.03 01:28:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\Logs [2010.04.02 21:38:22 | 000,015,271 | ---- | C] (MediaTek Corporation) -- C:\WINDOWS\System32\drivers\FIDE.SYS [2010.04.02 18:14:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\mpDRM [2010.04.02 18:14:51 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\mpDRM [2010.04.02 18:14:49 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\fluxDVD [2010.04.02 18:14:48 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\fluxDVD [2010.04.02 18:14:44 | 000,000,000 | ---D | C] -- C:\Programme\Videoload Manager [2010.04.02 16:16:56 | 000,000,000 | ---D | C] -- C:\Programme\CCleaner [2010.03.30 18:12:27 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Sun [2010.03.29 22:03:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Anwendungsdaten\Avira [2010.03.29 21:59:28 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys [2010.03.29 21:59:25 | 000,124,784 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys [2010.03.29 21:59:25 | 000,060,936 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys [2010.03.29 21:59:25 | 000,045,416 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys [2010.03.29 21:59:25 | 000,022,360 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys [2010.03.29 21:59:24 | 000,000,000 | ---D | C] -- C:\Programme\Avira [2010.03.26 23:34:06 | 000,000,000 | ---D | C] -- C:\Programme\ATI Technologies [2010.03.21 18:05:40 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Anwendungsdaten\Nero [2010.03.21 18:03:52 | 000,000,000 | ---D | C] -- C:\Programme\Nero [2010.03.21 18:03:42 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nero [2010.03.21 18:03:40 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Nero [2010.03.21 17:19:38 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Anwendungsdaten\Canneverbe Limited [2010.03.21 17:19:38 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Canneverbe Limited [2010.03.21 16:17:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DVD Shrink [2010.03.21 14:32:48 | 000,000,000 | ---D | C] -- C:\Programme\vso [2010.03.20 01:22:44 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Kurz\Lokale Einstellungen\Anwendungsdaten\WMTools Downloaded Files [2010.03.19 21:33:40 | 000,000,000 | ---D | C] -- C:\WINDOWS\SxsCaPendDel [2010.03.19 21:05:58 | 000,000,000 | ---D | C] -- C:\Programme\DivX [2008.11.26 14:57:06 | 000,163,840 | R--- | C] ( ) -- C:\WINDOWS\System32\ATIDEMGR.dll [9 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files - Modified Within 90 Days ========== [2010.05.19 20:04:53 | 000,571,904 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Kurz\Desktop\OTL.exe [2010.05.19 17:15:22 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010.05.19 17:11:45 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini [2010.05.19 16:58:42 | 003,691,277 | R--- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\ComboFix.exe [2010.05.19 16:57:35 | 000,000,182 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Trojanerboard.url [2010.05.19 16:57:08 | 000,012,598 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010.05.19 16:57:05 | 000,000,268 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-57989841-813497703-1708537768-1005.job [2010.05.19 16:16:54 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010.05.19 02:09:06 | 010,485,760 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\ntuser.dat [2010.05.19 02:09:06 | 000,000,300 | -HS- | M] () -- C:\Dokumente und Einstellungen\Kurz\ntuser.ini [2010.05.19 01:27:48 | 000,000,126 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Protectus.url [2010.05.18 17:47:50 | 000,100,908 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\SystemLook.exe [2010.05.18 12:09:07 | 000,293,376 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\6on713sg.exe [2010.05.17 17:56:29 | 000,000,203 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Avira-Forum.url [2010.05.17 17:47:24 | 000,000,166 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\IP.Adresse.url [2010.05.17 15:32:31 | 000,000,179 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\VirusTotal.url [2010.05.17 14:00:48 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2010.05.16 22:16:36 | 017,815,040 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Eigene Dateien\dbg_x86_6.11.1.404.msi [2010.05.16 13:58:38 | 000,002,495 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Microsoft Word.lnk [2010.05.16 03:56:14 | 006,931,306 | -H-- | M] () -- C:\Dokumente und