Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)
-   -   Ständiges öffnen von Pop-Ups beim Internet Explorer (https://www.trojaner-board.de/149101-staendiges-oeffnen-pop-ups-beim-internet-explorer.html)

atm 02.02.2014 13:12
Ständiges öffnen von Pop-Ups beim Internet Explorer
 
Hallo zusammen,

ich habe seit ein paar Tagen mit dem Internet Explorer das Problem, dass beim Anklicken eines Links ständig ein Popup-Fenster aufgeht.
Ich jabe schon versucht, dass mit ADWCleaner zu löschen er zeigt mir aber beim Explorer nichts zu löschen an.
Kann mir jemand einen Tipp geben, wie ich weiter verfahren könnte.
Ich benutze Windows 7 SP1 und den IE 11.09600.16476

Vielen Dank und viele Grüße
atm

schrauber 02.02.2014 13:12
hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


atm 06.02.2014 05:04
...vielen Dank für Deine Antwort.
Im nachfolgenden nun die FRST und die Addition Textdateien.
Ich hoffe Du kannst mir weiterhelfen.

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 05-02-2014
Ran by Torsten (administrator) on DELL-E6500 on 06-02-2014 04:55:09
Running from C:\Users\Torsten\Downloads
Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) ===================

(Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe
(Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe
(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(DT Soft Ltd) C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\ProgramData\DataCardService\HWDeviceService.exe
() C:\Program Files\Canon\IJPLM\ijplmsvc.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DataCardService\DCSHelper.exe
() C:\ProgramData\Mobile Partner\OnlineUpdate\ouc.exe
() C:\Program Files\Universal Updater\UpdaterService.exe
() C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Acronis) C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Acronis) C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe
() C:\Program Files\HD Streamer\BackgroundHost.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil32_11_9_900_170_ActiveX.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(SWE Sven Ritter) C:\Program Files\SpeedProject\SpeedCommander 13\SpeedCommander.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AVP] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO)
HKLM\...\Run: [] - [X]
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2013-04-13] (Microsoft Corporation)
HKU\S-1-5-21-4164519292-1603033390-622400893-1000\...\Run: [iCloudServices] - C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
HKU\S-1-5-21-4164519292-1603033390-622400893-1000\...\MountPoints2: Q - "Q:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-4164519292-1603033390-622400893-1000\...\MountPoints2: {2843bcd3-c289-11e2-9e66-5c260a23a5ad} - N:\setup.exe
HKU\S-1-5-21-4164519292-1603033390-622400893-1000\...\MountPoints2: {3003b67e-b5f6-11e2-b04c-5c260a23a5ad} - P:\LaunchU3.exe -a
HKU\S-1-5-21-4164519292-1603033390-622400893-1000\...\MountPoints2: {38f8e80e-a67c-11e2-a551-5c260a23a5ad} - "Q:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-4164519292-1603033390-622400893-1000\...\MountPoints2: {78844963-3d1d-11e3-a1c9-5c260a23a5ad} - O:\AutoRun.exe
HKU\S-1-5-21-4164519292-1603033390-622400893-1000\...\MountPoints2: {a0cb0eb8-3f92-11e3-b12d-5c260a23a5ad} - E:\AutoRun.exe
AppInit_DLLs: C:\PROGRA~1\SearchProtect\SearchProtect\bin\SPVC32Loader.dll => File Not Found
Startup: C:\Users\Torsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB870B32E4D71CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.spiegel.de/
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E62696E672E636F6D2F7365617263683F713D7B7365617263685465726D737D267372633D49452D536561726368426F7826464F524D3D494531305352&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&k=0
SearchScopes: HKCU - {07970095-1CEE-49F5-BA31-A67BD113BEED} URL = hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&mode=bounce&k=0
SearchScopes: HKCU - {1E1F3780-82D8-4BCC-AAE6-4BA3EE3C508A} URL = hxxp://search.ebay.de.anonymize-me.de/?to=656261792E6465&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&mode=bounce&k=0
SearchScopes: HKCU - {3B0AF5A7-8466-4DAF-B4E8-E324F5663615} URL = hxxp://www.pricerunner.de.anonymize-me.de/?to=707269636572756E6E65722E6465&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&mode=bounce&k=0
SearchScopes: HKCU - {5CAC6241-3277-40AA-88CB-D0CE6D2F276A} URL = hxxp://www.amazon.de.anonymize-me.de/?to=616D617A6F6E2E6465&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&mode=bounce&k=0
SearchScopes: HKCU - {5E0B4CFD-B88D-45F3-8031-9675FFCD2814} URL = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&mode=bounce&k=0
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E62696E672E636F6D2F7365617263683F713D7B7365617263685465726D737D26464F524D3D494538535243&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&k=0
SearchScopes: HKCU - {AB2ACFB9-6A3A-4D36-B7D3-95DFD5CD2749} URL = hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&mode=bounce&k=0
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Adobe Acrobat Create PDF Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO: HD Streamer - {E6062A33-016E-4BDA-A6F1-890D989F8656} - C:\Program Files\HD Streamer\ScriptHost.dll (HD Streamer)
BHO: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Show-Password - {f9b7dbed-3b15-45f1-9011-938749d35eb1} - C:\Program Files\Show-Password\150.dll ()
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{919D1073-1333-4E3C-8913-138C9D842DDF}: [NameServer]193.189.244.225 193.189.244.206
Tcpip\..\Interfaces\{BB2A31FC-2B7A-466A-A342-943C63115A01}: [NameServer]193.189.244.225 193.189.244.206

FireFox:
========
FF ProfilePath: C:\Users\Torsten\AppData\Roaming\Mozilla\Firefox\Profiles\qnng9lbe.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_43.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @Nero.com/KM - C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Acrobat - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Torsten\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: HD Streamer - C:\Users\Torsten\AppData\Roaming\Mozilla\Firefox\Profiles\qnng9lbe.default\Extensions\hd_streamer@iMedia [2014-02-05]
FF HKLM\...\Firefox\Extensions:  - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com [2013-04-15]
FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com [2013-04-15]
FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com [2013-04-15]
FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2013-04-17]
FF HKLM\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com [2013-04-15]
FF HKLM\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com [2013-04-15]
FF HKCU\...\Firefox\Extensions: [{a711367d-39ac-4cd2-8b4f-b9602e6df838}] - C:\Program Files\Show-Password\150.xpi
FF Extension: Show-Password - C:\Program Files\Show-Password\150.xpi [2014-01-29]

========================== Services (Whitelisted) =================

R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [831360 2013-02-15] (Acronis)
R2 afcdpsrv; C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe [3816440 2013-04-19] (Acronis)
R2 AVP; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO)
R2 Credential Vault Host Control Service; C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe [827272 2013-03-07] (Broadcom Corporation)
R2 Credential Vault Host Storage; C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe [32648 2013-03-07] (Broadcom Corporation)
R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [271712 2011-03-14] ()
R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [107912 2008-10-09] ()
S2 Mobile Partner. RunOuc; C:\Program Files\Mobile Partner\UpdateDog\ouc.exe [657504 2012-11-01] ()
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
R2 OS Selector; C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe [2155848 2011-11-15] ()
R2 syncagentsrv; C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7094592 2013-03-20] (Acronis)
R2 UniversalUpdater; C:\Program Files\Universal Updater\UpdaterService.exe [402872 2014-01-29] ()
S3 wifimansvc; C:\Program Files\Mobile Partner\eap\wifimansvc.exe [605696 2012-11-10] ()

==================== Drivers (Whitelisted) ====================

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [121248 2012-08-26] (SlySoft, Inc.)
R0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [14080 2013-09-29] (<Glarysoft Ltd>)
R3 cvusbdrv; C:\Windows\System32\Drivers\cvusbdrv.sys [41480 2013-03-07] (Broadcom Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-05-22] (DT Soft Ltd)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-16] (Elaborate Bytes AG)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [135776 2013-12-12] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [595552 2013-10-10] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [25696 2013-12-12] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25696 2013-10-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-10-10] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [44000 2013-06-19] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [145040 2013-04-24] (Kaspersky Lab ZAO)
S3 NPF; C:\Windows\System32\drivers\NPF.sys [35088 2012-09-22] (CACE Technologies, Inc.)
S3 ProcObsrv; C:\Program Files\Glary Utilities 3\ProcObsrv.sys [11552 2013-10-09] (Glarysoft Ltd)
S3 tdrpman; C:\Windows\System32\DRIVERS\tdrpman.sys [888640 2013-04-19] (Acronis International GmbH)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [736192 2013-04-19] (Acronis International GmbH)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [130488 2013-04-19] (Acronis)
R0 vididr; C:\Windows\System32\DRIVERS\vididr.sys [116000 2013-04-19] (Acronis International GmbH)
R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [85280 2013-04-19] (Acronis International GmbH)
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [74848 2013-04-24] (Kaspersky Lab ZAO)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-06 04:55 - 2014-02-06 04:55 - 00017387 _____ () C:\Users\Torsten\Downloads\FRST.txt
2014-02-06 04:54 - 2014-02-06 04:55 - 00000000 ____D () C:\FRST
2014-02-06 04:53 - 2014-02-06 04:53 - 01139200 _____ (Farbar) C:\Users\Torsten\Downloads\FRST.exe
2014-02-05 06:23 - 2014-02-05 06:23 - 00000000 ____D () C:\Users\Torsten\Documents\StreamTransport
2014-02-05 06:22 - 2014-02-06 04:41 - 00000496 _____ () C:\Windows\Tasks\SpeedyPC Update Version3 Startup Task.job
2014-02-05 06:22 - 2014-02-05 06:26 - 00000472 _____ () C:\Windows\Tasks\SpeedyPC Registration3.job
2014-02-05 06:22 - 2014-02-05 06:26 - 00000444 _____ () C:\Windows\Tasks\SpeedyPC Update Version3.job
2014-02-05 06:22 - 2014-02-05 06:26 - 00000400 _____ () C:\Windows\Tasks\SpeedyPC Pro.job
2014-02-05 06:21 - 2014-02-05 06:21 - 00000000 ____D () C:\Program Files\Universal Updater
2014-02-05 06:20 - 2014-02-05 06:20 - 00001049 _____ () C:\Users\Public\Desktop\StreamTransport.lnk
2014-02-05 06:20 - 2014-02-05 06:20 - 00000000 ____D () C:\Program Files\StreamTransport
2014-02-05 06:20 - 2014-02-05 06:20 - 00000000 ____D () C:\Program Files\HD Streamer
2014-02-02 18:58 - 2014-02-02 18:58 - 00000000 ____D () C:\Users\Public\Documents\DAEMON Tools Images
2014-02-01 06:27 - 2014-02-01 06:27 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-01 06:22 - 2014-02-06 04:41 - 00000504 _____ () C:\Windows\setupact.log
2014-02-01 06:22 - 2014-02-01 06:22 - 00000324 _____ () C:\Windows\PFRO.log
2014-02-01 06:22 - 2014-02-01 06:22 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-01 05:54 - 2014-02-01 05:54 - 01166132 _____ () C:\Users\Torsten\Downloads\adwcleaner3.018.exe
2014-02-01 05:40 - 2014-02-01 05:40 - 00116801 _____ () C:\Users\Torsten\Desktop\bookmarks.html
2014-01-29 08:43 - 2014-01-29 08:49 - 00000316 _____ () C:\Windows\wininit.ini
2014-01-29 08:42 - 2014-02-06 04:44 - 00000384 _____ () C:\Windows\Tasks\Show-Password Update.job
2014-01-29 08:42 - 2014-01-29 16:28 - 00000000 ____D () C:\Program Files\Show-Password
2014-01-29 08:37 - 2014-01-29 08:37 - 06424632 _____ (ManiacTools.com ) C:\Users\Torsten\Downloads\m4a-to-mp3-81converter.exe
2014-01-29 07:36 - 2014-02-03 06:22 - 00000044 _____ () C:\Users\Torsten\Desktop\RadioBob.txt
2014-01-27 06:15 - 2014-01-27 06:15 - 00012091 _____ () C:\Users\Torsten\Documents\Puntkeuntersuchung.xlsx
2014-01-25 07:26 - 2014-01-25 07:26 - 00000000 ____D () C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2014-01-25 07:26 - 2014-01-25 07:26 - 00000000 ____D () C:\Program Files\iTunes
2014-01-25 07:26 - 2014-01-25 07:26 - 00000000 ____D () C:\Program Files\iPod
2014-01-18 13:40 - 2014-01-18 13:40 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\Canneverbe Limited
2014-01-18 13:40 - 2014-01-18 13:40 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2014-01-18 13:40 - 2014-01-18 13:40 - 00000000 ____D () C:\Program Files\CDBurnerXP
2014-01-18 13:34 - 2014-01-18 13:35 - 04986624 _____ (Canneverbe Limited ) C:\Users\Torsten\Downloads\cdbxp_setup_4.5.2.4478_minimal.exe
2014-01-15 20:57 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 20:57 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 20:57 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 20:57 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 20:57 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 20:57 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 20:57 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 20:57 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 20:57 - 2013-11-26 11:10 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

