Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: 100% Pysikalischer Speicher durch svchost.exe

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 11.02.2014, 19:48   #1
MarcoW
 
100% Pysikalischer Speicher durch svchost.exe - Standard

100% Pysikalischer Speicher durch svchost.exe



Hallo liebes Forum,

seit ungefähr zwei Wochen springt so einmal täglich die Auslastung des Physikalischen Speichers auf 100% und schwankt dann zwichen 100% und 90%.
Das hat zur Folge, dass man nicht mehr richtig mit dem Computer arbeiten kann (sogar die Maus hängt). Ich habe mich dann ein bisschen schlau gemacht und gelesen, dass es an dem Prozess "svchost.exe (secsvcs)" liegen könnt. Als das Problem erneut auftrat habe ich den Ressourcenmonitor geöffnet, den Prozess gesucht, gefunden und beendet. Und tatsächlich: Die Auslastung ging schlagartig von 100% auf 25% zurück und pendelte sich nach einiger Zeit wieder bei 50% (normal) ein.
Der Prozess schaltet sich jedoch irgendwann wieder ein, wodurch er nach einem Tag wieder zur Maximallast führt.
Ich weiss nicht, was ich jetzt machen soll. Ist das ein Virus oder nur ein Software-/Hardwareproblem?

Danke schon mal im Vorraus

MFG
Marco

Alt 12.02.2014, 06:28   #2
schrauber
/// the machine
/// TB-Ausbilder
 

100% Pysikalischer Speicher durch svchost.exe - Standard

100% Pysikalischer Speicher durch svchost.exe



hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________

Alt 12.02.2014, 13:40   #3
MarcoW
 
100% Pysikalischer Speicher durch svchost.exe - Standard

100% Pysikalischer Speicher durch svchost.exe



Ok - hier der Inhalt der FRST.txt


FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-02-2014 01
Ran by Marco (administrator) on ACER-ASPIRE-574 on 12-02-2014 14:32:07
Running from C:\Users\Marco\Favorites\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\Megatech\MProtect\MPServ.EXE
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Iminent) C:\Program Files (x86)\Common Files\Umbrella\Umbrella.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Somoto) C:\Users\Marco\AppData\Local\FilesFrog Update Checker\update_checker.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Wajam) C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV3.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
() C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Google Inc.) C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\MusicManager.exe
(Pegtop Software) C:\Program Files (x86)\Pegtop\PStart\PStart.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Apple Inc.) C:\Program Files (x86)\QuickTime\QTTask.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
() C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Microsoft Corporation) C:\Windows\system32\taskmgr.exe
(Microsoft Corporation) C:\Windows\System32\perfmon.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Stardock Corporation) C:\program files (x86)\stardock\fences\Fences.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552 2010-05-27] (Egis Technology Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10920552 2010-06-22] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1890088 2009-12-10] (Synaptics Incorporated)
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [861216 2010-06-11] (Acer Incorporated)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2782096 2010-07-26] (CANON INC.)
HKLM\...\Run: [LogMeIn GUI] - "C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe"
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - C:\Windows\KHALMNPR.EXE [130576 2009-06-17] (Logitech, Inc.)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\btvstack.exe [1023104 2012-10-15] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\athbttray.exe [801920 2012-10-15] (Atheros Commnucations)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-04-13] (Intel Corporation)
HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [337264 2010-05-27] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-03-11] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-03-11] (Egis Technology Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-28] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [265984 2010-06-28] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [975952 2010-08-10] (Dritek System Inc.)
HKLM-x32\...\Run: [facemoods] - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodssrv.exe [329432 2011-04-14] (facemoods.com)
HKLM-x32\...\Run: [ArcSoft Connection Service] - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM-x32\...\Run: [TaskTray] - [X]
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Aimersoft Helper Compact.exe] - C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe
HKLM-x32\...\Run: [BrowserPlugInHelper] - C:\Program Files (x86)\Aimersoft\Video Converter Ultimate\BrowserPlugInHelper.exe
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3478392 2013-12-21] (Adobe Systems Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-07-22] (Geek Software GmbH)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-01-31] (AVAST Software)
HKLM-x32\...\Run: [Iminent] - C:\Program Files (x86)\Iminent\Iminent.exe /warmup "F77F87E5-A6BD-4922-A530-EDF63D7E9F8C"
HKLM-x32\...\Run: [IminentMessenger] - C:\Program Files (x86)\Iminent\Iminent.Messengers.exe
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-05-15] (Microsoft Corporation)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [msnmsgr] - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272624 2013-02-05] (Microsoft Corporation)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [Gadwin PrintScreen] - C:\Program Files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [phonostarTimer] - C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe [40960 2011-06-20] ()
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [ICQ] - C:\Users\Marco\AppData\Roaming\ICQM\icq.exe [33664344 2014-01-08] (ICQ)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [Speech Recognition] - C:\Windows\Speech\Common\sapisvr.exe [44544 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [MobileDocuments] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [DS3 Tool] - C:\Program Files\MotioninJoy\ds3\DS3_Tool.exe [92672 2010-10-02] (www.motioninjoy.com)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [StoppUhr] - [X]
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [F8D9AE2CB9E5983DE40F824224AE867E4C19679F._service_run] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [866584 2014-01-23] (Google Inc.)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [Google Update] - C:\Users\Marco\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-08-22] (Google Inc.)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [MusicManager] - C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [7380992 2013-11-12] (Google Inc.)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [Optimizer Pro] - C:\Program Files (x86)\Optimizer Pro\OptProLauncher.exe [134648 2013-10-24] ()
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [LiveSupport] - C:\Program Files (x86)\LiveSupport\LiveSupport.exe [658944 2013-11-07] (PC Utilities Software Limited)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [PegtopPStart] - C:\Program Files (x86)\Pegtop\PStart\PStart.exe [786952 2013-12-14] (Pegtop Software)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\MountPoints2: {8a6aa81f-52c4-11e0-b592-1c7508203466} - F:\USBAutoRun.exe
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\MountPoints2: {bdf233cf-224c-11e0-8c81-1c7508203466} - E:\USBAutoRun.exe
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\MountPoints2: {cb96a5f7-77b0-11e3-931e-1c7508203466} - E:\LGAutoRun.exe
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\MountPoints2: {d17a50dd-4a4f-11e1-8ca1-1c7508203466} - E:\Setup.exe
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\MountPoints2: {f93f8f3e-9f75-11e2-997f-1c7508203466} - F:\pushinst.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation)
AppInit_DLLs: C:\PROGRA~2\OPTIMI~1\OPTPRO~2.DLL => C:\Program Files (x86)\Optimizer Pro\OptProCrash_x64.dll [4117320 2014-01-03] ()
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [202600 2012-10-08] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\progra~2\optimi~1\optpro~1.dll => C:\Program Files (x86)\Optimizer Pro\OptProCrash.dll [4062536 2013-10-29] ()
Startup: C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Marco\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Socialbox.lnk
ShortcutTarget: Socialbox.lnk -> C:\Program Files (x86)\Socialbox\Socialbox.exe (No File)
Startup: C:\Users\Schule\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&CUI=UN94176709418576159&ctid=CT3284351
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKLM-x32 - (No Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - No File
URLSearchHook: HKLM-x32 - IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files (x86)\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.)
URLSearchHook: HKLM-x32 - NCH DE Toolbar - {b106b661-3e1b-4015-af5c-195e909f35c6} - C:\Program Files (x86)\NCH_DE\tbNCH_.dll (Conduit Ltd.)
URLSearchHook: HKCU - IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files (x86)\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.)
URLSearchHook: HKCU - NCH DE Toolbar - {b106b661-3e1b-4015-af5c-195e909f35c6} - C:\Program Files (x86)\NCH_DE\tbNCH_.dll (Conduit Ltd.)
URLSearchHook: HKCU - (No Name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No File
SearchScopes: HKCU - DefaultScope {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredimail.com/?search={searchTerms}&loc=search_box&a=1eynMifAVwV
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKCU - {0D7562AE-8EF6-416d-A838-AB665251703A} URL = hxxp://start.facemoods.com/?a=gppc&s={searchTerms}&f=4
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = 
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://isearch.avg.com/search?cid={D2CDB6AC-F36D-428F-A8F4-44118C4BB442}&mid=&lang=&ds=&pr=&d=&v=&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {CFF4DB9B-135F-47c0-9269-B4C6572FD61A} URL = hxxp://mystart.incredimail.com/?search={searchTerms}&loc=search_box&a=1eynMifAVwV
BHO: EXEcheckker - {1F4F33F5-C394-63B9-6E09-59C72C1BBD82} - C:\ProgramData\EXEcheckker\wSjqqm.x64.dll ()
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: shoppnnDroop - {9E180093-CF8E-58CF-D3C9-396A9DEB930E} - C:\ProgramData\shoppnnDroop\rrVS8cpa8.x64.dll ()
BHO: IMinent WebBooster (BHO) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files (x86)\Iminent\Minibar.InternetExplorer.BHOx64.dll (SIEN)
BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: ApPtoU - {EB54F8FF-CEF4-7E60-4CB8-91E2782EECB9} - C:\ProgramData\ApPtoU\LhPSOD.x64.dll ()
BHO: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE_64.dll No File
BHO: avast! Ad Blocker - {FFCB3198-32F3-4E8B-9539-4324694ED663} - C:\Program Files (x86)\AVAST Software\avast! Ad Blocker IE\Adblocker64.dll (AVAST Software)
BHO-x32: AC-Pro - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files (x86)\AutocompletePro\AutocompletePro.dll (SimplyGen)
BHO-x32: EXEcheckker - {1F4F33F5-C394-63B9-6E09-59C72C1BBD82} - C:\ProgramData\EXEcheckker\wSjqqm.dll ()
BHO-x32: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
BHO-x32: CescrtHlpr Object - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.7\bh\facemoods.dll (facemoods.com BHO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: No Name - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} -  No File
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: shoppnnDroop - {9E180093-CF8E-58CF-D3C9-396A9DEB930E} - C:\ProgramData\shoppnnDroop\rrVS8cpa8.dll ()
BHO-x32: IMinent WebBooster (BHO) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files (x86)\Iminent\Minibar.InternetExplorer.BHOx86.dll (SIEN)
BHO-x32: Wajam - {A7A6995D-6EE1-4FD1-A258-49395D5BF99C} - C:\Program Files (x86)\Wajam\IE\priam_bho.dll (Wajam)
BHO-x32: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: NCH DE Toolbar - {b106b661-3e1b-4015-af5c-195e909f35c6} - C:\Program Files (x86)\NCH_DE\tbNCH_.dll (Conduit Ltd.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Nero Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask.com)
BHO-x32: IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files (x86)\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: ApPtoU - {EB54F8FF-CEF4-7E60-4CB8-91E2782EECB9} - C:\ProgramData\ApPtoU\LhPSOD.dll ()
BHO-x32: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: avast! Ad Blocker - {FFCB3198-32F3-4E8B-9539-4324694ED663} - C:\Program Files (x86)\AVAST Software\avast! Ad Blocker IE\Adblocker32.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - IncrediMail MediaBar 2 Toolbar - {d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0} - C:\Program Files (x86)\IncrediMail_MediaBar_2\tbIncr.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - NCH DE Toolbar - {b106b661-3e1b-4015-af5c-195e909f35c6} - C:\Program Files (x86)\NCH_DE\tbNCH_.dll (Conduit Ltd.)
Toolbar: HKLM-x32 - facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodsTlbr.dll (facemoods.com)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Nero Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask.com)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} -  No File
Toolbar: HKCU - No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} -  No File
Toolbar: HKCU - No Name - {B106B661-3E1B-4015-AF5C-195E909F35C6} -  No File
Toolbar: HKCU - No Name - {EEE6C35B-6118-11DC-9C72-001320C79847} -  No File
Toolbar: HKCU - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} -  No File
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: 127.0.0.1	ifw.local
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837
FF Homepage: hxxp://intragart.selfhost.eu/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Marco\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Marco\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: EXEcheckker - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\0p5bovp@bobhr-.com [2014-01-31]
FF Extension: ApPtoU - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\74oai@uo-qik.edu [2014-01-29]
FF Extension: shoppnnDroop - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\wliii_oya@aftl-kheuoa.com [2014-01-29]
FF Extension: DownloadHelper - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-01-25]
FF Extension: Etao QR Code - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\jid0-0c0bUXarADMTgT3G2iGveQ7Bshc@jetpack.xpi [2014-01-23]
FF Extension: Media Stealer - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\stealer@physacco.com.xpi [2014-01-25]
FF Extension: QR  Code  - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\{6a910736-6fab-4480-841a-36325cce134f}.xpi [2014-01-23]
FF Extension: Adblock Plus - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-23]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-02-06]
FF Extension: avast! Ad Blocker - C:\Program Files (x86)\Mozilla Firefox\extensions\adblocker@avast.com.xpi [2014-02-06]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-07-21]
FF HKLM-x32\...\Firefox\Extensions: [gamescenter@gamescenter.com] - C:\Program Files (x86)\GamesCenter\GamesCenter.xpi
FF Extension: Games Center - C:\Program Files (x86)\GamesCenter\GamesCenter.xpi [2013-02-09]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2013-03-15]
FF HKLM-x32\...\Firefox\Extensions: [fmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\
FF Extension: Freemake Video Downloader Plugin - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\ []
FF HKLM-x32\...\Firefox\Extensions: [ytfmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\
FF Extension: Freemake Youtube Download Button - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\ []
FF HKCU\...\Firefox\Extensions: [{8A9386B4-E958-4c4c-ADF4-8F26DB3E4829}] - C:\Program Files (x86)\PriceGong\2.5.1\FF
FF Extension: PriceGong - C:\Program Files (x86)\PriceGong\2.5.1\FF [2011-08-27]
FF HKCU\...\Firefox\Extensions: [{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}] - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi
FF Extension: No Name - C:\Program Files (x86)\Wajam\Firefox\{5a95a9e0-59dd-4314-bd84-4d18ca83a0e2}.xpi [2013-12-09]

Chrome: 
=======
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\32.0.1700.102\pdf.dll ()
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll No File
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (AdobeAAMDetect) - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.149\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_224.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.210.11) - C:\Windows\SysWOW64\npdeployJava1.dll No File
CHR Plugin: (Shockwave for Director) - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (FoxyDeal) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiennapmieppnpfhhogglccgepbdajan [2014-01-03]
CHR Extension: (Google Drive) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-07-10]
CHR Extension: (PriceGong) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkomkajifikmkfnjgphkjcfeepbnojok [2013-07-08]
CHR Extension: (Freemake Video Downloader) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf [2014-01-26]
CHR Extension: (AutocompletePro plugin for chrome) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\defdhglnppeioeflggkmglipcecffkhk [2013-07-08]
CHR Extension: (Games Center) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\dehjbbcmklelglapfndfbomoaooippkb [2013-07-08]
CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2013-07-08]
CHR Extension: (Freemake Youtube Download Button) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh [2014-01-26]
CHR Extension: (PanicButton) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\faminaibgiklngmfpfbhmokfmnglamcm [2013-11-10]
CHR Extension: (avast! Ad Blocker) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\fplhdcjmbpfkejbhngmlngaecbjmoimd [2013-07-08]
CHR Extension: (The QR Code Generator) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcmhlmapohffdglflokbgknlknnmogbb [2013-07-18]
CHR Extension: (ApPtoU) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba [2014-01-29]
CHR Extension: (Iminent) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\igdhbblpcellaljokkpfhcjlagemhgjl [2014-01-03]
CHR Extension: (Funmoods) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihflimipbcaljfnojhhknppphnnciiif [2013-07-08]
CHR Extension: (Wajam) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpmbfleldcgkldadpdinhjjopdfpjfjp [2014-01-06]
CHR Extension: (QR Code Generator) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbddejkiaboppgjbbeljnhdfejceijam [2013-07-18]
CHR Extension: (FVD Downloader) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\lfmhcpmkbdkbgbmkjoiopeeegenkdikp [2013-11-10]
CHR Extension: (QR-Code aus URL) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\nioihlfoddilijjjeknopfcbglallkce [2013-07-18]
CHR Extension: (Google Wallet) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01]
CHR Extension: (EXEcheckker) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdlfihameoodkafnckcnpfidcndgekh [2014-02-03]
CHR Extension: (shoppnnDroop) - C:\ProgramData\hehonoiddkebnfobcdlakohjokfldcmh [2014-01-29]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Marco\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-07-09]
CHR HKLM-x32\...\Chrome\Extension: [bkomkajifikmkfnjgphkjcfeepbnojok] - C:\Program Files (x86)\PriceGong\2.5.1\pricegong.crx [2011-07-21]
CHR HKLM-x32\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2014-01-25]
CHR HKLM-x32\...\Chrome\Extension: [defdhglnppeioeflggkmglipcecffkhk] - C:\Program Files (x86)\AutocompletePro\chrome\autocompleteprochrome.crx [2011-01-26]
CHR HKLM-x32\...\Chrome\Extension: [dehjbbcmklelglapfndfbomoaooippkb] - C:\Program Files (x86)\GamesCenter\GamesCenter.crx [2013-02-09]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2013-12-21]
CHR HKLM-x32\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\ChromeYoutubePlugin.crx [2014-01-25]
CHR HKLM-x32\...\Chrome\Extension: [fplhdcjmbpfkejbhngmlngaecbjmoimd] - C:\Program Files\AVAST Software\Avast\AdBlocker\Chrome\avast-adblocker-chrome.crx [2013-03-21]
CHR HKLM-x32\...\Chrome\Extension: [igdhbblpcellaljokkpfhcjlagemhgjl] - "C:\Program Files (x86)\Iminent\Iminent.crx" [2013-03-21]
CHR HKLM-x32\...\Chrome\Extension: [ihflimipbcaljfnojhhknppphnnciiif] - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.7\facemoods.crx [2010-11-24]
CHR HKLM-x32\...\Chrome\Extension: [jpmbfleldcgkldadpdinhjjopdfpjfjp] - C:\Users\Marco\AppData\Local\Wajam\Chrome\wajam.crx [2013-12-13]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 70e6ca8c; C:\Program Files (x86)\Optimizer Pro\OptProCrashSvc.dll [192664 2014-01-03] ()
R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-31] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [113704 2014-01-31] (AVAST Software)
R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2014-01-13] (Ellora Assets Corp.)
R2 Megatech-Software-Protection; C:\Program Files (x86)\Megatech\MProtect\MPServ.EXE [36864 2007-12-12] ()
R2 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-05-27] (Egis Technology Inc.)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4292960 2013-11-11] (Symantec Corporation)
R2 SProtection; C:\Program Files (x86)\Common Files\Umbrella\Umbrella.exe [2905408 2013-12-16] (Iminent)
R2 WajamUpdaterV3; C:\Program Files (x86)\Wajam\Updater\WajamUpdaterV3.exe [114176 2013-11-01] (Wajam)
S2 WinkHandler; C:\Program Files (x86)\Iminent\WinkHandler.exe [425792 2013-12-16] ()

==================== Drivers (Whitelisted) ====================

R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2013-11-14] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-31] (AVAST Software)
R1 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [440672 2014-01-31] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-14] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-01-31] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-01-31] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-01-31] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-13] ()
R3 avmaudio; C:\Windows\System32\DRIVERS\avmaudio.sys [116480 2013-02-24] (AVM Berlin)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin)
S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH)
S3 GigasetGenericUSB_x64; C:\Windows\System32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2009-02-20] (Siemens Home and Office Communication Devices GmbH & Co. KG)
S3 libusb0; C:\Windows\SysWOW64\drivers\libusb0.sys [33792 2005-03-09] ()
S4 LMIRfsClientNP; No ImagePath
R2 npf; C:\Windows\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc.)
S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [748648 2010-08-12] (Realtek Semiconductor Corporation                           )
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] ()
S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2008-11-19] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [27136 2008-11-19] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [33792 2008-11-19] (LG Electronics Inc.)
S3 WsAudio_Device; C:\Windows\System32\drivers\VirtualAudio.sys [31080 2013-01-08] (Wondershare)
R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl [146928 2010-08-16] (CyberLink Corp.)
S2 LMIInfo; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-12 14:26 - 2014-02-12 14:32 - 00000000 ____D () C:\FRST
2014-02-10 21:31 - 2014-02-10 23:09 - 00000000 ____D () C:\Users\Marco\Desktop\Dusty
2014-02-08 10:35 - 2014-02-08 10:35 - 00002968 _____ () C:\Windows\System32\Tasks\{65B6DA46-08F9-42DC-9D21-68ECB5FEEE0A}
2014-02-08 10:34 - 2014-02-08 10:34 - 00002970 _____ () C:\Windows\System32\Tasks\{CFC12328-BB91-45A7-A7C8-E057AD886176}
2014-02-08 10:08 - 2014-02-08 10:08 - 00002968 _____ () C:\Windows\System32\Tasks\{041F2130-E6FD-40C5-BBE9-52AFC0D96381}
2014-02-08 10:07 - 2014-02-08 10:07 - 00003186 _____ () C:\Windows\System32\Tasks\{29666182-CFDA-470B-A7D8-2515F863832A}
2014-02-07 23:57 - 2014-02-07 23:57 - 00002968 _____ () C:\Windows\System32\Tasks\{F3C812C3-7D7C-44A0-8952-6F379977FA97}
2014-02-07 23:51 - 2014-02-07 23:51 - 00002968 _____ () C:\Windows\System32\Tasks\{7BB0731C-19BC-41B6-A803-F42127F20CFD}
2014-02-07 23:45 - 2014-02-07 23:45 - 00002968 _____ () C:\Windows\System32\Tasks\{131E5AAD-9FED-42AE-9D92-C791A6FE5F3F}
2014-02-07 23:44 - 2014-02-07 23:44 - 00002968 _____ () C:\Windows\System32\Tasks\{D7F197EB-B937-43E7-AE7F-216C7702BE4B}
2014-02-07 23:43 - 2014-02-07 23:43 - 00002968 _____ () C:\Windows\System32\Tasks\{9E305CFD-F157-4A9F-992A-C12E920A12BA}
2014-02-06 19:56 - 2014-02-06 20:04 - 00000000 ____D () C:\Users\Marco\Desktop\Jannik
2014-02-06 19:18 - 2014-02-06 19:18 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\LibreOffice
2014-02-06 19:16 - 2014-02-06 19:16 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\OpenOffice.org
2014-02-06 17:24 - 2014-02-06 17:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-06 17:02 - 2014-02-06 17:02 - 00001386 _____ () C:\Users\Marco\Desktop\iTunes - Verknüpfung.lnk
2014-02-06 16:41 - 2014-02-06 16:41 - 01755604 _____ () C:\Users\Marco\Desktop\1871270_683350511717566_7622_n.mp4
2014-02-05 20:35 - 2014-02-10 20:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-03 17:11 - 2014-02-03 17:11 - 00006608 _____ () C:\Users\Marco\AppData\Local\recently-used.xbel
2014-02-03 16:59 - 2014-02-03 16:59 - 00000000 ____D () C:\Users\Marco\Desktop\Feuerwehr
2014-02-03 14:41 - 2014-02-03 14:41 - 00001637 _____ () C:\Users\Marco\Desktop\TeamViewer 9.lnk
2014-02-02 16:49 - 2014-02-02 16:49 - 00001201 _____ () C:\Users\Marco\Desktop\Ressourcenmonitor.lnk
2014-01-31 16:03 - 2014-01-31 16:04 - 00000000 ____D () C:\ProgramData\EXEcheckker
2014-01-31 16:03 - 2014-01-31 16:03 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-31 16:03 - 2014-01-31 16:03 - 00000000 ____D () C:\ProgramData\okdlfihameoodkafnckcnpfidcndgekh
2014-01-31 15:35 - 2014-01-31 15:35 - 00001956 _____ () C:\Users\Public\Desktop\avast! Premier.lnk
2014-01-31 15:28 - 2014-01-31 15:28 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Wichtiges
2014-01-31 15:15 - 2014-01-31 15:15 - 01884977 _____ () C:\Users\Marco\Desktop\1608083_186652868212024_888047451_n.mp4
2014-01-31 06:40 - 2014-01-31 06:40 - 01884977 _____ () C:\Users\Marco\Desktop\bus
2014-01-29 20:27 - 2014-01-31 16:04 - 00000000 ____D () C:\ProgramData\2ff1ddb567438de4
2014-01-29 20:27 - 2014-01-29 20:28 - 00000000 ____D () C:\ProgramData\ApPtoU
2014-01-29 20:27 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\shoppnnDroop
2014-01-29 20:27 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\hehonoiddkebnfobcdlakohjokfldcmh
2014-01-28 20:49 - 2014-01-28 20:49 - 15336718 _____ () C:\Users\Marco\Desktop\1055344_371045796370724_676684399_n.mp4
2014-01-27 17:24 - 2014-01-27 17:24 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-27 17:24 - 2014-01-27 17:24 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-27 17:21 - 2014-01-27 17:21 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-27 17:21 - 2014-01-27 17:21 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-27 17:11 - 2014-01-27 17:12 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-27 17:11 - 2014-01-27 17:12 - 00000000 ____D () C:\Program Files\iTunes
2014-01-27 17:11 - 2014-01-27 17:12 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-01-27 17:11 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files\iPod
2014-01-26 12:24 - 2014-01-26 12:25 - 04685821 _____ () C:\Users\Marco\Desktop\Berufscheck der kleinen Mia.wmv
2014-01-26 12:19 - 2014-01-26 12:21 - 04117893 _____ () C:\Users\Marco\Desktop\Poledancestange im Kinderzimmer.wmv
2014-01-25 17:19 - 2014-01-25 17:20 - 05973713 _____ () C:\Users\Marco\Desktop\Ein Müllmann rastet aus.wmv
2014-01-25 16:52 - 2014-01-25 16:52 - 00000000 ____D () C:\Program Files (x86)\DsNET Corp
2014-01-25 16:30 - 2014-01-25 16:30 - 29836541 _____ () C:\Users\Marco\Desktop\ROLLIN` SAFARI - what if animals were round_.mp4
2014-01-25 16:30 - 2014-01-25 16:30 - 00000000 ____D () C:\Users\Marco\dwhelper
2014-01-24 18:22 - 2014-01-24 18:23 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Sonstige
2014-01-19 22:39 - 2014-01-19 22:39 - 00000032 _____ () C:\Windows\Menu.INI
2014-01-19 19:05 - 2014-01-19 20:04 - 866302861 _____ () C:\Users\Marco\Dusty.zip
2014-01-15 18:29 - 2014-01-15 18:29 - 00000000 ____D () C:\Users\Marco\Telekom
2014-01-15 16:41 - 2014-01-18 11:21 - 00000600 _____ () C:\Users\Marco\AppData\Local\PUTTY.RND
2014-01-15 14:27 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 14:27 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 14:27 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 14:27 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 14:27 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 14:27 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 14:27 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 14:27 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 14:27 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-13 21:20 - 2014-01-13 21:20 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\ICQ Dateien
2014-01-13 18:52 - 2014-01-31 15:32 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys

==================== One Month Modified Files and Folders =======

2014-02-12 14:32 - 2014-02-12 14:26 - 00000000 ____D () C:\FRST
2014-02-12 14:32 - 2012-05-29 20:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-12 14:30 - 2010-11-05 22:37 - 01116959 _____ () C:\Windows\WindowsUpdate.log
2014-02-12 14:30 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-12 14:30 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-12 14:29 - 2011-01-17 16:11 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Skype
2014-02-12 14:24 - 2013-11-20 14:18 - 00241591 _____ () C:\Windows\IE11_main.log
2014-02-12 14:20 - 2013-08-22 11:24 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002UA.job
2014-02-12 14:20 - 2013-08-22 11:24 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002Core.job
2014-02-12 14:20 - 2011-02-04 19:36 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-12 14:20 - 2009-07-14 05:51 - 00309601 _____ () C:\Windows\setupact.log
2014-02-11 20:43 - 2011-02-04 19:36 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-11 16:10 - 2012-11-15 20:12 - 00003958 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{604A8C80-AF97-4E6B-B718-0ADED238F7E3}
2014-02-11 14:42 - 2012-06-05 11:02 - 00007667 _____ () C:\Users\Marco\AppData\Local\resmon.resmoncfg
2014-02-10 23:09 - 2014-02-10 21:31 - 00000000 ____D () C:\Users\Marco\Desktop\Dusty
2014-02-10 22:57 - 2013-09-29 15:08 - 00000000 ____D () C:\Users\Marco\AppData\Local\CrashDumps
2014-02-10 22:32 - 2013-08-17 00:55 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Dropbox
2014-02-10 22:31 - 2013-08-17 00:57 - 00000000 ___RD () C:\Users\Marco\Dropbox
2014-02-10 22:31 - 2013-04-17 17:00 - 00000000 ___RD () C:\Users\Marco\Google Drive
2014-02-10 22:31 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-02-10 22:30 - 2012-01-19 18:30 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-02-10 22:27 - 2011-11-28 14:24 - 00000000 ____D () C:\Users\Marco\Tracing
2014-02-10 22:25 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-10 21:56 - 2012-10-15 13:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-10 21:56 - 2010-11-05 22:34 - 00174338 _____ () C:\Windows\PFRO.log
2014-02-10 20:30 - 2014-02-05 20:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-10 15:49 - 2014-01-04 02:49 - 00003912 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-02-09 12:15 - 2010-11-06 07:28 - 00654852 _____ () C:\Windows\system32\perfh007.dat
2014-02-09 12:15 - 2010-11-06 07:28 - 00130434 _____ () C:\Windows\system32\perfc007.dat
2014-02-09 12:15 - 2009-07-14 06:13 - 01500358 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-08 10:35 - 2014-02-08 10:35 - 00002968 _____ () C:\Windows\System32\Tasks\{65B6DA46-08F9-42DC-9D21-68ECB5FEEE0A}
2014-02-08 10:34 - 2014-02-08 10:34 - 00002970 _____ () C:\Windows\System32\Tasks\{CFC12328-BB91-45A7-A7C8-E057AD886176}
2014-02-08 10:08 - 2014-02-08 10:08 - 00002968 _____ () C:\Windows\System32\Tasks\{041F2130-E6FD-40C5-BBE9-52AFC0D96381}
2014-02-08 10:07 - 2014-02-08 10:07 - 00003186 _____ () C:\Windows\System32\Tasks\{29666182-CFDA-470B-A7D8-2515F863832A}
2014-02-07 23:57 - 2014-02-07 23:57 - 00002968 _____ () C:\Windows\System32\Tasks\{F3C812C3-7D7C-44A0-8952-6F379977FA97}
2014-02-07 23:51 - 2014-02-07 23:51 - 00002968 _____ () C:\Windows\System32\Tasks\{7BB0731C-19BC-41B6-A803-F42127F20CFD}
2014-02-07 23:45 - 2014-02-07 23:45 - 00002968 _____ () C:\Windows\System32\Tasks\{131E5AAD-9FED-42AE-9D92-C791A6FE5F3F}
2014-02-07 23:44 - 2014-02-07 23:44 - 00002968 _____ () C:\Windows\System32\Tasks\{D7F197EB-B937-43E7-AE7F-216C7702BE4B}
2014-02-07 23:43 - 2014-02-07 23:43 - 00002968 _____ () C:\Windows\System32\Tasks\{9E305CFD-F157-4A9F-992A-C12E920A12BA}
2014-02-07 23:37 - 2011-01-21 16:34 - 00000000 ____D () C:\Users\Marco\Spiele
2014-02-06 20:04 - 2014-02-06 19:56 - 00000000 ____D () C:\Users\Marco\Desktop\Jannik
2014-02-06 19:18 - 2014-02-06 19:18 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\LibreOffice
2014-02-06 19:16 - 2014-02-06 19:16 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\OpenOffice.org
2014-02-06 17:24 - 2014-02-06 17:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-06 17:18 - 2012-01-24 14:55 - 04492800 ___SH () C:\Users\Marco\Desktop\Thumbs.db
2014-02-06 17:02 - 2014-02-06 17:02 - 00001386 _____ () C:\Users\Marco\Desktop\iTunes - Verknüpfung.lnk
2014-02-06 16:41 - 2014-02-06 16:41 - 01755604 _____ () C:\Users\Marco\Desktop\1871270_683350511717566_7622_n.mp4
2014-02-05 20:32 - 2012-05-29 20:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-05 20:32 - 2012-05-29 20:49 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-05 20:32 - 2012-05-29 20:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-05 14:36 - 2013-12-26 22:17 - 00000000 ____D () C:\Users\Besucher\AppData\Local\CrashDumps
2014-02-04 15:43 - 2011-01-17 15:16 - 00162544 _____ () C:\Users\Marco\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-03 17:11 - 2014-02-03 17:11 - 00006608 _____ () C:\Users\Marco\AppData\Local\recently-used.xbel
2014-02-03 17:11 - 2012-08-05 22:10 - 00000000 ____D () C:\Users\Marco\.gimp-2.8
2014-02-03 16:59 - 2014-02-03 16:59 - 00000000 ____D () C:\Users\Marco\Desktop\Feuerwehr
2014-02-03 15:35 - 2011-11-07 20:14 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\vlc
2014-02-03 14:41 - 2014-02-03 14:41 - 00001637 _____ () C:\Users\Marco\Desktop\TeamViewer 9.lnk
2014-02-02 16:49 - 2014-02-02 16:49 - 00001201 _____ () C:\Users\Marco\Desktop\Ressourcenmonitor.lnk
2014-02-01 11:22 - 2012-07-10 15:26 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-02-01 01:56 - 2013-12-02 21:16 - 00000000 ____D () C:\Users\SERVER\Desktop\Intragart
2014-02-01 01:26 - 2013-08-29 18:48 - 00162544 _____ () C:\Users\SERVER\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-01 01:25 - 2011-01-17 15:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\SoftGrid Client
2014-01-31 16:04 - 2014-01-31 16:03 - 00000000 ____D () C:\ProgramData\EXEcheckker
2014-01-31 16:04 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\2ff1ddb567438de4
2014-01-31 16:03 - 2014-01-31 16:03 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-31 16:03 - 2014-01-31 16:03 - 00000000 ____D () C:\ProgramData\okdlfihameoodkafnckcnpfidcndgekh
2014-01-31 16:03 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-01-31 16:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-01-31 15:53 - 2012-05-12 13:25 - 00001033 _____ () C:\Windows\wininit.ini
2014-01-31 15:53 - 2011-01-17 15:17 - 00000000 ___RD () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-31 15:52 - 2013-08-17 00:56 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-31 15:35 - 2014-01-31 15:35 - 00001956 _____ () C:\Users\Public\Desktop\avast! Premier.lnk
2014-01-31 15:32 - 2014-01-13 18:52 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-01-31 15:32 - 2013-03-21 13:53 - 00440672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2014-01-31 15:32 - 2011-07-21 08:15 - 01038072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-31 15:32 - 2011-07-21 08:15 - 00421704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-01-31 15:32 - 2011-07-21 08:15 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-31 15:32 - 2011-07-21 08:15 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-31 15:32 - 2011-07-21 08:14 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-31 15:28 - 2014-01-31 15:28 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Wichtiges
2014-01-31 15:15 - 2014-01-31 15:15 - 01884977 _____ () C:\Users\Marco\Desktop\1608083_186652868212024_888047451_n.mp4
2014-01-31 06:40 - 2014-01-31 06:40 - 01884977 _____ () C:\Users\Marco\Desktop\bus
2014-01-29 20:28 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\ApPtoU
2014-01-29 20:27 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\shoppnnDroop
2014-01-29 20:27 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\hehonoiddkebnfobcdlakohjokfldcmh
2014-01-28 23:02 - 2014-01-03 00:10 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro
2014-01-28 20:49 - 2014-01-28 20:49 - 15336718 _____ () C:\Users\Marco\Desktop\1055344_371045796370724_676684399_n.mp4
2014-01-27 21:06 - 2013-07-06 09:23 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\.minecraft
2014-01-27 17:24 - 2014-01-27 17:24 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-27 17:24 - 2014-01-27 17:24 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-27 17:24 - 2013-11-15 15:52 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-27 17:24 - 2013-11-15 15:52 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-27 17:24 - 2013-11-15 15:52 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-27 17:21 - 2014-01-27 17:21 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-27 17:21 - 2014-01-27 17:21 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-27 17:21 - 2013-07-11 19:36 - 00000000 ____D () C:\Program Files\Java
2014-01-27 17:15 - 2012-04-18 15:24 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-01-27 17:15 - 2012-04-18 15:23 - 00000000 ____D () C:\Program Files (x86)\WinRAR
2014-01-27 17:12 - 2014-01-27 17:11 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-27 17:12 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files\iTunes
2014-01-27 17:12 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-01-27 17:11 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files\iPod
2014-01-26 16:53 - 2011-02-12 21:31 - 01018368 ___SH () C:\Users\Marco\Thumbs.db
2014-01-26 12:25 - 2014-01-26 12:24 - 04685821 _____ () C:\Users\Marco\Desktop\Berufscheck der kleinen Mia.wmv
2014-01-26 12:21 - 2014-01-26 12:19 - 04117893 _____ () C:\Users\Marco\Desktop\Poledancestange im Kinderzimmer.wmv
2014-01-25 17:20 - 2014-01-25 17:19 - 05973713 _____ () C:\Users\Marco\Desktop\Ein Müllmann rastet aus.wmv
2014-01-25 16:52 - 2014-01-25 16:52 - 00000000 ____D () C:\Program Files (x86)\DsNET Corp
2014-01-25 16:47 - 2012-01-13 16:55 - 00000000 ____D () C:\ProgramData\Freemake
2014-01-25 16:46 - 2012-01-13 16:54 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2014-01-25 16:46 - 2012-01-13 16:54 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-01-25 16:30 - 2014-01-25 16:30 - 29836541 _____ () C:\Users\Marco\Desktop\ROLLIN` SAFARI - what if animals were round_.mp4
2014-01-25 16:30 - 2014-01-25 16:30 - 00000000 ____D () C:\Users\Marco\dwhelper
2014-01-25 16:30 - 2011-01-17 15:16 - 00000000 ___RD () C:\Users\Marco
2014-01-24 18:23 - 2014-01-24 18:22 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Sonstige
2014-01-22 16:35 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-20 04:55 - 2011-08-15 10:33 - 00000000 ____D () C:\Users\Marco\Dusty
2014-01-19 22:39 - 2014-01-19 22:39 - 00000032 _____ () C:\Windows\Menu.INI
2014-01-19 20:04 - 2014-01-19 19:05 - 866302861 _____ () C:\Users\Marco\Dusty.zip
2014-01-18 11:21 - 2014-01-15 16:41 - 00000600 _____ () C:\Users\Marco\AppData\Local\PUTTY.RND
2014-01-16 16:50 - 2009-07-14 05:45 - 00549696 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-16 16:29 - 2013-08-14 12:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-16 16:22 - 2011-01-29 17:10 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-16 09:59 - 2012-07-13 18:03 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-15 18:29 - 2014-01-15 18:29 - 00000000 ____D () C:\Users\Marco\Telekom
2014-01-15 18:27 - 2013-11-17 20:44 - 00000000 ____D () C:\Users\Marco\Desktop\Für Karin
2014-01-15 18:27 - 2011-01-16 20:30 - 00000000 ____D () C:\Users\Marco\Schreiben
2014-01-13 21:20 - 2014-01-13 21:20 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\ICQ Dateien
2014-01-13 18:51 - 2013-03-21 13:53 - 00207904 _____ () C:\Windows\system32\Drivers\aswVmm.sys

Files to move or delete:
====================
C:\Users\Marco\worldpainter_0.11.2.exe
C:\Users\Marco\worldpainter_1.2.5.exe


Some content of TEMP:
====================
C:\Users\Besucher\AppData\Local\Temp\AskSLib.dll
C:\Users\Marco\AppData\Local\Temp\2dcd1d63cb45e6613582211c3d5f4b23.exe
C:\Users\Marco\AppData\Local\Temp\7zip.exe
C:\Users\Marco\AppData\Local\Temp\aacdec.exe
C:\Users\Marco\AppData\Local\Temp\AskPIP_FF_.exe
C:\Users\Marco\AppData\Local\Temp\AskSLib.dll
C:\Users\Marco\AppData\Local\Temp\au.dll
C:\Users\Marco\AppData\Local\Temp\audacity-win-unicode-1.3.12.exe
C:\Users\Marco\AppData\Local\Temp\avguidx.dll
C:\Users\Marco\AppData\Local\Temp\AVG_Toolbar_V11.exe
C:\Users\Marco\AppData\Local\Temp\b11r-96g.dll
C:\Users\Marco\AppData\Local\Temp\bitool.dll
C:\Users\Marco\AppData\Local\Temp\COMAP.EXE
C:\Users\Marco\AppData\Local\Temp\EBU9E9A.exe
C:\Users\Marco\AppData\Local\Temp\EBUB5E1.DLL
C:\Users\Marco\AppData\Local\Temp\eMule0.50a-Installer.exe
C:\Users\Marco\AppData\Local\Temp\eMulePlus-1.2b.Installer.exe
C:\Users\Marco\AppData\Local\Temp\FFSetupSoftonic260.exe
C:\Users\Marco\AppData\Local\Temp\FoxyDeal_Setup.exe
C:\Users\Marco\AppData\Local\Temp\FreemakeVideoDownloader_3.0.0.11.exe
C:\Users\Marco\AppData\Local\Temp\FreemakeVideoDownloader_3.0.0.26.exe
C:\Users\Marco\AppData\Local\Temp\FreemakeVideoDownloader_3.5.1.1.exe
C:\Users\Marco\AppData\Local\Temp\FreemakeVideoDownloader_3.6.2.3.exe
C:\Users\Marco\AppData\Local\Temp\GLFF2CB.tmp.ConduitEngineSetup.exe
C:\Users\Marco\AppData\Local\Temp\HssInstaller.exe
C:\Users\Marco\AppData\Local\Temp\i4jdel0.exe
C:\Users\Marco\AppData\Local\Temp\iGearedHelper.dll
C:\Users\Marco\AppData\Local\Temp\IMsetup.exe
C:\Users\Marco\AppData\Local\Temp\IncrediMail_MediaBar_2.exe
C:\Users\Marco\AppData\Local\Temp\installChecker.exe
C:\Users\Marco\AppData\Local\Temp\installhelper.dll
C:\Users\Marco\AppData\Local\Temp\j3dcore-ogl-cg.dll
C:\Users\Marco\AppData\Local\Temp\j3dcore-ogl-chk.dll
C:\Users\Marco\AppData\Local\Temp\j3dcore-ogl.dll
C:\Users\Marco\AppData\Local\Temp\jpathwatch-nativelib-v-0-94-jpathwatch-native.dll
C:\Users\Marco\AppData\Local\Temp\jre-6u24-windows-i586-iftw-rv.exe
C:\Users\Marco\AppData\Local\Temp\jre-6u26-windows-i586-iftw-rv.exe
C:\Users\Marco\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\Marco\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Marco\AppData\Local\Temp\LiveSupport_setup.exe
C:\Users\Marco\AppData\Local\Temp\MachineIdCreator.exe
C:\Users\Marco\AppData\Local\Temp\MyBabylonTB.exe
C:\Users\Marco\AppData\Local\Temp\MyClaroTB.exe
C:\Users\Marco\AppData\Local\Temp\oi_{3A453DFD-D72E-40AB-9BDE-407524B0CB4A}.exe
C:\Users\Marco\AppData\Local\Temp\OptimizerPro.exe
C:\Users\Marco\AppData\Local\Temp\pixsetup.exe
C:\Users\Marco\AppData\Local\Temp\prismsetup.exe
C:\Users\Marco\AppData\Local\Temp\pstagesetup.exe
C:\Users\Marco\AppData\Local\Temp\qc_e3f0f3ef_27e6_4ca8_8a7c_a3d761aa54bb_64.exe
C:\Users\Marco\AppData\Local\Temp\setup.exe
C:\Users\Marco\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Marco\AppData\Local\Temp\sfextra.dll
C:\Users\Marco\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Marco\AppData\Local\Temp\sonarinst.exe
C:\Users\Marco\AppData\Local\Temp\SRAssetsHelper.dll
C:\Users\Marco\AppData\Local\Temp\tbFile.dll
C:\Users\Marco\AppData\Local\Temp\udm1bnyk.dll
C:\Users\Marco\AppData\Local\Temp\uninst.exe
C:\Users\Marco\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\Marco\AppData\Local\Temp\wajam_download.exe
C:\Users\Marco\AppData\Local\Temp\xmlUpdater.exe
C:\Users\Marco\AppData\Local\Temp\zipsetup.exe
C:\Users\Schule\AppData\Local\Temp\zipsetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-08 14:42

==================== End Of Log ============================
         
--- --- ---


und hier der Inhalt der Addition.txt

Code:
ATTFilter
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-02-2014 01
Ran by Marco at 2014-02-12 14:32:38
Running from C:\Users\Marco\Favorites\Downloads
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

Acer Backup Manager (x32 Version: 2.0.0.68 - NewTech Infosystems)
Acer Crystal Eye webcam (x32 Version: 1.0.4.3 - Liteon)
Acer ePower Management (x32 Version: 5.00.3005 - Acer Incorporated)
Acer eRecovery Management (x32 Version: 4.05.3013 - Acer Incorporated)
Acer GameZone Console (x32 Version: 6.1.0.9 - Oberon Media, Inc.)
Acer Registration (x32 Version: 1.03.3003 - Acer Incorporated)
Acer ScreenSaver (x32 Version: 1.1.0707.2010 - Acer Incorporated)
Acer Updater (x32 Version: 1.02.3001 - Acer Incorporated)
Acrobat.com (x32 Version: 1.6.65 - Adobe Systems Incorporated)
ADAC Druckstudio (x32 Version:  - )
Adobe Acrobat XI Pro (x32 Version: 11.0.06 - Adobe Systems)
Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 4.0.0.1390 - Adobe Systems Incorporated) Hidden
Adobe Download Assistant (x32 Version: 1.2.5 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.2.5 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Reader 9.1 MUI (x32 Version: 9.1.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 11.5 (x32 Version: 11.5.9.620 - Adobe Systems, Inc.)
Airport Mania First Flight (x32 Version:  - Oberon Media)
Amazonia (x32 Version:  - Oberon Media)
Any Video Converter 3.1.7 (x32 Version:  - Any-Video-Converter.com)
Apache Tomcat 7.0.34 (Version:  - )
Apple Application Support (x32 Version: 2.3.6 - Apple Inc.)
Apple Mobile Device Support (Version: 7.0.0.117 - Apple Inc.)
Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)
ApPtoU (x32 Version:  - ApptoU)
ArcSoft WebCam Companion 3 (x32 Version: 3.0.0.117 - ArcSoft)
Art Effects for PDR10 (Version: 2.0 - NewBlue)
Artweaver Plus 1.0 (x32 Version: 1.0 - Boris Eyrich Software)
Ask Toolbar (x32 Version: 1.6.6.0 - Ask.com) <==== ATTENTION
Atheros Bluetooth Suite (64) (Version: 7.4.0.165 - Atheros)
aTube Catcher (x32 Version: 3.8.5187 - DsNET Corp)
Audacity 1.3.12 (Unicode) (x32 Version:  - Audacity Team)
Audacity 2.0.2 (x32 Version: 2.0.2 - Audacity Team)
Audio Recorder for FREE 2010 v12.8.1 (x32 Version:  - Copyright(C) 2005-2010 AudioToolMedia Software.)
AudioCon (x32 Version: 1.0 - Basement Softworks)
AutocompletePro (x32 Version:  - ) <==== ATTENTION
avast! Ad Blocker (x32 Version: 1.0.0.0 - AVAST Software)
avast! Premier (x32 Version: 9.0.2013 - Avast Software)
AVS Audio Editor 7.1 (x32 Version:  - Online Media Technologies Ltd.)
AVS Update Manager 1.0 (x32 Version:  - Online Media Technologies Ltd.)
AVS4YOU Software Navigator 1.4 (x32 Version:  - Online Media Technologies Ltd.)
Backup Manager Basic (x32 Version: 2.0.0.68 - NewTech Infosystems) Hidden
Bing Bar (x32 Version: 7.3.124.0 - Microsoft Corporation)
Bonjour (Version: 3.0.0.10 - Apple Inc.)
Broadcom Gigabit NetLink Controller (Version: 14.0.2.3 - Broadcom Corporation)
BrowserProtect (x32 Version:  - Bit89 Inc) <==== ATTENTION
Cake Mania (x32 Version:  - Oberon Media)
Canon MP550 series MP Drivers (Version:  - )
Canon MP560 series MP Drivers (Version:  - )
Canon My Printer (x32 Version:  - )
Capturelib Screen Recorder 2.0.0 (x32 Version: 2.0.0 - Capturelib, Inc.)
CD Art Display 2.0.1 (x32 Version:  - CD Art Display)
CDBurnerXP (x32 Version: 4.5.1.4003 - CDBurnerXP)
CDDRV_Installer (Version: 4.60 - Logitech) Hidden
Compatibility Pack für 2007 Office System (x32 Version: 12.0.6612.1000 - Microsoft Corporation)
Conduit Engine (x32 Version:  - Conduit Ltd.) <==== ATTENTION
CyberLink PowerDVD 9 (x32 Version: 9.0.3216.50 - CyberLink Corp.)
CyberLink PowerDVD 9 (x32 Version: 9.0.3216.50 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DebugMode Wink (x32 Version:  - )
Desktop Player (x32 Version: 1.00.0000 - LongTailVideo)
Diercke Globus (x32 Version: 1.1 - Imagon GmbH)
DivxToDVD 0.5.2 (x32 Version: 0.5.2 - VSO-Software SARL)
Dream Day First Home (x32 Version:  - Oberon Media)
Driver Genius Professional Edition (x32 Version: 10.0 - Driver-Soft Inc.)
Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)
DVD Flick 1.3.0.7 (x32 Version: 1.3.0.7 - Dennis Meuwissen)
eBay Worldwide (x32 Version: 2.1.0901 - OEM)
eMule (x32 Version:  - )
erLT (x32 Version: 1.20.0137 - Logitech, Inc.) Hidden
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.)
eSobi v2 (x32 Version: 2.0.4.000274 - esobi Inc.) Hidden
EXEcheckker (x32 Version:  - EXEacheccker)
Express Zip (x32 Version:  - NCH Software)
F1 Championship Season 2000 (x32 Version:  - )
Facemoods Toolbar (x32 Version:  - ) <==== ATTENTION
Fahren Lernen Offline 2.0 (x32 Version:  - Verlag Heinrich Vogel - Springer Transport Media GmbH)
Farm Frenzy 2 (x32 Version:  - Oberon Media)
Fences (Version: 1.0 - Stardock Corporation) Hidden
Fences (x32 Version:  - Stardock Corporation)
ffdshow [rev 2033] [2008-07-05] (x32 Version: 1.0 - )
FilesFrog Update Checker (x32 Version:  - ) <==== ATTENTION
FormatFactory 3.0.1 (x32 Version: 3.0.1 - Free Time)
Fotogalerie (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
FoxTab FLV To Mp3 (remove only) (x32 Version:  - ) <==== ATTENTION
FoxyDeal (x32 Version: 1.1.0 - R&E Media GmbH)
Free Screen To Video V 1.2 (x32 Version: 1.2.0.0 - Koyote Soft)
Freemake Video Downloader (x32 Version: 3.6.2 - Ellora Assets Corporation)
Gadwin PrintScreen (x32 Version: 4.5 - Gadwin Systems, Inc.)
Galapago (x32 Version:  - Oberon Media)
GamesCenter (x32 Version:  - GamesCenter)
GeoGebra (x32 Version: 3.2.46.0 - International GeoGebra Institute)
GeoGebra 4.4 (x32 Version: 4.3.31.0 - International GeoGebra Institute)
GetFLV 9.0.9.9 (x32 Version:  - GetFLV, Inc.)
Gigaset QuickSync (Version: 7.2.0844.6 - Gigaset Communications GmbH)
GIMP 2.8.0 (Version: 2.8.0 - The GIMP Team)
GlassFish Server Open Source Edition 4.0 (Version:  - )
Google Chrome (x32 Version: 32.0.1700.102 - Google Inc.)
Google Drive (x32 Version: 1.13.5782.599 - Google, Inc.)
Google Earth (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
Heroes of Hellas (x32 Version:  - Oberon Media)
HTSK (x32 Version:  - )
iCloud (Version: 2.1.2.8 - Apple Inc.)
ICQ 8.2 (build 6901) (HKCU Version: 8.2.6901.0 - ICQ)
Identity Card (x32 Version: 1.00.3003 - Acer Incorporated)
iLivid (x32 Version: 1.92.0.121952 - Bandoo Media Inc.) <==== ATTENTION
ImgBurn (x32 Version: 2.5.7.0 - LIGHTNING UK!)
Iminent (x32 Version: 6.41.1.1 - Iminent) <==== ATTENTION
IncrediMail MediaBar 2 Toolbar (x32 Version: 6.1.0.7 - IncrediMail MediaBar 2)
Intel(R) Control Center (x32 Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (x32 Version: 8.15.10.2182 - Intel Corporation)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (x32 Version: 9.6.2.1001 - Intel Corporation)
Internet Radio (x32 Version:  - )
InternetTV 7.15 (x32 Version:  - MMToolz, Inc.)
Internet-TV für Windows Media Center (x32 Version: 4.2.2.0 - Microsoft Corporation)
iTunes (Version: 11.1.3.8 - Apple Inc.)
Java 7 Update 51 (64-bit) (Version: 7.0.510 - Oracle)
Java 7 Update 51 (x32 Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java SE Development Kit 7 Update 25 (64-bit) (Version: 1.7.0.250 - Oracle)
Java(TM) 6 Update 22 (x32 Version: 6.0.220 - Oracle)
Java(TM) 6 Update 37 (x32 Version: 6.0.370 - Oracle)
Junk Mail filter update (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
KhalInstallWrapper (Version: 2.00.0000 - Logitech) Hidden
Launch Manager (x32 Version: 4.0.14 - Acer Inc.)
LEGO Sports 2003 (x32 Version:  - )
LG PC Suite III (x32 Version: 1.0.0.0 - LG Electronics) Hidden
LG USB Modem Drivers (x32 Version: 4.9.4 - LG Electronics)
LibreOffice 4.1.1.2 (x32 Version: 4.1.1.2 - The Document Foundation)
LiveSupport (x32 Version: 1.2.7.0 - PC Utilities Software Limited) <==== ATTENTION
Logitech SetPoint (x32 Version: 4.80 - Logitech)
MAGIX Speed burnR (MSI) (Version: 7.0.2.6 - MAGIX AG) Hidden
MAGIX Speed burnR (MSI) (x32 Version: 7.0.2.6 - MAGIX AG)
MegaCAD 2013 (32) Ausbildungsversion (x32 Version: 20.13.02.13 - Megatech Software GmbH)
MegaCAD 3D 2011  (x32 Version:  - )
Merriam Websters Spell Jam (x32 Version:  - Oberon Media)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30320 - Microsoft Corporation) Hidden
Microsoft Access database engine 2010 (German) (x32 Version: 14.0.6029.1000 - Microsoft Corporation)
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Games for Windows - LIVE Redistributable (x32 Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (x32 Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Access database engine 2007 (German) (x32 Version: 12.0.6425.1000 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (Version: 14.0.4763.1000 - Microsoft Corporation) Hidden
Microsoft Office Klick-und-Los 2010 (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (x32 Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft PowerPoint Viewer (x32 Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft SkyDrive (HKCU Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (x32 Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)
MotioninJoy ds3 vibration driver version 0.100 (x32 Version:  - www.motioninjoy.com)
MotioninJoy Gamepad tool 0.7.0000 (Version: 0.7.0000 - www.motioninjoy.com)
Movie Maker (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Mozilla Firefox 27.0 (x86 de) (x32 Version: 27.0 - Mozilla)
Mozilla Maintenance Service (x32 Version: 24.3.0 - Mozilla)
Mozilla Thunderbird 24.3.0 (x86 de) (x32 Version: 24.3.0 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0 - Microsoft Corporation)
Music Manager (HKCU Version:  - Google, Inc.)
MyPhoneExplorer (x32 Version: 1.8.5 - F.J. Wechselberger)
MyWinLocker (x32 Version: 3.1.212.0 - Egis Technology Inc.) Hidden
MyWinLocker Suite (x32 Version: 3.1.212.0 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 3.1.212.0 - Egis Technology Inc.) Hidden
NCH DE Toolbar (x32 Version: 6.2.7.3 - NCH DE)
NetBeans IDE 7.3.1 (Version: 7.3.1 - NetBeans.org)
Norton Online Backup (x32 Version: 2.8.1.10 - Symantec Corporation)
Notepad++ (x32 Version: 6.3.1 - )
NTI Media Maker 9 (x32 Version: 9.0.2.8928 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.8928 - NTI Corporation) Hidden
NVIDIA Display Control Panel (Version: 6.14.12.5922 - NVIDIA Corporation)
NVIDIA Grafiktreiber 306.97 (Version: 306.97 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.85.551 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.10.8 (Version: 1.10.8 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.10.0224 - NVIDIA Corporation)
NVIDIA Systemsteuerung 306.97 (Version: 306.97 - NVIDIA Corporation) Hidden
NVIDIA Update 1.10.8 (Version: 1.10.8 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.10.8 - NVIDIA Corporation) Hidden
NVIDIA Updatus (x32 Version: 1.0.3 - NVIDIA Corporation) Hidden
OpenOffice.org 3.3 (x32 Version: 3.3.9567 - OpenOffice.org)
Optimizer Pro v3.2 (x32 Version:  - PC Utilities Software Limited) <==== ATTENTION
PDF24 Creator 5.7.0 (x32 Version:  - PDF24.org)
Pegtop PStart (x32 Version:  - Pegtop Software)
PhonerLite 2.09 (x32 Version: 2.09 - Heiko Sommerfeldt)
phonostar-Player Version 3.02.2 (x32 Version:  - )
Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Photo Gallery (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
PhotoStage Slideshow Producer (x32 Version:  - NCH Software)
Pivot Stickfigure Animator (x32 Version: 2.2.5 - Peter Bone)
PMG 2.0.0 (x32 Version:  - URGESOFT)
Poker Pop (x32 Version:  - Oberon Media)
posterXXL Designer 5.2 (x32 Version:  - )
posterXXL.de Bestellsoftware 4.80 (x32 Version:  - posterXXL AG)
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
RealSpeak Solo fur Deutsch - Steffi (x32 Version: 4.00.0000 - ScanSoft)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6141 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (x32 Version: 6.1.7600.30122 - Realtek Semiconductor Corp.)
RollerCoaster Tycoon 3 (x32 Version: 1.00.000 - )
Roomeon 3D-Planer (x32 Version: 1.1.0 - MyDomicile.com GmbH)
Schoener Fernsehen 0.0.0.1 (x32 Version: 0.0.0.1 - © schoener-fernsehen.com)
Scribus 1.3.9 (x32 Version: 1.3.9 - The Scribus Team)
SDFormatter (x32 Version: 4.0.0 - SD Association)
Shockwave (x32 Version:  - )
shoppnnDroop (x32 Version:  - sHopnidrop)
Shredder (Version: 2.0.8.3 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.3 - Egis Technology Inc.) Hidden
Skype™ 6.11 (x32 Version: 6.11.102 - Skype Technologies S.A.)
SpeedFan (remove only) (x32 Version:  - )
Spin & Win (x32 Version:  - Oberon Media)
StoppUhr (x32 Version:  - )
Super Screen Recorder 4.0 (x32 Version:  - ZeallSoft, Inc.)
Synaptics Pointing Device Driver (Version: 14.0.19.0 - Synaptics Incorporated)
Synthesia (remove only) (x32 Version:  - )
TeamViewer 9 (x32 Version: 9.0.25942 - TeamViewer)
TmNationsForever (x32 Version:  - Nadeo)
Total Immersion Racing (x32 Version:  - )
Two Worlds Pinball (x32 Version:  - )
Überwachungstool für die Intel® Turbo-Boost-Technik (Version: 1.0.186.6 - Intel)
UltraMixer 4.0.0 (x32 Version: 4.0.0 - UltraMixer Digital Audio Solutions)
Uniblue RegistryBooster (x32 Version:  - Uniblue Systems Ltd)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
VDownloader 3.0.752 (x32 Version:  - Vitzo Limited)
Video Downloader Professional 1.0.2.0 (x32 Version:  - KWOXER UN!TED)
VideoPad Videobearbeitungs-Software (x32 Version:  - NCH Software)
VirtualDJ Home FREE (x32 Version: 7.0.5 - Atomix Productions)
Visual C++ 9.0 CRT (x86) WinSXS MSM (x32 Version: 9.0 - Microsoft Corporation) Hidden
VLC media player 2.1.3 (x32 Version: 2.1.3 - VideoLAN)
Wajam (x32 Version: 2.06 - Wajam) <==== ATTENTION
WavePad Sound Editor (x32 Version:  - NCH Software)
Welcome Center (x32 Version: 1.02.3004 - Acer Incorporated)
Windows Live Communications Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Sync (x32 Version: 14.0.8117.416 - Microsoft Corporation)
Windows Live UX Platform (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
WinPcap 4.1.2 (x32 Version: 4.1.0.2001 - CACE Technologies)
WinRAR 5.01 (32-bit) (x32 Version: 5.01.0 - win.rar GmbH)
WinSCP 5.1.7 (x32 Version: 5.1.7 - Martin Prikryl)
Wisdom-soft Set up ASR 3.1 Free (x32 Version:  - Wisdom Software Inc.)
WorldPainter 1.2.5 (x32 Version: 1.2.5 - pepsoft.org)
XAMPP (x32 Version: 1.8.3-0 - BitNami)
xHamster Video Downloader 3.24 (x32 Version:  - DownloadToolz, Inc.)
Xilisoft Online Video Converter (HKCU Version: 2.0.25.1122 - Xilisoft)
Xvid 1.1.3 final uninstall (x32 Version: 1.1 - Xvid team (Koepi))
Youtube Downloader HD v. 2.9.5 (x32 Version:  - YoutubeDownloaderHD.com)
Zoo Tycoon: Complete Collection (x32 Version:  - )