Einstellungen\Kurz\Lokale Einstellungen\Anwendungsdaten\IconCache.db [2010.05.16 03:53:03 | 000,000,192 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\säubern.url [2010.05.14 20:04:03 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [2010.05.14 19:31:24 | 000,000,192 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\secunia online scanner.url [2010.05.14 19:10:14 | 000,001,715 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Reader 9.lnk [2010.05.14 18:24:24 | 000,101,376 | R--- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\ESBK.mbb [2010.05.14 18:24:24 | 000,099,328 | R--- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\ESBK.mb [2010.05.14 01:09:06 | 001,704,744 | ---- | M] (Skype Technologies S.A.) -- C:\Dokumente und Einstellungen\Kurz\Eigene Dateien\SkypeSetup.exe [2010.05.14 01:01:06 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-57989841-813497703-1708537768-1005.job [2010.05.14 00:59:28 | 000,278,528 | ---- | M] (Real Networks, Inc) -- C:\WINDOWS\System32\pncrt.dll [2010.05.03 17:53:56 | 000,304,152 | ---- | M] () -- C:\img2-001.raw [2010.04.29 15:39:38 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010.04.29 15:39:26 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010.04.26 15:58:12 | 000,256,512 | ---- | M] () -- C:\WINDOWS\PEV.exe [2010.04.22 14:57:32 | 000,000,184 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\HPDruckerTreiberWIN7.url [2010.04.20 15:09:41 | 000,000,161 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Kiebel.url [2010.04.20 14:54:49 | 000,000,246 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Mifcom.url [2010.04.19 20:13:38 | 000,000,172 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\CyberLink.url [2010.04.19 19:45:18 | 000,000,226 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Win7 Softwarel..url [2010.04.19 19:44:58 | 000,000,242 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Agando.url [2010.04.19 19:43:39 | 000,000,161 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\MS Office Softwarel..url [2010.04.19 18:59:48 | 000,000,266 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\PC Konfig..url [2010.04.17 17:12:35 | 000,000,280 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Dell.url [2010.04.09 13:40:24 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\atiicdxx.dat [2010.04.09 09:45:17 | 000,000,327 | -HS- | M] () -- C:\boot.ini [2010.04.08 20:15:48 | 000,001,481 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Windows-Explorer.lnk [2010.04.06 23:06:32 | 000,000,200 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Pokerranking.url [2010.04.06 21:41:35 | 000,000,961 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2010.04.06 21:38:59 | 000,386,013 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20100406-214135.backup [2010.04.06 20:43:22 | 000,386,013 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20100406-213859.backup [2010.04.06 19:08:03 | 000,032,768 | ---- | M] (SiS Corporation) -- C:\WINDOWS\System32\drivers\sisnicxp.sys [2010.04.06 13:50:19 | 000,000,177 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\PC´sbilliger.de.url [2010.04.05 23:31:33 | 010,652,999 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Eigene Dateien\hdclone.3.8.4a.fe.de.zip [2010.04.04 17:34:22 | 000,000,872 | ---- | M] () -- C:\WINDOWS\win.ini [2010.04.04 17:25:41 | 000,001,728 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\CyberLink PowerDVD 10.lnk [2010.04.03 19:12:40 | 000,000,063 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Anwendungsdaten\AVSMediaPlayer.m3u [2010.04.03 08:46:06 | 000,122,928 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010.04.03 04:33:42 | 000,019,280 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT [2010.04.02 23:44:17 | 000,000,196 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Videoload.url [2010.04.02 23:41:42 | 000,009,728 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.04.02 21:38:22 | 000,015,271 | ---- | M] (MediaTek Corporation) -- C:\WINDOWS\System32\drivers\FIDE.SYS [2010.04.02 20:07:14 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb [2010.04.02 20:07:14 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb [2010.04.02 17:14:39 | 001,070,274 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010.04.02 17:14:39 | 000,458,822 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat [2010.04.02 17:14:39 | 000,441,124 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010.04.02 17:14:39 | 000,084,326 