==================== One Month Modified Files and Folders =======

2014-02-06 04:55 - 2014-02-06 04:55 - 00017387 _____ () C:\Users\Torsten\Downloads\FRST.txt
2014-02-06 04:55 - 2014-02-06 04:54 - 00000000 ____D () C:\FRST
2014-02-06 04:53 - 2014-02-06 04:53 - 01139200 _____ (Farbar) C:\Users\Torsten\Downloads\FRST.exe
2014-02-06 04:49 - 2009-07-14 05:34 - 00017120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-06 04:49 - 2009-07-14 05:34 - 00017120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-06 04:47 - 2013-04-13 19:04 - 01498506 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-06 04:46 - 2013-04-13 19:03 - 01597250 _____ () C:\Windows\WindowsUpdate.log
2014-02-06 04:44 - 2014-01-29 08:42 - 00000384 _____ () C:\Windows\Tasks\Show-Password Update.job
2014-02-06 04:42 - 2013-04-15 03:49 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-02-06 04:41 - 2014-02-05 06:22 - 00000496 _____ () C:\Windows\Tasks\SpeedyPC Update Version3 Startup Task.job
2014-02-06 04:41 - 2014-02-01 06:22 - 00000504 _____ () C:\Windows\setupact.log
2014-02-06 04:41 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-05 06:26 - 2014-02-05 06:22 - 00000472 _____ () C:\Windows\Tasks\SpeedyPC Registration3.job
2014-02-05 06:26 - 2014-02-05 06:22 - 00000444 _____ () C:\Windows\Tasks\SpeedyPC Update Version3.job
2014-02-05 06:26 - 2014-02-05 06:22 - 00000400 _____ () C:\Windows\Tasks\SpeedyPC Pro.job
2014-02-05 06:26 - 2013-09-12 04:28 - 00000000 ____D () C:\AdwCleaner
2014-02-05 06:23 - 2014-02-05 06:23 - 00000000 ____D () C:\Users\Torsten\Documents\StreamTransport
2014-02-05 06:21 - 2014-02-05 06:21 - 00000000 ____D () C:\Program Files\Universal Updater
2014-02-05 06:20 - 2014-02-05 06:20 - 00001049 _____ () C:\Users\Public\Desktop\StreamTransport.lnk
2014-02-05 06:20 - 2014-02-05 06:20 - 00000000 ____D () C:\Program Files\StreamTransport
2014-02-05 06:20 - 2014-02-05 06:20 - 00000000 ____D () C:\Program Files\HD Streamer
2014-02-05 05:37 - 2013-05-22 03:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-03 06:22 - 2014-01-29 07:36 - 00000044 _____ () C:\Users\Torsten\Desktop\RadioBob.txt
2014-02-03 05:07 - 2013-05-05 10:03 - 00000000 ____D () C:\Users\Torsten\BookScan
2014-02-03 04:25 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-02-02 18:59 - 2013-05-22 04:47 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\DAEMON Tools Pro
2014-02-02 18:58 - 2014-02-02 18:58 - 00000000 ____D () C:\Users\Public\Documents\DAEMON Tools Images
2014-02-02 11:24 - 2013-05-11 04:53 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\uTorrent
2014-02-02 10:48 - 2013-04-17 09:54 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-02-02 10:38 - 2013-04-16 16:23 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\vlc
2014-02-01 06:28 - 2013-04-13 19:15 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\Mozilla
2014-02-01 06:27 - 2014-02-01 06:27 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-01 06:27 - 2013-12-10 19:37 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-01 06:22 - 2014-02-01 06:22 - 00000324 _____ () C:\Windows\PFRO.log
2014-02-01 06:22 - 2014-02-01 06:22 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-01 05:54 - 2014-02-01 05:54 - 01166132 _____ () C:\Users\Torsten\Downloads\adwcleaner3.018.exe
2014-02-01 05:40 - 2014-02-01 05:40 - 00116801 _____ () C:\Users\Torsten\Desktop\bookmarks.html
2014-01-29 16:28 - 2014-01-29 08:42 - 00000000 ____D () C:\Program Files\Show-Password
2014-01-29 09:00 - 2013-04-17 11:43 - 00000000 ____D () C:\Users\Torsten\AppData\Local\CrashDumps
2014-01-29 09:00 - 2013-04-13 19:43 - 00000000 ____D () C:\Windows\Panther
2014-01-29 08:49 - 2014-01-29 08:43 - 00000316 _____ () C:\Windows\wininit.ini
2014-01-29 08:37 - 2014-01-29 08:37 - 06424632 _____ (ManiacTools.com ) C:\Users\Torsten\Downloads\m4a-to-mp3-81converter.exe
2014-01-27 06:15 - 2014-01-27 06:15 - 00012091 _____ () C:\Users\Torsten\Documents\Puntkeuntersuchung.xlsx
2014-01-25 07:27 - 2014-01-06 05:02 - 00000455 _____ () C:\Users\Torsten\Desktop\Hörbücher.txt
2014-01-25 07:26 - 2014-01-25 07:26 - 00000000 ____D () C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2014-01-25 07:26 - 2014-01-25 07:26 - 00000000 ____D () C:\Program Files\iTunes
2014-01-25 07:26 - 2014-01-25 07:26 - 00000000 ____D () C:\Program Files\iPod
2014-01-25 07:26 - 2013-04-16 05:40 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-01-25 07:24 - 2013-04-16 05:40 - 00000000 ____D () C:\ProgramData\Apple
2014-01-21 04:25 - 2013-07-11 03:42 - 00000000 ____D () C:\Program Files\Google
2014-01-20 21:07 - 2013-04-17 10:24 - 00000000 ____D () C:\Windows\pss
2014-01-20 21:06 - 2013-07-11 03:42 - 00000000 ____D () C:\Users\Torsten\AppData\Local\Google
2014-01-20 20:33 - 2013-04-16 15:32 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-01-20 20:33 - 2013-04-15 10:01 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-01-20 20:24 - 2013-04-17 09:40 - 00000000 ____D () C:\Users\Torsten\AppData\Local\Adobe
2014-01-20 05:03 - 2009-07-14 05:53 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-19 06:01 - 2013-04-15 09:54 - 00000000 ____D () C:\Users\Torsten\AppData\Local\Lexware
2014-01-19 06:00 - 2013-04-15 09:54 - 00000000 ____D () C:\Program Files\Common Files\Lexware
2014-01-19 06:00 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Help
2014-01-18 13:40 - 2014-01-18 13:40 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\Canneverbe Limited
2014-01-18 13:40 - 2014-01-18 13:40 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2014-01-18 13:40 - 2014-01-18 13:40 - 00000000 ____D () C:\Program Files\CDBurnerXP
2014-01-18 13:35 - 2014-01-18 13:34 - 04986624 _____ (Canneverbe Limited ) C:\Users\Torsten\Downloads\cdbxp_setup_4.5.2.4478_minimal.exe
2014-01-16 04:44 - 2009-07-14 05:33 - 03826160 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-15 21:18 - 2013-07-15 11:28 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 21:16 - 2013-04-13 19:27 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-10 20:48 - 2013-04-16 14:30 - 00000000 ____D () C:\Program Files\JDownloader
2014-01-07 05:17 - 2013-04-17 09:59 - 00000000 ____D () C:\ProgramData\CanonIJ

Some content of TEMP:
====================
C:\Users\Torsten\AppData\Local\Temp\hd_streamer_install_new.exe
C:\Users\Torsten\AppData\Local\Temp\Quarantine.exe
C:\Users\Torsten\AppData\Local\Temp\SSStub_Somo_SpeedyPC.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-30 06:44

==================== End Of Log ============================
--- --- ---

--- --- ---




Code:
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 05-02-2014
Ran by Torsten at 2014-02-06 04:55:28
Running from C:\Users\Torsten\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Kaspersky Internet Security (Enabled - Up to date) {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
AS: Kaspersky Internet Security (Enabled - Up to date) {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Internet Security (Enabled) {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}

==================== Installed Programs ======================

µTorrent (HKCU Version: 3.3.2.30303 - BitTorrent Inc.)
7-Zip 9.20 (Version:  - )
ACDSee 15 (Version: 15.0.169 - ACD Systems International Inc.)
ACDSee 16 (Version: 16.1.88 - ACD Systems International Inc.)
Acronis*Disk*Director*11*Home (Version: 11.0.2343 - Acronis)
Adobe Acrobat XI Pro (Version: 11.0.02 - Adobe Systems)
Adobe Flash Player 11 ActiveX (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (Version: 12.0.0.43 - Adobe Systems Incorporated)
AnyDVD (Version: 7.1.5.0 - SlySoft)
Apple Application Support (Version: 3.0 - Apple Inc.)
Apple Mobile Device Support (Version: 7.1.0.32 - Apple Inc.)
Apple Software Update (Version: 2.1.3.127 - Apple Inc.)
Ashampoo Music Studio 4 v.4.0.8 (Version: 4.0.8 - Ashampoo GmbH & Co. KG)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
calibre (Version: 1.3.0 - Kovid Goyal)
Canon Inkjet Printer/Scanner/Fax Extended Survey Program (Version:  - )
Canon iP4500 series (Version:  - )
Canon iP4500 series Benutzerregistrierung (Version:  - )
Canon MP Navigator EX 2.1 (Version:  - )
Canon My Printer (Version:  - )
Canon Utilities Solution Menu (Version:  - )
CanoScan LiDE 700F Scanner Driver (Version:  - )
CCleaner (Version: 4.00 - Piriform)
CDBurnerXP (Version: 4.5.2.4478 - CDBurnerXP)
CD-LabelPrint (Version:  - )
CloneDVD2 (Version: 2.9.3.0 - Elaborate Bytes)
DAEMON Tools Pro (Version: 5.1.0.0333 - DT Soft Ltd)
DDBAC (Version: 5.3.21 - DataDesign)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (Version:  - Microsoft)
Dell ControlVault Host Components Installer (Version: 2.3.309.1625 - Broadcom Corporation)
Duden Patch 3261 (Version: 9.0.0 - Bibliographisches Institut GmbH)
Duden-Rechtschreibprüfung PLUS (Version: 9.0.0 - Bibliographisches Institut GmbH)
foobar2000 v1.2.9 (Version: 1.2.9 - Peter Pawlowski)
Glary Utilities 2.56.0.1822 (Version: 2.56.0.1822 - Glarysoft Ltd)
Glary Utilities 3.9.3 (Version: 3.9.3.142 - Glarysoft Ltd)
HD Streamer (Version: 1.1.4.0 - HD Streamer)
iCloud (Version: 3.1.0.40 - Apple Inc.)
Iminent (Version: 6.25.21.0 - Iminent) Hidden <==== ATTENTION
IrfanView (remove only) (Version: 4.35 - Irfan Skiljan)
iTunes (Version: 11.1.4.62 - Apple Inc.)
Java(TM) 6 Update 21 (Version: 6.0.210 - Oracle)
JDownloader 0.9 (Version: 0.9 - AppWork GmbH)
Kaspersky Internet Security 2013 (Version: 13.0.1.4190 - Kaspersky Lab)
Kaspersky Internet Security 2013 (Version: 13.0.1.4190 - Kaspersky Lab) Hidden
K-Lite Mega Codec Pack 9.8.0 (Version: 9.8.0 - )
LameXP v4.08 (Version: 4.08 Final-1 [Build #1338] - LoRd_MuldeR <mulder2@gmx.de>)
Langenscheidt Grammatiktrainer 6.0 Englisch (Version: 01.00.00.00 - Langenscheidt)
Lexware Info Service (Version: 2.90.00.0009 - Haufe-Lexware GmbH & Co.KG)
Lexware online banking (Version: 19.00.00.0059 - Haufe-Lexware GmbH & Co.KG)
lingDIALOG (Version: 3.0908 - WEVOSYS)
lingDIALOG (Version: 3.0908 - WEVOSYS) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook Connector (Version: 14.0.6123.5001 - Microsoft Corporation)
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional 2010 (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Proof (English) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft_VC80_CRT_x86 (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (Version: 1.00.0000 - Adobe) Hidden
Mobile Partner (Version: 23.009.05.03.1014 - Huawei Technologies Co.,Ltd)
Mozilla Firefox 26.0 (x86 de) (Version: 26.0 - Mozilla)
Mozilla Maintenance Service (Version: 26.0 - Mozilla)
Mp3tag v2.55a (Version: v2.55a - Florian Heidenreich)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation)
Nero 12 (Version: 12.0.02900 - Nero AG)
Nero Audio Pack 1 (Version: 11.0.11500.110.0 - Nero AG) Hidden
Nero BackItUp (Version: 12.0.6002 - Nero AG) Hidden
Nero BackItUp Help (CHM) (Version: 12.0.8000 - Nero AG) Hidden
Nero Blu-ray Player (Version: 12.0.17700 - Nero AG) Hidden
Nero Blu-ray Player Help (CHM) (Version: 12.0.9000 - Nero AG) Hidden
Nero Burning ROM (Version: 12.0.28001 - Nero AG) Hidden
Nero Burning ROM Help (CHM) (Version: 12.0.3000 - Nero AG) Hidden
Nero ControlCenter (Version: 11.0.15500 - Nero AG) Hidden
Nero ControlCenter Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden
Nero Core Components (Version: 11.0.18900 - Nero AG) Hidden
Nero Disc Menus Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero Effects Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero Express (Version: 12.0.28001 - Nero AG) Hidden
Nero Express Help (CHM) (Version: 12.0.5000 - Nero AG) Hidden
Nero Kwik Media (Version: 1.18.19600 - Nero AG) Hidden
Nero Kwik Media Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden
Nero Kwik Themes Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero PiP Effects Basic (Version: 12.0.11500 - Nero AG) Hidden
Nero Recode (Version: 12.0.31001 - Nero AG) Hidden
Nero Recode Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden
Nero RescueAgent (Version: 12.0.10002 - Nero AG) Hidden
Nero RescueAgent Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden
Nero SharedVideoCodecs (Version: 1.0.12100.2.0 - Nero AG) Hidden
Nero Update (Version: 11.0.11800.31.0 - Nero AG) Hidden
Nero Video (Version: 12.0.8000 - Nero AG) Hidden
Nero Video Help (CHM) (Version: 12.0.7000 - Nero AG) Hidden
neroxml (Version: 1.0.0 - Nero AG) Hidden
Plustek OpticBook 3600 (Version: 4.0.2 - )
Prerequisite installer (Version: 12.0.0003 - Nero AG) Hidden
Quicken 2014 (Version: 21.36.00.0178 - Haufe-Lexware GmbH & Co.KG)
Quicken Import Export Server Jubiläumsversion (Version: 20.30.00.0099 - Haufe-Lexware GmbH & Co.KG)
Quicken Jubiläumsversion (Version: 20.36.00.0134 - Haufe-Lexware GmbH & Co.KG)
RICOH Media Driver ver.2.07.01.01 (Version: 2.07.01.01 - RICOH)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (Version:  - Microsoft) Hidden
Show-Password (Version:  - Show-Password LTD)
Snagit 11 (Version: 11.0.1 - TechSmith Corporation)
SpeedCommander 13 (Version: 13.60.6500 - SWE Sven Ritter)
StreamTransport version: 1.1.0.2 (Version:  - )
True Image 2013 (Version: 16.0.6514 - Acronis) Hidden
Unity Web Player (HKCU Version:  - Unity Technologies ApS)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (Version:  - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (Version:  - Microsoft)
VLC media player 2.0.6 (Version: 2.0.6 - VideoLAN)
Vokabeltrainer-Update 6.0.23 (Version: 6.0.23 - Langenscheidt)
Welcome App (Start-up experience) (Version: 12.0.15000 - Nero AG) Hidden
Wertpapieranalyse 2012 (Version: 1.01.0006 - Haufe-Lexware GmbH & Co. KG)
Windows Mobile Device Updater Component (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
WinRAR (Version:  - )
Zune (Version: 04.08.2345.00 - Microsoft Corporation)
Zune (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (CHS) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (CHT) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (CSY) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (DAN) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (DEU) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (ELL) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (ESP) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (FIN) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (FRA) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (HUN) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (IND) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (ITA) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (JPN) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (KOR) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (MSL) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (NLD) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (NOR) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (PLK) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (PTB) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (PTG) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (RUS) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden
Zune Language Pack (SVE) (Version: 04.08.2345.00 - Microsoft Corporation) Hidden

