Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden

Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden


Plagegeister aller Art und deren Bekämpfung: Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Seite 2 von 3 1 2 3
Alt 29.08.2013, 13:17   #16
schrauber
/// the machine
/// TB-Ausbilder
 
Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden - Standard

Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden


Kopiere den Text in der Codebox in deinen Editor (z.B. Notepad) und speichere es unter dem Namen regfix.reg (bei Dateityp bitte "alle Dateien" wählen)

Code:
ATTFilter
Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}]
[HKEY_CURRENT_USER\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchUrl]
"Default"=-
[-HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}]
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchUrl]
"Default"=-
[-HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001_Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5}]
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001_Classes\VirtualStore\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchUrl]
"Default"=-
Starte die regfix.reg duch Doppelklick.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 29.08.2013, 13:25   #17
Woody91
 
Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden - Standard

Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden


Ebenfalls erfolgreich gestartet und durchgeführt. Beim Öffnen von Chrome besteht das Problem weiterhin.
__________________
Alt 29.08.2013, 13:27   #18
schrauber
/// the machine
/// TB-Ausbilder
 
Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden - Standard

Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden


Das gibt es doch nit. Mach mal bitte nen Screenshot davon.
__________________
__________________
Alt 29.08.2013, 13:38   #19
Woody91
 
Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden - Standard

Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden


Screenshot
Angehängte Grafiken
Dateityp: jpg screenshot1.jpg (44,5 KB, 190x aufgerufen)

Alt 29.08.2013, 13:58   #20
Woody91
 
Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden - Standard

Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden


So langsam verzweifel ich hier Vielen Dank jeden Fall schonmal für deine pausenlose Hilfe!

*auf


Alt 29.08.2013, 17:41   #21
schrauber
/// the machine
/// TB-Ausbilder
 
Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden - Standard

Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden


Chrome deinstallieren.

Lade SystemLook von jpshortstuff von einem der folgenden Spiegel herunter und speichere das Tool auf dem Desktop.
SystemLook (64 bit)
  • Doppelklicke auf die SystemLook_x64.exe, um das Tool zu starten.
  • Kopiere den Inhalt der folgenden Codebox in das Textfeld des Tools:
    Code:
    ATTFilter
    :filefind
*snap.do*
*chrome*
:regfind
snap.do
chrome
  • Klicke nun auf den Button Look, um den Scan zu starten.
  • Der Suchlauf kann einige Zeit dauern.
  • Wenn der Suchlauf beendet ist, wird sich Dein Editor mit den Ergebnissen öffnen, poste diese in deinen Thread.
  • Die Ergebnisse werden auf dem Desktop als SystemLook.txt gespeichert.
__________________
--> Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden

Alt 30.08.2013, 15:02   #22
Woody91
 
Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden - Standard

Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden


hier der frische systemlook:

Code:
ATTFilter
SystemLook 30.07.11 by jpshortstuff
Log created at 15:57 on 30/08/2013 by user
Administrator - Elevation successful

========== filefind ==========

Searching for "*snap.do*"
No files found.

Searching for "*chrome*"
C:\AdwCleaner\Quarantine\C\Program Files (x86)\Yontoo\OptChrome.exe.vir	--a---- 147456 bytes	[12:59 12/04/2013]	[01:59 23/03/2013] 7E22A9A996F6857FF1C9327A77BD5367
C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Smartbar\Application\Smartbar.Infrastructure.Plugins.ChromeLocalPlugin.dll.vir	--a---- 59160 bytes	[15:27 17/06/2013]	[15:27 17/06/2013] E98273CDBB42C46216616DAB8727F0CC
C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Smartbar\Application\amfclgbdpgndipgoegfpkkgobahigbcl\GoogleChromeRemotePlugin.dll.vir	--a---- 169240 bytes	[15:26 17/06/2013]	[15:26 17/06/2013] 602EB7C0C6DC9188B69994F28B14CB86
C:\AdwCleaner\Quarantine\C\users\user\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome.manifest.vir	--a---- 955 bytes	[15:21 29/05/2013]	[15:21 29/05/2013] EAB9B7573EAFBDDDD6641A07E39D4ADC
C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome.manifest	--a---- 2570 bytes	[19:48 18/12/2011]	[19:48 18/12/2011] 963C5B6EF3FA76574CD146F5B7E1E9FD
C:\Program Files\AuthenTec TrueSuite\x86\tschrome.crx	-ra---- 153071 bytes	[02:36 15/12/2011]	[02:36 15/12/2011] 68386310E19A113CFE422436CD88DF7F
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.ar.htm	--a---- 710 bytes	[12:24 18/06/2012]	[22:37 12/09/2011] 3927A783019C807C507A4E4AE1467AD5
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.cs.htm	--a---- 650 bytes	[12:24 18/06/2012]	[22:37 12/09/2011] 8F0BB6DF53FC9D2A909D59AEE7376584
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.da.htm	--a---- 612 bytes	[12:24 18/06/2012]	[22:36 12/09/2011] A5B8CC7F4A81E341DD3C4A605F4C0309
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.de.htm	--a---- 602 bytes	[12:24 18/06/2012]	[22:36 12/09/2011] 2622B4C765DF3E769CE7EC296A875EEC
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.el.htm	--a---- 734 bytes	[12:24 18/06/2012]	[22:36 12/09/2011] C07ACC444275D0BE7C8B3A064887EFC6
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.es.htm	--a---- 614 bytes	[12:24 18/06/2012]	[22:35 12/09/2011] E2ADF0F5295873994993C0444BA01B7B
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.fi.htm	--a---- 611 bytes	[12:24 18/06/2012]	[22:35 12/09/2011] 79D67AD9B206B376A7F34EC61A6DF00D
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.fr.htm	--a---- 626 bytes	[12:24 18/06/2012]	[22:34 12/09/2011] B23D2B8518FC1631FC94CE610AB9CDA0
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.he.htm	--a---- 748 bytes	[12:24 18/06/2012]	[22:34 12/09/2011] 877EC430550308684E53C731EE17877C
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.hr.htm	--a---- 618 bytes	[12:24 18/06/2012]	[22:34 12/09/2011] 40BB40DC2EFE1BEE91919658AC449244
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.htm	--a---- 585 bytes	[12:24 18/06/2012]	[22:08 12/09/2011] 2CEA4B32B036ABFCD51FD221982601EA
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.hu.htm	--a---- 642 bytes	[12:24 18/06/2012]	[22:34 12/09/2011] 4A320FDE6DCC27CD8D8B25E3BA76BCAF
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.it.htm	--a---- 615 bytes	[12:24 18/06/2012]	[22:33 12/09/2011] 4E47E3CADC440533A0F00F7A35566196
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.ja.htm	--a---- 641 bytes	[12:24 18/06/2012]	[22:33 12/09/2011] 0A185E61EA68EBA82959CF272E440811
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.ko.htm	--a---- 679 bytes	[12:24 18/06/2012]	[20:56 12/09/2011] BA6FB01770D6C408E79B075B21996BD8
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.nl.htm	--a---- 621 bytes	[12:24 18/06/2012]	[22:33 12/09/2011] 1998BAE94348D38F483D22869EA85628
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.no.htm	--a---- 630 bytes	[12:24 18/06/2012]	[22:33 12/09/2011] 3AECA111E60A43457347F5A13A2A85F9
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.pl.htm	--a---- 664 bytes	[12:24 18/06/2012]	[22:32 12/09/2011] BA29AA8A7AAA4D5D9D2F52C640E7689F
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.pt-BR.htm	--a---- 636 bytes	[12:24 18/06/2012]	[22:31 12/09/2011] 584F01EB1339C46459DC70C76F625FD0
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.pt.htm	--a---- 623 bytes	[12:24 18/06/2012]	[22:32 12/09/2011] E144F558E8467FD76C3BAE5D6D0447FC
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.ro.htm	--a---- 619 bytes	[12:24 18/06/2012]	[22:31 12/09/2011] E14CE5A61BAB705AF973FD0950C5BEC7
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.ru.htm	--a---- 787 bytes	[12:24 18/06/2012]	[22:31 12/09/2011] 9B8138D9E98A38B54A9B3E5D91BDC71E
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.sk.htm	--a---- 688 bytes	[12:24 18/06/2012]	[22:30 12/09/2011] 5F4D755362BA2849F906BF8DE641E117
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.sl.htm	--a---- 644 bytes	[12:24 18/06/2012]	[22:30 12/09/2011] 567B8518434C0DD3EC885AA7AD160525
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.sr-Latn-CS.htm	--a---- 756 bytes	[12:24 18/06/2012]	[22:30 12/09/2011] D85C84DD643F26EFB3527A157CE97A8A
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.sv.htm	--a---- 619 bytes	[12:24 18/06/2012]	[22:29 12/09/2011] 4DA19718B434A2DF2422A1EE7257DC0B
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.tr.htm	--a---- 625 bytes	[12:24 18/06/2012]	[22:28 12/09/2011] 3013CE018218D5847854CE9A97CBF074
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.zh-CHS.htm	--a---- 595 bytes	[12:24 18/06/2012]	[22:27 12/09/2011] 9C73A03E592165CF598EE632AE4CD411
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.zh-CHT.htm	--a---- 592 bytes	[12:24 18/06/2012]	[22:38 12/09/2011] A5C3B9F913E40B7EDF6D995AA14B518E
C:\Program Files\Lenovo\Google Desktop Additions\OmniBox\ChromeOmniBox.zh-TW.htm	--a---- 592 bytes	[12:24 18/06/2012]	[22:38 12/09/2011] A5C3B9F913E40B7EDF6D995AA14B518E
C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\29.0.1547.62\29.0.1547.62_chrome_installer.exe	--a---- 34513760 bytes	[07:26 28/08/2013]	[13:00 27/08/2013] 592EDC5CC76B4B8CE2D9D9FB97E21B25
C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx	--a---- 206791 bytes	[02:44 28/12/2012]	[02:44 28/12/2012] CED8C57B62C7B228265F82C7F86D4987
C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome_registrar.dll	--a---- 163336 bytes	[16:19 20/12/2012]	[16:19 20/12/2012] 904F87042195CECCCDDCC118A60FEF8F
C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx	--a---- 177941 bytes	[02:44 28/12/2012]	[02:44 28/12/2012] 939C60EF36724E6645B357562A1A07FF
C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome_registrar.dll	--a---- 163336 bytes	[16:20 20/12/2012]	[16:20 20/12/2012] 68E444F4B8DB1A26415F215612330866
C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com\chrome.manifest	--a---- 296 bytes	[15:33 20/12/2012]	[15:33 20/12/2012] 55270D8483DCB64AA526E9BC0C5E4129
C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome.manifest	--a---- 363 bytes	[15:33 20/12/2012]	[15:33 20/12/2012] 5EEE0503E96C6BE65669E2513B3E4300
C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome.manifest	--a---- 359 bytes	[15:33 20/12/2012]	[15:33 20/12/2012] 11A05B628EAD04753BC43F3293E2E96C
C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome.manifest	--a---- 345 bytes	[15:22 20/12/2012]	[15:22 20/12/2012] AD42FE566730F2063DC38086A5461606
C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome.manifest	--a---- 367 bytes	[15:33 20/12/2012]	[15:33 20/12/2012] C8DA14E9A9AD9F349379AA9E00896C46
C:\Program Files (x86)\Symantec\VIP Access Client\chrome.manifest	--a---- 360 bytes	[03:24 10/04/2012]	[03:24 10/04/2012] 1666EC547DCE6547C163ED7A0492EE69
C:\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk	--a---- 2229 bytes	[19:47 11/08/2013]	[23:56 31/07/2013] DE0B2D4A317ED23545999B0DD585D549
C:\Users\user\AppData\Local\Temp\chrome_installer.log	--a---- 110994 bytes	[07:22 28/08/2013]	[13:57 30/08/2013] 580AC1E2B856147502DBB0F7263437D6
C:\Users\user\AppData\Local\Temp\jrt\chrome.bat	--a---- 14973 bytes	[16:51 26/08/2013]	[09:53 18/07/2013] 603595734D290C73FA40EDA1ACADF265
C:\Users\user\AppData\Local\Temp\RarSFX1\SecurityCheck\chrome.txt	--a---- 88 bytes	[23:21 26/08/2013]	[23:21 26/08/2013] 449BB0D1D43486EE3366F56261897456
C:\Users\user\AppData\Local\Temp\RarSFX1\SecurityCheck\chrome2.txt	--a---- 113 bytes	[23:21 26/08/2013]	[23:21 26/08/2013] D125F6284BFC34B3BDE1ABD8AB3143E6
C:\Users\user\AppData\Local\Temp\RarSFX1\SecurityCheck\chrome3.txt	--a---- 119 bytes	[23:21 26/08/2013]	[23:21 26/08/2013] E42BF3824D931E2236E35B330364F8FC
C:\Users\user\AppData\Local\Temp\RarSFX1\SecurityCheck\chrome4.txt	--a---- 131 bytes	[23:21 26/08/2013]	[23:21 26/08/2013] 69DC94B4AFB7CC8EA951AA3EC103ED04
C:\Users\user\AppData\Local\Temp\RarSFX1\SecurityCheck\chrome5.txt	--a---- 74 bytes	[23:21 26/08/2013]	[23:21 26/08/2013] F2F4FD0EB6813DF45B54C36CA9AEB4C3
C:\Users\user\AppData\Local\Temp\RarSFX1\SecurityCheck\chrome6.txt	--a---- 100 bytes	[23:21 26/08/2013]	[23:21 26/08/2013] BF0145F25AA18BF20FD60FD155054A01
C:\Users\user\AppData\Local\Temp\RarSFX1\SecurityCheck\chrome7.txt	--a---- 126 bytes	[23:21 26/08/2013]	[23:21 26/08/2013] 9CEE0BF77C805C82C4BD2C5928F8C0CA
C:\Users\user\Desktop\Programme\Google Chrome.lnk	--a---- 2270 bytes	[08:55 17/08/2013]	[08:55 17/08/2013] 49FA13A9F28439E0A149C7ABC277DA01
C:\Users\user\Downloads\chromeinstall-7u13.exe	--a---- 896928 bytes	[16:30 07/02/2013]	[16:30 07/02/2013] D27B3C95E25B5BAB280F79AD3A1472AE
C:\Users\user\Downloads\music_steve_grayscale_monochrome_maxell_blown_away_steigman_desktop_1920x1200_hd-wallpaper-463206 (1).jpg	--a---- 1165901 bytes	[15:02 14/04/2013]	[15:02 14/04/2013] 4E96AE66CDBB8FFBD4AA4E04010F48E5
C:\Users\user\Downloads\music_steve_grayscale_monochrome_maxell_blown_away_steigman_desktop_1920x1200_hd-wallpaper-463206.jpg	--a---- 86179 bytes	[14:59 14/04/2013]	[15:01 14/04/2013] 52FA58A074DA0D4F5E070271B211C3D6
C:\Users\user\Music\Musik\Cypress Hill\Skull & Bones\1\Skull & Bones - Cypress Hill - Valley Of Chrome.mp3	--a---- 5889706 bytes	[07:59 21/01/2012]	[06:24 05/07/2009] 51735CB4A7959133A083C65C693AB8E9
C:\Users\user\Music\Musik\Doors\1978 - An American Prayer\06. Black Polished Chrome.mp3	--a---- 2717902 bytes	[08:17 21/01/2012]	[09:13 21/01/2011] 55F4F133A69452D2E0D82EFBF04CF51C
C:\Users\user\Music\Musik\Doors\1978 - An American Prayer\07. Latino Chrome.mp3	--a---- 5386564 bytes	[08:22 21/01/2012]	[11:01 21/01/2011] F952196A9169648A19D05E697A6E4F62
C:\Users\user\Music\Musik\Jim Morrison\An American Prayer\06 Black Polished Chrome.mp3	--a---- 1122432 bytes	[19:52 10/08/2010]	[06:07 14/12/2012] 454DDFA2C3948DD761A73546DB55AFCE
C:\Users\user\Music\Musik\Jim Morrison\An American Prayer\07 Latino Chrome.mp3	--a---- 2189440 bytes	[19:52 10/08/2010]	[06:07 14/12/2012] B7E6CD7440C3F7269FF95069AB84F07B
C:\Users\user\Pictures\Bilder\music_steve_grayscale_monochrome_maxell_blown_away_steigman_desktop_1920x1200_hd-wallpaper-463206.jpg	--a---- 57651 bytes	[18:43 13/04/2013]	[14:57 14/04/2013] 5C2FA28481387549DF44BF85B616C005
C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\Browsers\chrome.browser	--a---- 2434 bytes	[22:28 17/03/2010]	[22:28 17/03/2010] 63E6BC396D79C1D6FA9DA2498D677683
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\Browsers\chrome.browser	--a---- 2434 bytes	[22:28 17/03/2010]	[22:28 17/03/2010] 63E6BC396D79C1D6FA9DA2498D677683
C:\Windows\Prefetch\CHROME.EXE-D999B1BA.pf	--a---- 235520 bytes	[17:31 09/12/2012]	[13:57 30/08/2013] F3DB134FA93CDDD3043A437EE0A8731F
C:\Windows\SysWOW64\Adobe\Shockwave 12\LaunchGoogleChrome.exe	--a---- 14776 bytes	[13:50 03/04/2013]	[13:50 03/04/2013] 00981E2D14F7792DE1668EA769819978

