![]() |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Werbefenster öffnen sich bei FirefoxWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() |
| | #1 |
![]() ![]() | Werbefenster öffnen sich bei Firefox Liebes Trojaner-Board-Team, es tut mir leid, dass ich keine Logfiles poste, aber ich habe mittlerweile soviele Antivirenscanner und Spywareprogramme installiert, dass ich den Überblick verloren habe. Mein Problem: Wenn ich in Firefox einen Tab öffne, öffnen sich ständig andere Werbefenster oder -Tabs. Außerdem werde ich laufend aufgefordert, Java oder meinen Media Player oder ähnliches zu aktualisieren. Auch poppt bei jedem geöffneten Tab eine Werbeeinblendung von "RightCopoun" auf. Anfangs habe ich Spyhunter installiert, der auch viele Fehler gefunden hat. Um diese zu beheben, hätte ich das Programm aber kaufen müssen. Da ich dann irgendwo gelesen hatte, dass Spyhunter selbst das Problem ist, habe ich es wieder deinstalliert und diverse andere Scanner laufen lassen. Welchen soll ich nun nehmen, damit Ihr mit dem Ergebnis etwas anfangen könnt? Über Hilfe würde ich mich sehr freuen. Bin etwas verzweifelt. Beste Grüße Josi |
| | #2 |
| /// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() | Werbefenster öffnen sich bei Firefox Hi,
__________________mach bitte einen FRST-Scan: Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
| | #3 |
![]() ![]() | Werbefenster öffnen sich bei Firefox FRST Logfile:
__________________FRST Logfile: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 21-01-2014
Ran by XX (administrator) on XX-PC on 22-01-2014 02:26:10
Running from C:\Users\XX\Desktop
Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
(Lenovo) C:\Windows\System32\ibmpmsvc.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
() C:\Windows\System32\PSIService.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
() C:\Program Files\Motorola\MotoHelper\MotoHelperAgent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
(Spotify Ltd) C:\Users\XX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
(Dropbox, Inc.) C:\Users\XX\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
() C:\Program Files\SparkleShare\SparkleShare.exe
(Rocket Division Software) C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
(AVG) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(AVG) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesApp32.exe
() C:\Program Files\SparkleShare\msysgit\bin\ssh-agent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [avgnt] - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [SDTray] - C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKCU\...\Run: [OfficeSyncProcess] - C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-04-22] (Microsoft Corporation)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\XX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-08-04] (Spotify Ltd)
HKCU\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [5625624 2014-01-06] (SUPERAntiSpyware)
HKCU\...409d6c4515e9\InprocServer32: [Default-shell32] <==== ATTENTION!
MountPoints2: E - E:\iLinker.exe
MountPoints2: {80c11bca-18d7-11e1-9f4b-806e6f6e6963} - E:\AUTORUN.EXE
MountPoints2: {94310bc2-0ee0-11e3-9890-0016d3cc412f} - E:\iLinker.exe
Startup: C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\XX\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SparkleShare.lnk
ShortcutTarget: SparkleShare.lnk -> C:\Program Files\SparkleShare\SparkleShare.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x5F522D0CAD89CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://sslvpn.landtag-bw.de/dana-cached/sc/JuniperSetupClient.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [115440 2013-05-07] (SuperAdBlocker.com)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default
FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", "");
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", "");
FF SearchEngineOrder.3: Bing
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.0.198 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.0.198 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files\Lightspark 0.5.3-git\nplightsparkplugin.dll No File
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101753.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: SimaRtComppare - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\Extensions\0qwtoma@rpekoxp.net [2013-12-24]
FF Extension: wEbbsaaver - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\Extensions\amtx484@cp-ooie.com [2013-12-24]
FF Extension: Recorder Toolbar - C:\Program Files\Mozilla Firefox\extensions\{10743931-94DF-476f-A987-4391233C17A2} [2013-02-27]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-11-28]
FF HKLM\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files\AmiExt\flashEnhancer\ff
FF HKCU\...\Firefox\Extensions: [{33044118-6597-4D2F-ABEA-7974BB185379}] - C:\Users\XX\AppData\Roaming\16001.015
FF Extension: Java Link Helper - C:\Users\XX\AppData\Roaming\16001.015 [2012-11-26]
FF HKCU\...\Firefox\Extensions: [{48d99c73-1969-4275-b409-3bffc15bc112}] - C:\Program Files\Re-markit\150.xpi
Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR DefaultSearchProvider: nationzoom
CHR DefaultSearchURL: hxxp://www.google.com
CHR DefaultNewTabURL:
CHR Extension: (Google Docs) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-20]
CHR Extension: (Google Drive) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-20]
CHR Extension: (YouTube) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-20]
CHR Extension: (Google-Suche) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-20]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2013-12-16]
CHR Extension: (Google Wallet) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-17]
CHR Extension: (Google Mail) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-20]
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-11-28]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
========================== Services (Whitelisted) =================
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [120088 2013-10-10] (SUPERAntiSpyware.com)
S2 05837205; C:\ProgramData\Browser faster\BrowserfasterSvc.dll [180048 2013-12-28] ()
R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-26] (Avira Operations GmbH & Co. KG)
R2 avgfws; C:\Program Files\AVG\AVG2014\avgfws.exe [1358944 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MotoHelper; C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe [226624 2011-01-27] ()
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)
R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software)
R2 TuneUp.UtilitiesSvc; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe [1741624 2013-12-18] (AVG)
R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)
==================== Drivers (Whitelisted) ====================
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [120600 2013-11-05] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6x.sys [47928 2013-09-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [209176 2013-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [147768 2013-10-24] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22840 2013-09-17] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [176952 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [222520 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [102712 2013-10-01] (AVG Technologies CZ, s.r.o.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [90400 2013-12-18] (Avira Operations GmbH & Co. KG)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27448 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [135648 2013-12-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37352 2013-11-26] (Avira Operations GmbH & Co. KG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\mbamswissarmy.sys [40776 2014-01-21] (Malwarebytes Corporation)
R1 NEOFLTR_730_23977; C:\Windows\system32\Drivers\NEOFLTR_730_23977.SYS [92264 2013-02-20] (Juniper Networks)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [721904 2011-11-27] ()
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [28520 2013-02-27] (Avira GmbH)
R3 TuneUpUtilitiesDrv; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys [12320 2013-12-16] (TuneUp Software)
S3 USB28xxBGA; C:\Windows\System32\DRIVERS\emBDA.sys [579712 2009-12-01] (eMPIA Technology, Inc.)
S3 USB28xxOEM; C:\Windows\System32\DRIVERS\emOEM.sys [543744 2009-12-01] (eMPIA Technology, Inc.)
U3 a5kmtna6; C:\Windows\System32\Drivers\a5kmtna6.sys [0 ] (Microsoft Corporation)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-22 02:26 - 2014-01-22 02:26 - 00018099 _____ C:\Users\XX\Desktop\FRST.txt
2014-01-22 02:25 - 2014-01-22 02:25 - 01222144 _____ (Farbar) C:\Users\XX\Desktop\FRST.exe
2014-01-22 02:25 - 2014-01-22 02:25 - 00000000 ____D C:\FRST
2014-01-21 18:23 - 2013-12-18 09:38 - 00036152 _____ (AVG) C:\Windows\system32\TURegOpt.exe
2014-01-21 18:22 - 2014-01-21 18:22 - 00002175 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk
2014-01-21 18:22 - 2014-01-21 18:22 - 00002151 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-01-21 18:22 - 2013-12-18 09:38 - 00025400 _____ (AVG) C:\Windows\system32\authuitu.dll
2014-01-21 17:57 - 2014-01-21 17:59 - 78353784 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295 (1).exe
2014-01-21 17:57 - 2014-01-21 17:58 - 78353784 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295.exe
2014-01-21 00:13 - 2014-01-21 00:14 - 01236282 _____ C:\Users\XX\Downloads\adwcleaner.exe
2014-01-21 00:02 - 2014-01-21 00:03 - 00040776 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys
2014-01-20 19:49 - 2014-01-20 19:49 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf16104a353afe.job
2014-01-20 19:39 - 2014-01-20 19:39 - 00002197 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-20 19:33 - 2014-01-20 19:33 - 00000504 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task fb3e5a6f-b3a6-4850-b703-966e9e14f035.job
2014-01-20 19:33 - 2014-01-20 19:33 - 00000504 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task da457c5e-ce80-4c51-9dc8-70fbe63dcce0.job
2014-01-20 19:33 - 2014-01-20 19:33 - 00000000 ____D C:\Users\XX\AppData\Roaming\SUPERAntiSpyware.com
2014-01-20 19:32 - 2014-01-20 20:45 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2014-01-20 19:32 - 2014-01-20 19:32 - 00001965 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
2014-01-20 19:32 - 2014-01-20 19:32 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2014-01-20 19:31 - 2014-01-20 19:31 - 29393568 _____ (SUPERAntiSpyware) C:\Users\XX\Downloads\SUPERAntiSpyware_5.7.0.1018.exe
2014-01-15 02:22 - 2014-01-15 02:22 - 00000000 ____D C:\Program Files\Common Files\Java
2014-01-15 02:21 - 2014-01-15 02:20 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-15 02:20 - 2014-01-15 02:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-15 02:20 - 2014-01-15 02:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-15 02:20 - 2014-01-15 02:20 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-01-15 02:19 - 2014-01-15 02:19 - 00000000 ____D C:\Program Files\Java
2014-01-15 01:40 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 01:40 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 01:40 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 01:40 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 01:40 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 01:40 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 01:40 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 01:40 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 01:40 - 2013-11-26 11:10 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 08:54 - 2014-01-14 08:54 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2014-01-14 08:52 - 2014-01-14 08:52 - 06951048 _____ (Microsoft Corporation) C:\Users\XX\Downloads\Silverlight.exe
2014-01-13 21:00 - 2014-01-13 21:00 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-13 21:00 - 2014-01-13 21:00 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2014-01-13 21:00 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-13 20:25 - 2014-01-13 20:26 - 00000000 ____D C:\Windows\220FB0354744483A9A0B41DF77061583.TMP
2014-01-13 20:06 - 2014-01-13 20:06 - 00000644 _____ C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-01-13 20:06 - 2014-01-13 20:06 - 00000616 _____ C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-01-13 20:06 - 2014-01-13 20:06 - 00000446 _____ C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job
2014-01-13 20:05 - 2014-01-13 20:11 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2014-01-13 20:05 - 2014-01-13 20:06 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2014-01-13 20:05 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean.exe
2014-01-13 19:53 - 2014-01-13 19:54 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\XX\Downloads\spybot-2.2.25.exe
2014-01-12 13:14 - 2014-01-12 13:14 - 00000220 _____ C:\Windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013.job
2014-01-11 17:13 - 2014-01-11 17:13 - 00000404 _____ C:\Windows\Tasks\AVG_REG_1213b.job
2014-01-11 17:13 - 2014-01-11 17:13 - 00000386 _____ C:\Windows\Tasks\AVG_SYS_TASK_DELETE.job
2014-01-11 17:13 - 2014-01-11 17:13 - 00000000 ____D C:\ProgramData\AVG 1213b Campaign
2014-01-10 18:19 - 2014-01-15 08:09 - 00408696 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-10 15:45 - 2014-01-10 15:45 - 00109280 _____ C:\Users\XX\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-09 22:35 - 2014-01-09 22:35 - 00000000 ____D C:\Users\XX\AppData\Roaming\AVG
2014-01-09 22:27 - 2014-01-09 22:41 - 00000000 ____D C:\ProgramData\AVG
2014-01-09 22:25 - 2014-01-21 18:36 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-01-09 22:22 - 2014-01-09 22:22 - 78353832 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295_24c28.exe
2014-01-09 21:30 - 2014-01-09 21:30 - 00000212 _____ C:\Windows\Tasks\SidebarExecute.job
2014-01-09 21:30 - 2014-01-09 21:30 - 00000000 ____D C:\Users\XX\AppData\Roaming\AVG2014
2014-01-09 21:29 - 2014-01-09 21:29 - 00000951 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2014-01-09 21:29 - 2014-01-09 21:29 - 00000000 ____D C:\Users\XX\AppData\Roaming\TuneUp Software
2014-01-09 21:26 - 2014-01-09 21:30 - 00000000 ____D C:\ProgramData\AVG2014
2014-01-09 21:26 - 2014-01-09 21:26 - 00000000 ___HD C:\$AVG
2014-01-09 21:25 - 2014-01-09 22:33 - 00000000 ____D C:\Program Files\AVG
2014-01-09 21:10 - 2014-01-22 01:56 - 00000000 ____D C:\ProgramData\MFAData
2014-01-09 21:10 - 2014-01-09 21:36 - 00000000 ____D C:\Users\XX\AppData\Local\Avg2014
2014-01-09 21:10 - 2014-01-09 21:10 - 00000000 ____D C:\Users\XX\AppData\Local\MFAData