==================== Restore Points  =========================

22-01-2014 03:35:38 Windows Update
25-01-2014 04:44:23 Windows Update
29-01-2014 04:41:55 Windows Update
05-02-2014 04:01:25 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {2525B4F8-8B1A-430A-941A-EF8576DE4F2F} - System32\Tasks\FinishInstall igdhbblpcellaljokkpfhcjlagemhgjl => C:\Users\Torsten\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl\MinibarChrome.exe [2013-06-30] (Sien SA)
Task: {456694FD-655A-485E-B21D-76AA3F602BC0} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-03-25] (Piriform Ltd)
Task: {69209DBC-987B-42F5-B393-87CF7163B9C9} - System32\Tasks\SpeedyPC Update Version3 => C:\Program Files\Common Files\SpeedyPC Software\UUS3\SpeedyPC_Update3.exe
Task: {742193FE-CEB3-4EC5-B9A2-109C38E4446E} - System32\Tasks\Show-Password Update => C:\Program Files\Show-Password\Show_Password.exe [2014-01-29] ()
Task: {89D44C64-394B-4560-9D9A-109A93BD23E6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-20] (Adobe Systems Incorporated)
Task: {9DE9B9CD-2247-421A-B076-D4861A8A5960} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {AA6F7461-9DED-4EFF-88DD-5761E4487EA5} - System32\Tasks\GlaryInitialize 3 => C:\Program Files\Glary Utilities 3\Initialize.exe [2013-10-09] (Glarysoft Ltd)
Task: {B617F0CD-4B5B-4C36-86CB-2591541F8783} - System32\Tasks\SpeedyPC Registration3 => Rundll32.exe "C:\Program Files\Common Files\SpeedyPC Software\UUS3\UUS3.dll" RunUns
Task: {C03DF7A2-9972-49AF-BEDF-23CD3F41261D} - System32\Tasks\GlaryInitialize => C:\Program Files\Glary Utilities\initialize.exe [2013-05-27] (Glarysoft Ltd)
Task: {C64CA068-7CFC-4D57-8314-58277F7B489E} - System32\Tasks\SpeedyPC Pro => C:\Program Files\SpeedyPC Software\SpeedyPC\SpeedyPC.exe
Task: {E2E35002-99A9-445E-A049-4C64642268E4} - System32\Tasks\SpeedyPC Update Version3 Startup Task => C:\Program Files\Common Files\SpeedyPC Software\UUS3\SpeedyPC_Update3.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GlaryInitialize 3.job => C:\Program Files\Glary Utilities 3\Initialize.exe
Task: C:\Windows\Tasks\GlaryInitialize.job => C:\Program Files\Glary Utilities\initialize.exe
Task: C:\Windows\Tasks\Show-Password Update.job => C:\Program Files\Show-Password\Show_Password.exe
Task: C:\Windows\Tasks\SpeedyPC Pro.job => C:\Program Files\SpeedyPC Software\SpeedyPC\SpeedyPC.exe
Task: C:\Windows\Tasks\SpeedyPC Registration3.job => C:\Program Files\Common Files\SpeedyPC Software\UUS3\UUS3.dll
Task: C:\Windows\Tasks\SpeedyPC Update Version3 Startup Task.job => C:\Program Files\Common Files\SpeedyPC Software\UUS3\SpeedyPC_Update3.exe
Task: C:\Windows\Tasks\SpeedyPC Update Version3.job => C:\Program Files\Common Files\SpeedyPC Software\UUS3\SpeedyPC_Update3.exe

==================== Loaded Modules (whitelisted) =============

2013-03-27 21:36 - 2013-03-27 21:36 - 00021312 _____ () C:\Program Files\Acronis\TrueImageHome\ti_managers_proxy_stub.dll
2012-08-17 20:38 - 2012-08-17 20:38 - 00479160 _____ () C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\dblite.dll
2013-05-22 04:55 - 2013-05-22 04:55 - 00109568 _____ () C:\Program Files\DAEMON Tools Pro\BRD.dll
2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 13:16 - 2014-01-20 13:16 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-09-14 00:51 - 2013-09-14 00:51 - 00087952 _____ () C:\Program Files\Common Files\Apple\Internet Services\zlib1.dll
2013-09-14 00:50 - 2013-09-14 00:50 - 01242952 _____ () C:\Program Files\Common Files\Apple\Internet Services\libxml2.dll
2014-02-01 06:27 - 2013-12-05 20:36 - 03559024 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2013-04-16 16:15 - 2008-09-16 19:18 - 00132608 _____ () C:\Program Files\WinRAR\rarext.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Faulty Device Manager Devices =============

Name: WD SES Device USB Device
Description: WD SES Device USB Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: WD SES Device USB Device
Description: WD SES Device USB Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: WD SES Device USB Device
Description: WD SES Device USB Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: WD SES Device USB Device
Description: WD SES Device USB Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/06/2014 04:42:42 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: afcdpsrv.exe, Version: 2.0.0.4041, Zeitstempel: 0x51530770
Name des fehlerhaften Moduls: afcdpsrv.exe, Version: 2.0.0.4041, Zeitstempel: 0x51530770
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002da7f
ID des fehlerhaften Prozesses: 0x22c
Startzeit der fehlerhaften Anwendung: 0xafcdpsrv.exe0
Pfad der fehlerhaften Anwendung: afcdpsrv.exe1
Pfad des fehlerhaften Moduls: afcdpsrv.exe2
Berichtskennung: afcdpsrv.exe3

Error: (02/03/2014 04:21:49 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: afcdpsrv.exe, Version: 2.0.0.4041, Zeitstempel: 0x51530770
Name des fehlerhaften Moduls: afcdpsrv.exe, Version: 2.0.0.4041, Zeitstempel: 0x51530770
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002da7f
ID des fehlerhaften Prozesses: 0x880
Startzeit der fehlerhaften Anwendung: 0xafcdpsrv.exe0
Pfad der fehlerhaften Anwendung: afcdpsrv.exe1
Pfad des fehlerhaften Moduls: afcdpsrv.exe2
Berichtskennung: afcdpsrv.exe3

Error: (02/01/2014 07:37:08 AM) (Source: .NET Runtime) (User: )
Description: .NET Runtime version 4.0.30319.1008 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 5504. Meldungs-ID: [0x2509].

Error: (02/01/2014 06:22:22 AM) (Source: Windows Search Service) (User: )
Description: Der Index kann nicht initialisiert werden.


Details:
        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (02/01/2014 06:22:22 AM) (Source: Windows Search Service) (User: )
Description: Die Anwendung kann nicht initialisiert werden.

Kontext: Windows Anwendung


Details:
        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (02/01/2014 06:22:22 AM) (Source: Windows Search Service) (User: )
Description: Das Gatherer-Objekt kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (02/01/2014 06:22:22 AM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.TripoliIndexer> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
        Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)

Error: (02/01/2014 06:22:22 AM) (Source: Windows Search Service) (User: )
Description: Plug-In in <Search.JetPropStore> kann nicht initialisiert werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (02/01/2014 06:22:22 AM) (Source: Windows Search Service) (User: )
Description: Die Eigenschaftenspeicherdaten können von Windows Search nicht geladen werden.

Kontext: Windows Anwendung, SystemIndex Katalog


Details:
        Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)

Error: (02/01/2014 06:22:22 AM) (Source: Windows Search Service) (User: )
Description: Windows Search wird aufgrund eines Problems bei der Indizierung The catalog is corrupt beendet.


Details:
        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)


System errors:
=============
Error: (02/06/2014 04:42:52 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Acronis Nonstop Backup Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (02/06/2014 04:42:11 AM) (Source: Microsoft-Windows-BitLocker-Driver) (User: NT-AUTORITÄT)
Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "" können nicht gelesen werden.

Error: (02/06/2014 04:42:11 AM) (Source: Microsoft-Windows-BitLocker-Driver) (User: NT-AUTORITÄT)
Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "" können nicht gelesen werden.

Error: (02/06/2014 04:42:11 AM) (Source: Microsoft-Windows-BitLocker-Driver) (User: NT-AUTORITÄT)
Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "" können nicht gelesen werden.

Error: (02/06/2014 04:42:05 AM) (Source: Microsoft-Windows-BitLocker-Driver) (User: NT-AUTORITÄT)
Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "" können nicht gelesen werden.

Error: (02/06/2014 04:41:47 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Mobile Partner. OUC" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053

Error: (02/06/2014 04:41:47 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Mobile Partner. OUC erreicht.

Error: (02/05/2014 06:28:16 AM) (Source: Microsoft-Windows-BitLocker-Driver) (User: NT-AUTORITÄT)
Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "" können nicht gelesen werden.

Error: (02/05/2014 06:28:16 AM) (Source: Microsoft-Windows-BitLocker-Driver) (User: NT-AUTORITÄT)
Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "" können nicht gelesen werden.

Error: (02/05/2014 06:28:16 AM) (Source: Microsoft-Windows-BitLocker-Driver) (User: NT-AUTORITÄT)
Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "" können nicht gelesen werden.


Microsoft Office Sessions:
=========================
Error: (02/06/2014 04:42:42 AM) (Source: Application Error)(User: )
Description: afcdpsrv.exe2.0.0.404151530770afcdpsrv.exe2.0.0.404151530770c00000050002da7f22c01cf22ed598724b0C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exeC:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exebb4e417c-8ee0-11e3-b1d9-0022fbb060f8

Error: (02/03/2014 04:21:49 AM) (Source: Application Error)(User: )
Description: afcdpsrv.exe2.0.0.404151530770afcdpsrv.exe2.0.0.404151530770c00000050002da7f88001cf208eee56dc49C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exeC:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe5115d652-8c82-11e3-a5c8-5c260a23a5ad

Error: (02/01/2014 07:37:08 AM) (Source: .NET Runtime)(User: )
Description: .NET Runtime version 4.0.30319.1008 - Fehler beim Initialisieren der Profilerstellungs-API-Anfügeinfrastruktur. Dieser Prozess ermöglicht einem Profiler das Anfügen nicht. HRESULT: 0x80004005.  Prozess-ID (dezimal): 5504. Meldungs-ID: [0x2509].

Error: (02/01/2014 06:22:22 AM) (Source: Windows Search Service)(User: )
Description:
Details:
        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (02/01/2014 06:22:22 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung


Details:
        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (02/01/2014 06:22:22 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (02/01/2014 06:22:22 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
        Element nicht gefunden.  (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer

Error: (02/01/2014 06:22:22 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore

Error: (02/01/2014 06:22:22 AM) (Source: Windows Search Service)(User: )
Description: Kontext: Windows Anwendung, SystemIndex Katalog


Details:
        Die Inhaltsindexdatenbank ist fehlerhaft.  (HRESULT : 0xc0041800) (0xc0041800)

Error: (02/01/2014 06:22:22 AM) (Source: Windows Search Service)(User: )
Description:
Details:
        Der Inhaltsindexkatalog ist fehlerhaft.  (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt


CodeIntegrity Errors:
===================================
  Date: 2014-01-30 06:47:16.394
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-30 06:47:16.394
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-30 06:47:16.394
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-30 06:47:16.379
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-30 06:47:16.379
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-30 06:47:16.379
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-30 06:47:16.363
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-30 06:47:16.363
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-30 06:47:16.363
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2014-01-30 06:47:16.348
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX86\klelam.sys" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Memory info ===========================

Percentage of memory in use: 39%
Total physical RAM: 3535.9 MB
Available physical RAM: 2121.66 MB
Total Pagefile: 7070.09 MB
Available Pagefile: 5434.3 MB
Total Virtual: 2047.88 MB
Available Virtual: 1871.28 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:111.69 GB) (Free:37.23 GB) NTFS
Drive e: (INTENSO) (Fixed) (Total:931.28 GB) (Free:602.63 GB) FAT32
Drive g: (Hörspiele) (Fixed) (Total:465.52 GB) (Free:63.81 GB) NTFS
Drive h: (Hörbücher) (Fixed) (Total:1862.98 GB) (Free:1087.6 GB) NTFS
Drive i: (Musik) (Fixed) (Total:930.84 GB) (Free:425.31 GB) NTFS
Drive j: (Dokumentationen - Filme) (Fixed) (Total:2794.49 GB) (Free:402.7 GB) NTFS
Drive k: (E-Books) (Fixed) (Total:465.98 GB) (Free:118.99 GB) NTFS
Drive l: (Programme) (Fixed) (Total:465.76 GB) (Free:356.45 GB) NTFS
Drive q: (WD SmartWare) (CDROM) (Total:0.44 GB) (Free:0 GB) UDF
Drive z: (Backup) (Fixed) (Total:2794.49 GB) (Free:1494.49 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: ECE6BB63)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=112 GB) - (Type=07 NTFS)
Attempted reading MBR returned 0 bytes.
 Could not read MBR for disk 1.
Attempted reading MBR returned 0 bytes.
 Could not read MBR for disk 2.

========================================================
Disk: 3 (Size: 932 GB) (Disk ID: E8900690)
Partition 1: (Not Active) - (Size=932 GB) - (Type=OF Extended)

========================================================
Disk: 4 (Size: 466 GB) (Disk ID: 0DF651F1)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

========================================================
Disk: 5 (MBR Code: Windows XP) (Size: 931 GB) (Disk ID: 000564D0)
Partition 1: (Not Active) - (Size=931 GB) - (Type=OF Extended)

========================================================
Disk: 6 (MBR Code: Windows XP) (Size: 1863 GB) (Disk ID: 00021365)
Partition 1: (Not Active) - (Size=-198659014656) - (Type=07 NTFS)

========================================================
Disk: 7 (Size: 932 GB) (Disk ID: 8C0F48EE)
Partition 1: (Not Active) - (Size=932 GB) - (Type=0C)

==================== End Of Log ============================

schrauber 06.02.2014 17:47
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!
Downloade dir bitte Combofix vom folgenden Downloadspiegel

Link 1


WICHTIG - Speichere Combofix auf deinem Desktop
  • Deaktiviere bitte all deine Anti Viren sowie Anti Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören.
Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Wenn Combofix fertig ist, wird es eine Logfile erstellen. Bitte poste die C:\Combofix.txt in deiner nächsten Antwort.


Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Zitat:
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

