| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Malwarebythe hat 3 verdächtige Elemente gefunden!Gmx-account ständig mit spam trotz Filter!Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
22.07.2014, 11:10
| #16 |
| /// the machine /// TB-Ausbilder    |  Malwarebythe hat 3 verdächtige Elemente gefunden!Gmx-account ständig mit spam trotz Filter! Hi, ja TFC auf jeden Fal machen, und ein frisches FRST Log. Bestehen noch probleme mit dem Rechner ausser dem Kram mit Sandboxie? Von Sandboxie und Chrome hab ich mal so gar keine Ahnung 
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
22.07.2014, 14:46
| #17 |
 | Malwarebythe hat 3 verdächtige Elemente gefunden!Gmx-account ständig mit spam trotz Filter! Lieber Schrauber!
__________________Schade, dass Sie sich mit Sandboxie nicht so auskennen, wie auch nicht mit Chrome. Was ist denn Ihr bevorzugter Browser? Also, ich habe heute wieder ein paar Stunden in die Justierung der Sandboxieeinstellungen investiert. Zwischendrin konnte ich keine runtergeladene Datei mehr öffnen. Jetzt geht das wieder! Vielleicht lösche ich die Sandboxie auch mal komplett und spiele neu auf! Mir ist immer noch nicht klar, ob die Tatsache, dass Google Chrome die vorgenommenen Settings nicht behält, ein Problem von der Sandboxie ist und deren Grundeinstellungen oder damit zusammenhängt, weil der PC noch nicht ganz sauber ist. Im Netz, bei der Recherche nach Antworten dort, steht, dass es mit Viren auf dem PC oft zusammenhängt. Hm .. wir werden sehen. Was ich getan habe: 1) TFC laufen lassen 2) frische Log-Dateien jetzt FRST: a) Allgemein_Log FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-07-2014
Ran by smenz (administrator) on NOTEBOOK-N5050 on 22-07-2014 15:43:44
Running from C:\Users\smenz\Desktop\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Atheros) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(FileHippo.com) C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(SurfRight B.V.) C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SandboxieRpcSs.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SandboxieDcomLaunch.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\32\SbieSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SandboxieCrypto.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [608112 2011-03-29] (Alps Electric Co., Ltd.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-05-27] (IDT, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-13] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [emsisoft anti-malware] => c:\program files (x86)\emsisoft anti-malware\a2guard.exe [4841824 2014-07-09] (Emsisoft GmbH)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2732600908-1742709287-786376233-1000\...\Run: [FileHippo.com] => C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com)
HKU\S-1-5-21-2732600908-1742709287-786376233-1000\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [784392 2014-05-29] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-2732600908-1742709287-786376233-1000\...\Run: [WinPatrol] => C:\Program Files (x86)\Ruiware\WinPatrol\winpatrol.exe [1154112 2014-07-21] (Ruiware LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\smenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers: SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - DefaultScope value is missing.
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/121022/CTPID.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=11.11.2 - C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.11.2 - C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\smenz\npAmazonMP3DownloaderPlugin101753.dll No File
Chrome:
=======
CHR Extension: (Google Docs) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-21]
CHR Extension: (Google Drive) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-21]
CHR Extension: (YouTube) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-21]
CHR Extension: (Google-Suche) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-21]
CHR Extension: (Google Wallet) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-22]
CHR Extension: (Google Mail) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-21]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [4741384 2014-07-09] (Emsisoft GmbH)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-05-20] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [80032 2011-05-20] (Atheros Commnucations) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2356408 2014-06-19] (Microsoft Corporation)
R2 hmpalertsvc; C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe [1876816 2014-07-18] (SurfRight B.V.)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [174088 2014-05-29] (Sandboxie Holdings, LLC)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
S4 McMPFSvc; "C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc [X]
==================== Drivers (Whitelisted) ====================
R3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [71472 2014-05-12] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [26176 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys [45208 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys [23088 2014-05-12] (Emsisoft GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R3 cleanhlp; C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [57024 2013-12-04] (Emsisoft GmbH)
R2 hmpalert; C:\Windows\System32\drivers\hmpalert.sys [93144 2014-07-18] ()
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [185352 2014-05-29] (Sandboxie Holdings, LLC)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)
S1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)
S1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)
S3 PCDSRVC{D3412D80-CF3B4A27-06020200}_0; \??\c:\program files\my dell\pcdsrvc_x64.pkms [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-22 14:51 - 2014-07-22 14:51 - 557210925 _____ () C:\windows\MEMORY.DMP
2014-07-22 14:51 - 2014-07-22 14:51 - 00262144 _____ () C:\windows\Minidump\072214-16208-01.dmp
2014-07-22 14:35 - 2014-07-22 14:35 - 00002958 _____ () C:\windows\System32\Tasks\{29169D5B-5852-456D-A5FD-808E368E18AF}
2014-07-22 14:35 - 2014-07-22 14:35 - 00002958 _____ () C:\windows\System32\Tasks\{0600F278-C4F2-4189-AE05-F1967F56238D}
2014-07-21 13:08 - 2014-07-21 13:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-21 12:27 - 2014-07-21 12:27 - 00000000 ____D () C:\Program Files (x86)\Ruiware
2014-07-20 19:25 - 2014-07-20 19:25 - 00272808 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-20 19:25 - 2014-07-20 19:25 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-20 18:39 - 2014-07-20 18:40 - 00000000 ____D () C:\Users\smenz\Desktop\Usefuls PDF´s
2014-07-20 18:36 - 2014-07-20 18:36 - 00000000 ____D () C:\Users\smenz\AppData\Roaming\VSRevoGroup
2014-07-20 18:21 - 2014-07-20 18:21 - 00001266 _____ () C:\Users\smenz\Desktop\Revo Uninstaller.lnk
2014-07-20 18:21 - 2014-07-20 18:21 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-17 22:00 - 2014-07-17 22:03 - 00000000 ____D () C:\AdwCleaner
2014-07-17 17:44 - 2014-07-17 17:44 - 00025355 _____ () C:\ComboFix.txt
2014-07-17 17:27 - 2011-06-26 08:45 - 00256000 _____ () C:\windows\PEV.exe
2014-07-17 17:27 - 2010-11-07 19:20 - 00208896 _____ () C:\windows\MBR.exe
2014-07-17 17:27 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00098816 _____ () C:\windows\sed.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00080412 _____ () C:\windows\grep.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00068096 _____ () C:\windows\zip.exe
2014-07-17 17:25 - 2014-07-17 17:45 - 00000000 ____D () C:\Qoobox
2014-07-17 13:05 - 2014-07-21 21:36 - 00003474 _____ () C:\windows\PFRO.log
2014-07-16 19:56 - 2014-07-22 15:43 - 00000000 ____D () C:\FRST
2014-07-16 18:32 - 2014-07-16 18:31 - 00321448 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2014-07-15 09:09 - 2014-07-22 15:07 - 00001568 _____ () C:\windows\setupact.log
2014-07-15 09:09 - 2014-07-15 09:09 - 00000000 _____ () C:\windows\setuperr.log
2014-07-09 11:14 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-07-09 11:14 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-07-09 11:14 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
2014-07-09 11:14 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
2014-07-09 11:14 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-07-09 11:14 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-07-09 11:14 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2014-07-09 11:14 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2014-07-09 11:13 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-07-09 11:13 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-07-09 11:13 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-07-09 11:13 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-07-09 11:13 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-07-09 11:13 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-07-09 11:13 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-07-09 11:13 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-07-09 11:13 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2014-07-09 11:13 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-07-09 11:13 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-07-09 11:13 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-07-09 11:13 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-07-09 11:13 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-07-09 11:13 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-07-09 11:13 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-07-09 11:13 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-07-09 11:13 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-07-09 11:13 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-07-09 11:13 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 11:13 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-07-09 11:13 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-07-09 11:13 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-07-09 11:13 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-07-09 11:13 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-07-09 11:13 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-07-09 11:13 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-07-09 11:13 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-07-09 11:13 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-07-09 11:13 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2014-07-09 11:13 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-07-09 11:13 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-07-09 11:13 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-07-09 11:13 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-07-09 11:13 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-07-09 11:13 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2014-07-09 11:13 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-07-09 11:13 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-07-09 11:13 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-07-09 11:13 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-07-09 11:13 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-09 11:13 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-07-09 11:13 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-07-09 11:13 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-07-09 11:13 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-07-09 11:13 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-07-09 11:13 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-07-09 11:13 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-07-09 11:13 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2014-07-09 11:13 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-07-09 11:13 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-07-09 11:13 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-07-09 11:13 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-07-09 11:13 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-07-09 11:13 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-07-09 11:13 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2014-07-09 11:12 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-07-09 11:12 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2014-07-09 11:12 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2014-07-03 15:37 - 2014-07-22 15:31 - 00000000 ____D () C:\windows\CryptoGuard
2014-07-03 15:37 - 2014-07-19 10:22 - 00000000 ____D () C:\Program Files (x86)\HitmanPro.Alert
2014-07-03 15:37 - 2014-07-18 11:23 - 00548424 _____ (SurfRight) C:\windows\system32\hmpalert.dll
2014-07-03 15:37 - 2014-07-18 11:23 - 00477008 _____ (SurfRight) C:\windows\SysWOW64\hmpalert.dll
2014-07-03 15:37 - 2014-07-18 11:23 - 00093144 _____ () C:\windows\system32\Drivers\hmpalert.sys
2014-07-03 15:37 - 2014-07-03 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro.Alert
2014-07-03 15:37 - 2014-07-03 15:37 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert
==================== One Month Modified Files and Folders =======
2014-07-22 15:43 - 2014-07-16 19:56 - 00000000 ____D () C:\FRST
2014-07-22 15:39 - 2013-06-12 23:38 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware
2014-07-22 15:31 - 2014-07-03 15:37 - 00000000 ____D () C:\windows\CryptoGuard
2014-07-22 15:31 - 2012-07-04 16:43 - 01491882 _____ () C:\windows\WindowsUpdate.log
2014-07-22 15:21 - 2013-06-13 17:13 - 00004984 _____ () C:\windows\Sandboxie.ini
2014-07-22 15:19 - 2014-02-21 20:01 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-07-22 15:15 - 2009-07-14 06:45 - 00020720 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-22 15:15 - 2009-07-14 06:45 - 00020720 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-22 15:07 - 2014-07-15 09:09 - 00001568 _____ () C:\windows\setupact.log
2014-07-22 15:07 - 2012-10-19 15:42 - 00001104 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-22 15:07 - 2012-07-04 17:32 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks
2014-07-22 15:07 - 2012-07-04 17:32 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks
2014-07-22 15:07 - 2012-07-04 17:21 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup
2014-07-22 15:07 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-07-22 14:54 - 2012-07-04 17:03 - 00000000 ____D () C:\ProgramData\Sonic
2014-07-22 14:51 - 2014-07-22 14:51 - 557210925 _____ () C:\windows\MEMORY.DMP
2014-07-22 14:51 - 2014-07-22 14:51 - 00262144 _____ () C:\windows\Minidump\072214-16208-01.dmp
2014-07-22 14:51 - 2013-07-06 01:27 - 00000000 ____D () C:\windows\Minidump
2014-07-22 14:48 - 2012-10-19 15:42 - 00001108 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-22 14:35 - 2014-07-22 14:35 - 00002958 _____ () C:\windows\System32\Tasks\{29169D5B-5852-456D-A5FD-808E368E18AF}
2014-07-22 14:35 - 2014-07-22 14:35 - 00002958 _____ () C:\windows\System32\Tasks\{0600F278-C4F2-4189-AE05-F1967F56238D}
2014-07-21 21:36 - 2014-07-17 13:05 - 00003474 _____ () C:\windows\PFRO.log
2014-07-21 17:09 - 2014-06-20 16:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPatrol
2014-07-21 17:08 - 2014-06-20 16:03 - 00000000 ____D () C:\ProgramData\InstallMate
2014-07-21 17:04 - 2012-10-19 13:19 - 00000000 ____D () C:\Users\smenz
2014-07-21 14:22 - 2012-07-04 19:31 - 00699666 _____ () C:\windows\system32\perfh007.dat
2014-07-21 14:22 - 2012-07-04 19:31 - 00149774 _____ () C:\windows\system32\perfc007.dat
2014-07-21 14:22 - 2009-07-14 07:13 - 01620612 _____ () C:\windows\system32\PerfStringBackup.INI
2014-07-21 13:08 - 2014-07-21 13:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-21 13:08 - 2012-10-19 15:42 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-21 12:27 - 2014-07-21 12:27 - 00000000 ____D () C:\Program Files (x86)\Ruiware
2014-07-20 21:32 - 2013-06-13 16:03 - 00000000 ____D () C:\Users\smenz\AppData\Roaming\Skype
2014-07-20 19:28 - 2012-10-19 17:47 - 00000000 ____D () C:\Users\smenz\AppData\Local\CrashDumps
2014-07-20 19:26 - 2013-12-25 09:57 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-20 19:25 - 2014-07-20 19:25 - 00272808 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-20 19:25 - 2014-07-20 19:25 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-20 18:40 - 2014-07-20 18:39 - 00000000 ____D () C:\Users\smenz\Desktop\Usefuls PDF´s
2014-07-20 18:36 - 2014-07-20 18:36 - 00000000 ____D () C:\Users\smenz\AppData\Roaming\VSRevoGroup
2014-07-20 18:23 - 2012-12-06 20:05 - 00000000 ____D () C:\Users\smenz\Documents\Booksmarks
2014-07-20 18:21 - 2014-07-20 18:21 - 00001266 _____ () C:\Users\smenz\Desktop\Revo Uninstaller.lnk
2014-07-20 18:21 - 2014-07-20 18:21 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-19 10:22 - 2014-07-03 15:37 - 00000000 ____D () C:\Program Files (x86)\HitmanPro.Alert
2014-07-18 11:23 - 2014-07-03 15:37 - 00548424 _____ (SurfRight) C:\windows\system32\hmpalert.dll
2014-07-18 11:23 - 2014-07-03 15:37 - 00477008 _____ (SurfRight) C:\windows\SysWOW64\hmpalert.dll
2014-07-18 11:23 - 2014-07-03 15:37 - 00093144 _____ () C:\windows\system32\Drivers\hmpalert.sys
2014-07-17 23:51 - 2014-06-21 21:16 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2014-07-17 23:51 - 2012-07-04 16:56 - 00000000 ____D () C:\ProgramData\Temp
2014-07-17 23:40 - 2014-06-11 15:29 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-17 22:03 - 2014-07-17 22:00 - 00000000 ____D () C:\AdwCleaner
2014-07-17 17:45 - 2014-07-17 17:25 - 00000000 ____D () C:\Qoobox
2014-07-17 17:44 - 2014-07-17 17:44 - 00025355 _____ () C:\ComboFix.txt
2014-07-17 17:39 - 2009-07-14 04:34 - 00000215 _____ () C:\windows\system.ini
2014-07-16 18:51 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\Speech
2014-07-16 18:31 - 2014-07-16 18:32 - 00321448 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2014-07-16 18:31 - 2014-06-20 14:55 - 00191400 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2014-07-16 18:31 - 2014-06-20 14:55 - 00190888 _____ (Oracle Corporation) C:\windows\system32\java.exe
2014-07-16 18:31 - 2014-06-20 14:55 - 00111016 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge-64.dll
2014-07-16 18:31 - 2014-01-24 11:42 - 00000000 ____D () C:\Program Files\Java
2014-07-15 20:41 - 2012-10-20 20:53 - 00000000 ____D () C:\Users\smenz\Documents\My Kindle Content
2014-07-15 09:09 - 2014-07-15 09:09 - 00000000 _____ () C:\windows\setuperr.log
2014-07-13 17:07 - 2014-04-06 19:24 - 00077414 _____ () C:\Users\smenz\Desktop\Übersicht Prozessarbeit 2.xlsx
2014-07-12 18:40 - 2012-11-29 22:16 - 00000000 ____D () C:\Users\smenz\Documents\ELLA
2014-07-12 18:25 - 2012-10-19 17:43 - 00000000 ____D () C:\Users\smenz\Documents\OneNote-Notizbücher
2014-07-12 12:45 - 2013-05-23 14:08 - 00000000 ____D () C:\Program Files\My Dell
2014-07-12 10:05 - 2013-05-23 14:09 - 00003440 _____ () C:\windows\System32\Tasks\PCDEventLauncherTask
2014-07-10 16:20 - 2012-10-19 18:36 - 00000000 ____D () C:\Users\smenz\AppData\Local\Microsoft Games
2014-07-10 13:32 - 2012-07-04 17:15 - 00000000 ____D () C:\ProgramData\Skype
2014-07-10 13:08 - 2014-05-19 00:35 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-07-09 17:00 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\rescache
2014-07-09 15:25 - 2009-07-14 06:45 - 00492792 _____ () C:\windows\system32\FNTCACHE.DAT
2014-07-09 15:23 - 2014-05-07 02:27 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-07-09 15:23 - 2012-07-04 19:34 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-09 15:23 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\Dism
2014-07-09 15:23 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\Dism
2014-07-09 15:12 - 2012-10-19 17:33 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-09 15:10 - 2013-08-15 21:53 - 00000000 ____D () C:\windows\system32\MRT
2014-07-09 15:04 - 2012-10-24 13:56 - 96441528 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-07-08 21:19 - 2014-02-21 20:01 - 00003822 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-07-08 21:19 - 2013-06-11 14:08 - 00699056 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-07-08 21:19 - 2013-06-11 14:08 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-04 09:42 - 2013-12-28 21:30 - 00469383 _____ () C:\Users\smenz\Desktop\Budget 2014.xlsx
2014-07-03 15:37 - 2014-07-03 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro.Alert
2014-07-03 15:37 - 2014-07-03 15:37 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert
2014-07-03 00:08 - 2014-05-31 19:53 - 00001104 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-07-01 18:58 - 2012-10-19 13:19 - 00000000 ___RD () C:\Users\smenz\Eigene Bilder
2014-06-30 04:09 - 2014-07-09 11:14 - 00519168 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-06-30 04:04 - 2014-07-09 11:14 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-06-29 13:04 - 2013-07-02 18:12 - 00023731 _____ () C:\Users\smenz\Desktop\Books Releases.xlsx
2014-06-26 14:51 - 2013-06-17 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-06-26 14:51 - 2013-06-17 16:48 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-25 18:43 - 2012-10-19 15:42 - 00004104 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-25 18:43 - 2012-10-19 15:42 - 00003852 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-24 11:24 - 2012-07-04 19:34 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-06-22 20:06 - 2013-05-08 13:43 - 00000000 ____D () C:\Users\smenz\AppData\Local\Windows Live
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-07-18 14:21
==================== End Of Log ============================
--- --- --- b) Additionslog: Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-07-2014
Ran by smenz at 2014-07-22 15:40:49
Running from C:\Users\smenz\Desktop\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Emsisoft Anti-Malware (Enabled - Up to date) {8504DEEF-CC04-1F76-2137-F1A5F4A659DA}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Emsisoft Anti-Malware (Enabled - Up to date) {3E653F0B-EA3E-10F8-1B87-CAD78F211367}
==================== Installed Programs ======================
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
Amazon Kindle (HKCU\...\Amazon Kindle) (Version: - Amazon)
Amazon MP3-Downloader 1.0.17 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.83 - Atheros Communications)
CCleaner (HKLM\...\CCleaner) (Version: 4.15 - Piriform)
CrystalDiskMark 3.0.3b (HKLM\...\CrystalDiskMark_is1) (Version: 3.0.3b - Crystal Dew World)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5C78021E-3C8E-4EDF-97EA-E9B8D808FD6D}) (Version: - Microsoft)
Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.67 - Dell Inc.)
Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.67 - Dell Inc.)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell MusicStage (HKLM-x32\...\{3E90B7F4-1817-4405-B4A5-E4EA5EC0E2B3}) (Version: 1.6.225.0 - Fingertapps)
Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.130 - ArcSoft)
Dell Stage (HKLM-x32\...\{E2F57269-065E-4B19-8CDA-AB6C401FAF1A}) (Version: 1.7.209.0 - Fingertapps)
Dell Stage Remote (HKLM-x32\...\{AF4D3C63-009B-4A17-B02E-D395065DD3F0}) (Version: 2.0.0.43 - ArcSoft)
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.1207.101.225 - ALPS ELECTRIC CO., LTD.)
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.01.17 - Creative Technology Ltd)
Dell WLAN and Bluetooth Client Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Dell Inc.)
DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden
Emsisoft Anti-Malware (HKLM-x32\...\{BC30E5E7-047D-4232-A7E8-F2CB7CC7B2E0}_is1) (Version: 7.0 - Emsisoft GmbH)
FileHippo.com Update Checker (HKLM-x32\...\FileHippo.com) (Version: - )
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
FreeCommander XE (HKLM-x32\...\FreeCommander XE_is1) (Version: Preview - Marek Jasinski)
FreeMind (HKLM-x32\...\B991B020-2968-11D8-AF23-444553540000_is1) (Version: 1.0.0 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
HitmanPro.Alert (HKLM\...\HitmanPro.Alert) (Version: 2.6.5.77 - SurfRight B.V.)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2342 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)
Java 7 Update 55 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417055FF}) (Version: 7.0.550 - Oracle)
Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217065FF}) (Version: 7.0.650 - Oracle)
Java 8 Update 11 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418011FF}) (Version: 8.0.110 - Oracle Corporation)
Java Auto Updater (x32 Version: 2.8.11.12 - Oracle, Inc.) Hidden
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0407-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0409-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.0.4041.0512 - Microsoft Corporation)
Microsoft OneNote 2013 - de-de (HKLM\...\OneNoteFreeRetail - de-de) (Version: 15.0.4631.1002 - Microsoft Corporation)
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit (HKLM-x32\...\{95140000-007D-0409-0000-0000000FF1CE}) (Version: 14.0.5120.5000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1 - Nokia) Hidden
Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1 - Nokia) Hidden
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
My Dell (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.)
Nero 10 Movie ThemePack Basic (x32 Version: 10.6.10000.1.0 - Nero AG) Hidden
Nero Blu-ray Player (x32 Version: 12.0.20012 - Nero AG) Hidden
Nero Control Center 10 (x32 Version: 10.6.13000.0.11 - Nero AG) Hidden
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.2.10800 - Nero AG) Hidden
Nero Core Components 10 (x32 Version: 2.0.20500.9.16 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11500.28.0 - Nero AG) Hidden
Nokia Connectivity Cable Driver (HKLM-x32\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)
Nokia Suite (HKLM-x32\...\Nokia Suite) (Version: 3.8.48.0 - Nokia)
Nokia Suite (x32 Version: 3.8.48.0 - Nokia) Hidden
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4631.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4631.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4631.1002 - Microsoft Corporation) Hidden
Panda USB Vaccine 1.0.1.4 (HKLM-x32\...\{55A41219-9B22-4098-BAE7-AE289B3C569A}_is1) (Version: - Panda Security)
PC Connectivity Solution (HKLM-x32\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)
Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
PhotoShowExpress (x32 Version: 2.0.063 - Sonic Solutions) Hidden
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 10.09.25 - Dell Inc.)
RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.45.516.2011 - Realtek)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30126 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Roxio Activation Module (x32 Version: 1.0 - Roxio) Hidden
Roxio BackOnTrack (x32 Version: 1.3.3 - Roxio) Hidden
Roxio Burn (x32 Version: 1.8 - Roxio) Hidden
Roxio Creator Starter (x32 Version: 1.0.439 - Roxio) Hidden
Roxio Express Labeler 3 (x32 Version: 3.2.2 - Roxio) Hidden
Roxio File Backup (Version: 1.3.2 - Roxio) Hidden
Sandboxie 4.12 (64-bit) (HKLM\...\Sandboxie) (Version: 4.12 - Sandboxie Holdings, LLC)
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Similarity 1.8.1 (HKLM-x32\...\{6AF7A3DF-581E-4AB7-ACAF-2051FF7E8ACF}) (Version: 1.8.1626 - GAR Software)
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.105 - Skype Technologies S.A.)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden
SpywareBlaster 5.0 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)
SyncUP (HKLM-x32\...\{D92C9CCE-E5F0-4125-977A-0590F3225B74}) (Version: 10.2.16500 - Nero AG)
SyncUP (x32 Version: 1.12.12400.17.102 - Nero AG) Hidden
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.29480 - TeamViewer)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft)
Update for Microsoft Excel 2010 (KB2837600) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4ACD847E-547D-493F-9A86-F73EAE1B5174}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{EAD7BEF9-B28C-425F-B2C5-538CB27EF013}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{C0BDC1DE-C35E-422B-8CBD-C1D555468720}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft)
Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version: - Microsoft)
Windows Live Communications Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)
WinPatrol (HKLM\...\{6A206A04-6BC1-411B-AA04-4E52EDEEADF2}) (Version: 32.0.2014.5 - Ruiware)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
==================== Restore Points =========================
01-07-2014 11:48:44 Windows Update
08-07-2014 12:44:33 Windows Update
09-07-2014 13:00:51 Windows Update
16-07-2014 16:27:34 Windows Update
16-07-2014 16:31:07 Installed Java 8 Update 11 (64-bit)
20-07-2014 16:43:32 Revo Uninstaller's restore point - Google Chrome
20-07-2014 17:24:31 Installed Java 7 Update 65
20-07-2014 17:43:54 Revo Uninstaller's restore point - Google Chrome
20-07-2014 17:51:21 Revo Uninstaller's restore point - Google Chrome
21-07-2014 10:39:04 Revo Uninstaller's restore point - Google Chrome
21-07-2014 11:02:55 Revo Uninstaller's restore point - Google Chrome
22-07-2014 11:04:32 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2013-06-10 22:45 - 00000027 ____A C:\windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {0FEEEA04-5676-445A-A8C5-A3B262C3676D} - System32\Tasks\{98A8DF74-175B-46BD-B27C-63F076F8CBC1} => C:\Users\smenz\Desktop\Downloads\chrome_installer._29.0.1547.62.exe
Task: {11BCC9FF-6624-48DD-A0A9-037105613877} - System32\Tasks\PandaUSBVaccine => C:\Program Files (x86)\Panda USB Vaccine\RunInteractiveWin.exe [2009-09-23] ()
Task: {17E38759-A46F-42DC-A758-D4673712CB46} - System32\Tasks\{0600F278-C4F2-4189-AE05-F1967F56238D} => C:\Users\smenz\Desktop\Downloads\TFC.exe [2014-07-22] (OldTimer Tools)
Task: {1D2279FA-E30C-4583-B25F-D8871A93935D} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {5B897616-53C2-4506-BEFD-2118A0745329} - System32\Tasks\{29169D5B-5852-456D-A5FD-808E368E18AF} => C:\Users\smenz\Desktop\Downloads\TFC.exe [2014-07-22] (OldTimer Tools)
Task: {6EE831A9-50B2-4E89-938F-C09D46ED9487} - System32\Tasks\Biokiste
Task: {73EDA546-2E35-4DFE-9DFE-323240375C74} - System32\Tasks\0 => Iexplore.exe
Task: {743DBCE6-710E-4116-9160-59116FF78576} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {81496DCF-48B1-4D1B-A59B-2FC4684165F3} - System32\Tasks\4738 => Wscript.exe C:\Users\smenz\AppData\Local\Temp\launchie.vbs //B
Task: {88934B5D-3A30-4964-A7AD-DCE10B1709D8} - System32\Tasks\{B72AFCD4-E9CC-42D5-9E1D-F4C58D94F474} => C:\Users\smenz\Desktop\Downloads\29.0.1547.62_chrome_installer.exe
Task: {A6C4A12D-F8BD-46DC-9D2C-9BF4D9C98EB0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-19] (Google Inc.)
Task: {B7A8C558-1DAF-4343-8811-351E571DADB8} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2014-01-31] (PC-Doctor, Inc.)
Task: {C2A00A65-5F98-46E1-B0FB-ED6F70A8A0C5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-19] (Google Inc.)
Task: {C6954E15-5EED-4EFE-95A4-FEFA870CBD6F} - System32\Tasks\{F281CD6B-FAB1-4399-B6BC-BA15860083ED} => Chrome.exe hxxp://ui.skype.com/ui/0/6.10.0.104/de/abandoninstall?source=lightinstaller&page=tsPlugin
Task: {DB3B2A75-3AEB-44F9-85D7-8E3762D8F03C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-06-24] (Piriform Ltd)
Task: {E62B8B67-FCF3-4289-BCF3-1DB775EA6E99} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-06-19] (Microsoft Corporation)
Task: {E915B3D3-B247-4A09-9A8D-B3CE418243A0} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-08] (Adobe Systems Incorporated)
Task: {F4030E34-1D21-44A0-8659-C82CB656DF86} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2014-01-31] (PC-Doctor, Inc.)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2014-05-19 00:35 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2012-07-04 19:06 - 2011-03-26 03:28 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-02-12 16:32 - 2014-02-12 16:32 - 00169472 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\3e27ac2000641918e7215d97c63e957d\IsdiInterop.ni.dll
2012-07-04 16:47 - 2011-01-13 00:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-06-18 16:21 - 2014-06-18 16:21 - 00703800 _____ () C:\Program Files (x86)\Emsisoft Anti-Malware\fw32.dll
2014-07-21 13:08 - 2014-07-15 11:24 - 00718664 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libglesv2.dll
2014-07-21 13:08 - 2014-07-15 11:24 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libegl.dll
2014-07-21 13:08 - 2014-07-15 11:24 - 08537928 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll
2014-07-21 13:08 - 2014-07-15 11:24 - 00353096 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll
2014-07-21 13:08 - 2014-07-15 11:24 - 01732936 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:5C321E34
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
==================== EXE Association (whitelisted) =============
==================== MSCONFIG/TASK MANAGER disabled items =========
MSCONFIG\startupfolder: C:^Users^smenz^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk => C:\windows\pss\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk.Startup
MSCONFIG\startupreg: AccuWeatherWidget => "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup
MSCONFIG\startupreg: AthBtTray => "C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe"
MSCONFIG\startupreg: AtherosBtStack => "C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe"
MSCONFIG\startupreg: Dell DataSafe Online => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
MSCONFIG\startupreg: Dell Webcam Central => "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
MSCONFIG\startupreg: DellStage => "C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\start.umj" --startup
MSCONFIG\startupreg: Desktop Disc Tool => "c:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe"
MSCONFIG\startupreg: NeroLauncher => C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe 900
MSCONFIG\startupreg: RoxWatchTray => "c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Stage Remote => C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe -Quiet
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (07/22/2014 03:09:24 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/22/2014 03:05:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/22/2014 02:53:14 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/22/2014 00:58:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/21/2014 09:41:26 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/21/2014 09:38:42 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/21/2014 05:08:30 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (07/21/2014 04:59:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/21/2014 04:14:27 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/21/2014 03:39:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
System errors:
=============
Error: (07/22/2014 03:25:57 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Emsisoft Anti-Malware 7.0 - Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
Error: (07/22/2014 03:24:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "HitmanPro.Alert Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (07/22/2014 03:20:08 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}
Error: (07/22/2014 03:16:25 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {06622D85-6856-4460-8DE1-A81921B41C4B}
Error: (07/22/2014 03:08:47 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {30D49246-D217-465F-B00B-AC9DDD652EB7}
Error: (07/22/2014 03:07:51 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
UimBus
Uim_IM
Uim_VIM
Error: (07/22/2014 03:07:48 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
Error: (07/22/2014 03:07:42 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24620) (User: NT-AUTORITÄT)
Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "\\?\Volume{9ed98651-c5e5-11e1-a61e-806e6f6e6963}" können nicht gelesen werden.
Error: (07/22/2014 03:06:09 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
Error: (07/22/2014 03:05:19 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {30D49246-D217-465F-B00B-AC9DDD652EB7}
Microsoft Office Sessions:
=========================
Error: (07/22/2014 03:09:24 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/22/2014 03:05:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/22/2014 02:53:14 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/22/2014 00:58:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/21/2014 09:41:26 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/21/2014 09:38:42 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/21/2014 05:08:30 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\smenz\Desktop\Downloads\esetsmartinstaller_deu.exe
Error: (07/21/2014 04:59:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/21/2014 04:14:27 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/21/2014 03:39:52 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
CodeIntegrity Errors:
===================================
Date: 2014-07-22 15:07:37.806
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-07-22 15:04:08.072
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-07-22 14:51:34.485
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-07-22 12:56:24.432
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-07-21 21:39:38.995
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-07-21 21:36:55.151
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-07-21 16:57:24.260
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-07-21 16:12:40.479
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-07-21 15:38:03.839
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-07-21 12:48:15.995
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 47%
Total physical RAM: 4004.27 MB
Available physical RAM: 2097.49 MB
Total Pagefile: 8006.73 MB
Available Pagefile: 5723.22 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:446.13 GB) (Free:389.39 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: C3D31F70)
Partition 1: (Not Active) - (Size=100 MB) - (Type=DE)
Partition 2: (Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=446 GB) - (Type=07 NTFS)
==================== End Of L
3) Testen ... was sollte ich jetzt mal prüfen, damit ich herausfinde, ob ich keine Probleme mehr habe? Alle Programme öffnen? Im Internet surfen? Auf Forum eingeloggt surfen und schreiben? Files runterladen und vorher gecheckt haben? Sonst noch etwas? Und wie lange, mehrere Stunden lang, 1-2 Tage hintereinander? Ich frage das so genau nach, weil ich diesbezüglich unsicher bin, wenn Sie mich fragen, und noch PROBLEME? So, ich freue mich, wieder von Ihnen zu hören! Bis dahin, Grüße und DANKE!!!!! solonia P.S. Täglicher Emsisoft Scan ist jetzt immer ohne negative Ergebnisse!!! |
|
23.07.2014, 08:27
| #18 | ||
| /// the machine /// TB-Ausbilder | Malwarebythe hat 3 verdächtige Elemente gefunden!Gmx-account ständig mit spam trotz Filter!Zitat:
 . Ich nutze nur Firefox.Zitat:
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Danach bitte ein frisches FRST logfile.