========== regfind ==========

Searching for "snap.do"
No data found.

Searching for "chrome"
[HKEY_CURRENT_USER\Software\Google\Chrome]
[HKEY_CURRENT_USER\Software\Microsoft\DirectInput\CHROME.EXE51CB4263000CE9D0]
[HKEY_CURRENT_USER\Software\Microsoft\DirectInput\CHROME.EXE51CB4263000CE9D0]
"Name"="CHROME.EXE"
[HKEY_CURRENT_USER\Software\Microsoft\DirectInput\CHROME.EXE51D39520000CE9D0]
[HKEY_CURRENT_USER\Software\Microsoft\DirectInput\CHROME.EXE51D39520000CE9D0]
"Name"="CHROME.EXE"
[HKEY_CURRENT_USER\Software\Microsoft\DirectInput\CHROME.EXE51E03646000CE9D0]
[HKEY_CURRENT_USER\Software\Microsoft\DirectInput\CHROME.EXE51E03646000CE9D0]
"Name"="CHROME.EXE"
[HKEY_CURRENT_USER\Software\Microsoft\DirectInput\CHROME.EXE51F05C5F000CE9D0]
[HKEY_CURRENT_USER\Software\Microsoft\DirectInput\CHROME.EXE51F05C5F000CE9D0]
"Name"="CHROME.EXE"
[HKEY_CURRENT_USER\Software\Microsoft\DirectInput\CHROME.EXE5218CE75000CA7D0]
[HKEY_CURRENT_USER\Software\Microsoft\DirectInput\CHROME.EXE5218CE75000CA7D0]
"Name"="CHROME.EXE"
[HKEY_CURRENT_USER\Software\Microsoft\DirectInput\MostRecentApplication]
"Name"="CHROME.EXE"
[HKEY_CURRENT_USER\Software\Microsoft\DirectInput\MostRecentApplication]
"Id"="CHROME.EXE5218CE75000CA7D0"
[HKEY_CURRENT_USER\Software\Microsoft\Installer\Assemblies\Global]
"Microsoft.VisualStudio.OLE.Interop,version="7.1.40304.0",culture="neutral",publicKeyToken="B03F5F7F11D50A3A""="SkbW$'ICC9^'uz&5qL7'GoogleChrome>IYHbjsJEZ=`[[u2qnkjD"
[HKEY_CURRENT_USER\Software\Microsoft\Installer\Features\AF05BD4008AE6524589F45C085E282D0]
"GoogleChrome"="Plugins"
[HKEY_CURRENT_USER\Software\Microsoft\Installer\Features\AF05BD4008AE6524589F45C085E282D0]
"Chrome"="Plugins"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IEDevTools\Options\UAString]
"Chrome"="Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/533.4 (KHTML, like Gecko) Chrome/5.0.375.99 Safari/533.4"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\313c4305_0]
@="{0.0.0.00000000}.{332be3f9-11bf-42f7-ab81-bdb49982f7bb}|\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\8758da9_0]
@="{0.0.0.00000000}.{2c8254de-47dd-4501-9ff4-80724dc72d43}|\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc\OpenWithList]
"b"="chrome.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.docx\OpenWithList]
"c"="chrome.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
"Progid"="ChromeHTML"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
"Progid"="ChromeHTML"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\OpenWithList]
"b"="chrome.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mkv\OpenWithList]
"c"="chrome.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\OpenWithList]
"b"="chrome.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\OpenWithList]
"c"="chrome.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pptx\OpenWithList]
"b"="chrome.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
"Progid"="ChromeHTML"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
"Progid"="ChromeHTML"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
"Progid"="ChromeHTML"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xls\OpenWithList]
"c"="chrome.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlsx\OpenWithList]
"b"="chrome.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.zip\OpenWithList]
"b"="chrome.exe"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\PhotoPrintingWizard\Kyocera FS-1320D KX]
"PrintTicket"="<?xml version="1.0"?>
<psf:PrintTicket xmlns:psf="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemaframework" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" version="1" xmlns:psk="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemakeywords" xmlns:ns0000="hxxp://schemas.kyocera.com/printers/KxDriver/v_1_0_"><psf:Feature name="psk:PageOrientation"><psf:Option name="psk:Landscape"/></psf:Feature><psf:ParameterInit name="ns0000:PageDevmodeSnapshot"><psf:Value xsi:type="xsd:string">SwB5AG8AYwBlAHIAYQAgAEYAUwAtADEAMwAyADAARAAgAEsAWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEEAwHcAAAkD/+EAwIACQAAAAAAZAABAAcAWAICAAEAWAICAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAwAAABwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGRQY0sBAAAASgEAADAIAACQAAkAAAA0CJoLKgAq
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\PhotoPrintingWizard\Kyocera FS-1320D KX]
"PrintCapabilites"="<?xml version="1.0"?>
<psf:PrintCapabilities xmlns:psf="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemaframework" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" version="1" xmlns:ns0000="hxxp://schemas.kyocera.com/printers/KxDriver/v_1_0_" xmlns:psk="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemakeywords">
	<psf:ParameterDef name="ns0000:PageDevmodeSnapshot">
		<psf:Property name="psf:DataType">
			<psf:Value xsi:type="xsd:QName">xsd:string</psf:Value>
		</psf:Property>
		<psf:Property name="psf:UnitType">
			<psf:Value xsi:type="xsd:string">base64</psf:Value>
		</psf:Property>
		<psf:Property name="psf:DefaultValue">
			<psf:Value xsi:type="xsd:string">SwB5AG8AYwBlAHIAYQBNAGkAdABhAEYAUwAtAEMAOAAwADAAOABOAEsAWAAAAEsAWAAAAAAAAAAAAAAAAAAAAAEEAwHcAAAIA/+EAwEAAQAAAAAAZAABAAcAWAICAAEAWAI
[HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\ftp\UserChoice]
"Progid"="ChromeHTML"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice]
"Progid"="ChromeHTML"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoice]
"Progid"="ChromeHTML"
[HKEY_CURRENT_USER\Software\Piriform\CCleaner]
"MSG_WARNCHROMECACHE"="False"
[HKEY_CURRENT_USER\Software\Policies\Google\Chrome]
[HKEY_CURRENT_USER\Software\Synaptics\SynTP\TouchPadPS2\AppProfiles\Google Chrome]
[HKEY_CURRENT_USER\Software\Synaptics\SynTPEnh\ZoneConfig\TouchPadPS2\AppProfiles\Google Chrome]
[HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"="Google Chrome"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MacromediaFlashPaper.MacromediaFlashPaper\DefaultIcon]
@="C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MacromediaFlashPaper.MacromediaFlashPaper\shell\open\command]
@=""C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\ChromeHTML]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\ChromeHTML\DefaultIcon]
@="C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,0"
[HKEY_LOCAL_MACHINE\SOFTWARE\Google\Google Chrome]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\chrome.exe]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\TBDEn]
"SBOEM0"="c:\Programdata\Microsoft\Windows\Start menu\Programs\google chrome\google chrome.lnk"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\content\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\ar-SA\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\bg-BG\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\cs-CZ\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\da-DK\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\de-DE\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\el-GR\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\en-US\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\es-ES\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\et-EE\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\fi-FI\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\fr-FR\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\he-IL\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\hr-HR\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\hu-HU\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\it-IT\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\ja-JP\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\ko-KR\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\lt-LT\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\lv-LV\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\nb-NO\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\nl-NL\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\pl-PL\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\pt-BR\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\pt-PT\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\ro-RO\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\ru-RU\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\sk-SK\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\sl-SI\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\sr-RS\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\sv-SE\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\tr-TR\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\zh-CN\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\zh-TW\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\skin\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Symantec\VIP Access Client\chrome\content\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Symantec\VIP Access Client\chrome\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Symantec\VIP Access Client\chrome\locale\en-US\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Symantec\VIP Access Client\chrome\locale\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Symantec\VIP Access Client\chrome\skin\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\user\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\user\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\images\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Users\user\AppData\Local\Smartbar\Application\helperbar@helperbar.com\chrome\PublisherImages\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\url_advisor_xpcom_gecko10\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\url_advisor_xpcom_gecko11\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\url_advisor_xpcom_gecko12\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\url_advisor_xpcom_gecko13\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\url_advisor_xpcom_gecko14\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\url_advisor_xpcom_gecko15\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\url_advisor_xpcom_gecko16\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\url_advisor_xpcom_gecko17\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\url_advisor_xpcom_gecko18\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\url_advisor_xpcom_gecko9\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\locales\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\locales\de\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\locales\en\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com\chrome\locales\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com\chrome\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com\chrome\locales\de\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com\chrome\locales\en\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\virtual_keyboard_xpcom_gecko10\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\virtual_keyboard_xpcom_gecko11\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\virtual_keyboard_xpcom_gecko12\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\virtual_keyboard_xpcom_gecko13\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\virtual_keyboard_xpcom_gecko14\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\virtual_keyboard_xpcom_gecko15\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\virtual_keyboard_xpcom_gecko16\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\virtual_keyboard_xpcom_gecko17\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\virtual_keyboard_xpcom_gecko18\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\virtual_keyboard_xpcom_gecko9\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\content\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\locales\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\locales\de\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\locales\en\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\skin\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\online_banking_xpcom_gecko10\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\online_banking_xpcom_gecko11\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\online_banking_xpcom_gecko12\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\online_banking_xpcom_gecko13\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\online_banking_xpcom_gecko14\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\online_banking_xpcom_gecko15\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\online_banking_xpcom_gecko16\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\online_banking_xpcom_gecko17\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\online_banking_xpcom_gecko18\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\online_banking_xpcom_gecko9\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\content\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\locales\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\locales\de\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\locales\en\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\skin\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\content_blocker_xpcom_gecko10\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\content_blocker_xpcom_gecko11\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\content_blocker_xpcom_gecko12\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\content_blocker_xpcom_gecko13\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\content_blocker_xpcom_gecko14\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\content_blocker_xpcom_gecko15\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\content_blocker_xpcom_gecko16\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\content_blocker_xpcom_gecko17\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\content_blocker_xpcom_gecko18\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\content_blocker_xpcom_gecko9\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\content\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\locales\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\locales\en\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\skin\"="1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders]
"C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00A29BAAEF8E14C53BD06FA3CA98179B]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00B34023366FEBA59ADB69E7A3EA809E]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\url_advisor_xpcom_gecko14\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\14CAD3C1D6E1CD142D2D5A497C44ED1E]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\he-IL\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\166CF7A4CB310F50666AFCADC4EBBE41]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\lt-LT\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\179482E34EA16090E9FCD77507BF13DF]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\et-EE\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A5F2D80DC4099558BD0502A557F38F6]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\content_blocker_xpcom_gecko12\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1B5122311F8E182539CD837165A990E0]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\online_banking_xpcom_gecko9\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1BFFA0830FE480B5CA4DDF63AAC0800C]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\url_advisor_xpcom_gecko10\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1F0B269F91E9A825A96087404835320C]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\23C272897EB73E05EB14C0A561316E9A]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome_registrar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2567AEFD640B05350A66AC1CAA6F05E0]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\locales\en\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\276871F95CA9ADE5BB9A4924D320A816]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\abcrxreg.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\277F6E4717079D54A961E4B94FA30440]
"63864D8E55DCC3541A705AE95CC18BCD"="C:\Program Files (x86)\Symantec\VIP Access Client\chrome\content\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2AEC31ACF80E69256B8DBEA8E7B078A5]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\content_blocker_xpcom_gecko17\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B50184B3DB3F745DB7842043D1F0A14]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\content\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E9750ED179AA6358A7D8D290446DF5A]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com\chrome\locales\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3012AA1509C6F465A9CFDA0E389D2358]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\329E8B118053B65420110A9CF060F55D]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\zh-TW\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\341C3A3E3764619539B88CB1EFAF5EFF]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\vkcrxreg.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\34B289A21183AA55F88CFA499142861F]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\locales\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\39C7AC95ECA470350B6766B9CB665C67]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\content_blocker_xpcom_gecko11\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CF03C99A81360888F2DFD7657980DF2]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\sk-SK\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3CFD67102B422945C81980AB4C628C0E]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\content_blocker_xpcom_gecko16\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\440724856E7415B6EE6A2251BD87825C]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\fr-FR\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\457925E59A44164F3FD232AE1BD0D29D]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\bg-BG\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\47F4407D89280475A91ED7D9791FE4E5]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\locales\de\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B96FCFA17847F4F1003A70FB9AD9E66]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\nl-NL\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4CBE9234084853E59B9E03547CE9B76C]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\content_blocker_xpcom_gecko14\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4F1F6DDEF23F1D65396761AAE713C860]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\virtual_keyboard_xpcom_gecko15\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4F7ABE3FB15D21F5098588A7930B8A86]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\virtual_keyboard_xpcom_gecko18\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4FEB5888A3D08125893653FAABC49027]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\skin\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5728B45FA485059C16224852CFC15F02]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\en-US\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\588EB1210CCC1B856BDAF35EEBC899A4]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\locales\en\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5A6FBF7C44D50C1F38A6ADC4759C293F]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\pt-PT\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5DA0F91F9977C0D5CB11F90C70B26D4F]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5E8A7278C8E52D7739BF65CD650012E0]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\skin\logo_128.png"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5EE849EC4717A21548307D74E319E4BC]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5FB6CF0DE2D18645F9BA1BE3EB7D6FBB]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\virtual_keyboard_xpcom_gecko16\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\637C7A45F56ADAB5B94335D2B68506B8]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\online_banking_xpcom_gecko17\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\650F5B56B3464E7777EBC697FE782E13]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\sv-SE\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\689E6A781546DED005504625FC594303]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\lv-LV\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\698409CE29FF37153B85266AB9649A24]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\locales\de\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6E108C876BE6FE2009BA090E3329EF37]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\cs-CZ\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\70AD3A70012189F5EACE2E9A2A057F9B]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\content_blocker_xpcom_gecko9\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\71F26667DFF705DDABCCBC04D65B0881]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\pt-BR\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7661ECDB5FC349C5CADCB015A3D22101]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\virtual_keyboard_xpcom_gecko14\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\76815641B5F718DED3CB182B79E9573A]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\de-DE\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7A4EBF91116DDB7598259A267E2FBD65]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7BD5EDBA0A9EA8B5FA8F2DB4F1B9F36D]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\virtual_keyboard_xpcom_gecko10\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\800689593B58418A074FBA8F517C0087]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\810845257FB26D5549A529A4A89EBD8E]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\content_blocker_xpcom_gecko10\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\81092F9DF0587A67D48837B4DAFCA825]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\sl-SI\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8150DD1284A5254458B30843D0C79085]