2014-01-09 21:02 - 2014-01-09 21:08 - 137189352 _____ (AVG Technologies) C:\Users\XX\Downloads\avg_free_x86_all_2014_4259a6848.exe
2013-12-30 22:56 - 2013-12-30 22:56 - 00000000 ____D C:\Users\XX\AppData\Roaming\Malwarebytes
2013-12-30 22:56 - 2013-12-30 22:56 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-30 22:55 - 2014-01-13 20:41 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\XX\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-30 21:19 - 2013-12-30 21:19 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-12-29 22:04 - 2013-12-29 22:04 - 00000000 ____D C:\ProgramData\Websteroids
2013-12-29 19:37 - 2014-01-21 00:36 - 00000000 ____D C:\AdwCleaner
2013-12-29 19:36 - 2013-12-29 19:36 - 01233962 _____ C:\Users\XX\Downloads\adwcleaner_3.016.exe
2013-12-29 19:25 - 2013-12-29 19:25 - 00001212 _____ C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Create Amazing Presentations.lnk
2013-12-29 19:22 - 2013-12-31 01:05 - 00000000 ____D C:\Program Files\AmiExt
2013-12-29 19:22 - 2013-12-31 00:36 - 00000000 ____D C:\ProgramData\Updater
2013-12-29 19:19 - 2013-12-29 21:56 - 00000444 __RSH C:\ProgramData\ntuser.pol
2013-12-29 19:18 - 2013-12-29 19:48 - 00000000 ____D C:\Users\XX\AppData\Roaming\Uniblue
2013-12-29 19:18 - 2013-12-29 19:48 - 00000000 ____D C:\Program Files\Uniblue
2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\AppData\Local\cache
2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\.android
2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 _____ C:\Users\XX\daemonprocess.txt
2013-12-28 21:54 - 2014-01-13 21:30 - 00000000 ____D C:\ProgramData\Browser faster
==================== One Month Modified Files and Folders =======
2014-01-22 02:26 - 2014-01-22 02:26 - 00018099 _____ C:\Users\XX\Desktop\FRST.txt
2014-01-22 02:25 - 2014-01-22 02:25 - 01222144 _____ (Farbar) C:\Users\XX\Desktop\FRST.exe
2014-01-22 02:25 - 2014-01-22 02:25 - 00000000 ____D C:\FRST
2014-01-22 02:25 - 2009-07-14 05:34 - 00014960 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-22 02:25 - 2009-07-14 05:34 - 00014960 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-22 01:56 - 2014-01-09 21:10 - 00000000 ____D C:\ProgramData\MFAData
2014-01-22 01:21 - 2011-11-27 10:12 - 02077567 _____ C:\Windows\WindowsUpdate.log
2014-01-22 01:16 - 2012-09-22 20:06 - 00000000 ____D C:\Users\XX\AppData\Roaming\Dropbox
2014-01-22 01:15 - 2012-09-22 20:29 - 00000000 ___RD C:\Users\XX\Dropbox
2014-01-22 01:13 - 2013-05-15 21:29 - 00000000 ____D C:\Users\XX\AppData\Roaming\sparkleshare
2014-01-22 01:12 - 2013-01-25 14:02 - 00111046 _____ C:\Windows\PFRO.log
2014-01-22 01:12 - 2012-10-25 21:47 - 00074260 _____ C:\Windows\setupact.log
2014-01-21 18:36 - 2014-01-09 22:25 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-01-21 18:22 - 2014-01-21 18:22 - 00002175 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk
2014-01-21 18:22 - 2014-01-21 18:22 - 00002151 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-01-21 17:59 - 2014-01-21 17:57 - 78353784 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295 (1).exe
2014-01-21 17:58 - 2014-01-21 17:57 - 78353784 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295.exe
2014-01-21 00:36 - 2013-12-29 19:37 - 00000000 ____D C:\AdwCleaner
2014-01-21 00:14 - 2014-01-21 00:13 - 01236282 _____ C:\Users\XX\Downloads\adwcleaner.exe
2014-01-21 00:03 - 2014-01-21 00:02 - 00040776 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamswissarmy.sys
2014-01-20 20:45 - 2014-01-20 19:32 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2014-01-20 19:49 - 2014-01-20 19:49 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf16104a353afe.job
2014-01-20 19:39 - 2014-01-20 19:39 - 00002197 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-20 19:39 - 2013-12-16 02:09 - 00000000 ____D C:\Program Files\Google
2014-01-20 19:33 - 2014-01-20 19:33 - 00000504 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task fb3e5a6f-b3a6-4850-b703-966e9e14f035.job
2014-01-20 19:33 - 2014-01-20 19:33 - 00000504 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task da457c5e-ce80-4c51-9dc8-70fbe63dcce0.job
2014-01-20 19:33 - 2014-01-20 19:33 - 00000000 ____D C:\Users\XX\AppData\Roaming\SUPERAntiSpyware.com
2014-01-20 19:32 - 2014-01-20 19:32 - 00001965 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
2014-01-20 19:32 - 2014-01-20 19:32 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2014-01-20 19:31 - 2014-01-20 19:31 - 29393568 _____ (SUPERAntiSpyware) C:\Users\XX\Downloads\SUPERAntiSpyware_5.7.0.1018.exe
2014-01-20 17:25 - 2011-11-27 10:53 - 00000000 ____D C:\Users\XX\AppData\Local\Microsoft Help
2014-01-15 08:09 - 2014-01-10 18:19 - 00408696 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-15 03:11 - 2013-07-30 06:47 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 03:02 - 2011-11-27 10:57 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 02:22 - 2014-01-15 02:22 - 00000000 ____D C:\Program Files\Common Files\Java
2014-01-15 02:22 - 2013-10-15 08:29 - 00000000 ____D C:\ProgramData\Oracle
2014-01-15 02:20 - 2014-01-15 02:21 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-15 02:20 - 2014-01-15 02:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-15 02:20 - 2014-01-15 02:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-15 02:20 - 2014-01-15 02:20 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-01-15 02:20 - 2012-09-26 11:59 - 00868264 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2014-01-15 02:20 - 2012-09-26 11:59 - 00790440 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2014-01-15 02:19 - 2014-01-15 02:19 - 00000000 ____D C:\Program Files\Java
2014-01-14 09:01 - 2013-07-05 21:17 - 00000000 ____D C:\Program Files\SuperLyrics
2014-01-14 08:54 - 2014-01-14 08:54 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2014-01-14 08:52 - 2014-01-14 08:52 - 06951048 _____ (Microsoft Corporation) C:\Users\XX\Downloads\Silverlight.exe
2014-01-13 21:55 - 2011-11-27 10:19 - 00000000 ____D C:\Users\XX
2014-01-13 21:43 - 2011-11-27 19:59 - 00000000 ____D C:\Users\XX\AppData\Local\Corel
2014-01-13 21:43 - 2011-11-27 19:57 - 00000952 ___SH C:\Windows\system32\KGyGaAvL.sys
2014-01-13 21:30 - 2013-12-28 21:54 - 00000000 ____D C:\ProgramData\Browser faster
2014-01-13 21:30 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\PLA
2014-01-13 21:00 - 2014-01-13 21:00 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-13 21:00 - 2014-01-13 21:00 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2014-01-13 20:41 - 2013-12-30 22:55 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\XX\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-13 20:26 - 2014-01-13 20:25 - 00000000 ____D C:\Windows\220FB0354744483A9A0B41DF77061583.TMP
2014-01-13 20:11 - 2014-01-13 20:05 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2014-01-13 20:06 - 2014-01-13 20:06 - 00000644 _____ C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-01-13 20:06 - 2014-01-13 20:06 - 00000616 _____ C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-01-13 20:06 - 2014-01-13 20:06 - 00000446 _____ C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job
2014-01-13 20:06 - 2014-01-13 20:05 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2014-01-13 19:54 - 2014-01-13 19:53 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\XX\Downloads\spybot-2.2.25.exe
2014-01-12 14:27 - 2011-11-27 10:23 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-12 13:14 - 2014-01-12 13:14 - 00000220 _____ C:\Windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013.job
2014-01-12 10:22 - 2013-08-05 11:58 - 00000000 ____D C:\Users\XX\AppData\Local\Audible
2014-01-11 18:13 - 2011-11-27 10:19 - 00000000 ____D C:\Users\XX\AppData\Local\VirtualStore
2014-01-11 17:13 - 2014-01-11 17:13 - 00000404 _____ C:\Windows\Tasks\AVG_REG_1213b.job
2014-01-11 17:13 - 2014-01-11 17:13 - 00000386 _____ C:\Windows\Tasks\AVG_SYS_TASK_DELETE.job
2014-01-11 17:13 - 2014-01-11 17:13 - 00000000 ____D C:\ProgramData\AVG 1213b Campaign
2014-01-10 18:19 - 2013-05-07 08:04 - 00000000 ____D C:\Users\XX\.thumbnails
2014-01-10 16:04 - 2012-09-22 20:29 - 00000970 _____ C:\Users\XX\Desktop\Dropbox.lnk
2014-01-10 16:04 - 2012-09-22 20:28 - 00000000 ____D C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-10 15:45 - 2014-01-10 15:45 - 00109280 _____ C:\Users\XX\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-09 22:41 - 2014-01-09 22:27 - 00000000 ____D C:\ProgramData\AVG
2014-01-09 22:35 - 2014-01-09 22:35 - 00000000 ____D C:\Users\XX\AppData\Roaming\AVG
2014-01-09 22:33 - 2014-01-09 21:25 - 00000000 ____D C:\Program Files\AVG
2014-01-09 22:22 - 2014-01-09 22:22 - 78353832 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295_24c28.exe
2014-01-09 21:36 - 2014-01-09 21:10 - 00000000 ____D C:\Users\XX\AppData\Local\Avg2014
2014-01-09 21:30 - 2014-01-09 21:30 - 00000212 _____ C:\Windows\Tasks\SidebarExecute.job
2014-01-09 21:30 - 2014-01-09 21:30 - 00000000 ____D C:\Users\XX\AppData\Roaming\AVG2014
2014-01-09 21:30 - 2014-01-09 21:26 - 00000000 ____D C:\ProgramData\AVG2014
2014-01-09 21:29 - 2014-01-09 21:29 - 00000951 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2014-01-09 21:29 - 2014-01-09 21:29 - 00000000 ____D C:\Users\XX\AppData\Roaming\TuneUp Software
2014-01-09 21:26 - 2014-01-09 21:26 - 00000000 ___HD C:\$AVG
2014-01-09 21:10 - 2014-01-09 21:10 - 00000000 ____D C:\Users\XX\AppData\Local\MFAData
2014-01-09 21:08 - 2014-01-09 21:02 - 137189352 _____ (AVG Technologies) C:\Users\XX\Downloads\avg_free_x86_all_2014_4259a6848.exe
2013-12-31 01:08 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\addins
2013-12-31 01:05 - 2013-12-29 19:22 - 00000000 ____D C:\Program Files\AmiExt
2013-12-31 00:36 - 2013-12-29 19:22 - 00000000 ____D C:\ProgramData\Updater
2013-12-31 00:36 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Web
2013-12-31 00:36 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Resources
2013-12-31 00:33 - 2013-12-22 17:53 - 00000000 ____D C:\ProgramData\wEbbsaaver
2013-12-31 00:33 - 2013-12-22 17:08 - 00000000 ____D C:\ProgramData\SimaRtComppare
2013-12-30 22:56 - 2013-12-30 22:56 - 00000000 ____D C:\Users\XX\AppData\Roaming\Malwarebytes
2013-12-30 22:56 - 2013-12-30 22:56 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-30 22:05 - 2011-11-27 10:53 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-30 21:19 - 2013-12-30 21:19 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-12-30 01:34 - 2011-11-27 10:20 - 00001146 _____ C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-29 22:04 - 2013-12-29 22:04 - 00000000 ____D C:\ProgramData\Websteroids
2013-12-29 21:56 - 2013-12-29 19:19 - 00000444 __RSH C:\ProgramData\ntuser.pol
2013-12-29 19:48 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\AppData\Roaming\Uniblue
2013-12-29 19:48 - 2013-12-29 19:18 - 00000000 ____D C:\Program Files\Uniblue
2013-12-29 19:36 - 2013-12-29 19:36 - 01233962 _____ C:\Users\XX\Downloads\adwcleaner_3.016.exe
2013-12-29 19:25 - 2013-12-29 19:25 - 00001212 _____ C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Create Amazing Presentations.lnk
2013-12-29 19:19 - 2009-07-14 03:37 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\AppData\Local\cache
2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\.android
2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 _____ C:\Users\XX\daemonprocess.txt
ZeroAccess:
C:\$Recycle.Bin\S-1-5-21-3209394106-3398393384-4106522146-1000\$26a220ba84cc633398379c35e8273d4a
ZeroAccess:
C:\$Recycle.Bin\S-1-5-18\$26a220ba84cc633398379c35e8273d4a
Files to move or delete:
====================
C:\Users\XX\AppData\Roaming\skype.ini
C:\ProgramData\0tbpw.pad
Some content of TEMP:
====================
C:\Users\XX\AppData\Local\Temp\avgnt.exe
C:\Users\XX\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-01 14:11
==================== End Of Log ============================
--- --- --- --- --- --- --- --- --- --- --- --- Addition Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x86) Version: 21-01-2014
Ran by XX at 2014-01-22 02:27:49
Running from C:\Users\XX\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: AVG Internet Security 2014 (Enabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: AVG Internet Security 2014 (Enabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
FW: AVG Internet Security 2014 (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}
==================== Installed Programs ======================
7-Zip 9.20 (Version: - )
Adobe Flash Player 11 ActiveX (Version: 11.9.900.170 - Adobe Systems Incorporated)
Adobe Flash Player 11 Plugin (Version: 11.1.102.55 - Adobe Systems Incorporated)
Adobe Reader 8.1.2 - Deutsch (Version: 8.1.2 - Adobe Systems Incorporated)
Amazon MP3-Downloader 1.0.17 (Version: 1.0.17 - Amazon Services LLC)
Apple Application Support (Version: 2.1.5 - Apple Inc.)
Apple Software Update (Version: 2.1.3.127 - Apple Inc.)
ArcSoft ShowBiz (Version: - ArcSoft)
Audacity 1.3.13 (Unicode) (Version: - Audacity Team)
AudibleManager (Version: 2007522016.48.56.9309554 - Audible, Inc.)
AVG 2014 (Version: 14.0.3681 - AVG Technologies) Hidden
AVG 2014 (Version: 14.0.4259 - AVG Technologies) Hidden
AVG 2014 (Version: 2014.0.4259 - AVG Technologies)
AVG PC TuneUp 2014 (de-DE) (Version: 14.0.1001.295 - AVG) Hidden
AVG PC TuneUp 2014 (Version: 14.0.1001.295 - AVG)
AVG PC TuneUp 2014 (Version: 14.0.1001.295 - AVG) Hidden
Avira Free Antivirus (Version: 14.0.2.286 - Avira)
CCleaner (Version: 3.23 - Piriform)
Corel Paint Shop Pro Photo X2 (Version: 12.010.0000 - Corel Corporation)
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (Version: - Microsoft)
Deutsch - Custom (Version: 1.0.3.40 - Company)
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
FileZilla Client 3.7.1.1 (Version: 3.7.1.1 - Tim Kosse)
Filzip 3.06 (Version: 3.0.6 - Philipp Engel)
FormatFactory 3.1.1 (Version: 3.1.1 - Free Time)
Free YouTube to MP3 Converter version 3.12.0.128 (Version: 3.12.0.128 - DVDVideoSoft Ltd.)
GIMP 2.8.4 (Version: 2.8.4 - The GIMP Team)
Google Chrome (Version: 32.0.1700.76 - Google Inc.)
Google Update Helper (Version: 1.3.22.3 - Google Inc.) Hidden
Intel(R) Graphics Media Accelerator Driver (Version: 8.15.10.1930 - Intel Corporation)
Intel(R) TV Wizard (Version: - Intel Corporation)
IrfanView (remove only) (Version: 4.32 - Irfan Skiljan)
Java 7 Update 40 (Version: 7.0.400 - Oracle)
Java Auto Updater (Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Juniper Networks Host Checker (HKCU Version: 7.3.0.23977 - Juniper Networks)
Juniper Networks Secure Application Manager (Version: 7.3.0.23977 - Juniper Networks)
Juniper Networks, Inc. Setup Client (HKCU Version: 7.3.4.32787 - Juniper Networks, Inc.)