__________________ |
|
23.07.2014, 19:20
| #19 |
| | Malwarebythe hat 3 verdächtige Elemente gefunden!Gmx-account ständig mit spam trotz Filter! Lieber Schrauber, 1. es gibt neue alte Probleme: bin eben beim Ausprobieren vom Surfen, ob noch Probleme auftauchen wieder von meiner amerikanischen Forumseite: www.outlanderbookclub.freeforums.org auf folgende Seite umgeleitet worden: update.news-f1ashplayer-us umgeleitet worden. Statt die Seite sofort zu schließen, habe ich auf okay gedrückt und es hat sich einfach ein Downloadfenster geöffnet, welches ich aber geschlossen habe. Und auch gleich den Download in der Sandboxie gelöscht und den Verlauf gelöscht von heute. Was ist da bloß los mit dieser Seite. Vielleicht ganz wegbleiben davon? Vielleicht auch den Account löschen? Es passierte jetzt nur, nachdem ich eingeloggt hatte und dort einen längeren Beitrag geschrieben habe. Ich habe das Board dieses Forums auch schon informiert,doch auf diese Nachricht reagieren sie nicht. Seltsam. Was ist Deine Empfehlung? Andere Mitglieder - aus USA - melden keine Probleme! Seltsam! 2. Die Sandboxie-Neuinstallation habe ich noch nicht vorgenommen. Die Zeit ist mir heute knapp und ich bin ein bisschen in Sorge, dass dann gar nichts mehr geht. Du surfst ohne Sandboxie und benutzt Firefox. Trotzdem sicher? Wahrscheinlich! 3. Deine Aufträge: a. Fixlog: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 23-07-2014 01
Ran by smenz at 2014-07-23 19:45:47 Run:2
Running from C:\Users\smenz\Desktop\Downloads
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
*****************
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
==== End of Fixlog ====
3) Hippofile zeigt immer wieder an, das ich ein Update benötige, obwohl ich es erfolgreich ungedatet habe vor 2 Tagen. Was ist das los? Hängt das mit den anderen Problemen zusammen? 4) Ich besuche seit ein 3/4 eine Online - Akademie, deutsche WEbseite. Mit der noch nie was war. Ist es sicher, dass während unserer Aufräum- und Analysearbeiten, das abzurufen oder sollte ich damit lieber warten, bis wir hier fertig sind? Erneut, danke für Deine Hilfe. Ich bin allerdings jetzt sehr unsicher geworden und ängstlich. Kriegen wir das Problem in den Griff. Im Moment habe ich das Gefühl, wir kommen ein Schritt vorwärts und dann wieder zwei Schritte zurück. Und dass ich irgendwie ständig was falsch mache oder kaputt mache. Also, ich bräuchte einfach die Versicherung, wir kriegen das hin, ich muss mich nur noch mehr gedulden. Das würde mich einfach beruhigen. DANKE! Sonnige Grüße, solonia p.S. wie hänge ich mehr als eine Datei ?. Die Addition.text fehlt. Will er aber nicht annehmen?? Ach, ich habe es mit mit Winrar gezippt und drangehängt. Geändert von solonia (23.07.2014 um 19:30 Uhr) |
|
23.07.2014, 21:29
| #20 |
| | Malwarebythe hat 3 verdächtige Elemente gefunden!Gmx-account ständig mit spam trotz Filter! Lieber Schrauber, ich habe eben gelesen, dass Du Anhänge nicht öffnen kannst. Jetzt noch mal die FRST LOG portionsweise: 1)Allgemein: Teil 1: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-07-2014 01
Ran by smenz (administrator) on NOTEBOOK-N5050 on 23-07-2014 22:12:31
Running from C:\Users\smenz\Desktop\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(SurfRight B.V.) C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Atheros) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(FileHippo.com) C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
(Ruiware LLC) C:\Program Files (x86)\Ruiware\WinPatrol\WinPatrol.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SandboxieRpcSs.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SandboxieDcomLaunch.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SandboxieCrypto.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\32\SbieSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [608112 2011-03-29] (Alps Electric Co., Ltd.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-05-27] (IDT, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-13] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [emsisoft anti-malware] => c:\program files (x86)\emsisoft anti-malware\a2guard.exe [4841824 2014-07-09] (Emsisoft GmbH)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2732600908-1742709287-786376233-1000\...\Run: [FileHippo.com] => C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com)
HKU\S-1-5-21-2732600908-1742709287-786376233-1000\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [784392 2014-05-29] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-2732600908-1742709287-786376233-1000\...\Run: [WinPatrol] => C:\Program Files (x86)\Ruiware\WinPatrol\winpatrol.exe [1154112 2014-07-21] (Ruiware LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\smenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers: SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - DefaultScope value is missing.
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/121022/CTPID.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Code:
ATTFilter FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=11.11.2 - C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.11.2 - C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\smenz\npAmazonMP3DownloaderPlugin101753.dll No File
Chrome:
=======
CHR Extension: (Google Docs) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-21]
CHR Extension: (Google Drive) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-21]
CHR Extension: (YouTube) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-21]
CHR Extension: (Google-Suche) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-21]
CHR Extension: (Google Wallet) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-22]
CHR Extension: (Google Mail) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-21]
==================== Services (Whitelisted) =================
R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [4741384 2014-07-09] (Emsisoft GmbH)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-05-20] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [80032 2011-05-20] (Atheros Commnucations) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2356408 2014-06-19] (Microsoft Corporation)
R2 hmpalertsvc; C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe [1876816 2014-07-18] (SurfRight B.V.)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [174088 2014-05-29] (Sandboxie Holdings, LLC)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
S4 McMPFSvc; "C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc [X]
==================== Drivers (Whitelisted) ====================
R3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [71472 2014-05-12] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [26176 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys [45208 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys [23088 2014-05-12] (Emsisoft GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R3 cleanhlp; C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [57024 2013-12-04] (Emsisoft GmbH)
R2 hmpalert; C:\Windows\System32\drivers\hmpalert.sys [93144 2014-07-18] ()
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [185352 2014-05-29] (Sandboxie Holdings, LLC)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)
S1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)
S1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)
S3 PCDSRVC{D3412D80-CF3B4A27-06020200}_0; \??\c:\program files\my dell\pcdsrvc_x64.pkms [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-22 14:51 - 2014-07-22 14:51 - 557210925 _____ () C:\windows\MEMORY.DMP
2014-07-22 14:51 - 2014-07-22 14:51 - 00262144 _____ () C:\windows\Minidump\072214-16208-01.dmp
2014-07-22 14:35 - 2014-07-22 14:35 - 00002958 _____ () C:\windows\System32\Tasks\{29169D5B-5852-456D-A5FD-808E368E18AF}
2014-07-22 14:35 - 2014-07-22 14:35 - 00002958 _____ () C:\windows\System32\Tasks\{0600F278-C4F2-4189-AE05-F1967F56238D}
2014-07-21 13:08 - 2014-07-21 13:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-21 12:27 - 2014-07-21 12:27 - 00000000 ____D () C:\Program Files (x86)\Ruiware
2014-07-20 19:25 - 2014-07-20 19:25 - 00272808 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-20 19:25 - 2014-07-20 19:25 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-20 18:39 - 2014-07-20 18:40 - 00000000 ____D () C:\Users\smenz\Desktop\Usefuls PDF´s
2014-07-20 18:36 - 2014-07-20 18:36 - 00000000 ____D () C:\Users\smenz\AppData\Roaming\VSRevoGroup
2014-07-20 18:21 - 2014-07-20 18:21 - 00001266 _____ () C:\Users\smenz\Desktop\Revo Uninstaller.lnk
2014-07-20 18:21 - 2014-07-20 18:21 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-17 22:00 - 2014-07-17 22:03 - 00000000 ____D () C:\AdwCleaner
2014-07-17 17:44 - 2014-07-17 17:44 - 00025355 _____ () C:\ComboFix.txt
2014-07-17 17:27 - 2011-06-26 08:45 - 00256000 _____ () C:\windows\PEV.exe
2014-07-17 17:27 - 2010-11-07 19:20 - 00208896 _____ () C:\windows\MBR.exe
2014-07-17 17:27 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00098816 _____ () C:\windows\sed.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00080412 _____ () C:\windows\grep.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00068096 _____ () C:\windows\zip.exe
2014-07-17 17:25 - 2014-07-17 17:45 - 00000000 ____D () C:\Qoobox
2014-07-17 13:05 - 2014-07-21 21:36 - 00003474 _____ () C:\windows\PFRO.log
2014-07-16 19:56 - 2014-07-23 22:12 - 00000000 ____D () C:\FRST
2014-07-16 18:32 - 2014-07-16 18:31 - 00321448 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2014-07-15 09:09 - 2014-07-23 09:03 - 00001680 _____ () C:\windows\setupact.log
2014-07-15 09:09 - 2014-07-15 09:09 - 00000000 _____ () C:\windows\setuperr.log
2014-07-09 11:14 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-07-09 11:14 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-07-09 11:14 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
2014-07-09 11:14 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
2014-07-09 11:14 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-07-09 11:14 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-07-09 11:14 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2014-07-09 11:14 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2014-07-09 11:13 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-07-09 11:13 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-07-09 11:13 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-07-09 11:13 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-07-09 11:13 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-07-09 11:13 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-07-09 11:13 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-07-09 11:13 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-07-09 11:13 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2014-07-09 11:13 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-07-09 11:13 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-07-09 11:13 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-07-09 11:13 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-07-09 11:13 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-07-09 11:13 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-07-09 11:13 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-07-09 11:13 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-07-09 11:13 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-07-09 11:13 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-07-09 11:13 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 11:13 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-07-09 11:13 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-07-09 11:13 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-07-09 11:13 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-07-09 11:13 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-07-09 11:13 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-07-09 11:13 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-07-09 11:13 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-07-09 11:13 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-07-09 11:13 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2014-07-09 11:13 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-07-09 11:13 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-07-09 11:13 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-07-09 11:13 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-07-09 11:13 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-07-09 11:13 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2014-07-09 11:13 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-07-09 11:13 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-07-09 11:13 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-07-09 11:13 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-07-09 11:13 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-09 11:13 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
Code:
ATTFilter 2014-07-09 11:13 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-07-09 11:13 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-07-09 11:13 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-07-09 11:13 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-07-09 11:13 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-07-09 11:13 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-07-09 11:13 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2014-07-09 11:13 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-07-09 11:13 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-07-09 11:13 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-07-09 11:13 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-07-09 11:13 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-07-09 11:13 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-07-09 11:13 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2014-07-09 11:12 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-07-09 11:12 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2014-07-09 11:12 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2014-07-03 15:37 - 2014-07-23 20:55 - 00000000 ____D () C:\windows\CryptoGuard
2014-07-03 15:37 - 2014-07-19 10:22 - 00000000 ____D () C:\Program Files (x86)\HitmanPro.Alert
2014-07-03 15:37 - 2014-07-18 11:23 - 00548424 _____ (SurfRight) C:\windows\system32\hmpalert.dll
2014-07-03 15:37 - 2014-07-18 11:23 - 00477008 _____ (SurfRight) C:\windows\SysWOW64\hmpalert.dll
2014-07-03 15:37 - 2014-07-18 11:23 - 00093144 _____ () C:\windows\system32\Drivers\hmpalert.sys
2014-07-03 15:37 - 2014-07-03 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro.Alert
2014-07-03 15:37 - 2014-07-03 15:37 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert
==================== One Month Modified Files and Folders =======
2014-07-23 22:12 - 2014-07-16 19:56 - 00000000 ____D () C:\FRST
2014-07-23 21:56 - 2013-06-12 23:38 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware
2014-07-23 21:48 - 2012-10-19 15:42 - 00001108 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-23 21:19 - 2014-02-21 20:01 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-07-23 20:55 - 2014-07-03 15:37 - 00000000 ____D () C:\windows\CryptoGuard
2014-07-23 20:55 - 2012-07-04 16:43 - 01526524 _____ () C:\windows\WindowsUpdate.log
2014-07-23 19:04 - 2012-10-19 15:42 - 00001104 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-23 12:45 - 2013-06-13 16:03 - 00000000 ____D () C:\Users\smenz\AppData\Roaming\Skype
2014-07-23 09:13 - 2012-07-04 17:32 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks
2014-07-23 09:13 - 2012-07-04 17:32 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks
2014-07-23 09:11 - 2009-07-14 06:45 - 00020720 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-23 09:11 - 2009-07-14 06:45 - 00020720 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-23 09:03 - 2014-07-15 09:09 - 00001680 _____ () C:\windows\setupact.log
2014-07-23 09:03 - 2012-07-04 17:21 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup
2014-07-23 09:03 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-07-22 22:11 - 2013-12-28 21:30 - 00470143 _____ () C:\Users\smenz\Desktop\Budget 2014.xlsx
2014-07-22 19:30 - 2013-10-13 21:23 - 00037888 _____ () C:\Users\smenz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-07-22 15:21 - 2013-06-13 17:13 - 00004984 _____ () C:\windows\Sandboxie.ini
2014-07-22 14:54 - 2012-07-04 17:03 - 00000000 ____D () C:\ProgramData\Sonic
2014-07-22 14:51 - 2014-07-22 14:51 - 557210925 _____ () C:\windows\MEMORY.DMP
2014-07-22 14:51 - 2014-07-22 14:51 - 00262144 _____ () C:\windows\Minidump\072214-16208-01.dmp
2014-07-22 14:51 - 2013-07-06 01:27 - 00000000 ____D () C:\windows\Minidump
2014-07-22 14:35 - 2014-07-22 14:35 - 00002958 _____ () C:\windows\System32\Tasks\{29169D5B-5852-456D-A5FD-808E368E18AF}
2014-07-22 14:35 - 2014-07-22 14:35 - 00002958 _____ () C:\windows\System32\Tasks\{0600F278-C4F2-4189-AE05-F1967F56238D}
2014-07-21 21:36 - 2014-07-17 13:05 - 00003474 _____ () C:\windows\PFRO.log
2014-07-21 17:09 - 2014-06-20 16:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPatrol
2014-07-21 17:08 - 2014-06-20 16:03 - 00000000 ____D () C:\ProgramData\InstallMate
2014-07-21 17:04 - 2012-10-19 13:19 - 00000000 ____D () C:\Users\smenz
2014-07-21 14:22 - 2012-07-04 19:31 - 00699666 _____ () C:\windows\system32\perfh007.dat
2014-07-21 14:22 - 2012-07-04 19:31 - 00149774 _____ () C:\windows\system32\perfc007.dat
2014-07-21 14:22 - 2009-07-14 07:13 - 01620612 _____ () C:\windows\system32\PerfStringBackup.INI
2014-07-21 13:08 - 2014-07-21 13:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-21 13:08 - 2012-10-19 15:42 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-21 12:27 - 2014-07-21 12:27 - 00000000 ____D () C:\Program Files (x86)\Ruiware
2014-07-20 19:28 - 2012-10-19 17:47 - 00000000 ____D () C:\Users\smenz\AppData\Local\CrashDumps
2014-07-20 19:26 - 2013-12-25 09:57 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-20 19:25 - 2014-07-20 19:25 - 00272808 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-20 19:25 - 2014-07-20 19:25 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-20 18:40 - 2014-07-20 18:39 - 00000000 ____D () C:\Users\smenz\Desktop\Usefuls PDF´s
2014-07-20 18:36 - 2014-07-20 18:36 - 00000000 ____D () C:\Users\smenz\AppData\Roaming\VSRevoGroup
2014-07-20 18:23 - 2012-12-06 20:05 - 00000000 ____D () C:\Users\smenz\Documents\Booksmarks
2014-07-20 18:21 - 2014-07-20 18:21 - 00001266 _____ () C:\Users\smenz\Desktop\Revo Uninstaller.lnk
2014-07-20 18:21 - 2014-07-20 18:21 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-19 10:22 - 2014-07-03 15:37 - 00000000 ____D () C:\Program Files (x86)\HitmanPro.Alert
2014-07-18 11:23 - 2014-07-03 15:37 - 00548424 _____ (SurfRight) C:\windows\system32\hmpalert.dll
2014-07-18 11:23 - 2014-07-03 15:37 - 00477008 _____ (SurfRight) C:\windows\SysWOW64\hmpalert.dll
2014-07-18 11:23 - 2014-07-03 15:37 - 00093144 _____ () C:\windows\system32\Drivers\hmpalert.sys
2014-07-17 23:51 - 2014-06-21 21:16 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2014-07-17 23:51 - 2012-07-04 16:56 - 00000000 ____D () C:\ProgramData\Temp
2014-07-17 23:40 - 2014-06-11 15:29 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-17 22:03 - 2014-07-17 22:00 - 00000000 ____D () C:\AdwCleaner
2014-07-17 17:45 - 2014-07-17 17:25 - 00000000 ____D () C:\Qoobox
2014-07-17 17:44 - 2014-07-17 17:44 - 00025355 _____ () C:\ComboFix.txt
2014-07-17 17:39 - 2009-07-14 04:34 - 00000215 _____ () C:\windows\system.ini
2014-07-16 18:51 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\Speech
2014-07-16 18:31 - 2014-07-16 18:32 - 00321448 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2014-07-16 18:31 - 2014-06-20 14:55 - 00191400 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2014-07-16 18:31 - 2014-06-20 14:55 - 00190888 _____ (Oracle Corporation) C:\windows\system32\java.exe
2014-07-16 18:31 - 2014-06-20 14:55 - 00111016 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge-64.dll
2014-07-16 18:31 - 2014-01-24 11:42 - 00000000 ____D () C:\Program Files\Java
2014-07-15 20:41 - 2012-10-20 20:53 - 00000000 ____D () C:\Users\smenz\Documents\My Kindle Content
2014-07-15 09:09 - 2014-07-15 09:09 - 00000000 _____ () C:\windows\setuperr.log
2014-07-13 17:07 - 2014-04-06 19:24 - 00077414 _____ () C:\Users\smenz\Desktop\Übersicht Prozessarbeit 2.xlsx
2014-07-12 18:40 - 2012-11-29 22:16 - 00000000 ____D () C:\Users\smenz\Documents\ELLA
2014-07-12 18:25 - 2012-10-19 17:43 - 00000000 ____D () C:\Users\smenz\Documents\OneNote-Notizbücher
2014-07-12 12:45 - 2013-05-23 14:08 - 00000000 ____D () C:\Program Files\My Dell
2014-07-12 10:05 - 2013-05-23 14:09 - 00003440 _____ () C:\windows\System32\Tasks\PCDEventLauncherTask
2014-07-10 16:20 - 2012-10-19 18:36 - 00000000 ____D () C:\Users\smenz\AppData\Local\Microsoft Games
2014-07-10 13:32 - 2012-07-04 17:15 - 00000000 ____D () C:\ProgramData\Skype
2014-07-10 13:08 - 2014-05-19 00:35 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-07-09 17:00 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\rescache
2014-07-09 15:25 - 2009-07-14 06:45 - 00492792 _____ () C:\windows\system32\FNTCACHE.DAT
2014-07-09 15:23 - 2014-05-07 02:27 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-07-09 15:23 - 2012-07-04 19:34 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-09 15:23 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\Dism
2014-07-09 15:23 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\Dism
2014-07-09 15:12 - 2012-10-19 17:33 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-09 15:10 - 2013-08-15 21:53 - 00000000 ____D () C:\windows\system32\MRT
2014-07-09 15:04 - 2012-10-24 13:56 - 96441528 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-07-08 21:19 - 2014-02-21 20:01 - 00003822 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-07-08 21:19 - 2013-06-11 14:08 - 00699056 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-07-08 21:19 - 2013-06-11 14:08 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-03 15:37 - 2014-07-03 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro.Alert
2014-07-03 15:37 - 2014-07-03 15:37 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert
2014-07-03 00:08 - 2014-05-31 19:53 - 00001104 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-07-01 18:58 - 2012-10-19 13:19 - 00000000 ___RD () C:\Users\smenz\Eigene Bilder
2014-06-30 04:09 - 2014-07-09 11:14 - 00519168 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-06-30 04:04 - 2014-07-09 11:14 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-06-29 13:04 - 2013-07-02 18:12 - 00023731 _____ () C:\Users\smenz\Desktop\Books Releases.xlsx
2014-06-26 14:51 - 2013-06-17 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-06-26 14:51 - 2013-06-17 16:48 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-25 18:43 - 2012-10-19 15:42 - 00004104 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-25 18:43 - 2012-10-19 15:42 - 00003852 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-24 11:24 - 2012-07-04 19:34 - 00000000 ___RD () C:\Users\Public\Recorded TV
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-07-18 14:21
==================== End Of Log ============================
--- --- --- Lieber Schrauber, ich habe eben gelesen, dass Du Anhänge nicht öffnen kannst. Jetzt noch mal die FRST LOG portionsweise: 1)Allgemein: Teil 1: FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-07-2014 01
Ran by smenz (administrator) on NOTEBOOK-N5050 on 23-07-2014 22:12:31
Running from C:\Users\smenz\Desktop\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(SurfRight B.V.) C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Atheros) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(FileHippo.com) C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
(Ruiware LLC) C:\Program Files (x86)\Ruiware\WinPatrol\WinPatrol.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SandboxieRpcSs.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SandboxieDcomLaunch.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SandboxieCrypto.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\32\SbieSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [608112 2011-03-29] (Alps Electric Co., Ltd.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-05-27] (IDT, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-13] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [emsisoft anti-malware] => c:\program files (x86)\emsisoft anti-malware\a2guard.exe [4841824 2014-07-09] (Emsisoft GmbH)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2732600908-1742709287-786376233-1000\...\Run: [FileHippo.com] => C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com)
HKU\S-1-5-21-2732600908-1742709287-786376233-1000\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [784392 2014-05-29] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-2732600908-1742709287-786376233-1000\...\Run: [WinPatrol] => C:\Program Files (x86)\Ruiware\WinPatrol\winpatrol.exe [1154112 2014-07-21] (Ruiware LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\smenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers: SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - DefaultScope value is missing.