"63864D8E55DCC3541A705AE95CC18BCD"="C:\Program Files (x86)\Symantec\VIP Access Client\chrome\locale\en-US\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\834924FD1831FD1568175E288F52EFEC]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\online_banking_xpcom_gecko12\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\87621679544F0C75BAE6AC7B2C13B1EB]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\url_advisor_xpcom_gecko12\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\87F39C04C63843864C4C9499F62B947C]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\el-GR\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8B1AFD6B7238CC153ACD65DD71725E71]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8C3D044DEEE60F5559E889BD9B1B2BA3]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\locales\en\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8FC3077B79D82367DE3931E18C782D3A]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\ar-SA\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9223B7C62830E8157A34B6DC3A064741]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome_registrar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\92492762B32A46C50A09172517A53A0E]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\locales\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\93371FCF3BC091A529B611F60F657D12]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9722A711C6EAD1358BBB85D34C89D582]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9724A4AD507F7C15C9AA3EC0788240BD]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\locales\de\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\98B2A0E598457B55881A881826F04B9F]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\locales\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\99D9E9084250E9F5EA9CCADAE028F804]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\virtual_keyboard_xpcom_gecko11\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A53E782788658D5EB1AD40A5BBE8E33]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\content\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9E482C9439D9F955682AE3BC8AA8DF5E]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\online_banking_xpcom_gecko11\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A07F73545D13F195D93EC41CEBFD3993]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\content_blocker_xpcom_gecko13\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6A7D23880C2B1350A7AF6712A684819]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\url_advisor_xpcom_gecko11\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A6E8F7C328AA42C598E066BC9F801BEF]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\content_blocker_xpcom_gecko15\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A9459EFCBA9A83DE0047F80DDAB74EC4]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\ja-JP\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A9B64E4104DAC6E9789F59EFC823155C]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\nb-NO\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AC8F6121B4EACE3F77EAC09724DF5A8A]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\sr-RS\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AD4E2E320AAE0BE5BB09DE460B6F7903]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\online_banking_xpcom_gecko15\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B06C525BD0DBAF3DB553940FFC6BF626]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\es-ES\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B09C0F449D7B9B0E11E191A98188D547]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\ro-RO\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B09D2169AE2F0D059BE79B9B6478E433]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\url_advisor_xpcom_gecko15\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B606F65EFDDBDD2597BCD9328B8317D2]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\da-DK\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B6719C97484B3B18603B7C3E347DD14B]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\fi-FI\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B84827D47C6E8885C81256824F3A0733]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\url_advisor_xpcom_gecko16\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B956BF1974DB33440B0DB19215045CFF]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\x86\tschrome.crx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B9899F54F2EBAE30FE5E86105587809A]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BA2C4E7C3E0B1CCAC96E3A53AF5EB7DF]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\hr-HR\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BA3C1BD62BC087754852C9AB862865B4]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\url_advisor_xpcom_gecko13\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BB358A40831BC06DD63AE02274437370]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\content\websiteLogon.js"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BB68BE9FB047DCE5F9C758AFCB6D66D7]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\locales\en\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BF9EBB45D9BA09458B5971E3BA8A4881]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\skin\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C29B1293C14C140A15C3126874BFC4D3]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\ru-RU\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C2D5C00B7365F4C51B256635F0DDCB6D]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com\chrome\locales\en\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C427560B211BE0552A6253966A8F792E]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvcrxreg.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C8A4D3C9BE64A6B59BC5BC063B4432B8]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\online_banking_xpcom_gecko14\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\CABCE397250C7F02A8B6F2871FFD8120]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\tr-TR\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D7123EE6E11221A539DEFBEB745A294F]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\url_advisor_xpcom_gecko17\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DBD7AB9AD4ED94F00AF239D8753FE5DC]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\hu-HU\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DC6E6F784D6A04556BB5EC8281BBA4FD]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\virtual_keyboard_xpcom_gecko17\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DDC8331F886D4A42D72CF6CD1E0DBA31]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\it-IT\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DF198E516A8EDF65492D003F9D9B1CE5]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\skin\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E007F8601E9EFCC36CBA518C2CBE66CE]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\ko-KR\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E17D60B18C633AB4D8980C07C8B6315C]
"63864D8E55DCC3541A705AE95CC18BCD"="C:\Program Files (x86)\Symantec\VIP Access Client\chrome\skin\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E29D3877D5FB08059AEB66E0AC838086]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\components\content_blocker_xpcom_gecko18\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E5137DB38E7E9015DB1206FAC6F30A90]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\virtual_keyboard_xpcom_gecko13\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E5659270F3732E05EB22013F4A2A2956]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\url_advisor_xpcom_gecko9\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EA405E3C620349F53B840B38D3FB6538]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\locales\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EB95AA67BEEF5A450AD1DEA17BEA6BBA]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com\chrome\content\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED4F99EF46D838055BD1762C109F5CAE]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\online_banking_xpcom_gecko13\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ED9EEBAEEB203D359BA6A1CB33B07075]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\virtual_keyboard_xpcom_gecko12\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EEBE02AECE655C65D8773449B7D8C0D0]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com\chrome\components\virtual_keyboard_xpcom_gecko9\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F2ADA79E4A6F1A6FF2AE5F241BBF20F3]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\pl-PL\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F4B126EC641BF6759A205E7291F612BB]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\online_banking_xpcom_gecko16\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F7562712A6988D252BADDE48419C0DFC]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com\chrome\locales\de\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F977C1E2027D9415AB097A683B06E377]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\online_banking_xpcom_gecko10\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FABCADE75A2F71472B0B24A788FE07D6]
"6204F8FDCD6EC474092DCB9E8878688F"="C:\Program Files\AuthenTec TrueSuite\websitelogon@truesuite.com\chrome\locale\zh-CN\websitelogon.dtd"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FAE034FB5995CDA5B9BAE5A39054EA52]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com\chrome\components\online_banking_xpcom_gecko18\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FBD80A9CEEE1EEE5092496515A10294B]
"9EE2070D4ED9A914C9C674031B9C58AB"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com\chrome\components\url_advisor_xpcom_gecko18\"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-4132708011-2150104516-3946137186-1001\Products\AF05BD4008AE6524589F45C085E282D0\Features]
"GoogleChrome"="IYHbjsJEZ=`[[u2qnkjD5z}%w`O+A94+u,Mj{EghPlugins"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-21-4132708011-2150104516-3946137186-1001\Products\AF05BD4008AE6524589F45C085E282D0\Features]
"Chrome"="e!N-wT5!q8LJzZ'mCVYt0Y]OS2TFP?`5C87DVGmo0Y]OS2TFP?`5C87EVGmouE?^?u.6p8J(dhGySoWSKavKbkP?C=sK`rz0gRk.Plugins"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SMDEn]
"OEM1"="%ALLUSERSPROFILE%\Microsoft\windows\start menu\programs\google chrome\google chrome.lnk"
[HKEY_LOCAL_MACHINE\SOFTWARE\Synaptics\SynTP\Defaults\AppProfiles\Google Chrome]
[HKEY_LOCAL_MACHINE\SOFTWARE\Synaptics\SynTPEnh\OSD\TouchPad\AppProfiles\Google Chrome]
[HKEY_LOCAL_MACHINE\SOFTWARE\Synaptics\SynTPEnh\OSD\TouchPad\AppProfiles\Google Chrome]
"AppExe"="chrome.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Synaptics\SynTPEnh\OSD\TouchPad\AppProfiles\Google Chrome]
"AppFriendlyName"="Google Chrome"
[HKEY_LOCAL_MACHINE\SOFTWARE\Synaptics\SynTPEnh\PlugInConfig\TouchPad\AppProfiles\Google Chrome]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\dchlnpcodkpfdpacogkljefecpegganj]
"path"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\hakdifolhalapjijoafobooafbilfakh]
"path"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\hghkgaeecgjhjkannahfamoehjmkjail]
"path"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh]
"path"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\ombkllfdikmoepjdpmdaiinfbjpnkboa]
"path"="C:\Program Files\AuthenTec TrueSuite\x86\tschrome.crx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pjldcfjmnllhmgjclecdnfampinooman]
"path"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Common\Partner\LENP\Chrome]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Google Chrome]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update]
"LastInstallerSuccessLaunchCmdLine"=""C:\Program Files (x86)\Google\Chrome\Application\chrome.exe""
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}]
"UninstallString"="C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\Installer\setup.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}]
"InstallerSuccessLaunchCmdLine"=""C:\Program Files (x86)\Google\Chrome\Application\chrome.exe""
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"ap"="-multi-chrome"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"UninstallString"="C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\Installer\setup.exe"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"UninstallArguments"=" --uninstall --multi-install --chrome --system-level --verbose-logging"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}]
"LastInstallerSuccessLaunchCmdLine"=""C:\Program Files (x86)\Google\Chrome\Application\chrome.exe""
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\KasperskyLab\protected\PURE13\Installer\features\OnlineBankingFeature]
"Selfregs"="online_banking_firefox_registrar.dll online_banking_chrome_registrar.dll online_banking_bho.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\KasperskyLab\protected\PURE13\Installer\selfregs]
"abcrxreg.dll"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\abcrxreg.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\KasperskyLab\protected\PURE13\Installer\selfregs]
"online_banking_chrome_registrar.dll"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome_registrar.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Shared\HTML]
"KnownIDs"="ChromeHTML"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\chromeinstall-7u13_RASAPI32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\chromeinstall-7u13_RASMANCS]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\chrome_RASAPI32]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\chrome_RASMANCS]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\ChromeHTML]
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Classes\CLSID\{42042206-2D85-11D3-8CFF-005004838597}\Old Icon\ChromeHTML\DefaultIcon]
@="C:\Program Files (x86)\Google\Chrome\Application\chrome.exe,0"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Google\Chrome]
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\DirectInput\CHROME.EXE51CB4263000CE9D0]
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\DirectInput\CHROME.EXE51CB4263000CE9D0]
"Name"="CHROME.EXE"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\DirectInput\CHROME.EXE51D39520000CE9D0]
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\DirectInput\CHROME.EXE51D39520000CE9D0]
"Name"="CHROME.EXE"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\DirectInput\CHROME.EXE51E03646000CE9D0]
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\DirectInput\CHROME.EXE51E03646000CE9D0]
"Name"="CHROME.EXE"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\DirectInput\CHROME.EXE51F05C5F000CE9D0]
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\DirectInput\CHROME.EXE51F05C5F000CE9D0]
"Name"="CHROME.EXE"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\DirectInput\CHROME.EXE5218CE75000CA7D0]
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\DirectInput\CHROME.EXE5218CE75000CA7D0]
"Name"="CHROME.EXE"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\DirectInput\MostRecentApplication]
"Name"="CHROME.EXE"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\DirectInput\MostRecentApplication]
"Id"="CHROME.EXE5218CE75000CA7D0"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Installer\Assemblies\Global]
"Microsoft.VisualStudio.OLE.Interop,version="7.1.40304.0",culture="neutral",publicKeyToken="B03F5F7F11D50A3A""="SkbW$'ICC9^'uz&5qL7'GoogleChrome>IYHbjsJEZ=`[[u2qnkjD"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Installer\Features\AF05BD4008AE6524589F45C085E282D0]
"GoogleChrome"="Plugins"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Installer\Features\AF05BD4008AE6524589F45C085E282D0]
"Chrome"="Plugins"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Internet Explorer\IEDevTools\Options\UAString]
"Chrome"="Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/533.4 (KHTML, like Gecko) Chrome/5.0.375.99 Safari/533.4"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\313c4305_0]
@="{0.0.0.00000000}.{332be3f9-11bf-42f7-ab81-bdb49982f7bb}|\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore\8758da9_0]
@="{0.0.0.00000000}.{2c8254de-47dd-4501-9ff4-80724dc72d43}|\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe%b{00000000-0000-0000-0000-000000000000}"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.doc\OpenWithList]
"b"="chrome.exe"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.docx\OpenWithList]
"c"="chrome.exe"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
"Progid"="ChromeHTML"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
"Progid"="ChromeHTML"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\OpenWithList]
"b"="chrome.exe"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.mkv\OpenWithList]
"c"="chrome.exe"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\OpenWithList]
"b"="chrome.exe"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.png\OpenWithList]
"c"="chrome.exe"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pptx\OpenWithList]
"b"="chrome.exe"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
"Progid"="ChromeHTML"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
"Progid"="ChromeHTML"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
"Progid"="ChromeHTML"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xls\OpenWithList]
"c"="chrome.exe"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xlsx\OpenWithList]
"b"="chrome.exe"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.zip\OpenWithList]
"b"="chrome.exe"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\PhotoPrintingWizard\Kyocera FS-1320D KX]
"PrintTicket"="<?xml version="1.0"?>
<psf:PrintTicket xmlns:psf="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemaframework" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" version="1" xmlns:psk="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemakeywords" xmlns:ns0000="hxxp://schemas.kyocera.com/printers/KxDriver/v_1_0_"><psf:Feature name="psk:PageOrientation"><psf:Option name="psk:Landscape"/></psf:Feature><psf:ParameterInit name="ns0000:PageDevmodeSnapshot"><psf:Value xsi:type="xsd:string">SwB5AG8AYwBlAHIAYQAgAEYAUwAtADEAMwAyADAARAAgAEsAWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEEAwHcAAAkD/+EAwIACQAAAAAAZAABAAcAWAICAAEAWAICAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAwAAABwBAAAAAAAAAAAAAAAAAAAAAAAAAAAA
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\PhotoPrintingWizard\Kyocera FS-1320D KX]
"PrintCapabilites"="<?xml version="1.0"?>
<psf:PrintCapabilities xmlns:psf="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemaframework" xmlns:xsi="hxxp://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="hxxp://www.w3.org/2001/XMLSchema" version="1" xmlns:ns0000="hxxp://schemas.kyocera.com/printers/KxDriver/v_1_0_" xmlns:psk="hxxp://schemas.microsoft.com/windows/2003/08/printing/printschemakeywords">
	<psf:ParameterDef name="ns0000:PageDevmodeSnapshot">
		<psf:Property name="psf:DataType">
			<psf:Value xsi:type="xsd:QName">xsd:string</psf:Value>
		</psf:Property>
		<psf:Property name="psf:UnitType">
			<psf:Value xsi:type="xsd:string">base64</psf:Value>
		</psf:Property>
		<psf:Property name="psf:DefaultValue">
			<psf:Value xsi:type="xsd:string">SwB5AG8AYwBlAHIAYQBNAGkAdABhAEYAUwAtAEMAOAAwADAAOABOAEsAWAAAAEsAWAAAAAAAAAAAAAAAAAAAAAEEAwH
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\ftp\UserChoice]
"Progid"="ChromeHTML"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice]
"Progid"="ChromeHTML"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoice]
"Progid"="ChromeHTML"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Piriform\CCleaner]
"MSG_WARNCHROMECACHE"="False"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Policies\Google\Chrome]
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Synaptics\SynTP\TouchPadPS2\AppProfiles\Google Chrome]
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Synaptics\SynTPEnh\ZoneConfig\TouchPadPS2\AppProfiles\Google Chrome]
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"="Google Chrome"
[HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001_Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe"="Google Chrome"