==================== Restore Points  =========================

27-01-2014 12:13:15 Windows Update
27-01-2014 16:07:30 Installed iTunes
27-01-2014 16:20:12 Installed Java 7 Update 51 (64-bit)
27-01-2014 16:23:14 Installed Java 7 Update 51
28-01-2014 14:12:16 Windows Update
29-01-2014 19:05:36 Windows Update
31-01-2014 05:38:39 Windows Update
31-01-2014 14:30:08 avast! antivirus system restore point
31-01-2014 14:34:43 Gerätetreiber-Paketinstallation: Avast Netzwerkdienst
01-02-2014 10:22:19 Windows Update
02-02-2014 07:09:35 Windows Update
03-02-2014 10:09:18 Windows Update
06-02-2014 10:27:25 Windows Update
08-02-2014 09:05:41 Windows Update
09-02-2014 10:02:17 Windows Update
11-02-2014 13:41:00 Windows Update
12-02-2014 13:20:42 Windows Update

==================== Hosts content: ==========================

2009-07-14 03:34 - 2013-08-30 08:56 - 00000845 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1	ifw.local

==================== Scheduled Tasks (whitelisted) =============

Task: {0243D68B-87C4-462E-B40C-1513228F99FB} - System32\Tasks\{CFC12328-BB91-45A7-A7C8-E057AD886176} => C:\Users\Marco\Spiele\Alarmstuferot2\GAME.EXE [2000-11-03] (Westwood Studios)
Task: {05F64E81-2F8A-4AF8-9DC1-9DB48FD6D2B6} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002UA => C:\Users\Marco\AppData\Local\Google\Update\GoogleUpdate.exe [2013-08-22] (Google Inc.)
Task: {11BA94DA-46DF-42D4-97DE-035212E2779C} - System32\Tasks\{65B6DA46-08F9-42DC-9D21-68ECB5FEEE0A} => C:\Users\Marco\Spiele\Alarmstuferot2\ra2.exe [2000-10-24] ()
Task: {1AFBE3FB-3882-4E49-A4B4-E8FF77BBA157} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-01-31] (AVAST Software)
Task: {1C1955BC-B7CB-4EA4-8C21-A90AF429B694} - System32\Tasks\{041F2130-E6FD-40C5-BBE9-52AFC0D96381} => C:\Users\Marco\Spiele\Alarmstuferot2\ra2.exe [2000-10-24] ()
Task: {29B54186-9B89-40A3-9CCE-773889D5164C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-05] (Adobe Systems Incorporated)
Task: {2B192A1D-3580-420D-A092-E847EE02E2E4} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {2CE20BB5-B6D9-4128-AF24-C418FEEC1FDF} - System32\Tasks\{131E5AAD-9FED-42AE-9D92-C791A6FE5F3F} => C:\Users\Marco\Spiele\Alarmstuferot2\ra2.exe [2000-10-24] ()
Task: {37A36BE3-1A07-4047-BB8B-236C078242B3} - System32\Tasks\Scheduled Update for Ask Toolbar => C:\Program Files (x86)\Ask.com\UpdateTask.exe [2010-02-04] ()
Task: {38B42351-1A33-4512-A85B-2E9780F02F5C} - System32\Tasks\{25C3A0DC-D568-459A-A16E-3A4044F74354} => C:\Users\Marco\Spiele\Minecraft\MinecraftServer\Minecraft_Server2.exe
Task: {3C86FB08-A292-44FE-90F3-7622BC0ADF09} - System32\Tasks\NCH Software\ExpressZipDowngrade => C:\Program Files (x86)\NCH Software\ExpressZip\expresszip.exe [2012-10-12] (NCH Software)
Task: {3FE0C3FC-E318-4593-9158-20AD6672E6A6} - System32\Tasks\{7BB0731C-19BC-41B6-A803-F42127F20CFD} => C:\Users\Marco\Spiele\Alarmstuferot2\ra2.exe [2000-10-24] ()
Task: {4E73B4FB-082C-43D7-9AB0-59BD0C52DF63} - System32\Tasks\{F82A0C86-76A6-4595-B376-E6D9BA04741E} => C:\Program Files (x86)\iTunes\iTunes.exe [2013-11-02] (Apple Inc.)
Task: {52EF294A-44F3-4AF9-ABF4-BCBEAFFDA72E} - System32\Tasks\{AF5E9E21-4330-4597-9725-7FDA46601544} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.)
Task: {71001592-84AA-498A-A0E9-1F7563049E1F} - System32\Tasks\{168BB853-63CF-44A0-A43E-83BBFE6C499E} => C:\Users\Marco\Spiele\Minecraft\MinecraftServer\Minecraft_Server2.exe
Task: {721796F6-5AA6-4680-ACB6-6237D89F41DB} - System32\Tasks\{8DD834B5-198E-409A-8D7A-660C47ED02B5} => Chrome.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=5.8.0.156&amp;LastError=12002
Task: {753B28D6-1E08-4A72-B90F-F380948E9F11} - System32\Tasks\{3A31849E-296C-42FD-B5A4-88D344352D88} => Iexplore.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=5.1.0.104&amp;LastError=12002
Task: {7A06C56B-43D6-443C-BF82-615F902F8AAC} - System32\Tasks\{018DF6E4-C046-4FD5-B951-93D34A583983} => C:\Users\Marco\Spiele\Minecraft\MinecraftServer\Minecraft_Server2.exe
Task: {7C6DCB3D-8A7F-40A4-8D84-62CE61AA9508} - System32\Tasks\{9DDB31B9-44F5-4181-AF4F-F2E495E3E944} => C:\Users\Marco\Spiele\Minecraft\MinecraftServer\Minecraft_Server2.exe
Task: {7CDE1BDE-36F0-469D-AF52-08EB2E433632} - System32\Tasks\{F3C812C3-7D7C-44A0-8952-6F379977FA97} => C:\Users\Marco\Spiele\Alarmstuferot2\ra2.exe [2000-10-24] ()
Task: {7F84C0EE-20A2-4A71-A138-2BDFD4B19263} - System32\Tasks\BrowserProtect => Sc.exe start BrowserProtect <==== ATTENTION
Task: {8491CA71-BFE6-4CED-8609-BD78A4196801} - System32\Tasks\{9E305CFD-F157-4A9F-992A-C12E920A12BA} => C:\Users\Marco\Spiele\Alarmstuferot2\ra2.exe [2000-10-24] ()
Task: {87973194-E3EE-4D45-9648-F1A955C2D753} - System32\Tasks\{E9155501-32F8-4449-B5FF-9D6B51F2FE7C} => C:\Users\Marco\Desktop\Outlook Express\msimn.exe
Task: {93842E88-1546-4F19-AF5B-DE63875ABA5E} - System32\Tasks\{A729EAD2-997C-4569-862A-0D2199F40FD8} => Chrome.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=5.8.0.156&amp;LastError=12002
Task: {93CEE8D4-B57A-47CC-BB79-73801D6D61C0} - System32\Tasks\{D2896F57-0A56-4DEB-92EB-84B7EFE9286E} => C:\Users\Marco\Spiele\Minecraft\MinecraftServer\Minecraft_Server2.exe
Task: {9C7880E3-2990-4838-98AB-FDD2FF5A5FCD} - System32\Tasks\{6304674E-B243-4EE8-9C9E-B020C16B726C} => Chrome.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=5.9.0.114.259&amp;LastError=12002
Task: {9FC40BDE-262F-4E37-9A42-C2D7A9970121} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-04] (Google Inc.)
Task: {A0A8F269-2126-49E7-82D6-3C90BE49769F} - System32\Tasks\{FB329407-D9CF-45E2-A7AA-9821EE20AFF6} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.)
Task: {ACCB94CF-0623-4E26-AAA1-EAFC9E1DA8E4} - System32\Tasks\{BC50B084-7749-425E-850B-CA9E6EB0B630} => Chrome.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=5.5.0.119.259&amp;LastError=12002
Task: {ADB07AD0-812D-4FE8-835C-82AFBFA23A6D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-02-04] (Google Inc.)
Task: {B7FB40E1-3D31-4933-8B0D-A5913A2A82EC} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002Core => C:\Users\Marco\AppData\Local\Google\Update\GoogleUpdate.exe [2013-08-22] (Google Inc.)
Task: {C1B9D1A2-080B-49B3-BE8A-C6AEC3D0E13C} - System32\Tasks\{286679F3-E4CA-49EB-9131-19F30BE88821} => C:\Program Files (x86)\iTunes\iTunes.exe [2013-11-02] (Apple Inc.)
Task: {C2E744AF-5BEA-4F40-94E7-FEBC8F3C35F0} - System32\Tasks\{D7F197EB-B937-43E7-AE7F-216C7702BE4B} => C:\Users\Marco\Spiele\Alarmstuferot2\ra2.exe [2000-10-24] ()
Task: {CB4F24C2-4FE9-4D94-B82D-C94C7F2A776B} - System32\Tasks\{F40D556C-C413-4C55-A7FB-3317E550DE5C} => C:\Users\Marco\Desktop\Outlook Express\msimn.exe
Task: {CD0D28F5-AD4A-4FE6-9F7A-A372DA05E969} - System32\Tasks\{169C9909-726B-4D85-889B-A18344793E2A} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.)
Task: {D8856736-975D-4D5E-8D27-AA28A386504D} - System32\Tasks\SomotoUpdateCheckerAutoStart => C:\Users\Marco\AppData\Local\FilesFrog Update Checker\update_checker.exe [2013-10-17] (Somoto) <==== ATTENTION
Task: {FAF208E0-82D5-410D-AB5B-887D0DF92786} - System32\Tasks\{9AC64663-E425-4523-9D47-6BB3E54485BD} => C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-14] (Skype Technologies S.A.)
Task: {FE462F8F-1D99-443A-8058-8BC33FA42F53} - System32\Tasks\{85E368E9-E8F8-4E5C-B925-15010CB0854F} => Chrome.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&amp;ver=5.5.0.112.259&amp;LastError=12002
Task: {FFD45F39-6E99-4E02-BA70-912CF3E13639} - System32\Tasks\{4FB3F7B1-331D-4127-AF81-5610D9687066} => C:\Users\Marco\Desktop\Outlook Express\msimn.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002Core.job => C:\Users\Marco\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002UA.job => C:\Users\Marco\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2012-01-10 20:12 - 2012-01-10 20:12 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-07-10 17:30 - 2011-06-20 16:05 - 00040960 _____ () C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe
2013-07-20 13:39 - 2009-07-20 11:35 - 00018960 _____ () C:\Program Files\Logitech\SetPoint\khalwrapper.dll
2013-07-20 13:39 - 2009-07-20 03:00 - 00077824 _____ () C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
2012-11-15 20:00 - 2012-11-15 20:00 - 00088576 _____ () C:\Program Files (x86)\NCH Software\ExpressZip\ezcm64.dll
2013-02-10 11:05 - 2013-01-08 10:32 - 00721917 _____ () C:\Windows\SysWOW64\AiCM64.dll
2013-08-15 10:58 - 2013-08-15 10:58 - 00402432 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_64\VistaBridgeLibrary\3a8ad1faad945b7fde47baea6ca8a360\VistaBridgeLibrary.ni.dll
2014-02-10 20:31 - 2014-02-10 19:05 - 02172928 _____ () C:\Program Files\AVAST Software\Avast\defs\14021001\algo.dll
2014-02-12 14:20 - 2014-02-12 08:49 - 02172928 _____ () C:\Program Files\AVAST Software\Avast\defs\14021200\algo.dll
2014-01-03 00:10 - 2013-10-29 11:20 - 04062536 _____ () C:\Program Files (x86)\Optimizer Pro\OptProCrash.dll
2014-01-03 00:10 - 2014-01-03 00:10 - 00192664 _____ () C:\Program Files (x86)\Optimizer Pro\OptProCrashSvc.dll
2011-11-01 23:26 - 2011-11-01 23:26 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2011-11-01 23:26 - 2011-11-01 23:26 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2007-12-12 08:29 - 2007-12-12 08:29 - 00036864 _____ () C:\Program Files (x86)\Megatech\MProtect\MPServ.EXE
2010-06-28 23:20 - 2010-06-28 23:20 - 00465576 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\sqlite3.dll
2010-06-28 23:12 - 2010-06-28 23:12 - 01081600 _____ () C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\ACE.dll
2011-07-10 17:30 - 2011-06-15 13:07 - 02293248 _____ () C:\Program Files (x86)\phonostar-Player\QtCore4.dll
2011-07-10 17:30 - 2011-03-30 07:16 - 08173568 _____ () C:\Program Files (x86)\phonostar-Player\QtGui4.dll
2011-07-10 17:30 - 2011-03-30 06:59 - 00191488 _____ () C:\Program Files (x86)\phonostar-Player\QtSql4.dll
2011-07-10 17:30 - 2011-03-30 10:46 - 00416256 _____ () C:\Program Files (x86)\phonostar-Player\plugins\sqldrivers\qsqlite4.dll
2013-02-27 20:33 - 2013-02-27 20:33 - 10683392 _____ () C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\QtWebKit4.dll
2013-02-27 20:32 - 2013-02-27 20:32 - 07741952 _____ () C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\QtGui4.dll
2013-02-27 20:32 - 2013-02-27 20:32 - 02248192 _____ () C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\QtCore4.dll
2013-02-27 20:33 - 2013-02-27 20:33 - 01681408 _____ () C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\QtNetwork4.dll
2013-11-12 02:03 - 2013-11-12 02:03 - 00117248 _____ () C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\libaacdec.dll
2013-11-12 02:04 - 2013-11-12 02:04 - 00231936 _____ () C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\libmpgdec.dll
2013-11-12 02:03 - 2013-11-12 02:03 - 00253440 _____ () C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\libid3tag.dll
2013-11-12 02:05 - 2013-11-12 02:05 - 00344064 _____ () C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\libaudioenc.dll
2013-02-27 20:33 - 2013-02-27 20:33 - 00026624 _____ () C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\imageformats\qgif4.dll
2010-08-30 10:45 - 2009-05-20 07:02 - 00072200 _____ () C:\Program Files (x86)\Launch Manager\CdDirIo.dll
2013-11-14 19:10 - 2013-11-14 19:10 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2011-01-17 16:19 - 2011-02-03 15:01 - 00985088 _____ () C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
2014-02-05 20:35 - 2014-02-05 20:35 - 03019376 _____ () C:\Program Files (x86)\Mozilla Thunderbird\mozjs.dll
2014-02-05 20:35 - 2014-02-05 20:35 - 00158832 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAP32V60.dll
2014-02-05 20:35 - 2014-02-05 20:35 - 00023152 _____ () C:\Program Files (x86)\Mozilla Thunderbird\NSLDAPPR32V60.dll
2014-02-06 17:24 - 2014-02-06 17:24 - 03583600 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\ProgramData\Temp:0B9176C0
AlternateDataStreams: C:\ProgramData\Temp:1EE00E38
AlternateDataStreams: C:\ProgramData\Temp:798A3728
AlternateDataStreams: C:\ProgramData\Temp:93EB7685
AlternateDataStreams: C:\ProgramData\Temp:CDFF58FE

==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: LogMeIn Kernel Information Provider
Description: LogMeIn Kernel Information Provider
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: LMIInfo
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/12/2014 02:20:06 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 60169617

Error: (02/12/2014 02:20:06 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 60169617

Error: (02/12/2014 02:20:06 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/12/2014 02:20:05 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 60168244

Error: (02/12/2014 02:20:05 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 60168244

Error: (02/12/2014 02:20:05 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/12/2014 02:20:04 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 60167214

Error: (02/12/2014 02:20:04 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 60167214

Error: (02/12/2014 02:20:04 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/12/2014 02:20:02 PM) (Source: Bonjour Service) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 60165998


System errors:
=============
Error: (02/12/2014 02:24:42 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7 für x64-basierte Systeme

Error: (02/11/2014 08:49:36 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Windows Defender" wurde unerwartet beendet. Dies ist bereits 4 Mal passiert.

Error: (02/11/2014 02:46:09 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070643 fehlgeschlagen: Internet Explorer 11 für Windows 7 für x64-basierte Systeme

Error: (02/11/2014 02:41:28 PM) (Source: Service Control Manager) (User: )
Description: Dienst "Windows Defender" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.

Error: (02/10/2014 11:10:15 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Defender" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (02/10/2014 10:58:00 PM) (Source: DCOM) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (02/10/2014 10:43:42 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "Windows Defender" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (02/10/2014 10:37:48 PM) (Source: DCOM) (User: )
Description: 1053BBUpdate-Service{D6381B4A-D254-46EB-9018-A62E0F4BA6BA}

Error: (02/10/2014 10:37:46 PM) (Source: Service Control Manager) (User: )
Description: Der Dienst "BBUpdate" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1053

Error: (02/10/2014 10:37:46 PM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst BBUpdate erreicht.


Microsoft Office Sessions:
=========================
Error: (02/12/2014 02:20:06 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 60169617

Error: (02/12/2014 02:20:06 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 60169617

Error: (02/12/2014 02:20:06 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/12/2014 02:20:05 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 60168244

Error: (02/12/2014 02:20:05 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 60168244

Error: (02/12/2014 02:20:05 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/12/2014 02:20:04 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 60167214

Error: (02/12/2014 02:20:04 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledEvent 60167214

Error: (02/12/2014 02:20:04 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (02/12/2014 02:20:02 PM) (Source: Bonjour Service)(User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 60165998


==================== Memory info =========================== 

Percentage of memory in use: 72%
Total physical RAM: 3766.71 MB
Available physical RAM: 1034.59 MB
Total Pagefile: 7531.6 MB
Available Pagefile: 3875.31 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:452.66 GB) (Free:134.13 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: FD9AB21B)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=453 GB) - (Type=07 NTFS)

==================== End Of Log ============================
         
__________________

Alt 13.02.2014, 04:55   #4
schrauber
/// the machine
/// TB-Ausbilder
 

100% Pysikalischer Speicher durch svchost.exe - Standard

100% Pysikalischer Speicher durch svchost.exe



hi,

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 13.02.2014, 16:41   #5
MarcoW
 
100% Pysikalischer Speicher durch svchost.exe - Standard

100% Pysikalischer Speicher durch svchost.exe



Ok, bin fertig damit
Dauer: ca. 30 Minuten
Programm hat nicht "gemeckert"

Ist mein Problem jetzt gelöst? Was hat das Programm gemacht?
Danke für die Hilfe übrigens