Key Mapper (Version: 1.0.2 - Rose Hill Solutions)
KODAK Create@Home Software (für dm) (Version: 7.6.1392 - Eastman Kodak Company)
LAME v3.98.3 for Audacity (Version: - )
Lenovo ThinkVantage Toolbox (Version: 6.0.5802.24 - PC-Doctor, Inc.)
Malwarebytes Anti-Malware Version 1.75.0.1300 (Version: 1.75.0.1300 - Malwarebytes Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile DEU Language Pack (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Keyboard Layout Creator 1.4 (Version: 1.4.6000 - Microsoft Corp.)
Microsoft Office 2010 Service Pack 1 (SP1) (Version: - Microsoft) Hidden
Microsoft Office Access MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Groove MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office InfoPath MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (Version: 14.0.6029.1000 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
MotoHelper 2.0.45 Driver 5.0.0 (Version: 2.0.45 - Motorola)
MotoHelper MergeModules (Version: 1.2.0 - Motorola) Hidden
Motorola Mobile Drivers Installation 5.0.0 (Version: 5.0.0 - Motorola Inc.) Hidden
Mozilla Firefox 16.0.2 (x86 de) (Version: 16.0.2 - Mozilla)
Mozilla Maintenance Service (Version: 24.2.0 - Mozilla)
Mozilla Thunderbird 24.2.0 (x86 de) (Version: 24.2.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (Version: 4.20.9876.0 - Microsoft Corporation)
PDF24 Creator 5.2.0 (Version: - PDF24.org)
PDFCreator (Version: 1.6.2 - pdfforge)
Qtrax Player (HKCU Version: - portal.qtrax.com)
QuickTime (Version: 7.71.80.42 - Apple Inc.)
RealNetworks - Microsoft Visual C++ 2008 Runtime (Version: 9.0 - RealNetworks, Inc) Hidden
RealUpgrade 1.1 (Version: 1.1.0 - RealNetworks, Inc.) Hidden
SaveByClick (Version: 1.0 - SaveByClick) <==== ATTENTION
Skype™ 6.3 (Version: 6.3.107 - Skype Technologies S.A.)
xxx xxx (Version: 4.4.0 - xxx GmbH & Co. KG)
SparkleShare (Version: 1.0.0 - SparkleShare)
Spotify (HKCU Version: 0.9.1.57.ge7405149 - Spotify AB)
Spybot - Search & Destroy (Version: 2.2.25 - Safer-Networking Ltd.)
StreamTransport version: 1.0.2.2171 (Version: - )
SUPERAntiSpyware (Version: 5.7.1018 - SUPERAntiSpyware.com)
ThinkPad Power Management Driver (Version: 1.43 - )
TreeSize Free V2.7 (Version: 2.7 - JAM Software)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2810071) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2494150) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553065) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553267) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2553310) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2566458) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2596964) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2687503) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2767886) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825640) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2826026) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2850079) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2553290) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2810072) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687623) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Outlook Social Connector 2010 (KB2553406) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2553145) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2589371) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2810066) 32-Bit Edition (Version: - Microsoft)
Update for Microsoft Word 2010 (KB2837593) 32-Bit Edition (Version: - Microsoft)
Updater (Version: 2.6.53 - Creative Island Media, LLC)
USB Video/Audio Device Driver (Version: 1.00.0000 - Ihr Firmenname)
Visual Studio 2012 x86 Redistributables (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player 1.1.11 (Version: 1.1.11 - VideoLAN)
==================== Restore Points =========================
20-01-2014 20:04:33 20.02.14
21-01-2014 16:59:14 AVG PC TuneUp 2014 wird entfernt
21-01-2014 17:03:25 AVG PC TuneUp 2014 (de-DE) wird entfernt
21-01-2014 17:15:54 AVG PC TuneUp 2014 wird installiert
==================== Hosts content: ==========================
2009-07-14 03:04 - 2009-06-10 22:39 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (whitelisted) =============
Task: {0885E870-83C3-4F12-A0BF-6FD45A2498FE} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-03-31] (PC-Doctor, Inc.)
Task: {2CB84D8E-D9D2-4359-956F-E473D828B94F} - System32\Tasks\PCDEventLauncher => C:\Program Files\PC-Doctor\sessionchecker.exe [2011-03-31] (PC-Doctor, Inc.)
Task: {36F211C8-7321-42D7-BDE1-810C22345365} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3209394106-3398393384-4106522146-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-11-08] (RealNetworks, Inc.)
Task: {5E8008A4-49B8-4B23-BE92-48CE97603B44} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-09-24] (Piriform Ltd)
Task: {7E5019A1-DAF8-41C0-9831-422BDDC64E04} - System32\Tasks\{F0566F61-5A90-4EF4-86D7-D7AC4D7A72BB} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.0.105/de/abandoninstall?source=lightinstaller&page=tsInstall
Task: {832F7DE9-2342-469D-A014-337F65028019} - System32\Tasks\MT66 Software Update => C:\Program Files\Common Files\MT66 Software Update\UpdateClient.exe
Task: {882FA565-A9E1-444D-B23C-AF7AC99A4BE2} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3209394106-3398393384-4106522146-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [2011-11-08] (RealNetworks, Inc.)
Task: {8AAE035D-A9CC-4B5C-9C50-B5189C6F81A6} - System32\Tasks\{A7244EDB-6CB7-4E28-89AA-8F7014BCA92A} => C:\ProgramData\BetterSoft\SaveByClick\SaveByClick.exe <==== ATTENTION
Task: {DA061B9D-4A6A-4956-BF03-CFF37A0A0C77} - System32\Tasks\SystemToolsDailyTest => C:\Program Files\PC-Doctor\uaclauncher.exe [2011-03-31] (PC-Doctor, Inc.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AVG_REG_1213b.job => C:\ProgramData\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe
Task: C:\Windows\Tasks\AVG_SYS_TASK_DELETE.job => C:\ProgramData\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe
Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf16104a353afe.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Launch 8613.job => C:\Program Files\Audible\Bin\Manager.exe
Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\PC-Doctor\uaclauncher.exe
Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe
Task: C:\Windows\Tasks\SidebarExecute.job => C:\Program Files\Windows Sidebar\sidebar.exe
Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task da457c5e-ce80-4c51-9dc8-70fbe63dcce0.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task fb3e5a6f-b3a6-4850-b703-966e9e14f035.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\PC-Doctor\uaclauncher.exe
Task: C:\Windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013.job => C:\Program Files\AVG\AVG PC TuneUp\OneClick.exe
==================== Loaded Modules (whitelisted) =============
2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2013-06-27 21:12 - 2013-06-27 21:12 - 00093696 _____ () C:\Program Files\FileZilla FTP Client\fzshellext.dll
2014-01-13 20:05 - 2013-05-16 10:55 - 00113496 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-01-13 20:05 - 2013-05-16 10:55 - 00416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl
2011-11-27 11:57 - 2004-09-08 13:45 - 00368128 _____ () C:\Program Files\Filzip\fzshext.dll
2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\XX\AppData\Roaming\Dropbox\bin\libcef.dll
2012-12-02 17:22 - 2012-12-02 17:22 - 01325053 _____ () C:\Program Files\SparkleShare\msysgit\bin\msys-crypto-0.9.8.dll
2012-10-27 17:21 - 2012-10-27 17:21 - 02295264 _____ () C:\Program Files\Mozilla Firefox\mozjs.dll
2011-11-27 12:20 - 2011-11-27 12:20 - 08527008 _____ () C:\Windows\system32\Macromed\Flash\NPSWF32.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
==================== Safe Mode (whitelisted) ===================
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (01/20/2014 10:01:05 PM) (Source: Application Hang) (User: )
Description: Programm xxx.exe, Version 4.4.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 15c4
Startzeit: 01cf160e25b85277
Endzeit: 3195
Anwendungspfad: C:\Users\XX\AppData\Local\Apps\xxx440\xxx.exe
Berichts-ID: d115b556-8215-11e3-bc59-0016d3cc412f
Error: (01/15/2014 02:31:12 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: java.exe, Version: 7.0.400.43, Zeitstempel: 0x521c3bf2
Name des fehlerhaften Moduls: jsoundds.dll_unloaded, Version: 0.0.0.0, Zeitstempel: 0x521c4698
Ausnahmecode: 0xc0000005
Fehleroffset: 0x6bd72e42
ID des fehlerhaften Prozesses: 0x1120
Startzeit der fehlerhaften Anwendung: 0xjava.exe0
Pfad der fehlerhaften Anwendung: java.exe1
Pfad des fehlerhaften Moduls: java.exe2
Berichtskennung: java.exe3
Error: (01/15/2014 00:58:41 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die E/A-Schreibvorgänge können während des Schattenkopie-Erstellungszeitraums auf Volume "C:\" nicht gespeichert werden.
Der Volumeindex im Schattenkopiesatz ist 0. Fehlerdetails: Offen[0x00000000, Der Vorgang wurde erfolgreich beendet.
], Leerung[0x00000000, Der Vorgang wurde erfolgreich beendet.
], Freigabe[0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist.
], Ausführung[0x00000000, Der Vorgang wurde erfolgreich beendet.
].
Vorgang:
Asynchroner Vorgang wird ausgeführt
Kontext:
Aktueller Status: DoSnapshotSet
Error: (01/15/2014 00:58:41 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die Schattenkopie kann nicht zugesichert werden - Vorgang hat das Zeitlimit überschritten.
Fehlerkontext: DeviceIoControl(\\?\Volume{80c11bc6-18d7-11e1-9f4b-806e6f6e6963} - 00000140,0x0053c010,008C8F40,0,008C6F30,4096,[0]).
Vorgang:
Schattenkopien werden übertragen
Kontext:
Ausführungskontext: System Provider
Error: (01/15/2014 00:58:31 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die E/A-Schreibvorgänge können während des Schattenkopie-Erstellungszeitraums auf Volume "C:\" nicht gespeichert werden.
Der Volumeindex im Schattenkopiesatz ist 0. Fehlerdetails: Offen[0x00000000, Der Vorgang wurde erfolgreich beendet.
], Leerung[0x00000000, Der Vorgang wurde erfolgreich beendet.
], Freigabe[0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist.
], Ausführung[0x00000000, Der Vorgang wurde erfolgreich beendet.
].
Vorgang:
Asynchroner Vorgang wird ausgeführt
Kontext:
Aktueller Status: DoSnapshotSet
Error: (01/15/2014 00:58:31 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die Schattenkopie kann nicht zugesichert werden - Vorgang hat das Zeitlimit überschritten.
Fehlerkontext: DeviceIoControl(\\?\Volume{80c11bc6-18d7-11e1-9f4b-806e6f6e6963} - 00000058,0x0053c010,008C6F30,0,008C8F40,4096,[0]).
Vorgang:
Schattenkopien werden übertragen
Kontext:
Ausführungskontext: System Provider
Error: (01/15/2014 00:57:41 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die E/A-Schreibvorgänge können während des Schattenkopie-Erstellungszeitraums auf Volume "C:\" nicht gespeichert werden.
Der Volumeindex im Schattenkopiesatz ist 0. Fehlerdetails: Offen[0x00000000, Der Vorgang wurde erfolgreich beendet.
], Leerung[0x00000000, Der Vorgang wurde erfolgreich beendet.
], Freigabe[0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist.
], Ausführung[0x00000000, Der Vorgang wurde erfolgreich beendet.
].
Vorgang:
Asynchroner Vorgang wird ausgeführt
Kontext:
Aktueller Status: DoSnapshotSet
Error: (01/15/2014 00:57:41 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die Schattenkopie kann nicht zugesichert werden - Vorgang hat das Zeitlimit überschritten.
Fehlerkontext: DeviceIoControl(\\?\Volume{80c11bc6-18d7-11e1-9f4b-806e6f6e6963} - 0000013C,0x0053c010,008C6F30,0,008C8F40,4096,[0]).
Vorgang:
Schattenkopien werden übertragen
Kontext:
Ausführungskontext: System Provider
Error: (01/15/2014 00:57:09 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die E/A-Schreibvorgänge können während des Schattenkopie-Erstellungszeitraums auf Volume "C:\" nicht gespeichert werden.
Der Volumeindex im Schattenkopiesatz ist 0. Fehlerdetails: Offen[0x00000000, Der Vorgang wurde erfolgreich beendet.
], Leerung[0x00000000, Der Vorgang wurde erfolgreich beendet.
], Freigabe[0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist.
], Ausführung[0x00000000, Der Vorgang wurde erfolgreich beendet.
].
Vorgang:
Asynchroner Vorgang wird ausgeführt
Kontext:
Aktueller Status: DoSnapshotSet
Error: (01/15/2014 00:57:09 AM) (Source: VSS) (User: )
Description: Volumeschattenkopie-Dienstfehler: Die Schattenkopie kann nicht zugesichert werden - Vorgang hat das Zeitlimit überschritten.
Fehlerkontext: DeviceIoControl(\\?\Volume{80c11bc6-18d7-11e1-9f4b-806e6f6e6963} - 00000120,0x0053c010,008C8F40,0,008C6F30,4096,[0]).
Vorgang:
Schattenkopien werden übertragen
Kontext:
Ausführungskontext: System Provider
System errors:
=============
Error: (01/22/2014 01:16:17 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Microsoft .NET Framework NGEN v4.0.30319_X86 erreicht.
Error: (01/21/2014 06:39:34 PM) (Source: DCOM) (User: )
Description: {3EB3C877-1F16-487C-9050-104DBCD66683}
Error: (01/21/2014 05:40:18 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst AntiVirSchedulerService erreicht.
Error: (01/21/2014 04:22:40 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (01/21/2014 04:22:40 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.
Error: (01/20/2014 09:03:19 PM) (Source: VDS Basic Provider) (User: )
Description: Unerwarteter Fehler. Fehlercode: 490@01010004
Error: (01/20/2014 04:05:03 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Update" wurde nicht richtig gestartet.
Error: (01/17/2014 07:52:07 AM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Error: (01/17/2014 07:52:07 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Spybot-S&D 2 Scanner Service erreicht.
Error: (01/16/2014 11:36:13 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Spybot-S&D 2 Scanner Service" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
Microsoft Office Sessions:
=========================
Error: (01/20/2014 10:01:05 PM) (Source: Application Hang)(User: )
Description: xxx.exe4.4.0.015c401cf160e25b852773195C:\Users\XX\AppData\Local\Apps\xxx440\xxx.exed115b556-8215-11e3-bc59-0016d3cc412f
Error: (01/15/2014 02:31:12 AM) (Source: Application Error)(User: )
Description: java.exe7.0.400.43521c3bf2jsoundds.dll_unloaded0.0.0.0521c4698c00000056bd72e42112001cf1190d106566dC:\Program Files\Java\jre7\bin\java.exejsoundds.dllb7316e52-7d84-11e3-bbba-0016d3cc412f
Error: (01/15/2014 00:58:41 AM) (Source: VSS)(User: )
Description: C:\00x00000000, Der Vorgang wurde erfolgreich beendet.