-= EOF =-

Alt 30.08.2013, 20:33   #23
schrauber
/// the machine
/// TB-Ausbilder
 
Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden - Standard

Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden


Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
C:\Users\user\Desktop\Programme\Google Chrome.lnk
C:\Users\user\Downloads\chromeinstall-7u13.exe

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.




Kopiere den Text in der Codebox in deinen Editor (z.B. Notepad) und speichere es unter dem Namen regfix.reg (bei Dateityp bitte "alle Dateien" wählen)

Code:
ATTFilter
Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion \Run\
[-HKEY_CURRENT_USER\Software\Google\Chrome]
[-HKEY_CURRENT_USER\Software\Microsoft\DirectInput\CHROME.EXE51CB4263000CE9D0]
[-HKEY_CURRENT_USER\Software\Microsoft\Installer\Features\AF05BD4008AE6524589F45C085E282D0]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IEDevTools\Options\UAString]
"Chrome"=-
[-HKEY_CURRENT_USER\Software\Policies\Google\Chrome]
[-HKEY_USERS\S-1-5-21-4132708011-2150104516-3946137186-1001\Software\Policies\Google\Chrome]
Starte die regfix.reg duch Doppelklick.


Downloade Dir bitte TFC ( von Oldtimer ) und speichere die Datei auf dem Desktop.
Schließe nun alle offenen Programme und trenne Dich von dem Internet.
Doppelklick auf die TFC.exe und drücke auf Start.
Sollte TFC nicht alle Dateien löschen können wird es einen Neustart verlangen. Dies bitte zulassen.


Chrome neu installieren.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 30.08.2013, 21:37   #24
Woody91
 
Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden - Standard

Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden


Fixlog:

Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 28-08-2013
Ran by user at 2013-08-30 22:21:56 Run:4
Running from C:\Users\user\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
C:\Users\user\Desktop\Programme\Google Chrome.lnk
C:\Users\user\Downloads\chromeinstall-7u13.exe
*****************

C:\Users\user\Desktop\Programme\Google Chrome.lnk => Moved successfully.
C:\Users\user\Downloads\chromeinstall-7u13.exe => Moved successfully.

==== End of Fixlog ====
Nach erneuter Installation von Chrome immernoch dasselbe Problem :/

Alt 31.08.2013, 13:10   #25
schrauber
/// the machine
/// TB-Ausbilder
 
Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden - Standard

Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden


Frisches FRST log bitte. Unfassbar
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 31.08.2013, 15:23   #26
Woody91
 
Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden - Standard

Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden


Frst:


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013
Ran by user (administrator) on 31-08-2013 16:21:29
Running from C:\Users\user\Downloads
Windows 7 Professional Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AuthenTec, Inc) C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe
(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe
(DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkUserAgent.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
(Conexant Systems Inc.) C:\Windows\system32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Lenovo) C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
() C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CAMMUTE.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe
(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SAsrv.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
(Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Ricoh co.,Ltd.) C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Lenovo Group Limited) C:\PROGRA~1\LENOVO\VIRTSCRL\virtscrl.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\tpnumlk.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\MKRMSG.EXE
(Lenovo Group Limited) C:\PROGRA~1\Lenovo\HOTKEY\TPONSCR.EXE
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Lenovo Group Limited) C:\PROGRA~2\ThinkPad\UTILIT~1\SCHTASK.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Lenovo) C:\Program Files (x86)\Lenovo\message center plus\mcplaunch.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe
(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\TouchControl.exe
(AuthenTec Inc.) C:\Program Files\AuthenTec TrueSuite\x86\BioMonitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BLEServicesCtrl] - C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [177936 2012-02-17] (Intel Corporation)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [11406608 2012-02-21] (Intel Corporation)
HKLM\...\Run: [cAudioFilterAgent] - C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [564352 2012-03-01] (Conexant Systems, Inc.)
HKLM\...\Run: [ForteConfig] - C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SACpl.exe [1654400 2012-02-21] (Conexant Systems, Inc.)
HKLM\...\Run: [TpShocks] - C:\Windows\system32\TpShocks.exe [382528 2012-02-24] (Lenovo.)
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [283984 2012-04-10] (Lenovo Group Limited)
HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-07-03] (NVIDIA Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2963184 2013-04-24] (Synaptics Incorporated)
HKCU\...\Run: [Facebook Update] - C:\Users\user\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-05-02] (Facebook Inc.)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Run: [swg] - C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-06-18] (Google Inc.)
HKLM-x32\...\Run: [IMSS] - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133400 2012-03-07] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-04] (Intel Corporation)
HKLM-x32\...\Run: [RotateImage] - C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-30] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [Dolby Advanced Audio v2] - C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe [507744 2011-12-20] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [PWMTRV] - C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL [5939776 2012-04-11] (Lenovo Group Limited)
HKLM-x32\...\Run: [Fastboot] - C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBConsole.exe [1091376 2012-01-17] (Lenovo)
HKLM-x32\...\Run: [Lenovo Registration] - C:\Program Files (x86)\Lenovo Registration\LenovoReg.exe [4351712 2011-07-13] (Lenovo, Inc.)
HKLM-x32\...\Run: [IntelSBA] - C:\Program Files (x86)\Intel\Intel(R) Small Business Advantage\UI\IntelSmallBusinessAdvantage.exe [4243168 2012-02-27] (Intel Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-08-16] (Apple Inc.)
HKU\Default\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo)
HKU\Default\...\RunOnce: [] -  [x]
HKU\Default\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~2\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [159744 2011-12-15] ()
HKU\Default User\...\RunOnce: [Lenovo.ShowBand] - C:\Program Files\Lenovo\SimpleTap DeskBand\ShowBand.exe [52584 2013-08-08] (Lenovo)
HKU\Default User\...\RunOnce: [] -  [x]
HKU\Default User\...\RunOnce: [Lenovoautoqdrive] - C:\PROGRA~2\Common~1\Lenovo\Lenovo~1\LenovoAutorunreg.exe [159744 2011-12-15] ()
AppInit_DLLs: C:\Windows\System32\nvinitx.dll [266448 2013-06-21] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll C:\Windows\SysWOW64\nvinit.dll [214448 2013-06-21] (NVIDIA Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,start page = hxxp://www.bing.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: TrueSuite Browser Helper Object - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files\AuthenTec TrueSuite\IEBHO.DLL (AuthenTec Inc.)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\64bit\VIPAddOnForIE64.dll (Symantec Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\PROGRA~2\KASPER~1\KASPER~1.0\KASPER~2\spIEBho.dll (Kaspersky Lab)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: No Name - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} -  No File
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Symantec VIP Access Add-On - {C63CD127-A1CB-4D49-A4F7-D6F88A917BE6} - C:\Program Files (x86)\Symantec\VIP Access Client\VIPAddOnForIE.dll (Symantec Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM - TrueSuite Toolbar - {C98EE38D-21E4-4A50-907D-2B56FEC7013E} - C:\Program Files\AuthenTec TrueSuite\IEBHO.DLL (AuthenTec Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - No Name - {C98EE38D-21E4-4A50-907D-2B56FEC7013E} -  No File
Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\PROGRA~2\KASPER~1\KASPER~1.0\KASPER~2\spIEBho.dll (Kaspersky Lab)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\user\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Extension: ftdownloader - C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles\extensions\ftdownloader@ftdownloader.com.xpi
FF HKLM-x32\...\Firefox\Extensions:  C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [VIP5X@verisign.com] C:\Program Files (x86)\Symantec\VIP Access Client\
FF Extension: Symantec VIP Access Add-On - C:\Program Files (x86)\Symantec\VIP Access Client\

Chrome: 
=======
CHR HomePage: hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=NL&userid=65bf0910-8955-4ea2-ba62-2e0a7ef14d9a&searchtype=hp&installDate=27/06/2013
CHR RestoreOnStartup: "hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=NL&userid=65bf0910-8955-4ea2-ba62-2e0a7ef14d9a&searchtype=hp&installDate=27/06/2013", "hxxp://www.google.com", "hxxp://www.google.com/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.62\pdf.dll ()
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.4) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel\u00AE Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\user\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
CHR Plugin: (Shockwave for Director) - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (Kaspersky URL Advisor) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.2.558_0
CHR Extension: (Safe Money) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.2.558_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR Extension: (Anti-Banner) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.2.558_0
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [gkjoindjjcmbdpbfppabdgflnkgbbcli] - C:\Program Files (x86)\FTDownloader.com\FTDownloader10.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [ombkllfdikmoepjdpmdaiinfbjpnkboa] - C:\Program Files\AuthenTec TrueSuite\x86\tschrome.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx

==================== Services (Whitelisted) =================

R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch)
R2 DisplayLinkService; C:\Program Files\DisplayLink Core Software\DisplayLinkManager.exe [8447848 2011-11-09] (DisplayLink Corp.)
R2 FastbootService; C:\Program Files (x86)\Lenovo\RapidBoot HDD Accelerator\FBService.exe [169776 2012-01-17] (Lenovo)
R2 FPLService; C:\Program Files\AuthenTec TrueSuite\TrueSuiteService.exe [313672 2011-12-22] (AuthenTec, Inc)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [128280 2012-03-07] ()
R2 Intel(R) Small Business Advantage; C:\Program Files (x86)\Intel\Intel(R) Small Business Advantage\Service\Intel.SmallBusinessAdvantage.WindowsService.exe [49376 2012-02-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [163608 2012-03-07] (Intel Corporation)
R2 LENOVO.TVTVCAM; C:\Program Files\Lenovo\Communications Utility\vcamsvc.exe [175440 2012-04-10] (Lenovo Group Limited)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [133992 2011-07-12] (Lenovo Group Limited)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [30184 2013-08-08] ()
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273168 2012-02-26] ()
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [21416 2012-09-13] ()
R2 VIPAppService; C:\Program Files (x86)\Symantec\VIP Access Client\VIPAppService.exe [84080 2012-04-10] (Symantec Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [2669840 2012-02-26] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-06-27] (DT Soft Ltd)
S3 Fastboot; C:\Windows\System32\DRIVERS\Fastboot.sys [70416 2012-01-17] (Windows (R) Win 7 DDK provider)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-08-14] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-09-03] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-09-03] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-08-14] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-08-14] (Kaspersky Lab ZAO)
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv_x64.sys [44928 2012-10-11] (ManyCam LLC)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [28160 2013-01-31] (ManyCam LLC)
R1 PHCORE; C:\Program Files\Lenovo\RapidBoot\PHCORE64.SYS [33344 2012-01-30] (Lenovo Group Limited)
R3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [259688 2011-10-27] (Realtek Semiconductor Corp.)
R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-29] (Lenovo Information Product(ShenZhen China) Inc.)
R3 tvtvcamd; C:\Windows\System32\DRIVERS\tvtvcamd.sys [27432 2011-12-07] (ThinkVantage Communications Utility)
S3 AIDA64Driver; \??\E:\AIDA64 Extreme Edition 2.50\kerneld.x64 [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-30 22:25 - 2013-08-30 22:25 - 00448512 _____ (OldTimer Tools) C:\Users\user\Desktop\TFC.exe
2013-08-30 22:23 - 2013-08-30 22:23 - 00000583 _____ C:\Users\user\Downloads\regfix.reg
2013-08-30 21:47 - 2013-08-30 21:47 - 00000833 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-08-30 21:46 - 2013-08-30 21:46 - 04454952 _____ (Piriform Ltd) C:\Users\user\Downloads\ccsetup405.exe
2013-08-30 15:57 - 2013-08-30 16:00 - 00181232 _____ C:\Users\user\Downloads\SystemLook.txt
2013-08-30 15:55 - 2013-08-30 15:55 - 00165376 _____ C:\Users\user\Downloads\SystemLook_x64.exe
2013-08-29 15:27 - 2013-08-29 15:32 - 00000000 ____D C:\Users\user\Desktop\VA-Freude_Am_Tanzen_5zig-(FAT050)-WEB-2011-OMA
2013-08-29 15:24 - 2013-08-29 15:29 - 00000000 ____D C:\Users\user\Desktop\VA_-_Diary_No_1-(UYCD001)-WEB-2010-WiTF
2013-08-29 15:15 - 2013-08-29 15:15 - 00018422 _____ C:\Users\user\Downloads\hijackthis.log
2013-08-29 15:13 - 2013-08-29 15:13 - 00388608 _____ (Trend Micro Inc.) C:\Users\user\Downloads\HiJackThis204.exe
2013-08-29 15:13 - 2013-08-29 15:13 - 00388608 _____ (Trend Micro Inc.) C:\Users\user\Downloads\hijackthis_5833.exe
2013-08-29 14:49 - 2013-08-29 14:49 - 00001794 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-29 14:48 - 2013-08-29 14:49 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-29 14:48 - 2013-08-29 14:49 - 00000000 ____D C:\Program Files\iTunes
2013-08-29 14:48 - 2013-08-29 14:49 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-08-29 14:48 - 2013-08-29 14:48 - 00000000 ____D C:\Program Files\iPod
2013-08-29 14:25 - 2013-08-29 14:26 - 02828552 _____ (AVAST Software) C:\Users\user\Downloads\avast-browser-cleanup_8.0.1484.29 (1).exe
2013-08-29 14:20 - 2013-08-30 22:25 - 00000583 _____ C:\Users\user\Desktop\regfix.reg
2013-08-29 14:20 - 2013-08-29 14:20 - 00001056 _____ C:\Users\user\Desktop\Neues Textdokument.txt
2013-08-29 13:51 - 2013-08-29 13:53 - 00004532 _____ C:\Users\user\Desktop\SystemLook.txt
2013-08-29 13:51 - 2013-08-29 13:51 - 00165376 _____ C:\Users\user\Desktop\SystemLook_x64.exe
2013-08-28 10:05 - 2013-08-28 10:05 - 01579080 _____ (Farbar) C:\Users\user\Downloads\FRST64.exe
2013-08-28 09:24 - 2013-08-30 22:34 - 00000000 ____D C:\Users\user\AppData\Local\Deployment
2013-08-28 09:24 - 2013-08-28 09:24 - 00000000 ____D C:\Users\user\AppData\Local\Apps\2.0
2013-08-27 14:53 - 2013-08-27 14:53 - 02347384 _____ (ESET) C:\Users\user\Downloads\esetsmartinstaller_enu (1).exe
2013-08-27 14:53 - 2013-08-27 14:53 - 00891115 _____ C:\Users\user\Downloads\SecurityCheck (1).exe
2013-08-27 12:41 - 2013-08-27 12:41 - 00000624 _____ C:\Users\user\Desktop\JRT.txt
2013-08-27 12:16 - 2013-08-27 12:16 - 01021434 _____ (Thisisu) C:\Users\user\Downloads\JRT (1).exe
2013-08-27 12:16 - 2013-08-27 12:16 - 00994642 _____ C:\Users\user\Downloads\adwcleaner (1).exe
2013-08-27 12:15 - 2013-08-27 12:16 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\user\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-08-27 01:35 - 2013-08-27 01:35 - 00000970 _____ C:\Users\user\Documents\Fixlist.txt
2013-08-26 19:11 - 2013-08-26 19:11 - 02347384 _____ (ESET) C:\Users\user\Downloads\esetsmartinstaller_enu.exe
2013-08-26 19:11 - 2013-08-26 19:11 - 00891115 _____ C:\Users\user\Downloads\SecurityCheck.exe
2013-08-26 19:09 - 2013-08-26 19:09 - 00000000 ____D C:\Users\user\AppData\Roaming\Malwarebytes
2013-08-26 19:08 - 2013-08-27 12:18 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-26 19:08 - 2013-08-26 19:08 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-26 19:08 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2013-08-26 19:07 - 2013-08-26 19:08 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\user\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-26 18:51 - 2013-08-26 18:51 - 00000000 ____D C:\Windows\ERUNT
2013-08-26 18:49 - 2013-08-26 18:49 - 01021434 _____ (Thisisu) C:\Users\user\Downloads\JRT.exe
2013-08-26 18:42 - 2013-08-27 12:27 - 00000000 ____D C:\AdwCleaner
2013-08-26 18:41 - 2013-08-26 18:42 - 00994642 _____ C:\Users\user\Downloads\adwcleaner.exe
2013-08-26 18:31 - 2013-08-26 18:31 - 00040860 _____ C:\ComboFix.txt
2013-08-26 17:21 - 2013-08-26 18:34 - 00000000 ____D C:\ComboFix
2013-08-26 15:38 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-08-26 15:38 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-08-26 15:38 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-08-26 15:38 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-08-26 15:38 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-08-26 15:38 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-08-26 15:38 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-08-26 15:38 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-08-26 15:37 - 2013-08-26 18:34 - 00000000 ____D C:\Qoobox
2013-08-26 15:37 - 2013-08-26 18:18 - 00000000 ____D C:\Windows\erdnt
2013-08-26 15:34 - 2013-08-26 15:34 - 05113393 ____R (Swearware) C:\Users\user\Downloads\ComboFix.exe
2013-08-26 15:32 - 2013-08-27 12:05 - 00026103 _____ C:\Users\user\Downloads\Addition.txt
2013-08-26 15:30 - 2013-08-26 15:30 - 00000000 ____D C:\FRST
2013-08-26 15:21 - 2013-08-26 15:21 - 00000000 ____D C:\Users\user\AppData\Local\VS Revo Group
2013-08-26 15:21 - 2013-08-26 15:21 - 00000000 ____D C:\ProgramData\VS Revo Group
2013-08-26 15:21 - 2013-08-26 15:21 - 00000000 ____D C:\Program Files\VS Revo Group
2013-08-26 15:21 - 2009-12-30 11:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2013-08-26 15:19 - 2013-08-26 15:19 - 10031224 _____ (VS Revo Group                                               ) C:\Users\user\Downloads\RevoUninProSetup.exe
2013-08-26 13:40 - 2013-08-26 13:40 - 00000000 _____ C:\autoexec.bat
2013-08-17 09:58 - 2013-08-17 09:58 - 00985600 _____ C:\Users\user\Downloads\MicrosoftFixit50123.msi
2013-08-15 17:24 - 2013-08-15 17:24 - 00000000 ____D C:\Users\user\AppData\Roaming\DVDVideoSoft
2013-08-15 17:24 - 2013-08-15 17:24 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-08-15 17:19 - 2013-08-15 17:23 - 00000000 ____D C:\Users\user\Desktop\Settle (Deluxe Version)
2013-08-15 17:07 - 2013-08-15 18:38 - 00000000 ____D C:\Program Files (x86)\Free mp3 Wma Converter
2013-08-15 17:07 - 2013-08-15 17:07 - 00000000 ____D C:\Users\user\AppData\Roaming\FreeAudioPack
2013-08-15 17:07 - 2011-09-29 14:20 - 02084864 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudDesign.dll
2013-08-15 17:07 - 2011-09-29 14:20 - 01986560 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudFile.dll
2013-08-15 17:07 - 2011-09-29 14:20 - 01212416 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudioInfos.dll
2013-08-15 17:07 - 2011-09-29 14:20 - 00479232 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudioVisu.dll
2013-08-15 17:07 - 2011-09-29 14:20 - 00458752 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudPlayer.dll
2013-08-15 17:07 - 2011-09-29 14:20 - 00454656 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudioRecord.dll
2013-08-15 17:07 - 2011-09-29 14:20 - 00417792 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudDisplay.dll
2013-08-15 17:07 - 2011-09-29 14:20 - 00348160 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\WMAFile.dll
2013-08-15 17:07 - 2011-09-29 14:20 - 00164144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COMCT232.OCX
2013-08-15 17:07 - 2011-09-29 14:20 - 00116296 _____ C:\Windows\SysWOW64\NCTWMAProfiles.prx
2013-08-15 17:07 - 2011-09-29 14:19 - 00662288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX
2013-08-15 17:07 - 2011-09-29 14:19 - 00224016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TABCTL32.OCX
2013-08-15 17:07 - 2011-09-29 14:19 - 00152848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COMDLG32.OCX
2013-08-15 17:07 - 2011-09-29 14:19 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCFR.DLL
2013-08-15 17:07 - 2011-09-29 14:19 - 00119568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6FR.DLL
2013-08-15 17:07 - 2011-09-29 14:19 - 00115920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinet.OCX
2013-08-15 17:07 - 2011-09-29 14:19 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6STKIT.DLL
2013-08-15 17:07 - 2011-09-29 14:19 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Mscc2fr.dll
2013-08-15 17:07 - 2011-09-29 14:19 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CMDLGFR.DLL
2013-08-15 17:07 - 2011-09-29 14:19 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TABCTFR.DLL
2013-08-15 17:07 - 2011-09-29 14:19 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetfr.DLL
2013-08-15 17:06 - 2013-08-15 17:06 - 00458744 _____ (Bandoo Media Inc) C:\Users\user\Downloads\Setup21_FreeConverter.exe
2013-08-14 14:42 - 2013-08-14 14:46 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 14:35 - 2013-07-25 05:27 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-14 14:35 - 2013-07-25 05:27 - 00096768 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-08-14 14:35 - 2013-07-25 04:22 - 02382848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-14 14:35 - 2013-07-25 04:22 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2013-08-14 14:34 - 2013-07-25 05:54 - 17830400 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-14 14:34 - 2013-07-25 05:37 - 02312704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-14 14:34 - 2013-07-25 05:35 - 10926080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-14 14:34 - 2013-07-25 05:31 - 01346560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-14 14:34 - 2013-07-25 05:30 - 01392128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-14 14:34 - 2013-07-25 05:29 - 01494528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-08-14 14:34 - 2013-07-25 05:29 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-08-14 14:34 - 2013-07-25 05:29 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-14 14:34 - 2013-07-25 05:28 - 02147840 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-14 14:34 - 2013-07-25 05:28 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-14 14:34 - 2013-07-25 05:28 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-14 14:34 - 2013-07-25 05:28 - 00599040 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-08-14 14:34 - 2013-07-25 05:28 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-08-14 14:34 - 2013-07-25 05:26 - 00248320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-14 14:34 - 2013-07-25 04:40 - 12334080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-14 14:34 - 2013-07-25 04:32 - 01800704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-14 14:34 - 2013-07-25 04:30 - 09738752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-14 14:34 - 2013-07-25 04:26 - 01129472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-14 14:34 - 2013-07-25 04:26 - 01104384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-14 14:34 - 2013-07-25 04:25 - 01427968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2013-08-14 14:34 - 2013-07-25 04:24 - 00231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2013-08-14 14:34 - 2013-07-25 04:24 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-14 14:34 - 2013-07-25 