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/121022/CTPID.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Code:
ATTFilter FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=11.11.2 - C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.11.2 - C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\smenz\npAmazonMP3DownloaderPlugin101753.dll No File
Chrome:
=======
CHR Extension: (Google Docs) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-21]
CHR Extension: (Google Drive) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-21]
CHR Extension: (YouTube) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-21]
CHR Extension: (Google-Suche) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-21]
CHR Extension: (Google Wallet) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-22]
CHR Extension: (Google Mail) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-21]
==================== Services (Whitelisted) =================
R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [4741384 2014-07-09] (Emsisoft GmbH)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-05-20] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [80032 2011-05-20] (Atheros Commnucations) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2356408 2014-06-19] (Microsoft Corporation)
R2 hmpalertsvc; C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe [1876816 2014-07-18] (SurfRight B.V.)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [174088 2014-05-29] (Sandboxie Holdings, LLC)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
S4 McMPFSvc; "C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc [X]
==================== Drivers (Whitelisted) ====================
R3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [71472 2014-05-12] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [26176 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys [45208 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys [23088 2014-05-12] (Emsisoft GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R3 cleanhlp; C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [57024 2013-12-04] (Emsisoft GmbH)
R2 hmpalert; C:\Windows\System32\drivers\hmpalert.sys [93144 2014-07-18] ()
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [185352 2014-05-29] (Sandboxie Holdings, LLC)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)
S1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)
S1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)
S3 PCDSRVC{D3412D80-CF3B4A27-06020200}_0; \??\c:\program files\my dell\pcdsrvc_x64.pkms [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-22 14:51 - 2014-07-22 14:51 - 557210925 _____ () C:\windows\MEMORY.DMP
2014-07-22 14:51 - 2014-07-22 14:51 - 00262144 _____ () C:\windows\Minidump\072214-16208-01.dmp
2014-07-22 14:35 - 2014-07-22 14:35 - 00002958 _____ () C:\windows\System32\Tasks\{29169D5B-5852-456D-A5FD-808E368E18AF}
2014-07-22 14:35 - 2014-07-22 14:35 - 00002958 _____ () C:\windows\System32\Tasks\{0600F278-C4F2-4189-AE05-F1967F56238D}
2014-07-21 13:08 - 2014-07-21 13:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-21 12:27 - 2014-07-21 12:27 - 00000000 ____D () C:\Program Files (x86)\Ruiware
2014-07-20 19:25 - 2014-07-20 19:25 - 00272808 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-20 19:25 - 2014-07-20 19:25 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-20 18:39 - 2014-07-20 18:40 - 00000000 ____D () C:\Users\smenz\Desktop\Usefuls PDF´s
2014-07-20 18:36 - 2014-07-20 18:36 - 00000000 ____D () C:\Users\smenz\AppData\Roaming\VSRevoGroup
2014-07-20 18:21 - 2014-07-20 18:21 - 00001266 _____ () C:\Users\smenz\Desktop\Revo Uninstaller.lnk
2014-07-20 18:21 - 2014-07-20 18:21 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-17 22:00 - 2014-07-17 22:03 - 00000000 ____D () C:\AdwCleaner
2014-07-17 17:44 - 2014-07-17 17:44 - 00025355 _____ () C:\ComboFix.txt
2014-07-17 17:27 - 2011-06-26 08:45 - 00256000 _____ () C:\windows\PEV.exe
2014-07-17 17:27 - 2010-11-07 19:20 - 00208896 _____ () C:\windows\MBR.exe
2014-07-17 17:27 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00098816 _____ () C:\windows\sed.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00080412 _____ () C:\windows\grep.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00068096 _____ () C:\windows\zip.exe
2014-07-17 17:25 - 2014-07-17 17:45 - 00000000 ____D () C:\Qoobox
2014-07-17 13:05 - 2014-07-21 21:36 - 00003474 _____ () C:\windows\PFRO.log
2014-07-16 19:56 - 2014-07-23 22:12 - 00000000 ____D () C:\FRST
2014-07-16 18:32 - 2014-07-16 18:31 - 00321448 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2014-07-15 09:09 - 2014-07-23 09:03 - 00001680 _____ () C:\windows\setupact.log
2014-07-15 09:09 - 2014-07-15 09:09 - 00000000 _____ () C:\windows\setuperr.log
2014-07-09 11:14 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-07-09 11:14 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-07-09 11:14 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
2014-07-09 11:14 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
2014-07-09 11:14 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-07-09 11:14 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-07-09 11:14 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2014-07-09 11:14 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2014-07-09 11:13 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-07-09 11:13 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-07-09 11:13 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-07-09 11:13 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-07-09 11:13 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-07-09 11:13 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-07-09 11:13 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-07-09 11:13 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-07-09 11:13 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2014-07-09 11:13 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-07-09 11:13 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-07-09 11:13 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-07-09 11:13 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-07-09 11:13 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-07-09 11:13 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-07-09 11:13 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-07-09 11:13 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-07-09 11:13 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-07-09 11:13 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-07-09 11:13 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 11:13 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-07-09 11:13 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-07-09 11:13 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-07-09 11:13 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-07-09 11:13 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-07-09 11:13 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-07-09 11:13 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-07-09 11:13 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-07-09 11:13 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-07-09 11:13 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2014-07-09 11:13 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-07-09 11:13 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-07-09 11:13 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-07-09 11:13 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-07-09 11:13 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-07-09 11:13 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2014-07-09 11:13 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-07-09 11:13 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-07-09 11:13 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-07-09 11:13 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-07-09 11:13 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-09 11:13 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
Code:
ATTFilter 2014-07-09 11:13 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-07-09 11:13 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-07-09 11:13 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-07-09 11:13 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-07-09 11:13 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-07-09 11:13 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-07-09 11:13 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2014-07-09 11:13 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-07-09 11:13 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-07-09 11:13 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-07-09 11:13 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-07-09 11:13 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-07-09 11:13 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-07-09 11:13 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2014-07-09 11:12 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-07-09 11:12 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2014-07-09 11:12 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2014-07-03 15:37 - 2014-07-23 20:55 - 00000000 ____D () C:\windows\CryptoGuard
2014-07-03 15:37 - 2014-07-19 10:22 - 00000000 ____D () C:\Program Files (x86)\HitmanPro.Alert
2014-07-03 15:37 - 2014-07-18 11:23 - 00548424 _____ (SurfRight) C:\windows\system32\hmpalert.dll
2014-07-03 15:37 - 2014-07-18 11:23 - 00477008 _____ (SurfRight) C:\windows\SysWOW64\hmpalert.dll
2014-07-03 15:37 - 2014-07-18 11:23 - 00093144 _____ () C:\windows\system32\Drivers\hmpalert.sys
2014-07-03 15:37 - 2014-07-03 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro.Alert
2014-07-03 15:37 - 2014-07-03 15:37 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert
==================== One Month Modified Files and Folders =======
2014-07-23 22:12 - 2014-07-16 19:56 - 00000000 ____D () C:\FRST
2014-07-23 21:56 - 2013-06-12 23:38 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware
2014-07-23 21:48 - 2012-10-19 15:42 - 00001108 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-23 21:19 - 2014-02-21 20:01 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-07-23 20:55 - 2014-07-03 15:37 - 00000000 ____D () C:\windows\CryptoGuard
2014-07-23 20:55 - 2012-07-04 16:43 - 01526524 _____ () C:\windows\WindowsUpdate.log
2014-07-23 19:04 - 2012-10-19 15:42 - 00001104 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-23 12:45 - 2013-06-13 16:03 - 00000000 ____D () C:\Users\smenz\AppData\Roaming\Skype
2014-07-23 09:13 - 2012-07-04 17:32 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks
2014-07-23 09:13 - 2012-07-04 17:32 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks
2014-07-23 09:11 - 2009-07-14 06:45 - 00020720 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-23 09:11 - 2009-07-14 06:45 - 00020720 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-23 09:03 - 2014-07-15 09:09 - 00001680 _____ () C:\windows\setupact.log
2014-07-23 09:03 - 2012-07-04 17:21 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup
2014-07-23 09:03 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-07-22 22:11 - 2013-12-28 21:30 - 00470143 _____ () C:\Users\smenz\Desktop\Budget 2014.xlsx
2014-07-22 19:30 - 2013-10-13 21:23 - 00037888 _____ () C:\Users\smenz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-07-22 15:21 - 2013-06-13 17:13 - 00004984 _____ () C:\windows\Sandboxie.ini
2014-07-22 14:54 - 2012-07-04 17:03 - 00000000 ____D () C:\ProgramData\Sonic
2014-07-22 14:51 - 2014-07-22 14:51 - 557210925 _____ () C:\windows\MEMORY.DMP
2014-07-22 14:51 - 2014-07-22 14:51 - 00262144 _____ () C:\windows\Minidump\072214-16208-01.dmp
2014-07-22 14:51 - 2013-07-06 01:27 - 00000000 ____D () C:\windows\Minidump
2014-07-22 14:35 - 2014-07-22 14:35 - 00002958 _____ () C:\windows\System32\Tasks\{29169D5B-5852-456D-A5FD-808E368E18AF}
2014-07-22 14:35 - 2014-07-22 14:35 - 00002958 _____ () C:\windows\System32\Tasks\{0600F278-C4F2-4189-AE05-F1967F56238D}
2014-07-21 21:36 - 2014-07-17 13:05 - 00003474 _____ () C:\windows\PFRO.log
2014-07-21 17:09 - 2014-06-20 16:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPatrol
2014-07-21 17:08 - 2014-06-20 16:03 - 00000000 ____D () C:\ProgramData\InstallMate
2014-07-21 17:04 - 2012-10-19 13:19 - 00000000 ____D () C:\Users\smenz
2014-07-21 14:22 - 2012-07-04 19:31 - 00699666 _____ () C:\windows\system32\perfh007.dat
2014-07-21 14:22 - 2012-07-04 19:31 - 00149774 _____ () C:\windows\system32\perfc007.dat
2014-07-21 14:22 - 2009-07-14 07:13 - 01620612 _____ () C:\windows\system32\PerfStringBackup.INI
2014-07-21 13:08 - 2014-07-21 13:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-21 13:08 - 2012-10-19 15:42 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-21 12:27 - 2014-07-21 12:27 - 00000000 ____D () C:\Program Files (x86)\Ruiware
2014-07-20 19:28 - 2012-10-19 17:47 - 00000000 ____D () C:\Users\smenz\AppData\Local\CrashDumps
2014-07-20 19:26 - 2013-12-25 09:57 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-20 19:25 - 2014-07-20 19:25 - 00272808 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-20 19:25 - 2014-07-20 19:25 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-20 18:40 - 2014-07-20 18:39 - 00000000 ____D () C:\Users\smenz\Desktop\Usefuls PDF´s
2014-07-20 18:36 - 2014-07-20 18:36 - 00000000 ____D () C:\Users\smenz\AppData\Roaming\VSRevoGroup
2014-07-20 18:23 - 2012-12-06 20:05 - 00000000 ____D () C:\Users\smenz\Documents\Booksmarks
2014-07-20 18:21 - 2014-07-20 18:21 - 00001266 _____ () C:\Users\smenz\Desktop\Revo Uninstaller.lnk
2014-07-20 18:21 - 2014-07-20 18:21 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-19 10:22 - 2014-07-03 15:37 - 00000000 ____D () C:\Program Files (x86)\HitmanPro.Alert
2014-07-18 11:23 - 2014-07-03 15:37 - 00548424 _____ (SurfRight) C:\windows\system32\hmpalert.dll
2014-07-18 11:23 - 2014-07-03 15:37 - 00477008 _____ (SurfRight) C:\windows\SysWOW64\hmpalert.dll
2014-07-18 11:23 - 2014-07-03 15:37 - 00093144 _____ () C:\windows\system32\Drivers\hmpalert.sys
2014-07-17 23:51 - 2014-06-21 21:16 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2014-07-17 23:51 - 2012-07-04 16:56 - 00000000 ____D () C:\ProgramData\Temp
2014-07-17 23:40 - 2014-06-11 15:29 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-17 22:03 - 2014-07-17 22:00 - 00000000 ____D () C:\AdwCleaner
2014-07-17 17:45 - 2014-07-17 17:25 - 00000000 ____D () C:\Qoobox
2014-07-17 17:44 - 2014-07-17 17:44 - 00025355 _____ () C:\ComboFix.txt
2014-07-17 17:39 - 2009-07-14 04:34 - 00000215 _____ () C:\windows\system.ini
2014-07-16 18:51 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\Speech
2014-07-16 18:31 - 2014-07-16 18:32 - 00321448 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2014-07-16 18:31 - 2014-06-20 14:55 - 00191400 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2014-07-16 18:31 - 2014-06-20 14:55 - 00190888 _____ (Oracle Corporation) C:\windows\system32\java.exe
2014-07-16 18:31 - 2014-06-20 14:55 - 00111016 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge-64.dll
2014-07-16 18:31 - 2014-01-24 11:42 - 00000000 ____D () C:\Program Files\Java
2014-07-15 20:41 - 2012-10-20 20:53 - 00000000 ____D () C:\Users\smenz\Documents\My Kindle Content
2014-07-15 09:09 - 2014-07-15 09:09 - 00000000 _____ () C:\windows\setuperr.log
2014-07-13 17:07 - 2014-04-06 19:24 - 00077414 _____ () C:\Users\smenz\Desktop\Übersicht Prozessarbeit 2.xlsx
2014-07-12 18:40 - 2012-11-29 22:16 - 00000000 ____D () C:\Users\smenz\Documents\ELLA
2014-07-12 18:25 - 2012-10-19 17:43 - 00000000 ____D () C:\Users\smenz\Documents\OneNote-Notizbücher
2014-07-12 12:45 - 2013-05-23 14:08 - 00000000 ____D () C:\Program Files\My Dell
2014-07-12 10:05 - 2013-05-23 14:09 - 00003440 _____ () C:\windows\System32\Tasks\PCDEventLauncherTask
2014-07-10 16:20 - 2012-10-19 18:36 - 00000000 ____D () C:\Users\smenz\AppData\Local\Microsoft Games
2014-07-10 13:32 - 2012-07-04 17:15 - 00000000 ____D () C:\ProgramData\Skype
2014-07-10 13:08 - 2014-05-19 00:35 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-07-09 17:00 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\rescache
2014-07-09 15:25 - 2009-07-14 06:45 - 00492792 _____ () C:\windows\system32\FNTCACHE.DAT
2014-07-09 15:23 - 2014-05-07 02:27 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-07-09 15:23 - 2012-07-04 19:34 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-09 15:23 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\Dism
2014-07-09 15:23 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\Dism
2014-07-09 15:12 - 2012-10-19 17:33 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-09 15:10 - 2013-08-15 21:53 - 00000000 ____D () C:\windows\system32\MRT
2014-07-09 15:04 - 2012-10-24 13:56 - 96441528 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-07-08 21:19 - 2014-02-21 20:01 - 00003822 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-07-08 21:19 - 2013-06-11 14:08 - 00699056 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-07-08 21:19 - 2013-06-11 14:08 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-03 15:37 - 2014-07-03 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro.Alert
2014-07-03 15:37 - 2014-07-03 15:37 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert
2014-07-03 00:08 - 2014-05-31 19:53 - 00001104 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-07-01 18:58 - 2012-10-19 13:19 - 00000000 ___RD () C:\Users\smenz\Eigene Bilder
2014-06-30 04:09 - 2014-07-09 11:14 - 00519168 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-06-30 04:04 - 2014-07-09 11:14 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-06-29 13:04 - 2013-07-02 18:12 - 00023731 _____ () C:\Users\smenz\Desktop\Books Releases.xlsx
2014-06-26 14:51 - 2013-06-17 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-06-26 14:51 - 2013-06-17 16:48 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-25 18:43 - 2012-10-19 15:42 - 00004104 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-25 18:43 - 2012-10-19 15:42 - 00003852 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-24 11:24 - 2012-07-04 19:34 - 00000000 ___RD () C:\Users\Public\Recorded TV
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-07-18 14:21
==================== End Of Log ============================
--- --- --- --- --- --- |
|
23.07.2014, 21:43
| #21 |
| | Malwarebythe hat 3 verdächtige Elemente gefunden!Gmx-account ständig mit spam trotz Filter! Additionfiles: Teil 1 Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-07-2014 01
Ran by smenz at 2014-07-23 22:13:02
Running from C:\Users\smenz\Desktop\Downloads
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Emsisoft Anti-Malware (Enabled - Up to date) {8504DEEF-CC04-1F76-2137-F1A5F4A659DA}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Emsisoft Anti-Malware (Enabled - Up to date) {3E653F0B-EA3E-10F8-1B87-CAD78F211367}
==================== Installed Programs ======================
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Advanced Audio FX Engine (HKLM-x32\...\Advanced Audio FX Engine) (Version: 1.12.05 - Creative Technology Ltd)
Amazon Kindle (HKCU\...\Amazon Kindle) (Version: - Amazon)
Amazon MP3-Downloader 1.0.17 (HKLM-x32\...\Amazon MP3-Downloader) (Version: 1.0.17 - Amazon Services LLC)
Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.2.0.83 - Atheros Communications)
CCleaner (HKLM\...\CCleaner) (Version: 4.15 - Piriform)
CrystalDiskMark 3.0.3b (HKLM\...\CrystalDiskMark_is1) (Version: 3.0.3b - Crystal Dew World)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Definition Update for Microsoft Office 2010 (KB982726) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5C78021E-3C8E-4EDF-97EA-E9B8D808FD6D}) (Version: - Microsoft)
Dell DataSafe Local Backup - Support Software (HKLM-x32\...\{A9668246-FB70-4103-A1E3-66C9BC2EFB49}) (Version: 9.4.67 - Dell Inc.)