0x00000000, Der Vorgang wurde erfolgreich beendet.
0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist.
0x00000000, Der Vorgang wurde erfolgreich beendet.
Vorgang:
Asynchroner Vorgang wird ausgeführt
Kontext:
Aktueller Status: DoSnapshotSet
Error: (01/15/2014 00:58:41 AM) (Source: VSS)(User: )
Description: DeviceIoControl(\\?\Volume{80c11bc6-18d7-11e1-9f4b-806e6f6e6963} - 00000140,0x0053c010,008C8F40,0,008C6F30,4096,[0])
Vorgang:
Schattenkopien werden übertragen
Kontext:
Ausführungskontext: System Provider
Error: (01/15/2014 00:58:31 AM) (Source: VSS)(User: )
Description: C:\00x00000000, Der Vorgang wurde erfolgreich beendet.
0x00000000, Der Vorgang wurde erfolgreich beendet.
0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist.
0x00000000, Der Vorgang wurde erfolgreich beendet.
Vorgang:
Asynchroner Vorgang wird ausgeführt
Kontext:
Aktueller Status: DoSnapshotSet
Error: (01/15/2014 00:58:31 AM) (Source: VSS)(User: )
Description: DeviceIoControl(\\?\Volume{80c11bc6-18d7-11e1-9f4b-806e6f6e6963} - 00000058,0x0053c010,008C6F30,0,008C8F40,4096,[0])
Vorgang:
Schattenkopien werden übertragen
Kontext:
Ausführungskontext: System Provider
Error: (01/15/2014 00:57:41 AM) (Source: VSS)(User: )
Description: C:\00x00000000, Der Vorgang wurde erfolgreich beendet.
0x00000000, Der Vorgang wurde erfolgreich beendet.
0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist.
0x00000000, Der Vorgang wurde erfolgreich beendet.
Vorgang:
Asynchroner Vorgang wird ausgeführt
Kontext:
Aktueller Status: DoSnapshotSet
Error: (01/15/2014 00:57:41 AM) (Source: VSS)(User: )
Description: DeviceIoControl(\\?\Volume{80c11bc6-18d7-11e1-9f4b-806e6f6e6963} - 0000013C,0x0053c010,008C6F30,0,008C8F40,4096,[0])
Vorgang:
Schattenkopien werden übertragen
Kontext:
Ausführungskontext: System Provider
Error: (01/15/2014 00:57:09 AM) (Source: VSS)(User: )
Description: C:\00x00000000, Der Vorgang wurde erfolgreich beendet.
0x00000000, Der Vorgang wurde erfolgreich beendet.
0x80042314, Der Schattenkopieanbieter hat beim Warten auf den Schreibvorgang auf das Volume, von dem eine Schattenkopie erstellt wird, das Zeitlimit überschritten. Ursache hierfür könnte eine durch eine Anwendung oder einen Systemdienst verursachte hohe Aktivität auf dem Volume sein. Wiederholen Sie den Vorgang später, wenn das Volume nicht so stark ausgelastet ist.
0x00000000, Der Vorgang wurde erfolgreich beendet.
Vorgang:
Asynchroner Vorgang wird ausgeführt
Kontext:
Aktueller Status: DoSnapshotSet
Error: (01/15/2014 00:57:09 AM) (Source: VSS)(User: )
Description: DeviceIoControl(\\?\Volume{80c11bc6-18d7-11e1-9f4b-806e6f6e6963} - 00000120,0x0053c010,008C8F40,0,008C6F30,4096,[0])
Vorgang:
Schattenkopien werden übertragen
Kontext:
Ausführungskontext: System Provider
==================== Memory info ===========================
Percentage of memory in use: 80%
Total physical RAM: 2006.3 MB
Available physical RAM: 392.89 MB
Total Pagefile: 4012.59 MB
Available Pagefile: 1692.26 MB
Total Virtual: 2047.88 MB
Available Virtual: 1905.67 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:58.5 GB) (Free:18.39 GB) NTFS
Drive d: (Volume) (Fixed) (Total:53.19 GB) (Free:13.32 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: 97979797)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=58 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=53 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Danke! Ah, und noch eine Sache: ich kann keine Systemwiederherstellung mehr machen. Es sind keine Wiederherstellungspunkte mehr vorhanden, obwohl die immer da waren :-( Nochmal Danke für Eure Hilfe. LG Josi Geändert von Josefine_Jo (22.01.2014 um 02:40 Uhr) |
| | #4 |
| /// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() | Werbefenster öffnen sich bei Firefox Ok. Hinweis: Mehrere AV-HintergrundwächterMir ist aufgefallen, dass du mehr als ein Antivirus-Programm mit Hintergrundwächter laufen hast:
Entscheide dich für eines dieser Programme und deinstalliere die anderen über Start -> Systemsteuerung -> Programme und Funktionen (Vista & Win 7) bzw. Start -> Systemsteuerung -> Software (Win XP). Schritt 1
Schritt 2 Downloade Dir bitte
Schritt 3 Scan mit Combofix
Schritt 4 Starte noch einmal FRST.
__________________ cheers, Leo |
| | #5 |
![]() ![]() | Werbefenster öffnen sich bei FirefoxCode:
ATTFilter # AdwCleaner v3.017 - Bericht erstellt am 22/01/2014 um 14:00:23
# Aktualisiert 12/01/2014 von Xplode
# Betriebssystem : Windows 7 Professional Service Pack 1 (32 bits)
# Benutzername : XX - XX-PC
# Gestartet von : C:\Users\XX\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.16428
-\\ Mozilla Firefox v16.0.2 (de)
[ Datei : C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\prefs.js ]
Zeile gelöscht : user_pref("extensions.L4ctnd4UGjoX.scode", "(function(){try{if(window.self.location.hostname.indexOf(\"acebook.co\")>-1){return};}catch(e){};var _wlst={lsKey:\"ssjsmn2ja8ddw2a\",get:function(b,a){if(3[...]
Zeile gelöscht : user_pref("extensions.V1rfVjl7TcBz.scode", "(function(){try{if(window.self.location.hostname.indexOf(\"acebook.co\")>-1){return};}catch(e){};if(window.self==window.top){var script=document.createEleme[...]
-\\ Google Chrome v32.0.1700.76
[ Datei : C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [53482 octets] - [29/12/2013 19:37:31]
AdwCleaner[R1].txt - [2261 octets] - [29/12/2013 20:17:43]
AdwCleaner[R2].txt - [10628 octets] - [30/12/2013 01:32:01]
AdwCleaner[R3].txt - [2204 octets] - [21/01/2014 00:30:12]
AdwCleaner[R4].txt - [1848 octets] - [22/01/2014 13:57:02]
AdwCleaner[S0].txt - [50813 octets] - [29/12/2013 19:47:34]
AdwCleaner[S1].txt - [2322 octets] - [29/12/2013 20:24:16]
AdwCleaner[S2].txt - [8272 octets] - [30/12/2013 01:34:19]
AdwCleaner[S3].txt - [2254 octets] - [21/01/2014 00:36:16]
AdwCleaner[S4].txt - [1769 octets] - [22/01/2014 14:00:23]
########## EOF - C:\AdwCleaner\AdwCleaner[S4].txt - [1829 octets] ##########
Auch bin ich mir nicht sicher, ob ich wirklich alle Malewarescanner ausbekommen habe. Würde er mich auffordern, wenn ihn noch der eine oder andere Stört? Ah - jetzt passiert etwas. Dann warte ich mal noch.... Das Logfile ist zu lang. Soll ich es anhängen? |
| | #6 | |
| /// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() | Werbefenster öffnen sich bei FirefoxZitat:
__________________ --> Werbefenster öffnen sich bei Firefox |
| | #7 |
![]() ![]() | Werbefenster öffnen sich bei Firefox [CODE]ComboFix 14-01-22.01 - XX 22.01.2014 14:29:22.1.2 - x86 Microsoft Windows 7 Professional 6.1.7601.1.1252.49.1031.18.2006.1187 [GMT 1:00] ausgeführt von:: c:\users\XX\Desktop\ComboFix.exe AV: AVG Internet Security 2014 *Disabled/Updated* {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9} FW: AVG Internet Security 2014 *Enabled* {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2} SP: AVG Internet Security 2014 *Disabled/Updated* {B5F5C120-2089-702E-0001-553BB0D5A664} SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\program files\SuperLyrics c:\program files\SuperLyrics\chrome.crx c:\program files\SuperLyrics\chrome.manifest c:\program files\SuperLyrics\FF\chrome.manifest c:\program files\SuperLyrics\FF\chrome\content\icon.png c:\program files\SuperLyrics\FF\chrome\content\main.js c:\program files\SuperLyrics\FF\chrome\content\overlay.xul c:\program files\SuperLyrics\FF\install.rdf c:\programdata\0tbpw.pad c:\users\XX\AppData\Roaming\16001.009 c:\users\XX\AppData\Roaming\16001.009\chrome.manifest c:\users\XX\AppData\Roaming\16001.009\components\AcroFF.txt c:\users\XX\AppData\Roaming\16001.009\install.rdf c:\users\XX\AppData\Roaming\16001.010 c:\users\XX\AppData\Roaming\16001.010\chrome.manifest c:\users\XX\AppData\Roaming\16001.010\components\AcroFF.txt c:\users\XX\AppData\Roaming\16001.010\install.rdf c:\users\XX\AppData\Roaming\16001.011 c:\users\XX\AppData\Roaming\16001.011\chrome.manifest c:\users\XX\AppData\Roaming\16001.011\components\AcroFF.txt c:\users\XX\AppData\Roaming\16001.011\install.rdf c:\users\XX\AppData\Roaming\16001.012 c:\users\XX\AppData\Roaming\16001.012\chrome.manifest c:\users\XX\AppData\Roaming\16001.012\components\AcroFF.txt c:\users\XX\AppData\Roaming\16001.012\install.rdf c:\users\XX\AppData\Roaming\16001.013 c:\users\XX\AppData\Roaming\16001.013\chrome.manifest c:\users\XX\AppData\Roaming\16001.013\components\AcroFF.txt c:\users\XX\AppData\Roaming\16001.013\install.rdf c:\users\XX\AppData\Roaming\16001.014 c:\users\XX\AppData\Roaming\16001.014\chrome.manifest c:\users\XX\AppData\Roaming\16001.014\components\AcroFF.txt c:\users\XX\AppData\Roaming\16001.014\install.rdf c:\users\XX\AppData\Roaming\16001.015 c:\users\XX\AppData\Roaming\16001.015\chrome.manifest c:\users\XX\AppData\Roaming\16001.015\components\AcroFF.txt c:\users\XX\AppData\Roaming\16001.015\install.rdf c:\users\XX\AppData\Roaming\AcroIEHelpe.txt c:\users\XX\AppData\Roaming\rwyk3m6g.default.tmp c:\users\XX\AppData\Roaming\srvblck5.tmp . . ((((((((((((((((((((((( Dateien erstellt von 2013-12-22 bis 2014-01-22 )))))))))))))))))))))))))))))) . . 2014-01-22 13:41 . 2014-01-22 13:41 -------- d-----w- c:\users\XX\AppData\Local\temp 2014-01-22 13:41 . 2014-01-22 13:41 -------- d-----w- c:\users\Default\AppData\Local\temp 2014-01-22 13:01 . 2013-12-16 00:54 7760024 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{07DE38F1-BC6C-4A19-B921-ED5CF9B7ED10}\mpengine.dll 2014-01-22 01:25 . 2014-01-22 01:25 -------- d-----w- C:\FRST 2014-01-21 17:23 . 2013-12-18 08:38 36152 ----a-w- c:\windows\system32\TURegOpt.exe 2014-01-21 17:22 . 2013-12-18 08:38 25400 ----a-w- c:\windows\system32\authuitu.dll 2014-01-20 18:33 . 2014-01-20 18:33 -------- d-----w- c:\users\XX\AppData\Roaming\SUPERAntiSpyware.com 2014-01-20 18:32 . 2014-01-20 19:45 -------- d-----w- c:\program files\SUPERAntiSpyware 2014-01-20 18:32 . 2014-01-20 18:32 -------- d-----w- c:\programdata\SUPERAntiSpyware.com 2014-01-15 01:22 . 2014-01-15 01:22 -------- d-----w- c:\program files\Common Files\Java 2014-01-15 01:20 . 2014-01-15 01:20 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll 2014-01-15 01:19 . 2014-01-15 01:19 -------- d-----w- c:\program files\Java 2014-01-15 00:40 . 2013-11-26 10:10 2349056 ----a-w- c:\windows\system32\win32k.sys 2014-01-15 00:40 . 2013-11-26 11:11 240576 ----a-w- c:\windows\system32\drivers\netio.sys 2014-01-15 00:40 . 2013-11-27 01:13 43520 ----a-w- c:\windows\system32\drivers\usbehci.sys 2014-01-15 00:40 . 2013-11-27 01:13 284672 ----a-w- c:\windows\system32\drivers\usbport.sys 2014-01-15 00:40 . 2013-11-27 01:14 258560 ----a-w- c:\windows\system32\drivers\usbhub.sys 2014-01-15 00:40 . 2013-11-27 01:13 76288 ----a-w- c:\windows\system32\drivers\usbccgp.sys 2014-01-15 00:40 . 2013-11-27 01:13 20480 ----a-w- c:\windows\system32\drivers\usbohci.sys 2014-01-15 00:40 . 2013-11-27 01:13 24064 ----a-w- c:\windows\system32\drivers\usbuhci.sys 2014-01-15 00:40 . 2013-11-27 01:13 6016 ----a-w- c:\windows\system32\drivers\usbd.sys 2014-01-14 07:54 . 2014-01-14 07:54 -------- d-----w- c:\program files\Microsoft Silverlight 2014-01-13 20:00 . 2014-01-13 20:00 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware 2014-01-13 20:00 . 2013-04-04 13:50 22856 ----a-w- c:\windows\system32\drivers\mbam.sys 2014-01-13 19:25 . 2014-01-13 19:26 -------- d-----w- c:\windows\220FB0354744483A9A0B41DF77061583.TMP 2014-01-13 19:05 . 2014-01-22 13:15 -------- d-----w- c:\programdata\Spybot - Search & Destroy 2014-01-13 19:05 . 2014-01-22 13:16 -------- d-----w- c:\program files\Spybot - Search & Destroy 2 2014-01-11 16:13 . 2014-01-11 16:13 -------- d-----w- c:\programdata\AVG 1213b Campaign 2014-01-09 21:35 . 2014-01-09 21:35 -------- d-----w- c:\users\XX\AppData\Roaming\AVG 2014-01-09 21:27 . 2014-01-09 21:41 -------- d-----w- c:\programdata\AVG 2014-01-09 21:25 . 2014-01-21 17:36 -------- d-sh--w- c:\programdata\{01BD4FC9-2F86-4706-A62E-774BB7E9D308} 2014-01-09 20:29 . 2014-01-09 20:29 -------- d-----w- c:\users\XX\AppData\Roaming\TuneUp Software 2014-01-09 20:26 . 2014-01-09 20:26 -------- d-----w- C:\$AVG 2014-01-09 20:25 . 2014-01-09 21:33 -------- d-----w- c:\program files\AVG 2014-01-09 20:10 . 2014-01-22 12:58 -------- d-----w- c:\programdata\MFAData 2014-01-09 20:10 . 2014-01-09 20:36 -------- d-----w- c:\users\XX\AppData\Local\Avg2014 2014-01-09 20:10 . 2014-01-09 20:10 -------- d--h--w- c:\programdata\Common Files 2014-01-09 20:10 . 2014-01-09 20:10 -------- d-----w- c:\users\XX\AppData\Local\MFAData 2013-12-30 21:56 . 2013-12-30 21:56 -------- d-----w- c:\users\XX\AppData\Roaming\Malwarebytes 2013-12-30 21:56 . 2013-12-30 21:56 -------- d-----w- c:\programdata\Malwarebytes 2013-12-30 20:19 . 2013-12-30 20:19 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard 2013-12-29 21:04 . 2013-12-29 21:04 -------- d-----w- c:\programdata\Websteroids 2013-12-29 18:37 . 2014-01-22 13:00 -------- d-----w- C:\AdwCleaner 2013-12-29 18:22 . 2013-12-31 00:05 -------- d-----w- c:\program files\AmiExt 2013-12-29 18:22 . 2013-12-30 23:36 -------- d-----w- c:\programdata\Updater 2013-12-29 18:22 . 2013-12-29 18:22 -------- d-----w- c:\program files\Uninstaller 2013-12-29 18:18 . 2013-12-29 18:18 -------- d-----w- c:\users\XX\.android 2013-12-29 18:18 . 2013-12-29 18:18 -------- d-----w- c:\users\XX\AppData\Local\cache 2013-12-29 18:18 . 2013-12-29 18:48 -------- d-----w- c:\users\XX\AppData\Roaming\Uniblue 2013-12-29 18:18 . 2013-12-29 18:48 -------- d-----w- c:\program files\Uniblue 2013-12-28 20:54 . 2014-01-13 20:30 -------- d-----w- c:\programdata\Browser faster . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2014-01-15 01:20 . 2012-09-26 10:59 790440 ----a-w- c:\windows\system32\deployJava1.dll 2014-01-15 01:20 . 2012-09-26 10:59 868264 ----a-w- c:\windows\system32\npDeployJava1.dll 2013-12-18 05:13 . 2011-11-27 10:21 231584 ------w- c:\windows\system32\MpSigStub.exe 2013-12-16 01:09 . 2013-12-16 01:09 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe 2013-12-16 01:09 . 2011-11-27 11:20 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2013-12-16 00:49 . 2013-12-16 00:49 71680 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe 2013-12-16 00:49 . 2013-12-16 00:49 646144 ----a-w- c:\windows\system32\MsSpellCheckingFacility.exe 2013-12-16 00:49 . 2013-12-16 00:49 645120 ----a-w- c:\windows\system32\jsIntl.dll 2013-12-16 00:49 . 2013-12-16 00:49 194048 ----a-w- c:\windows\system32\elshyph.dll 2013-12-16 00:49 . 