04:23 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-14 14:34 - 2013-07-25 04:23 - 00717824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-14 14:34 - 2013-07-25 04:23 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-14 14:34 - 2013-07-25 04:23 - 00420864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2013-08-14 14:34 - 2013-07-25 04:23 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2013-08-14 14:34 - 2013-07-25 04:22 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-08-14 14:33 - 2013-07-09 07:52 - 00224256 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 14:33 - 2013-07-09 07:46 - 01472512 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 14:33 - 2013-07-09 07:46 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 14:33 - 2013-07-09 07:46 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-14 14:33 - 2013-07-09 06:52 - 00175104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 14:33 - 2013-07-09 06:46 - 01166848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 14:33 - 2013-07-09 06:46 - 00140288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2013-08-14 14:33 - 2013-07-09 06:46 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2013-08-14 14:32 - 2013-07-25 11:25 - 01888768 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-14 14:32 - 2013-07-25 10:57 - 01620992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2013-08-14 14:32 - 2013-07-19 03:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 14:32 - 2013-07-19 03:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2013-08-14 14:27 - 2013-07-09 07:51 - 01217024 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 14:27 - 2013-07-09 06:52 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 14:10 - 2013-07-09 08:03 - 05550528 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 14:10 - 2013-07-09 07:54 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 14:10 - 2013-07-09 07:53 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-08-14 14:10 - 2013-07-09 07:03 - 03968960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-08-14 14:10 - 2013-07-09 07:03 - 03913664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-08-14 14:10 - 2013-07-09 06:53 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-08-14 14:10 - 2013-07-09 06:52 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-08-14 14:10 - 2013-07-09 04:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-08-14 14:10 - 2013-07-09 04:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-08-14 14:10 - 2013-07-09 04:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-08-14 14:10 - 2013-07-09 04:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-08-14 14:09 - 2013-06-15 06:32 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-14 14:07 - 2013-07-06 08:03 - 01910208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 13:52 - 2012-07-11 17:09 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2013-08-14 13:51 - 2013-08-14 13:51 - 00000000 ____D C:\Windows\ELAMBKUP
2013-08-14 13:51 - 2011-06-02 14:39 - 00084536 _____ (Infowatch) C:\Windows\system32\Drivers\CSCrySec.sys
2013-08-14 13:51 - 2011-06-02 14:39 - 00066616 _____ (Infowatch) C:\Windows\system32\Drivers\CSVirtualDiskDrv.sys
2013-08-14 13:50 - 2013-08-31 00:06 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-08-14 13:50 - 2013-08-14 14:28 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-08-14 13:50 - 2013-08-14 14:28 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-08-14 13:50 - 2013-08-14 13:50 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-08-13 23:54 - 2013-08-14 00:12 - 188740896 _____ (Kaspersky Lab) C:\Users\user\Downloads\pure13.0.2.558DE_4340.exe
2013-08-13 23:09 - 2013-05-10 07:49 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\cryptdlg.dll
2013-08-13 23:09 - 2013-05-10 05:20 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptdlg.dll
2013-08-13 23:08 - 2013-05-13 07:50 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\certenc.dll
2013-08-13 23:08 - 2013-05-13 05:43 - 01192448 _____ (Microsoft Corporation) C:\Windows\system32\certutil.exe
2013-08-13 23:08 - 2013-05-13 05:08 - 00903168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certutil.exe
2013-08-13 23:08 - 2013-05-13 05:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certenc.dll
2013-08-13 23:07 - 2013-03-19 07:46 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2013-08-13 23:07 - 2013-03-19 06:47 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2013-08-13 23:07 - 2013-03-19 05:06 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2013-08-13 22:42 - 2013-08-13 22:47 - 70300856 _____ (WinFuture) C:\Users\user\Downloads\WinFuture_7_x64_UpdatePack_1.36_April_2013-Upgrade.exe
2013-08-13 22:40 - 2013-08-13 22:40 - 00347424 _____ (Microsoft Corporation) C:\Users\user\Downloads\MicrosoftFixit.wu.FISC.196299856852161036.1.3.Run.exe
2013-08-13 22:36 - 2013-08-13 22:36 - 00347424 _____ (Microsoft Corporation) C:\Users\user\Downloads\MicrosoftFixit.WinFileFolder.FISC.196299856852161036.1.2.Run.exe
2013-08-13 22:35 - 2013-08-13 22:35 - 00347424 _____ (Microsoft Corporation) C:\Users\user\Downloads\MicrosoftFixit.malware.FISC.196299856852161036.1.1.Run.exe
2013-08-13 22:32 - 2013-08-13 22:52 - 00000000 ____D C:\Users\user\AppData\Local\WEKA DVD Interface
2013-08-13 00:18 - 2013-04-10 08:01 - 00983400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-08-13 00:18 - 2013-04-10 08:01 - 00265064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2013-08-13 00:18 - 2011-02-03 13:25 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2013-08-12 23:31 - 2013-02-27 08:02 - 00111448 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2013-08-12 23:31 - 2013-02-27 07:52 - 14172672 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-08-12 23:31 - 2013-02-27 07:52 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\shdocvw.dll
2013-08-12 23:31 - 2013-02-27 07:48 - 01930752 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-08-12 23:31 - 2013-02-27 07:47 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2013-08-12 23:31 - 2013-02-27 06:55 - 12872704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2013-08-12 23:31 - 2013-02-27 06:55 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shdocvw.dll
2013-08-12 23:31 - 2013-02-27 06:49 - 01796096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2013-08-12 23:31 - 2013-02-15 08:08 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2013-08-12 23:31 - 2013-02-15 08:06 - 03717632 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2013-08-12 23:31 - 2013-02-15 08:02 - 00158720 _____ (Microsoft Corporation) C:\Windows\system32\aaclient.dll
2013-08-12 23:31 - 2013-02-15 06:37 - 03217408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2013-08-12 23:31 - 2013-02-15 06:34 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2013-08-12 23:31 - 2013-02-15 05:25 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2013-08-12 23:30 - 2013-06-05 05:34 - 03153920 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-08-12 23:30 - 2013-06-04 08:00 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2013-08-12 23:30 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2013-08-12 23:30 - 2013-04-26 07:51 - 00751104 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2013-08-12 23:30 - 2013-04-26 06:55 - 00492544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2013-08-12 23:30 - 2013-04-12 16:45 - 01656680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2013-08-12 23:30 - 2013-03-19 07:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2013-08-12 23:30 - 2013-03-19 07:53 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\wwanprotdim.dll
2013-08-12 23:30 - 2013-02-12 06:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usb8023.sys
2013-08-12 23:30 - 2013-01-24 08:01 - 00223752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys
2013-08-12 23:22 - 2013-04-10 07:45 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2013-08-12 23:21 - 2013-04-10 07:02 - 01077760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2013-08-12 22:24 - 2013-08-12 22:59 - 00000000 ____D C:\Users\user\Downloads\Kaspersky Rescue2Usb
2013-08-12 22:13 - 2013-08-12 22:23 - 261507072 _____ C:\Users\user\Downloads\kav_rescue_10-31.iso
2013-08-12 22:12 - 2013-08-12 22:12 - 00387584 _____ C:\Users\user\Downloads\rescue2usb.exe
2013-08-12 20:46 - 2013-08-12 20:47 - 00000000 ____D C:\Users\user\AppData\Roaming\U3
2013-08-12 20:40 - 2013-08-12 20:40 - 03395840 _____ (Piriform Ltd) C:\Users\user\Downloads\ccsetup404_slim.exe
2013-08-12 20:35 - 2013-08-12 20:56 - 00000624 _____ C:\Users\user\Downloads\Stinger_12082013_203502.html
2013-08-12 20:34 - 2013-08-12 21:15 - 00000112 ___RH C:\Users\user\Downloads\Stinger.opt
2013-08-12 20:34 - 2013-08-12 20:49 - 00000000 ____D C:\Program Files\stinger
2013-08-12 20:34 - 2013-08-12 20:34 - 12725280 _____ (McAfee Inc) C:\Users\user\Downloads\stinger64_12.0.0.483.exe
2013-08-12 20:11 - 2013-08-12 20:11 - 02828552 _____ (AVAST Software) C:\Users\user\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-08-11 22:18 - 2013-08-11 22:18 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\PwrMgr
2013-08-11 21:49 - 2013-08-11 21:49 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Softland
2013-08-11 21:47 - 2013-08-11 21:47 - 00123208 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-11 21:47 - 2013-08-11 21:47 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\McAfee
2013-08-11 21:47 - 2013-08-11 21:47 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Lenovo
2013-08-11 21:47 - 2013-08-11 21:47 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Leadertech
2013-08-11 21:47 - 2013-08-11 21:47 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Apple Computer
2013-08-11 21:47 - 2013-08-11 21:47 - 00000000 ____D C:\Users\Administrator\AppData\Local\Lenovo
2013-08-11 21:47 - 2013-08-11 21:47 - 00000000 _____ C:\Users\Administrator\agent.log
2013-08-11 21:46 - 2013-08-11 21:47 - 00000000 ____D C:\Users\Administrator
2013-08-11 21:46 - 2013-08-11 21:46 - 00000020 ___SH C:\Users\Administrator\ntuser.ini
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\Vorlagen
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\Startmenü
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\Lokale Einstellungen
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\Eigene Dateien
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Anwendungsdaten
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\Anwendungsdaten
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Intel
2013-08-11 21:46 - 2013-04-08 22:39 - 00000000 ____D C:\Users\Administrator\AppData\Local\Microsoft Help
2013-08-11 21:46 - 2012-12-09 19:34 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\TuneUp Software
2013-08-11 21:46 - 2012-06-18 14:24 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Macromedia
2013-08-11 20:21 - 2013-08-11 20:21 - 00000017 _____ C:\Users\user\AppData\Local\resmon.resmoncfg
2013-08-11 17:41 - 2013-08-11 17:41 - 00000000 _____ C:\Users\user\AppData\Roaming\AbsoluteReminder.xml
2013-08-11 17:40 - 2013-08-11 17:40 - 00007140 _____ C:\Users\user\Documents\cc_20130811_174011.reg
2013-08-11 16:51 - 2013-08-11 16:51 - 21728904 _____ (Microsoft Corporation) C:\Users\user\Downloads\Windows-KB890830-x64-V5.2.exe
2013-08-11 16:21 - 2013-08-11 16:21 - 00003418 _____ C:\Windows\System32\Tasks\{B25F1987-1535-4B53-9232-FF697284ADCB}
2013-08-11 16:11 - 2013-08-11 16:11 - 05990376 _____ (IObit                                                       ) C:\Users\user\Downloads\defragsetup_2811221.exe
2013-08-11 16:05 - 2013-08-11 16:05 - 04100432 _____ (Piriform Ltd) C:\Users\user\Downloads\dfsetup215 (1).exe
2013-08-11 16:03 - 2013-08-11 16:04 - 03368056 _____ (hxxp://www.maxuninstaller.com/                              ) C:\Users\user\Downloads\MaxUninstaller_Setup.exe
2013-08-11 15:48 - 2013-08-11 15:48 - 04100432 _____ (Piriform Ltd) C:\Users\user\Downloads\dfsetup215.exe
2013-08-11 15:43 - 2013-08-11 15:45 - 04100432 _____ (Piriform Ltd) C:\Users\user\Downloads\dfsetup_2.15.741.exe
2013-08-11 12:29 - 2013-08-11 12:29 - 00003704 _____ C:\Windows\System32\Tasks\Java Update Scheduler
2013-08-11 12:29 - 2013-08-11 12:29 - 00003694 _____ C:\Windows\System32\Tasks\Adobe online update program
2013-08-11 12:19 - 2013-08-11 12:19 - 00000000 ____D C:\Users\user\AppData\Roaming\McAfee
2013-08-11 12:19 - 2013-08-11 12:18 - 00099056 _____ (McAfee, Inc.) C:\Windows\system32\MfeOtlkAddin.dll
2013-08-11 12:19 - 2013-08-11 12:18 - 00074848 _____ (McAfee, Inc.) C:\Windows\SysWOW64\MfeOtlkAddin.dll
2013-08-11 12:19 - 2013-08-11 12:18 - 00022816 _____ (McAfee, Inc.) C:\Windows\SysWOW64\MFEOtlk.dll
2013-08-11 12:18 - 2013-08-13 23:39 - 00000000 ____D C:\Program Files\Common Files\McAfee
2013-08-11 12:17 - 2013-08-13 23:03 - 00000000 ____D C:\ProgramData\McAfee
2013-08-11 12:17 - 2013-08-13 23:02 - 00000000 ____D C:\Program Files (x86)\McAfee
2013-08-11 10:42 - 2013-08-11 10:42 - 00000000 __SHD C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2013-08-09 12:34 - 2013-08-09 12:35 - 11348656 _____ (Lenovo                                                      ) C:\Users\user\Downloads\systemupdate502-06-26-2013.exe
2013-08-08 22:59 - 2013-08-08 22:59 - 00069456 _____ C:\Users\user\Documents\cc_20130808_225910.reg
2013-08-08 18:41 - 2013-08-08 18:42 - 03482040 _____ C:\Users\user\Downloads\avg_remover_2013_3341.zip
2013-08-08 12:12 - 2013-08-08 12:12 - 00262144 _____ C:\Windows\system32\config\elam
2013-08-08 11:25 - 2013-08-08 11:25 - 00866592 _____ C:\Users\user\Downloads\Norton_Removal_Tool.exe
2013-08-04 19:01 - 2013-08-04 19:04 - 189379192 _____ (Kaspersky Lab) C:\Users\user\Downloads\kis13.0.1.4190abcdefgDE_4608.exe