Dell DataSafe Local Backup (HKLM-x32\...\{0ED7EE95-6A97-47AA-AD73-152C08A15B04}) (Version: 9.4.67 - Dell Inc.)
Dell Edoc Viewer (HKLM\...\{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}) (Version: 1.0.0 - Dell Inc)
Dell Getting Started Guide (HKLM-x32\...\{7DB9F1E5-9ACB-410D-A7DC-7A3D023CE045}) (Version: 1.00.0000 - Dell Inc.)
Dell MusicStage (HKLM-x32\...\{3E90B7F4-1817-4405-B4A5-E4EA5EC0E2B3}) (Version: 1.6.225.0 - Fingertapps)
Dell PhotoStage (HKLM-x32\...\{E4335E82-17B3-460F-9E70-39D9BC269DB3}) (Version: 1.5.0.130 - ArcSoft)
Dell Stage (HKLM-x32\...\{E2F57269-065E-4B19-8CDA-AB6C401FAF1A}) (Version: 1.7.209.0 - Fingertapps)
Dell Stage Remote (HKLM-x32\...\{AF4D3C63-009B-4A17-B02E-D395065DD3F0}) (Version: 2.0.0.43 - ArcSoft)
Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.1207.101.225 - ALPS ELECTRIC CO., LTD.)
Dell Webcam Central (HKLM-x32\...\Dell Webcam Central) (Version: 2.01.17 - Creative Technology Ltd)
Dell WLAN and Bluetooth Client Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 9.0 - Dell Inc.)
DirectX 9 Runtime (x32 Version: 1.00.0000 - Sonic Solutions) Hidden
Emsisoft Anti-Malware (HKLM-x32\...\{BC30E5E7-047D-4232-A7E8-F2CB7CC7B2E0}_is1) (Version: 7.0 - Emsisoft GmbH)
FileHippo.com Update Checker (HKLM-x32\...\FileHippo.com) (Version: - )
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
FreeCommander XE (HKLM-x32\...\FreeCommander XE_is1) (Version: Preview - Marek Jasinski)
FreeMind (HKLM-x32\...\B991B020-2968-11D8-AF23-444553540000_is1) (Version: 1.0.0 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 36.0.1985.125 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
HitmanPro.Alert (HKLM\...\HitmanPro.Alert) (Version: 2.6.5.77 - SurfRight B.V.)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2342 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)
Java 7 Update 55 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417055FF}) (Version: 7.0.550 - Oracle)
Java 7 Update 65 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217065FF}) (Version: 7.0.650 - Oracle)
Java 8 Update 11 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418011FF}) (Version: 8.0.110 - Oracle Corporation)
Java Auto Updater (x32 Version: 2.8.11.12 - Oracle, Inc.) Hidden
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Office Access MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Excel MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Office Office 64-bit Components 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office OneNote MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0407-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0409-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Outlook MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office PowerPoint MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (English) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (French) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proof (Italian) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Publisher MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared 64-bit MUI (German) 2010 (Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Single Image 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft Office Word MUI (German) 2010 (x32 Version: 14.0.7015.1000 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKCU\...\OneDriveSetup.exe) (Version: 17.0.4041.0512 - Microsoft Corporation)
Microsoft OneNote 2013 - de-de (HKLM\...\OneNoteFreeRetail - de-de) (Version: 15.0.4631.1002 - Microsoft Corporation)
Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit (HKLM-x32\...\{95140000-007D-0409-0000-0000000FF1CE}) (Version: 14.0.5120.5000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft_VC100_CRT_SP1_x64 (Version: 10.0.40219.1 - Nokia) Hidden
Microsoft_VC100_CRT_SP1_x86 (x32 Version: 10.0.40219.1 - Nokia) Hidden
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSVC80_x64_v2 (Version: 1.0.3.0 - Nokia) Hidden
MSVC80_x86_v2 (x32 Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x64 (Version: 1.0.1.2 - Nokia) Hidden
MSVC90_x86 (x32 Version: 1.0.1.2 - Nokia) Hidden
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (x32 Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (Version: 16.4.1109.0912 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
My Dell (HKLM\...\PC-Doctor for Windows) (Version: 3.5.6426.22 - PC-Doctor, Inc.)
Nero 10 Movie ThemePack Basic (x32 Version: 10.6.10000.1.0 - Nero AG) Hidden
Nero Blu-ray Player (x32 Version: 12.0.20012 - Nero AG) Hidden
Nero Control Center 10 (x32 Version: 10.6.13000.0.11 - Nero AG) Hidden
Nero ControlCenter 10 Help (CHM) (x32 Version: 10.2.10800 - Nero AG) Hidden
Nero Core Components 10 (x32 Version: 2.0.20500.9.16 - Nero AG) Hidden
Nero Update (x32 Version: 11.0.11500.28.0 - Nero AG) Hidden
Nokia Connectivity Cable Driver (HKLM-x32\...\{29373274-977E-413C-A4DE-DC0F8E80C429}) (Version: 7.1.172.0 - Nokia)
Nokia Suite (HKLM-x32\...\Nokia Suite) (Version: 3.8.48.0 - Nokia)
Teil 2 Code:
ATTFilter Nokia Suite (x32 Version: 3.8.48.0 - Nokia) Hidden
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4631.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4631.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4631.1002 - Microsoft Corporation) Hidden
Panda USB Vaccine 1.0.1.4 (HKLM-x32\...\{55A41219-9B22-4098-BAE7-AE289B3C569A}_is1) (Version: - Panda Security)
PC Connectivity Solution (HKLM-x32\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)
Photo Gallery (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
PhotoShowExpress (x32 Version: 2.0.063 - Sonic Solutions) Hidden
Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 10.09.25 - Dell Inc.)
RBVirtualFolder64Inst (Version: 1.00.0000 - Roxio, Inc.) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.45.516.2011 - Realtek)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30126 - Realtek Semiconductor Corp.)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Roxio Activation Module (x32 Version: 1.0 - Roxio) Hidden
Roxio BackOnTrack (x32 Version: 1.3.3 - Roxio) Hidden
Roxio Burn (x32 Version: 1.8 - Roxio) Hidden
Roxio Creator Starter (x32 Version: 1.0.439 - Roxio) Hidden
Roxio Express Labeler 3 (x32 Version: 3.2.2 - Roxio) Hidden
Roxio File Backup (Version: 1.3.2 - Roxio) Hidden
Sandboxie 4.12 (64-bit) (HKLM\...\Sandboxie) (Version: 4.12 - Sandboxie Holdings, LLC)
Secunia PSI (3.0.0.9016) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.9016 - Secunia)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (x32 Version: - Microsoft) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Similarity 1.8.1 (HKLM-x32\...\{6AF7A3DF-581E-4AB7-ACAF-2051FF7E8ACF}) (Version: 1.8.1626 - GAR Software)
Skype™ 6.18 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.18.105 - Skype Technologies S.A.)
Sonic CinePlayer Decoder Pack (x32 Version: 4.3.0 - Sonic Solutions) Hidden
SpywareBlaster 5.0 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)
SyncUP (HKLM-x32\...\{D92C9CCE-E5F0-4125-977A-0590F3225B74}) (Version: 10.2.16500 - Nero AG)
SyncUP (x32 Version: 1.12.12400.17.102 - Nero AG) Hidden
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.29480 - TeamViewer)
Update for Microsoft Access 2010 (KB2553446) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B4A38370-2ADB-46B0-A1B0-0C4A2F7DCA31}) (Version: - Microsoft)
Update for Microsoft Excel 2010 (KB2837600) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4ACD847E-547D-493F-9A86-F73EAE1B5174}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft Filter Pack 2.0 (KB2878281) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{302A8FE3-EBF5-486C-A431-16A1CD914443}) (Version: - Microsoft)
Update for Microsoft InfoPath 2010 (KB2817369) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{4EEA3D3E-989C-4DF4-AB0A-3042C0C12AA3}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589298) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DADF7E25-FFA4-4D02-BE84-1DAE62C18516}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589352) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F4284D93-7AE8-4309-8CF3-9AD394F35F3A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2589375) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{287A1E92-9E41-4BC1-8920-B3D0E9220800}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2597087) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{9D69691D-823D-4C3E-9B12-563A3F520366}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760598) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{ECFE33A3-B8B7-439A-ADE4-59FBD29EF9B8}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2760631) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{35698CB7-AAA2-4577-B505-DBFF504AEF23}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2794737) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{5AA578BB-759C-40FD-9661-A737C0884541}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2825635) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{F1A20C69-9FE5-40FD-9CD5-84EABC2EF64A}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2837581) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{334FB202-28D7-4BA4-8BC9-4FE4AB233EA0}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2837606) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0D672F7-883E-4279-8E75-D97A5445AB46}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2878252) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B0DB9F71-E0F7-4FE6-8925-35B860CAC0C4}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{EAD7BEF9-B28C-425F-B2C5-538CB27EF013}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{C0BDC1DE-C35E-422B-8CBD-C1D555468720}) (Version: - Microsoft)
Update for Microsoft Office 2010 (KB2881028) 32-Bit Edition (HKLM-x32\...\{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{089DBFD7-8211-43B2-AAAE-5BDD8C23E3A8}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft OneNote 2010 (KB2837595) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{51CCA922-A0CC-47C4-8910-6936D97CAC2E}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{A0657506-69DC-44AE-8DC1-58E7C6F5B1C9}) (Version: - Microsoft)
Update for Microsoft Outlook 2010 (KB2687567) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2AB483F1-C86E-427A-83B4-23889B03512D}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{40EC8FB1-5202-469D-9232-C28FB1C6FC64}) (Version: - Microsoft)
Update for Microsoft PowerPoint 2010 (KB2837579) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{2BA40F82-F3A4-441C-BF1A-ED4C42FF4872}) (Version: - Microsoft)
Update for Microsoft SharePoint Workspace 2010 (KB2760601) 32-Bit Edition (HKLM-x32\...\{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{F9F5A080-AF38-4966-9A6B-C43DCA465035}) (Version: - Microsoft)
Update for Microsoft Visio 2010 (KB2880526) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{7B29D8B8-6A87-496C-A65E-B935E740448A}) (Version: - Microsoft)
Update for Microsoft Visio Viewer 2010 (KB2837587) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{38CF30E4-3348-4BD1-A859-B630C355A56F}) (Version: - Microsoft)
Update for Microsoft Word 2010 (KB2880529) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{B9B89E01-5B6B-4F73-BC34-B2C0D8ACB4CD}) (Version: - Microsoft)
Windows Live Communications Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Essentials (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Family Safety (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Family Safety (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live ID Sign-in Assistant (Version: 7.250.4311.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Messenger (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live MIME IFilter (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows-Treiberpaket - Nokia pccsmcfd LegacyDriver (05/31/2012 7.1.2.0) (HKLM\...\62BBD193ADFDBB228C7E1ADB56463F5732FF7F6F) (Version: 05/31/2012 7.1.2.0 - Nokia)
WinPatrol (HKLM\...\{6A206A04-6BC1-411B-AA04-4E52EDEEADF2}) (Version: 32.0.2014.5 - Ruiware)
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Teil 3 Code:
ATTFilter ==================== Custom CLSID entries: ==========================
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\smenz\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\smenz\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
Code:
ATTFilter FEEFAC-0014-0002-0017-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
Code:
ATTFilter FEEFAC-0015-0000-0009-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
Code:
ATTFilter FEEFAC-0015-0000-0035-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0052-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0053-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0054-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0055-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0056-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0057-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0058-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0059-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0060-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0061-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0062-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0062-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0062-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0063-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0063-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0063-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0064-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0064-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0064-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0065-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0065-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0065-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
Code:
ATTFilter FEEFAC-0016-0000-0000-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
|
|
23.07.2014, 21:52
| #22 |
| | Malwarebythe hat 3 verdächtige Elemente gefunden!Gmx-account ständig mit spam trotz Filter! Teil 8 Code:
ATTFilter FEEFAC-0016-0000-0032-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
Code:
ATTFilter FEEFAC-0016-0000-0048-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0052-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0053-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0054-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0055-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0056-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0057-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0058-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0059-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0060-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0061-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0062-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0063-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0064-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0065-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0066-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0067-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0068-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0069-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0070-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0071-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0072-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0072-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0072-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0073-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0073-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0073-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0074-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0074-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0074-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0075-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0075-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
Teil 10 Code:
ATTFilter FEEFAC-0016-0000-0075-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0026-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0027-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0028-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0029-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0030-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0031-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0032-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0033-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0034-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0035-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0036-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0037-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0038-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
Teil 11 Code:
ATTFilter FEEFAC-0017-0000-0039-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0039-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0040-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0041-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0042-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0043-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0044-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0045-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0046-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0047-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0048-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0049-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0050-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0051-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0052-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0052-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0052-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0053-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0053-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0053-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0054-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0054-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0054-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0055-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0055-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0055-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0000-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0000-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0000-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0001-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0001-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0001-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0002-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0002-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0002-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0003-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0003-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0003-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0004-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0004-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0004-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0005-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0005-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0005-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0006-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0006-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0006-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0007-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0007-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0007-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0008-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0008-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0008-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0009-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0009-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0009-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0010-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0010-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0010-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0011-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0011-ABCDEFFEDCBB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-0011-ABCDEFFEDCBC}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CAFEEFAC-0018-0000-FFFF-ABCDEFFEDCBA}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\smenz\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}\InprocServer32 -> C:\Program Files\Java\jre8\bin\jp2iexp.dll ()
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\smenz\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2732600908-1742709287-786376233-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\smenz\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64\FileSyncApi64.dll (Microsoft Corporation)
==================== Restore Points =========================
01-07-2014 11:48:44 Windows Update
08-07-2014 12:44:33 Windows Update
09-07-2014 13:00:51 Windows Update
16-07-2014 16:27:34 Windows Update
Code:
ATTFilter 16-07-2014 16:31:07 Installed Java 8 Update 11 (64-bit)
20-07-2014 16:43:32 Revo Uninstaller's restore point - Google Chrome
20-07-2014 17:24:31 Installed Java 7 Update 65
20-07-2014 17:43:54 Revo Uninstaller's restore point - Google Chrome
20-07-2014 17:51:21 Revo Uninstaller's restore point - Google Chrome
21-07-2014 10:39:04 Revo Uninstaller's restore point - Google Chrome
21-07-2014 11:02:55 Revo Uninstaller's restore point - Google Chrome
22-07-2014 11:04:32 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2013-06-10 22:45 - 00000027 ____A C:\windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {0FEEEA04-5676-445A-A8C5-A3B262C3676D} - System32\Tasks\{98A8DF74-175B-46BD-B27C-63F076F8CBC1} => C:\Users\smenz\Desktop\Downloads\chrome_installer._29.0.1547.62.exe
Task: {11BCC9FF-6624-48DD-A0A9-037105613877} - System32\Tasks\PandaUSBVaccine => C:\Program Files (x86)\Panda USB Vaccine\RunInteractiveWin.exe [2009-09-23] ()
Task: {17E38759-A46F-42DC-A758-D4673712CB46} - System32\Tasks\{0600F278-C4F2-4189-AE05-F1967F56238D} => C:\Users\smenz\Desktop\Downloads\TFC.exe [2014-07-22] (OldTimer Tools)
Task: {1D2279FA-E30C-4583-B25F-D8871A93935D} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {5B897616-53C2-4506-BEFD-2118A0745329} - System32\Tasks\{29169D5B-5852-456D-A5FD-808E368E18AF} => C:\Users\smenz\Desktop\Downloads\TFC.exe [2014-07-22] (OldTimer Tools)
Task: {6EE831A9-50B2-4E89-938F-C09D46ED9487} - System32\Tasks\Biokiste
Task: {73EDA546-2E35-4DFE-9DFE-323240375C74} - System32\Tasks\0 => Iexplore.exe
Task: {743DBCE6-710E-4116-9160-59116FF78576} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {81496DCF-48B1-4D1B-A59B-2FC4684165F3} - System32\Tasks\4738 => Wscript.exe C:\Users\smenz\AppData\Local\Temp\launchie.vbs //B
Task: {88934B5D-3A30-4964-A7AD-DCE10B1709D8} - System32\Tasks\{B72AFCD4-E9CC-42D5-9E1D-F4C58D94F474} => C:\Users\smenz\Desktop\Downloads\29.0.1547.62_chrome_installer.exe
Task: {A6C4A12D-F8BD-46DC-9D2C-9BF4D9C98EB0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-19] (Google Inc.)