2013-12-16 00:49 182272 ----a-w- c:\windows\system32\msls31.dll 2013-12-16 00:49 . 2013-12-16 00:49 62464 ----a-w- c:\windows\system32\tdc.ocx 2013-12-16 00:49 . 2013-12-16 00:49 34816 ----a-w- c:\windows\system32\JavaScriptCollectionAgent.dll 2013-12-16 00:49 . 2013-12-16 00:49 337408 ----a-w- c:\windows\system32\html.iec 2013-12-16 00:49 . 2013-12-16 00:49 24576 ----a-w- c:\windows\system32\licmgr10.dll 2013-12-16 00:49 . 2013-12-16 00:49 151552 ----a-w- c:\windows\system32\iexpress.exe 2013-12-16 00:49 . 2013-12-16 00:49 139264 ----a-w- c:\windows\system32\wextract.exe 2013-12-16 00:49 . 2013-12-16 00:49 1051136 ----a-w- c:\windows\system32\mshtmlmedia.dll 2013-12-16 00:49 . 2013-12-16 00:49 61952 ----a-w- c:\windows\system32\MshtmlDac.dll 2013-12-16 00:49 . 2013-12-16 00:49 454656 ----a-w- c:\windows\system32\vbscript.dll 2013-12-16 00:49 . 2013-12-16 00:49 36352 ----a-w- c:\windows\system32\imgutil.dll 2013-12-16 00:49 . 2013-12-16 00:49 13312 ----a-w- c:\windows\system32\mshta.exe 2013-12-16 00:49 . 2013-12-16 00:49 111616 ----a-w- c:\windows\system32\IEAdvpack.dll 2013-12-16 00:49 . 2013-12-16 00:49 86016 ----a-w- c:\windows\system32\iesysprep.dll 2013-12-16 00:49 . 2013-12-16 00:49 74240 ----a-w- c:\windows\system32\SetIEInstalledDate.exe 2013-12-16 00:49 . 2013-12-16 00:49 48640 ----a-w- c:\windows\system32\mshtmler.dll 2013-11-26 09:23 . 2013-12-16 21:05 2724864 ----a-w- c:\windows\system32\mshtml.tlb 2013-11-26 09:22 . 2013-12-16 21:05 4096 ----a-w- c:\windows\system32\ieetwcollectorres.dll 2013-11-26 08:53 . 2013-12-16 21:05 61952 ----a-w- c:\windows\system32\iesetup.dll 2013-11-26 08:52 . 2013-12-16 21:05 51200 ----a-w- c:\windows\system32\ieetwproxystub.dll 2013-11-26 08:29 . 2013-12-16 21:05 112128 ----a-w- c:\windows\system32\ieUnatt.exe 2013-11-26 08:29 . 2013-12-16 21:05 108032 ----a-w- c:\windows\system32\ieetwcollector.exe 2013-11-26 08:28 . 2013-12-16 21:05 553472 ----a-w- c:\windows\system32\jscript9diag.dll 2013-11-26 08:16 . 2013-12-16 21:05 4243968 ----a-w- c:\windows\system32\jscript9.dll 2013-11-26 07:32 . 2013-12-16 21:05 1928192 ----a-w- c:\windows\system32\inetcpl.cpl 2013-11-26 06:33 . 2013-12-16 21:05 1820160 ----a-w- c:\windows\system32\wininet.dll 2013-11-23 18:26 . 2013-12-11 00:32 417792 ----a-w- c:\windows\system32\WMPhoto.dll 2013-11-12 02:07 . 2013-12-11 00:32 2048 ----a-w- c:\windows\system32\tzres.dll 2013-11-05 20:50 . 2013-11-05 20:50 120600 ----a-w- c:\windows\system32\drivers\avgdiskx.sys 2013-11-04 20:57 . 2013-11-04 20:57 209176 ----a-w- c:\windows\system32\drivers\avgidsdriverx.sys 2013-10-31 22:00 . 2013-10-31 22:00 176952 ----a-w- c:\windows\system32\drivers\avgldx86.sys 2013-10-31 21:30 . 2013-10-31 21:30 222520 ----a-w- c:\windows\system32\drivers\avglogx.sys 2013-10-30 02:19 . 2013-12-11 00:32 301568 ----a-w- c:\windows\system32\msieftp.dll 2013-10-24 21:28 . 2013-10-24 21:28 147768 ----a-w- c:\windows\system32\drivers\avgidshx.sys 2012-10-27 16:21 . 2012-10-27 16:21 261600 ----a-w- c:\program files\mozilla firefox\components\browsercomps.dll . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1] @="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 131248 ----a-w- c:\users\XX\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2] @="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 131248 ----a-w- c:\users\XX\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3] @="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}" [HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}] 2013-09-10 23:54 131248 ----a-w- c:\users\XX\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "OfficeSyncProcess"="c:\program files\Microsoft Office\Office14\MSOSYNC.EXE" [2013-04-22 720064] "Spotify Web Helper"="c:\users\XX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe" [2013-08-04 1104384] "SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2014-01-06 5625624] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "BCSSync"="c:\program files\Microsoft Office\Office14\BCSSync.exe" [2010-03-13 91520] "AVG_UI"="c:\program files\AVG\AVG2014\avgui.exe" [2013-11-07 4956176] "SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336] . [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2013-05-27 280576] . c:\users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Dropbox.lnk - c:\users\XX\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-1-3 30714328] OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk - c:\program files\Microsoft Office\Office14\ONENOTEM.EXE /tsr [2013-6-25 228552] SparkleShare.lnk - c:\program files\SparkleShare\SparkleShare.exe [2012-12-6 585216] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2013-05-07 115440] . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager] BootExecute REG_MULTI_SZ autocheck autochk *\0\0sdnclean.exe . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE] @="" . [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-] "AlcoholAutomount"="c:\program files\Alcohol Soft\Alcohol 52\axcmd.exe" /automount . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-] "QuickTime Task"="c:\program files\QuickTime\QTTask.exe" -atboottime "IgfxTray"=c:\windows\system32\igfxtray.exe "Persistence"=c:\windows\system32\igfxpers.exe "HotKeysCmds"=c:\windows\system32\hkcmd.exe "TkBellExe"="c:\program files\real\realplayer\Update\realsched.exe" -osboot "PDFPrint"=c:\program files\PDF24\pdf24.exe "APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" "ArcSoft Connection Service"=c:\program files\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe "Corel File Shell Monitor"=c:\program files\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" . R2 05837205;Browser faster;c:\windows\system32\rundll32.exe [2009-07-14 44544] R2 AVGIDSAgent;AVGIDSAgent;c:\program files\AVG\AVG2014\avgidsagent.exe [2013-11-11 3478544] R2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes' Anti-Malware\mbamscheduler.exe [2013-04-04 418376] R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2013-04-04 701512] R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2013-02-28 161384] R3 BTCFilterService;USB Networking Driver Filter Service;c:\windows\system32\DRIVERS\motfilt.sys [2009-01-29 6016] R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2013-11-26 108032] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-04-04 22856] R3 motccgp;Motorola USB Composite Device Driver;c:\windows\system32\DRIVERS\motccgp.sys [2010-12-03 20352] R3 motccgpfl;MotCcgpFlService;c:\windows\system32\DRIVERS\motccgpfl.sys [2009-01-29 8320] R3 Motousbnet;Motorola USB Networking Driver Service;c:\windows\system32\DRIVERS\Motousbnet.sys [2010-04-01 23424] R3 motusbdevice;Motorola USB Dev Driver;c:\windows\system32\DRIVERS\motusbdevice.sys [2010-01-25 9472] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224] R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe [2013-10-30 1343400] S0 AVGIDSHX;AVGIDSHX;c:\windows\system32\DRIVERS\avgidshx.sys [2013-10-24 147768] S0 Avglogx;AVG Logging Driver;c:\windows\system32\DRIVERS\avglogx.sys [2013-10-31 222520] S0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx86.sys [2013-09-09 27448] S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2011-11-27 721904] S1 Avgdiskx;AVG Disk Driver;c:\windows\system32\DRIVERS\avgdiskx.sys [2013-11-05 120600] S1 Avgfwfd;AVG network filter service;c:\windows\system32\DRIVERS\avgfwd6x.sys [2013-09-26 47928] S1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\avgidsdriverx.sys [2013-11-04 209176] S1 AVGIDSShim;AVGIDSShim;c:\windows\system32\DRIVERS\avgidsshimx.sys [2013-09-16 22840] S1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx86.sys [2013-10-31 176952] S1 Avgtdix;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdix.sys [2013-08-01 193848] S1 NEOFLTR_730_23977;Juniper Networks TDI Filter Driver (NEOFLTR_730_23977);c:\windows\system32\Drivers\NEOFLTR_730_23977.SYS [2013-02-20 92264] S1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2011-07-22 12880] S1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2011-07-12 67664] S2 !SASCORE;SAS Core Service;c:\program files\SUPERAntiSpyware\SASCORE.EXE [2013-10-10 120088] S2 avgfws;AVG Firewall;c:\program files\AVG\AVG2014\avgfws.exe [2013-09-24 1358944] S2 avgwd;AVG WatchDog;c:\program files\AVG\AVG2014\avgwdsvc.exe [2013-09-24 348008] S2 MotoHelper;MotoHelper Service;c:\program files\Motorola\MotoHelper\MotoHelperService.exe [2011-01-27 226624] S2 TuneUp.UtilitiesSvc;AVG PC TuneUp Service;c:\program files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe [2013-12-18 1741624] S2 UMVPFSrv;UMVPFSrv;c:\program files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [2012-01-18 450848] S3 netw5v32;Intel(R) Wireless WiFi Link 5000-Serie - Adaptertreiber für Windows Vista 32 Bit;c:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168] S3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360] S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992] S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504] S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys [2013-12-16 12320] . . --- Andere Dienste/Treiber im Speicher --- . *NewlyCreated* - WS2IFSL *Deregistered* - MBAMSwissArmy . [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}] 2014-01-20 18:36 1211672 ----a-w- c:\program files\Google\Chrome\Application\32.0.1700.76\Installer\chrmstp.exe . Inhalt des "geplante Tasks" Ordners . 2013-12-16 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-17 01:09] . 2014-01-11 c:\windows\Tasks\AVG_REG_1213b.job - c:\programdata\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe [2014-01-11 18:06] . 2014-01-11 c:\windows\Tasks\AVG_SYS_TASK_DELETE.job - c:\programdata\AVG 1213b Campaign\AVG-Secure-Search-Update-1213b.exe [2014-01-11 18:06] . 2014-01-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cf16104a353afe.job - c:\program files\Google\Update\GoogleUpdate.exe [2014-01-20 18:33] . 2013-09-29 c:\windows\Tasks\Launch 8613.job - c:\program files\Audible\Bin\Manager.exe [2013-09-29 11:19] . 2013-08-25 c:\windows\Tasks\PCDoctorBackgroundMonitorTask.job - c:\program files\PC-Doctor\uaclauncher.exe [2011-03-31 22:04] . 2014-01-09 c:\windows\Tasks\SidebarExecute.job - c:\program files\Windows Sidebar\sidebar.exe [2011-11-27 12:17] . 2014-01-20 c:\windows\Tasks\SUPERAntiSpyware Scheduled Task da457c5e-ce80-4c51-9dc8-70fbe63dcce0.job - c:\program files\SUPERAntiSpyware\SASTask.exe [2013-11-07 20:08] . 2014-01-20 c:\windows\Tasks\SUPERAntiSpyware Scheduled Task fb3e5a6f-b3a6-4850-b703-966e9e14f035.job - c:\program files\SUPERAntiSpyware\SASTask.exe [2013-11-07 20:08] . 2013-09-01 c:\windows\Tasks\SystemToolsDailyTest.job - c:\program files\PC-Doctor\uaclauncher.exe [2011-03-31 22:04] . 2014-01-12 c:\windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013.job - c:\program files\AVG\AVG PC TuneUp\OneClick.exe [2013-12-18 08:36] . . ------- Zusätzlicher Suchlauf ------- . uStart Page = hxxp://www.google.com/ mStart Page = hxxp://www.google.com IE: An OneNote s&enden - c:\progra~1\MICROS~1\Office14\ONBttnIE.dll/105 IE: Free YouTube Download - c:\program files\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm IE: Free YouTube to MP3 Converter - c:\program files\Common Files\DVDVideoSoft\plugins\freeytmp3downloader.htm IE: Nach Microsoft E&xcel exportieren - c:\progra~1\MICROS~1\Office14\EXCEL.EXE/3000 TCP: DhcpNameServer = 192.168.2.1 FF - ProfilePath - c:\users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\ FF - prefs.js: browser.search.defaulturl - FF - ExtSQL: 2013-12-24 14:32; 0qwtoma@rpekoxp.net; c:\users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\extensions\0qwtoma@rpekoxp.net FF - ExtSQL: 2013-12-24 14:32; amtx484@cp-ooie.com; c:\users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\extensions\amtx484@cp-ooie.com . - - - - Entfernte verwaiste Registrierungseinträge - - - - . AddRemove-3222956914.portal.qtrax.com - c:\program files\Microsoft Silverlight\5.1.20125.0\Silverlight.Configuration.exe . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.0_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.3.1_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.3.1_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.1_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.1_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_41" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_41" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_42" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_42" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2_43" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.4.2_43" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.4.2" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_41" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_41" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_41" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_42" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_42" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_42" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_43" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_43" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_43" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_44" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_44" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_44" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_45" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_45" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_45" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_46" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_46" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_46" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_47" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_47" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_47" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_48" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_48" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_48" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_49" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_49" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_49" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_50" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_50" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_50" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0_51" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.5.0_51" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.5.0_51" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.5.