==================== One Month Modified Files and Folders =======

2013-08-31 16:20 - 2013-05-02 11:35 - 00000924 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4132708011-2150104516-3946137186-1001UA.job
2013-08-31 16:20 - 2012-06-18 14:34 - 00001124 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-31 16:20 - 2012-06-18 14:11 - 00000830 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2013-08-31 13:10 - 2013-05-02 11:35 - 00000902 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4132708011-2150104516-3946137186-1001Core.job
2013-08-31 13:07 - 2012-06-18 14:34 - 00001120 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-31 13:07 - 2012-06-18 14:05 - 01174137 _____ C:\Windows\WindowsUpdate.log
2013-08-31 12:34 - 2012-12-07 23:45 - 00000000 ____D C:\Users\user\AppData\Roaming\vlc
2013-08-31 00:06 - 2013-08-14 13:50 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-08-30 22:40 - 2009-07-14 06:45 - 00034432 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-30 22:40 - 2009-07-14 06:45 - 00034432 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-30 22:34 - 2013-08-30 22:34 - 00002270 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-08-30 22:34 - 2013-08-28 09:24 - 00000000 ____D C:\Users\user\AppData\Local\Deployment
2013-08-30 22:34 - 2012-11-25 17:32 - 00000000 ____D C:\Users\user\AppData\Local\Google
2013-08-30 22:29 - 2012-06-18 14:11 - 00000828 _____ C:\Windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2013-08-30 22:28 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-30 22:25 - 2013-08-30 22:25 - 00448512 _____ (OldTimer Tools) C:\Users\user\Desktop\TFC.exe
2013-08-30 22:25 - 2013-08-29 14:20 - 00000583 _____ C:\Users\user\Desktop\regfix.reg
2013-08-30 22:23 - 2013-08-30 22:23 - 00000583 _____ C:\Users\user\Downloads\regfix.reg
2013-08-30 22:21 - 2013-02-11 20:21 - 00000000 ____D C:\Users\user\Desktop\Programme
2013-08-30 21:47 - 2013-08-30 21:47 - 00000833 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-08-30 21:47 - 2013-02-16 18:21 - 00000000 ____D C:\Program Files\CCleaner
2013-08-30 21:46 - 2013-08-30 21:46 - 04454952 _____ (Piriform Ltd) C:\Users\user\Downloads\ccsetup405.exe
2013-08-30 16:00 - 2013-08-30 15:57 - 00181232 _____ C:\Users\user\Downloads\SystemLook.txt
2013-08-30 15:55 - 2013-08-30 15:55 - 00165376 _____ C:\Users\user\Downloads\SystemLook_x64.exe
2013-08-29 15:35 - 2009-07-14 07:13 - 01498666 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-29 15:32 - 2013-08-29 15:27 - 00000000 ____D C:\Users\user\Desktop\VA-Freude_Am_Tanzen_5zig-(FAT050)-WEB-2011-OMA
2013-08-29 15:29 - 2013-08-29 15:24 - 00000000 ____D C:\Users\user\Desktop\VA_-_Diary_No_1-(UYCD001)-WEB-2010-WiTF
2013-08-29 15:15 - 2013-08-29 15:15 - 00018422 _____ C:\Users\user\Downloads\hijackthis.log
2013-08-29 15:14 - 2012-11-23 16:17 - 00000000 ____D C:\Users\user\AppData\Local\VirtualStore
2013-08-29 15:13 - 2013-08-29 15:13 - 00388608 _____ (Trend Micro Inc.) C:\Users\user\Downloads\HiJackThis204.exe
2013-08-29 15:13 - 2013-08-29 15:13 - 00388608 _____ (Trend Micro Inc.) C:\Users\user\Downloads\hijackthis_5833.exe
2013-08-29 14:49 - 2013-08-29 14:49 - 00001794 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-08-29 14:49 - 2013-08-29 14:48 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-08-29 14:49 - 2013-08-29 14:48 - 00000000 ____D C:\Program Files\iTunes
2013-08-29 14:49 - 2013-08-29 14:48 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-08-29 14:48 - 2013-08-29 14:48 - 00000000 ____D C:\Program Files\iPod
2013-08-29 14:26 - 2013-08-29 14:25 - 02828552 _____ (AVAST Software) C:\Users\user\Downloads\avast-browser-cleanup_8.0.1484.29 (1).exe
2013-08-29 14:20 - 2013-08-29 14:20 - 00001056 _____ C:\Users\user\Desktop\Neues Textdokument.txt
2013-08-29 13:53 - 2013-08-29 13:51 - 00004532 _____ C:\Users\user\Desktop\SystemLook.txt
2013-08-29 13:51 - 2013-08-29 13:51 - 00165376 _____ C:\Users\user\Desktop\SystemLook_x64.exe
2013-08-28 10:05 - 2013-08-28 10:05 - 01579080 _____ (Farbar) C:\Users\user\Downloads\FRST64.exe
2013-08-28 09:24 - 2013-08-28 09:24 - 00000000 ____D C:\Users\user\AppData\Local\Apps\2.0
2013-08-27 14:53 - 2013-08-27 14:53 - 02347384 _____ (ESET) C:\Users\user\Downloads\esetsmartinstaller_enu (1).exe
2013-08-27 14:53 - 2013-08-27 14:53 - 00891115 _____ C:\Users\user\Downloads\SecurityCheck (1).exe
2013-08-27 12:41 - 2013-08-27 12:41 - 00000624 _____ C:\Users\user\Desktop\JRT.txt
2013-08-27 12:27 - 2013-08-26 18:42 - 00000000 ____D C:\AdwCleaner
2013-08-27 12:18 - 2013-08-26 19:08 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-08-27 12:16 - 2013-08-27 12:16 - 01021434 _____ (Thisisu) C:\Users\user\Downloads\JRT (1).exe
2013-08-27 12:16 - 2013-08-27 12:16 - 00994642 _____ C:\Users\user\Downloads\adwcleaner (1).exe
2013-08-27 12:16 - 2013-08-27 12:15 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\user\Downloads\mbam-setup-1.75.0.1300 (1).exe
2013-08-27 12:05 - 2013-08-26 15:32 - 00026103 _____ C:\Users\user\Downloads\Addition.txt
2013-08-27 09:46 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-08-27 01:35 - 2013-08-27 01:35 - 00000970 _____ C:\Users\user\Documents\Fixlist.txt
2013-08-26 19:11 - 2013-08-26 19:11 - 02347384 _____ (ESET) C:\Users\user\Downloads\esetsmartinstaller_enu.exe
2013-08-26 19:11 - 2013-08-26 19:11 - 00891115 _____ C:\Users\user\Downloads\SecurityCheck.exe
2013-08-26 19:09 - 2013-08-26 19:09 - 00000000 ____D C:\Users\user\AppData\Roaming\Malwarebytes
2013-08-26 19:08 - 2013-08-26 19:08 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-08-26 19:08 - 2013-08-26 19:07 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\user\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-26 18:51 - 2013-08-26 18:51 - 00000000 ____D C:\Windows\ERUNT
2013-08-26 18:49 - 2013-08-26 18:49 - 01021434 _____ (Thisisu) C:\Users\user\Downloads\JRT.exe
2013-08-26 18:42 - 2013-08-26 18:41 - 00994642 _____ C:\Users\user\Downloads\adwcleaner.exe
2013-08-26 18:34 - 2013-08-26 17:21 - 00000000 ____D C:\ComboFix
2013-08-26 18:34 - 2013-08-26 15:37 - 00000000 ____D C:\Qoobox
2013-08-26 18:32 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default
2013-08-26 18:31 - 2013-08-26 18:31 - 00040860 _____ C:\ComboFix.txt
2013-08-26 18:18 - 2013-08-26 15:37 - 00000000 ____D C:\Windows\erdnt
2013-08-26 17:45 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-08-26 15:34 - 2013-08-26 15:34 - 05113393 ____R (Swearware) C:\Users\user\Downloads\ComboFix.exe
2013-08-26 15:30 - 2013-08-26 15:30 - 00000000 ____D C:\FRST
2013-08-26 15:21 - 2013-08-26 15:21 - 00000000 ____D C:\Users\user\AppData\Local\VS Revo Group
2013-08-26 15:21 - 2013-08-26 15:21 - 00000000 ____D C:\ProgramData\VS Revo Group
2013-08-26 15:21 - 2013-08-26 15:21 - 00000000 ____D C:\Program Files\VS Revo Group
2013-08-26 15:19 - 2013-08-26 15:19 - 10031224 _____ (VS Revo Group                                               ) C:\Users\user\Downloads\RevoUninProSetup.exe
2013-08-26 13:40 - 2013-08-26 13:40 - 00000000 _____ C:\autoexec.bat
2013-08-18 20:22 - 2012-11-23 16:17 - 00001424 _____ C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-08-17 12:51 - 2011-12-08 22:43 - 00000000 ____D C:\Program Files\Windows Journal
2013-08-17 12:51 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\winrm
2013-08-17 12:51 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\sysprep
2013-08-17 12:51 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\slmgr
2013-08-17 12:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Sidebar
2013-08-17 12:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2013-08-17 12:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-17 12:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files\DVD Maker
2013-08-17 12:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2013-08-17 12:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2013-08-17 12:51 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-08-17 12:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Setup
2013-08-17 12:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\oobe
2013-08-17 12:51 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2013-08-17 12:51 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\System
2013-08-17 12:50 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\WCN
2013-08-17 12:50 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2013-08-17 12:50 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\winrm
2013-08-17 12:50 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\WCN
2013-08-17 12:50 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\slmgr
2013-08-17 12:50 - 2010-11-21 09:06 - 00000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2013-08-17 12:50 - 2009-07-14 07:37 - 00000000 ____D C:\Windows\DigitalLocker
2013-08-17 12:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\MUI
2013-08-17 12:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2013-08-17 12:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\com
2013-08-17 12:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\sysprep
2013-08-17 12:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Setup
2013-08-17 12:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\oobe
2013-08-17 12:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\MUI
2013-08-17 12:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\migwiz
2013-08-17 12:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\Dism
2013-08-17 12:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\com
2013-08-17 12:50 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\IME
2013-08-17 09:58 - 2013-08-17 09:58 - 00985600 _____ C:\Users\user\Downloads\MicrosoftFixit50123.msi
2013-08-17 09:57 - 2012-12-07 22:01 - 00000000 ____D C:\Users\user\AppData\Roaming\Spotify
2013-08-15 18:41 - 2012-12-17 15:42 - 00000000 ____D C:\Program Files (x86)\MediaMonkey
2013-08-15 18:38 - 2013-08-15 17:07 - 00000000 ____D C:\Program Files (x86)\Free mp3 Wma Converter
2013-08-15 17:32 - 2012-12-17 15:42 - 00000000 ____D C:\Users\user\AppData\Roaming\MediaMonkey
2013-08-15 17:24 - 2013-08-15 17:24 - 00000000 ____D C:\Users\user\AppData\Roaming\DVDVideoSoft
2013-08-15 17:24 - 2013-08-15 17:24 - 00000000 ____D C:\Program Files (x86)\DVDVideoSoft
2013-08-15 17:23 - 2013-08-15 17:19 - 00000000 ____D C:\Users\user\Desktop\Settle (Deluxe Version)
2013-08-15 17:07 - 2013-08-15 17:07 - 00000000 ____D C:\Users\user\AppData\Roaming\FreeAudioPack
2013-08-15 17:06 - 2013-08-15 17:06 - 00458744 _____ (Bandoo Media Inc) C:\Users\user\Downloads\Setup21_FreeConverter.exe
2013-08-15 14:10 - 2012-12-07 22:02 - 00000000 ____D C:\Users\user\AppData\Local\Spotify
2013-08-14 15:04 - 2012-11-23 16:17 - 00000000 ___RD C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-14 15:04 - 2012-11-23 16:17 - 00000000 ___RD C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-08-14 15:01 - 2009-07-14 06:45 - 00440808 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-14 14:51 - 2013-02-21 20:18 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-14 14:48 - 2012-12-11 21:39 - 01498666 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-08-14 14:46 - 2013-08-14 14:42 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 14:42 - 2012-12-07 20:15 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-14 14:28 - 2013-08-14 13:50 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-08-14 14:28 - 2013-08-14 13:50 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-08-14 14:28 - 2012-10-18 14:50 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys
2013-08-14 14:28 - 2012-08-13 16:49 - 00178448 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
2013-08-14 13:51 - 2013-08-14 13:51 - 00000000 ____D C:\Windows\ELAMBKUP
2013-08-14 13:50 - 2013-08-14 13:50 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-08-14 01:49 - 2009-07-14 07:08 - 00032632 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-14 01:29 - 2012-11-23 16:18 - 00000000 ____D C:\Users\user\AppData\Roaming\LSC
2013-08-14 00:21 - 2012-09-12 08:40 - 00000000 ____D C:\ldiag
2013-08-14 00:21 - 2012-06-18 14:24 - 00000000 ____D C:\Windows\System32\Tasks\Lenovo
2013-08-14 00:21 - 2012-06-18 14:13 - 00000000 ____D C:\Program Files\Lenovo
2013-08-14 00:19 - 2012-06-18 14:24 - 00000000 ____D C:\Windows\Downloaded Installations
2013-08-14 00:12 - 2013-08-13 23:54 - 188740896 _____ (Kaspersky Lab) C:\Users\user\Downloads\pure13.0.2.558DE_4340.exe
2013-08-13 23:59 - 2012-06-18 23:53 - 00717052 _____ C:\Windows\system32\perfh007.dat
2013-08-13 23:59 - 2012-06-18 23:53 - 00007972 _____ C:\Windows\system32\perfc007.dat
2013-08-13 23:39 - 2013-08-11 12:18 - 00000000 ____D C:\Program Files\Common Files\McAfee
2013-08-13 23:18 - 2013-04-08 22:56 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-08-13 23:18 - 2013-04-08 22:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-08-13 23:03 - 2013-08-11 12:17 - 00000000 ____D C:\ProgramData\McAfee
2013-08-13 23:02 - 2013-08-11 12:17 - 00000000 ____D C:\Program Files (x86)\McAfee
2013-08-13 22:52 - 2013-08-13 22:32 - 00000000 ____D C:\Users\user\AppData\Local\WEKA DVD Interface
2013-08-13 22:47 - 2013-08-13 22:42 - 70300856 _____ (WinFuture) C:\Users\user\Downloads\WinFuture_7_x64_UpdatePack_1.36_April_2013-Upgrade.exe
2013-08-13 22:40 - 2013-08-13 22:40 - 00347424 _____ (Microsoft Corporation) C:\Users\user\Downloads\MicrosoftFixit.wu.FISC.196299856852161036.1.3.Run.exe
2013-08-13 22:36 - 2013-08-13 22:36 - 00347424 _____ (Microsoft Corporation) C:\Users\user\Downloads\MicrosoftFixit.WinFileFolder.FISC.196299856852161036.1.2.Run.exe
2013-08-13 22:35 - 2013-08-13 22:35 - 00347424 _____ (Microsoft Corporation) C:\Users\user\Downloads\MicrosoftFixit.malware.FISC.196299856852161036.1.1.Run.exe
2013-08-12 22:59 - 2013-08-12 22:24 - 00000000 ____D C:\Users\user\Downloads\Kaspersky Rescue2Usb
2013-08-12 22:23 - 2013-08-12 22:13 - 261507072 _____ C:\Users\user\Downloads\kav_rescue_10-31.iso
2013-08-12 22:12 - 2013-08-12 22:12 - 00387584 _____ C:\Users\user\Downloads\rescue2usb.exe
2013-08-12 21:15 - 2013-08-12 20:34 - 00000112 ___RH C:\Users\user\Downloads\Stinger.opt
2013-08-12 20:56 - 2013-08-12 20:35 - 00000624 _____ C:\Users\user\Downloads\Stinger_12082013_203502.html
2013-08-12 20:49 - 2013-08-12 20:34 - 00000000 ____D C:\Program Files\stinger
2013-08-12 20:47 - 2013-08-12 20:46 - 00000000 ____D C:\Users\user\AppData\Roaming\U3
2013-08-12 20:40 - 2013-08-12 20:40 - 03395840 _____ (Piriform Ltd) C:\Users\user\Downloads\ccsetup404_slim.exe
2013-08-12 20:34 - 2013-08-12 20:34 - 12725280 _____ (McAfee Inc) C:\Users\user\Downloads\stinger64_12.0.0.483.exe
2013-08-12 20:11 - 2013-08-12 20:11 - 02828552 _____ (AVAST Software) C:\Users\user\Downloads\avast-browser-cleanup_8.0.1484.29.exe
2013-08-11 22:18 - 2013-08-11 22:18 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\PwrMgr
2013-08-11 21:49 - 2013-08-11 21:49 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Softland
2013-08-11 21:48 - 2012-11-23 16:18 - 00123208 _____ C:\Users\user\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-11 21:47 - 2013-08-11 21:47 - 00123208 _____ C:\Users\Administrator\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-11 21:47 - 2013-08-11 21:47 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\McAfee
2013-08-11 21:47 - 2013-08-11 21:47 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Lenovo
2013-08-11 21:47 - 2013-08-11 21:47 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Leadertech
2013-08-11 21:47 - 2013-08-11 21:47 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Apple Computer
2013-08-11 21:47 - 2013-08-11 21:47 - 00000000 ____D C:\Users\Administrator\AppData\Local\Lenovo
2013-08-11 21:47 - 2013-08-11 21:47 - 00000000 _____ C:\Users\Administrator\agent.log
2013-08-11 21:47 - 2013-08-11 21:46 - 00000000 ____D C:\Users\Administrator
2013-08-11 21:46 - 2013-08-11 21:46 - 00000020 ___SH C:\Users\Administrator\ntuser.ini
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\Vorlagen
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\Startmenü
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\Netzwerkumgebung
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\Lokale Einstellungen
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\Eigene Dateien
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\Druckumgebung
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Musik
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\Documents\Eigene Bilder
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Verlauf
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\AppData\Local\Anwendungsdaten
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 _SHDL C:\Users\Administrator\Anwendungsdaten
2013-08-11 21:46 - 2013-08-11 21:46 - 00000000 ____D C:\Users\Administrator\AppData\Roaming\Intel
2013-08-11 20:21 - 2013-08-11 20:21 - 00000017 _____ C:\Users\user\AppData\Local\resmon.resmoncfg
2013-08-11 18:08 - 2012-11-22 10:03 - 00000000 ____D C:\Windows\system32\appmgmt
2013-08-11 17:41 - 2013-08-11 17:41 - 00000000 _____ C:\Users\user\AppData\Roaming\AbsoluteReminder.xml
2013-08-11 17:40 - 2013-08-11 17:40 - 00007140 _____ C:\Users\user\Documents\cc_20130811_174011.reg
2013-08-11 16:51 - 2013-08-11 16:51 - 21728904 _____ (Microsoft Corporation) C:\Users\user\Downloads\Windows-KB890830-x64-V5.2.exe
2013-08-11 16:21 - 2013-08-11 16:21 - 00003418 _____ C:\Windows\System32\Tasks\{B25F1987-1535-4B53-9232-FF697284ADCB}
2013-08-11 16:11 - 2013-08-11 16:11 - 05990376 _____ (IObit                                                       ) C:\Users\user\Downloads\defragsetup_2811221.exe
2013-08-11 16:05 - 2013-08-11 16:05 - 04100432 _____ (Piriform Ltd) C:\Users\user\Downloads\dfsetup215 (1).exe
2013-08-11 16:04 - 2013-08-11 16:03 - 03368056 _____ (hxxp://www.maxuninstaller.com/                              ) C:\Users\user\Downloads\MaxUninstaller_Setup.exe
2013-08-11 15:48 - 2013-08-11 15:48 - 04100432 _____ (Piriform Ltd) C:\Users\user\Downloads\dfsetup215.exe
2013-08-11 15:45 - 2013-08-11 15:43 - 04100432 _____ (Piriform Ltd) C:\Users\user\Downloads\dfsetup_2.15.741.exe
2013-08-11 12:29 - 2013-08-11 12:29 - 00003704 _____ C:\Windows\System32\Tasks\Java Update Scheduler
2013-08-11 12:29 - 2013-08-11 12:29 - 00003694 _____ C:\Windows\System32\Tasks\Adobe online update program
2013-08-11 12:29 - 2013-06-12 21:33 - 00000000 ____D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ
2013-08-11 12:19 - 2013-08-11 12:19 - 00000000 ____D C:\Users\user\AppData\Roaming\McAfee
2013-08-11 12:18 - 2013-08-11 12:19 - 00099056 _____ (McAfee, Inc.) C:\Windows\system32\MfeOtlkAddin.dll
2013-08-11 12:18 - 2013-08-11 12:19 - 00074848 _____ (McAfee, Inc.) C:\Windows\SysWOW64\MfeOtlkAddin.dll
2013-08-11 12:18 - 2013-08-11 12:19 - 00022816 _____ (McAfee, Inc.) C:\Windows\SysWOW64\MFEOtlk.dll
2013-08-11 11:55 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\WinBioPlugIns
2013-08-11 10:43 - 2012-11-25 18:42 - 00000000 ____D C:\ProgramData\TuneUp Software
2013-08-11 10:42 - 2013-08-11 10:42 - 00000000 __SHD C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
2013-08-09 12:35 - 2013-08-09 12:34 - 11348656 _____ (Lenovo                                                      ) C:\Users\user\Downloads\systemupdate502-06-26-2013.exe
2013-08-09 12:32 - 2013-05-05 22:46 - 00000000 ____D C:\Users\user\AppData\Roaming\Audacity
2013-08-08 22:59 - 2013-08-08 22:59 - 00069456 _____ C:\Users\user\Documents\cc_20130808_225910.reg
2013-08-08 22:56 - 2013-06-27 21:44 - 00000000 ____D C:\Users\user\AppData\Roaming\DAEMON Tools Lite
2013-08-08 22:56 - 2012-11-25 18:41 - 00000000 ____D C:\Users\user\AppData\Roaming\DAEMON Tools Pro
2013-08-08 22:44 - 2012-06-18 14:34 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-08 18:42 - 2013-08-08 18:41 - 03482040 _____ C:\Users\user\Downloads\avg_remover_2013_3341.zip
2013-08-08 12:51 - 2012-12-10 12:58 - 00000000 ____D C:\Users\user\Desktop\Spiele
2013-08-08 12:50 - 2013-02-11 20:17 - 00000000 ____D C:\Users\user\Desktop\UT Psychologie
2013-08-08 12:12 - 2013-08-08 12:12 - 00262144 _____ C:\Windows\system32\config\elam
2013-08-08 11:57 - 2012-11-25 18:41 - 00000000 __SHD C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2013-08-08 11:26 - 2012-06-18 14:40 - 00000000 ____D C:\ProgramData\Norton
2013-08-08 11:25 - 2013-08-08 11:25 - 00866592 _____ C:\Users\user\Downloads\Norton_Removal_Tool.exe
2013-08-08 10:56 - 2013-03-02 17:13 - 00000000 ____D C:\Users\user\Desktop\Congstar
2013-08-08 01:17 - 2013-02-19 22:02 - 00000000 ____D C:\Users\user\AppData\Roaming\dvdcss
2013-08-07 04:22 - 2010-11-21 05:27 - 00278800 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2013-08-04 19:04 - 2013-08-04 19:01 - 189379192 _____ (Kaspersky Lab) C:\Users\user\Downloads\kis13.0.1.4190abcdefgDE_4608.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-27 09:39