Code:
ATTFilter
ComboFix 14-02-12.01 - Marco 13.02.2014  16:43:35.1.4 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.3767.1114 [GMT 1:00]
ausgeführt von:: c:\users\Marco\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
FW: avast! Antivirus *Disabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\program files (x86)\AutocompletePro
c:\program files (x86)\AutocompletePro\AutocompletePro.dll
c:\program files (x86)\AutocompletePro\chrome\autocompleteprochrome.crx
c:\program files (x86)\AutocompletePro\FireFoxExtension.exe
c:\program files (x86)\AutocompletePro\InstTracker.exe
c:\program files (x86)\AutocompletePro\support@predictad.com\chrome.manifest
c:\program files (x86)\AutocompletePro\support@predictad.com\chrome\content\browserOverlay.xul
c:\program files (x86)\AutocompletePro\support@predictad.com\chrome\content\options.js
c:\program files (x86)\AutocompletePro\support@predictad.com\chrome\content\options.xul
c:\program files (x86)\AutocompletePro\support@predictad.com\chrome\content\utils.js
c:\program files (x86)\AutocompletePro\support@predictad.com\defaults\preferences\predictad.js
c:\program files (x86)\AutocompletePro\support@predictad.com\install.rdf
c:\program files (x86)\AutocompletePro\unins000.dat
c:\program files (x86)\AutocompletePro\unins000.exe
c:\program files (x86)\facemoods.com
c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\bh\facemoods.dll
c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\facemoods.crx
c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\facemoods.png
c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodsApp.dll
c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodsEng.dll
c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodssrv.exe
c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodsTlbr.dll
c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\uninstall.exe
c:\program files (x86)\facemoods.com\sqlite3.dll
c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe
c:\program files (x86)\PriceGong
c:\program files (x86)\PriceGong\2.5.1\FF\chrome.manifest
c:\program files (x86)\PriceGong\2.5.1\FF\chrome\content\options.js
c:\program files (x86)\PriceGong\2.5.1\FF\chrome\content\options.xul
c:\program files (x86)\PriceGong\2.5.1\FF\chrome\content\overlay.js
c:\program files (x86)\PriceGong\2.5.1\FF\chrome\content\PriceGong.png
c:\program files (x86)\PriceGong\2.5.1\FF\chrome\content\pricegong.xul
c:\program files (x86)\PriceGong\2.5.1\FF\chrome\locale\en-US\overlay.dtd
c:\program files (x86)\PriceGong\2.5.1\FF\chrome\locale\en-US\pricegong.dtd
c:\program files (x86)\PriceGong\2.5.1\FF\chrome\skin\overlay.css
c:\program files (x86)\PriceGong\2.5.1\FF\components\pg_inst.txt
c:\program files (x86)\PriceGong\2.5.1\FF\components\PriceGong.xpt
c:\program files (x86)\PriceGong\2.5.1\FF\install.rdf
c:\program files (x86)\PriceGong\2.5.1\FF\modules\Observers.js
c:\program files (x86)\PriceGong\2.5.1\FF\modules\pricegong.js
c:\program files (x86)\PriceGong\2.5.1\PriceGong.crx
c:\program files (x86)\PriceGong\uninst.exe
c:\users\Besucher\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba
c:\users\Besucher\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\background.html
c:\users\Besucher\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\content.js
c:\users\Besucher\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\LHkDVr3Y.js
c:\users\Besucher\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\lsdb.js
c:\users\Besucher\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\manifest.json
c:\users\Besucher\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Karin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba
c:\users\Karin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\background.html
c:\users\Karin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\content.js
c:\users\Karin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\LHkDVr3Y.js
c:\users\Karin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\lsdb.js
c:\users\Karin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\manifest.json
c:\users\Karin\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\0p5bovp@bobhr-.com
c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\0p5bovp@bobhr-.com\bootstrap.js
c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\0p5bovp@bobhr-.com\chrome.manifest
c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\0p5bovp@bobhr-.com\content\bg.js
c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\0p5bovp@bobhr-.com\install.rdf
c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\74oai@uo-qik.edu
c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\74oai@uo-qik.edu\bootstrap.js
c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\74oai@uo-qik.edu\chrome.manifest
c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\74oai@uo-qik.edu\content\bg.js
c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\74oai@uo-qik.edu\install.rdf
c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\wliii_oya@aftl-kheuoa.com
c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\wliii_oya@aftl-kheuoa.com\bootstrap.js
c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\wliii_oya@aftl-kheuoa.com\chrome.manifest
c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\wliii_oya@aftl-kheuoa.com\content\bg.js
c:\users\Karin\AppData\Roaming\Mozilla\Firefox\Profiles\jn19raml.default\extensions\staged\wliii_oya@aftl-kheuoa.com\install.rdf
c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba
c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\background.html
c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\content.js
c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\LHkDVr3Y.js
c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\lsdb.js
c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\manifest.json
c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdlfihameoodkafnckcnpfidcndgekh
c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdlfihameoodkafnckcnpfidcndgekh\4.1_0\background.html
c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdlfihameoodkafnckcnpfidcndgekh\4.1_0\content.js
c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdlfihameoodkafnckcnpfidcndgekh\4.1_0\lsdb.js
c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdlfihameoodkafnckcnpfidcndgekh\4.1_0\manifest.json
c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdlfihameoodkafnckcnpfidcndgekh\4.1_0\MHSlmhlp.js
c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gnnlogcccgfcaamcaalbgffiphmhfkba_0.localstorage-journal
c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_gnnlogcccgfcaamcaalbgffiphmhfkba_0.localstorage
c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_okdlfihameoodkafnckcnpfidcndgekh_0.localstorage-journal
c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_okdlfihameoodkafnckcnpfidcndgekh_0.localstorage
c:\users\Marco\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Marco\AppData\Local\TempDIR
c:\users\Marco\AppData\Local\TempDIR\BetterInstaller.exe
c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\0p5bovp@bobhr-.com
c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\0p5bovp@bobhr-.com\bootstrap.js
c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\0p5bovp@bobhr-.com\chrome.manifest
c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\0p5bovp@bobhr-.com\content\bg.js
c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\0p5bovp@bobhr-.com\install.rdf
c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\74oai@uo-qik.edu
c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\74oai@uo-qik.edu\bootstrap.js
c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\74oai@uo-qik.edu\chrome.manifest
c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\74oai@uo-qik.edu\content\bg.js
c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\74oai@uo-qik.edu\install.rdf
c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\wliii_oya@aftl-kheuoa.com
c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\wliii_oya@aftl-kheuoa.com\bootstrap.js
c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\wliii_oya@aftl-kheuoa.com\chrome.manifest
c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\wliii_oya@aftl-kheuoa.com\content\bg.js
c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\extensions\wliii_oya@aftl-kheuoa.com\install.rdf
c:\users\Schule\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba
c:\users\Schule\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\background.html
c:\users\Schule\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\content.js
c:\users\Schule\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\LHkDVr3Y.js
c:\users\Schule\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\lsdb.js
c:\users\Schule\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\manifest.json
c:\users\Schule\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\0p5bovp@bobhr-.com
c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\0p5bovp@bobhr-.com\bootstrap.js
c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\0p5bovp@bobhr-.com\chrome.manifest
c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\0p5bovp@bobhr-.com\content\bg.js
c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\0p5bovp@bobhr-.com\install.rdf
c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\74oai@uo-qik.edu
c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\74oai@uo-qik.edu\bootstrap.js
c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\74oai@uo-qik.edu\chrome.manifest
c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\74oai@uo-qik.edu\content\bg.js
c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\74oai@uo-qik.edu\install.rdf
c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\wliii_oya@aftl-kheuoa.com
c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\wliii_oya@aftl-kheuoa.com\bootstrap.js
c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\wliii_oya@aftl-kheuoa.com\chrome.manifest
c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\wliii_oya@aftl-kheuoa.com\content\bg.js
c:\users\Schule\AppData\Roaming\Mozilla\Firefox\Profiles\csusmw1n.default\extensions\staged\wliii_oya@aftl-kheuoa.com\install.rdf
c:\users\SERVER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba
c:\users\SERVER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\background.html
c:\users\SERVER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\content.js
c:\users\SERVER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\LHkDVr3Y.js
c:\users\SERVER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\lsdb.js
c:\users\SERVER\AppData\Local\Google\Chrome\User Data\Default\Extensions\gnnlogcccgfcaamcaalbgffiphmhfkba\4.61\manifest.json
c:\users\SERVER\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\0p5bovp@bobhr-.com
c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\0p5bovp@bobhr-.com\bootstrap.js
c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\0p5bovp@bobhr-.com\chrome.manifest
c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\0p5bovp@bobhr-.com\content\bg.js
c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\0p5bovp@bobhr-.com\install.rdf
c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\74oai@uo-qik.edu
c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\74oai@uo-qik.edu\bootstrap.js
c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\74oai@uo-qik.edu\chrome.manifest
c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\74oai@uo-qik.edu\content\bg.js
c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\74oai@uo-qik.edu\install.rdf
c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\wliii_oya@aftl-kheuoa.com
c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\wliii_oya@aftl-kheuoa.com\bootstrap.js
c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\wliii_oya@aftl-kheuoa.com\chrome.manifest
c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\wliii_oya@aftl-kheuoa.com\content\bg.js
c:\users\SERVER\AppData\Roaming\Mozilla\Firefox\Profiles\c3n0ja05.default\Extensions\wliii_oya@aftl-kheuoa.com\install.rdf
c:\windows\SysWow64\Packet.dll
c:\windows\SysWow64\pthreadVC.dll
c:\windows\SysWow64\wpcap.dll
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_NPF
-------\Service_npf
.
.
(((((((((((((((((((((((   Dateien erstellt von 2014-01-13 bis 2014-02-13  ))))))))))))))))))))))))))))))
.
.
2014-02-13 16:03 . 2014-02-13 16:03	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2014-02-13 16:03 . 2014-02-13 16:03	--------	d-----w-	c:\users\Karin\AppData\Local\temp
2014-02-13 16:03 . 2014-02-13 16:03	--------	d-----w-	c:\users\Default\AppData\Local\temp
2014-02-13 16:03 . 2014-02-13 16:03	--------	d-----w-	c:\users\Besucher\AppData\Local\temp
2014-02-13 16:03 . 2014-02-13 16:03	--------	d-----w-	c:\users\SERVER\AppData\Local\temp
2014-02-13 16:03 . 2014-02-13 16:03	--------	d-----w-	c:\users\Schule\AppData\Local\temp
2014-02-13 16:03 . 2014-02-13 16:03	--------	d-----w-	c:\users\Gast\AppData\Local\temp
2014-02-12 13:26 . 2014-02-12 13:33	--------	d-----w-	C:\FRST
2014-02-11 13:49 . 2013-12-04 03:28	10315576	----a-w-	c:\programdata\Microsoft\Windows Defender\Definition Updates\{DBAAAE59-784E-4742-920D-5EA7ACF217E0}\mpengine.dll
2014-02-06 18:18 . 2014-02-06 18:18	--------	d-----w-	c:\users\Besucher\AppData\Roaming\LibreOffice
2014-02-06 18:16 . 2014-02-06 18:16	--------	d-----w-	c:\users\Besucher\AppData\Roaming\OpenOffice.org
2014-02-05 19:35 . 2014-02-10 19:30	--------	d-----w-	c:\program files (x86)\Mozilla Thunderbird
2014-01-31 15:03 . 2014-01-31 15:04	--------	d-----w-	c:\programdata\EXEcheckker
2014-01-31 15:03 . 2014-01-31 15:03	--------	d-----w-	c:\programdata\okdlfihameoodkafnckcnpfidcndgekh
2014-01-29 19:27 . 2014-01-29 19:28	--------	d-----w-	c:\programdata\ApPtoU
2014-01-29 19:27 . 2014-01-31 15:04	--------	d-----w-	c:\programdata\2ff1ddb567438de4
2014-01-29 19:27 . 2014-01-29 19:27	--------	d-----w-	c:\programdata\shoppnnDroop
2014-01-29 19:27 . 2014-01-29 19:27	--------	d-----w-	c:\programdata\hehonoiddkebnfobcdlakohjokfldcmh
2014-01-27 16:24 . 2014-01-27 16:24	96168	----a-w-	c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-01-27 16:21 . 2014-01-27 16:21	312744	----a-w-	c:\windows\system32\javaws.exe
2014-01-27 16:21 . 2014-01-27 16:21	108968	----a-w-	c:\windows\system32\WindowsAccessBridge-64.dll
2014-01-27 16:21 . 2014-01-27 16:21	189352	----a-w-	c:\windows\system32\javaw.exe
2014-01-27 16:21 . 2014-01-27 16:21	189352	----a-w-	c:\windows\system32\java.exe
2014-01-27 16:11 . 2014-01-27 16:11	--------	d-----w-	c:\program files\iPod
2014-01-27 16:11 . 2014-01-27 16:12	--------	d-----w-	c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-27 16:11 . 2014-01-27 16:12	--------	d-----w-	c:\program files\iTunes
2014-01-27 16:11 . 2014-01-27 16:12	--------	d-----w-	c:\program files (x86)\iTunes
2014-01-25 15:52 . 2014-01-25 15:52	--------	d-----w-	c:\program files (x86)\DsNET Corp
2014-01-25 15:30 . 2014-01-25 15:30	--------	d-----w-	c:\users\Marco\dwhelper
2014-01-15 17:29 . 2014-01-15 17:29	--------	d-----w-	c:\users\Marco\Telekom
2014-01-15 13:27 . 2013-11-27 01:41	343040	----a-w-	c:\windows\system32\drivers\usbhub.sys
2014-01-15 13:27 . 2013-11-27 01:41	99840	----a-w-	c:\windows\system32\drivers\usbccgp.sys
2014-01-15 13:27 . 2013-11-27 01:41	53248	----a-w-	c:\windows\system32\drivers\usbehci.sys
2014-01-15 13:27 . 2013-11-27 01:41	325120	----a-w-	c:\windows\system32\drivers\usbport.sys
2014-01-15 13:27 . 2013-11-27 01:41	30720	----a-w-	c:\windows\system32\drivers\usbuhci.sys
2014-01-15 13:27 . 2013-11-27 01:41	25600	----a-w-	c:\windows\system32\drivers\usbohci.sys
2014-01-15 13:27 . 2013-11-27 01:41	7808	----a-w-	c:\windows\system32\drivers\usbd.sys
2014-01-15 13:27 . 2013-11-26 10:32	3156480	----a-w-	c:\windows\system32\win32k.sys
2014-01-15 13:27 . 2013-11-26 11:40	376768	----a-w-	c:\windows\system32\drivers\netio.sys
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-05 19:32 . 2012-05-29 19:49	71048	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-02-05 19:32 . 2012-05-29 19:49	692616	----a-w-	c:\windows\SysWow64\FlashPlayerApp.exe
2014-01-31 14:32 . 2014-01-13 17:52	80184	----a-w-	c:\windows\system32\drivers\aswstm.sys
2014-01-31 14:32 . 2011-07-21 07:15	1038072	----a-w-	c:\windows\system32\drivers\aswSnx.sys
2014-01-31 14:32 . 2011-07-21 07:15	421704	----a-w-	c:\windows\system32\drivers\aswSP.sys
2014-01-31 14:32 . 2011-07-21 07:15	78648	----a-w-	c:\windows\system32\drivers\aswMonFlt.sys
2014-01-31 14:32 . 2011-07-21 07:15	334136	----a-w-	c:\windows\system32\aswBoot.exe
2014-01-31 14:32 . 2011-07-21 07:14	43152	----a-w-	c:\windows\avastSS.scr
2014-01-31 14:32 . 2013-03-21 12:53	440672	----a-w-	c:\windows\system32\drivers\aswNdisFlt.sys
2014-01-16 15:22 . 2011-01-29 16:10	86054176	----a-w-	c:\windows\system32\MRT.exe
2014-01-16 08:59 . 2012-07-13 17:03	270496	------w-	c:\windows\system32\MpSigStub.exe
2014-01-13 17:51 . 2013-03-21 12:53	207904	----a-w-	c:\windows\system32\drivers\aswVmm.sys
2013-11-23 18:26 . 2013-12-12 12:15	417792	----a-w-	c:\windows\SysWow64\WMPhoto.dll
2013-11-23 17:47 . 2013-12-12 12:15	465920	----a-w-	c:\windows\system32\WMPhoto.dll
2010-01-26 22:11 . 2011-01-23 10:01	444283	----a-w-	c:\program files (x86)\Common Files\WinPcapNmap.exe
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}"= "c:\program files (x86)\IncrediMail_MediaBar_2\tbIncr.dll" [2010-09-12 3863136]
"{b106b661-3e1b-4015-af5c-195e909f35c6}"= "c:\program files (x86)\NCH_DE\tbNCH_.dll" [2010-12-09 3911776]
.
[HKEY_CLASSES_ROOT\clsid\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}]
.
[HKEY_CLASSES_ROOT\clsid\{b106b661-3e1b-4015-af5c-195e909f35c6}]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{1F4F33F5-C394-63B9-6E09-59C72C1BBD82}]
2014-01-31 15:03	423424	----a-w-	c:\programdata\EXEcheckker\wSjqqm.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-09-12 14:02	3863136	----a-w-	c:\program files (x86)\ConduitEngine\ConduitEngine.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{9E180093-CF8E-58CF-D3C9-396A9DEB930E}]
2014-01-29 19:27	427008	----a-w-	c:\programdata\shoppnnDroop\rrVS8cpa8.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{b106b661-3e1b-4015-af5c-195e909f35c6}]
2010-12-09 11:51	3911776	----a-w-	c:\program files (x86)\NCH_DE\tbNCH_.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2010-02-04 14:50	1197448	----a-w-	c:\program files (x86)\Ask.com\GenericAskToolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}]
2010-09-12 14:02	3863136	----a-w-	c:\program files (x86)\IncrediMail_MediaBar_2\tbIncr.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{EB54F8FF-CEF4-7E60-4CB8-91E2782EECB9}]
2014-01-29 19:28	425984	----a-w-	c:\programdata\ApPtoU\LhPSOD.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
"{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}"= "c:\program files (x86)\IncrediMail_MediaBar_2\tbIncr.dll" [2010-09-12 3863136]
"{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files (x86)\ConduitEngine\ConduitEngine.dll" [2010-09-12 3863136]
"{b106b661-3e1b-4015-af5c-195e909f35c6}"= "c:\program files (x86)\NCH_DE\tbNCH_.dll" [2010-12-09 3911776]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2010-02-04 1197448]
.
[HKEY_CLASSES_ROOT\clsid\{d40b90b4-d3b1-4d6b-a5d7-dc041c1b76c0}]
.
[HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
.
[HKEY_CLASSES_ROOT\clsid\{b106b661-3e1b-4015-af5c-195e909f35c6}]
.
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1]
@="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}"
[HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
2013-05-29 09:28	220632	----a-w-	c:\users\Marco\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2]
@="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}"
[HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
2013-05-29 09:28	220632	----a-w-	c:\users\Marco\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3]
@="{BBACC218-34EA-4666-9D7A-C78F2274A524}"
[HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
2013-05-29 09:28	220632	----a-w-	c:\users\Marco\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\SkyDriveShell.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54	131248	----a-w-	c:\users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54	131248	----a-w-	c:\users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-09-10 23:54	131248	----a-w-	c:\users\Marco\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 02:40	120176	----a-w-	c:\program files (x86)\EgisTec MyWinLocker\x86\PSDProtect.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"phonostarTimer"="c:\program files (x86)\phonostar-Player\phonostarTimer.exe" [2011-06-20 40960]
"ICQ"="c:\users\Marco\AppData\Roaming\ICQM\icq.exe" [2014-01-08 33664344]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584]
"Speech Recognition"="c:\windows\Speech\Common\sapisvr.exe" [2009-07-14 44544]
"DS3 Tool"="c:\program files\MotioninJoy\ds3\DS3_Tool.exe" [2010-10-02 92672]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2013-11-14 20584608]
"F8D9AE2CB9E5983DE40F824224AE867E4C19679F._service_run"="c:\program files (x86)\Google\Chrome\Application\chrome.exe" [2014-01-23 866584]
"GoogleDriveSync"="c:\program files (x86)\Google\Drive\googledrivesync.exe" [2013-12-06 20203904]
"ApplePhotoStreams"="c:\program files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe" [2013-04-05 59720]
"iCloudServices"="c:\program files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe" [2013-04-05 59720]
"MusicManager"="c:\users\Marco\AppData\Local\Programs\Google\MusicManager\MusicManager.exe" [2013-11-12 7380992]
"LiveSupport"="c:\program files (x86)\LiveSupport\LiveSupport.exe" [2013-11-07 658944]
"PegtopPStart"="c:\program files (x86)\Pegtop\PStart\PStart.exe" [2013-12-14 786952]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2010-04-13 284696]
"SuiteTray"="c:\program files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe" [2010-05-27 337264]
"EgisUpdate"="c:\program files (x86)\EgisTec IPS\EgisUpdate.exe" [2010-03-11 201584]
"EgisTecPMMUpdate"="c:\program files (x86)\EgisTec IPS\PmmUpdate.exe" [2010-03-11 407920]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-02-28 35696]
"BackupManagerTray"="c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" [2010-06-28 265984]
"LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-08-10 975952]
"ArcSoft Connection Service"="c:\program files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe" [2010-10-27 207424]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-04-21 59720]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]
"Acrobat Assistant 8.0"="c:\program files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe" [2013-12-21 3478392]
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2013-05-01 421888]
"PDFPrint"="c:\program files (x86)\PDF24\pdf24.exe" [2013-07-22 162856]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2014-01-31 3767096]
"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2013-11-01 152392]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
.
c:\users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
Dropbox.lnk - c:\users\Marco\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-1-3 30714328]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Logitech SetPoint.lnk - c:\program files\Logitech\SetPoint\SetPoint.exe [2013-7-20 1207312]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
"aux2"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 LMIInfo;LogMeIn Kernel Information Provider;c:\program files (x86)\LogMeIn\x64\RaInfo.sys;c:\program files (x86)\LogMeIn\x64\RaInfo.sys [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 avmeject;AVM Eject;c:\windows\system32\drivers\avmeject.sys;c:\windows\SYSNATIVE\drivers\avmeject.sys [x]
R3 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe;c:\program files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe [x]
R3 FWLANUSB;AVM FRITZ!WLAN;c:\windows\system32\DRIVERS\fwlanusb.sys;c:\windows\SYSNATIVE\DRIVERS\fwlanusb.sys [x]
R3 GigasetGenericUSB_x64;GigasetGenericUSB_x64;c:\windows\system32\DRIVERS\GigasetGenericUSB_x64.sys;c:\windows\SYSNATIVE\DRIVERS\GigasetGenericUSB_x64.sys [x]
R3 LEqdUsb;Logitech SetPoint Unifying KMDF USB Filter;c:\windows\system32\DRIVERS\LEqdUsb.Sys;c:\windows\SYSNATIVE\DRIVERS\LEqdUsb.Sys [x]
R3 LHidEqd;Logitech SetPoint Unifying KMDF HID Filter;c:\windows\system32\DRIVERS\LHidEqd.Sys;c:\windows\SYSNATIVE\DRIVERS\LHidEqd.Sys [x]
R3 libusb0;LibUsb-Win32 - Kernel Driver, Version 0.1.10.1;c:\windows\system32\drivers\libusb0.sys;c:\windows\SYSNATIVE\drivers\libusb0.sys [x]
R3 LVRS64;Logitech RightSound Filter Driver;c:\windows\system32\DRIVERS\lvrs64.sys;c:\windows\SYSNATIVE\DRIVERS\lvrs64.sys [x]
R3 LVUVC64;Logitech Webcam 200(UVC);c:\windows\system32\DRIVERS\lvuvc64.sys;c:\windows\SYSNATIVE\DRIVERS\lvuvc64.sys [x]
R3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver;c:\windows\system32\DRIVERS\MijXfilt.sys;c:\windows\SYSNATIVE\DRIVERS\MijXfilt.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\Drivers\RtsUStor.sys;c:\windows\SYSNATIVE\Drivers\RtsUStor.sys [x]
R3 RTL8192cu;Realtek RTL8192CU Wireless LAN 802.11n USB 2.0 Network Adapter;c:\windows\system32\DRIVERS\RTL8192cu.sys;c:\windows\SYSNATIVE\DRIVERS\RTL8192cu.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TurboBoost;TurboBoost;c:\program files\Intel\TurboBoost\TurboBoost.exe;c:\program files\Intel\TurboBoost\TurboBoost.exe [x]
R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]
R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WsAudio_Device;WsAudio_Device;c:\windows\system32\drivers\VirtualAudio.sys;c:\windows\SYSNATIVE\drivers\VirtualAudio.sys [x]
R3 WSDScan;WSD-Scanunterstützung durch UMB;c:\windows\system32\drivers\WSDScan.sys;c:\windows\SYSNATIVE\drivers\WSDScan.sys [x]
S0 aswRvrt;avast! Revert; [x]
S0 aswVmm;avast! VM Monitor; [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys;c:\windows\SYSNATIVE\DRIVERS\nvpciflt.sys [x]
S1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys;c:\windows\SYSNATIVE\drivers\aswKbd.sys [x]
S1 aswNdisFlt;Avast! Firewall Driver;c:\windows\system32\DRIVERS\aswNdisFlt.sys;c:\windows\SYSNATIVE\DRIVERS\aswNdisFlt.sys [x]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x]
S1 mwlPSDFilter;mwlPSDFilter;c:\windows\system32\DRIVERS\mwlPSDFilter.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDFilter.sys [x]
S1 mwlPSDNServ;mwlPSDNServ;c:\windows\system32\DRIVERS\mwlPSDNServ.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDNServ.sys [x]
S1 mwlPSDVDisk;mwlPSDVDisk;c:\windows\system32\DRIVERS\mwlPSDVDisk.sys;c:\windows\SYSNATIVE\DRIVERS\mwlPSDVDisk.sys [x]
S2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2010/11/05 23:01];c:\program files (x86)\CyberLink\PowerDVD9\000.fcl;c:\program files (x86)\CyberLink\PowerDVD9\000.fcl [x]
S2 70e6ca8c;Optimizer Pro Crash Monitor;c:\windows\system32\rundll32.exe;c:\windows\SYSNATIVE\rundll32.exe [x]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x]
S2 AtherosSvc;AtherosSvc;c:\program files (x86)\Bluetooth Suite\adminservice.exe;c:\program files (x86)\Bluetooth Suite\adminservice.exe [x]
S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe;c:\program files\AVAST Software\Avast\afwServ.exe [x]
S2 BBSvc;BingBar Service;c:\program files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.exe;c:\program files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.exe [x]
S2 cvhsvc;Client Virtualization Handler;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE;c:\program files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [x]
S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe;c:\program files (x86)\Launch Manager\dsiwmis.exe [x]
S2 ePowerSvc;Acer ePower Service;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe;c:\program files\Acer\Acer ePower Management\ePowerSvc.exe [x]
S2 FreemakeVideoCapture;FreemakeVideoCapture;c:\program files (x86)\Freemake\CaptureLib\CaptureLibService.exe;c:\program files (x86)\Freemake\CaptureLib\CaptureLibService.exe [x]
S2 GREGService;GREGService;c:\program files (x86)\Acer\Registration\GREGsvc.exe;c:\program files (x86)\Acer\Registration\GREGsvc.exe [x]
S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [x]
S2 Megatech-Software-Protection;Megatech Software Protection;c:\program files (x86)\Megatech\MProtect\MPServ.EXE;c:\program files (x86)\Megatech\MProtect\MPServ.EXE [x]
S2 MWLService;MyWinLocker Service;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe;c:\program files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [x]
S2 NOBU;Norton Online Backup;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE;c:\program files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe SERVICE [x]
S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe;c:\program files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [x]
S2 sftlist;Application Virtualization Client;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftlist.exe [x]
S2 SProtection;SProtection;c:\program files (x86)\Common Files\Umbrella\Umbrella.exe;c:\program files (x86)\Common Files\Umbrella\Umbrella.exe [x]
S2 TeamViewer9;TeamViewer 9;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe;c:\program files (x86)\TeamViewer\Version9\TeamViewer_Service.exe [x]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys;c:\windows\SYSNATIVE\DRIVERS\TurboB.sys [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S2 Updater Service;Updater Service;c:\program files\Acer\Acer Updater\UpdaterService.exe;c:\program files\Acer\Acer Updater\UpdaterService.exe [x]
S2 WajamUpdaterV3;WajamUpdaterV3;c:\program files (x86)\Wajam\Updater\WajamUpdaterV3.exe;c:\program files (x86)\Wajam\Updater\WajamUpdaterV3.exe [x]
S2 WinkHandler;WinkHandler;c:\program files (x86)\Iminent\WinkHandler.exe;c:\program files (x86)\Iminent\WinkHandler.exe [x]
S3 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x]
S3 avmaudio;AVM Audio;c:\windows\system32\DRIVERS\avmaudio.sys;c:\windows\SYSNATIVE\DRIVERS\avmaudio.sys [x]
S3 BTATH_BUS;Atheros Bluetooth Bus;c:\windows\system32\DRIVERS\btath_bus.sys;c:\windows\SYSNATIVE\DRIVERS\btath_bus.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
S3 MonitorFunction;Driver for Monitor;c:\windows\system32\DRIVERS\TVMonitor.sys;c:\windows\SYSNATIVE\DRIVERS\TVMonitor.sys [x]
S3 Sftfs;Sftfs;c:\windows\system32\DRIVERS\Sftfslh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftfslh.sys [x]
S3 Sftplay;Sftplay;c:\windows\system32\DRIVERS\Sftplaylh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftplaylh.sys [x]
S3 Sftredir;Sftredir;c:\windows\system32\DRIVERS\Sftredirlh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftredirlh.sys [x]
S3 Sftvol;Sftvol;c:\windows\system32\DRIVERS\Sftvollh.sys;c:\windows\SYSNATIVE\DRIVERS\Sftvollh.sys [x]
S3 sftvsa;Application Virtualization Service Agent;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe;c:\program files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [x]
S3 teamviewervpn;TeamViewer VPN Adapter;c:\windows\system32\DRIVERS\teamviewervpn.sys;c:\windows\SYSNATIVE\DRIVERS\teamviewervpn.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2014-01-28 19:44	1211672	----a-w-	c:\program files (x86)\Google\Chrome\Application\32.0.1700.102\Installer\chrmstp.exe
.
Inhalt des "geplante Tasks" Ordners
.
2014-02-13 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-05-29 19:32]
.
2014-02-13 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-04 18:36]
.
2014-02-13 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-02-04 18:36]
.
2014-02-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002Core.job
- c:\users\Marco\AppData\Local\Google\Update\GoogleUpdate.exe [2013-08-22 10:24]
.
2014-02-13 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002UA.job
- c:\users\Marco\AppData\Local\Google\Update\GoogleUpdate.exe [2013-08-22 10:24]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{1F4F33F5-C394-63B9-6E09-59C72C1BBD82}]
2014-01-31 15:03	471552	----a-w-	c:\programdata\EXEcheckker\wSjqqm.x64.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{9E180093-CF8E-58CF-D3C9-396A9DEB930E}]
2014-01-29 19:27	476672	----a-w-	c:\programdata\shoppnnDroop\rrVS8cpa8.x64.dll
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{EB54F8FF-CEF4-7E60-4CB8-91E2782EECB9}]
2014-01-29 19:28	475136	----a-w-	c:\programdata\ApPtoU\LhPSOD.x64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-01-31 14:32	287280	----a-w-	c:\program files\AVAST Software\Avast\ashShA64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\egisPSDP]
@="{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}"
[HKEY_CLASSES_ROOT\CLSID\{30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}]
2010-05-27 02:42	137584	----a-w-	c:\program files (x86)\EgisTec MyWinLocker\x64\PSDProtect.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveBlacklistedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42}]
2013-12-06 14:47	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-12-06 14:47	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedEditOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44}]
2013-12-06 14:47	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSharedViewOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43}]
2013-12-06 14:47	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncedOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40}]
2013-12-06 14:47	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\GDriveSyncingOverlay]
@="{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}"
[HKEY_CLASSES_ROOT\CLSID\{81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41}]
2013-12-06 14:47	778704	----a-w-	c:\program files (x86)\Google\Drive\googledrivesync64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"mwlDaemon"="c:\program files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe" [2010-05-27 349552]
"RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-06-22 10920552]
"Acer ePower Management"="c:\program files\Acer\Acer ePower Management\ePowerTray.exe" [2010-06-11 861216]
"CanonMyPrinter"="c:\program files\Canon\MyPrinter\BJMyPrt.exe" [2010-07-26 2782096]
"AdobeAAMUpdater-1.0"="c:\program files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [2012-09-20 444904]
"Logitech Download Assistant"="c:\windows\System32\LogiLDA.dll" [2012-09-20 1832760]
"Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2009-06-17 130576]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2012-01-10 167704]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2012-01-10 392984]
"Persistence"="c:\windows\system32\igfxpers.exe" [2012-01-10 417560]
"AtherosBtStack"="c:\program files (x86)\Bluetooth Suite\btvstack.exe" [2012-10-15 1023104]
"AthBtTray"="c:\program files (x86)\Bluetooth Suite\athbttray.exe" [2012-10-15 801920]
.
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\SharedTaskScheduler]
"{1984DD45-52CF-49cd-AB77-18F378FEA264}"= "c:\program files (x86)\Stardock\Fences\FencesMenu64.dll" [2010-06-22 253288]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://search.conduit.com?SearchSource=10&CUI=UN94176709418576159&ctid=CT3284351
mLocal Page = c:\windows\SysWOW64\blank.htm
uInternet Settings,ProxyOverride = *.local
mSearchAssistant = 
IE: An vorhandene PDF-Datei anfügen - c:\program files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppend.html
IE: Download with Xilisoft Online Video Converter - c:\program files (x86)\Xilisoft\Online Video Converter\upod_link.HTM
IE: In Adobe PDF konvertieren - c:\program files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECapture.html
IE: Linkziel an vorhandene PDF-Datei anhängen - c:\program files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Linkziel in Adobe PDF konvertieren - c:\program files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: {{1F958B09-3312-7f0e-9723-4C1324C57B20} - c:\program files (x86)\Internet Radio\Radio.exe
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\
FF - prefs.js: browser.startup.homepage - hxxp://intragart.selfhost.eu/
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
URLSearchHooks-{84FF7BD6-B47F-46F8-9130-01B2696B36CB} - (no file)
BHO-{64182481-4F71-486b-A045-B233BD0DA8FC} - c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\bh\facemoods.dll
BHO-{84FF7BD6-B47F-46F8-9130-01B2696B36CB} - (no file)
Toolbar-Locked - (no file)
Toolbar-{DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodsTlbr.dll
Wow6432Node-HKCU-Run-Gadwin PrintScreen - c:\program files (x86)\Gadwin Systems\PrintScreen\PrintScreen.exe
Wow6432Node-HKCU-Run-MobileDocuments - c:\program files (x86)\Common Files\Apple\Internet Services\ubd.exe
Wow6432Node-HKCU-Run-StoppUhr - (no file)
Wow6432Node-HKLM-Run-facemoods - c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\facemoodssrv.exe
Wow6432Node-HKLM-Run-TaskTray - (no file)
Wow6432Node-HKLM-Run-Aimersoft Helper Compact.exe - c:\program files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe
Wow6432Node-HKLM-Run-BrowserPlugInHelper - c:\program files (x86)\Aimersoft\Video Converter Ultimate\BrowserPlugInHelper.exe
Wow6432Node-HKLM-Run-<NO NAME> - (no file)
Wow6432Node-HKLM-Run-Iminent - c:\program files (x86)\Iminent\Iminent.exe
Wow6432Node-HKLM-Run-IminentMessenger - c:\program files (x86)\Iminent\Iminent.Messengers.exe
Wow6432Node-HKU-Default-RunOnce-SPReview - c:\windows\System32\SPReview\SPReview.exe
c:\users\Schule\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe
c:\users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe
c:\users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Socialbox.lnk - c:\program files (x86)\Socialbox\Socialbox.exe
BHO-{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - c:\program files (x86)\Hotspot Shield\HssIE\HssIE_64.dll
Toolbar-Locked - (no file)
WebBrowser-{D40B90B4-D3B1-4D6B-A5D7-DC041C1B76C0} - (no file)
WebBrowser-{30F9B915-B755-4826-820B-08FBA6BD249D} - (no file)
WebBrowser-{B106B661-3E1B-4015-AF5C-195E909F35C6} - (no file)
ShellIconOverlayIdentifiers-{F241C880-6982-4CE5-8CF7-7085BA96DA5A} - (no file)
ShellIconOverlayIdentifiers-{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} - (no file)
ShellIconOverlayIdentifiers-{BBACC218-34EA-4666-9D7A-C78F2274A524} - (no file)
ShellIconOverlayIdentifiers-{FB314ED9-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDA-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDB-A251-47B7-93E1-CDD82E34AF8B} - (no file)
ShellIconOverlayIdentifiers-{FB314EDC-A251-47B7-93E1-CDD82E34AF8B} - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-LogMeIn GUI - c:\program files (x86)\LogMeIn\x64\LogMeInSystray.exe
AddRemove-Adobe Shockwave Player - c:\windows\system32\Adobe\Shockwave 11\uninstaller.exe
AddRemove-Audacity 1.3 Beta (Unicode)_is1 - c:\program files (x86)\Audacity 1.3 Beta (Unicode)\unins000.exe
AddRemove-AutocompletePro3_is1 - c:\program files (x86)\AutocompletePro\unins000.exe
AddRemove-DebugMode Wink - c:\program files (x86)\DebugMode\Wink\uninst.exe
AddRemove-facemoods - c:\program files (x86)\facemoods.com\facemoods\1.4.17.7\uninstall.exe
AddRemove-Gadwin PrintScreen - c:\program files (x86)\Gadwin Systems\PrintScreen\Uninstall.exe
AddRemove-PMG_is1 - c:\program files (x86)\PMG\unins000.exe
AddRemove-Shockwave - c:\windows\System32\Macromed\SHOCKW~2\UNWISE.EXE
AddRemove-Super Screen Recorder_is1 - c:\program files (x86)\Zeallsoft\Super Screen Recorder\unins000.exe
AddRemove-VSO DivxToDVD_is1 - c:\program files (x86)\vso\DivxToDVD\unins000.exe
AddRemove-WavePad - c:\program files (x86)\NCH Swift Sound\WavePad\uninst.exe
AddRemove-xHamster Video Downloader_is1 - e:\secret\xHamster Video Downloader\unins000.exe
AddRemove-{01B91C29-337A-1FFD-7CFC-473451D2F861} - c:\programdata\ApPtoU\LhPSOD.exe
AddRemove-{15D2D75C-9CB2-4efd-BAD7-B9B4CB4BC693} - c:\programdata\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\uninstall.exe
AddRemove-{275BD947-F0EF-4B3E-B393-90781665D0F4}_is1 - c:\program files (x86)\Artweaver Plus 1.0\unins000.exe
AddRemove-{7E7FAE3D-3358-D280-8DBF-E8E2D94326D1} - c:\programdata\shoppnnDroop\rrVS8cpa8.exe
AddRemove-{86593088-CB6B-8BD7-2277-397C45F99E2D} - c:\programdata\EXEcheckker\wSjqqm.exe
AddRemove-{E63E34A7-E552-412B-9E40-FD6FC5227ABA}_is1 - c:\program files (x86)\Uniblue\RegistryBooster\unins000.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{B154377D-700F-42cc-9474-23858FBDF4BD}]
"ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD9\000.fcl"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.htm\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.shtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xht\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.xhtml\UserChoice]
@Denied: (2) (LocalSystem)
"Progid"="ChromeHTML"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID]
@DACL=(02 0000)
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}]
@DACL=(02 0000)
@="Dropbox Autoplay COM Server"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}]
@DACL=(02 0000)
@="SyncingOverlayHandler Class"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}]
@DACL=(02 0000)
@="ErrorOverlayHandler Class"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_03"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_04"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_05"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_01"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_01"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_02"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_02"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_03"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_03"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_04"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_04"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_05"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_05"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_06"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_06"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_07"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_07"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_08"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_08"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_09"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_09"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_10"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_10"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_11"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_11"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_12"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_12"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_13"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_13"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_14"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_14"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_15"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_15"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_16"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_16"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_17"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_17"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_18"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_18"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_19"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_19"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_20"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_20"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_21"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_21"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_01"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_01"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_02"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_02"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_03"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_03"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_04"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_04"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_01"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_01"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_02"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_02"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_03"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_03"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_04"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_04"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_05"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_05"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_06"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_06"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_07"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_07"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_01"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_01"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_02"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_02"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_03"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_03"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_04"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_04"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_05"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_05"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_06"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_06"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_07"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_07"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_08"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_08"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_09"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_09"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_10"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_10"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_11"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_11"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_12"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_12"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_13"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_13"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_14"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_14"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_15"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_15"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_16"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_16"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_17"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_17"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_18"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_18"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_19"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_19"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_20"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_20"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_21"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_21"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_22"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_22"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_23"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_23"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_24"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_24"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_25"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_25"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_26"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_26"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_27"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_27"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_28"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_28"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_29"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_29"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_30"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_30"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_31"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_31"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_32"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_32"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_33"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_33"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_34"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_34"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_35"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_35"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_36"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_36"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_37"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_37"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_38"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_38"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_39"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_39"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_40"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_40"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_41"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_41"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_42"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_42"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_43"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_43"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_01"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_01"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_01"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_02"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_02"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_02"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_03"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_03"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_03"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_04"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_04"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_04"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_05"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_05"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_05"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_06"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_06"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_06"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_07"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_07"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_07"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_08"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_08"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_08"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_09"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_09"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_09"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_10"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_10"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_10"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_11"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_11"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_11"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_12"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_12"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_12"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_13"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_13"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_13"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_14"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_14"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_14"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_15"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_15"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_15"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_16"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_16"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_16"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_17"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_17"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_17"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_18"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_18"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_18"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_19"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_19"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_19"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_20"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_20"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_20"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_21"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_21"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_21"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_22"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_22"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_22"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_23"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_23"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_23"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_24"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_24"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_24"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_25"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_25"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_25"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_26"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_26"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_26"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_27"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_27"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_27"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_28"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_28"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_28"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_29"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_29"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_29"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_30"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_30"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_30"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_31"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_31"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_31"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_32"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_32"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_32"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_33"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_33"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_33"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_34"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_34"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_34"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_35"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_35"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_35"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_36"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_36"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_36"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_37"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_37"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_37"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_38"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_38"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_38"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_39"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_39"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_39"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_40"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_40"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_40"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_41"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_41"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_41"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_42"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_42"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_42"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_43"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_43"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_43"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_44"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_44"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_44"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_45"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_45"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_45"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_46"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_46"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_46"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_47"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_47"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_47"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_48"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_48"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_48"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_49"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_49"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_49"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_50"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_50"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_50"
.
         