atm 07.02.2014 05:41
...hier ist die Combofix-Datei
Code:
ComboFix 14-02-05.02 - Torsten 07.02.2014  5:25.1.2 - x86
Microsoft Windows 7 Professional  6.1.7601.1.1252.49.1031.18.3536.2153 [GMT 1:00]
ausgeführt von:: c:\users\Torsten\Desktop\ComboFix.exe
AV: Kaspersky Internet Security *Disabled/Updated* {C3113FBF-4BCB-4461-D78D-6EDFEC9593E5}
FW: Kaspersky Internet Security *Disabled* {FB2ABE9A-01A4-4539-FCD2-C7EA1246D49E}
SP: Kaspersky Internet Security *Disabled/Updated* {7870DE5B-6DF1-4BEF-ED3D-55AD9712D958}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Torsten\AppData\Local\assembly\tmp
c:\windows\system32\drivers\npf.sys
c:\windows\wininit.ini
F:\resycled
.
.
(((((((((((((((((((((((((((((((((((((((  Treiber/Dienste  )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_NPF
.
.
(((((((((((((((((((((((  Dateien erstellt von 2014-01-07 bis 2014-02-07  ))))))))))))))))))))))))))))))
.
.
2014-02-06 03:54 . 2014-02-06 03:55        --------        d-----w-        C:\FRST
2014-02-05 05:21 . 2014-02-05 05:21        --------        d-----w-        c:\program files\Universal Updater
2014-02-05 05:20 . 2014-02-05 05:20        --------        d-----w-        c:\program files\HD Streamer
2014-02-05 05:20 . 2014-02-05 05:20        --------        d-----w-        c:\program files\StreamTransport
2014-02-05 04:01 . 2013-12-04 02:57        7760024        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{8E13F7C1-E08A-41BF-B4E1-45F060779F96}\mpengine.dll
2014-01-29 07:42 . 2014-01-29 15:28        --------        d-----w-        c:\program files\Show-Password
2014-01-25 06:26 . 2014-01-25 06:26        --------        d-----w-        c:\program files\iPod
2014-01-25 06:26 . 2014-01-25 06:26        --------        d-----w-        c:\programdata\188F1432-103A-4ffb-80F1-36B633C5C9E1
2014-01-25 06:26 . 2014-01-25 06:26        --------        d-----w-        c:\program files\iTunes
2014-01-18 12:40 . 2014-01-18 12:40        --------        d-----w-        c:\programdata\Canneverbe Limited
2014-01-18 12:40 . 2014-01-18 12:40        --------        d-----w-        c:\users\Torsten\AppData\Roaming\Canneverbe Limited
2014-01-18 12:40 . 2014-01-18 12:40        --------        d-----w-        c:\program files\CDBurnerXP
2014-01-15 19:57 . 2013-11-26 10:10        2349056        ----a-w-        c:\windows\system32\win32k.sys
2014-01-15 19:57 . 2013-11-27 01:14        258560        ----a-w-        c:\windows\system32\drivers\usbhub.sys
2014-01-15 19:57 . 2013-11-27 01:13        284672        ----a-w-        c:\windows\system32\drivers\usbport.sys
2014-01-15 19:57 . 2013-11-27 01:13        76288        ----a-w-        c:\windows\system32\drivers\usbccgp.sys
2014-01-15 19:57 . 2013-11-27 01:13        43520        ----a-w-        c:\windows\system32\drivers\usbehci.sys
2014-01-15 19:57 . 2013-11-27 01:13        20480        ----a-w-        c:\windows\system32\drivers\usbohci.sys
2014-01-15 19:57 . 2013-11-27 01:13        24064        ----a-w-        c:\windows\system32\drivers\usbuhci.sys
2014-01-15 19:57 . 2013-11-27 01:13        6016        ----a-w-        c:\windows\system32\drivers\usbd.sys
2014-01-15 19:57 . 2013-11-26 11:11        240576        ----a-w-        c:\windows\system32\drivers\netio.sys
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-06 04:38 . 2013-04-16 14:32        692616        ----a-w-        c:\windows\system32\FlashPlayerApp.exe
2014-02-06 04:38 . 2013-04-15 09:01        71048        ----a-w-        c:\windows\system32\FlashPlayerCPLApp.cpl
2013-12-18 05:13 . 2013-04-13 18:23        231584        ------w-        c:\windows\system32\MpSigStub.exe
2013-12-12 03:49 . 2012-08-02 13:09        25696        ----a-w-        c:\windows\system32\drivers\klim6.sys
2013-12-12 03:49 . 2012-06-19 15:28        135776        ----a-w-        c:\windows\system32\drivers\kl1.sys
2013-11-27 10:50 . 2013-11-27 10:50        825696        ----a-w-        c:\windows\system32\Ddbaccpl.cpl
2013-11-27 10:50 . 2013-11-27 10:50        227680        ----a-w-        c:\windows\system32\ddBACCTM.cpl
2013-11-26 09:23 . 2013-12-12 06:06        2724864        ----a-w-        c:\windows\system32\mshtml.tlb
2013-11-26 09:22 . 2013-12-12 06:06        4096        ----a-w-        c:\windows\system32\ieetwcollectorres.dll
2013-11-26 08:53 . 2013-12-12 06:06        61952        ----a-w-        c:\windows\system32\iesetup.dll
2013-11-26 08:52 . 2013-12-12 06:06        51200        ----a-w-        c:\windows\system32\ieetwproxystub.dll
2013-11-26 08:29 . 2013-12-12 06:06        112128        ----a-w-        c:\windows\system32\ieUnatt.exe
2013-11-26 08:29 . 2013-12-12 06:06        108032        ----a-w-        c:\windows\system32\ieetwcollector.exe
2013-11-26 08:28 . 2013-12-12 06:06        553472        ----a-w-        c:\windows\system32\jscript9diag.dll
2013-11-26 08:16 . 2013-12-12 06:06        4243968        ----a-w-        c:\windows\system32\jscript9.dll
2013-11-26 07:32 . 2013-12-12 06:06        1928192        ----a-w-        c:\windows\system32\inetcpl.cpl
2013-11-26 06:33 . 2013-12-12 06:06        1820160        ----a-w-        c:\windows\system32\wininet.dll
2013-11-23 18:26 . 2013-12-12 03:40        417792        ----a-w-        c:\windows\system32\WMPhoto.dll
2013-11-15 06:22 . 2013-11-15 06:22        86016        ----a-w-        c:\windows\system32\iesysprep.dll
2013-11-15 06:22 . 2013-11-15 06:22        74240        ----a-w-        c:\windows\system32\SetIEInstalledDate.exe
2013-11-15 06:22 . 2013-11-15 06:22        71680        ----a-w-        c:\windows\system32\RegisterIEPKEYs.exe
2013-11-15 06:22 . 2013-11-15 06:22        646144        ----a-w-        c:\windows\system32\MsSpellCheckingFacility.exe
2013-11-15 06:22 . 2013-11-15 06:22        645120        ----a-w-        c:\windows\system32\jsIntl.dll
2013-11-15 06:22 . 2013-11-15 06:22        62464        ----a-w-        c:\windows\system32\tdc.ocx
2013-11-15 06:22 . 2013-11-15 06:22        61952        ----a-w-        c:\windows\system32\MshtmlDac.dll
2013-11-15 06:22 . 2013-11-15 06:22        48640        ----a-w-        c:\windows\system32\mshtmler.dll
2013-11-15 06:22 . 2013-11-15 06:22        454656        ----a-w-        c:\windows\system32\vbscript.dll
2013-11-15 06:22 . 2013-11-15 06:22        36352        ----a-w-        c:\windows\system32\imgutil.dll
2013-11-15 06:22 . 2013-11-15 06:22        34816        ----a-w-        c:\windows\system32\JavaScriptCollectionAgent.dll
2013-11-15 06:22 . 2013-11-15 06:22        337408        ----a-w-        c:\windows\system32\html.iec
2013-11-15 06:22 . 2013-11-15 06:22        24576        ----a-w-        c:\windows\system32\licmgr10.dll
2013-11-15 06:22 . 2013-11-15 06:22        194048        ----a-w-        c:\windows\system32\elshyph.dll
2013-11-15 06:22 . 2013-11-15 06:22        182272        ----a-w-        c:\windows\system32\msls31.dll
2013-11-15 06:22 . 2013-11-15 06:22        151552        ----a-w-        c:\windows\system32\iexpress.exe
2013-11-15 06:22 . 2013-11-15 06:22        139264        ----a-w-        c:\windows\system32\wextract.exe
2013-11-15 06:22 . 2013-11-15 06:22        13312        ----a-w-        c:\windows\system32\mshta.exe
2013-11-15 06:22 . 2013-11-15 06:22        111616        ----a-w-        c:\windows\system32\IEAdvpack.dll
2013-11-15 06:22 . 2013-11-15 06:22        1051136        ----a-w-        c:\windows\system32\mshtmlmedia.dll
2013-11-12 02:07 . 2013-12-12 03:40        2048        ----a-w-        c:\windows\system32\tzres.dll
2013-10-17 19:58 . 2013-10-17 19:58        50053120        ----a-w-        c:\program files\GUT2F5B.tmp
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{E6062A33-016E-4BDA-A6F1-890D989F8656}]
2014-01-29 11:41        438784        ----a-w-        c:\program files\HD Streamer\ScriptHost.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\~\Browser Helper Objects\{f9b7dbed-3b15-45f1-9011-938749d35eb1}]
2014-01-29 07:42        146944        ----a-w-        c:\program files\Show-Password\150.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncError]
@="{934BC6C0-FEC2-4df5-A100-961DE2C8A0ED}"
[HKEY_CLASSES_ROOT\CLSID\{934BC6C0-FEC2-4df5-A100-961DE2C8A0ED}]
2013-03-27 22:53        2670136        ----a-w-        c:\program files\Acronis\TrueImageHome\tishell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncInProgress]
@="{00F848DC-B1D4-4892-9C25-CAADC86A215D}"
[HKEY_CLASSES_ROOT\CLSID\{00F848DC-B1D4-4892-9C25-CAADC86A215D}]
2013-03-27 22:53        2670136        ----a-w-        c:\program files\Acronis\TrueImageHome\tishell.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\AcronisSyncOk]
@="{71573297-552E-46fc-BE3D-3DFAF88D47B7}"
[HKEY_CLASSES_ROOT\CLSID\{71573297-552E-46fc-BE3D-3DFAF88D47B7}]
2013-03-27 22:53        2670136        ----a-w-        c:\program files\Acronis\TrueImageHome\tishell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"iCloudServices"="c:\program files\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-11-20 59720]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-02-11 137752]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-02-11 171032]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-02-11 172568]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe" [2013-10-10 356128]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2014-01-20 152392]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2013-04-13 280576]
.
c:\users\Torsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2013-6-25 228552]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"EnableLinkedConnections"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux1"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute        REG_MULTI_SZ          autocheck autochk *
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Quicken 2014 Zahlungserinnerung.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Quicken 2014 Zahlungserinnerung.lnk
backup=c:\windows\pss\Quicken 2014 Zahlungserinnerung.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Quicken Jubiläumsversion Zahlungserinnerung.lnk]
path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Quicken Jubiläumsversion Zahlungserinnerung.lnk
backup=c:\windows\pss\Quicken Jubiläumsversion Zahlungserinnerung.lnk.CommonStartup
backupExtension=.CommonStartup
.
[HKLM\~\startupfolder\C:^Users^Torsten^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk]
path=c:\users\Torsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
backup=c:\windows\pss\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk.Startup
backupExtension=.Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0]
2012-12-18 19:08        3478752        ----a-w-        c:\program files\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acronis Scheduler2 Service]
2013-02-15 11:07        413464        ----a-w-        c:\program files\Common Files\Acronis\Schedule2\schedhlp.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTibMounterMonitor]
2013-01-10 12:12        1105848        ----a-w-        c:\program files\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ACSW15DE]
2012-10-01 09:39        1133176        ----a-w-        c:\program files\ACD Systems\ACDSee\15.0\ACDSee15InTouch2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ACSW16DE]
2013-07-15 11:29        1344840        ----a-r-        c:\program files\ACD Systems\ACDSee\16.0\acdIDInTouch2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ACSW16EN]
2013-07-15 11:29        1344840        ----a-r-        c:\program files\ACD Systems\ACDSee\16.0\acdIDInTouch2.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
2012-12-18 19:08        946352        ----a-w-        c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
2012-12-15 08:13        478984        ----a-w-        c:\program files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AM32Plus_91NU]
2007-11-21 16:27        143360        ----a-w-        c:\program files\Plustek\OpticBook 3600\Am32Plus.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AnyDVD]
2013-02-11 14:58        6869080        ----a-w-        c:\program files\SlySoft\AnyDVD\AnyDVDtray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon]
2014-01-20 12:16        43848        ----a-w-        c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonMyPrinter]
2007-04-04 01:50        1603152        ----a-w-        c:\program files\Canon\MyPrinter\BJMYPRT.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CanonSolutionMenu]
2008-12-12 01:31        722256        ----a-w-        c:\program files\Canon\SolutionMenu\CNSLMAIN.EXE
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Pro Agent]
2012-04-26 12:33        3111744        ----a-w-        c:\program files\DAEMON Tools Pro\DTAgent.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Duden Korrektor SysTray]
2013-01-29 15:41        357992        ----a-w-        c:\program files\Duden\Duden-Rechtschreibpruefung\DKTray.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iCloudServices]
2013-11-20 14:43        59720        ----a-w-        c:\program files\Common Files\Apple\Internet Services\iCloudServices.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
2014-01-20 15:32        152392        ----a-w-        c:\program files\iTunes\iTunesHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LexwareInfoService]
2011-07-31 13:07        189808        ----a-w-        c:\program files\Common Files\Lexware\Update Manager\LxUpdateManager.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe]
2013-03-27 22:51        6405376        ----a-w-        c:\program files\Acronis\TrueImageHome\TrueImageMonitor.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zune Launcher]
2011-08-05 10:29        159456        ----a-w-        c:\program files\Zune\ZuneLauncher.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
.
R2 Mobile Partner. RunOuc;Mobile Partner. OUC;c:\program files\Mobile Partner\UpdateDog\ouc.exe [2012-11-01 657504]
R2 NAUpdate;Nero Update;c:\program files\Nero\Update\NASvc.exe [2012-07-13 769432]
R2 syncagentsrv;Acronis Sync Agent Service;c:\program files\Common Files\Acronis\SyncAgent\syncagentsrv.exe [2013-03-20 7094592]
R3 ew_hwusbdev;Huawei MobileBroadband USB PNP Device;c:\windows\system32\DRIVERS\ew_hwusbdev.sys [2010-07-27 102784]
R3 ewusbmbb;HUAWEI USB-WWAN miniport;c:\windows\system32\DRIVERS\ewusbwwan.sys [2012-11-19 379392]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2013-11-26 108032]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2013-10-17 1343400]
R3 wifimansvc;Wifi Man Service;c:\program files\Mobile Partner\eap\wifimansvc.exe [2012-11-10 605696]
S0 BootDefragDriver;BootDefragDriver;c:\windows\System32\drivers\BootDefragDriver.sys [2013-09-29 14080]
S0 fltsrv;Acronis Storage Filter Management;c:\windows\system32\DRIVERS\fltsrv.sys [2013-04-19 81184]
S0 tib;Acronis TIB Manager;c:\windows\system32\DRIVERS\tib.sys [2013-04-19 736192]
S0 tib_mounter;Acronis TIB Mounter;c:\windows\system32\DRIVERS\tib_mounter.sys [2013-04-19 130488]
S0 vididr;Acronis Virtual Disk;c:\windows\system32\DRIVERS\vididr.sys [2013-04-19 116000]
S0 vidsflt;Acronis Disk Storage Filter;c:\windows\system32\DRIVERS\vidsflt.sys [2013-04-19 85280]
S1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys [2013-05-22 242240]
S1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\DRIVERS\klim6.sys [2013-12-12 25696]
S1 kltdi;kltdi;c:\windows\system32\DRIVERS\kltdi.sys [2013-06-19 44000]
S1 kneps;kneps;c:\windows\system32\DRIVERS\kneps.sys [2013-04-24 145040]
S2 afcdpsrv;Acronis Nonstop Backup Service;c:\program files\Common Files\Acronis\CDP\afcdpsrv.exe [2013-04-19 3816440]
S2 Credential Vault Host Control Service;Credential Vault Host Control Service;c:\program files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe [2013-03-07 827272]
S2 Credential Vault Host Storage;Credential Vault Host Storage;c:\program files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe [2013-03-07 32648]
S2 HWDeviceService.exe;HWDeviceService.exe;c:\programdata\DatacardService\HWDeviceService.exe [2011-03-14 271712]
S2 OS Selector;Acronis OS Selector Activator;c:\program files\Acronis\DiskDirector\OSS\reinstall_svc.exe [2011-11-15 2155848]
S2 UniversalUpdater;Universal Updater Service;c:\program files\Universal Updater\UpdaterService.exe [2014-01-29 402872]
S3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys [2013-04-19 234752]
S3 cvusbdrv;Dell ControlVault;c:\windows\system32\Drivers\cvusbdrv.sys [2013-03-07 41480]
S3 e1yexpress;Intel(R) Gigabit Network Connections Driver;c:\windows\system32\DRIVERS\e1y6232.sys [2009-06-12 221912]
S3 huawei_enumerator;huawei_enumerator;c:\windows\system32\DRIVERS\ew_jubusenum.sys [2012-08-20 76544]
S3 klkbdflt;Kaspersky Lab KLKBDFLT;c:\windows\system32\DRIVERS\klkbdflt.sys [2013-10-10 25696]
S3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\DRIVERS\klmouflt.sys [2013-10-10 25696]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000-Serie - Adaptertreiber für Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\Duden ADXRegistrator on]
2013-02-21 12:01        132968        ----a-w-        c:\program files\Duden\Duden-Rechtschreibpruefung\adxregistrator.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\Duden dkClean install]
2013-01-29 15:41        105064        ----a-w-        c:\program files\Duden\Duden-Rechtschreibpruefung\DKClean.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\Duden dktray on]
2012-10-26 09:56        154728        ----a-w-        c:\programdata\Duden\DKReg.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-02-06 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-04-16 04:38]
.
2013-11-04 c:\windows\Tasks\GlaryInitialize 3.job
- c:\program files\Glary Utilities 3\Initialize.exe [2013-10-09 01:42]
.
2013-11-04 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2013-10-10 14:51]
.
2014-02-07 c:\windows\Tasks\Show-Password Update.job
- c:\program files\Show-Password\Show_Password.exe [2014-01-29 07:42]
.
.
------- Zusätzlicher Suchlauf -------
.
uStart Page = hxxp://www.spiegel.de/
uInternet Settings,ProxyOverride = *.local
IE: HD Streamer Settings... - C:%5CProgram%20Files%5CHD%20Streamer%5CScriptHost.dll/ID1?settings.html
TCP: DhcpNameServer = 192.168.178.1
TCP: Interfaces\{919D1073-1333-4E3C-8913-138C9D842DDF}: NameServer = 193.189.244.225 193.189.244.206
TCP: Interfaces\{BB2A31FC-2B7A-466A-A342-943C63115A01}: NameServer = 193.189.244.225 193.189.244.206
FF - ProfilePath - c:\users\Torsten\AppData\Roaming\Mozilla\Firefox\Profiles\qnng9lbe.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
MSConfigStartUp-AdobeCS6ServiceManager - c:\program files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe
MSConfigStartUp-SwitchBoard - c:\program files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.bmp\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-4164519292-1603033390-622400893-1000)
"Progid"="ACDSee 16.bmp"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cr2\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.cr2"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.crw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.crw"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.cur\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.cur"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.dcr"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dcx\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-4164519292-1603033390-622400893-1000)
"Progid"="ACDSee 16.dcx"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dib\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-4164519292-1603033390-622400893-1000)
"Progid"="ACDSee 16.dib"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dng\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.dng"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.emf\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-4164519292-1603033390-622400893-1000)
"Progid"="ACDSee 16.emf"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eps\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.eps"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.erf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.erf"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.gif\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-4164519292-1603033390-622400893-1000)
"Progid"="ACDSee 16.gif"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.hdr\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.hdr"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jfif\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.jfif"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpe\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-4164519292-1603033390-622400893-1000)
"Progid"="ACDSee 16.jpe"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpeg\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-4164519292-1603033390-622400893-1000)
"Progid"="ACDSee 16.jpeg"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-4164519292-1603033390-622400893-1000)
"Progid"="ACDSee 16.jpg"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mos\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.mos"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mrw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.mrw"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.nef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.nef"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.orf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.orf"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pbm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.pbm"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.pcd"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pcx\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-4164519292-1603033390-622400893-1000)
"Progid"="ACDSee 16.pcx"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pef\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.pef"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-4164519292-1603033390-622400893-1000)
"Progid"="ACDSee 16.png"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.psd\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.psd"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.raf"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ras\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.ras"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.raw\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.raw"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.rle\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-4164519292-1603033390-622400893-1000)
"Progid"="ACDSee 16.rle"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.srf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.srf"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tga\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-4164519292-1603033390-622400893-1000)
"Progid"="ACDSee 16.tga"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tif\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-4164519292-1603033390-622400893-1000)
"Progid"="ACDSee 16.tif"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.tiff\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-4164519292-1603033390-622400893-1000)
"Progid"="ACDSee 16.tiff"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttc\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.ttc"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.ttf\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ACDSee 16.ttf"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wbmp\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-4164519292-1603033390-622400893-1000)
"Progid"="ACDSee 16.wbmp"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wmf\UserChoice]
@Denied: (2) (LocalSystem)
@Denied: (2) (S-1-5-21-4164519292-1603033390-622400893-1000)
"Progid"="ACDSee 16.wmf"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_21"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_03"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_04"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_05"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_01"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_01"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_02"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_02"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_03"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_03"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_04"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_04"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_05"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_05"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_06"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_06"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_07"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_07"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_08"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_08"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_09"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_09"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_10"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_10"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_11"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_11"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_12"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_12"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_13"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_13"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_14"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_14"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_15"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_15"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_16"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_16"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_17"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_17"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_18"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_18"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_19"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_19"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_20"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_20"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_21"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_21"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_22"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_22"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_23"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_23"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_24"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_24"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_25"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_25"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_26"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_26"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_27"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_27"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_28"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_28"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_29"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_29"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_30"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_30"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_01"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_01"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_02"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_02"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_03"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_03"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_04"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_04"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_01"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_01"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_02"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_02"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_03"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_03"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_04"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_04"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_05"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_05"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_06"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_06"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_07"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_07"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_01"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_01"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_02"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_02"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_03"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_03"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_04"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_04"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_05"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_05"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_06"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_06"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_07"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_07"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_08"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_08"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_09"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_09"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_10"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_10"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_11"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_11"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_12"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_12"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_13"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_13"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_14"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_14"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_15"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_15"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_16"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_16"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_17"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_17"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_18"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_18"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_19"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_19"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_20"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_20"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_21"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_21"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_22"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_22"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_23"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_23"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_24"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_24"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_25"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_25"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_26"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_26"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_27"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_27"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_28"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_28"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_29"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_29"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_30"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_30"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_01"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_01"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_01"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_02"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_02"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_02"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_03"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_03"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_03"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_04"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_04"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_04"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_05"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_05"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_05"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_06"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_06"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_06"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_07"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_07"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_07"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_08"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_08"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_08"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_09"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_09"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_09"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_10"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_10"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_10"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_11"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_11"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_11"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_12"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_12"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_12"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_13"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_13"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_13"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_14"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_14"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_14"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_15"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_15"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_15"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_16"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_16"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_16"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_17"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_17"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_17"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_18"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_18"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_18"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_19"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_19"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_19"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_20"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_20"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_20"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_21"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_21"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_21"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_22"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_22"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_22"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_23"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_23"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_23"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_24"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_24"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_24"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_25"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_25"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_25"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_26"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_26"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_26"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_27"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_27"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_27"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_28"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_28"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_28"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_29"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_29"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_29"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_30"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_30"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_30"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_01"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_01"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_01"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_02"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_02"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_02"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_03"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_03"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_03"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_04"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_04"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_04"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_05"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_05"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_05"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_06"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_06"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_06"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_07"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_07"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_07"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_08"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_08"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_08"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_09"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_09"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_09"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_10"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_10"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_10"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_11"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_11"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_11"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_12"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_12"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_12"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_13"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_13"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_13"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_14"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_14"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_14"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_15"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_15"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_15"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_16"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_16"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_16"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_17"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_17"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_17"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_18"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_18"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_18"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_19"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_19"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_19"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_20"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_20"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_20"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_21"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_21"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_21"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\S-1-5-21-4164519292-1603033390-622400893-1000_Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_02"
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files\Common Files\Acronis\Schedule2\schedul2.exe
c:\windows\system32\taskhost.exe
c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Canon\IJPLM\IJPLMSVC.EXE
c:\programdata\Mobile Partner\OnlineUpdate\ouc.exe
c:\windows\system32\conhost.exe
c:\program files\DAEMON Tools Pro\DTShellHlp.exe
c:\program files\Microsoft Office\Office14\ONENOTEM.EXE
c:\program files\iPod\bin\iPodService.exe
c:\windows\System32\WUDFHost.exe
c:\windows\System32\WUDFHost.exe
c:\programdata\DatacardService\DCSHelper.exe
c:\windows\system32\sppsvc.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-02-07  05:33:59 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2014-02-07 04:33
.
Vor Suchlauf: 10 Verzeichnis(se), 39.526.858.752 Bytes frei
Nach Suchlauf: 15 Verzeichnis(se), 38.934.839.296 Bytes frei
.
- - End Of File - - 206251E416E9E69CF9F8290D794A6B8E
A36C5E4F47E84449FF07ED3517B43A31