Task: {B7A8C558-1DAF-4343-8811-351E571DADB8} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\My Dell\sessionchecker.exe [2014-01-31] (PC-Doctor, Inc.)
Task: {C2A00A65-5F98-46E1-B0FB-ED6F70A8A0C5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-10-19] (Google Inc.)
Task: {C6954E15-5EED-4EFE-95A4-FEFA870CBD6F} - System32\Tasks\{F281CD6B-FAB1-4399-B6BC-BA15860083ED} => Chrome.exe hxxp://ui.skype.com/ui/0/6.10.0.104/de/abandoninstall?source=lightinstaller&page=tsPlugin
Task: {DB3B2A75-3AEB-44F9-85D7-8E3762D8F03C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-06-24] (Piriform Ltd)
Task: {E62B8B67-FCF3-4289-BCF3-1DB775EA6E99} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2014-06-19] (Microsoft Corporation)
Task: {E915B3D3-B247-4A09-9A8D-B3CE418243A0} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-08] (Adobe Systems Incorporated)
Task: {F4030E34-1D21-44A0-8659-C82CB656DF86} - System32\Tasks\PCDoctorBackgroundMonitorTask => C:\Program Files\My Dell\uaclauncher.exe [2014-01-31] (PC-Doctor, Inc.)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2014-05-19 00:35 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2012-07-04 19:06 - 2011-03-26 03:28 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-07-04 17:21 - 2012-01-27 04:49 - 02751808 ____N () C:\Program Files (x86)\Dell DataSafe Local Backup\COMPONENTS\SCHEDULER\STSERVICE.EXE
2014-06-18 16:21 - 2014-06-18 16:21 - 00703800 _____ () C:\Program Files (x86)\Emsisoft Anti-Malware\fw32.dll
2014-02-12 16:32 - 2014-02-12 16:32 - 00169472 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\3e27ac2000641918e7215d97c63e957d\IsdiInterop.ni.dll
2012-07-04 16:47 - 2011-01-13 00:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2012-12-07 18:37 - 2008-12-17 12:20 - 00122880 ____N () C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\FTrack.dll
2014-07-21 13:08 - 2014-07-15 11:24 - 00718664 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libglesv2.dll
2014-07-21 13:08 - 2014-07-15 11:24 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\libegl.dll
2014-07-21 13:08 - 2014-07-15 11:24 - 08537928 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\pdf.dll
2014-07-21 13:08 - 2014-07-15 11:24 - 00353096 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ppGoogleNaClPluginChrome.dll
2014-07-21 13:08 - 2014-07-15 11:24 - 01732936 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\ffmpegsumo.dll
2014-07-21 13:08 - 2014-07-15 11:24 - 14664008 _____ () C:\Program Files (x86)\Google\Chrome\Application\36.0.1985.125\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\Temp:5C321E34
==================== Safe Mode (whitelisted) ===================
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CleanHlp.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver"
==================== EXE Association (whitelisted) =============
==================== MSCONFIG/TASK MANAGER disabled items =========
MSCONFIG\startupfolder: C:^Users^smenz^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk => C:\windows\pss\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk.Startup
MSCONFIG\startupreg: AccuWeatherWidget => "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\accuweather.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\AccuWeather\start.umj" --startup
MSCONFIG\startupreg: AthBtTray => "C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AthBtTray.exe"
MSCONFIG\startupreg: AtherosBtStack => "C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe"
MSCONFIG\startupreg: Dell DataSafe Online => C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe
MSCONFIG\startupreg: Dell Webcam Central => "C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe" /mode2
MSCONFIG\startupreg: DellStage => "C:\Program Files (x86)\Dell Stage\Dell Stage\stage_primary.exe" "C:\Program Files (x86)\Dell Stage\Dell Stage\start.umj" --startup
MSCONFIG\startupreg: Desktop Disc Tool => "c:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe"
MSCONFIG\startupreg: NeroLauncher => C:\Program Files (x86)\Nero\SyncUP\NeroLauncher.exe 900
MSCONFIG\startupreg: RoxWatchTray => "c:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Stage Remote => C:\Program Files (x86)\Dell\Stage Remote\StageRemote.exe -Quiet
==================== Faulty Device Manager Devices =============
Teil 13 Code:
ATTFilter
==================== Event log errors: =========================
Application errors:
==================
Error: (07/23/2014 11:12:28 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (07/23/2014 09:05:19 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/22/2014 07:25:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/22/2014 03:09:24 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/22/2014 03:05:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/22/2014 02:53:14 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/22/2014 00:58:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/21/2014 09:41:26 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/21/2014 09:38:42 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/21/2014 05:08:30 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
System errors:
=============
Error: (07/23/2014 09:03:49 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
UimBus
Uim_IM
Uim_VIM
Error: (07/23/2014 09:03:39 AM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24620) (User: NT-AUTORITÄT)
Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "\\?\Volume{9ed98651-c5e5-11e1-a61e-806e6f6e6963}" können nicht gelesen werden.
Error: (07/22/2014 07:24:19 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
UimBus
Uim_IM
Uim_VIM
Error: (07/22/2014 07:24:13 PM) (Source: Microsoft-Windows-BitLocker-Driver) (EventID: 24620) (User: NT-AUTORITÄT)
Description: Überprüfung des verschlüsselten Volumes: Die Volumeinformationen auf "\\?\Volume{9ed98651-c5e5-11e1-a61e-806e6f6e6963}" können nicht gelesen werden.
Error: (07/22/2014 03:25:57 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Emsisoft Anti-Malware 7.0 - Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
Error: (07/22/2014 03:24:55 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "HitmanPro.Alert Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (07/22/2014 03:20:08 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF}
Error: (07/22/2014 03:16:25 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {06622D85-6856-4460-8DE1-A81921B41C4B}
Error: (07/22/2014 03:08:47 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {30D49246-D217-465F-B00B-AC9DDD652EB7}
Error: (07/22/2014 03:07:51 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
UimBus
Uim_IM
Uim_VIM
Microsoft Office Sessions:
=========================
Error: (07/23/2014 11:12:28 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestc:\Users\smenz\Desktop\downloads\esetsmartinstaller_deu.exe
Error: (07/23/2014 09:05:19 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/22/2014 07:25:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/22/2014 03:09:24 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/22/2014 03:05:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/22/2014 02:53:14 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/22/2014 00:58:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/21/2014 09:41:26 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/21/2014 09:38:42 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
Error: (07/21/2014 05:08:30 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\smenz\Desktop\Downloads\esetsmartinstaller_deu.exe
CodeIntegrity Errors:
===================================
Date: 2014-07-23 09:03:35.146
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-07-22 19:24:08.306
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-07-22 15:07:37.806
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-07-22 15:04:08.072
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-07-22 14:51:34.485
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-07-22 12:56:24.432
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-07-21 21:39:38.995
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-07-21 21:36:55.151
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-07-21 16:57:24.260
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
Date: 2014-07-21 16:12:40.479
Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Windows\System32\hmpalert.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.
==================== Memory info ===========================
Percentage of memory in use: 56%
Total physical RAM: 4004.27 MB
Available physical RAM: 1725.21 MB
Total Pagefile: 8006.73 MB
Available Pagefile: 5169.69 MB
Total Virtual: 8192 MB
Available Virtual: 8191.83 MB
==================== Drives ================================
Drive c: (OS) (Fixed) (Total:446.13 GB) (Free:388.65 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: C3D31F70)
Partition 1: (Not Active) - (Size=100 MB) - (Type=DE)
Partition 2: (Active) - (Size=20 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=446 GB) - (Type=07 NTFS)
==================== End Of Log ============================
|
|
24.07.2014, 19:05
| #23 |
| /// the machine /// TB-Ausbilder | Malwarebythe hat 3 verdächtige Elemente gefunden!Gmx-account ständig mit spam trotz Filter! Hi, setz bitte mal den Router auf Werkseinstellungen zurück, danach dann den Browser zurücksetzen, dann sollte das Fake FEnster von Flash weg sein.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
24.07.2014, 23:10
| #24 |
| | Malwarebythe hat 3 verdächtige Elemente gefunden!Gmx-account ständig mit spam trotz Filter! Lieber Schrauber, ich habe jetzt die Werkseinstellungen zurückgesetzt, alle Verläufe gelöscht, den Browser zurückgesetzt und dann wieder neue Einstellungen vorgenommen! Eben war ich kurz auf der amerikanischen Seite. Noch ist nichts passiert. Aber ich habe mich auch noch nicht eingeloggt. Wie jetzt weiter? Wenn ich übrigens mal den Internet Explorer öffne, dann reagiert er manches Mal nicht. Zeigt zwar die Startseite an, die ich eingerichtet habe, aber dann hakt es oft. Wie ist das denn jetzt mit dem Videoseminar abrufen können? Möglich oder nicht? Okay, ich warte geduldig auf weitere Anweisungen! DANKE! Gruß, solonia |
|
25.07.2014, 17:39
| #25 |
| /// the machine /// TB-Ausbilder | Malwarebythe hat 3 verdächtige Elemente gefunden!Gmx-account ständig mit spam trotz Filter! Wenn Du den IE zurücksetzt sollte das Hängen weg sein. Du kannst ganz normal mit dem Rechner arbeiten. Der ROuter war befallen, ich gehe davon aus das jetzt keine Meldungen mehr kommen.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
26.07.2014, 17:54
| #26 |
| | Malwarebythe hat 3 verdächtige Elemente gefunden!Gmx-account ständig mit spam trotz Filter! Lieber Schrauber! 1) IE zurückgesetzt 2)) FRAGEN/PROBLEME a. SECUNIA: Immer wieder kommt von Secunia die Meldung: -MIcrosoft XML Core Services (MSXML) 4.x manuell updaten. Gehe ich dann auf die entsprechende Seite, heißt es, veraltet. Stimmt das? - Java nicht aktuell als Meldung und gleichzeitig, ist aktuell! Das sind doch sich wiedersprechende Aussagen. Macht es nicht mehr Sinn, dann Secunia zu löschen und nur auf FileHippo zu bauen? b. C:\PROGRAMDATA\INSTALLMATE\{6A206A04-6BC1-411B-AA04-4E52EDEEADF2}\SETUP.EXE WAS IST DAS? Gefährlich oder löschbar? c. Du sagst, es liegt am Router, das Problem! Wie kann ich das in Zukunft verändern. Ist mein Router, der ja nicht das neueste Modell ist, von der Telekom, auch eine künftige Fehlerquelle? Austauschen? d. ich habe immer noch das Problem mit Google Chrome, dass es meine Settings nicht behält. Ich werde heute oder morgen mal die Sandboxie runterschmeißen, es ohne testen und dann neuinstallieren! Aber vorher ging es ja auch! Die Probleme mit dem Settings fingen erst an, nachdem wir Google Chrome mit dem Revo komplett deinstalliert haben und dann wieder neu! Hm ... ! e) hier zur Sichheit einen neues FRST Log: fRST Teil 1 FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-07-2014 Ran by smenz (administrator) on NOTEBOOK-N5050 on 26-07-2014 18:28:47 Running from C:\Users\smenz\Desktop\Downloads Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (SurfRight B.V.) C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe (IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe (Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe (Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe (Atheros) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe (Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe (Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe (SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE () C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe (SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe (IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe (FileHippo.com) C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe (Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe (Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe (Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe (Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe Code:
ATTFilter ==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [608112 2011-03-29] (Alps Electric Co., Ltd.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-05-27] (IDT, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-13] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [emsisoft anti-malware] => c:\program files (x86)\emsisoft anti-malware\a2guard.exe [4841824 2014-07-09] (Emsisoft GmbH)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2732600908-1742709287-786376233-1000\...\Run: [FileHippo.com] => C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com)
HKU\S-1-5-21-2732600908-1742709287-786376233-1000\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [784392 2014-05-29] (Sandboxie Holdings, LLC)
HKU\S-1-5-21-2732600908-1742709287-786376233-1000\...\Run: [WinPatrol] => C:\Program Files (x86)\Ruiware\WinPatrol\winpatrol.exe -expressboot
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\Users\smenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\smenz\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64\SkyDriveShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\smenz\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64\SkyDriveShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\smenz\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64\SkyDriveShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\smenz\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\SkyDriveShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\smenz\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\SkyDriveShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\smenz\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\SkyDriveShell.dll (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x49E58358A0A8CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://web.de/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - DefaultScope value is missing.