Alt 13.02.2014, 16:42   #6
MarcoW
 
100% Pysikalischer Speicher durch svchost.exe - Standard

100% Pysikalischer Speicher durch svchost.exe



Hier der zweite Teil, Code war zu lang

Code:
ATTFilter
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_51"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_51"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_51"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_52"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_52"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_52"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_53"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_53"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_53"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_54"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_54"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_54"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_55"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_55"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_55"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_56"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_56"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_56"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_57"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_57"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_57"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_58"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_58"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_58"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_59"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_59"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_59"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_60"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_60"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_60"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_61"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_61"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_61"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_01"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_01"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_01"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_02"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_02"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_02"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_03"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_03"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_03"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_04"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_04"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_04"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_05"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_05"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_05"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_06"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_06"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_06"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_07"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_07"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_07"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_08"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_08"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_08"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_09"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_09"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_09"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_10"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_10"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_10"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_11"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_11"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_11"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_12"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_12"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_12"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_13"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_13"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_13"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_14"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_14"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_14"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_15"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_15"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_15"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_16"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_16"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_16"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_17"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_17"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_17"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_18"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_18"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_18"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_19"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_19"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_19"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_20"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_20"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_20"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_21"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_21"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_21"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_22"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_22"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_22"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_23"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_23"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_23"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_24"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_24"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_24"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_25"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_25"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_25"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_26"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_26"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_26"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_27"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_27"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_27"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_28"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_28"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_28"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_29"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_29"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_29"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_30"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_30"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_30"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_31"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_31"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_31"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_32"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_32"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_32"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_33"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_33"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_33"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_34"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_34"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_34"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_35"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_35"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_35"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_36"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_36"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_36"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_37"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_37"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_37"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_38"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_38"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_38"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_39"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_39"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_39"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_40"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_40"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_40"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_41"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_41"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_41"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_42"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_42"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_42"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_43"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_43"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_43"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_44"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_44"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_44"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_45"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_45"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_45"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_46"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_46"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_46"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_47"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_47"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_47"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_48"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_48"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_48"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_49"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_49"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_49"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_50"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_50"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_50"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_51"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_51"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_51"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_52"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_52"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_52"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_53"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_53"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_53"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_54"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_54"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_54"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_55"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_55"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_55"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_56"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_56"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_56"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_57"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_57"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_57"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_58"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_58"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_58"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_59"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_59"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_59"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_60"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_60"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_60"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_61"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_61"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_61"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_62"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_62"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_62"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_63"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_63"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_63"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_64"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_64"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_64"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_65"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_65"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_65"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_66"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_66"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_66"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_67"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_67"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_67"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_68"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_68"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_68"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_69"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_69"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_69"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_70"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_70"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_70"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_71"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_71"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_71"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_01"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_01"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_01"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_02"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_02"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_02"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_03"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_03"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_03"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_04"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_04"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_04"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_05"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_05"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_05"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_06"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_06"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_06"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_07"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_07"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_07"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_08"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_08"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_08"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_09"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_09"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_09"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_10"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_10"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_10"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_11"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_11"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_11"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_12"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_12"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_12"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_13"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_13"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_13"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_14"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_14"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_14"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_15"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_15"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_15"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_16"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_16"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_16"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_17"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_17"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_17"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_18"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_18"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_18"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_19"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_19"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_19"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_20"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_20"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_20"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_21"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_21"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_21"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_22"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_22"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_22"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_23"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_23"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_23"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_24"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_24"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_24"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_25"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_25"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_25"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_26"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_26"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_26"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_27"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_27"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_27"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_28"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_28"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_28"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_29"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_29"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_29"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_30"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_30"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_30"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_31"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_31"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_31"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_32"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_32"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_32"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_33"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_33"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_33"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_34"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_34"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_34"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_35"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_35"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_35"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_36"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_36"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_36"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_37"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_37"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_37"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_38"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_38"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_38"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_39"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_39"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_39"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_40"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_40"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_40"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_41"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_41"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_41"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_42"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_42"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_42"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_43"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_43"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_43"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_44"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_44"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_44"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_45"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_45"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_45"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_46"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_46"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_46"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_47"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_47"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_47"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_48"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_48"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_48"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_49"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_49"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_49"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_50"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_50"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_50"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_51"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_51"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_51"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_02"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}]
@DACL=(02 0000)
@="UpToDateOverlayHandler Class"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}]
@DACL=(02 0000)
@="SyncFileInformationProvider Class"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
@DACL=(02 0000)
@="DropboxExt"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
@DACL=(02 0000)
@="DropboxExt"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
@DACL=(02 0000)
@="DropboxExt"
.
[HKEY_USERS\S-1-5-21-1767309948-3694062471-1967485482-1002_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
@DACL=(02 0000)
@="DropboxExt"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files\AVAST Software\Avast\AvastSvc.exe
c:\windows\SysWOW64\rundll32.exe
c:\program files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\users\Marco\AppData\Local\FilesFrog Update Checker\update_checker.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2014-02-13  17:18:43 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2014-02-13 16:18
.
Vor Suchlauf: 18 Verzeichnis(se), 154.007.314.432 Bytes frei
Nach Suchlauf: 26 Verzeichnis(se), 164.352.839.680 Bytes frei
.
- - End Of File - - 55A5AC42538C7E46F691EF5CC6603FD3
         

Alt 14.02.2014, 14:47   #7
schrauber
/// the machine
/// TB-Ausbilder
 

100% Pysikalischer Speicher durch svchost.exe - Standard

100% Pysikalischer Speicher durch svchost.exe



Da is noch Arbeit

Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.


Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


und ein frisches FRST log bitte.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 14.02.2014, 20:16   #8
MarcoW
 
100% Pysikalischer Speicher durch svchost.exe - Standard

100% Pysikalischer Speicher durch svchost.exe



So, hier die log von Malwarebytes Anti-Malware

Alt 14.02.2014, 21:04   #9
MarcoW
 
100% Pysikalischer Speicher durch svchost.exe - Standard

100% Pysikalischer Speicher durch svchost.exe



Teil 2

Alt 14.02.2014, 21:43   #10
MarcoW
 
100% Pysikalischer Speicher durch svchost.exe - Standard

100% Pysikalischer Speicher durch svchost.exe



Hier die JRT.txt

Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 7 Home Premium x64
Ran by Marco on 14.02.2014 at 22:09:01,85
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully stopped: [Service] 70e6ca8c 
Successfully deleted: [Service] 70e6ca8c 



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\livesupport



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\livesupport
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1767309948-3694062471-1967485482-1002\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1767309948-3694062471-1967485482-1002\Software\wajam
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\installer\upgradecodes\f928123a039649549966d4c29d35b1c9
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\livesupport_is1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{16C8C46E-C811-4977-BF0A-B5CC1FA78D95}
Successfully deleted: [Registry Key] "hkey_current_user\software\microsoft\internet explorer\low rights\elevationpolicy\{a5aa24ea-11b8-4113-95ae-9ed71deaf12a}"



~~~ Files

Successfully deleted: [File] C:\Windows\syswow64\sho6128.tmp