schrauber 08.02.2014 10:20
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.

atm 09.02.2014 10:15
...habe die Programme ausgeführt nachfolgend die Log-Dateien.
Muss allerdings sagen, dass das Problem nachwievor besteht. Ich hatte diese Schwierigkeiten bekommen nachdem ich mir von der Chip-Seite das Programm "Stream Transport" geladen hatte, um von der WDR-Mediathek eine Sendung zu laden.
Das Programm habe ich nun auch gelöscht.

Malwarebyte:
Code:
Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Datenbank Version: v2014.02.09.01

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 11.0.9600.16476
Torsten :: DELL-E6500 [Administrator]

09.02.2014 07:24:17
mbam-log-2014-02-09 (07-24-17).txt

Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 219965
Laufzeit: 4 Minute(n), 26 Sekunde(n)

Infizierte Speicherprozesse: 1
C:\Program Files\Universal Updater\UpdaterService.exe (PUP.Optional.UniversalUpdater.A) -> 2924 -> Löschen bei Neustart.

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 27
HKLM\SYSTEM\CurrentControlSet\Services\UniversalUpdater (PUP.Optional.UniversalUpdater.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{E6062A33-016E-4BDA-A6F1-890D989F8656} (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{CACBAC2D-FDC3-4608-A289-6F281F471B83} (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\TypeLib\{73BB74C6-8886-4245-BCDA-448137D75D42} (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\HD Streamer.Tool.1 (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\HD Streamer.Tool (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\HD Streamer.ScriptHostObject.1 (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\HD Streamer.ScriptHostObject (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E6062A33-016E-4BDA-A6F1-890D989F8656} (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{E6062A33-016E-4BDA-A6F1-890D989F8656} (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{E6062A33-016E-4BDA-A6F1-890D989F8656} (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{3868E0C2-3E75-445F-B748-C97BB82300AC} (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\TypeLib\{6D697641-4C65-49F0-8CED-FE8180B5E37E} (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\HD Streamer.Navbar.1 (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\HD Streamer.Navbar (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\TypeLib\{E7ABCD91-74F6-45AD-968B-A45EB265072C} (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Interface\{BBBE01ED-0F1E-44DB-88C1-5CC1AEE3B462} (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\TypeLib\{5375FB9F-DF09-444B-9DC0-C6ED079C2577} (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HD Streamer (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\CLSID\{f9b7dbed-3b15-45f1-9011-938749d35eb1} (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\TypeLib\{7530863b-97b8-4c0e-8092-22bf96547fa7} (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCR\Interface\{8e0b2815-d938-4324-a83d-32748a79f431} (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9B7DBED-3B15-45F1-9011-938749D35EB1} (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{F9B7DBED-3B15-45F1-9011-938749D35EB1} (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9B7DBED-3B15-45F1-9011-938749D35EB1} (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\596d162f-8518-414c-984e-a9bb1430875b (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
HKLM\SOFTWARE\Google\Chrome\Extensions\logekkkdbdidmmcgkonmmonclldogceg (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Registrierungswerte: 1
HKLM\SYSTEM\CurrentControlSet\Services\UniversalUpdater|ImagePath (PUP.Optional.UniversalUpdater.A) -> Daten: C:\Program Files\Universal Updater\UpdaterService.exe -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 4
C:\Program Files\HD Streamer (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Universal Updater (PUP.Optional.UniversalUpdater.A) -> Löschen bei Neustart.
C:\Program Files\Show-Password (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Torsten\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

Infizierte Dateien: 80
C:\Program Files\Universal Updater\UpdaterService.exe (PUP.Optional.UniversalUpdater.A) -> Löschen bei Neustart.
C:\Program Files\HD Streamer\ScriptHost.dll (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Installer\506b4e.msi (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\background.html (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\ButtonSite.dll (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\128.png (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\16.ico (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\16.png (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\18.png (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\32.ico (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\32.png (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\48.png (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\AddonsFramework.Typelib.dll (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\AddonsFramework.Typelib64.dll (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\BackgroundHost.exe (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\BackgroundHost64.exe (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\bg.js (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\ButtonSite64.dll (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\config.xml (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\content.js (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\jquery-1.9.1.min.js (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\json2.min.js (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\options.htm (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\ScriptHost64.dll (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\settings.html (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\settings.js (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\settings_128.png (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\uninstall.exe (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\updater.js (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\HD Streamer\updaterWrapper.js (PUP.Optional.HDStreamer) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Universal Updater\settings.json (PUP.Optional.UniversalUpdater.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Torsten\AppData\Roaming\Mozilla\Extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433} (PUP.Optional.Searchqu.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\150.crx (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP7821.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\01.db (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\150.dat (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\150.dll (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\150.xpi (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP1489.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP1CF1.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP28D5.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP2B20.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP33A6.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP34C3.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP3648.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP3740.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP387F.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP3BAB.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP3D52.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP3EF2.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP503E.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP52F5.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP561A.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP571D.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP57C4.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP5FE5.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP794C.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP7E39.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP7EA4.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP7F16.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP8E3.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAP9735.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAPA5B2.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAPA899.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAPB909.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAPBFB6.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAPC5E8.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAPCA2C.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAPDB0C.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAPDD2B.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAPE976.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAPF45.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAPF4FF.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\FAPF765.tmp (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\Show_Password.exe (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\Sqlite3.dll (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Program Files\Show-Password\Uninstall.exe (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Windows\Tasks\Show-Password Update.job (PUP.Optional.ShowPassword.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Torsten\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl\empty.localstorage (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Users\Torsten\AppData\Roaming\igdhbblpcellaljokkpfhcjlagemhgjl\MinibarChrome.exe (PUP.Optional.Iminent.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
ADWCleaner
Code:
# AdwCleaner v3.018 - Bericht erstellt am 09/02/2014 um 07:34:12
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (32 bits)
# Benutzername : Torsten - DELL-E6500
# Gestartet von : C:\Users\Torsten\Downloads\adwcleaner3.018.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****


***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428


-\\ Mozilla Firefox v26.0 (de)

[ Datei : C:\Users\Torsten\AppData\Roaming\Mozilla\Firefox\Profiles\qnng9lbe.default\prefs.js ]


*************************

AdwCleaner[R0].txt - [2290 octets] - [12/09/2013 04:28:12]
AdwCleaner[R1].txt - [2350 octets] - [12/09/2013 04:31:03]
AdwCleaner[R2].txt - [990 octets] - [12/09/2013 04:42:45]
AdwCleaner[R3].txt - [2170 octets] - [03/10/2013 10:53:35]
AdwCleaner[R4].txt - [1562 octets] - [01/02/2014 05:56:15]
AdwCleaner[R5].txt - [1158 octets] - [01/02/2014 06:20:26]
AdwCleaner[R6].txt - [1414 octets] - [02/02/2014 13:04:47]
AdwCleaner[R7].txt - [3706 octets] - [05/02/2014 06:23:36]
AdwCleaner[R8].txt - [1594 octets] - [09/02/2014 07:33:20]
AdwCleaner[S0].txt - [2539 octets] - [12/09/2013 04:33:35]
AdwCleaner[S1].txt - [2235 octets] - [03/10/2013 10:54:51]
AdwCleaner[S2].txt - [1629 octets] - [01/02/2014 05:58:58]
AdwCleaner[S3].txt - [1220 octets] - [01/02/2014 06:21:24]
AdwCleaner[S4].txt - [3779 octets] - [05/02/2014 06:26:05]
AdwCleaner[S5].txt - [1515 octets] - [09/02/2014 07:34:12]