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_41" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_41" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_41" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_42" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_42" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_42" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_43" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_43" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_43" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_44" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_44" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_44" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_45" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_45" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_45" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_46" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_46" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_46" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_47" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_47" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_47" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_48" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_48" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_48" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_49" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_49" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_49" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_50" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_50" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_50" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0_51" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.6.0_51" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.6.0_51" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.6.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_01" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_02" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_03" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_04" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_05" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_06" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_07" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_08" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_09" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_10" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_11" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_12" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_13" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_14" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_15" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_16" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_17" . |
| | #8 |
![]() ![]() | Werbefenster öffnen sich bei Firefox [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_17" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_18" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_19" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_20" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_21" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_22" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_23" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_24" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_25" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_26" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_27" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_28" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_29" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_30" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_31" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_32" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_33" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_34" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_35" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_36" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_37" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_38" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_39" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBB}] @DACL=(02 0000) @="Java Plug-in 1.7.0_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBC}] @DACL=(02 0000) @="Java Plug-in 1.7.0_40" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}] @DACL=(02 0000) @="Java Plug-in 1.7.0" . [HKEY_USERS\S-1-5-21-3209394106-3398393384-4106522146-1000_Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}] @DACL=(02 0000) @="Java Plug-in 1.3.0_02" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32] @="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}] @Denied: (A 2) (Everyone) @="IFlashBroker5" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings] @Denied: (A) (Users) @Denied: (A) (Everyone) @Allowed: (B 1 2 3 4 5) (S-1-5-20) "BlindDial"=dword:00000000 . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . Zeit der Fertigstellung: 2014-01-22 14:45:20 ComboFix-quarantined-files.txt 2014-01-22 13:45 . Vor Suchlauf: 7 Verzeichnis(se), 19.684.020.224 Bytes frei Nach Suchlauf: 12 Verzeichnis(se), 20.344.967.168 Bytes frei . - - End Of File - - DBA053C9071A2C06853BC63ED3C8229D A36C5E4F47E84449FF07ED3517B43A31 [/CODE] FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 22-01-2014 01
Ran by XX (administrator) on XX-PC on 22-01-2014 15:11:48
Running from C:\Users\XX\Desktop
Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
(Lenovo) C:\Windows\System32\ibmpmsvc.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore.exe
(ArcSoft Inc.) C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
() C:\Windows\System32\PSIService.exe
(Rocket Division Software) C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
(AVG) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe
() C:\Program Files\Motorola\MotoHelper\MotoHelperAgent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
(Spotify Ltd) C:\Users\XX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
(Dropbox, Inc.) C:\Users\XX\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE
() C:\Program Files\SparkleShare\SparkleShare.exe
(AVG) C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesApp32.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
() C:\Program Files\SparkleShare\msysgit\bin\ssh-agent.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKCU\...\Run: [OfficeSyncProcess] - C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [720064 2013-04-22] (Microsoft Corporation)
HKCU\...\Run: [Spotify Web Helper] - C:\Users\XX\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1104384 2013-08-04] (Spotify Ltd)
HKCU\...\Run: [SUPERAntiSpyware] - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [5625624 2014-01-06] (SUPERAntiSpyware)
Startup: C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\XX\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SparkleShare.lnk
ShortcutTarget: SparkleShare.lnk -> C:\Program Files\SparkleShare\SparkleShare.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x5F522D0CAD89CD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://sslvpn.landtag-bw.de/dana-cached/sc/JuniperSetupClient.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [115440 2013-05-07] (SuperAdBlocker.com)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF ProfilePath: C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default
FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", "");
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", "");
FF SearchEngineOrder.3: Bing
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.0.198 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.0.198 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files\Lightspark 0.5.3-git\nplightsparkplugin.dll No File
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101753.dll (Amazon.com, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
FF Extension: SimaRtComppare - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\Extensions\0qwtoma@rpekoxp.net [2013-12-24]
FF Extension: wEbbsaaver - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\Extensions\amtx484@cp-ooie.com [2013-12-24]
FF Extension: Recorder Toolbar - C:\Program Files\Mozilla Firefox\extensions\{10743931-94DF-476f-A987-4391233C17A2} [2013-02-27]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-11-28]
FF HKLM\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files\AmiExt\flashEnhancer\ff
FF HKCU\...\Firefox\Extensions: [{33044118-6597-4D2F-ABEA-7974BB185379}] - C:\Users\XX\AppData\Roaming\16001.015
FF HKCU\...\Firefox\Extensions: [{48d99c73-1969-4275-b409-3bffc15bc112}] - C:\Program Files\Re-markit\150.xpi
Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR DefaultSearchProvider: nationzoom
CHR DefaultSearchURL: hxxp://www.google.com
CHR DefaultNewTabURL:
CHR Extension: (Google Docs) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-20]
CHR Extension: (Google Drive) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-20]
CHR Extension: (YouTube) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-20]
CHR Extension: (Google-Suche) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-20]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2013-12-16]
CHR Extension: (Google Wallet) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-17]
CHR Extension: (Google Mail) - C:\Users\XX\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-20]
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-11-28]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
========================== Services (Whitelisted) =================
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [120088 2013-10-10] (SUPERAntiSpyware.com)
S2 05837205; C:\ProgramData\Browser faster\BrowserfasterSvc.dll [180048 2013-12-28] ()
R2 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 avgfws; C:\Program Files\AVG\AVG2014\avgfws.exe [1358944 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3478544 2013-11-11] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MotoHelper; C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe [226624 2011-01-27] ()
R2 ProtexisLicensing; C:\Windows\system32\PSIService.exe [177704 2007-06-05] ()
R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software)
R2 TuneUp.UtilitiesSvc; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe [1741624 2013-12-18] (AVG)
R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)
==================== Drivers (Whitelisted) ====================
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [120600 2013-11-05] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6x.sys [47928 2013-09-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [209176 2013-11-04] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [147768 2013-10-24] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22840 2013-09-17] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [176952 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [222520 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [102712 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27448 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] (AVG Technologies CZ, s.r.o.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R1 NEOFLTR_730_23977; C:\Windows\system32\Drivers\NEOFLTR_730_23977.SYS [92264 2013-02-20] (Juniper Networks)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [721904 2011-11-27] ()
R3 TuneUpUtilitiesDrv; C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys [12320 2013-12-16] (TuneUp Software)
S3 USB28xxBGA; C:\Windows\System32\DRIVERS\emBDA.sys [579712 2009-12-01] (eMPIA Technology, Inc.)
S3 USB28xxOEM; C:\Windows\System32\DRIVERS\emOEM.sys [543744 2009-12-01] (eMPIA Technology, Inc.)
U3 ab0j6xy6; C:\Windows\System32\Drivers\ab0j6xy6.sys [0 ] (Microsoft Corporation)
S3 catchme; \??\C:\Users\XX\AppData\Local\Temp\catchme.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-22 15:11 - 2014-01-22 15:11 - 00000000 ____D C:\Users\XX\Desktop\FRST-OlderVersion
2014-01-22 14:59 - 2014-01-22 14:59 - 00010678 _____ C:\Users\XX\Desktop\CRO.zip
2014-01-22 14:47 - 2014-01-22 14:47 - 00120996 _____ C:\Users\XX\Desktop\Combo.txt
2014-01-22 14:45 - 2014-01-22 14:45 - 00120996 _____ C:\ComboFix.txt
2014-01-22 14:27 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2014-01-22 14:27 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2014-01-22 14:27 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-01-22 14:27 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-01-22 14:27 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-01-22 14:27 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2014-01-22 14:27 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2014-01-22 14:27 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2014-01-22 14:15 - 2014-01-22 14:15 - 00000079 _____ C:\Windows\wininit.ini
2014-01-22 14:13 - 2014-01-22 14:45 - 00000000 ____D C:\Qoobox
2014-01-22 14:13 - 2014-01-22 14:43 - 00000000 ____D C:\Windows\erdnt
2014-01-22 14:10 - 2014-01-22 14:11 - 05173757 ____R (Swearware) C:\Users\XX\Desktop\ComboFix.exe
2014-01-22 14:10 - 2014-01-22 14:10 - 00001909 _____ C:\Users\XX\Desktop\AdwCleaner[S4].txt
2014-01-22 02:27 - 2014-01-22 10:14 - 00029900 _____ C:\Users\XX\Desktop\Addition.txt
2014-01-22 02:26 - 2014-01-22 15:11 - 00015604 _____ C:\Users\XX\Desktop\FRST.txt
2014-01-22 02:25 - 2014-01-22 15:11 - 01221632 _____ (Farbar) C:\Users\XX\Desktop\FRST.exe
2014-01-22 02:25 - 2014-01-22 15:11 - 00000000 ____D C:\FRST
2014-01-21 18:23 - 2013-12-18 09:38 - 00036152 _____ (AVG) C:\Windows\system32\TURegOpt.exe
2014-01-21 18:22 - 2014-01-21 18:22 - 00002175 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk
2014-01-21 18:22 - 2014-01-21 18:22 - 00002151 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-01-21 18:22 - 2013-12-18 09:38 - 00025400 _____ (AVG) C:\Windows\system32\authuitu.dll