~~~ Folders

Failed to delete: [Folder] "C:\ProgramData\boost_interprocess"
Successfully deleted: [Folder] "C:\ProgramData\{b49a644a-1076-4a3d-b124-daa7862f2318}"
Successfully deleted: [Folder] "C:\Users\Marco\AppData\Roaming\getrighttogo"
Successfully deleted: [Folder] "C:\Program Files (x86)\livesupport"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\livesupport"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\uniblue"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{00328E27-ECE5-4AAE-B65F-BFD94FB8B7FC}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{0077C27F-89A8-4981-B031-25E66D5306DD}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{00E34057-3C3D-4901-995A-AB939DB341B7}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{016FEEC6-F431-47D0-A4A3-298499E27F16}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{02FCBF57-67EA-4F58-89C0-8FA235DD290B}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{0530FB47-A83D-461E-8C16-70D6D1CDDCC1}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{09D00057-2538-4E30-A788-135F0DC0EAB7}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{0A41D001-95CA-4FDF-A7EB-561102168325}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{0B603D1F-30B5-4336-BFC0-A80E262965F3}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{0BDF5B31-F11D-4523-9029-3C992C91A1A6}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{0D16E4D8-CD96-409B-A485-A60EE0707074}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{0DBA3181-9506-40EE-B2C6-A2206CF8DA2F}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{0E007492-A341-408B-992E-73995E56993C}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{0E765305-6317-40D5-BB00-C288EF21C62A}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{1601135D-7F7B-477C-AB42-E6F2F490B9C2}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{16C01B70-1A7D-4DB7-96E3-AFB0F41DCA94}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{17A64D13-A2E5-46D2-8652-4FCB53811F3D}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{17F8F42B-F621-4474-9A89-9713031FCAC8}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{1D09A860-1492-4E78-A8E0-5929CF0F4E24}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{1EC135B6-7646-4B7E-81C0-A60BB65D2C3C}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{210145AB-4CC4-4CB3-92B8-6DDCF3F8E226}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{23E69280-1640-4816-A055-7B5D470E3ADA}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{258CDC8D-24C7-48A2-BF6C-A08E302365AB}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{26E1685C-BDFE-47D0-BEF7-87CDCA1778F1}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{280F3935-0EBD-4143-B43E-A1D74FE6F168}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{28275E8C-F723-4805-AD8A-BFD8198F45CB}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{285B6CB9-5999-4ECA-B9DC-D987F7322832}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{28B06BB9-6543-4E76-97BD-07BA1B931777}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{28F9B051-627B-45A0-9891-8A32D5859099}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{2A820E05-00CE-4A59-9519-5AF70AEB2954}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{2B67AA50-FBCB-4CDA-B8BD-63ACD13A27C7}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{2B7F97B0-9ED3-49B0-81D9-F90166664825}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{2BF14A1A-8A78-4D5D-8330-AB1725C62F39}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{2C979978-E695-480E-A2BA-EF356E4C5A28}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{2D0751F1-4E67-4213-BF87-09F829AA15C9}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{2FC8BA9E-124D-4D12-9868-1C327B84262F}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{2FDA0D96-6389-4C5D-A275-A65516CA04F5}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{305F4F69-6B49-46E2-B391-B896AF5D7ED8}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{30E935D5-F2A1-46E2-BDC8-CB4D53470AFF}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{3168B0C1-5DC4-466B-8524-8BE5B1C67D9F}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{31843E36-03FB-4F0E-BB13-42774CBDF428}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{31D83F41-786A-4D41-87BF-EF9C4DECAE7D}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{32493AC5-2C54-4AD6-B3D2-3DE24461CEF7}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{3252FF8D-00D9-4524-B3E0-DF263E744482}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{32C4E05F-4115-4862-B48A-E0F698C9A0CC}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{338E1398-8CFB-4592-8547-0B1B896CB616}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{39E6C854-45D4-461B-A041-7AB6D52EAD79}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{3C42530F-137F-4B39-A3F9-D68B33682FB3}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{3DE068D2-0105-48D6-8FDF-78E3267F37E4}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{3F57473D-4B5D-4534-95FC-A116C748A965}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{41A3088C-1A56-455D-A5CA-4EECF3417F81}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{42B9F7DA-788B-42E7-A890-7D0A9DE975C9}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{42FFD388-6DDD-4226-9E66-46A079E3FEE5}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{457B415D-65F1-4CF6-856E-70A4D6E682E8}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{4A35FA95-2557-42A5-9993-AA78C24BD90D}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{4B55F971-CD43-4820-A03F-BF20F337E73C}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{4B8A1108-6AA6-46FE-805F-23179D225307}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{4C8C4FD5-90AC-4964-B222-0288100C0237}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{4E054ED2-064D-4B6D-9791-31C35C88C0AE}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{4E3B7D8A-4AFC-489E-8C91-F62440641DBB}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{4E723639-347C-434E-AA50-87C170B8041B}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{4F725FDD-3B33-465D-BB4A-85EC0731091C}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{500EC612-B8F8-4084-9C05-810C930AD9CA}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{5031C446-710D-42FE-AEFD-73C71995847F}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{51385252-05B3-470C-89D6-7D1EB38C9DA2}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{51D7F46C-7152-4457-BCF7-EC55CD9747D1}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{54FBC402-7926-49F3-ACBC-E60AE482E0BC}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{55667ADA-5A3F-4482-8524-1D5F0A18C9E1}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{56FFEC00-3948-4970-972E-D2463BB9287D}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{587BC827-1134-47D8-97BB-929CFF719ADD}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{5BE92689-0DDA-45E9-BA4D-CC7939729903}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{5C2B7928-395F-4DCB-9F01-E36E0EA6E91A}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{5CAF6CC5-47A7-4FF5-A2FB-67E1ABB298CF}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{5D00FB63-3A1E-46B6-AC65-34C5AF4979ED}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{5F624BB3-9D78-424E-9C8C-8F330934693C}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{5FAD0AA9-9C41-4DB7-B51F-F0674C97FB80}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{61A16B8F-6538-4D8E-B760-9BA31B67B7C4}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6227A473-8FB4-4983-ACDA-C00D61356FA7}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{626851C7-84AE-41B2-8A60-0EE30C82A040}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{64CDFAD5-778C-4DD9-AAF7-EE1005A1412D}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6731DE32-6829-4A38-9EE1-B9E56C9D4E84}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{678E1AF5-1631-4176-A39C-1C2199A3A191}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6857FCBC-12C4-4CCD-8F51-85EAC2807F78}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6898193E-FDD6-433E-BBAB-E0CD7F67BF9F}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{68C694CC-ACA2-4D0E-844A-DF75E7072C59}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{69684DFD-1D3D-4ACC-9609-CB66D29A86A6}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6A0D2CD5-D228-44EE-9AF7-4D11A53A3934}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6B7321F2-37D6-4383-94F2-43C50EE56A74}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6CC3E1DF-0FE8-43F3-8534-D13078994164}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6D87F75E-7956-4E8C-A988-FD71AD08F6CD}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6D9A1DE3-008B-4B27-BB60-80258236C621}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6DDB77C8-5620-4383-A74A-BBB3C11305F4}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{6E5E42A1-864C-42BE-B43D-32CF3E65F50D}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{70E1DC40-67D3-4BD6-AA28-2B9D2768FAA9}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{71ACE107-850C-4BA0-AA67-950297FBAD76}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{7464DCEA-160E-4165-B91B-CCC681C06055}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{76727A40-93AA-464E-958C-04617101C347}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{77FB4586-C81F-456F-B8E1-C379F689FDB7}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{785F34EC-7391-4B3B-A148-63B52BCEF23D}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{78C6F625-F628-471E-A9F8-5904AD9FA3B9}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{78C95CEB-A536-48BC-881A-B182DFEB1361}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{793401E9-2297-48EF-8E3E-61798B23B3F1}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{7A125F1F-942C-4602-9F83-C244BA37AE06}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{7AB9F808-990A-4308-8CC8-5F749F6A4541}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{7B2BAF0E-3BDE-4BE5-9836-284A5DFB393A}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{7C7F84BD-86EF-4FC2-88BF-9962E8416D8C}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{7CB2EE2B-50FE-44FE-B72A-5327EFFBB81C}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{7F71E67C-9D41-4B39-A16F-02B04937BDC1}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{7F87997F-C71B-4061-B84B-1103BCEC8F1A}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{80AFF7BA-CE56-4F88-848C-033A0969F1ED}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{8128D934-9E3D-4B85-8B9D-26D088860A32}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{8188300C-AB7D-4F92-A1D8-B3A9821C45BF}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{819479B4-2AA2-4539-9A42-1695D974DF2D}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{82B4507C-06B0-4942-8A5B-81A6ACEFD46D}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{82C3946D-9496-4917-8F3F-A558F9F6A273}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{83C9BA1A-09DD-4654-AD74-0F163B95C53D}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{844F31DC-B6F8-45F5-9E87-4CFA4A5ABD0B}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{86674A0D-C8BC-4614-9822-978C52303644}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{89D3EAB9-8D4F-4EF5-8753-F82E4113099F}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{8CF8948A-CA57-4EA6-8A53-9DB6CAB42F8F}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{8E934D06-3FC3-4EF3-97D7-9B41473093C0}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{8ED3492F-401E-4DC9-92F9-BA0D56D4220B}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{8EF59A11-7DE3-4BED-9328-190BCDA98D54}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{8F88AA1B-72AB-4880-8B96-69588D36ADFB}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{8F8ADA8C-36A4-4B40-98CB-B15610CC1A3D}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{929B966C-68D9-4A87-9799-A7D1F3B918AA}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{93325E3C-9AC6-4E43-AF8A-27F686AC7556}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{9441D59B-3316-4623-A602-78837A2B7424}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{9559BF77-E9B5-4FE3-B280-676F1D9D9CFC}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{9627BF43-E6DF-444A-8ECE-1D53F08FD561}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{963BAF84-7226-4D20-B39E-4D40C7B19FD7}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{9714B22C-1163-4199-BF04-0FCB7DD02EC0}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{979251E9-36BF-4934-BDAE-B583C1F52EDF}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{989537C0-F487-4EF6-B6C6-E3F94091F1ED}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{98BA9408-E405-4740-9733-2544391D394E}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{992EF126-8A8E-4FC6-BBDD-4C1DF4BF4D70}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{997EC560-684B-4CDC-A634-6D5222F6CBA8}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{99C2A44F-D08E-4D75-94C0-A0972D5C16D8}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{9A2FB952-35BE-4E89-88E6-D2D07A6699CA}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{9A45E190-4DFC-4E72-8046-F744338F32EE}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{9B20677B-D4A1-4423-95F3-783039FD6991}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{9B489879-1F71-4922-935A-DDCB690249DA}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{9F05EE23-6205-4A10-82E9-1077B51EDFD3}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{9F0710F7-4D43-43F8-9DA2-DE5C749F6F0F}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A00DD6EB-4DC4-469F-AC11-0191F85C1C33}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A0BA7B4E-C938-4134-ACA4-183947A23090}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A1223706-99CE-488C-82CD-4B48F4FF31E2}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A1D6AB9E-435A-4778-89E7-7B788E1FC859}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A3104EC8-B1DC-44D0-8263-EFCF2104567E}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A484CC98-F554-440B-82E4-DBC9445125A4}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A5630CA6-AAF1-484D-B52D-84EE6D2B3CE7}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A58F7A35-ED6B-4639-90E2-6B8EBAB39C1E}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A5A0F41E-B272-43DC-9284-9411D988C507}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A680633E-3E54-4F9C-AE9E-FB896B2F7ADC}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A7A67FA3-6AEE-4EBA-B735-0BA5F9B47E01}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A92D1E31-F35F-48E5-AA6E-3E829BD37E55}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{A995E36D-248E-4FAE-A595-3AA627D36B00}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{AB771A8A-899B-4063-BE16-DEE36752A3E7}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{AC73D022-CC25-4E36-B18D-A76320B52A7B}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{AC964083-CF4B-4680-9643-0A3711884689}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{AECE176D-1804-48B0-8B13-A33CADBABBFD}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{AF67078C-6A74-49BA-ABF0-FB57B1F72A0C}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{AFCE3000-1561-4DE8-94A1-F9A99BDC8F38}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{AFE8AD2E-2DBF-42AD-A1CE-8FA9768F27D5}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{B1EF0E33-8EE0-4AB0-8173-7B70D1CEF334}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{B240BCF8-76C2-4050-9160-D0DB9D16AB9D}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{B5BE603C-A733-41A0-B19E-5047A0C04069}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{B683A3C4-F1A7-4369-A28E-5A30D5E10D34}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{B73EB436-8F33-4CEF-ACFB-8CB894CFE32E}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{B7DE18F4-99C6-49D8-B10C-A43FB3455576}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{B818D18F-FDBF-45B2-814E-280DFA634EDF}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{B977A847-3AC2-4E7D-8A2A-C6E5D61AE1DE}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{BAE062BB-0CFE-4E21-BA0B-5F91442F29AA}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{BB15B21B-4AC0-49CD-81C8-9A8435169597}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{BB2889BE-CA28-4DCA-834B-853A6E1C307E}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{BB75BFC6-7D0C-47BB-AF87-A7CF995D3A95}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{BC2E97C6-0283-4626-BD48-C5ECC2DE89B4}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{BC3D8162-82A0-48AD-8291-830F893D40E2}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{BDD3F0CB-88A2-4D8B-9E4E-5B2B9F33F416}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{BFE3BFEE-BDD4-40BF-AB76-0FD386733104}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C0EAB9EA-46A2-4E27-B690-451DCDAFD1CA}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C143E832-D6FD-42D9-92E5-4C395D5DC629}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C1540225-E55C-438B-8ED7-83F12B8DE8BB}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C1BB96C0-A935-437E-AD3F-39964A5D7465}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C1D4243C-1824-4A4B-AE6B-5ECA1C440766}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C2254D44-C84D-40B5-A63F-E5E6692C33E3}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C231585A-FFC3-4353-9297-A0D18C14B96D}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C2B25762-B0BF-44ED-B9E2-5A0DA90F9DA7}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C2D180C2-1274-4569-8DC8-F0B7F547C704}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C2F53808-2EBB-422C-920F-3BF2EC15A820}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C3B9091F-DA28-48DA-8A8E-A8C267FA2465}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C5306942-5A15-45C0-9463-8C63E26C90DF}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{C597E6E4-0B5D-400A-9E30-A7E4DD2F781A}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{CB233248-6B47-45E7-9A5C-1C8F9E5A3B2C}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{CC6305F4-2CCE-4A65-8F2C-81C4F47E1CF9}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{CD4D9CEA-A7E1-4952-81F9-8027AFD49A3B}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{CF980592-F001-49AB-A16A-73DBFA70E81F}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D0D94EA8-379E-4ED1-8561-FC763A3F8502}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D14C8986-2B8F-4FDA-9430-4AEFA38CF683}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D2915598-ACB3-4BA5-8ED1-848B5D884A13}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D2F2D953-5A0E-4CBA-B1FF-09E569659B0B}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D4C2A928-D892-42C2-B2AE-0A4C32CB53F2}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D537B2BE-24F4-4BAC-8FC2-E95DD6A33E44}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D58488B3-4061-482E-9E23-B51C02A88DDE}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D5E70B8A-D47E-4FDF-9A5F-E556DE6E9EAA}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D697D932-D8DC-48CD-93A2-F2427E9E96CD}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D7DA4206-A8DE-45D9-BC86-BAF0D4FFE2F8}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D849F521-CB61-4A0B-A471-E695351BB861}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D905FFA9-CCE9-4150-B69D-B9117AA2011A}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{D96CEC0C-48B9-40DF-97F3-589426F3A0A4}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{DDB6A30F-7C9D-4C5C-880D-131BD49204C6}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{DF7D8F3F-95A1-4B9D-A87E-C1CF4BAC77CD}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E014AA82-8249-4462-A679-AA714331E323}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E0FA2791-F6C3-481E-AC1E-8E3AABD27646}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E2A396C2-8BFC-4BFC-9B5F-2E5E66959D8F}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E3873774-5334-46CE-A87C-FE3DF6889278}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E6667124-F9B5-418A-A23A-1A87EF405304}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E6C5ACC5-71CD-4979-98AF-635E71273B62}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E815692B-6BDE-461A-A984-D4DF250B1633}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E8668F03-764E-4D63-93D5-9C2F0E0299ED}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E885CEC5-896E-44A3-A717-279232E62984}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E8FB9CE6-745A-4239-B0FF-24E3A3229587}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E9052C3A-1E36-4504-919E-3DDCA7ABCFB0}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{E9155044-A076-460A-BA45-988CF38E93DB}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{EAD3E008-1C1F-4150-B588-F4CD39C23AE5}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{EB4A4FBD-BC40-4369-9D45-D2E5451FA575}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{EEF386FE-9244-4BA8-975D-C64AAFBAC573}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{EF6F2539-9976-40DE-9198-F8CE0A8E486E}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{F27CB336-2282-4FC5-9576-2B8E17B3FB08}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{F3C3A7F5-888F-4BEE-8078-1AE81529EBB9}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{F6277F86-DEF3-41AC-818E-3A73743A3502}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{F7CDEA14-2981-4978-A49C-821D51634BD4}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{FE16D0A9-1F8F-4830-AEB3-A74D0D519845}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{FEACD7BC-54E0-4CE3-98E9-9E7FD5D4AA4A}
Successfully deleted: [Empty Folder] C:\Users\Marco\appdata\local\{FFB8C382-33A3-4B51-BDF7-431B45C76584}



~~~ FireFox

Successfully deleted the following from C:\Users\Marco\AppData\Roaming\mozilla\firefox\profiles\3ite4e37.default-1390417290837\prefs.js

user_pref("extensions.lwaSsmiWfg.scode", "(function(){try{var url=window.self.location.href;if(url.indexOf(\"acebook\")>-1||url.indexOf(\"txtlnkusaolp00000800\")>-1||url.index
Emptied folder: C:\Users\Marco\AppData\Roaming\mozilla\firefox\profiles\3ite4e37.default-1390417290837\minidumps [10 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 14.02.2014 at 22:18:26,11
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
Und zuguterletzt dein frisches FRST log
Am anfang trat ein fehler auf (siehe bild) - wiederholen funktionierte nicht aber bei abbrechen lief es weiter, deswegen bin ich nicht näher drauf eingegangen.... ist das schlimm?


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01
Ran by Marco (administrator) on ACER-ASPIRE-574 on 14-02-2014 22:34:15
Running from C:\Users\Marco\Favorites\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BBSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files (x86)\Megatech\MProtect\MPServ.EXE
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
() C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Google Inc.) C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\MusicManager.exe
(Pegtop Software) C:\Program Files (x86)\Pegtop\PStart\PStart.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Apple Inc.) C:\Program Files (x86)\QuickTime\QTTask.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe
(Microsoft Corporation) c:\program files\windows defender\MpCmdRun.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552 2010-05-27] (Egis Technology Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10920552 2010-06-22] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1890088 2009-12-10] (Synaptics Incorporated)
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [861216 2010-06-11] (Acer Incorporated)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2782096 2010-07-26] (CANON INC.)
HKLM\...\Run: [LogMeIn GUI] - "C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe"
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - C:\Windows\KHALMNPR.EXE [130576 2009-06-17] (Logitech, Inc.)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\btvstack.exe [1023104 2012-10-15] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\athbttray.exe [801920 2012-10-15] (Atheros Commnucations)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-04-13] (Intel Corporation)
HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [337264 2010-05-27] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-03-11] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-03-11] (Egis Technology Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-28] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [265984 2010-06-28] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [975952 2010-08-10] (Dritek System Inc.)
HKLM-x32\...\Run: [ArcSoft Connection Service] - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3478392 2013-12-21] (Adobe Systems Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-07-22] (Geek Software GmbH)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-01-31] (AVAST Software)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [phonostarTimer] - C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe [40960 2011-06-20] ()
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [ICQ] - C:\Users\Marco\AppData\Roaming\ICQM\icq.exe [33664344 2014-01-08] (ICQ)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [Speech Recognition] - C:\Windows\Speech\Common\sapisvr.exe [44544 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [DS3 Tool] - C:\Program Files\MotioninJoy\ds3\DS3_Tool.exe [92672 2010-10-02] (www.motioninjoy.com)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [F8D9AE2CB9E5983DE40F824224AE867E4C19679F._service_run] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [866584 2014-01-23] (Google Inc.)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [MusicManager] - C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [7380992 2013-11-12] (Google Inc.)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [PegtopPStart] - C:\Program Files (x86)\Pegtop\PStart\PStart.exe [786952 2013-12-14] (Pegtop Software)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [202600 2012-10-08] (NVIDIA Corporation)
Startup: C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Marco\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: EXEcheckker - {1F4F33F5-C394-63B9-6E09-59C72C1BBD82} - C:\ProgramData\EXEcheckker\wSjqqm.x64.dll No File
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: shoppnnDroop - {9E180093-CF8E-58CF-D3C9-396A9DEB930E} - C:\ProgramData\shoppnnDroop\rrVS8cpa8.x64.dll No File
BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: ApPtoU - {EB54F8FF-CEF4-7E60-4CB8-91E2782EECB9} - C:\ProgramData\ApPtoU\LhPSOD.x64.dll No File
BHO: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: AppptoU - {F7323678-D72E-9FCD-29D9-B9DD31909229} - C:\ProgramData\AppptoU\bHeHik38.x64.dll No File
BHO: avast! Ad Blocker - {FFCB3198-32F3-4E8B-9539-4324694ED663} - C:\Program Files (x86)\AVAST Software\avast! Ad Blocker IE\Adblocker64.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: avast! Ad Blocker - {FFCB3198-32F3-4E8B-9539-4324694ED663} - C:\Program Files (x86)\AVAST Software\avast! Ad Blocker IE\Adblocker32.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837
FF Homepage: hxxp://intragart.selfhost.eu/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Marco\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Marco\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-01-25]
FF Extension: Etao QR Code - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\jid0-0c0bUXarADMTgT3G2iGveQ7Bshc@jetpack.xpi [2014-01-23]
FF Extension: Media Stealer - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\stealer@physacco.com.xpi [2014-01-25]
FF Extension: QR  Code  - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\{6a910736-6fab-4480-841a-36325cce134f}.xpi [2014-01-23]
FF Extension: Adblock Plus - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-23]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-02-06]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\adblocker@avast.com.xpi [2014-02-06]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-07-21]
FF HKLM-x32\...\Firefox\Extensions: [gamescenter@gamescenter.com] - C:\Program Files (x86)\GamesCenter\GamesCenter.xpi
FF Extension: No Name - C:\Program Files (x86)\GamesCenter\GamesCenter.xpi [2013-02-09]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2013-03-15]
FF HKLM-x32\...\Firefox\Extensions: [fmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\
FF Extension: Freemake Video Downloader Plugin - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\ []
FF HKLM-x32\...\Firefox\Extensions: [ytfmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\
FF Extension: Freemake Youtube Download Button - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\ []

Chrome: 
=======
CHR Extension: (Google Drive) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-07-10]
CHR Extension: (Freemake Video Downloader) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf [2014-01-26]
CHR Extension: (Games Center) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\dehjbbcmklelglapfndfbomoaooippkb [2013-07-08]
CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2013-07-08]
CHR Extension: (Freemake Youtube Download Button) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh [2014-01-26]
CHR Extension: (Video Downloader professional) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2014-02-14]
CHR Extension: (avast! Ad Blocker) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\fplhdcjmbpfkejbhngmlngaecbjmoimd [2013-07-08]
CHR Extension: (AppptoU) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpocpclffomeibcpplfabifcpokcigde [2014-02-13]
CHR Extension: (Media file downloader) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\khbkckdkhakengfjmejmiabaakdlhaab [2014-02-14]
CHR Extension: (Google Wallet) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01]
CHR Extension: (EXEcheckker) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdlfihameoodkafnckcnpfidcndgekh [2014-02-13]
CHR Extension: (shoppnnDroop) - C:\ProgramData\hehonoiddkebnfobcdlakohjokfldcmh [2014-01-29]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Marco\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-07-09]
CHR HKLM-x32\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2014-01-25]
CHR HKLM-x32\...\Chrome\Extension: [dehjbbcmklelglapfndfbomoaooippkb] - C:\Program Files (x86)\GamesCenter\GamesCenter.crx [2013-02-09]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2013-12-21]
CHR HKLM-x32\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\ChromeYoutubePlugin.crx [2014-01-25]
CHR HKLM-x32\...\Chrome\Extension: [fplhdcjmbpfkejbhngmlngaecbjmoimd] - C:\Program Files\AVAST Software\Avast\AdBlocker\Chrome\avast-adblocker-chrome.crx [2013-03-21]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-31] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [113704 2014-01-31] (AVAST Software)
R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2014-01-13] (Ellora Assets Corp.)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Megatech-Software-Protection; C:\Program Files (x86)\Megatech\MProtect\MPServ.EXE [36864 2007-12-12] ()
R2 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-05-27] (Egis Technology Inc.)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4292960 2013-11-11] (Symantec Corporation)

==================== Drivers (Whitelisted) ====================

R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2013-11-14] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-31] (AVAST Software)
R1 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [440672 2014-01-31] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-14] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-01-31] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-01-31] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-01-31] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-13] ()
R3 avmaudio; C:\Windows\System32\DRIVERS\avmaudio.sys [116480 2013-02-24] (AVM Berlin)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin)
S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH)
S3 GigasetGenericUSB_x64; C:\Windows\System32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2009-02-20] (Siemens Home and Office Communication Devices GmbH & Co. KG)
S3 libusb0; C:\Windows\SysWOW64\drivers\libusb0.sys [33792 2005-03-09] ()
S4 LMIRfsClientNP; No ImagePath
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [748648 2010-08-12] (Realtek Semiconductor Corporation                           )
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] ()
S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2008-11-19] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [27136 2008-11-19] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [33792 2008-11-19] (LG Electronics Inc.)
S3 WsAudio_Device; C:\Windows\System32\drivers\VirtualAudio.sys [31080 2013-01-08] (Wondershare)
R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl [146928 2010-08-16] (CyberLink Corp.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S2 LMIInfo; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-14 22:18 - 2014-02-14 22:18 - 00027801 _____ () C:\Users\Marco\Desktop\JRT.txt
2014-02-14 22:08 - 2014-02-14 22:08 - 00000000 ____D () C:\Windows\ERUNT
2014-02-14 22:00 - 2014-02-14 22:00 - 00006470 _____ () C:\Users\Marco\Desktop\AdwCleaner[S0].zip
2014-02-14 21:58 - 2014-02-14 22:26 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-02-14 21:57 - 2014-02-14 21:57 - 00040704 _____ () C:\Users\Marco\Desktop\AdwCleaner[S0].txt
2014-02-14 21:49 - 2014-02-14 21:52 - 00000000 ____D () C:\AdwCleaner
2014-02-14 21:13 - 2014-02-14 21:13 - 00011404 _____ () C:\Users\Marco\Desktop\mbam-log-2014-02-14 (20-53-55).rar
2014-02-14 20:49 - 2014-02-14 20:49 - 00001117 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Malwarebytes
2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-14 20:49 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-14 16:59 - 2014-02-14 16:59 - 00005973 _____ () C:\Users\Marco\AppData\Local\recently-used.xbel
2014-02-13 21:11 - 2014-02-14 21:05 - 00000000 ____D () C:\ProgramData\AppptoU
2014-02-13 21:11 - 2014-02-13 21:11 - 00000000 ____D () C:\Users\Marco\AppData\Local\Packages
2014-02-13 17:18 - 2014-02-13 17:18 - 00177913 _____ () C:\ComboFix.txt
2014-02-13 16:37 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-02-13 16:37 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-02-13 16:37 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-02-13 16:37 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-02-13 16:37 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-02-13 16:37 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-02-13 16:37 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-02-13 16:37 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-02-13 16:36 - 2014-02-13 17:18 - 00000000 ____D () C:\Qoobox
2014-02-13 16:36 - 2014-02-13 17:16 - 00000000 ____D () C:\Windows\erdnt
2014-02-13 16:32 - 2014-02-13 16:32 - 05180679 ____R (Swearware) C:\Users\Marco\Desktop\ComboFix.exe
2014-02-12 14:30 - 2014-02-12 14:33 - 00040672 _____ () C:\Users\Marco\Desktop\Addition.txt
2014-02-12 14:28 - 2014-02-12 14:33 - 00069527 _____ () C:\Users\Marco\Desktop\FRST.txt
2014-02-12 14:26 - 2014-02-14 22:34 - 00000000 ____D () C:\FRST
2014-02-10 21:31 - 2014-02-10 23:09 - 00000000 ____D () C:\Users\Marco\Desktop\Dusty
2014-02-08 10:35 - 2014-02-08 10:35 - 00002968 _____ () C:\Windows\System32\Tasks\{65B6DA46-08F9-42DC-9D21-68ECB5FEEE0A}
2014-02-08 10:34 - 2014-02-08 10:34 - 00002970 _____ () C:\Windows\System32\Tasks\{CFC12328-BB91-45A7-A7C8-E057AD886176}
2014-02-08 10:08 - 2014-02-08 10:08 - 00002968 _____ () C:\Windows\System32\Tasks\{041F2130-E6FD-40C5-BBE9-52AFC0D96381}
2014-02-08 10:07 - 2014-02-08 10:07 - 00003186 _____ () C:\Windows\System32\Tasks\{29666182-CFDA-470B-A7D8-2515F863832A}
2014-02-07 23:57 - 2014-02-07 23:57 - 00002968 _____ () C:\Windows\System32\Tasks\{F3C812C3-7D7C-44A0-8952-6F379977FA97}
2014-02-07 23:51 - 2014-02-07 23:51 - 00002968 _____ () C:\Windows\System32\Tasks\{7BB0731C-19BC-41B6-A803-F42127F20CFD}
2014-02-07 23:45 - 2014-02-07 23:45 - 00002968 _____ () C:\Windows\System32\Tasks\{131E5AAD-9FED-42AE-9D92-C791A6FE5F3F}
2014-02-07 23:44 - 2014-02-07 23:44 - 00002968 _____ () C:\Windows\System32\Tasks\{D7F197EB-B937-43E7-AE7F-216C7702BE4B}
2014-02-07 23:43 - 2014-02-07 23:43 - 00002968 _____ () C:\Windows\System32\Tasks\{9E305CFD-F157-4A9F-992A-C12E920A12BA}
2014-02-06 19:56 - 2014-02-13 16:33 - 00000000 ____D () C:\Users\Marco\Desktop\Jannik
2014-02-06 19:18 - 2014-02-06 19:18 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\LibreOffice
2014-02-06 19:16 - 2014-02-06 19:16 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\OpenOffice.org
2014-02-06 17:24 - 2014-02-06 17:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-06 17:02 - 2014-02-06 17:02 - 00001386 _____ () C:\Users\Marco\Desktop\iTunes - Verknüpfung.lnk
2014-02-06 16:41 - 2014-02-06 16:41 - 01755604 _____ () C:\Users\Marco\Desktop\1871270_683350511717566_7622_n.mp4
2014-02-05 20:35 - 2014-02-10 20:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-03 16:59 - 2014-02-03 16:59 - 00000000 ____D () C:\Users\Marco\Desktop\Feuerwehr
2014-02-03 14:41 - 2014-02-03 14:41 - 00001637 _____ () C:\Users\Marco\Desktop\TeamViewer 9.lnk
2014-02-02 16:49 - 2014-02-02 16:49 - 00001201 _____ () C:\Users\Marco\Desktop\Ressourcenmonitor.lnk
2014-01-31 16:03 - 2014-02-14 21:05 - 00000000 ____D () C:\ProgramData\EXEcheckker
2014-01-31 16:03 - 2014-01-31 16:03 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-31 16:03 - 2014-01-31 16:03 - 00000000 ____D () C:\ProgramData\okdlfihameoodkafnckcnpfidcndgekh
2014-01-31 15:35 - 2014-01-31 15:35 - 00001956 _____ () C:\Users\Public\Desktop\avast! Premier.lnk
2014-01-31 15:28 - 2014-01-31 15:28 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Wichtiges
2014-01-31 15:15 - 2014-01-31 15:15 - 01884977 _____ () C:\Users\Marco\Desktop\1608083_186652868212024_888047451_n.mp4
2014-01-31 06:40 - 2014-01-31 06:40 - 01884977 _____ () C:\Users\Marco\Desktop\bus
2014-01-29 20:27 - 2014-02-14 21:05 - 00000000 ____D () C:\ProgramData\shoppnnDroop
2014-01-29 20:27 - 2014-02-14 21:05 - 00000000 ____D () C:\ProgramData\ApPtoU
2014-01-29 20:27 - 2014-02-13 21:12 - 00000000 ____D () C:\ProgramData\2ff1ddb567438de4
2014-01-29 20:27 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\hehonoiddkebnfobcdlakohjokfldcmh
2014-01-28 20:49 - 2014-01-28 20:49 - 15336718 _____ () C:\Users\Marco\Desktop\1055344_371045796370724_676684399_n.mp4
2014-01-27 17:24 - 2014-01-27 17:24 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-27 17:24 - 2014-01-27 17:24 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-27 17:21 - 2014-01-27 17:21 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-27 17:21 - 2014-01-27 17:21 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-27 17:11 - 2014-01-27 17:12 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-27 17:11 - 2014-01-27 17:12 - 00000000 ____D () C:\Program Files\iTunes
2014-01-27 17:11 - 2014-01-27 17:12 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-01-27 17:11 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files\iPod
2014-01-26 12:24 - 2014-01-26 12:25 - 04685821 _____ () C:\Users\Marco\Desktop\Berufscheck der kleinen Mia.wmv
2014-01-26 12:19 - 2014-01-26 12:21 - 04117893 _____ () C:\Users\Marco\Desktop\Poledancestange im Kinderzimmer.wmv
2014-01-25 17:19 - 2014-01-25 17:20 - 05973713 _____ () C:\Users\Marco\Desktop\Ein Müllmann rastet aus.wmv
2014-01-25 16:52 - 2014-01-25 16:52 - 00000000 ____D () C:\Program Files (x86)\DsNET Corp
2014-01-25 16:30 - 2014-01-25 16:30 - 29836541 _____ () C:\Users\Marco\Desktop\ROLLIN` SAFARI - what if animals were round_.mp4
2014-01-25 16:30 - 2014-01-25 16:30 - 00000000 ____D () C:\Users\Marco\dwhelper
2014-01-24 18:22 - 2014-01-24 18:23 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Sonstige
2014-01-19 22:39 - 2014-01-19 22:39 - 00000032 _____ () C:\Windows\Menu.INI
2014-01-19 19:05 - 2014-01-19 20:04 - 866302861 _____ () C:\Users\Marco\Dusty.zip
2014-01-15 18:29 - 2014-01-15 18:29 - 00000000 ____D () C:\Users\Marco\Telekom
2014-01-15 16:41 - 2014-02-12 16:08 - 00000600 _____ () C:\Users\Marco\AppData\Local\PUTTY.RND
2014-01-15 14:27 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 14:27 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 14:27 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 14:27 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 14:27 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 14:27 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 14:27 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 14:27 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 14:27 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

==================== One Month Modified Files and Folders =======

2014-02-14 22:34 - 2014-02-12 14:26 - 00000000 ____D () C:\FRST
2014-02-14 22:34 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-14 22:34 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-14 22:32 - 2012-05-29 20:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-14 22:30 - 2010-11-05 22:37 - 01787399 _____ () C:\Windows\WindowsUpdate.log
2014-02-14 22:27 - 2011-01-17 16:11 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Skype
2014-02-14 22:26 - 2014-02-14 21:58 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-02-14 22:26 - 2013-08-17 00:57 - 00000000 ___RD () C:\Users\Marco\Dropbox
2014-02-14 22:26 - 2013-08-17 00:55 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Dropbox
2014-02-14 22:26 - 2013-04-17 17:00 - 00000000 ___RD () C:\Users\Marco\Google Drive
2014-02-14 22:26 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-02-14 22:23 - 2011-02-04 19:36 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-14 22:21 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-14 22:21 - 2009-07-14 05:51 - 00310049 _____ () C:\Windows\setupact.log
2014-02-14 22:19 - 2013-08-22 11:24 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002Core.job
2014-02-14 22:18 - 2014-02-14 22:18 - 00027801 _____ () C:\Users\Marco\Desktop\JRT.txt
2014-02-14 22:11 - 2013-08-22 11:24 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002UA.job
2014-02-14 22:08 - 2014-02-14 22:08 - 00000000 ____D () C:\Windows\ERUNT
2014-02-14 22:00 - 2014-02-14 22:00 - 00006470 _____ () C:\Users\Marco\Desktop\AdwCleaner[S0].zip
2014-02-14 22:00 - 2011-02-20 12:00 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-02-14 21:57 - 2014-02-14 21:57 - 00040704 _____ () C:\Users\Marco\Desktop\AdwCleaner[S0].txt
2014-02-14 21:52 - 2014-02-14 21:49 - 00000000 ____D () C:\AdwCleaner
2014-02-14 21:43 - 2011-02-04 19:36 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-14 21:22 - 2012-07-10 15:26 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-02-14 21:18 - 2010-11-05 22:34 - 00759330 _____ () C:\Windows\PFRO.log
2014-02-14 21:17 - 2011-01-17 15:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\SoftGrid Client
2014-02-14 21:13 - 2014-02-14 21:13 - 00011404 _____ () C:\Users\Marco\Desktop\mbam-log-2014-02-14 (20-53-55).rar
2014-02-14 21:05 - 2014-02-13 21:11 - 00000000 ____D () C:\ProgramData\AppptoU
2014-02-14 21:05 - 2014-01-31 16:03 - 00000000 ____D () C:\ProgramData\EXEcheckker
2014-02-14 21:05 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\shoppnnDroop
2014-02-14 21:05 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\ApPtoU
2014-02-14 20:49 - 2014-02-14 20:49 - 00001117 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Malwarebytes
2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-14 18:18 - 2012-11-15 20:12 - 00003958 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{604A8C80-AF97-4E6B-B718-0ADED238F7E3}
2014-02-14 17:39 - 2011-11-07 20:14 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\vlc
2014-02-14 17:03 - 2010-11-06 07:28 - 00654852 _____ () C:\Windows\system32\perfh007.dat
2014-02-14 17:03 - 2010-11-06 07:28 - 00130434 _____ () C:\Windows\system32\perfc007.dat
2014-02-14 17:03 - 2009-07-14 06:13 - 01500358 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-14 16:59 - 2014-02-14 16:59 - 00005973 _____ () C:\Users\Marco\AppData\Local\recently-used.xbel
2014-02-14 16:59 - 2012-08-05 22:10 - 00000000 ____D () C:\Users\Marco\.gimp-2.8
2014-02-14 16:59 - 2012-01-24 14:55 - 04504576 ___SH () C:\Users\Marco\Desktop\Thumbs.db
2014-02-14 16:11 - 2012-06-05 11:02 - 00007667 _____ () C:\Users\Marco\AppData\Local\resmon.resmoncfg
2014-02-13 21:12 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\2ff1ddb567438de4
2014-02-13 21:11 - 2014-02-13 21:11 - 00000000 ____D () C:\Users\Marco\AppData\Local\Packages
2014-02-13 17:18 - 2014-02-13 17:18 - 00177913 _____ () C:\ComboFix.txt
2014-02-13 17:18 - 2014-02-13 16:36 - 00000000 ____D () C:\Qoobox
2014-02-13 17:18 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-02-13 17:17 - 2012-10-01 15:39 - 00000000 ___RD () C:\Users\Schule\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-13 17:17 - 2011-01-17 15:17 - 00000000 ___RD () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-13 17:16 - 2014-02-13 16:36 - 00000000 ____D () C:\Windows\erdnt
2014-02-13 17:10 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-02-13 17:07 - 2009-07-14 03:34 - 82575360 _____ () C:\Windows\system32\config\SOFTWARE.bak
2014-02-13 17:07 - 2009-07-14 03:34 - 27000832 _____ () C:\Windows\system32\config\SYSTEM.bak
2014-02-13 17:07 - 2009-07-14 03:34 - 14155776 _____ () C:\Windows\system32\config\DEFAULT.bak
2014-02-13 17:07 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak
2014-02-13 17:07 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\SAM.bak
2014-02-13 16:36 - 2013-09-29 15:08 - 00000000 ____D () C:\Users\Marco\AppData\Local\CrashDumps
2014-02-13 16:33 - 2014-02-06 19:56 - 00000000 ____D () C:\Users\Marco\Desktop\Jannik
2014-02-13 16:32 - 2014-02-13 16:32 - 05180679 ____R (Swearware) C:\Users\Marco\Desktop\ComboFix.exe
2014-02-12 16:08 - 2014-01-15 16:41 - 00000600 _____ () C:\Users\Marco\AppData\Local\PUTTY.RND
2014-02-12 14:33 - 2014-02-12 14:30 - 00040672 _____ () C:\Users\Marco\Desktop\Addition.txt
2014-02-12 14:33 - 2014-02-12 14:28 - 00069527 _____ () C:\Users\Marco\Desktop\FRST.txt
2014-02-12 14:24 - 2013-11-20 14:18 - 00241591 _____ () C:\Windows\IE11_main.log
2014-02-10 23:09 - 2014-02-10 21:31 - 00000000 ____D () C:\Users\Marco\Desktop\Dusty
2014-02-10 22:27 - 2011-11-28 14:24 - 00000000 ____D () C:\Users\Marco\Tracing
2014-02-10 21:56 - 2012-10-15 13:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-10 20:30 - 2014-02-05 20:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-10 15:49 - 2014-01-04 02:49 - 00003912 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-02-08 10:35 - 2014-02-08 10:35 - 00002968 _____ () C:\Windows\System32\Tasks\{65B6DA46-08F9-42DC-9D21-68ECB5FEEE0A}
2014-02-08 10:34 - 2014-02-08 10:34 - 00002970 _____ () C:\Windows\System32\Tasks\{CFC12328-BB91-45A7-A7C8-E057AD886176}
2014-02-08 10:08 - 2014-02-08 10:08 - 00002968 _____ () C:\Windows\System32\Tasks\{041F2130-E6FD-40C5-BBE9-52AFC0D96381}
2014-02-08 10:07 - 2014-02-08 10:07 - 00003186 _____ () C:\Windows\System32\Tasks\{29666182-CFDA-470B-A7D8-2515F863832A}
2014-02-07 23:57 - 2014-02-07 23:57 - 00002968 _____ () C:\Windows\System32\Tasks\{F3C812C3-7D7C-44A0-8952-6F379977FA97}
2014-02-07 23:51 - 2014-02-07 23:51 - 00002968 _____ () C:\Windows\System32\Tasks\{7BB0731C-19BC-41B6-A803-F42127F20CFD}
2014-02-07 23:45 - 2014-02-07 23:45 - 00002968 _____ () C:\Windows\System32\Tasks\{131E5AAD-9FED-42AE-9D92-C791A6FE5F3F}
2014-02-07 23:44 - 2014-02-07 23:44 - 00002968 _____ () C:\Windows\System32\Tasks\{D7F197EB-B937-43E7-AE7F-216C7702BE4B}
2014-02-07 23:43 - 2014-02-07 23:43 - 00002968 _____ () C:\Windows\System32\Tasks\{9E305CFD-F157-4A9F-992A-C12E920A12BA}
2014-02-07 23:37 - 2011-01-21 16:34 - 00000000 ____D () C:\Users\Marco\Spiele
2014-02-06 19:18 - 2014-02-06 19:18 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\LibreOffice
2014-02-06 19:16 - 2014-02-06 19:16 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\OpenOffice.org
2014-02-06 17:24 - 2014-02-06 17:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-06 17:02 - 2014-02-06 17:02 - 00001386 _____ () C:\Users\Marco\Desktop\iTunes - Verknüpfung.lnk
2014-02-06 16:41 - 2014-02-06 16:41 - 01755604 _____ () C:\Users\Marco\Desktop\1871270_683350511717566_7622_n.mp4
2014-02-05 20:32 - 2012-05-29 20:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-05 20:32 - 2012-05-29 20:49 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-05 20:32 - 2012-05-29 20:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-05 14:36 - 2013-12-26 22:17 - 00000000 ____D () C:\Users\Besucher\AppData\Local\CrashDumps
2014-02-04 15:43 - 2011-01-17 15:16 - 00162544 _____ () C:\Users\Marco\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-03 16:59 - 2014-02-03 16:59 - 00000000 ____D () C:\Users\Marco\Desktop\Feuerwehr
2014-02-03 14:41 - 2014-02-03 14:41 - 00001637 _____ () C:\Users\Marco\Desktop\TeamViewer 9.lnk
2014-02-02 16:49 - 2014-02-02 16:49 - 00001201 _____ () C:\Users\Marco\Desktop\Ressourcenmonitor.lnk
2014-02-01 01:56 - 2013-12-02 21:16 - 00000000 ____D () C:\Users\SERVER\Desktop\Intragart
2014-02-01 01:26 - 2013-08-29 18:48 - 00162544 _____ () C:\Users\SERVER\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-31 16:03 - 2014-01-31 16:03 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-31 16:03 - 2014-01-31 16:03 - 00000000 ____D () C:\ProgramData\okdlfihameoodkafnckcnpfidcndgekh
2014-01-31 16:03 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-01-31 16:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-01-31 15:53 - 2012-05-12 13:25 - 00001033 _____ () C:\Windows\wininit.ini
2014-01-31 15:52 - 2013-08-17 00:56 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-31 15:35 - 2014-01-31 15:35 - 00001956 _____ () C:\Users\Public\Desktop\avast! Premier.lnk
2014-01-31 15:32 - 2014-01-13 18:52 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-01-31 15:32 - 2013-03-21 13:53 - 00440672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2014-01-31 15:32 - 2011-07-21 08:15 - 01038072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-31 15:32 - 2011-07-21 08:15 - 00421704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-01-31 15:32 - 2011-07-21 08:15 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-31 15:32 - 2011-07-21 08:15 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-31 15:32 - 2011-07-21 08:14 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-31 15:28 - 2014-01-31 15:28 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Wichtiges
2014-01-31 15:15 - 2014-01-31 15:15 - 01884977 _____ () C:\Users\Marco\Desktop\1608083_186652868212024_888047451_n.mp4
2014-01-31 06:40 - 2014-01-31 06:40 - 01884977 _____ () C:\Users\Marco\Desktop\bus
2014-01-29 20:27 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\hehonoiddkebnfobcdlakohjokfldcmh
2014-01-28 20:49 - 2014-01-28 20:49 - 15336718 _____ () C:\Users\Marco\Desktop\1055344_371045796370724_676684399_n.mp4
2014-01-27 21:06 - 2013-07-06 09:23 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\.minecraft
2014-01-27 17:24 - 2014-01-27 17:24 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-27 17:24 - 2014-01-27 17:24 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-27 17:24 - 2013-11-15 15:52 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-27 17:24 - 2013-11-15 15:52 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-27 17:24 - 2013-11-15 15:52 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-27 17:21 - 2014-01-27 17:21 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-27 17:21 - 2014-01-27 17:21 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-27 17:21 - 2013-07-11 19:36 - 00000000 ____D () C:\Program Files\Java
2014-01-27 17:15 - 2012-04-18 15:24 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-01-27 17:15 - 2012-04-18 15:23 - 00000000 ____D () C:\Program Files (x86)\WinRAR
2014-01-27 17:12 - 2014-01-27 17:11 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-27 17:12 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files\iTunes
2014-01-27 17:12 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-01-27 17:11 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files\iPod
2014-01-26 16:53 - 2011-02-12 21:31 - 01018368 ___SH () C:\Users\Marco\Thumbs.db
2014-01-26 12:25 - 2014-01-26 12:24 - 04685821 _____ () C:\Users\Marco\Desktop\Berufscheck der kleinen Mia.wmv
2014-01-26 12:21 - 2014-01-26 12:19 - 04117893 _____ () C:\Users\Marco\Desktop\Poledancestange im Kinderzimmer.wmv
2014-01-25 17:20 - 2014-01-25 17:19 - 05973713 _____ () C:\Users\Marco\Desktop\Ein Müllmann rastet aus.wmv
2014-01-25 16:52 - 2014-01-25 16:52 - 00000000 ____D () C:\Program Files (x86)\DsNET Corp
2014-01-25 16:47 - 2012-01-13 16:55 - 00000000 ____D () C:\ProgramData\Freemake
2014-01-25 16:46 - 2012-01-13 16:54 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2014-01-25 16:46 - 2012-01-13 16:54 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-01-25 16:30 - 2014-01-25 16:30 - 29836541 _____ () C:\Users\Marco\Desktop\ROLLIN` SAFARI - what if animals were round_.mp4
2014-01-25 16:30 - 2014-01-25 16:30 - 00000000 ____D () C:\Users\Marco\dwhelper
2014-01-25 16:30 - 2011-01-17 15:16 - 00000000 ___RD () C:\Users\Marco
2014-01-24 18:23 - 2014-01-24 18:22 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Sonstige
2014-01-22 16:35 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-20 04:55 - 2011-08-15 10:33 - 00000000 ____D () C:\Users\Marco\Dusty
2014-01-19 22:39 - 2014-01-19 22:39 - 00000032 _____ () C:\Windows\Menu.INI
2014-01-19 20:04 - 2014-01-19 19:05 - 866302861 _____ () C:\Users\Marco\Dusty.zip
2014-01-16 16:50 - 2009-07-14 05:45 - 00549696 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-16 16:29 - 2013-08-14 12:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-16 16:22 - 2011-01-29 17:10 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-16 09:59 - 2012-07-13 18:03 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-15 18:29 - 2014-01-15 18:29 - 00000000 ____D () C:\Users\Marco\Telekom
2014-01-15 18:27 - 2013-11-17 20:44 - 00000000 ____D () C:\Users\Marco\Desktop\Für Karin
2014-01-15 18:27 - 2011-01-16 20:30 - 00000000 ____D () C:\Users\Marco\Schreiben

Files to move or delete:
====================
C:\Users\Marco\worldpainter_0.11.2.exe
C:\Users\Marco\worldpainter_1.2.5.exe


Some content of TEMP:
====================
C:\Users\Marco\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-08 14:42

==================== End Of Log ============================
         
--- --- ---

--- --- ---

Alt 14.02.2014, 21:45   #11
MarcoW
 
100% Pysikalischer Speicher durch svchost.exe - Standard

100% Pysikalischer Speicher durch svchost.exe



hier das bild
Miniaturansicht angehängter Grafiken
100% Pysikalischer Speicher durch svchost.exe-20140214_223439.jpg  

Alt 15.02.2014, 17:35   #12
schrauber
/// the machine
/// TB-Ausbilder
 

100% Pysikalischer Speicher durch svchost.exe - Standard

100% Pysikalischer Speicher durch svchost.exe



Komischer Fehler.


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset


Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.

und ein frisches FRST log bitte. Noch Probleme?
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Alt 16.02.2014, 19:14   #13
MarcoW
 
100% Pysikalischer Speicher durch svchost.exe - Standard

100% Pysikalischer Speicher durch svchost.exe



ne, auslastung geht nimma hoch auf 100%

aber der scan hat jetzt ca. 4h und 50min gebruacht

hier das log von ESET Online Scanner

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.6920
# api_version=3.0.2
# EOSSerial=9c04227118546249897b3c6cae8fccce
# engine=17093
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=false
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2014-02-16 06:27:52
# local_time=2014-02-16 07:27:52 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1033
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode=772 16777213 83 82 1399450 8126232 0 0
# compatibility_mode=5893 16776573 100 94 165284 144205122 0 0
# scanned=439233
# found=3
# cleaned=0
# scan_time=17346
sh=2C06A350EA95B428E1BD9BBC94B5932061EC71DB ft=1 fh=a351c33b2a9de0d7 vn="a variant of Win32/SpeedingUpMyPC application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\optimizer pro\OptimizerPro.exe.vir"
sh=888E0F78F11013E11283DA19CDE2B574E4E8833B ft=1 fh=7d4b0bc979117643 vn="a variant of Win32/AdWare.SpeedingUpMyPC.D application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\optimizer pro\OptProLauncher.exe.vir"
sh=34EDAC09C618F20D260A0B2AB6E51584EA4996EE ft=1 fh=621aa319d1387749 vn="a variant of Win32/Adware.SpeedingUpMyPC.C application" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\optimizer pro\OptProSmartScan.exe.vir"
         
Hier das checkup.txt von SecurityCheck

Code:
ATTFilter
 Results of screen317's Security Check version 0.99.79  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 10 Out of date! 
``````````````Antivirus/Firewall Check:`````````````` 
avast! Antivirus   
 Antivirus out of date!  
`````````Anti-malware/Other Utilities Check:````````` 
 Malwarebytes Anti-Malware Version 1.75.0.1300  
 Java(TM) 6 Update 22  
 Java(TM) 6 Update 37  
 Java 7 Update 51  
  Adobe Flash Player 12.0.0.43 Flash Player out of Date!  
 Adobe Reader 9 Adobe Reader out of Date! 
 Mozilla Firefox (27.0.1) 
 Mozilla Thunderbird (24.3.0) 
 Google Chrome 32.0.1700.102  
 Google Chrome 32.0.1700.76  
````````Process Check: objlist.exe by Laurent````````  
 Symantec Norton Online Backup NOBuAgent.exe  
 Symantec Norton Online Backup NOBuClient.exe  
 AVAST Software Avast AvastSvc.exe  
 AVAST Software Avast afwServ.exe  
 AVAST Software Avast AvastUI.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         
Und zuguterletzt das FRST log