########## EOF - C:\AdwCleaner\AdwCleaner[S5].txt - [1575 octets] ##########
Junkware Removal Tool
Code:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 7 Professional x86
Ran by Torsten on 09.02.2014 at  7:56:01,14
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-4164519292-1603033390-622400893-1000\Software\sweetim



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Torsten\appdata\locallow\datamngr"



~~~ FireFox

Emptied folder: C:\Users\Torsten\AppData\Roaming\mozilla\firefox\profiles\qnng9lbe.default\minidumps [2 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 09.02.2014 at  8:07:29,88
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
FRST

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 05-02-2014
Ran by Torsten (administrator) on DELL-E6500 on 09-02-2014 08:09:47
Running from C:\Users\Torsten\Downloads
Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) ===================

(Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe
(Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe
(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(DT Soft Ltd) C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\ProgramData\DataCardService\HWDeviceService.exe
() C:\Program Files\Canon\IJPLM\ijplmsvc.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DataCardService\DCSHelper.exe
() C:\ProgramData\Mobile Partner\OnlineUpdate\ouc.exe
() C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(SWE Sven Ritter) C:\Program Files\SpeedProject\SpeedCommander 13\SpeedCommander.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Acronis) C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AVP] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2013-04-13] (Microsoft Corporation)
HKU\S-1-5-21-4164519292-1603033390-622400893-1000\...\Run: [iCloudServices] - C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
Startup: C:\Users\Torsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB870B32E4D71CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.spiegel.de/
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E62696E672E636F6D2F7365617263683F713D7B7365617263685465726D737D267372633D49452D536561726368426F7826464F524D3D494531305352&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&k=0
SearchScopes: HKCU - {07970095-1CEE-49F5-BA31-A67BD113BEED} URL = hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&mode=bounce&k=0
SearchScopes: HKCU - {1E1F3780-82D8-4BCC-AAE6-4BA3EE3C508A} URL = hxxp://search.ebay.de.anonymize-me.de/?to=656261792E6465&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&mode=bounce&k=0
SearchScopes: HKCU - {3B0AF5A7-8466-4DAF-B4E8-E324F5663615} URL = hxxp://www.pricerunner.de.anonymize-me.de/?to=707269636572756E6E65722E6465&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&mode=bounce&k=0
SearchScopes: HKCU - {5CAC6241-3277-40AA-88CB-D0CE6D2F276A} URL = hxxp://www.amazon.de.anonymize-me.de/?to=616D617A6F6E2E6465&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&mode=bounce&k=0
SearchScopes: HKCU - {5E0B4CFD-B88D-45F3-8031-9675FFCD2814} URL = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&mode=bounce&k=0
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E62696E672E636F6D2F7365617263683F713D7B7365617263685465726D737D26464F524D3D494538535243&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&k=0
SearchScopes: HKCU - {AB2ACFB9-6A3A-4D36-B7D3-95DFD5CD2749} URL = hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&mode=bounce&k=0
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Adobe Acrobat Create PDF Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{919D1073-1333-4E3C-8913-138C9D842DDF}: [NameServer]193.189.244.225 193.189.244.206
Tcpip\..\Interfaces\{BB2A31FC-2B7A-466A-A342-943C63115A01}: [NameServer]193.189.244.225 193.189.244.206

FireFox:
========
FF ProfilePath: C:\Users\Torsten\AppData\Roaming\Mozilla\Firefox\Profiles\qnng9lbe.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @Nero.com/KM - C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Acrobat - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Torsten\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: HD Streamer - C:\Users\Torsten\AppData\Roaming\Mozilla\Firefox\Profiles\qnng9lbe.default\Extensions\hd_streamer@iMedia [2014-02-05]
FF HKLM\...\Firefox\Extensions:  - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com [2013-04-15]
FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com [2013-04-15]
FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com [2013-04-15]
FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2013-04-17]
FF HKLM\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com [2013-04-15]
FF HKLM\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com [2013-04-15]
FF HKCU\...\Firefox\Extensions: [{a711367d-39ac-4cd2-8b4f-b9602e6df838}] - C:\Program Files\Show-Password\150.xpi

========================== Services (Whitelisted) =================

R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [831360 2013-02-15] (Acronis)
R2 afcdpsrv; C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe [3816440 2013-04-19] (Acronis)
R2 AVP; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO)
R2 Credential Vault Host Control Service; C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe [827272 2013-03-07] (Broadcom Corporation)
R2 Credential Vault Host Storage; C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe [32648 2013-03-07] (Broadcom Corporation)
R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [271712 2011-03-14] ()
R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [107912 2008-10-09] ()
S2 Mobile Partner. RunOuc; C:\Program Files\Mobile Partner\UpdateDog\ouc.exe [657504 2012-11-01] ()
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
R2 OS Selector; C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe [2155848 2011-11-15] ()
R2 syncagentsrv; C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7094592 2013-03-20] (Acronis)
S3 wifimansvc; C:\Program Files\Mobile Partner\eap\wifimansvc.exe [605696 2012-11-10] ()

==================== Drivers (Whitelisted) ====================

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [121248 2012-08-26] (SlySoft, Inc.)
R0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [14080 2013-09-29] (<Glarysoft Ltd>)
R3 cvusbdrv; C:\Windows\System32\Drivers\cvusbdrv.sys [41480 2013-03-07] (Broadcom Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-05-22] (DT Soft Ltd)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-16] (Elaborate Bytes AG)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [135776 2013-12-12] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [595552 2013-10-10] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [25696 2013-12-12] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25696 2013-10-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-10-10] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [44000 2013-06-19] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [145040 2013-04-24] (Kaspersky Lab ZAO)
S3 ProcObsrv; C:\Program Files\Glary Utilities 3\ProcObsrv.sys [11552 2013-10-09] (Glarysoft Ltd)
S3 tdrpman; C:\Windows\System32\DRIVERS\tdrpman.sys [888640 2013-04-19] (Acronis International GmbH)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [736192 2013-04-19] (Acronis International GmbH)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [130488 2013-04-19] (Acronis)
R0 vididr; C:\Windows\System32\DRIVERS\vididr.sys [116000 2013-04-19] (Acronis International GmbH)
R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [85280 2013-04-19] (Acronis International GmbH)
S3 catchme; \??\C:\Users\Torsten\AppData\Local\Temp\catchme.sys [X]
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [74848 2013-04-24] (Kaspersky Lab ZAO)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-09 08:07 - 2014-02-09 08:08 - 00001152 _____ () C:\Users\Torsten\Desktop\JRT.txt
2014-02-09 07:37 - 2014-02-09 07:37 - 00000000 ____D () C:\Windows\ERUNT
2014-02-09 07:35 - 2014-02-09 07:35 - 00001655 _____ () C:\Users\Torsten\Desktop\AdwCleaner[S5].txt
2014-02-09 07:20 - 2014-02-09 07:20 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\Malwarebytes
2014-02-09 07:19 - 2014-02-09 07:19 - 00001067 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-02-09 07:19 - 2014-02-09 07:19 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-09 07:19 - 2014-02-09 07:19 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-02-09 07:19 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-08 16:27 - 2014-02-08 16:27 - 01037530 _____ (Thisisu) C:\Users\Torsten\Downloads\Junkware Removal Tool.exe
2014-02-08 16:22 - 2014-02-08 16:24 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Torsten\Downloads\malewarebytesam-setup-1.75.0.1300.exe
2014-02-07 05:34 - 2014-02-07 05:34 - 00081263 _____ () C:\ComboFix.txt
2014-02-07 05:24 - 2014-02-07 05:34 - 00000000 ____D () C:\Qoobox
2014-02-07 05:24 - 2014-02-07 05:34 - 00000000 ____D () C:\ComboFix
2014-02-07 05:24 - 2014-02-07 05:32 - 00000000 ____D () C:\Windows\erdnt
2014-02-07 05:24 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-02-07 05:24 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-02-07 05:24 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-02-07 05:24 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-02-07 05:24 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-02-07 05:24 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-02-07 05:24 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-02-07 05:24 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-02-07 05:21 - 2014-02-07 05:21 - 05180173 ____R (Swearware) C:\Users\Torsten\Desktop\ComboFix.exe
2014-02-06 04:55 - 2014-02-09 08:09 - 00015900 _____ () C:\Users\Torsten\Downloads\FRST.txt
2014-02-06 04:55 - 2014-02-06 04:55 - 00032863 _____ () C:\Users\Torsten\Downloads\Addition.txt
2014-02-06 04:54 - 2014-02-09 08:09 - 00000000 ____D () C:\FRST
2014-02-06 04:53 - 2014-02-06 04:53 - 01139200 _____ (Farbar) C:\Users\Torsten\Downloads\FRST.exe
2014-02-05 06:23 - 2014-02-05 06:23 - 00000000 ____D () C:\Users\Torsten\Documents\StreamTransport
2014-02-05 06:20 - 2014-02-05 06:20 - 00001049 _____ () C:\Users\Public\Desktop\StreamTransport.lnk
2014-02-05 06:20 - 2014-02-05 06:20 - 00000000 ____D () C:\Program Files\StreamTransport
2014-02-02 18:58 - 2014-02-02 18:58 - 00000000 ____D () C:\Users\Public\Documents\DAEMON Tools Images
2014-02-01 06:27 - 2014-02-01 06:27 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-01 06:22 - 2014-02-09 07:55 - 00001064 _____ () C:\Windows\setupact.log
2014-02-01 06:22 - 2014-02-09 07:31 - 00020108 _____ () C:\Windows\PFRO.log
2014-02-01 06:22 - 2014-02-01 06:22 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-01 05:54 - 2014-02-01 05:54 - 01166132 _____ () C:\Users\Torsten\Downloads\adwcleaner3.018.exe
2014-02-01 05:40 - 2014-02-01 05:40 - 00116801 _____ () C:\Users\Torsten\Desktop\bookmarks.html
2014-01-29 08:37 - 2014-01-29 08:37 - 06424632 _____ (ManiacTools.com ) C:\Users\Torsten\Downloads\m4a-to-mp3-81converter.exe
2014-01-29 07:36 - 2014-02-03 06:22 - 00000044 _____ () C:\Users\Torsten\Desktop\RadioBob.txt
2014-01-27 06:15 - 2014-01-27 06:15 - 00012091 _____ () C:\Users\Torsten\Documents\Puntkeuntersuchung.xlsx
2014-01-25 07:26 - 2014-01-25 07:26 - 00000000 ____D () C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2014-01-25 07:26 - 2014-01-25 07:26 - 00000000 ____D () C:\Program Files\iTunes
2014-01-25 07:26 - 2014-01-25 07:26 - 00000000 ____D () C:\Program Files\iPod
2014-01-18 13:40 - 2014-01-18 13:40 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\Canneverbe Limited
2014-01-18 13:40 - 2014-01-18 13:40 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2014-01-18 13:40 - 2014-01-18 13:40 - 00000000 ____D () C:\Program Files\CDBurnerXP
2014-01-18 13:34 - 2014-01-18 13:35 - 04986624 _____ (Canneverbe Limited ) C:\Users\Torsten\Downloads\cdbxp_setup_4.5.2.4478_minimal.exe
2014-01-15 20:57 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 20:57 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 20:57 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 20:57 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 20:57 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 20:57 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 20:57 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 20:57 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 20:57 - 2013-11-26 11:10 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

==================== One Month Modified Files and Folders =======

2014-02-09 08:10 - 2014-02-06 04:55 - 00015900 _____ () C:\Users\Torsten\Downloads\FRST.txt
2014-02-09 08:09 - 2014-02-06 04:54 - 00000000 ____D () C:\FRST
2014-02-09 08:08 - 2014-02-09 08:07 - 00001152 _____ () C:\Users\Torsten\Desktop\JRT.txt
2014-02-09 08:02 - 2013-04-13 19:04 - 01498506 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-09 08:02 - 2009-07-14 05:34 - 00017120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-09 08:02 - 2009-07-14 05:34 - 00017120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-09 07:56 - 2013-04-15 03:49 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-02-09 07:55 - 2014-02-01 06:22 - 00001064 _____ () C:\Windows\setupact.log
2014-02-09 07:55 - 2013-04-13 19:03 - 01713359 _____ () C:\Windows\WindowsUpdate.log
2014-02-09 07:55 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-09 07:53 - 2013-04-16 16:23 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\vlc
2014-02-09 07:37 - 2014-02-09 07:37 - 00000000 ____D () C:\Windows\ERUNT
2014-02-09 07:37 - 2013-05-22 03:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-09 07:35 - 2014-02-09 07:35 - 00001655 _____ () C:\Users\Torsten\Desktop\AdwCleaner[S5].txt
2014-02-09 07:34 - 2013-09-12 04:28 - 00000000 ____D () C:\AdwCleaner
2014-02-09 07:31 - 2014-02-01 06:22 - 00020108 _____ () C:\Windows\PFRO.log
2014-02-09 07:20 - 2014-02-09 07:20 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\Malwarebytes
2014-02-09 07:19 - 2014-02-09 07:19 - 00001067 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-02-09 07:19 - 2014-02-09 07:19 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-09 07:19 - 2014-02-09 07:19 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-02-08 16:27 - 2014-02-08 16:27 - 01037530 _____ (Thisisu) C:\Users\Torsten\Downloads\Junkware Removal Tool.exe
2014-02-08 16:24 - 2014-02-08 16:22 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Torsten\Downloads\malewarebytesam-setup-1.75.0.1300.exe
2014-02-08 08:34 - 2013-04-17 11:43 - 00000000 ____D () C:\Users\Torsten\AppData\Local\CrashDumps
2014-02-08 06:37 - 2013-04-16 15:32 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-08 06:37 - 2013-04-15 10:01 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-07 05:34 - 2014-02-07 05:34 - 00081263 _____ () C:\ComboFix.txt
2014-02-07 05:34 - 2014-02-07 05:24 - 00000000 ____D () C:\Qoobox
2014-02-07 05:34 - 2014-02-07 05:24 - 00000000 ____D () C:\ComboFix
2014-02-07 05:34 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Default
2014-02-07 05:34 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2014-02-07 05:32 - 2014-02-07 05:24 - 00000000 ____D () C:\Windows\erdnt
2014-02-07 05:31 - 2009-07-14 03:04 - 00000215 _____ () C:\Windows\system.ini
2014-02-07 05:31 - 2009-07-14 03:03 - 56360960 _____ () C:\Windows\system32\config\software.bak
2014-02-07 05:31 - 2009-07-14 03:03 - 29884416 _____ () C:\Windows\system32\config\COMPON~2.bak
2014-02-07 05:31 - 2009-07-14 03:03 - 17563648 _____ () C:\Windows\system32\config\system.bak
2014-02-07 05:31 - 2009-07-14 03:03 - 00262144 _____ () C:\Windows\system32\config\security.bak
2014-02-07 05:31 - 2009-07-14 03:03 - 00262144 _____ () C:\Windows\system32\config\sam.bak
2014-02-07 05:31 - 2009-07-14 03:03 - 00262144 _____ () C:\Windows\system32\config\default.bak
2014-02-07 05:21 - 2014-02-07 05:21 - 05180173 ____R (Swearware) C:\Users\Torsten\Desktop\ComboFix.exe
2014-02-06 04:55 - 2014-02-06 04:55 - 00032863 _____ () C:\Users\Torsten\Downloads\Addition.txt
2014-02-06 04:53 - 2014-02-06 04:53 - 01139200 _____ (Farbar) C:\Users\Torsten\Downloads\FRST.exe
2014-02-05 06:23 - 2014-02-05 06:23 - 00000000 ____D () C:\Users\Torsten\Documents\StreamTransport
2014-02-05 06:20 - 2014-02-05 06:20 - 00001049 _____ () C:\Users\Public\Desktop\StreamTransport.lnk
2014-02-05 06:20 - 2014-02-05 06:20 - 00000000 ____D () C:\Program Files\StreamTransport
2014-02-03 06:22 - 2014-01-29 07:36 - 00000044 _____ () C:\Users\Torsten\Desktop\RadioBob.txt
2014-02-03 05:07 - 2013-05-05 10:03 - 00000000 ____D () C:\Users\Torsten\BookScan
2014-02-03 04:25 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-02-02 18:59 - 2013-05-22 04:47 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\DAEMON Tools Pro
2014-02-02 18:58 - 2014-02-02 18:58 - 00000000 ____D () C:\Users\Public\Documents\DAEMON Tools Images
2014-02-02 11:24 - 2013-05-11 04:53 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\uTorrent
2014-02-02 10:48 - 2013-04-17 09:54 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-02-01 06:28 - 2013-04-13 19:15 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\Mozilla
2014-02-01 06:27 - 2014-02-01 06:27 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-01 06:27 - 2013-12-10 19:37 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-01 06:22 - 2014-02-01 06:22 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-01 05:54 - 2014-02-01 05:54 - 01166132 _____ () C:\Users\Torsten\Downloads\adwcleaner3.018.exe
2014-02-01 05:40 - 2014-02-01 05:40 - 00116801 _____ () C:\Users\Torsten\Desktop\bookmarks.html
2014-01-29 09:00 - 2013-04-13 19:43 - 00000000 ____D () C:\Windows\Panther
2014-01-29 08:37 - 2014-01-29 08:37 - 06424632 _____ (ManiacTools.com ) C:\Users\Torsten\Downloads\m4a-to-mp3-81converter.exe
2014-01-27 06:15 - 2014-01-27 06:15 - 00012091 _____ () C:\Users\Torsten\Documents\Puntkeuntersuchung.xlsx
2014-01-25 07:27 - 2014-01-06 05:02 - 00000455 _____ () C:\Users\Torsten\Desktop\Hörbücher.txt
2014-01-25 07:26 - 2014-01-25 07:26 - 00000000 ____D () C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2014-01-25 07:26 - 2014-01-25 07:26 - 00000000 ____D () C:\Program Files\iTunes
2014-01-25 07:26 - 2014-01-25 07:26 - 00000000 ____D () C:\Program Files\iPod
2014-01-25 07:26 - 2013-04-16 05:40 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-01-25 07:24 - 2013-04-16 05:40 - 00000000 ____D () C:\ProgramData\Apple
2014-01-21 04:25 - 2013-07-11 03:42 - 00000000 ____D () C:\Program Files\Google
2014-01-20 21:07 - 2013-04-17 10:24 - 00000000 ____D () C:\Windows\pss
2014-01-20 21:06 - 2013-07-11 03:42 - 00000000 ____D () C:\Users\Torsten\AppData\Local\Google
2014-01-20 20:24 - 2013-04-17 09:40 - 00000000 ____D () C:\Users\Torsten\AppData\Local\Adobe
2014-01-20 05:03 - 2009-07-14 05:53 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-19 06:01 - 2013-04-15 09:54 - 00000000 ____D () C:\Users\Torsten\AppData\Local\Lexware
2014-01-19 06:00 - 2013-04-15 09:54 - 00000000 ____D () C:\Program Files\Common Files\Lexware
2014-01-19 06:00 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Help
2014-01-18 13:40 - 2014-01-18 13:40 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\Canneverbe Limited
2014-01-18 13:40 - 2014-01-18 13:40 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2014-01-18 13:40 - 2014-01-18 13:40 - 00000000 ____D () C:\Program Files\CDBurnerXP
2014-01-18 13:35 - 2014-01-18 13:34 - 04986624 _____ (Canneverbe Limited ) C:\Users\Torsten\Downloads\cdbxp_setup_4.5.2.4478_minimal.exe
2014-01-16 04:44 - 2009-07-14 05:33 - 03826160 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-15 21:18 - 2013-07-15 11:28 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 21:16 - 2013-04-13 19:27 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-10 20:48 - 2013-04-16 14:30 - 00000000 ____D () C:\Program Files\JDownloader

Some content of TEMP:
====================
C:\Users\Torsten\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-01-30 06:44

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---

schrauber 10.02.2014 08:15

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme? :)

atm 12.02.2014 05:34
...nachfolgend die Log's
Infizierungen wurden (soweit ich das ersehen kann) nicht mehr gefunden, allerdings gehen immer noch zwei weitere Seiten auf wenn ich beim Firefox einen Link anklicke. Beim Explorer habe ich das Problem nicht mehr.
Kann ich das Problem nur noch mit Adblockern beim Firefox lösen? Oder hast Du einen anderen Vorschlag.

ESET log
Code:
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=070a9656f6a2d04ca505d1e2804849af
# engine=17021
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-02-11 09:58:17
# local_time=2014-02-11 10:58:17 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=1286 16777213 100 100 23711 46882619 0 0
# compatibility_mode=5893 16776573 100 94 176143 143743888 0 0
# scanned=630645
# found=0
# cleaned=0
# scan_time=23059
Security Check log
Code:
Results of screen317's Security Check version 0.99.79 
 Windows 7 Service Pack 1 x86 (UAC is enabled) 
 Internet Explorer 11 
``````````````Antivirus/Firewall Check:``````````````
Kaspersky Internet Security 
 Antivirus out of date! 
`````````Anti-malware/Other Utilities Check:`````````
 Malwarebytes Anti-Malware Version 1.75.0.1300 
 CCleaner   
 Java(TM) 6 Update 21 
 Java version out of Date!
 Adobe Flash Player        12.0.0.44 
 Mozilla Firefox (26.0)
````````Process Check: objlist.exe by Laurent```````` 
 Mobile Partner OnlineUpdate ouc.exe 
 Kaspersky Lab Kaspersky Internet Security 2013 avp.exe 
`````````````````System Health check`````````````````
 Total Fragmentation on Drive C: 
````````````````````End of Log``````````````````````
FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 10-02-2014 01
Ran by Torsten (administrator) on DELL-E6500 on 12-02-2014 05:02:35
Running from C:\Users\Torsten\Downloads
Microsoft Windows 7 Professional  Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe
(Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe
(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\ProgramData\DatacardService\HWDeviceService.exe
() C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe
(DT Soft Ltd) C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
() C:\ProgramData\Mobile Partner\OnlineUpdate\ouc.exe
() C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(SWE Sven Ritter) C:\Program Files\SpeedProject\SpeedCommander 13\SpeedCommander.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Acronis) C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Impacct) C:\Program Files\Plustek\OpticBook 3600\Am32Plus.exe
() C:\Program Files\Plustek\OpticBook 3600\Book Utility.exe
(Kaspersky Lab ZAO) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AVP] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO)
HKLM\...\Run: [iTunesHelper] - C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2013-04-13] (Microsoft Corporation)
HKU\S-1-5-21-4164519292-1603033390-622400893-1000\...\Run: [iCloudServices] - C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-11-20] (Apple Inc.)
Startup: C:\Users\Torsten\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB870B32E4D71CE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.spiegel.de/
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E62696E672E636F6D2F7365617263683F713D7B7365617263685465726D737D267372633D49452D536561726368426F7826464F524D3D494531305352&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&k=0
SearchScopes: HKCU - {07970095-1CEE-49F5-BA31-A67BD113BEED} URL = hxxp://www.myvideo.de.anonymize-me.de/?to=6D79766964656F2E6465&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&mode=bounce&k=0
SearchScopes: HKCU - {1E1F3780-82D8-4BCC-AAE6-4BA3EE3C508A} URL = hxxp://search.ebay.de.anonymize-me.de/?to=656261792E6465&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&mode=bounce&k=0
SearchScopes: HKCU - {3B0AF5A7-8466-4DAF-B4E8-E324F5663615} URL = hxxp://www.pricerunner.de.anonymize-me.de/?to=707269636572756E6E65722E6465&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&mode=bounce&k=0
SearchScopes: HKCU - {5CAC6241-3277-40AA-88CB-D0CE6D2F276A} URL = hxxp://www.amazon.de.anonymize-me.de/?to=616D617A6F6E2E6465&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&mode=bounce&k=0
SearchScopes: HKCU - {5E0B4CFD-B88D-45F3-8031-9675FFCD2814} URL = hxxp://www.otto.de.anonymize-me.de/?to=6F74746F2E6465&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&mode=bounce&k=0
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com.anonymize-me.de/?anonymto=687474703A2F2F7777772E62696E672E636F6D2F7365617263683F713D7B7365617263685465726D737D26464F524D3D494538535243&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&k=0
SearchScopes: HKCU - {AB2ACFB9-6A3A-4D36-B7D3-95DFD5CD2749} URL = hxxp://de.wikipedia.org.anonymize-me.de/?to=64652E77696B6970656469612E6F7267&st={searchTerms}&clid=37ebd01d-5717-4052-b0f9-202167df96dd&pid=fotofreeware&mode=bounce&k=0
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Adobe Acrobat Create PDF Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{919D1073-1333-4E3C-8913-138C9D842DDF}: [NameServer]193.189.244.225 193.189.244.206
Tcpip\..\Interfaces\{BB2A31FC-2B7A-466A-A342-943C63115A01}: [NameServer]193.189.244.225 193.189.244.206