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/121022/CTPID.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=11.11.2 - C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.11.2 - C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\smenz\npAmazonMP3DownloaderPlugin101753.dll No File
Chrome:
=======
CHR Extension: (Google Docs) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-21]
CHR Extension: (Google Drive) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-21]
CHR Extension: (YouTube) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-21]
CHR Extension: (Google-Suche) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-21]
CHR Extension: (Google Wallet) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-24]
CHR Extension: (Google Mail) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-21]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [4741384 2014-07-09] (Emsisoft GmbH)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-05-20] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [80032 2011-05-20] (Atheros Commnucations) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2356408 2014-06-19] (Microsoft Corporation)
R2 hmpalertsvc; C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe [1876816 2014-07-18] (SurfRight B.V.)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [174088 2014-05-29] (Sandboxie Holdings, LLC)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1229528 2013-12-06] (Secunia)
S2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [662232 2013-12-06] (Secunia)
S4 McMPFSvc; "C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc [X]
==================== Drivers (Whitelisted) ====================
Code:
ATTFilter (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [71472 2014-05-12] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [26176 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys [45208 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys [23088 2014-05-12] (Emsisoft GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R3 cleanhlp; C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [57024 2013-12-04] (Emsisoft GmbH)
R2 hmpalert; C:\Windows\System32\drivers\hmpalert.sys [93144 2014-07-18] ()
R3 MBAMSwissArmy; C:\windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-26] (Malwarebytes Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-12-06] (Secunia)
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [185352 2014-05-29] (Sandboxie Holdings, LLC)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)
S1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)
S1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)
S3 PCDSRVC{D3412D80-CF3B4A27-06020200}_0; \??\c:\program files\my dell\pcdsrvc_x64.pkms [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-07-25 08:37 - 2014-07-26 18:04 - 00000336 _____ () C:\windows\setupact.log
2014-07-25 08:37 - 2014-07-25 08:37 - 00000000 _____ () C:\windows\setuperr.log
2014-07-24 21:22 - 2014-07-24 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-24 21:20 - 2014-07-24 21:20 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-24 21:20 - 2014-07-24 21:20 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-22 14:35 - 2014-07-22 14:35 - 00002958 _____ () C:\windows\System32\Tasks\{29169D5B-5852-456D-A5FD-808E368E18AF}
2014-07-22 14:35 - 2014-07-22 14:35 - 00002958 _____ () C:\windows\System32\Tasks\{0600F278-C4F2-4189-AE05-F1967F56238D}
2014-07-21 13:08 - 2014-07-21 13:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-20 19:25 - 2014-07-20 19:25 - 00272808 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-20 19:25 - 2014-07-20 19:25 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-20 18:39 - 2014-07-20 18:40 - 00000000 ____D () C:\Users\smenz\Desktop\Usefuls PDF´s
2014-07-20 18:36 - 2014-07-20 18:36 - 00000000 ____D () C:\Users\smenz\AppData\Roaming\VSRevoGroup
2014-07-20 18:21 - 2014-07-20 18:21 - 00001266 _____ () C:\Users\smenz\Desktop\Revo Uninstaller.lnk
2014-07-20 18:21 - 2014-07-20 18:21 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-17 22:00 - 2014-07-17 22:03 - 00000000 ____D () C:\AdwCleaner
2014-07-17 17:44 - 2014-07-17 17:44 - 00025355 _____ () C:\ComboFix.txt
2014-07-17 17:27 - 2011-06-26 08:45 - 00256000 _____ () C:\windows\PEV.exe
2014-07-17 17:27 - 2010-11-07 19:20 - 00208896 _____ () C:\windows\MBR.exe
2014-07-17 17:27 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00098816 _____ () C:\windows\sed.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00080412 _____ () C:\windows\grep.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00068096 _____ () C:\windows\zip.exe
2014-07-17 17:25 - 2014-07-17 17:45 - 00000000 ____D () C:\Qoobox
2014-07-16 19:56 - 2014-07-26 18:28 - 00000000 ____D () C:\FRST
2014-07-16 18:32 - 2014-07-16 18:31 - 00321448 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2014-07-09 11:14 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-07-09 11:14 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-07-09 11:14 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
2014-07-09 11:14 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
2014-07-09 11:14 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-07-09 11:14 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-07-09 11:14 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2014-07-09 11:14 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2014-07-09 11:13 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-07-09 11:13 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-07-09 11:13 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-07-09 11:13 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-07-09 11:13 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-07-09 11:13 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-07-09 11:13 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-07-09 11:13 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-07-09 11:13 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2014-07-09 11:13 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-07-09 11:13 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-07-09 11:13 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-07-09 11:13 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-07-09 11:13 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-07-09 11:13 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-07-09 11:13 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-07-09 11:13 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-07-09 11:13 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-07-09 11:13 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-07-09 11:13 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 11:13 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-07-09 11:13 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-07-09 11:13 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-07-09 11:13 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
TEIL 4 Code:
ATTFilter 2014-07-09 11:13 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-07-09 11:13 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-07-09 11:13 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-07-09 11:13 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-07-09 11:13 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-07-09 11:13 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2014-07-09 11:13 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-07-09 11:13 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-07-09 11:13 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-07-09 11:13 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-07-09 11:13 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-07-09 11:13 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2014-07-09 11:13 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-07-09 11:13 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-07-09 11:13 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-07-09 11:13 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-07-09 11:13 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-09 11:13 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-07-09 11:13 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-07-09 11:13 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-07-09 11:13 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-07-09 11:13 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-07-09 11:13 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-07-09 11:13 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-07-09 11:13 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2014-07-09 11:13 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-07-09 11:13 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-07-09 11:13 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-07-09 11:13 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-07-09 11:13 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-07-09 11:13 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-07-09 11:13 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2014-07-09 11:12 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-07-09 11:12 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2014-07-09 11:12 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2014-07-03 15:37 - 2014-07-26 18:06 - 00000000 ____D () C:\windows\CryptoGuard
2014-07-03 15:37 - 2014-07-19 10:22 - 00000000 ____D () C:\Program Files (x86)\HitmanPro.Alert
2014-07-03 15:37 - 2014-07-18 11:23 - 00548424 _____ (SurfRight) C:\windows\system32\hmpalert.dll
2014-07-03 15:37 - 2014-07-18 11:23 - 00477008 _____ (SurfRight) C:\windows\SysWOW64\hmpalert.dll
2014-07-03 15:37 - 2014-07-18 11:23 - 00093144 _____ () C:\windows\system32\Drivers\hmpalert.sys
2014-07-03 15:37 - 2014-07-03 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro.Alert
2014-07-03 15:37 - 2014-07-03 15:37 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-07-26 18:28 - 2014-07-16 19:56 - 00000000 ____D () C:\FRST
2014-07-26 18:19 - 2014-02-21 20:01 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-07-26 18:12 - 2014-06-11 15:29 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-26 18:11 - 2009-07-14 06:45 - 00020720 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-26 18:11 - 2009-07-14 06:45 - 00020720 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-26 18:08 - 2012-07-04 16:43 - 01634243 _____ () C:\windows\WindowsUpdate.log
2014-07-26 18:06 - 2014-07-03 15:37 - 00000000 ____D () C:\windows\CryptoGuard
2014-07-26 18:05 - 2013-06-12 23:38 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware
2014-07-26 18:05 - 2012-10-19 15:42 - 00001104 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-26 18:05 - 2012-07-04 17:32 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks
2014-07-26 18:05 - 2012-07-04 17:32 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks
2014-07-26 18:04 - 2014-07-25 08:37 - 00000336 _____ () C:\windows\setupact.log
2014-07-26 18:04 - 2012-07-04 17:21 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup
2014-07-26 18:04 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-07-26 18:03 - 2014-06-20 16:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPatrol
2014-07-26 18:02 - 2014-06-20 16:03 - 00000000 ____D () C:\ProgramData\InstallMate
2014-07-26 17:48 - 2012-10-19 15:42 - 00001108 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-26 16:26 - 2012-12-06 20:05 - 00000000 ____D () C:\Users\smenz\Documents\Booksmarks
2014-07-26 09:56 - 2012-07-04 19:31 - 00699666 _____ () C:\windows\system32\perfh007.dat
2014-07-26 09:56 - 2012-07-04 19:31 - 00149774 _____ () C:\windows\system32\perfc007.dat
2014-07-26 09:56 - 2009-07-14 07:13 - 01620612 _____ () C:\windows\system32\PerfStringBackup.INI
2014-07-25 09:07 - 2013-12-28 21:30 - 00471107 _____ () C:\Users\smenz\Desktop\Budget 2014.xlsx
2014-07-25 08:37 - 2014-07-25 08:37 - 00000000 _____ () C:\windows\setuperr.log
2014-07-25 00:26 - 2013-06-13 16:03 - 00000000 ____D () C:\Users\smenz\AppData\Roaming\Skype
2014-07-25 00:02 - 2013-07-06 01:27 - 00000000 ____D () C:\windows\Minidump
2014-07-25 00:02 - 2012-10-19 17:47 - 00000000 ____D () C:\Users\smenz\AppData\Local\CrashDumps
2014-07-25 00:01 - 2013-06-17 16:48 - 00000000 ____D () C:\Program Files\CCleaner
2014-07-25 00:00 - 2012-07-04 17:03 - 00000000 ____D () C:\ProgramData\Sonic
2014-07-24 22:12 - 2013-06-13 17:13 - 00005076 _____ () C:\windows\Sandboxie.ini
2014-07-24 21:22 - 2014-07-24 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-24 21:20 - 2014-07-24 21:20 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-24 21:20 - 2014-07-24 21:20 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-24 17:14 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\NDF
2014-07-22 19:30 - 2013-10-13 21:23 - 00037888 _____ () C:\Users\smenz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-07-22 14:35 - 2014-07-22 14:35 - 00002958 _____ () C:\windows\System32\Tasks\{29169D5B-5852-456D-A5FD-808E368E18AF}
2014-07-22 14:35 - 2014-07-22 14:35 - 00002958 _____ () C:\windows\System32\Tasks\{0600F278-C4F2-4189-AE05-F1967F56238D}
2014-07-21 17:04 - 2012-10-19 13:19 - 00000000 ____D () C:\Users\smenz
2014-07-21 13:08 - 2014-07-21 13:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-21 13:08 - 2012-10-19 15:42 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-20 19:26 - 2013-12-25 09:57 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-20 19:25 - 2014-07-20 19:25 - 00272808 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-20 19:25 - 2014-07-20 19:25 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-20 18:40 - 2014-07-20 18:39 - 00000000 ____D () C:\Users\smenz\Desktop\Usefuls PDF´s
2014-07-20 18:36 - 2014-07-20 18:36 - 00000000 ____D () C:\Users\smenz\AppData\Roaming\VSRevoGroup
2014-07-20 18:21 - 2014-07-20 18:21 - 00001266 _____ () C:\Users\smenz\Desktop\Revo Uninstaller.lnk
2014-07-20 18:21 - 2014-07-20 18:21 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-19 10:22 - 2014-07-03 15:37 - 00000000 ____D () C:\Program Files (x86)\HitmanPro.Alert
2014-07-18 11:23 - 2014-07-03 15:37 - 00548424 _____ (SurfRight) C:\windows\system32\hmpalert.dll
2014-07-18 11:23 - 2014-07-03 15:37 - 00477008 _____ (SurfRight) C:\windows\SysWOW64\hmpalert.dll
2014-07-18 11:23 - 2014-07-03 15:37 - 00093144 _____ () C:\windows\system32\Drivers\hmpalert.sys
2014-07-17 23:51 - 2014-06-21 21:16 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2014-07-17 23:51 - 2012-07-04 16:56 - 00000000 ____D () C:\ProgramData\Temp
2014-07-17 22:03 - 2014-07-17 22:00 - 00000000 ____D () C:\AdwCleaner
2014-07-17 17:45 - 2014-07-17 17:25 - 00000000 ____D () C:\Qoobox
2014-07-17 17:44 - 2014-07-17 17:44 - 00025355 _____ () C:\ComboFix.txt
2014-07-17 17:39 - 2009-07-14 04:34 - 00000215 _____ () C:\windows\system.ini
2014-07-16 18:51 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\Speech
2014-07-16 18:31 - 2014-07-16 18:32 - 00321448 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2014-07-16 18:31 - 2014-06-20 14:55 - 00191400 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2014-07-16 18:31 - 2014-06-20 14:55 - 00190888 _____ (Oracle Corporation) C:\windows\system32\java.exe
2014-07-16 18:31 - 2014-06-20 14:55 - 00111016 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge-64.dll
2014-07-16 18:31 - 2014-01-24 11:42 - 00000000 ____D () C:\Program Files\Java
2014-07-15 20:41 - 2012-10-20 20:53 - 00000000 ____D () C:\Users\smenz\Documents\My Kindle Content
2014-07-13 17:07 - 2014-04-06 19:24 - 00077414 _____ () C:\Users\smenz\Desktop\Übersicht Prozessarbeit 2.xlsx
2014-07-12 18:40 - 2012-11-29 22:16 - 00000000 ____D () C:\Users\smenz\Documents\ELLA
2014-07-12 18:25 - 2012-10-19 17:43 - 00000000 ____D () C:\Users\smenz\Documents\OneNote-Notizbücher
2014-07-12 12:45 - 2013-05-23 14:08 - 00000000 ____D () C:\Program Files\My Dell
2014-07-12 10:05 - 2013-05-23 14:09 - 00003440 _____ () C:\windows\System32\Tasks\PCDEventLauncherTask
2014-07-10 16:20 - 2012-10-19 18:36 - 00000000 ____D () C:\Users\smenz\AppData\Local\Microsoft Games
2014-07-10 13:32 - 2012-07-04 17:15 - 00000000 ____D () C:\ProgramData\Skype
2014-07-10 13:08 - 2014-05-19 00:35 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-07-09 17:00 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\rescache
2014-07-09 15:25 - 2009-07-14 06:45 - 00492792 _____ () C:\windows\system32\FNTCACHE.DAT
2014-07-09 15:23 - 2014-05-07 02:27 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-07-09 15:23 - 2012-07-04 19:34 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-09 15:23 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\Dism
2014-07-09 15:23 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\Dism
2014-07-09 15:12 - 2012-10-19 17:33 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-09 15:10 - 2013-08-15 21:53 - 00000000 ____D () C:\windows\system32\MRT
2014-07-09 15:04 - 2012-10-24 13:56 - 96441528 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-07-08 21:19 - 2014-02-21 20:01 - 00003822 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-07-08 21:19 - 2013-06-11 14:08 - 00699056 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-07-08 21:19 - 2013-06-11 14:08 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-03 15:37 - 2014-07-03 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro.Alert
2014-07-03 15:37 - 2014-07-03 15:37 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert
2014-07-03 00:08 - 2014-05-31 19:53 - 00001104 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-07-01 18:58 - 2012-10-19 13:19 - 00000000 ___RD () C:\Users\smenz\Eigene Bilder
2014-06-30 04:09 - 2014-07-09 11:14 - 00519168 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-06-30 04:04 - 2014-07-09 11:14 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-06-29 13:04 - 2013-07-02 18:12 - 00023731 _____ () C:\Users\smenz\Desktop\Books Releases.xlsx
2014-06-26 14:51 - 2013-06-17 16:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-07-18 14:21
==================== End Of Log ============================
--- --- --- Ich habe jetzt von FRST das Addition-file nicht hinzugefügt. Ist wieder so lang gewesen. Wieso ist das plötzlich so lang, wenn es vorher nur kurz war! Oder ist das normal? So, wie geht es jetzt weiter? Ich freue mich über eine baldige Antwort. DANKE! Gruß, solonia |
|
27.07.2014, 09:53
| #27 | ||
| /// the machine /// TB-Ausbilder | Malwarebythe hat 3 verdächtige Elemente gefunden!Gmx-account ständig mit spam trotz Filter!Zitat:
Zitat:
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\PROGRAMDATA\INSTALLMATE
Task: {73EDA546-2E35-4DFE-9DFE-323240375C74} - System32\Tasks\0 => Iexplore.exe
Task: {81496DCF-48B1-4D1B-A59B-2FC4684165F3} - System32\Tasks\4738 => Wscript.exe C:\Users\smenz\AppData\Local\Temp\launchie.vbs //B
C:\Users\smenz\AppData\Local\Temp\launchie.vbs
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Das Log ist so lange weil bei einem Update ein neues Feature eingebaut wurde.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
27.07.2014, 17:11
| #28 |
| |  Malwarebythe hat 3 verdächtige Elemente gefunden!Gmx-account ständig mit spam trotz Filter! Lieber Schrauber, danke! 1) Secunia mit Revouninstaller deinstalliert 2) Danke für die Erklärung den Grund der Länge der Additionslists 3) Was mache ich mit den zwei alten Javascripten: alles lassen? Muss ich da überhaupt was tun? 3) Fixlog mit FRST Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-07-2014
Ran by smenz at 2014-07-27 18:02:21 Run:3
Running from C:\Users\smenz\Desktop\Downloads
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
C:\PROGRAMDATA\INSTALLMATE Task: {73EDA546-2E35-4DFE-9DFE-323240375C74} - System32\Tasks\0 => Iexplore.exe Task: {81496DCF-48B1-4D1B-A59B-2FC4684165F3} - System32\Tasks\4738 => Wscript.exe C:\Users\smenz\AppData\Local\Temp\launchie.vbs //B C:\Users\smenz\AppData\Local\Temp\launchie.vbs
*****************
"C:\PROGRAMDATA\INSTALLMATE Task: {73EDA546-2E35-4DFE-9DFE-323240375C74} - System32\Tasks\0 => Iexplore.exe Task: {81496DCF-48B1-4D1B-A59B-2FC4684165F3} - System32\Tasks\4738 => Wscript.exe C:\Users\smenz\AppData\Local\Temp\launchie.vbs //B C:\Users\smenz\AppData\Local\Temp\launchie.vbs" => File/Directory not found.
==== End of Fixlog ====
NEUES FRST? Zur Sicherheit hier: Teil 1 FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-07-2014
Ran by smenz (administrator) on NOTEBOOK-N5050 on 27-07-2014 18:05:03
Running from C:\Users\smenz\Desktop\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(SurfRight B.V.) C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Atheros) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2start.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell DataSafe Local Backup\Components\DSUpdate\DSUpd.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(FileHippo.com) C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe
(Panda Security) C:\Program Files (x86)\Panda USB Vaccine\USBVaccine.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Emsisoft GmbH) C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SandboxieRpcSs.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SandboxieDcomLaunch.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SandboxieCrypto.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\32\SbieSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Teil 2 Code:
ATTFilter ==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [608112 2011-03-29] (Alps Electric Co., Ltd.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1128448 2011-05-27] (IDT, Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2011-01-13] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [emsisoft anti-malware] => c:\program files (x86)\emsisoft anti-malware\a2guard.exe [4841824 2014-07-09] (Emsisoft GmbH)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2732600908-1742709287-786376233-1000\...\Run: [FileHippo.com] => C:\Program Files (x86)\FileHippo.com\UpdateChecker.exe [307712 2012-11-23] (FileHippo.com)
HKU\S-1-5-21-2732600908-1742709287-786376233-1000\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [784392 2014-05-29] (Sandboxie Holdings, LLC)
ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\smenz\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64\SkyDriveShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\smenz\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64\SkyDriveShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\smenz\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\amd64\SkyDriveShell64.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrivePro1 (ErrorConflict) -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrivePro2 (SyncInProgress) -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrivePro3 (InSync) -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Users\smenz\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\SkyDriveShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Users\smenz\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\SkyDriveShell.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Users\smenz\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512\SkyDriveShell.dll (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x49E58358A0A8CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://web.de/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM-x32 - DefaultScope value is missing.
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre8\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre8\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://ccfiles.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/121022/CTPID.cab
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @java.com/DTPlugin,version=11.11.2 - C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.11.2 - C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: amazon.com/AmazonMP3DownloaderPlugin - C:\Users\smenz\npAmazonMP3DownloaderPlugin101753.dll No File
Teil 3 Code:
ATTFilter Chrome:
=======
CHR Extension: (Google Docs) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-07-21]
CHR Extension: (Google Drive) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-07-21]
CHR Extension: (YouTube) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-21]
CHR Extension: (Google-Suche) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-21]
CHR Extension: (Google Wallet) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-07-24]
CHR Extension: (Google Mail) - C:\Users\smenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-21]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 a2AntiMalware; C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe [4741384 2014-07-09] (Emsisoft GmbH)
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\Ath_CoexAgent.exe [146592 2011-05-20] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [80032 2011-05-20] (Atheros Commnucations) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2356408 2014-06-19] (Microsoft Corporation)
R2 hmpalertsvc; C:\Program Files (x86)\HitmanPro.Alert\hmpalert.exe [1876816 2014-07-18] (SurfRight B.V.)