==================== End Of Log ============================
--- --- ---
Alt 31.08.2013, 20:02   #27
schrauber
/// the machine
/// TB-Ausbilder
 
Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden - Standard

Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden


Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
CHR HomePage: hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=NL&userid=65bf0910-8955-4ea2-ba62-2e0a7ef14d9a&searchtype=hp&installDate=27/06/2013
CHR RestoreOnStartup: "hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=NL&userid=65bf0910-8955-4ea2-ba62-2e0a7ef14d9a&searchtype=hp&installDate=27/06/2013", "hxxp://www.google.com", "hxxp://www.google.com/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 01.09.2013, 10:42   #28
Woody91
 
Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden - Standard

Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden


Code:
ATTFilter
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 28-08-2013
Ran by user at 2013-09-01 11:40:57 Run:5
Running from C:\Users\user\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
CHR HomePage: hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=NL&userid=65bf0910-8955-4ea2-ba62-2e0a7ef14d9a&searchtype=hp&installDate=27/06/2013
CHR RestoreOnStartup: "hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=NL&userid=65bf0910-8955-4ea2-ba62-2e0a7ef14d9a&searchtype=hp&installDate=27/06/2013", "hxxp://www.google.com", "hxxp://www.google.com/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
*****************

CHR HomePage: hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=NL&userid=65bf0910-8955-4ea2-ba62-2e0a7ef14d9a&searchtype=hp&installDate=27/06/2013 ==> The Chrome "Settings" can be used to fix the entry.
CHR RestoreOnStartup: "hxxp://feed.snap.do/?publisher=QuickObrw&dpid=QuickObrw&co=NL&userid=65bf0910-8955-4ea2-ba62-2e0a7ef14d9a&searchtype=hp&installDate=27/06/2013", "hxxp://www.google.com", "hxxp://www.google.com/" ==> The Chrome "Settings" can be used to fix the entry.
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding} ==> The Chrome "Settings" can be used to fix the entry.

==== End of Fixlog ====

Alt 01.09.2013, 13:02   #29
schrauber
/// the machine
/// TB-Ausbilder
 
Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden - Standard

Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden


Na?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 01.09.2013, 13:11   #30
Woody91
 
Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden - Standard

Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden


Immernoch unverändert Vielleicht mache ich auch irgendwas falsch, aber ich halte mich genau an deine Anweisungen :/

Antwort
Seite 2 von 3 1 2 3

Themen zu Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden
automatisch, bräuchte, deinstallieren, entferne, google chrome, js/adware.yontoo.a, js/adware.yontoo.b, könntet, namens, nicht in systemsteuerung, programme, programmen, schei, sich automatisch, snap.do entfernen, spyhunter, spyhunter entfernen, starte, super, systems, systemsteuerung, unerwünschte, win32/adware.yontoo.a, win32/adware.yontoo.b, woche, wochen


« Win 7 startet nur im abgesicherten Modus - USB Massenspeicher den es nicht gibt wird angezeigt | MS-Office Menüband kursive Schrift / Malwarebytes meldet div. Befälle »

Ähnliche Themen: Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden


  1. Kann Snap.do & Snap.do engine gar nicht deinstallieren?
    Plagegeister aller Art und deren Bekämpfung - 12.09.2015 (3)
  2. Snap.do auf Laptop: erscheint in Systemprogramme, lässt sich jedoch nicht deinstallieren
    Log-Analyse und Auswertung - 26.04.2015 (22)
  3. WinPatrol deinstallieren, erscheint nicht in den instllierten Programmen
    Antiviren-, Firewall- und andere Schutzprogramme - 01.04.2015 (6)
  4. Search Protect, eventl. maleware, in der Windows Taskleiste - unter installierten Programmen in der Systemsteuerung nicht aufgeführt - Win 7
    Plagegeister aller Art und deren Bekämpfung - 24.12.2014 (3)
  5. Search Protect, eventl. maleware, in der Windows Taskleiste - unter installierten Programmen in der Systemsteuerung nicht aufgeführt - Win 7
    Plagegeister aller Art und deren Bekämpfung - 13.10.2014 (10)
  6. Snap.Do Engine lässt sich unter Systemsteuerung nicht deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 03.09.2014 (9)
  7. Snap.do und Sanp.do engine lassen sich nicht aus Systemsteuerung entfernen
    Plagegeister aller Art und deren Bekämpfung - 21.04.2014 (7)
  8. Snap.do nervt, zeigt sich nicht in Systemsteuerung
    Plagegeister aller Art und deren Bekämpfung - 15.02.2014 (5)
  9. Snap.do lässt sich nicht aus Systemsteuerung entfernen
    Log-Analyse und Auswertung - 10.02.2014 (9)
  10. Snap.Do Engine läßt sich nicht deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 27.10.2013 (19)
  11. snap.do lässt sich GAR NICHT deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 24.10.2013 (13)
  12. Snap.do Engine lässt sich nicht deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 16.10.2013 (23)
  13. Quick Share und Snap.do lassen sich nicht deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 20.09.2013 (13)
  14. Snap.Do lässt sich nicht aus Systemsteuerung deinstallieren...
    Plagegeister aller Art und deren Bekämpfung - 23.08.2013 (36)
  15. Windows 7: Snap.do lässt sich nicht aus der Systemsteuerung entfernen.
    Log-Analyse und Auswertung - 16.08.2013 (4)
  16. Snap.do blockiert alles! Programm deinstallieren nicht möglich etc.etc.
    Plagegeister aller Art und deren Bekämpfung - 20.07.2013 (11)
  17. Snap.de toolbar kann nicht deinstalliert werden
    Plagegeister aller Art und deren Bekämpfung - 16.07.2013 (14)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden - Kopiere den Text in der Codebox in deinen Editor (z.B. Notepad) und speichere es unter dem Namen regfix.reg (bei Dateityp bitte "alle Dateien" wählen) Code: Alles auswählen Aufklappen ATTFilter Windows - Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden...
Archiv
Du betrachtest: Snap Do Suchemaschine/Toolbar nicht zu deinstallieren und in Systemsteuerung unter Programmen nicht zu finden auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129