FRST Logfile:

FRST Logfile:
Code:
ATTFilter
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01
Ran by Marco (administrator) on ACER-ASPIRE-574 on 16-02-2014 20:13:31
Running from C:\Users\Marco\Favorites\Downloads
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 10
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
() C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Program Files (x86)\Megatech\MProtect\MPServ.EXE
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(Intel Corporation) C:\Windows\system32\igfxext.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Google Inc.) C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\MusicManager.exe
(Pegtop Software) C:\Program Files (x86)\Pegtop\PStart\PStart.exe
(Logitech, Inc.) C:\Program Files\Logitech\SetPoint\SetPoint.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(ArcSoft Inc.) C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Apple Inc.) C:\Program Files (x86)\QuickTime\QTTask.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
() C:\Program Files\Logitech\SetPoint\x86\SetPoint32.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\SeaPort.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [mwlDaemon] - C:\Program Files (x86)\EgisTec MyWinLocker\x86\mwlDaemon.exe [349552 2010-05-27] (Egis Technology Inc.)
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10920552 2010-06-22] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1890088 2009-12-10] (Synaptics Incorporated)
HKLM\...\Run: [Acer ePower Management] - C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [861216 2010-06-11] (Acer Incorporated)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2782096 2010-07-26] (CANON INC.)
HKLM\...\Run: [LogMeIn GUI] - "C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe"
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [Logitech Download Assistant] - C:\Windows\System32\LogiLDA.dll [1832760 2012-09-20] (Logitech, Inc.)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] - C:\Windows\KHALMNPR.EXE [130576 2009-06-17] (Logitech, Inc.)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\btvstack.exe [1023104 2012-10-15] (Atheros Communications)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\athbttray.exe [801920 2012-10-15] (Atheros Commnucations)
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-04-13] (Intel Corporation)
HKLM-x32\...\Run: [SuiteTray] - C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe [337264 2010-05-27] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisUpdate] - C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-03-11] (Egis Technology Inc.)
HKLM-x32\...\Run: [EgisTecPMMUpdate] - C:\Program Files (x86)\EgisTec IPS\PmmUpdate.exe [407920 2010-03-11] (Egis Technology Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-28] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BackupManagerTray] - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [265984 2010-06-28] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [LManager] - C:\Program Files (x86)\Launch Manager\LManager.exe [975952 2010-08-10] (Dritek System Inc.)
HKLM-x32\...\Run: [ArcSoft Connection Service] - C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe [207424 2010-10-27] (ArcSoft Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe [3478392 2013-12-21] (Adobe Systems Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [PDFPrint] - C:\Program Files (x86)\PDF24\pdf24.exe [162856 2013-07-22] (Geek Software GmbH)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-01-31] (AVAST Software)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [phonostarTimer] - C:\Program Files (x86)\phonostar-Player\phonostarTimer.exe [40960 2011-06-20] ()
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [ICQ] - C:\Users\Marco\AppData\Roaming\ICQM\icq.exe [33664344 2014-01-08] (ICQ)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [Speech Recognition] - C:\Windows\Speech\Common\sapisvr.exe [44544 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [DS3 Tool] - C:\Program Files\MotioninJoy\ds3\DS3_Tool.exe [92672 2010-10-02] (www.motioninjoy.com)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [F8D9AE2CB9E5983DE40F824224AE867E4C19679F._service_run] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [866584 2014-01-23] (Google Inc.)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [GoogleDriveSync] - C:\Program Files (x86)\Google\Drive\googledrivesync.exe [20203904 2013-12-06] (Google)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [ApplePhotoStreams] - C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [59720 2013-04-05] (Apple Inc.)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [iCloudServices] - C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [59720 2013-04-05] (Apple Inc.)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [MusicManager] - C:\Users\Marco\AppData\Local\Programs\Google\MusicManager\MusicManager.exe [7380992 2013-11-12] (Google Inc.)
HKU\S-1-5-21-1767309948-3694062471-1967485482-1002\...\Run: [PegtopPStart] - C:\Program Files (x86)\Pegtop\PStart\PStart.exe [786952 2013-12-14] (Pegtop Software)
AppInit_DLLs: C:\Windows\System32\nvinitx.dll => C:\Windows\System32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\Windows\SysWOW64\nvinit.dll => c:\Windows\SysWOW64\nvinit.dll [202600 2012-10-08] (NVIDIA Corporation)
Startup: C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Marco\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: EXEcheckker - {1F4F33F5-C394-63B9-6E09-59C72C1BBD82} - C:\ProgramData\EXEcheckker\wSjqqm.x64.dll No File
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: shoppnnDroop - {9E180093-CF8E-58CF-D3C9-396A9DEB930E} - C:\ProgramData\shoppnnDroop\rrVS8cpa8.x64.dll No File
BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: ApPtoU - {EB54F8FF-CEF4-7E60-4CB8-91E2782EECB9} - C:\ProgramData\ApPtoU\LhPSOD.x64.dll No File
BHO: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: AppptoU - {F7323678-D72E-9FCD-29D9-B9DD31909229} - C:\ProgramData\AppptoU\bHeHik38.x64.dll No File
BHO: avast! Ad Blocker - {FFCB3198-32F3-4E8B-9539-4324694ED663} - C:\Program Files (x86)\AVAST Software\avast! Ad Blocker IE\Adblocker64.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: avast! Ad Blocker - {FFCB3198-32F3-4E8B-9539-4324694ED663} - C:\Program Files (x86)\AVAST Software\avast! Ad Blocker IE\Adblocker32.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\amd64\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\7.3.124.0\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837
FF Homepage: hxxp://intragart.selfhost.eu/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw.dll No File
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Marco\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Marco\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml
FF Extension: DownloadHelper - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-01-25]
FF Extension: Etao QR Code - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\jid0-0c0bUXarADMTgT3G2iGveQ7Bshc@jetpack.xpi [2014-01-23]
FF Extension: Media Stealer - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\stealer@physacco.com.xpi [2014-01-25]
FF Extension: QR  Code  - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\{6a910736-6fab-4480-841a-36325cce134f}.xpi [2014-01-23]
FF Extension: Adblock Plus - C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\Profiles\3ite4e37.default-1390417290837\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-01-23]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2014-02-15]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\adblocker@avast.com.xpi [2014-02-15]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-07-21]
FF HKLM-x32\...\Firefox\Extensions: [gamescenter@gamescenter.com] - C:\Program Files (x86)\GamesCenter\GamesCenter.xpi
FF Extension: No Name - C:\Program Files (x86)\GamesCenter\GamesCenter.xpi [2013-02-09]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2013-03-15]
FF HKLM-x32\...\Firefox\Extensions: [fmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\
FF Extension: Freemake Video Downloader Plugin - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\fmdownloader@gmail.com\ []
FF HKLM-x32\...\Firefox\Extensions: [ytfmdownloader@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\
FF Extension: Freemake Youtube Download Button - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Firefox\ytfmdownloader@gmail.com\ []

Chrome: 
=======
CHR Extension: (Google Drive) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-07-10]
CHR Extension: (Freemake Video Downloader) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpegkgagfojjbcpkihigfmkojdmmimdf [2014-01-26]
CHR Extension: (Games Center) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\dehjbbcmklelglapfndfbomoaooippkb [2013-07-08]
CHR Extension: (Adobe Acrobat – PDF-Datei erstellen) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2013-07-08]
CHR Extension: (Freemake Youtube Download Button) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehgldbbpchgpcfagfpfjgoomddhccfgh [2014-01-26]
CHR Extension: (Video Downloader professional) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2014-02-14]
CHR Extension: (avast! Ad Blocker) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\fplhdcjmbpfkejbhngmlngaecbjmoimd [2013-07-08]
CHR Extension: (AppptoU) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpocpclffomeibcpplfabifcpokcigde [2014-02-13]
CHR Extension: (Media file downloader) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\khbkckdkhakengfjmejmiabaakdlhaab [2014-02-14]
CHR Extension: (Google Wallet) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01]
CHR Extension: (EXEcheckker) - C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\okdlfihameoodkafnckcnpfidcndgekh [2014-02-13]
CHR Extension: (shoppnnDroop) - C:\ProgramData\hehonoiddkebnfobcdlakohjokfldcmh [2014-01-29]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Marco\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-07-09]
CHR HKLM-x32\...\Chrome\Extension: [bpegkgagfojjbcpkihigfmkojdmmimdf] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2014-01-25]
CHR HKLM-x32\...\Chrome\Extension: [dehjbbcmklelglapfndfbomoaooippkb] - C:\Program Files (x86)\GamesCenter\GamesCenter.crx [2013-02-09]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2013-12-21]
CHR HKLM-x32\...\Chrome\Extension: [ehgldbbpchgpcfagfpfjgoomddhccfgh] - C:\Program Files (x86)\Freemake\Freemake Video Downloader\BrowserPlugin\Chrome\ChromeYoutubePlugin.crx [2014-01-25]
CHR HKLM-x32\...\Chrome\Extension: [fplhdcjmbpfkejbhngmlngaecbjmoimd] - C:\Program Files\AVAST Software\Avast\AdBlocker\Chrome\avast-adblocker-chrome.crx [2013-03-21]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-31] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [113704 2014-01-31] (AVAST Software)
S2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2014-01-13] (Ellora Assets Corp.)
S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 Megatech-Software-Protection; C:\Program Files (x86)\Megatech\MProtect\MPServ.EXE [36864 2007-12-12] ()
R2 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-05-27] (Egis Technology Inc.)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4292960 2013-11-11] (Symantec Corporation)

==================== Drivers (Whitelisted) ====================

R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2013-11-14] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-01-31] (AVAST Software)
R1 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [440672 2014-01-31] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-11-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-11-14] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-01-31] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-01-31] (AVAST Software)
S3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-01-31] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-01-13] ()
R3 avmaudio; C:\Windows\System32\DRIVERS\avmaudio.sys [116480 2013-02-24] (AVM Berlin)
S3 avmeject; C:\Windows\System32\drivers\avmeject.sys [14120 2010-10-22] (AVM Berlin)
S3 FWLANUSB; C:\Windows\System32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH)
S3 GigasetGenericUSB_x64; C:\Windows\System32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2009-02-20] (Siemens Home and Office Communication Devices GmbH & Co. KG)
S3 libusb0; C:\Windows\SysWOW64\drivers\libusb0.sys [33792 2005-03-09] ()
S4 LMIRfsClientNP; No ImagePath
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
S3 RTL8192cu; C:\Windows\System32\DRIVERS\RTL8192cu.sys [748648 2010-08-12] (Realtek Semiconductor Corporation                           )
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] ()
S3 usbbus; C:\Windows\System32\DRIVERS\lgx64bus.sys [17920 2008-11-19] (LG Electronics Inc.)
S3 UsbDiag; C:\Windows\System32\DRIVERS\lgx64diag.sys [27136 2008-11-19] (LG Electronics Inc.)
S3 USBModem; C:\Windows\System32\DRIVERS\lgx64modem.sys [33792 2008-11-19] (LG Electronics Inc.)
S3 WsAudio_Device; C:\Windows\System32\drivers\VirtualAudio.sys [31080 2013-01-08] (Wondershare)
R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl [146928 2010-08-16] (CyberLink Corp.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S2 LMIInfo; \??\C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-15 09:46 - 2014-02-15 09:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-15 09:39 - 2014-02-01 10:20 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-15 09:39 - 2014-02-01 10:18 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-15 09:39 - 2014-02-01 10:18 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-15 09:39 - 2014-02-01 10:18 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-15 09:39 - 2014-02-01 10:18 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-15 09:39 - 2014-02-01 10:18 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-15 09:39 - 2014-02-01 08:57 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-15 09:39 - 2014-02-01 08:57 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-15 09:39 - 2014-02-01 08:57 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-15 09:39 - 2014-02-01 08:57 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-15 09:39 - 2014-02-01 08:57 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-15 09:39 - 2014-02-01 08:57 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-15 09:39 - 2014-02-01 08:40 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-15 09:39 - 2014-02-01 08:34 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-15 09:39 - 2014-02-01 07:45 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-15 09:39 - 2014-02-01 07:38 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-02-15 09:39 - 2013-12-21 10:39 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-15 09:39 - 2013-12-21 08:56 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-15 09:38 - 2014-02-01 10:19 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-15 09:38 - 2014-02-01 10:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-15 09:38 - 2014-02-01 10:18 - 19274240 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-15 09:38 - 2014-02-01 10:18 - 15403520 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-15 09:38 - 2014-02-01 10:18 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-15 09:38 - 2014-02-01 10:18 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-15 09:38 - 2014-02-01 10:18 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-15 09:38 - 2014-02-01 10:18 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-15 09:38 - 2014-02-01 10:18 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-15 09:38 - 2014-02-01 08:58 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-15 09:38 - 2014-02-01 08:58 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-15 09:38 - 2014-02-01 08:57 - 14359040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-15 09:38 - 2014-02-01 08:57 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-15 09:38 - 2014-02-01 08:57 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-15 09:38 - 2014-02-01 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-15 09:38 - 2014-02-01 08:57 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-15 09:38 - 2014-02-01 08:57 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-14 22:18 - 2014-02-14 22:18 - 00027801 _____ () C:\Users\Marco\Desktop\JRT.txt
2014-02-14 22:08 - 2014-02-14 22:08 - 00000000 ____D () C:\Windows\ERUNT
2014-02-14 22:00 - 2014-02-14 22:00 - 00006470 _____ () C:\Users\Marco\Desktop\AdwCleaner[S0].zip
2014-02-14 21:58 - 2014-02-16 19:56 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-02-14 21:57 - 2014-02-14 21:57 - 00040704 _____ () C:\Users\Marco\Desktop\AdwCleaner[S0].txt
2014-02-14 21:49 - 2014-02-14 21:52 - 00000000 ____D () C:\AdwCleaner
2014-02-14 21:13 - 2014-02-14 21:13 - 00011404 _____ () C:\Users\Marco\Desktop\mbam-log-2014-02-14 (20-53-55).rar
2014-02-14 20:49 - 2014-02-14 20:49 - 00001117 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Malwarebytes
2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-14 20:49 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-02-14 16:59 - 2014-02-14 16:59 - 00005973 _____ () C:\Users\Marco\AppData\Local\recently-used.xbel
2014-02-13 21:11 - 2014-02-14 21:05 - 00000000 ____D () C:\ProgramData\AppptoU
2014-02-13 21:11 - 2014-02-13 21:11 - 00000000 ____D () C:\Users\Marco\AppData\Local\Packages
2014-02-13 17:18 - 2014-02-13 17:18 - 00177913 _____ () C:\ComboFix.txt
2014-02-13 16:37 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-02-13 16:37 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-02-13 16:37 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-02-13 16:37 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-02-13 16:37 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-02-13 16:37 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-02-13 16:37 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-02-13 16:37 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-02-13 16:36 - 2014-02-13 17:18 - 00000000 ____D () C:\Qoobox
2014-02-13 16:36 - 2014-02-13 17:16 - 00000000 ____D () C:\Windows\erdnt
2014-02-13 16:33 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-13 16:33 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-13 16:33 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-13 16:33 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-13 16:33 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-13 16:33 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-13 16:33 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-13 16:33 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-13 16:33 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-13 16:33 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-13 16:33 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-13 16:33 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-13 16:33 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-13 16:33 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-13 16:33 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-13 16:33 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-13 16:33 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-13 16:33 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-13 16:33 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-13 16:33 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-13 16:33 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-13 16:33 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-13 16:33 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-13 16:33 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-13 16:33 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-13 16:33 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-13 16:33 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-13 16:33 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-13 16:32 - 2014-02-13 16:32 - 05180679 ____R (Swearware) C:\Users\Marco\Desktop\ComboFix.exe
2014-02-12 14:30 - 2014-02-12 14:33 - 00040672 _____ () C:\Users\Marco\Desktop\Addition.txt
2014-02-12 14:28 - 2014-02-12 14:33 - 00069527 _____ () C:\Users\Marco\Desktop\FRST.txt
2014-02-12 14:26 - 2014-02-16 20:13 - 00000000 ____D () C:\FRST
2014-02-10 21:31 - 2014-02-10 23:09 - 00000000 ____D () C:\Users\Marco\Desktop\Dusty
2014-02-08 10:35 - 2014-02-08 10:35 - 00002968 _____ () C:\Windows\System32\Tasks\{65B6DA46-08F9-42DC-9D21-68ECB5FEEE0A}
2014-02-08 10:34 - 2014-02-08 10:34 - 00002970 _____ () C:\Windows\System32\Tasks\{CFC12328-BB91-45A7-A7C8-E057AD886176}
2014-02-08 10:08 - 2014-02-08 10:08 - 00002968 _____ () C:\Windows\System32\Tasks\{041F2130-E6FD-40C5-BBE9-52AFC0D96381}
2014-02-08 10:07 - 2014-02-08 10:07 - 00003186 _____ () C:\Windows\System32\Tasks\{29666182-CFDA-470B-A7D8-2515F863832A}
2014-02-07 23:57 - 2014-02-07 23:57 - 00002968 _____ () C:\Windows\System32\Tasks\{F3C812C3-7D7C-44A0-8952-6F379977FA97}
2014-02-07 23:51 - 2014-02-07 23:51 - 00002968 _____ () C:\Windows\System32\Tasks\{7BB0731C-19BC-41B6-A803-F42127F20CFD}
2014-02-07 23:45 - 2014-02-07 23:45 - 00002968 _____ () C:\Windows\System32\Tasks\{131E5AAD-9FED-42AE-9D92-C791A6FE5F3F}
2014-02-07 23:44 - 2014-02-07 23:44 - 00002968 _____ () C:\Windows\System32\Tasks\{D7F197EB-B937-43E7-AE7F-216C7702BE4B}
2014-02-07 23:43 - 2014-02-07 23:43 - 00002968 _____ () C:\Windows\System32\Tasks\{9E305CFD-F157-4A9F-992A-C12E920A12BA}
2014-02-06 19:56 - 2014-02-13 16:33 - 00000000 ____D () C:\Users\Marco\Desktop\Jannik
2014-02-06 19:18 - 2014-02-06 19:18 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\LibreOffice
2014-02-06 19:16 - 2014-02-06 19:16 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\OpenOffice.org
2014-02-06 17:02 - 2014-02-06 17:02 - 00001386 _____ () C:\Users\Marco\Desktop\iTunes - Verknüpfung.lnk
2014-02-06 16:41 - 2014-02-06 16:41 - 01755604 _____ () C:\Users\Marco\Desktop\1871270_683350511717566_7622_n.mp4
2014-02-05 20:35 - 2014-02-10 20:30 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-03 16:59 - 2014-02-03 16:59 - 00000000 ____D () C:\Users\Marco\Desktop\Feuerwehr
2014-02-03 14:41 - 2014-02-03 14:41 - 00001637 _____ () C:\Users\Marco\Desktop\TeamViewer 9.lnk
2014-02-02 16:49 - 2014-02-02 16:49 - 00001201 _____ () C:\Users\Marco\Desktop\Ressourcenmonitor.lnk
2014-01-31 16:03 - 2014-02-14 21:05 - 00000000 ____D () C:\ProgramData\EXEcheckker
2014-01-31 16:03 - 2014-01-31 16:03 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-31 16:03 - 2014-01-31 16:03 - 00000000 ____D () C:\ProgramData\okdlfihameoodkafnckcnpfidcndgekh
2014-01-31 15:35 - 2014-01-31 15:35 - 00001956 _____ () C:\Users\Public\Desktop\avast! Premier.lnk
2014-01-31 15:28 - 2014-01-31 15:28 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Wichtiges
2014-01-31 15:15 - 2014-01-31 15:15 - 01884977 _____ () C:\Users\Marco\Desktop\1608083_186652868212024_888047451_n.mp4
2014-01-31 06:40 - 2014-01-31 06:40 - 01884977 _____ () C:\Users\Marco\Desktop\bus
2014-01-29 20:27 - 2014-02-14 21:05 - 00000000 ____D () C:\ProgramData\shoppnnDroop
2014-01-29 20:27 - 2014-02-14 21:05 - 00000000 ____D () C:\ProgramData\ApPtoU
2014-01-29 20:27 - 2014-02-13 21:12 - 00000000 ____D () C:\ProgramData\2ff1ddb567438de4
2014-01-29 20:27 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\hehonoiddkebnfobcdlakohjokfldcmh
2014-01-28 20:49 - 2014-01-28 20:49 - 15336718 _____ () C:\Users\Marco\Desktop\1055344_371045796370724_676684399_n.mp4
2014-01-27 17:24 - 2014-01-27 17:24 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-27 17:24 - 2014-01-27 17:24 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-27 17:21 - 2014-01-27 17:21 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-27 17:21 - 2014-01-27 17:21 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-27 17:11 - 2014-01-27 17:12 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-27 17:11 - 2014-01-27 17:12 - 00000000 ____D () C:\Program Files\iTunes
2014-01-27 17:11 - 2014-01-27 17:12 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-01-27 17:11 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files\iPod
2014-01-26 12:24 - 2014-01-26 12:25 - 04685821 _____ () C:\Users\Marco\Desktop\Berufscheck der kleinen Mia.wmv
2014-01-26 12:19 - 2014-01-26 12:21 - 04117893 _____ () C:\Users\Marco\Desktop\Poledancestange im Kinderzimmer.wmv
2014-01-25 17:19 - 2014-01-25 17:20 - 05973713 _____ () C:\Users\Marco\Desktop\Ein Müllmann rastet aus.wmv
2014-01-25 16:52 - 2014-01-25 16:52 - 00000000 ____D () C:\Program Files (x86)\DsNET Corp
2014-01-25 16:30 - 2014-01-25 16:30 - 29836541 _____ () C:\Users\Marco\Desktop\ROLLIN` SAFARI - what if animals were round_.mp4
2014-01-25 16:30 - 2014-01-25 16:30 - 00000000 ____D () C:\Users\Marco\dwhelper
2014-01-24 18:22 - 2014-01-24 18:23 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Sonstige
2014-01-19 22:39 - 2014-01-19 22:39 - 00000032 _____ () C:\Windows\Menu.INI
2014-01-19 19:05 - 2014-01-19 20:04 - 866302861 _____ () C:\Users\Marco\Dusty.zip