2014-01-21 17:57 - 2014-01-21 17:59 - 78353784 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295 (1).exe
2014-01-21 17:57 - 2014-01-21 17:58 - 78353784 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295.exe
2014-01-21 00:13 - 2014-01-21 00:14 - 01236282 _____ C:\Users\XX\Desktop\adwcleaner.exe
2014-01-20 19:49 - 2014-01-20 19:49 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf16104a353afe.job
2014-01-20 19:39 - 2014-01-20 19:39 - 00002197 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-20 19:33 - 2014-01-20 19:33 - 00000504 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task fb3e5a6f-b3a6-4850-b703-966e9e14f035.job
2014-01-20 19:33 - 2014-01-20 19:33 - 00000504 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task da457c5e-ce80-4c51-9dc8-70fbe63dcce0.job
2014-01-20 19:33 - 2014-01-20 19:33 - 00000000 ____D C:\Users\XX\AppData\Roaming\SUPERAntiSpyware.com
2014-01-20 19:32 - 2014-01-20 20:45 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2014-01-20 19:32 - 2014-01-20 19:32 - 00001965 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
2014-01-20 19:32 - 2014-01-20 19:32 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2014-01-20 19:31 - 2014-01-20 19:31 - 29393568 _____ (SUPERAntiSpyware) C:\Users\XX\Downloads\SUPERAntiSpyware_5.7.0.1018.exe
2014-01-15 02:22 - 2014-01-15 02:22 - 00000000 ____D C:\Program Files\Common Files\Java
2014-01-15 02:21 - 2014-01-15 02:20 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-15 02:20 - 2014-01-15 02:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-15 02:20 - 2014-01-15 02:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-15 02:20 - 2014-01-15 02:20 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-01-15 02:19 - 2014-01-15 02:19 - 00000000 ____D C:\Program Files\Java
2014-01-15 01:40 - 2013-11-27 02:14 - 00258560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 01:40 - 2013-11-27 02:13 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 01:40 - 2013-11-27 02:13 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 01:40 - 2013-11-27 02:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 01:40 - 2013-11-27 02:13 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 01:40 - 2013-11-27 02:13 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 01:40 - 2013-11-27 02:13 - 00006016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 01:40 - 2013-11-26 12:11 - 00240576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 01:40 - 2013-11-26 11:10 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 08:54 - 2014-01-14 08:54 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2014-01-14 08:52 - 2014-01-14 08:52 - 06951048 _____ (Microsoft Corporation) C:\Users\XX\Downloads\Silverlight.exe
2014-01-13 21:00 - 2014-01-13 21:00 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-13 21:00 - 2014-01-13 21:00 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2014-01-13 21:00 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-01-13 20:25 - 2014-01-13 20:26 - 00000000 ____D C:\Windows\220FB0354744483A9A0B41DF77061583.TMP
2014-01-13 20:05 - 2014-01-22 14:16 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2014-01-13 20:05 - 2014-01-22 14:15 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2014-01-13 19:53 - 2014-01-13 19:54 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\XX\Downloads\spybot-2.2.25.exe
2014-01-12 13:14 - 2014-01-12 13:14 - 00000220 _____ C:\Windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013.job
2014-01-11 17:13 - 2014-01-11 17:13 - 00000404 _____ C:\Windows\Tasks\AVG_REG_1213b.job
2014-01-11 17:13 - 2014-01-11 17:13 - 00000386 _____ C:\Windows\Tasks\AVG_SYS_TASK_DELETE.job
2014-01-11 17:13 - 2014-01-11 17:13 - 00000000 ____D C:\ProgramData\AVG 1213b Campaign
2014-01-10 18:19 - 2014-01-15 08:09 - 00408696 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-10 15:45 - 2014-01-10 15:45 - 00109280 _____ C:\Users\XX\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-09 22:35 - 2014-01-09 22:35 - 00000000 ____D C:\Users\XX\AppData\Roaming\AVG
2014-01-09 22:27 - 2014-01-09 22:41 - 00000000 ____D C:\ProgramData\AVG
2014-01-09 22:25 - 2014-01-21 18:36 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-01-09 22:22 - 2014-01-09 22:22 - 78353832 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295_24c28.exe
2014-01-09 21:30 - 2014-01-09 21:30 - 00000212 _____ C:\Windows\Tasks\SidebarExecute.job
2014-01-09 21:30 - 2014-01-09 21:30 - 00000000 ____D C:\Users\XX\AppData\Roaming\AVG2014
2014-01-09 21:29 - 2014-01-09 21:29 - 00000951 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2014-01-09 21:29 - 2014-01-09 21:29 - 00000000 ____D C:\Users\XX\AppData\Roaming\TuneUp Software
2014-01-09 21:26 - 2014-01-09 21:30 - 00000000 ____D C:\ProgramData\AVG2014
2014-01-09 21:26 - 2014-01-09 21:26 - 00000000 ____D C:\$AVG
2014-01-09 21:25 - 2014-01-09 22:33 - 00000000 ____D C:\Program Files\AVG
2014-01-09 21:10 - 2014-01-22 15:09 - 00000000 ____D C:\ProgramData\MFAData
2014-01-09 21:10 - 2014-01-09 21:36 - 00000000 ____D C:\Users\XX\AppData\Local\Avg2014
2014-01-09 21:10 - 2014-01-09 21:10 - 00000000 ____D C:\Users\XX\AppData\Local\MFAData
2014-01-09 21:02 - 2014-01-09 21:08 - 137189352 _____ (AVG Technologies) C:\Users\XX\Downloads\avg_free_x86_all_2014_4259a6848.exe
2013-12-30 22:56 - 2013-12-30 22:56 - 00000000 ____D C:\Users\XX\AppData\Roaming\Malwarebytes
2013-12-30 22:56 - 2013-12-30 22:56 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-30 22:55 - 2014-01-13 20:41 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\XX\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-30 21:19 - 2013-12-30 21:19 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-12-29 22:04 - 2013-12-29 22:04 - 00000000 ____D C:\ProgramData\Websteroids
2013-12-29 19:37 - 2014-01-22 14:00 - 00000000 ____D C:\AdwCleaner
2013-12-29 19:36 - 2013-12-29 19:36 - 01233962 _____ C:\Users\XX\Downloads\adwcleaner_3.016.exe
2013-12-29 19:25 - 2013-12-29 19:25 - 00001212 _____ C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Create Amazing Presentations.lnk
2013-12-29 19:22 - 2013-12-31 01:05 - 00000000 ____D C:\Program Files\AmiExt
2013-12-29 19:22 - 2013-12-31 00:36 - 00000000 ____D C:\ProgramData\Updater
2013-12-29 19:19 - 2013-12-29 21:56 - 00000444 __RSH C:\ProgramData\ntuser.pol
2013-12-29 19:18 - 2013-12-29 19:48 - 00000000 ____D C:\Users\XX\AppData\Roaming\Uniblue
2013-12-29 19:18 - 2013-12-29 19:48 - 00000000 ____D C:\Program Files\Uniblue
2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\AppData\Local\cache
2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\.android
2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 _____ C:\Users\XX\daemonprocess.txt
2013-12-28 21:54 - 2014-01-13 21:30 - 00000000 ____D C:\ProgramData\Browser faster
==================== One Month Modified Files and Folders =======
2014-01-22 15:13 - 2014-01-22 02:26 - 00015604 _____ C:\Users\XX\Desktop\FRST.txt
2014-01-22 15:11 - 2014-01-22 15:11 - 00000000 ____D C:\Users\XX\Desktop\FRST-OlderVersion
2014-01-22 15:11 - 2014-01-22 02:25 - 01221632 _____ (Farbar) C:\Users\XX\Desktop\FRST.exe
2014-01-22 15:11 - 2014-01-22 02:25 - 00000000 ____D C:\FRST
2014-01-22 15:10 - 2012-09-22 20:29 - 00000000 ___RD C:\Users\XX\Dropbox
2014-01-22 15:10 - 2012-09-22 20:06 - 00000000 ____D C:\Users\XX\AppData\Roaming\Dropbox
2014-01-22 15:09 - 2014-01-09 21:10 - 00000000 ____D C:\ProgramData\MFAData
2014-01-22 15:09 - 2013-05-15 21:29 - 00000000 ____D C:\Users\XX\AppData\Roaming\sparkleshare
2014-01-22 15:08 - 2012-10-25 21:47 - 00074652 _____ C:\Windows\setupact.log
2014-01-22 15:06 - 2011-11-27 10:12 - 01211374 _____ C:\Windows\WindowsUpdate.log
2014-01-22 15:06 - 2009-07-14 05:34 - 00014960 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-22 15:06 - 2009-07-14 05:34 - 00014960 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-22 14:59 - 2014-01-22 14:59 - 00010678 _____ C:\Users\XX\Desktop\CRO.zip
2014-01-22 14:58 - 2013-01-25 14:02 - 00115508 _____ C:\Windows\PFRO.log
2014-01-22 14:47 - 2014-01-22 14:47 - 00120996 _____ C:\Users\XX\Desktop\Combo.txt
2014-01-22 14:45 - 2014-01-22 14:45 - 00120996 _____ C:\ComboFix.txt
2014-01-22 14:45 - 2014-01-22 14:13 - 00000000 ____D C:\Qoobox
2014-01-22 14:45 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public
2014-01-22 14:43 - 2014-01-22 14:13 - 00000000 ____D C:\Windows\erdnt
2014-01-22 14:41 - 2009-07-14 03:04 - 00000215 _____ C:\Windows\system.ini
2014-01-22 14:16 - 2014-01-13 20:05 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2014-01-22 14:15 - 2014-01-22 14:15 - 00000079 _____ C:\Windows\wininit.ini
2014-01-22 14:15 - 2014-01-13 20:05 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2014-01-22 14:11 - 2014-01-22 14:10 - 05173757 ____R (Swearware) C:\Users\XX\Desktop\ComboFix.exe
2014-01-22 14:10 - 2014-01-22 14:10 - 00001909 _____ C:\Users\XX\Desktop\AdwCleaner[S4].txt
2014-01-22 14:00 - 2013-12-29 19:37 - 00000000 ____D C:\AdwCleaner
2014-01-22 13:54 - 2013-01-23 19:07 - 00000000 ____D C:\ProgramData\InstallMate
2014-01-22 10:14 - 2014-01-22 02:27 - 00029900 _____ C:\Users\XX\Desktop\Addition.txt
2014-01-21 18:36 - 2014-01-09 22:25 - 00000000 __SHD C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-01-21 18:22 - 2014-01-21 18:22 - 00002175 _____ C:\Users\Public\Desktop\AVG 1-Klick-Wartung.lnk
2014-01-21 18:22 - 2014-01-21 18:22 - 00002151 _____ C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-01-21 17:59 - 2014-01-21 17:57 - 78353784 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295 (1).exe
2014-01-21 17:58 - 2014-01-21 17:57 - 78353784 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295.exe
2014-01-21 00:14 - 2014-01-21 00:13 - 01236282 _____ C:\Users\XX\Desktop\adwcleaner.exe
2014-01-20 20:45 - 2014-01-20 19:32 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2014-01-20 19:49 - 2014-01-20 19:49 - 00001094 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf16104a353afe.job
2014-01-20 19:39 - 2014-01-20 19:39 - 00002197 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-20 19:39 - 2013-12-16 02:09 - 00000000 ____D C:\Program Files\Google
2014-01-20 19:33 - 2014-01-20 19:33 - 00000504 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task fb3e5a6f-b3a6-4850-b703-966e9e14f035.job
2014-01-20 19:33 - 2014-01-20 19:33 - 00000504 _____ C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task da457c5e-ce80-4c51-9dc8-70fbe63dcce0.job
2014-01-20 19:33 - 2014-01-20 19:33 - 00000000 ____D C:\Users\XX\AppData\Roaming\SUPERAntiSpyware.com
2014-01-20 19:32 - 2014-01-20 19:32 - 00001965 _____ C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
2014-01-20 19:32 - 2014-01-20 19:32 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2014-01-20 19:31 - 2014-01-20 19:31 - 29393568 _____ (SUPERAntiSpyware) C:\Users\XX\Downloads\SUPERAntiSpyware_5.7.0.1018.exe
2014-01-20 17:25 - 2011-11-27 10:53 - 00000000 ____D C:\Users\XX\AppData\Local\Microsoft Help
2014-01-15 08:09 - 2014-01-10 18:19 - 00408696 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-15 03:11 - 2013-07-30 06:47 - 00000000 ____D C:\Windows\system32\MRT
2014-01-15 03:02 - 2011-11-27 10:57 - 83425928 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 02:22 - 2014-01-15 02:22 - 00000000 ____D C:\Program Files\Common Files\Java
2014-01-15 02:22 - 2013-10-15 08:29 - 00000000 ____D C:\ProgramData\Oracle
2014-01-15 02:20 - 2014-01-15 02:21 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-15 02:20 - 2014-01-15 02:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-15 02:20 - 2014-01-15 02:20 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-15 02:20 - 2014-01-15 02:20 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-01-15 02:20 - 2012-09-26 11:59 - 00868264 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2014-01-15 02:20 - 2012-09-26 11:59 - 00790440 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2014-01-15 02:19 - 2014-01-15 02:19 - 00000000 ____D C:\Program Files\Java
2014-01-14 08:54 - 2014-01-14 08:54 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2014-01-14 08:52 - 2014-01-14 08:52 - 06951048 _____ (Microsoft Corporation) C:\Users\XX\Downloads\Silverlight.exe
2014-01-13 21:55 - 2011-11-27 10:19 - 00000000 ____D C:\Users\XX
2014-01-13 21:43 - 2011-11-27 19:59 - 00000000 ____D C:\Users\XX\AppData\Local\Corel
2014-01-13 21:43 - 2011-11-27 19:57 - 00000952 ___SH C:\Windows\system32\KGyGaAvL.sys
2014-01-13 21:30 - 2013-12-28 21:54 - 00000000 ____D C:\ProgramData\Browser faster
2014-01-13 21:30 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\PLA
2014-01-13 21:00 - 2014-01-13 21:00 - 00001071 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-01-13 21:00 - 2014-01-13 21:00 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2014-01-13 20:41 - 2013-12-30 22:55 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\XX\Downloads\mbam-setup-1.75.0.1300.exe
2014-01-13 20:26 - 2014-01-13 20:25 - 00000000 ____D C:\Windows\220FB0354744483A9A0B41DF77061583.TMP
2014-01-13 19:54 - 2014-01-13 19:53 - 40658208 _____ (Safer-Networking Ltd. ) C:\Users\XX\Downloads\spybot-2.2.25.exe
2014-01-12 14:27 - 2011-11-27 10:23 - 01498742 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-12 13:14 - 2014-01-12 13:14 - 00000220 _____ C:\Windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013.job
2014-01-12 10:22 - 2013-08-05 11:58 - 00000000 ____D C:\Users\XX\AppData\Local\Audible
2014-01-11 18:13 - 2011-11-27 10:19 - 00000000 ____D C:\Users\XX\AppData\Local\VirtualStore
2014-01-11 17:13 - 2014-01-11 17:13 - 00000404 _____ C:\Windows\Tasks\AVG_REG_1213b.job
2014-01-11 17:13 - 2014-01-11 17:13 - 00000386 _____ C:\Windows\Tasks\AVG_SYS_TASK_DELETE.job
2014-01-11 17:13 - 2014-01-11 17:13 - 00000000 ____D C:\ProgramData\AVG 1213b Campaign
2014-01-10 18:19 - 2013-05-07 08:04 - 00000000 ____D C:\Users\XX\.thumbnails
2014-01-10 16:04 - 2012-09-22 20:29 - 00000970 _____ C:\Users\XX\Desktop\Dropbox.lnk
2014-01-10 16:04 - 2012-09-22 20:28 - 00000000 ____D C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-10 15:45 - 2014-01-10 15:45 - 00109280 _____ C:\Users\XX\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-09 22:41 - 2014-01-09 22:27 - 00000000 ____D C:\ProgramData\AVG