FireFox:
========
FF ProfilePath: C:\Users\Torsten\AppData\Roaming\Mozilla\Firefox\Profiles\qnng9lbe.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @Nero.com/KM - C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin: @videolan.org/vlc,version=2.0.6 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Acrobat - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Torsten\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: HD Streamer - C:\Users\Torsten\AppData\Roaming\Mozilla\Firefox\Profiles\qnng9lbe.default\Extensions\hd_streamer@iMedia [2014-02-05]
FF HKLM\...\Firefox\Extensions:  - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\url_advisor@kaspersky.com [2013-04-15]
FF HKLM\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\virtual_keyboard@kaspersky.com [2013-04-15]
FF HKLM\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\content_blocker@kaspersky.com [2013-04-15]
FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2013-04-17]
FF HKLM\...\Firefox\Extensions: [anti_banner@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\anti_banner@kaspersky.com [2013-04-15]
FF HKLM\...\Firefox\Extensions: [online_banking@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\FFExt\online_banking@kaspersky.com [2013-04-15]
FF HKCU\...\Firefox\Extensions: [{a711367d-39ac-4cd2-8b4f-b9602e6df838}] - C:\Program Files\Show-Password\150.xpi

========================== Services (Whitelisted) =================

R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [831360 2013-02-15] (Acronis)
R2 afcdpsrv; C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe [3816440 2013-04-19] (Acronis)
R2 AVP; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2013\avp.exe [356128 2013-10-10] (Kaspersky Lab ZAO)
R2 Credential Vault Host Control Service; C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe [827272 2013-03-07] (Broadcom Corporation)
R2 Credential Vault Host Storage; C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe [32648 2013-03-07] (Broadcom Corporation)
R2 HWDeviceService.exe; C:\ProgramData\DatacardService\HWDeviceService.exe [271712 2011-03-14] ()
R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [107912 2008-10-09] ()
S2 Mobile Partner. RunOuc; C:\Program Files\Mobile Partner\UpdateDog\ouc.exe [657504 2012-11-01] ()
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)
R2 OS Selector; C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe [2155848 2011-11-15] ()
R2 syncagentsrv; C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7094592 2013-03-20] (Acronis)
S3 wifimansvc; C:\Program Files\Mobile Partner\eap\wifimansvc.exe [605696 2012-11-10] ()