==================== One Month Modified Files and Folders =======

2014-02-16 20:13 - 2014-02-12 14:26 - 00000000 ____D () C:\FRST
2014-02-16 20:11 - 2013-08-22 11:24 - 00001120 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002UA.job
2014-02-16 20:04 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-16 20:04 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-16 20:00 - 2010-11-05 22:37 - 01986251 _____ () C:\Windows\WindowsUpdate.log
2014-02-16 19:58 - 2010-11-06 07:28 - 00654852 _____ () C:\Windows\system32\perfh007.dat
2014-02-16 19:58 - 2010-11-06 07:28 - 00130434 _____ () C:\Windows\system32\perfc007.dat
2014-02-16 19:58 - 2009-07-14 06:13 - 01500358 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-16 19:56 - 2014-02-14 21:58 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-02-16 19:56 - 2011-01-17 16:11 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Skype
2014-02-16 19:55 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-02-16 19:54 - 2013-08-17 00:57 - 00000000 ___RD () C:\Users\Marco\Dropbox
2014-02-16 19:54 - 2013-08-17 00:55 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Dropbox
2014-02-16 19:54 - 2013-04-17 17:00 - 00000000 ___RD () C:\Users\Marco\Google Drive
2014-02-16 19:50 - 2011-02-04 19:36 - 00001104 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-16 19:50 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-16 19:49 - 2010-11-05 22:34 - 00760164 _____ () C:\Windows\PFRO.log
2014-02-16 19:49 - 2009-07-14 05:51 - 00310329 _____ () C:\Windows\setupact.log
2014-02-16 19:47 - 2011-01-17 15:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\SoftGrid Client
2014-02-16 19:43 - 2011-02-04 19:36 - 00001108 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-16 19:41 - 2012-11-15 20:12 - 00003958 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{604A8C80-AF97-4E6B-B718-0ADED238F7E3}
2014-02-16 19:32 - 2012-05-29 20:49 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-16 14:32 - 2013-11-20 14:18 - 00245892 _____ () C:\Windows\IE11_main.log
2014-02-16 00:48 - 2013-11-08 18:26 - 00000000 ____D () C:\Users\SERVER\Desktop\Intragart-Flyer
2014-02-16 00:08 - 2011-08-03 10:50 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Liteon
2014-02-15 22:24 - 2011-01-17 17:08 - 00000000 _____ () C:\Windows\system32\Drivers\lvuvc.hs
2014-02-15 18:53 - 2012-10-15 13:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-15 18:52 - 2012-07-10 15:26 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-02-15 14:06 - 2011-11-07 20:14 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\vlc
2014-02-15 11:34 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-15 09:47 - 2014-02-15 09:46 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 22:42 - 2012-01-24 14:55 - 04512256 ___SH () C:\Users\Marco\Desktop\Thumbs.db
2014-02-14 22:19 - 2013-08-22 11:24 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1767309948-3694062471-1967485482-1002Core.job
2014-02-14 22:18 - 2014-02-14 22:18 - 00027801 _____ () C:\Users\Marco\Desktop\JRT.txt
2014-02-14 22:08 - 2014-02-14 22:08 - 00000000 ____D () C:\Windows\ERUNT
2014-02-14 22:00 - 2014-02-14 22:00 - 00006470 _____ () C:\Users\Marco\Desktop\AdwCleaner[S0].zip
2014-02-14 22:00 - 2011-02-20 12:00 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-02-14 21:57 - 2014-02-14 21:57 - 00040704 _____ () C:\Users\Marco\Desktop\AdwCleaner[S0].txt
2014-02-14 21:52 - 2014-02-14 21:49 - 00000000 ____D () C:\AdwCleaner
2014-02-14 21:52 - 2011-08-14 22:51 - 00000000 ____D () C:\ProgramData\ICQ
2014-02-14 21:13 - 2014-02-14 21:13 - 00011404 _____ () C:\Users\Marco\Desktop\mbam-log-2014-02-14 (20-53-55).rar
2014-02-14 21:05 - 2014-02-13 21:11 - 00000000 ____D () C:\ProgramData\AppptoU
2014-02-14 21:05 - 2014-01-31 16:03 - 00000000 ____D () C:\ProgramData\EXEcheckker
2014-02-14 21:05 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\shoppnnDroop
2014-02-14 21:05 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\ApPtoU
2014-02-14 20:49 - 2014-02-14 20:49 - 00001117 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Malwarebytes
2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-02-14 20:49 - 2014-02-14 20:49 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-14 16:59 - 2014-02-14 16:59 - 00005973 _____ () C:\Users\Marco\AppData\Local\recently-used.xbel
2014-02-14 16:59 - 2012-08-05 22:10 - 00000000 ____D () C:\Users\Marco\.gimp-2.8
2014-02-14 16:11 - 2012-06-05 11:02 - 00007667 _____ () C:\Users\Marco\AppData\Local\resmon.resmoncfg
2014-02-13 21:12 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\2ff1ddb567438de4
2014-02-13 21:11 - 2014-02-13 21:11 - 00000000 ____D () C:\Users\Marco\AppData\Local\Packages
2014-02-13 17:18 - 2014-02-13 17:18 - 00177913 _____ () C:\ComboFix.txt
2014-02-13 17:18 - 2014-02-13 16:36 - 00000000 ____D () C:\Qoobox
2014-02-13 17:18 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-02-13 17:17 - 2012-10-01 15:39 - 00000000 ___RD () C:\Users\Schule\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-13 17:17 - 2011-01-17 15:17 - 00000000 ___RD () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-13 17:16 - 2014-02-13 16:36 - 00000000 ____D () C:\Windows\erdnt
2014-02-13 17:10 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-02-13 17:07 - 2009-07-14 03:34 - 82575360 _____ () C:\Windows\system32\config\SOFTWARE.bak
2014-02-13 17:07 - 2009-07-14 03:34 - 27000832 _____ () C:\Windows\system32\config\SYSTEM.bak
2014-02-13 17:07 - 2009-07-14 03:34 - 14155776 _____ () C:\Windows\system32\config\DEFAULT.bak
2014-02-13 17:07 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\SECURITY.bak
2014-02-13 17:07 - 2009-07-14 03:34 - 00262144 _____ () C:\Windows\system32\config\SAM.bak
2014-02-13 16:36 - 2013-09-29 15:08 - 00000000 ____D () C:\Users\Marco\AppData\Local\CrashDumps
2014-02-13 16:33 - 2014-02-06 19:56 - 00000000 ____D () C:\Users\Marco\Desktop\Jannik
2014-02-13 16:32 - 2014-02-13 16:32 - 05180679 ____R (Swearware) C:\Users\Marco\Desktop\ComboFix.exe
2014-02-12 16:08 - 2014-01-15 16:41 - 00000600 _____ () C:\Users\Marco\AppData\Local\PUTTY.RND
2014-02-12 14:33 - 2014-02-12 14:30 - 00040672 _____ () C:\Users\Marco\Desktop\Addition.txt
2014-02-12 14:33 - 2014-02-12 14:28 - 00069527 _____ () C:\Users\Marco\Desktop\FRST.txt
2014-02-10 23:09 - 2014-02-10 21:31 - 00000000 ____D () C:\Users\Marco\Desktop\Dusty
2014-02-10 22:27 - 2011-11-28 14:24 - 00000000 ____D () C:\Users\Marco\Tracing
2014-02-10 20:30 - 2014-02-05 20:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-10 15:49 - 2014-01-04 02:49 - 00003912 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-02-08 10:35 - 2014-02-08 10:35 - 00002968 _____ () C:\Windows\System32\Tasks\{65B6DA46-08F9-42DC-9D21-68ECB5FEEE0A}
2014-02-08 10:34 - 2014-02-08 10:34 - 00002970 _____ () C:\Windows\System32\Tasks\{CFC12328-BB91-45A7-A7C8-E057AD886176}
2014-02-08 10:08 - 2014-02-08 10:08 - 00002968 _____ () C:\Windows\System32\Tasks\{041F2130-E6FD-40C5-BBE9-52AFC0D96381}
2014-02-08 10:07 - 2014-02-08 10:07 - 00003186 _____ () C:\Windows\System32\Tasks\{29666182-CFDA-470B-A7D8-2515F863832A}
2014-02-07 23:57 - 2014-02-07 23:57 - 00002968 _____ () C:\Windows\System32\Tasks\{F3C812C3-7D7C-44A0-8952-6F379977FA97}
2014-02-07 23:51 - 2014-02-07 23:51 - 00002968 _____ () C:\Windows\System32\Tasks\{7BB0731C-19BC-41B6-A803-F42127F20CFD}
2014-02-07 23:45 - 2014-02-07 23:45 - 00002968 _____ () C:\Windows\System32\Tasks\{131E5AAD-9FED-42AE-9D92-C791A6FE5F3F}
2014-02-07 23:44 - 2014-02-07 23:44 - 00002968 _____ () C:\Windows\System32\Tasks\{D7F197EB-B937-43E7-AE7F-216C7702BE4B}
2014-02-07 23:43 - 2014-02-07 23:43 - 00002968 _____ () C:\Windows\System32\Tasks\{9E305CFD-F157-4A9F-992A-C12E920A12BA}
2014-02-07 23:37 - 2011-01-21 16:34 - 00000000 ____D () C:\Users\Marco\Spiele
2014-02-06 19:18 - 2014-02-06 19:18 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\LibreOffice
2014-02-06 19:16 - 2014-02-06 19:16 - 00000000 ____D () C:\Users\Besucher\AppData\Roaming\OpenOffice.org
2014-02-06 17:02 - 2014-02-06 17:02 - 00001386 _____ () C:\Users\Marco\Desktop\iTunes - Verknüpfung.lnk
2014-02-06 16:41 - 2014-02-06 16:41 - 01755604 _____ () C:\Users\Marco\Desktop\1871270_683350511717566_7622_n.mp4
2014-02-05 20:32 - 2012-05-29 20:49 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-05 20:32 - 2012-05-29 20:49 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-05 20:32 - 2012-05-29 20:49 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-05 14:36 - 2013-12-26 22:17 - 00000000 ____D () C:\Users\Besucher\AppData\Local\CrashDumps
2014-02-04 15:43 - 2011-01-17 15:16 - 00162544 _____ () C:\Users\Marco\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-03 16:59 - 2014-02-03 16:59 - 00000000 ____D () C:\Users\Marco\Desktop\Feuerwehr
2014-02-03 14:41 - 2014-02-03 14:41 - 00001637 _____ () C:\Users\Marco\Desktop\TeamViewer 9.lnk
2014-02-02 16:49 - 2014-02-02 16:49 - 00001201 _____ () C:\Users\Marco\Desktop\Ressourcenmonitor.lnk
2014-02-01 10:20 - 2014-02-15 09:39 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-01 10:19 - 2014-02-15 09:38 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-01 10:19 - 2014-02-15 09:38 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-01 10:18 - 2014-02-15 09:39 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-01 10:18 - 2014-02-15 09:39 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-01 10:18 - 2014-02-15 09:39 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-02-01 10:18 - 2014-02-15 09:39 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-01 10:18 - 2014-02-15 09:39 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-01 10:18 - 2014-02-15 09:38 - 19274240 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-01 10:18 - 2014-02-15 09:38 - 15403520 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-01 10:18 - 2014-02-15 09:38 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-01 10:18 - 2014-02-15 09:38 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-01 10:18 - 2014-02-15 09:38 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-02-01 10:18 - 2014-02-15 09:38 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-01 10:18 - 2014-02-15 09:38 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-01 08:58 - 2014-02-15 09:38 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-01 08:58 - 2014-02-15 09:38 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-01 08:57 - 2014-02-15 09:39 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-01 08:57 - 2014-02-15 09:39 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-01 08:57 - 2014-02-15 09:39 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-01 08:57 - 2014-02-15 09:39 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-02-01 08:57 - 2014-02-15 09:39 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-01 08:57 - 2014-02-15 09:39 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-01 08:57 - 2014-02-15 09:38 - 14359040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-01 08:57 - 2014-02-15 09:38 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-01 08:57 - 2014-02-15 09:38 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-01 08:57 - 2014-02-15 09:38 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-02-01 08:57 - 2014-02-15 09:38 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-01 08:57 - 2014-02-15 09:38 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-01 08:40 - 2014-02-15 09:39 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-01 08:34 - 2014-02-15 09:39 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-01 07:45 - 2014-02-15 09:39 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-02-01 07:38 - 2014-02-15 09:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-02-01 01:56 - 2013-12-02 21:16 - 00000000 ____D () C:\Users\SERVER\Desktop\Intragart
2014-02-01 01:26 - 2013-08-29 18:48 - 00162544 _____ () C:\Users\SERVER\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-31 16:03 - 2014-01-31 16:03 - 00000306 __RSH () C:\ProgramData\ntuser.pol
2014-01-31 16:03 - 2014-01-31 16:03 - 00000000 ____D () C:\ProgramData\okdlfihameoodkafnckcnpfidcndgekh
2014-01-31 16:03 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-01-31 16:03 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-01-31 15:53 - 2012-05-12 13:25 - 00001033 _____ () C:\Windows\wininit.ini
2014-01-31 15:52 - 2013-08-17 00:56 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-01-31 15:35 - 2014-01-31 15:35 - 00001956 _____ () C:\Users\Public\Desktop\avast! Premier.lnk
2014-01-31 15:32 - 2014-01-13 18:52 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-01-31 15:32 - 2013-03-21 13:53 - 00440672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2014-01-31 15:32 - 2011-07-21 08:15 - 01038072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-01-31 15:32 - 2011-07-21 08:15 - 00421704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-01-31 15:32 - 2011-07-21 08:15 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-01-31 15:32 - 2011-07-21 08:15 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-01-31 15:32 - 2011-07-21 08:14 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-01-31 15:28 - 2014-01-31 15:28 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Wichtiges
2014-01-31 15:15 - 2014-01-31 15:15 - 01884977 _____ () C:\Users\Marco\Desktop\1608083_186652868212024_888047451_n.mp4
2014-01-31 06:40 - 2014-01-31 06:40 - 01884977 _____ () C:\Users\Marco\Desktop\bus
2014-01-29 20:27 - 2014-01-29 20:27 - 00000000 ____D () C:\ProgramData\hehonoiddkebnfobcdlakohjokfldcmh
2014-01-28 20:49 - 2014-01-28 20:49 - 15336718 _____ () C:\Users\Marco\Desktop\1055344_371045796370724_676684399_n.mp4
2014-01-27 21:06 - 2013-07-06 09:23 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\.minecraft
2014-01-27 17:24 - 2014-01-27 17:24 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-27 17:24 - 2014-01-27 17:24 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-27 17:24 - 2013-11-15 15:52 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-27 17:24 - 2013-11-15 15:52 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-27 17:24 - 2013-11-15 15:52 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-27 17:21 - 2014-01-27 17:21 - 00312744 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-01-27 17:21 - 2014-01-27 17:21 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-01-27 17:21 - 2014-01-27 17:21 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-01-27 17:21 - 2013-07-11 19:36 - 00000000 ____D () C:\Program Files\Java
2014-01-27 17:15 - 2012-04-18 15:24 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-01-27 17:15 - 2012-04-18 15:23 - 00000000 ____D () C:\Program Files (x86)\WinRAR
2014-01-27 17:12 - 2014-01-27 17:11 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-01-27 17:12 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files\iTunes
2014-01-27 17:12 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-01-27 17:11 - 2014-01-27 17:11 - 00000000 ____D () C:\Program Files\iPod
2014-01-26 16:53 - 2011-02-12 21:31 - 01018368 ___SH () C:\Users\Marco\Thumbs.db
2014-01-26 12:25 - 2014-01-26 12:24 - 04685821 _____ () C:\Users\Marco\Desktop\Berufscheck der kleinen Mia.wmv
2014-01-26 12:21 - 2014-01-26 12:19 - 04117893 _____ () C:\Users\Marco\Desktop\Poledancestange im Kinderzimmer.wmv
2014-01-25 17:20 - 2014-01-25 17:19 - 05973713 _____ () C:\Users\Marco\Desktop\Ein Müllmann rastet aus.wmv
2014-01-25 16:52 - 2014-01-25 16:52 - 00000000 ____D () C:\Program Files (x86)\DsNET Corp
2014-01-25 16:47 - 2012-01-13 16:55 - 00000000 ____D () C:\ProgramData\Freemake
2014-01-25 16:46 - 2012-01-13 16:54 - 00000000 ____D () C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2014-01-25 16:46 - 2012-01-13 16:54 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-01-25 16:30 - 2014-01-25 16:30 - 29836541 _____ () C:\Users\Marco\Desktop\ROLLIN` SAFARI - what if animals were round_.mp4
2014-01-25 16:30 - 2014-01-25 16:30 - 00000000 ____D () C:\Users\Marco\dwhelper
2014-01-25 16:30 - 2011-01-17 15:16 - 00000000 ___RD () C:\Users\Marco
2014-01-24 18:23 - 2014-01-24 18:22 - 00000000 ____D () C:\Users\Marco\Desktop\Eigene Daten\Documents\Sonstige
2014-01-22 16:35 - 2009-07-14 06:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-20 04:55 - 2011-08-15 10:33 - 00000000 ____D () C:\Users\Marco\Dusty
2014-01-19 22:39 - 2014-01-19 22:39 - 00000032 _____ () C:\Windows\Menu.INI
2014-01-19 20:04 - 2014-01-19 19:05 - 866302861 _____ () C:\Users\Marco\Dusty.zip

Files to move or delete:
====================
C:\Users\Marco\worldpainter_0.11.2.exe
C:\Users\Marco\worldpainter_1.2.5.exe


Some content of TEMP:
====================
C:\Users\Marco\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-08 14:42

==================== End Of Log ============================
         
--- --- ---

--- --- ---

Alt 17.02.2014, 13:26   #14
schrauber
/// the machine
/// TB-Ausbilder
 

100% Pysikalischer Speicher durch svchost.exe - Standard

100% Pysikalischer Speicher durch svchost.exe



Adobe updaten.

Fertig

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun

Hier noch ein paar Tipps zur Absicherung deines Systems.


Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
  • Bitte überprüfe ob dein System Windows Updates automatisch herunter lädt
  • Windows Updates
    • Windows XP: Start --> Systemsteuerung --> Doppelklick auf Automatische Updates
    • Windows Vista / 7: Start --> Systemsteuerung --> System und Sicherheit --> Automatische Updates aktivieren oder deaktivieren
  • Gehe sicher das die automatischen Updates aktiviert sind.
  • Software Updates
    Installierte Software kann ebenfalls Sicherheitslücken haben, welche Malware nutzen kann, um dein System zu infizieren.
    Um deine Installierte Software up to date zu halten, empfehle ich dir Secunia Online Software.


Anti- Viren Software
  • Gehe sicher immer eine Anti Viren Software installiert zu haben und das diese auch up to date ist. Es ist nämlich nutzlos wenn diese out of date sind.


Zusätzlicher Schutz
  • MalwareBytes Anti Malware
    Dies ist eines der besten Anti-Malware Tools auf dem Markt. Es ist ein On- Demond Scan Tool welches viele aktuelle Malware erkennt und auch entfernt.
    Update das Tool und lass es einmal in der Woche laufen. Die Kaufversion biete zudem noch einen Hintergrundwächter.
    Ein Tutorial zur Verwendung findest Du hier.
  • WinPatrol
    Diese Software macht einen Snapshot deines Systems und warnt dich vor eventuellen Änderungen. Downloade dir die Freeware Version von hier.


Sicheres Browsen
  • SpywareBlaster
    Eine kurze Einführung findest du Hier
  • MVPs hosts file
    Ein Tutorial findest Du hier. Leider habe ich bis jetzt kein deutschsprachiges gefunden.
  • WOT (Web of trust)
    Dieses AddOn warnt Dich bevor Du eine als schädlich gemeldete Seite besuchst.


Alternative Browser

Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
  • Opera
  • Mozilla Firefox.
    • Hinweis: Für diesen Browser habe ich hier ein paar nützliche Add Ons
    • NoScript
      Dieses AddOn blockt JavaScript, Java and Flash und andere Plugins. Sie werden nur dann ausgeführt wenn Du es bestätigst.
    • AdblockPlus
      Dieses AddOn blockt die meisten Werbung von selbst. Ein Rechtsklick auf den Banner um diesen zu AdBlockPlus hinzu zu fügen reicht und dieser wird nicht mehr geladen.
      Es spart ausserdem Downloadkapazität.

Performance
Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC
Halte dich fern von jedlichen Registry Cleanern.
Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links
Miekemoes Blogspot ( MVP )
Bill Castner ( MVP )



Don'ts
  • Klicke nicht auf alles nur weil es Dich dazu auffordert und schön bunt ist.
  • verwende keine peer to peer oder Filesharing Software (Emule, uTorrent,..)
  • Lass die Finger von Cracks, Keygens, Serials oder anderer illegaler Software.
  • Öffne keine Anhänge von Dir nicht bekannten Emails. Achte vor allem auf die Dateiendung wie zb deinFoto.jpg.exe
Nun bleibt mir nur noch dir viel Spass beim sicheren Surfen zu wünschen.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu 100% Pysikalischer Speicher durch svchost.exe
100%, arbeiten, auslastung, auslastung 100%, computer, einiger, erneut, folge, forum, gesuch, gesucht, hängt, maus, monitor, nicht mehr, problem, prozess, ressourcenmonitor, richtig, schaltet, secsvcs, speicher, spring, svchost.exe, täglich, virus, woche, wochen



Ähnliche Themen: 100% Pysikalischer Speicher durch svchost.exe


  1. Windows 7: Die Anweisung 0x7218e5a8 verweist auf den Speicher 0x00000000. Der Vorgang read konnte nicht im Speicher durchgeführt werden.
    Plagegeister aller Art und deren Bekämpfung - 19.08.2015 (4)
  2. Warnhinweis „Die Anweisung 0x734fe5a8 verweist auf den Speicher 0x00000000. Der Vorgang read konnte nicht im Speicher durchgeführt werden.“
    Plagegeister aller Art und deren Bekämpfung - 16.08.2015 (29)
  3. CPU Auslastung durch svchost.exe
    Plagegeister aller Art und deren Bekämpfung - 25.07.2015 (10)
  4. Windows 7: Speicherauslastung durch svchost.exe
    Log-Analyse und Auswertung - 25.06.2015 (16)
  5. CPU-Auslastung + physikalischer Speicher extrem hoch durch svchost (netsvcs)
    Log-Analyse und Auswertung - 19.03.2015 (3)
  6. 99% CPU Auslastung durch svchost. exe
    Plagegeister aller Art und deren Bekämpfung - 18.11.2013 (7)
  7. dauernd 100% CPU-Auslastung durch svchost.exe
    Log-Analyse und Auswertung - 12.10.2013 (27)
  8. Schädling via E-Mail in Online-Speicher geladen und geöffnet. Online-Speicher auch befallen?
    Plagegeister aller Art und deren Bekämpfung - 14.07.2013 (5)
  9. Hohe CPU Auslastung durch svchost.exe
    Log-Analyse und Auswertung - 17.02.2012 (24)
  10. svchost.exe lastet meinen Speicher aus
    Log-Analyse und Auswertung - 23.02.2011 (33)
  11. CPU Auslastung durch svchost.exe
    Plagegeister aller Art und deren Bekämpfung - 12.02.2011 (17)
  12. svchost.exe verbraucht zu viel speicher
    Log-Analyse und Auswertung - 17.10.2009 (0)
  13. CPU Überlastung durch svchost Prozesse
    Plagegeister aller Art und deren Bekämpfung - 14.10.2009 (1)
  14. Systemauslastung durch svchost.exe
    Alles rund um Windows - 06.06.2009 (2)
  15. svchost und explorer.exe nutzen CPU speicher
    Alles rund um Windows - 28.10.2007 (0)
  16. CPU Auslastung durch svchost.exe
    Log-Analyse und Auswertung - 23.05.2007 (5)

Zum Thema 100% Pysikalischer Speicher durch svchost.exe - Hallo liebes Forum, seit ungefähr zwei Wochen springt so einmal täglich die Auslastung des Physikalischen Speichers auf 100% und schwankt dann zwichen 100% und 90%. Das hat zur Folge, dass - 100% Pysikalischer Speicher durch svchost.exe...
Archiv
Du betrachtest: 100% Pysikalischer Speicher durch svchost.exe auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.