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat [2010.04.02 17:14:39 | 000,071,060 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010.04.02 16:59:07 | 007,081,984 | ---- | M] () -- C:\Dokumente und Einstellungen\Kurz\ntuser.dat.rcbak [2010.03.30 16:18:53 | 000,368,128 | ---- | M] (Avira GmbH) -- C:\Dokumente und Einstellungen\Kurz\Desktop\removaltool-win32-de.exe [2010.03.29 21:59:41 | 000,001,677 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira AntiVir Control Center.lnk [2010.03.29 21:53:34 | 000,124,784 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys [2010.03.29 21:53:34 | 000,028,520 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys [2010.03.29 21:53:33 | 000,022,360 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys [2010.03.29 21:53:32 | 000,060,936 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys [2010.03.29 21:53:32 | 000,045,416 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys [2010.03.21 18:04:00 | 000,002,311 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Nero StartSmart.lnk [9 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files Created - No Company Name ========== [2010.05.19 16:58:30 | 003,691,277 | R--- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\ComboFix.exe [2010.05.19 01:27:43 | 000,000,126 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Protectus.url [2010.05.18 17:47:50 | 000,100,908 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\SystemLook.exe [2010.05.18 12:09:06 | 000,293,376 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\6on713sg.exe [2010.05.17 16:45:07 | 000,000,166 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\IP.Adresse.url [2010.05.16 22:16:35 | 017,815,040 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Eigene Dateien\dbg_x86_6.11.1.404.msi [2010.05.16 03:52:58 | 000,000,192 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\säubern.url [2010.05.16 02:50:22 | 000,000,203 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Avira-Forum.url [2010.05.16 02:49:24 | 000,000,182 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Trojanerboard.url [2010.05.14 18:58:38 | 000,001,715 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Reader 9.lnk [2010.05.14 01:00:22 | 000,000,276 | ---- | C] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-57989841-813497703-1708537768-1005.job [2010.05.14 01:00:22 | 000,000,268 | ---- | C] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-57989841-813497703-1708537768-1005.job [2010.05.14 00:48:09 | 000,000,276 | ---- | C] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [2010.05.14 00:38:50 | 000,000,192 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\secunia online scanner.url [2010.05.13 04:13:42 | 000,004,517 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\mbam-info.txt [2010.04.22 14:57:17 | 000,000,184 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\HPDruckerTreiberWIN7.url [2010.04.20 15:09:36 | 000,000,161 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Kiebel.url [2010.04.19 19:43:35 | 000,000,161 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\MS Office Softwarel..url [2010.04.19 19:38:37 | 000,000,226 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Win7 Softwarel..url [2010.04.19 19:26:58 | 000,000,242 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Agando.url [2010.04.19 19:14:15 | 000,000,246 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Mifcom.url [2010.04.17 00:04:33 | 000,000,266 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\PC Konfig..url [2010.04.09 13:40:24 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat [2010.04.09 12:17:53 | 000,000,179 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\VirusTotal.url [2010.04.08 17:03:01 | 000,000,257 | ---- | C] () -- C:\Boot.bak [2010.04.08 17:02:57 | 000,262,448 | ---- | C] () -- C:\cmldr [2010.04.08 16:58:54 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe [2010.04.08 16:58:54 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe [2010.04.08 16:58:54 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe [2010.04.08 16:58:54 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe [2010.04.08 16:58:54 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe [2010.04.06 13:49:56 | 000,000,177 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\PC´sbilliger.de.url [2010.04.05 23:31:32 | 010,652,999 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Eigene Dateien\hdclone.3.8.4a.fe.de.zip [2010.04.04 17:25:41 | 000,001,728 