==================== Drivers (Whitelisted) ====================

R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [121248 2012-08-26] (SlySoft, Inc.)
R0 BootDefragDriver; C:\Windows\System32\drivers\BootDefragDriver.sys [14080 2013-09-29] (<Glarysoft Ltd>)
R3 cvusbdrv; C:\Windows\System32\Drivers\cvusbdrv.sys [41480 2013-03-07] (Broadcom Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-05-22] (DT Soft Ltd)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-16] (Elaborate Bytes AG)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [135776 2013-12-12] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [595552 2013-10-10] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [25696 2013-12-12] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [25696 2013-10-10] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [25696 2013-10-10] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [44000 2013-06-19] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [145040 2013-04-24] (Kaspersky Lab ZAO)
S3 ProcObsrv; C:\Program Files\Glary Utilities 3\ProcObsrv.sys [11552 2013-10-09] (Glarysoft Ltd)
S3 tdrpman; C:\Windows\System32\DRIVERS\tdrpman.sys [888640 2013-04-19] (Acronis International GmbH)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [736192 2013-04-19] (Acronis International GmbH)
R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [130488 2013-04-19] (Acronis)
R0 vididr; C:\Windows\System32\DRIVERS\vididr.sys [116000 2013-04-19] (Acronis International GmbH)
R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [85280 2013-04-19] (Acronis International GmbH)
S3 catchme; \??\C:\Users\Torsten\AppData\Local\Temp\catchme.sys [X]
U5 klflt; C:\Windows\System32\Drivers\klflt.sys [74848 2013-04-24] (Kaspersky Lab ZAO)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-12 05:02 - 2014-02-12 05:02 - 00000000 ____D () C:\Users\Torsten\Downloads\FRST-OlderVersion
2014-02-12 05:00 - 2014-02-12 05:00 - 00000909 _____ () C:\Users\Torsten\Desktop\Security checkup.txt
2014-02-12 04:49 - 2014-02-12 04:49 - 00987425 _____ () C:\Users\Torsten\Downloads\SecurityCheck.exe
2014-02-11 04:27 - 2014-02-11 04:27 - 02347384 _____ (ESET) C:\Users\Torsten\Downloads\esetsmartinstaller_enu.exe
2014-02-09 10:05 - 2014-02-09 10:05 - 04721920 _____ (Piriform Ltd) C:\Users\Torsten\Downloads\ccsetup410.exe
2014-02-09 08:10 - 2014-02-09 08:10 - 00029934 _____ () C:\Users\Torsten\Desktop\FRST.txt
2014-02-09 08:07 - 2014-02-09 08:08 - 00001152 _____ () C:\Users\Torsten\Desktop\JRT.txt
2014-02-09 07:37 - 2014-02-09 07:37 - 00000000 ____D () C:\Windows\ERUNT
2014-02-09 07:35 - 2014-02-09 07:35 - 00001655 _____ () C:\Users\Torsten\Desktop\AdwCleaner[S5].txt
2014-02-09 07:20 - 2014-02-09 07:20 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\Malwarebytes
2014-02-09 07:19 - 2014-02-09 07:19 - 00001067 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-02-09 07:19 - 2014-02-09 07:19 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-09 07:19 - 2014-02-09 07:19 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-02-09 07:19 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-08 16:27 - 2014-02-08 16:27 - 01037530 _____ (Thisisu) C:\Users\Torsten\Downloads\Junkware Removal Tool.exe
2014-02-08 16:22 - 2014-02-08 16:24 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Torsten\Downloads\malewarebytesam-setup-1.75.0.1300.exe
2014-02-07 05:34 - 2014-02-07 05:34 - 00081263 _____ () C:\ComboFix.txt
2014-02-07 05:24 - 2014-02-07 05:34 - 00000000 ____D () C:\Qoobox
2014-02-07 05:24 - 2014-02-07 05:34 - 00000000 ____D () C:\ComboFix
2014-02-07 05:24 - 2014-02-07 05:32 - 00000000 ____D () C:\Windows\erdnt
2014-02-07 05:24 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-02-07 05:24 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-02-07 05:24 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-02-07 05:24 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-02-07 05:24 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-02-07 05:24 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-02-07 05:24 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-02-07 05:24 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-02-07 05:21 - 2014-02-07 05:21 - 05180173 ____R (Swearware) C:\Users\Torsten\Desktop\ComboFix.exe
2014-02-06 04:55 - 2014-02-12 05:02 - 00016573 _____ () C:\Users\Torsten\Downloads\FRST.txt
2014-02-06 04:55 - 2014-02-06 04:55 - 00032863 _____ () C:\Users\Torsten\Downloads\Addition.txt
2014-02-06 04:54 - 2014-02-12 05:02 - 00000000 ____D () C:\FRST
2014-02-06 04:53 - 2014-02-12 05:02 - 01139712 _____ (Farbar) C:\Users\Torsten\Downloads\FRST.exe
2014-02-05 06:23 - 2014-02-05 06:23 - 00000000 ____D () C:\Users\Torsten\Documents\StreamTransport
2014-02-02 18:58 - 2014-02-02 18:58 - 00000000 ____D () C:\Users\Public\Documents\DAEMON Tools Images
2014-02-01 06:27 - 2014-02-01 06:27 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-01 06:22 - 2014-02-12 04:46 - 00001400 _____ () C:\Windows\setupact.log
2014-02-01 06:22 - 2014-02-12 04:45 - 00020898 _____ () C:\Windows\PFRO.log
2014-02-01 06:22 - 2014-02-01 06:22 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-01 05:54 - 2014-02-01 05:54 - 01166132 _____ () C:\Users\Torsten\Downloads\adwcleaner3.018.exe
2014-02-01 05:40 - 2014-02-01 05:40 - 00116801 _____ () C:\Users\Torsten\Desktop\bookmarks.html
2014-01-29 08:37 - 2014-01-29 08:37 - 06424632 _____ (ManiacTools.com ) C:\Users\Torsten\Downloads\m4a-to-mp3-81converter.exe
2014-01-29 07:36 - 2014-02-03 06:22 - 00000044 _____ () C:\Users\Torsten\Desktop\RadioBob.txt
2014-01-27 06:15 - 2014-01-27 06:15 - 00012091 _____ () C:\Users\Torsten\Documents\Puntkeuntersuchung.xlsx
2014-01-25 07:26 - 2014-01-25 07:26 - 00000000 ____D () C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2014-01-25 07:26 - 2014-01-25 07:26 - 00000000 ____D () C:\Program Files\iTunes
2014-01-25 07:26 - 2014-01-25 07:26 - 00000000 ____D () C:\Program Files\iPod
2014-01-18 13:40 - 2014-01-18 13:40 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\Canneverbe Limited
2014-01-18 13:40 - 2014-01-18 13:40 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2014-01-18 13:40 - 2014-01-18 13:40 - 00000000 ____D () C:\Program Files\CDBurnerXP
2014-01-18 13:34 - 2014-01-18 13:35 - 04986624 _____ (Canneverbe Limited ) C:\Users\Torsten\Downloads\cdbxp_setup_4.5.2.4478_minimal.exe
2014-01-15 20:57 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 20:57 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 20:57 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 20:57 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 20:57 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 20:57 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 20:57 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 20:57 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 20:57 - 2013-11-26 11:10 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

==================== One Month Modified Files and Folders =======

2014-02-12 05:02 - 2014-02-12 05:02 - 00000000 ____D () C:\Users\Torsten\Downloads\FRST-OlderVersion
2014-02-12 05:02 - 2014-02-06 04:55 - 00016573 _____ () C:\Users\Torsten\Downloads\FRST.txt
2014-02-12 05:02 - 2014-02-06 04:54 - 00000000 ____D () C:\FRST
2014-02-12 05:02 - 2014-02-06 04:53 - 01139712 _____ (Farbar) C:\Users\Torsten\Downloads\FRST.exe
2014-02-12 05:01 - 2013-04-15 03:49 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-02-12 05:00 - 2014-02-12 05:00 - 00000909 _____ () C:\Users\Torsten\Desktop\Security checkup.txt
2014-02-12 04:58 - 2013-05-05 10:03 - 00000000 ____D () C:\Users\Torsten\BookScan
2014-02-12 04:53 - 2009-07-14 05:34 - 00017120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-12 04:53 - 2009-07-14 05:34 - 00017120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-12 04:52 - 2013-04-13 19:04 - 01498506 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-12 04:52 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-02-12 04:50 - 2013-04-13 19:03 - 02023519 _____ () C:\Windows\WindowsUpdate.log
2014-02-12 04:49 - 2014-02-12 04:49 - 00987425 _____ () C:\Users\Torsten\Downloads\SecurityCheck.exe
2014-02-12 04:46 - 2014-02-01 06:22 - 00001400 _____ () C:\Windows\setupact.log
2014-02-12 04:46 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-12 04:45 - 2014-02-01 06:22 - 00020898 _____ () C:\Windows\PFRO.log
2014-02-11 18:37 - 2013-05-22 03:45 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-11 04:27 - 2014-02-11 04:27 - 02347384 _____ (ESET) C:\Users\Torsten\Downloads\esetsmartinstaller_enu.exe
2014-02-09 10:06 - 2013-04-17 10:06 - 00000000 ____D () C:\Program Files\CCleaner
2014-02-09 10:05 - 2014-02-09 10:05 - 04721920 _____ (Piriform Ltd) C:\Users\Torsten\Downloads\ccsetup410.exe
2014-02-09 08:10 - 2014-02-09 08:10 - 00029934 _____ () C:\Users\Torsten\Desktop\FRST.txt
2014-02-09 08:08 - 2014-02-09 08:07 - 00001152 _____ () C:\Users\Torsten\Desktop\JRT.txt
2014-02-09 07:53 - 2013-04-16 16:23 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\vlc
2014-02-09 07:37 - 2014-02-09 07:37 - 00000000 ____D () C:\Windows\ERUNT
2014-02-09 07:35 - 2014-02-09 07:35 - 00001655 _____ () C:\Users\Torsten\Desktop\AdwCleaner[S5].txt
2014-02-09 07:34 - 2013-09-12 04:28 - 00000000 ____D () C:\AdwCleaner
2014-02-09 07:20 - 2014-02-09 07:20 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\Malwarebytes
2014-02-09 07:19 - 2014-02-09 07:19 - 00001067 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-02-09 07:19 - 2014-02-09 07:19 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-09 07:19 - 2014-02-09 07:19 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-02-08 16:27 - 2014-02-08 16:27 - 01037530 _____ (Thisisu) C:\Users\Torsten\Downloads\Junkware Removal Tool.exe
2014-02-08 16:24 - 2014-02-08 16:22 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\Torsten\Downloads\malewarebytesam-setup-1.75.0.1300.exe
2014-02-08 08:34 - 2013-04-17 11:43 - 00000000 ____D () C:\Users\Torsten\AppData\Local\CrashDumps
2014-02-08 06:37 - 2013-04-16 15:32 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-08 06:37 - 2013-04-15 10:01 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-07 05:34 - 2014-02-07 05:34 - 00081263 _____ () C:\ComboFix.txt
2014-02-07 05:34 - 2014-02-07 05:24 - 00000000 ____D () C:\Qoobox
2014-02-07 05:34 - 2014-02-07 05:24 - 00000000 ____D () C:\ComboFix
2014-02-07 05:34 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Default
2014-02-07 05:34 - 2009-07-14 03:37 - 00000000 ___RD () C:\Users\Public
2014-02-07 05:32 - 2014-02-07 05:24 - 00000000 ____D () C:\Windows\erdnt
2014-02-07 05:31 - 2009-07-14 03:04 - 00000215 _____ () C:\Windows\system.ini
2014-02-07 05:31 - 2009-07-14 03:03 - 56360960 _____ () C:\Windows\system32\config\software.bak
2014-02-07 05:31 - 2009-07-14 03:03 - 29884416 _____ () C:\Windows\system32\config\COMPON~2.bak
2014-02-07 05:31 - 2009-07-14 03:03 - 17563648 _____ () C:\Windows\system32\config\system.bak
2014-02-07 05:31 - 2009-07-14 03:03 - 00262144 _____ () C:\Windows\system32\config\security.bak
2014-02-07 05:31 - 2009-07-14 03:03 - 00262144 _____ () C:\Windows\system32\config\sam.bak
2014-02-07 05:31 - 2009-07-14 03:03 - 00262144 _____ () C:\Windows\system32\config\default.bak
2014-02-07 05:21 - 2014-02-07 05:21 - 05180173 ____R (Swearware) C:\Users\Torsten\Desktop\ComboFix.exe
2014-02-06 04:55 - 2014-02-06 04:55 - 00032863 _____ () C:\Users\Torsten\Downloads\Addition.txt
2014-02-05 06:23 - 2014-02-05 06:23 - 00000000 ____D () C:\Users\Torsten\Documents\StreamTransport
2014-02-03 06:22 - 2014-01-29 07:36 - 00000044 _____ () C:\Users\Torsten\Desktop\RadioBob.txt
2014-02-02 18:59 - 2013-05-22 04:47 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\DAEMON Tools Pro
2014-02-02 18:58 - 2014-02-02 18:58 - 00000000 ____D () C:\Users\Public\Documents\DAEMON Tools Images
2014-02-02 11:24 - 2013-05-11 04:53 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\uTorrent
2014-02-02 10:48 - 2013-04-17 09:54 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2014-02-01 06:28 - 2013-04-13 19:15 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\Mozilla
2014-02-01 06:27 - 2014-02-01 06:27 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-02-01 06:27 - 2013-12-10 19:37 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-02-01 06:22 - 2014-02-01 06:22 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-01 05:54 - 2014-02-01 05:54 - 01166132 _____ () C:\Users\Torsten\Downloads\adwcleaner3.018.exe
2014-02-01 05:40 - 2014-02-01 05:40 - 00116801 _____ () C:\Users\Torsten\Desktop\bookmarks.html
2014-01-29 09:00 - 2013-04-13 19:43 - 00000000 ____D () C:\Windows\Panther
2014-01-29 08:37 - 2014-01-29 08:37 - 06424632 _____ (ManiacTools.com ) C:\Users\Torsten\Downloads\m4a-to-mp3-81converter.exe
2014-01-27 06:15 - 2014-01-27 06:15 - 00012091 _____ () C:\Users\Torsten\Documents\Puntkeuntersuchung.xlsx
2014-01-25 07:27 - 2014-01-06 05:02 - 00000455 _____ () C:\Users\Torsten\Desktop\Hörbücher.txt
2014-01-25 07:26 - 2014-01-25 07:26 - 00000000 ____D () C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2014-01-25 07:26 - 2014-01-25 07:26 - 00000000 ____D () C:\Program Files\iTunes
2014-01-25 07:26 - 2014-01-25 07:26 - 00000000 ____D () C:\Program Files\iPod
2014-01-25 07:26 - 2013-04-16 05:40 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-01-25 07:24 - 2013-04-16 05:40 - 00000000 ____D () C:\ProgramData\Apple
2014-01-21 04:25 - 2013-07-11 03:42 - 00000000 ____D () C:\Program Files\Google
2014-01-20 21:07 - 2013-04-17 10:24 - 00000000 ____D () C:\Windows\pss
2014-01-20 21:06 - 2013-07-11 03:42 - 00000000 ____D () C:\Users\Torsten\AppData\Local\Google
2014-01-20 20:24 - 2013-04-17 09:40 - 00000000 ____D () C:\Users\Torsten\AppData\Local\Adobe
2014-01-20 05:03 - 2009-07-14 05:53 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-19 06:01 - 2013-04-15 09:54 - 00000000 ____D () C:\Users\Torsten\AppData\Local\Lexware
2014-01-19 06:00 - 2013-04-15 09:54 - 00000000 ____D () C:\Program Files\Common Files\Lexware
2014-01-19 06:00 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Help
2014-01-18 13:40 - 2014-01-18 13:40 - 00000000 ____D () C:\Users\Torsten\AppData\Roaming\Canneverbe Limited
2014-01-18 13:40 - 2014-01-18 13:40 - 00000000 ____D () C:\ProgramData\Canneverbe Limited
2014-01-18 13:40 - 2014-01-18 13:40 - 00000000 ____D () C:\Program Files\CDBurnerXP
2014-01-18 13:35 - 2014-01-18 13:34 - 04986624 _____ (Canneverbe Limited ) C:\Users\Torsten\Downloads\cdbxp_setup_4.5.2.4478_minimal.exe
2014-01-16 04:44 - 2009-07-14 05:33 - 03826160 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-15 21:18 - 2013-07-15 11:28 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 21:16 - 2013-04-13 19:27 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Some content of TEMP:
====================
C:\Users\Torsten\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-09 08:48

==================== End Of Log ============================
--- --- ---

--- --- ---

schrauber 12.02.2014 18:35
Java updaten.

Revo Uninstaller - Download - Filepony
damit Firefox deinstallieren, keine Daten behalten, Reste entfernen lassen, neu installieren.


Dann:
https://support.mozilla.org/de/kb/fi...einfach-loesen


Immer noch?

atm 13.02.2014 05:58
....jetzt läuft es endlich wieder!!

Das Java Update wurde während der Installation abgebrochen, auch nach einem weiteren Versuch. Die Weiteren Schritte hatte ich ausgeführt und das lästige Öffnen von weiteren Seiten erscheint nun nicht mehr.

Vielen Dank Schrauber für Deine Hilfe und Unterstützung.

schrauber 13.02.2014 22:24
Java mal den offline Installer laden und den versuchen.

atm 14.02.2014 05:11
...da mein Kaspersky mich vor dieser Malware nicht schützen konnte, welche Software sollte ich nach Deiner Meinung in gewissen Abständen mal über mein System laufen lassen?
Malewarebytes und Junkware Removal hatten ja einiges entdeckt bei mir.

schrauber 14.02.2014 17:43
Ich empfehle immer Emsisoft, aber als AV Lösung, nicht für ab und zu.

atm 15.02.2014 06:42
...danke für Deine Antwort.
Was meinst Du mit AV-Lösung? War gerade auf der Homepage von Emsisoft, das Paket Internet Security Pack 8.1 könnte dann an Stelle vom Kaspersky Internet Security mein System schützen? Oder


PS: Hab' Euch für die tolle Unterstüzung eine kleine Spende zukommen lassen.


Alle Zeitangaben in WEZ +1. Es ist jetzt 06:12 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131