R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [174088 2014-05-29] (Sandboxie Holdings, LLC)
S4 McMPFSvc; "C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe" /McCoreSvc [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 a2acc; C:\PROGRAM FILES (X86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [71472 2014-05-12] (Emsisoft GmbH)
R1 A2DDA; C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [26176 2013-03-28] (Emsisoft GmbH)
R1 a2injectiondriver; C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys [45208 2013-09-30] (Emsisoft GmbH)
R1 a2util; C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys [23088 2014-05-12] (Emsisoft GmbH)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R3 cleanhlp; C:\Program Files (x86)\Emsisoft Anti-Malware\cleanhlp64.sys [57024 2013-12-04] (Emsisoft GmbH)
R2 hmpalert; C:\Windows\System32\drivers\hmpalert.sys [93144 2014-07-18] ()
R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [185352 2014-05-29] (Sandboxie Holdings, LLC)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [90960 2013-03-15] (Windows (R) 2000 DDK provider)
S1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [633680 2013-03-15] (Paragon)
S1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [390352 2013-03-15] (Paragon)
S3 PCDSRVC{D3412D80-CF3B4A27-06020200}_0; \??\c:\program files\my dell\pcdsrvc_x64.pkms [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-07-25 08:37 - 2014-07-27 17:40 - 00000448 _____ () C:\windows\setupact.log
2014-07-25 08:37 - 2014-07-25 08:37 - 00000000 _____ () C:\windows\setuperr.log
2014-07-24 21:22 - 2014-07-24 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-24 21:20 - 2014-07-24 21:20 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-24 21:20 - 2014-07-24 21:20 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-22 14:35 - 2014-07-22 14:35 - 00002958 _____ () C:\windows\System32\Tasks\{29169D5B-5852-456D-A5FD-808E368E18AF}
2014-07-22 14:35 - 2014-07-22 14:35 - 00002958 _____ () C:\windows\System32\Tasks\{0600F278-C4F2-4189-AE05-F1967F56238D}
2014-07-21 13:08 - 2014-07-21 13:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-20 19:25 - 2014-07-20 19:25 - 00272808 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-20 19:25 - 2014-07-20 19:25 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-20 18:39 - 2014-07-20 18:40 - 00000000 ____D () C:\Users\smenz\Desktop\Usefuls PDF´s
2014-07-20 18:36 - 2014-07-20 18:36 - 00000000 ____D () C:\Users\smenz\AppData\Roaming\VSRevoGroup
2014-07-20 18:21 - 2014-07-20 18:21 - 00001266 _____ () C:\Users\smenz\Desktop\Revo Uninstaller.lnk
2014-07-20 18:21 - 2014-07-20 18:21 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-17 22:00 - 2014-07-17 22:03 - 00000000 ____D () C:\AdwCleaner
2014-07-17 17:44 - 2014-07-17 17:44 - 00025355 _____ () C:\ComboFix.txt
2014-07-17 17:27 - 2011-06-26 08:45 - 00256000 _____ () C:\windows\PEV.exe
2014-07-17 17:27 - 2010-11-07 19:20 - 00208896 _____ () C:\windows\MBR.exe
2014-07-17 17:27 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00098816 _____ () C:\windows\sed.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00080412 _____ () C:\windows\grep.exe
2014-07-17 17:27 - 2000-08-31 02:00 - 00068096 _____ () C:\windows\zip.exe
2014-07-17 17:25 - 2014-07-17 17:45 - 00000000 ____D () C:\Qoobox
2014-07-16 19:56 - 2014-07-27 18:05 - 00000000 ____D () C:\FRST
2014-07-16 18:32 - 2014-07-16 18:31 - 00321448 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2014-07-09 11:14 - 2014-06-30 04:09 - 00519168 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-07-09 11:14 - 2014-06-30 04:04 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-07-09 11:14 - 2014-06-18 04:18 - 00692736 _____ (Microsoft Corporation) C:\windows\system32\osk.exe
2014-07-09 11:14 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\windows\SysWOW64\osk.exe
2014-07-09 11:14 - 2014-06-18 03:10 - 03157504 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-07-09 11:14 - 2014-06-06 12:10 - 00624128 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-07-09 11:14 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\windows\SysWOW64\qedit.dll
2014-07-09 11:14 - 2014-05-30 08:45 - 00497152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2014-07-09 11:13 - 2014-06-20 22:14 - 00266424 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2014-07-09 11:13 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2014-07-09 11:13 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-07-09 11:13 - 2014-06-19 03:06 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-07-09 11:13 - 2014-06-19 03:06 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-07-09 11:13 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-07-09 11:13 - 2014-06-19 02:42 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-07-09 11:13 - 2014-06-19 02:42 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-07-09 11:13 - 2014-06-19 02:41 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2014-07-09 11:13 - 2014-06-19 02:41 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-07-09 11:13 - 2014-06-19 02:32 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-07-09 11:13 - 2014-06-19 02:31 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-07-09 11:13 - 2014-06-19 02:26 - 00598016 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-07-09 11:13 - 2014-06-19 02:24 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-07-09 11:13 - 2014-06-19 02:24 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-07-09 11:13 - 2014-06-19 02:23 - 00752640 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-07-09 11:13 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-07-09 11:13 - 2014-06-19 02:14 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-07-09 11:13 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-07-09 11:13 - 2014-06-19 01:59 - 00038400 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 11:13 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-07-09 11:13 - 2014-06-19 01:53 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-07-09 11:13 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-07-09 11:13 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-07-09 11:13 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
Code:
ATTFilter 2014-07-09 11:13 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-07-09 11:13 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-07-09 11:13 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-07-09 11:13 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2014-07-09 11:13 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2014-07-09 11:13 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-07-09 11:13 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-07-09 11:13 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-07-09 11:13 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-07-09 11:13 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-07-09 11:13 - 2014-06-19 01:27 - 01249280 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2014-07-09 11:13 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2014-07-09 11:13 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2014-07-09 11:13 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2014-07-09 11:13 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2014-07-09 11:13 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-07-09 11:13 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-07-09 11:13 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2014-07-09 11:13 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-07-09 11:13 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2014-07-09 11:13 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-07-09 11:13 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-07-09 11:13 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-07-09 11:13 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2014-07-09 11:13 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2014-07-09 11:13 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-07-09 11:13 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-07-09 11:13 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-07-09 11:13 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-07-09 11:13 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-07-09 11:13 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00728064 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00340992 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00314880 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00307200 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2014-07-09 11:13 - 2014-05-30 10:08 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll
2014-07-09 11:13 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll
2014-07-09 11:12 - 2014-06-05 16:45 - 01460736 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2014-07-09 11:12 - 2014-06-05 16:26 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll
2014-07-09 11:12 - 2014-06-05 16:25 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll
2014-07-03 15:37 - 2014-07-27 17:43 - 00000000 ____D () C:\windows\CryptoGuard
2014-07-03 15:37 - 2014-07-19 10:22 - 00000000 ____D () C:\Program Files (x86)\HitmanPro.Alert
2014-07-03 15:37 - 2014-07-18 11:23 - 00548424 _____ (SurfRight) C:\windows\system32\hmpalert.dll
2014-07-03 15:37 - 2014-07-18 11:23 - 00477008 _____ (SurfRight) C:\windows\SysWOW64\hmpalert.dll
2014-07-03 15:37 - 2014-07-18 11:23 - 00093144 _____ () C:\windows\system32\Drivers\hmpalert.sys
2014-07-03 15:37 - 2014-07-03 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro.Alert
2014-07-03 15:37 - 2014-07-03 15:37 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-07-27 18:05 - 2014-07-16 19:56 - 00000000 ____D () C:\FRST
2014-07-27 17:49 - 2012-10-19 15:42 - 00001108 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-27 17:49 - 2009-07-14 06:45 - 00020720 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-27 17:49 - 2009-07-14 06:45 - 00020720 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-27 17:48 - 2012-07-04 16:43 - 01670944 _____ () C:\windows\WindowsUpdate.log
2014-07-27 17:43 - 2014-07-03 15:37 - 00000000 ____D () C:\windows\CryptoGuard
2014-07-27 17:42 - 2013-06-12 23:38 - 00000000 ____D () C:\Program Files (x86)\Emsisoft Anti-Malware
2014-07-27 17:42 - 2012-10-19 15:42 - 00001104 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-27 17:42 - 2012-07-04 17:32 - 00000000 ____D () C:\Users\Default\AppData\Local\SoftThinks
2014-07-27 17:42 - 2012-07-04 17:32 - 00000000 ____D () C:\Users\Default User\AppData\Local\SoftThinks
2014-07-27 17:40 - 2014-07-25 08:37 - 00000448 _____ () C:\windows\setupact.log
2014-07-27 17:40 - 2012-07-04 17:21 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup
2014-07-27 17:40 - 2009-07-14 07:08 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-07-26 22:19 - 2014-02-21 20:01 - 00000884 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-07-26 18:12 - 2014-06-11 15:29 - 00122584 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-26 18:03 - 2014-06-20 16:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPatrol
2014-07-26 18:02 - 2014-06-20 16:03 - 00000000 ____D () C:\ProgramData\InstallMate
2014-07-26 16:26 - 2012-12-06 20:05 - 00000000 ____D () C:\Users\smenz\Documents\Booksmarks
2014-07-26 09:56 - 2012-07-04 19:31 - 00699666 _____ () C:\windows\system32\perfh007.dat
2014-07-26 09:56 - 2012-07-04 19:31 - 00149774 _____ () C:\windows\system32\perfc007.dat
2014-07-26 09:56 - 2009-07-14 07:13 - 01620612 _____ () C:\windows\system32\PerfStringBackup.INI
2014-07-25 09:07 - 2013-12-28 21:30 - 00471107 _____ () C:\Users\smenz\Desktop\Budget 2014.xlsx
Teil 5 Code:
ATTFilter 2014-07-25 08:37 - 2014-07-25 08:37 - 00000000 _____ () C:\windows\setuperr.log
2014-07-25 00:26 - 2013-06-13 16:03 - 00000000 ____D () C:\Users\smenz\AppData\Roaming\Skype
2014-07-25 00:02 - 2013-07-06 01:27 - 00000000 ____D () C:\windows\Minidump
2014-07-25 00:02 - 2012-10-19 17:47 - 00000000 ____D () C:\Users\smenz\AppData\Local\CrashDumps
2014-07-25 00:01 - 2013-06-17 16:48 - 00000000 ____D () C:\Program Files\CCleaner
2014-07-25 00:00 - 2012-07-04 17:03 - 00000000 ____D () C:\ProgramData\Sonic
2014-07-24 22:12 - 2013-06-13 17:13 - 00005076 _____ () C:\windows\Sandboxie.ini
2014-07-24 21:22 - 2014-07-24 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-24 21:20 - 2014-07-24 21:20 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-24 21:20 - 2014-07-24 21:20 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-24 17:14 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\NDF
2014-07-22 19:30 - 2013-10-13 21:23 - 00037888 _____ () C:\Users\smenz\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-07-22 14:35 - 2014-07-22 14:35 - 00002958 _____ () C:\windows\System32\Tasks\{29169D5B-5852-456D-A5FD-808E368E18AF}
2014-07-22 14:35 - 2014-07-22 14:35 - 00002958 _____ () C:\windows\System32\Tasks\{0600F278-C4F2-4189-AE05-F1967F56238D}
2014-07-21 17:04 - 2012-10-19 13:19 - 00000000 ____D () C:\Users\smenz
2014-07-21 13:08 - 2014-07-21 13:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-07-21 13:08 - 2012-10-19 15:42 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-20 19:26 - 2013-12-25 09:57 - 00000000 ____D () C:\ProgramData\Oracle
2014-07-20 19:25 - 2014-07-20 19:25 - 00272808 _____ (Oracle Corporation) C:\windows\SysWOW64\javaws.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\javaw.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00175528 _____ (Oracle Corporation) C:\windows\SysWOW64\java.exe
2014-07-20 19:25 - 2014-07-20 19:25 - 00098216 _____ (Oracle Corporation) C:\windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-20 19:25 - 2014-07-20 19:25 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-20 18:40 - 2014-07-20 18:39 - 00000000 ____D () C:\Users\smenz\Desktop\Usefuls PDF´s
2014-07-20 18:36 - 2014-07-20 18:36 - 00000000 ____D () C:\Users\smenz\AppData\Roaming\VSRevoGroup
2014-07-20 18:21 - 2014-07-20 18:21 - 00001266 _____ () C:\Users\smenz\Desktop\Revo Uninstaller.lnk
2014-07-20 18:21 - 2014-07-20 18:21 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group
2014-07-19 10:22 - 2014-07-03 15:37 - 00000000 ____D () C:\Program Files (x86)\HitmanPro.Alert
2014-07-18 11:23 - 2014-07-03 15:37 - 00548424 _____ (SurfRight) C:\windows\system32\hmpalert.dll
2014-07-18 11:23 - 2014-07-03 15:37 - 00477008 _____ (SurfRight) C:\windows\SysWOW64\hmpalert.dll
2014-07-18 11:23 - 2014-07-03 15:37 - 00093144 _____ () C:\windows\system32\Drivers\hmpalert.sys
2014-07-17 23:51 - 2014-06-21 21:16 - 00000000 ____D () C:\Program Files (x86)\SpywareBlaster
2014-07-17 23:51 - 2012-07-04 16:56 - 00000000 ____D () C:\ProgramData\Temp
2014-07-17 22:03 - 2014-07-17 22:00 - 00000000 ____D () C:\AdwCleaner
2014-07-17 17:45 - 2014-07-17 17:25 - 00000000 ____D () C:\Qoobox
2014-07-17 17:44 - 2014-07-17 17:44 - 00025355 _____ () C:\ComboFix.txt
2014-07-17 17:39 - 2009-07-14 04:34 - 00000215 _____ () C:\windows\system.ini
2014-07-16 18:51 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\Speech
2014-07-16 18:31 - 2014-07-16 18:32 - 00321448 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2014-07-16 18:31 - 2014-06-20 14:55 - 00191400 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2014-07-16 18:31 - 2014-06-20 14:55 - 00190888 _____ (Oracle Corporation) C:\windows\system32\java.exe
2014-07-16 18:31 - 2014-06-20 14:55 - 00111016 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge-64.dll
2014-07-16 18:31 - 2014-01-24 11:42 - 00000000 ____D () C:\Program Files\Java
2014-07-15 20:41 - 2012-10-20 20:53 - 00000000 ____D () C:\Users\smenz\Documents\My Kindle Content
2014-07-13 17:07 - 2014-04-06 19:24 - 00077414 _____ () C:\Users\smenz\Desktop\Übersicht Prozessarbeit 2.xlsx
2014-07-12 18:40 - 2012-11-29 22:16 - 00000000 ____D () C:\Users\smenz\Documents\ELLA
2014-07-12 18:25 - 2012-10-19 17:43 - 00000000 ____D () C:\Users\smenz\Documents\OneNote-Notizbücher
2014-07-12 12:45 - 2013-05-23 14:08 - 00000000 ____D () C:\Program Files\My Dell
2014-07-12 10:05 - 2013-05-23 14:09 - 00003440 _____ () C:\windows\System32\Tasks\PCDEventLauncherTask
2014-07-10 16:20 - 2012-10-19 18:36 - 00000000 ____D () C:\Users\smenz\AppData\Local\Microsoft Games
2014-07-10 13:32 - 2012-07-04 17:15 - 00000000 ____D () C:\ProgramData\Skype
2014-07-10 13:08 - 2014-05-19 00:35 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-07-09 17:00 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\rescache
2014-07-09 15:25 - 2009-07-14 06:45 - 00492792 _____ () C:\windows\system32\FNTCACHE.DAT
2014-07-09 15:23 - 2014-05-07 02:27 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-07-09 15:23 - 2012-07-04 19:34 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-09 15:23 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\SysWOW64\Dism
2014-07-09 15:23 - 2009-07-14 05:20 - 00000000 ____D () C:\windows\system32\Dism
2014-07-09 15:12 - 2012-10-19 17:33 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-09 15:10 - 2013-08-15 21:53 - 00000000 ____D () C:\windows\system32\MRT
2014-07-09 15:04 - 2012-10-24 13:56 - 96441528 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-07-08 21:19 - 2014-02-21 20:01 - 00003822 _____ () C:\windows\System32\Tasks\Adobe Flash Player Updater
2014-07-08 21:19 - 2013-06-11 14:08 - 00699056 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-07-08 21:19 - 2013-06-11 14:08 - 00071344 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-03 15:37 - 2014-07-03 15:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro.Alert
2014-07-03 15:37 - 2014-07-03 15:37 - 00000000 ____D () C:\ProgramData\HitmanPro.Alert
2014-07-03 00:08 - 2014-05-31 19:53 - 00001104 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-07-01 18:58 - 2012-10-19 13:19 - 00000000 ___RD () C:\Users\smenz\Eigene Bilder
2014-06-30 04:09 - 2014-07-09 11:14 - 00519168 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-06-30 04:04 - 2014-07-09 11:14 - 00424448 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-06-29 13:04 - 2013-07-02 18:12 - 00023731 _____ () C:\Users\smenz\Desktop\Books Releases.xlsx
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-07-18 14:21
==================== End Of Log ============================
[/CODE] What next? Und ich kann es nicht oft genug sagen, dass für die geduldige Begleitung! Grüße, Solonia |
|
27.07.2014, 20:28
| #29 |
| /// the machine /// TB-Ausbilder | Malwarebythe hat 3 verdächtige Elemente gefunden!Gmx-account ständig mit spam trotz Filter! Den Fix bitte nochma, du hast beim Kopieren in die fixlist alles in eine Zeile gepackt. Das muss aber so aussehn wie oben in der Codebox
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
27.07.2014, 23:02
| #30 |
| | Malwarebythe hat 3 verdächtige Elemente gefunden!Gmx-account ständig mit spam trotz Filter! Lieber Schrauber, Fixlist: Code:
ATTFilter Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-07-2014
Ran by smenz at 2014-07-28 00:00:30 Run:4
Running from C:\Users\smenz\Desktop\Downloads
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
C:\PROGRAMDATA\INSTALLMATE
Task: {73EDA546-2E35-4DFE-9DFE-323240375C74} - System32\Tasks\0 => Iexplore.exe
Task: {81496DCF-48B1-4D1B-A59B-2FC4684165F3} - System32\Tasks\4738 => Wscript.exe C:\Users\smenz\AppData\Local\Temp\launchie.vbs //B
C:\Users\smenz\AppData\Local\Temp\launchie.vbs
*****************
C:\PROGRAMDATA\INSTALLMATE => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{73EDA546-2E35-4DFE-9DFE-323240375C74}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{73EDA546-2E35-4DFE-9DFE-323240375C74}" => Key deleted successfully.
C:\Windows\System32\Tasks\0 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\0" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{81496DCF-48B1-4D1B-A59B-2FC4684165F3}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{81496DCF-48B1-4D1B-A59B-2FC4684165F3}" => Key deleted successfully.
C:\Windows\System32\Tasks\4738 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\4738" => Key deleted successfully.
"C:\Users\smenz\AppData\Local\Temp\launchie.vbs" => File/Directory not found.
==== End of Fixlog ====
Bis dann, Solonia |
|
| Themen zu Malwarebythe hat 3 verdächtige Elemente gefunden!Gmx-account ständig mit spam trotz Filter! |
| automatische, backup/setmuilanguage.exe, backup/toaster.exe, blacklist, detected, gefährlich?, löschen, malwarebytes, objekte: rootkits, pup.optional.outbrowse, quarantäne, regeln, setting.disableregistrytools, setting.disabletaskmgr, spam, speicher, traces, webseiten, win32/sweetim.l, windows, windows 7, windows live, windows live mail |
Linear-Darstellung