2014-01-09 22:35 - 2014-01-09 22:35 - 00000000 ____D C:\Users\XX\AppData\Roaming\AVG
2014-01-09 22:33 - 2014-01-09 21:25 - 00000000 ____D C:\Program Files\AVG
2014-01-09 22:22 - 2014-01-09 22:22 - 78353832 _____ (AVG) C:\Users\XX\Downloads\avg_tuh_stf_all_2014_295_24c28.exe
2014-01-09 21:36 - 2014-01-09 21:10 - 00000000 ____D C:\Users\XX\AppData\Local\Avg2014
2014-01-09 21:30 - 2014-01-09 21:30 - 00000212 _____ C:\Windows\Tasks\SidebarExecute.job
2014-01-09 21:30 - 2014-01-09 21:30 - 00000000 ____D C:\Users\XX\AppData\Roaming\AVG2014
2014-01-09 21:30 - 2014-01-09 21:26 - 00000000 ____D C:\ProgramData\AVG2014
2014-01-09 21:29 - 2014-01-09 21:29 - 00000951 _____ C:\Users\Public\Desktop\AVG 2014.lnk
2014-01-09 21:29 - 2014-01-09 21:29 - 00000000 ____D C:\Users\XX\AppData\Roaming\TuneUp Software
2014-01-09 21:26 - 2014-01-09 21:26 - 00000000 ____D C:\$AVG
2014-01-09 21:10 - 2014-01-09 21:10 - 00000000 ____D C:\Users\XX\AppData\Local\MFAData
2014-01-09 21:08 - 2014-01-09 21:02 - 137189352 _____ (AVG Technologies) C:\Users\XX\Downloads\avg_free_x86_all_2014_4259a6848.exe
2013-12-31 01:08 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\addins
2013-12-31 01:05 - 2013-12-29 19:22 - 00000000 ____D C:\Program Files\AmiExt
2013-12-31 00:36 - 2013-12-29 19:22 - 00000000 ____D C:\ProgramData\Updater
2013-12-31 00:36 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Web
2013-12-31 00:36 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Resources
2013-12-31 00:33 - 2013-12-22 17:53 - 00000000 ____D C:\ProgramData\wEbbsaaver
2013-12-31 00:33 - 2013-12-22 17:08 - 00000000 ____D C:\ProgramData\SimaRtComppare
2013-12-30 22:56 - 2013-12-30 22:56 - 00000000 ____D C:\Users\XX\AppData\Roaming\Malwarebytes
2013-12-30 22:56 - 2013-12-30 22:56 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-30 22:05 - 2011-11-27 10:53 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-30 21:19 - 2013-12-30 21:19 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2013-12-30 01:34 - 2011-11-27 10:20 - 00001146 _____ C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-29 22:04 - 2013-12-29 22:04 - 00000000 ____D C:\ProgramData\Websteroids
2013-12-29 21:56 - 2013-12-29 19:19 - 00000444 __RSH C:\ProgramData\ntuser.pol
2013-12-29 19:48 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\AppData\Roaming\Uniblue
2013-12-29 19:48 - 2013-12-29 19:18 - 00000000 ____D C:\Program Files\Uniblue
2013-12-29 19:36 - 2013-12-29 19:36 - 01233962 _____ C:\Users\XX\Downloads\adwcleaner_3.016.exe
2013-12-29 19:25 - 2013-12-29 19:25 - 00001212 _____ C:\Users\XX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Create Amazing Presentations.lnk
2013-12-29 19:19 - 2009-07-14 03:37 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\AppData\Local\cache
2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\.android
2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 _____ C:\Users\XX\daemonprocess.txt
Files to move or delete:
====================
C:\Users\XX\AppData\Roaming\skype.ini
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-09-01 14:11
==================== End Of Log ============================
--- --- --- |
| | #9 |
| /// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() | Werbefenster öffnen sich bei Firefox Ok, sind die Werbefenster nach folgenden Schritten verschwunden? Schritt 1 Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Ersetze in deinem Fixskript unbedingt alle XX wieder durch den richtigen Benutzernamen, sonst wird der Fix nicht funktionieren!! Code:
ATTFilter FF Extension: SimaRtComppare - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\Extensions\0qwtoma@rpekoxp.net [2013-12-24]
FF Extension: wEbbsaaver - C:\Users\XX\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\Extensions\amtx484@cp-ooie.com [2013-12-24]
FF HKCU\...\Firefox\Extensions: [{33044118-6597-4D2F-ABEA-7974BB185379}] - C:\Users\XX\AppData\Roaming\16001.015
FF HKCU\...\Firefox\Extensions: [{48d99c73-1969-4275-b409-3bffc15bc112}] - C:\Program Files\Re-markit\150.xpi
S2 05837205; C:\ProgramData\Browser faster\BrowserfasterSvc.dll [180048 2013-12-28] ()
C:\ProgramData\Browser faster
2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\AppData\Local\cache
2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\XX\.android
2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 _____ C:\Users\XX\daemonprocess.txt
C:\Users\XX\AppData\Roaming\skype.ini
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Schritt 2 ESET Online Scanner
__________________ cheers, Leo |
| | #10 |
![]() ![]() | Werbefenster öffnen sich bei FirefoxCode:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 22-01-2014 01
Ran by xx at 2014-01-22 17:56:55 Run:1
Running from C:\Users\xx\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
FF Extension: SimaRtComppare - C:\Users\xx\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\Extensions\0qwtoma@rpekoxp.net [2013-12-24]
FF Extension: wEbbsaaver - C:\Users\xx\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\Extensions\amtx484@cp-ooie.com [2013-12-24]
FF HKCU\...\Firefox\Extensions: [{33044118-6597-4D2F-ABEA-7974BB185379}] - C:\Users\xx\AppData\Roaming\16001.015
FF HKCU\...\Firefox\Extensions: [{48d99c73-1969-4275-b409-3bffc15bc112}] - C:\Program Files\Re-markit\150.xpi
S2 05837205; C:\ProgramData\Browser faster\BrowserfasterSvc.dll [180048 2013-12-28] ()
C:\ProgramData\Browser faster
2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\xx\AppData\Local\cache
2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 ____D C:\Users\xx\.android
2013-12-29 19:18 - 2013-12-29 19:18 - 00000000 _____ C:\Users\xx\daemonprocess.txt
C:\Users\xx\AppData\Roaming\skype.ini
*****************
C:\Users\xx\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\Extensions\0qwtoma@rpekoxp.net => Moved successfully.
C:\Users\xx\AppData\Roaming\Mozilla\Firefox\Profiles\rwyk3m6g.default\Extensions\amtx484@cp-ooie.com => Moved successfully.
HKCU\Software\Mozilla\Firefox\Extensions\\{33044118-6597-4D2F-ABEA-7974BB185379} => Value deleted successfully.
HKCU\Software\Mozilla\Firefox\Extensions\\{48d99c73-1969-4275-b409-3bffc15bc112} => Value deleted successfully.
05837205 => Service deleted successfully.
C:\ProgramData\Browser faster => Moved successfully.
C:\Users\xx\AppData\Local\cache => Moved successfully.
C:\Users\xx\.android => Moved successfully.
C:\Users\xx\daemonprocess.txt => Moved successfully.
C:\Users\xx\AppData\Roaming\skype.ini => Moved successfully.
==== End of Fixlog ====
Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=fc65ca804fb7c34086169dac1ee2d10e
# engine=16754
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-01-22 06:39:09
# local_time=2014-01-22 07:39:09 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=5893 16776574 100 94 23857 142047140 0 0
# scanned=162909
# found=8
# cleaned=0
# scan_time=5395
sh=AFA720CBD7D5305BFF5638D611AA39EEA12AAF57 ft=0 fh=0000000000000000 vn="Win32/Adware.AddLyrics.L application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\LyricsPal\130.crx.vir"
sh=F25A761B18D85D7C05645EC790E2CADB18BFF8DD ft=0 fh=0000000000000000 vn="Win32/Adware.AddLyrics.L application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\LyricsPal\130.xpi.vir"
sh=C5828B700B9EF61FA1534D5D18482BF12F591CBF ft=1 fh=0404da55e35b3671 vn="a variant of Win32/AdWare.SpeedingUpMyPC.D application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files\optimizer pro\OptProLauncher.exe.vir"
sh=D30D21D72B50640D1C16A54D88010260DE4F65DF ft=0 fh=0000000000000000 vn="Win32/Adware.AddLyrics.L application" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\xx\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnbbffeddnekkhjmokkhdebbfbibbflc\1.130_0\cs.js.vir"
sh=47F1E763FA3D370BDB499DD3BE20E7F7105DF89E ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\FRST\Quarantine\0qwtoma@rpekoxp.net\content\bg.js"
sh=7D159BE9E5DF85B8E0CA033D0648AEE5B4D6DA80 ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\FRST\Quarantine\amtx484@cp-ooie.com\content\bg.js"
sh=D8FE4C2488525A9B863AA07545D9954218A5DCAB ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\ProgramData\dlblfogkeompmfdmmhfigfcbakbaklkm\bqRFqtJUyVxE.js"
sh=D8FE4C2488525A9B863AA07545D9954218A5DCAB ft=0 fh=0000000000000000 vn="Win32/Adware.MultiPlug.H application" ac=I fn="C:\Users\All Users\dlblfogkeompmfdmmhfigfcbakbaklkm\bqRFqtJUyVxE.js"
|
| | #11 |
| /// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() | Werbefenster öffnen sich bei Firefox Und wie siehts jetzt aus? Erscheinen noch Werbefenster oder sonst was Störendes?
__________________ cheers, Leo |
| | #12 |
![]() ![]() | Werbefenster öffnen sich bei Firefox Nein, alles super. Er läuft auch endlich wieder richtig und bleibt nicht ständig hängen. Ist er weg :-)? |
| | #13 |
| /// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() | Werbefenster öffnen sich bei Firefox Ja sieht gut aus. Schritt 1 Drücke die + R Taste und schreibe "notepad" in das Ausführen Fenster.Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument: Code:
ATTFilter ¨C:\ProgramData\dlblfogkeompmfdmmhfigfcbakbaklkm
Schritt 2 Lade dir
Schritt 3 Dein Java ist nicht mehr aktuell. Ältere Versionen enthalten Sicherheitslücken, die von Malware zur Infizierung per Drive-by Download missbraucht werden können. Die aktuelle Version ist Java 7 Update 51.
Überleg dir also, ob du eine Java-Installation wirklich brauchst. Falls du Java weiterhin verwenden möchtest, dann:
Schritt 4 Die Version deines Adobe PDF Readers ist veraltet, wir müssen ihn updaten:
Schritt 5 Dein Flashplayer ist veraltet. Installiere folgendermassen die aktuelle Version:
Cleanup Zum Schluss werden wir jetzt noch unsere Tools (inklusive der Quarantäne-Ordner) wegräumen, die verseuchten Systemwiederherstellungspunkte löschen und alle Einstellungen wieder herrichten. Auch diese Schritte sind noch wichtig und sollten in der angegebenen Reihenfolge ausgeführt werden.
>> OK << Wir sind durch, deine Logs sehen für mich im Moment sauber aus. ![]() Ich habe dir nachfolgend ein paar Hinweise und Tipps zusammengestellt, die dazu beitragen sollen, dass du in Zukunft unsere Hilfe nicht mehr brauchen wirst. Bitte gib mir danach noch eine kurze Rückmeldung, wenn auch von deiner Seite keine Probleme oder Fragen mehr offen sind, damit ich dieses Thema als erledigt betrachten kann. Epilog: Tipps, Dos & Don'ts Aktualität von System und SoftwareDas Betriebsystem Windows muss zwingend immer auf dem neusten Stand sein. Stelle sicher, dass die automatischen Updates aktiviert sind:
Auch die installierte Software sollte immer in der aktuellsten Version vorliegen. Speziell gilt das für den Browser, Java, Flash-Player und PDF-Reader, denn bekannte Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim blossen Besuch einer präparierten Website per Drive-by Download Malware zu installieren. Das kann sogar auf normalerweise legitimen Websites geschehen, wenn es einem Angreifer gelungen ist, seinen Code in die Seite einzuschleusen, und ist deshalb relativ unberechenbar.
Sicherheits-SoftwareEine Bemerkung vorneweg: Jede Softwarelösung hat ihre Schwächen. Die gesamte Verantwortung für die Sicherheit auf Software zu übertragen und einen Rundum-Schutz zu erwarten, wäre eine gefährliche Illusion. Bei unbedachtem oder bewusst risikoreichem Verhalten wird auch das beste Programm früher oder später seinen Dienst versagen (z.B. ein Virenscanner, der eine verseuchte Datei nicht erkennt). Trotzdem ist entsprechende Software natürlich wichtig und hilft dir in Kombination mit einem gut gewarteten (up-to-date) System und durchdachtem Verhalten, deinen Rechner sauber zu halten.
Es liegt in der Natur der Sache, dass die am weitesten verbreitete Anwendungs-Software auch am häufigsten von Malware-Autoren attackiert wird. Es kann daher bereits einen kleinen Sicherheitsgewinn darstellen, wenn man alternative Software (z.B. einen alternativen PDF Reader) benutzt. Anstelle des Internet Explorers kann man beispielsweise den Mozilla Firefox einsetzen, für welchen es zwei nützliche Addons zur Empfehlung gibt:
(Un-)Sicheres Verhalten im InternetNebst unbemerkten Drive-by Installationen wird Malware aber auch oft mehr oder weniger aktiv vom Benutzer selbst installiert. Der Besuch zwielichtiger Websites kann bereits Risiken bergen. Und Downloads aus dubiosen Quellen sind immer russisches Roulette. Auch wenn der Virenscanner im Moment darin keine Bedrohung erkennt, muss das nichts bedeuten.
Oft wird auch versucht, den Benutzer mit mehr oder weniger trickreichen Methoden dazu zu bringen, eine für ihn verhängnisvolle Handlung selbst auszuführen (Überbegriff Social Engineering).
Nervige Adware (Werbung) und unnötige Toolbars werden auch meist durch den Benutzer selbst mitinstalliert.
Allgemeine HinweiseAbschliessend noch ein paar grundsätzliche Bemerkungen:
Wenn du möchtest, kannst du das Forum mit einer kleinen Spende unterstützen. Es bleibt mir nur noch, dir unbeschwertes und sicheres Surfen zu wünschen und dass wir uns hier so bald nicht wiedersehen.
__________________ cheers, Leo |
| | #14 |
![]() ![]() | Werbefenster öffnen sich bei Firefox Hallo Leo, vielen lieben Dank für alles. Es läuft jetzt alles wieder rund und ich bin glücklich. Eine Frage noch: Was meinst Du mit MBAM? Liebe Grüße Josi |
| | #15 |
| /// TB-Ausbilder ![]() ![]() ![]() ![]() ![]() ![]() | Werbefenster öffnen sich bei Firefox MBAM = Malwarebytes_Anti-Malware. Sorry, mein Fehler, das haben wir hier ja gar nicht eingesetzt.. ![]() Freut mich, dass wir helfen konnten. ![]() Falls du dem Forum noch Verbesserungsvorschläge, Kritik oder ein Lob mitgeben möchtest, kannst du das hier tun. Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Ich bekomme somit keine Benachrichtigung mehr über neue Antworten. Solltest du das Thema erneut brauchen, schicke mir bitte eine PM und wir machen hier weiter. Jeder andere bitte diese Anleitung lesen und einen eigenen Thread erstellen.
__________________ cheers, Leo |
![]() |
| Themen zu Werbefenster öffnen sich bei Firefox |
| andere, deinstalliert, diverse, fehler, firefox, installiert, java, laufend, logfiles, media player, nationzoom, nationzoom entfernen, player, scan, scanner, spyhunter, spyhunter entfernen, verloren, werbefenster, win32/adware.addlyrics.l, win32/adware.multiplug.h, win32/adware.speedingupmypc.d, ähnliches, öffnen |