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\CyberLink PowerDVD 10.lnk [2010.04.04 15:45:15 | 000,000,280 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Dell.url [2010.04.03 04:38:21 | 000,000,063 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Anwendungsdaten\AVSMediaPlayer.m3u [2010.04.03 04:31:49 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\xvid.ax [2010.04.03 04:31:48 | 000,524,288 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2010.04.03 04:31:48 | 000,156,910 | ---- | C] () -- C:\WINDOWS\WMSysPr8.prx [2010.04.03 04:31:48 | 000,139,264 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2010.04.03 01:28:02 | 010,485,760 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\ntuser.dat [2010.04.02 22:48:23 | 000,000,172 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\CyberLink.url [2010.04.02 16:58:46 | 000,000,000 | -H-- | C] () -- C:\Dokumente und Einstellungen\Kurz\ntuser.dat.rctemp.LOG [2010.03.29 21:59:41 | 000,001,677 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira AntiVir Control Center.lnk [2010.03.28 00:53:57 | 000,000,196 | ---- | C] () -- C:\Dokumente und Einstellungen\Kurz\Desktop\Videoload.url [2009.01.04 13:21:41 | 000,000,691 | ---- | C] () -- C:\WINDOWS\wbocx.ini [2009.01.02 22:44:18 | 000,000,274 | ---- | C] () -- C:\WINDOWS\Clony2.ini [2009.01.02 21:58:26 | 000,000,326 | ---- | C] () -- C:\WINDOWS\dvdcreator.INI [2008.12.19 20:20:19 | 000,000,214 | ---- | C] () -- C:\WINDOWS\HP_48BitScanUpdatePatch.ini [2008.11.26 01:43:42 | 000,032,768 | ---- | C] () -- C:\WINDOWS\SIS_LIB.DLL [2008.09.17 18:24:36 | 000,015,498 | ---- | C] () -- C:\WINDOWS\VX1000.ini [2008.07.25 14:07:35 | 000,127,681 | R--- | C] () -- C:\WINDOWS\VGAsetup.ini [2008.07.25 14:06:52 | 000,049,265 | ---- | C] () -- C:\WINDOWS\System32\VGAunistlog.ini [2008.07.25 14:05:41 | 000,000,092 | ---- | C] () -- C:\WINDOWS\CMISETUP.INI [2008.07.25 14:05:41 | 000,000,026 | ---- | C] () -- C:\WINDOWS\CMCDPLAY.INI [2008.07.25 14:05:39 | 000,000,022 | ---- | C] () -- C:\WINDOWS\Wininit.ini [2008.07.25 14:05:36 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.dll [2008.07.25 14:05:31 | 000,028,672 | ---- | C] () -- C:\WINDOWS\CMIRmDriver.dll [2008.07.25 14:04:07 | 000,002,314 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini [2008.07.25 14:04:04 | 000,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2008.04.26 18:39:47 | 000,000,067 | ---- | C] () -- C:\WINDOWS\PmaCalc.INI [2007.12.27 14:18:59 | 000,000,153 | ---- | C] () -- C:\WINDOWS\disney.ini [2007.07.30 18:33:31 | 000,000,355 | ---- | C] () -- C:\WINDOWS\cgolfvr.ini [2007.07.03 16:47:27 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\drivers\CO_Mon.sys [2007.02.19 21:53:52 | 000,021,840 | ---- | C] () -- C:\WINDOWS\System32\SIntfNT.dll [2007.02.19 21:53:52 | 000,017,212 | ---- | C] () -- C:\WINDOWS\System32\SIntf32.dll [2007.01.18 15:46:09 | 000,000,189 | ---- | C] () -- C:\WINDOWS\SIERRA.INI [2006.11.17 20:43:02 | 000,000,000 | ---- | C] () -- C:\WINDOWS\hpqEmlSz.INI [2006.06.16 12:13:49 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iPlayer.INI [2006.05.15 15:51:40 | 000,042,132 | ---- | C] () -- C:\WINDOWS\XF2000.INI [2006.05.08 22:52:13 | 000,022,016 | ---- | C] () -- C:\WINDOWS\System32\prospeed_bmp2jpg.dll [2006.04.19 09:29:29 | 000,000,236 | ---- | C] () -- C:\WINDOWS\Rollemup.ini [2006.04.18 22:03:23 | 000,000,017 | ---- | C] () -- C:\WINDOWS\gfact.ini [2006.04.18 21:14:46 | 000,002,145 | ---- | C] () -- C:\WINDOWS\cncscore.ini [2006.04.18 20:16:12 | 000,000,047 | ---- | C] () -- C:\WINDOWS\PacWorld.ini [2005.11.02 21:28:42 | 000,000,064 | ---- | C] () -- C:\WINDOWS\3dpokerbandit.INI [2005.06.06 17:53:50 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2005.05.17 23:37:57 | 000,000,677 | ---- | C] () -- C:\WINDOWS\bricklyr.ini [2005.05.17 17:48:57 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2005.05.17 16:50:53 | 000,001,082 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2004.06.29 15:47:28 | 000,003,072 | ---- | C] () -- C:\WINDOWS\WinIo.sys [2002.03.05 12:35:49 | 000,282,112 | ---- | C] () -- C:\WINDOWS\System32\cncs232.dll [2002.01.25 08:04:50 | 000,005,440 | ---- | C] () -- C:\WINDOWS\System32\mciwa16.dll [2002.01.25 08:04:50 | 000,000,221 | ---- | C] () -- C:\WINDOWS\System32\pspsbext.ini [2002.01.25 08:04:50 | 000,000,221 | ---- | C] () -- C:\WINDOWS\System32\pspfidrv.ini [2002.01.25 08:04:50 | 000,000,221 | ---- | C] () -- C:\WINDOWS\System32\pspfbase.ini [2002.01.25 08:04:50 | 000,000,221 | ---- | C] () -- C:\WINDOWS\System32\pspaudrv.ini [2002.01.25 08:04:50 | 000,000,221 | ---- | C] () -- C:\WINDOWS\System32\pspapdrv.ini [2002.01.25 08:04:50 | 000,000,221 | ---- | C] () -- C:\WINDOWS\System32\mciwaw95.ini [2002.01.25 08:04:50 | 000,000,221 | ---- | C] () -- C:\WINDOWS\System32\mcipspwa.ini [2002.01.25 08:04:50 | 000,000,221 | ---- | C] () -- C:\WINDOWS\System32\mcipspct.ini [2002.01.25 08:04:50 | 000,000,220 | ---- | C] () -- C:\WINDOWS\System32\pspwave.ini [2002.01.25 08:04:50 | 000,000,219 | ---- | C] () -- C:\WINDOWS\System32\pspdss.ini [2002.01.25 08:04:50 | 000,000,219 | ---- | C] () -- C:\WINDOWS\System32\pspddi.ini ========== LOP Check ========== [2007.12.21 00:21:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Premium(2) [2007.12.21 00:21:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Premium(3) [2007.12.21 00:20:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Premium(4) [2007.12.21 00:19:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AntiVir PersonalEdition Premium(5) [2010.03.21 17:19:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Canneverbe Limited [2007.09.10 16:36:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Cloanto [2008.01.26 17:03:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ElsterFormular [2010.04.02 18:24:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\fluxDVD [2009.01.15 18:37:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\HDD Thermometer [2010.04.03 02:08:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\mpDRM [2010.05.18 01:40:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Network Security Task Manager [2010.05.18 01:42:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SecTaskMan [2007.09.13 11:57:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\T-Online [2009.09.17 20:35:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Teleca [2010.05.18 16:01:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Temp [2010.03.21 17:19:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kurz\Anwendungsdaten\Canneverbe Limited [2005.05.17 17:56:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kurz\Anwendungsdaten\CDZilla [2009.01.02 21:24:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kurz\Anwendungsdaten\FarStone [2008.07.24 16:05:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kurz\Anwendungsdaten\gtopala [2009.01.05 22:15:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kurz\Anwendungsdaten\HDD Thermometer [2007.09.13 12:01:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kurz\Anwendungsdaten\T-Online [2009.09.17 20:38:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kurz\Anwendungsdaten\Teleca [2007.07.03 16:20:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kurz\Anwendungsdaten\WholeSecurity [2008.11.11 16:29:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Kurz\Anwendungsdaten\Windows Live Writer ========== Purity Check ========== ========== Custom Scans ========== < MD5 for: RUNDLL32.EXE > [2008.04.14 04:22:59 | 000,033,792 | ---- | M] (Microsoft Corporation) MD5=F6B34CD47CAF6D68106B9F8055F35C50 -- C:\WINDOWS\ServicePackFiles\i386\rundll32.exe [2008.04.14 04:22:59 | 000,033,792 | ---- | M] (Microsoft Corporation) MD5=F6B34CD47CAF6D68106B9F8055F35C50 -- C:\WINDOWS\system32\rundll32.exe < End of report > |
19.05.2010, 20:13 | #43 |
/// Selecta Jahrusso | Fehlermeldung RUNDLL......flacor.dat Malware? Deinstalliere bitte deine aktuelle Version von Adobe Reader Start--> Systemsteuerung--> Software--> Adobe Reader und lade dir die neue Version von Hier herunter Als alternative würde ich dir den schlankeren Foxit Reader empfehlen Berichte ob das Problem immer noch besteht.
__________________ mfg, Daniel ASAP & UNITE Member Alliance of Security Analysis Professionals Unified Network of Instructors and Trusted Eliminators Lerne, zurück zu schlagen und unterstütze uns! TB Akademie |
19.05.2010, 20:29 | #44 |
| Fehlermeldung RUNDLL......flacor.dat Malware? ok, werd´ich gleich machen......sind sonst die Log´s unauffällig? vorerst bedanke ich mich schon mal, Grüsse....Sascha |
19.05.2010, 21:09 | #45 |
| Fehlermeldung RUNDLL......flacor.dat Malware? shit.............., Problem besteht immernoch......... |
Themen zu Fehlermeldung RUNDLL......flacor.dat Malware? |
adobe, adobe updater, antivir, dateien, dll, exe, fehlermeldung, flacor.dat, gelöscht, malware, malware?, malwarebytes, modul, nach updates, neu, problem, programm, prüfen, registry, rundll, start von windows, suche, system, updates, virus, virus total, windows |