Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
ELEX-tech YAC Biest :-)

ELEX-tech YAC Biest :-)


Plagegeister aller Art und deren Bekämpfung: ELEX-tech YAC Biest :-)

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

 
Vorheriger Beitrag Vorheriger Beitrag   Nächster Beitrag Nächster Beitrag
Alt 03.11.2016, 13:59   #29
Schuhmi
 
ELEX-tech YAC Biest :-) - Standard

huhu cosinus


das war absolut nicht böse gemeint ... man kann dir/euch sicherlich nicht dankbar genug sein für deine/eure Zeit und Mühen, ohne eure Hilfe wären wir absolut hilflos und überfordert ... aus diesem Grund sind wir ja auch hier und suchen Hilfe bei den Profis!

Ich wollte damit nur zum Ausdruck bringen dass ich als "Leihe" dir nicht sagen kann obs hier noch rumschwirrt oder nicht ... das einzige was mir noch auffällt ist die Geschichte mit dem Pappierkorb ... da stehts noch, da erkenn ich das noch selbst, ansonsten fällts mir eher schwer zu sagen obs jetzt weg is oder noch iwo versteckt ist. Ich mein das Biest hat sich unter anderem ja als Movie Maker Datein getarnt wenn ich das richtig verstaden hab die Schritte davor ... da bin ich echt machtlos und du der Fachmann für mich!

Das mit ESET war für mich jetzt auch nicht so klar ersichtlich dass es sich hierbei um Restmül-Temp-Ordner handelt ... aber wenn du das sagst bin ich ganz bei dir und vertrau dir zu 100%+!

So jetzt zurück zum Thema: hier die SystemLook Auswertung

Code:
ATTFilter
SystemLook 30.07.11 by jpshortstuff
Log created at 13:39 on 03/11/2016 by Silke
Administrator - Elevation successful

========== filefind ==========

Searching for "*elex*"
C:\Program Files\WindowsApps\Facebook.Facebook_69.648.46637.0_x86__8xx8rvfyw5nnt\WinUAPEntry.resources\FBNativeTemplateMemModelExport.js	--a---- 1481 bytes	[09:49 30/09/2016]	[09:50 30/09/2016] 1BBBDE4409FE38792FB06A0A53ECBE08
C:\Program Files\WindowsApps\Facebook.Facebook_69.648.46637.0_x86__8xx8rvfyw5nnt\WinUAPEntry.resources\FBNativeTemplateModuleResources\FBNativeTemplateMemModelExport.js	--a---- 1481 bytes	[09:49 30/09/2016]	[09:50 30/09/2016] 1BBBDE4409FE38792FB06A0A53ECBE08
C:\Users\Silke\AppData\Roaming\Microsoft\Windows\Recent\ELEX-tech YAC.JPG.lnk	--a---- 618 bytes	[07:33 01/11/2016]	[08:06 01/11/2016] E533E4CAA7BA2B25666D11D87AB157ED
C:\Users\Silke\AppData\Roaming\Microsoft\Windows\Recent\ELEX-tech2.JPG.lnk	--a---- 643 bytes	[07:51 01/11/2016]	[07:53 01/11/2016] FBEFEC2B9ADC97C057C369C622A21131
C:\Windows\System32\GamePanelExternalHook.dll	--a---- 25088 bytes	[11:42 16/07/2016]	[11:42 16/07/2016] 8E7AFBED04DAF976A9E46D3724A93284
C:\Windows\System32\Microsoft-Windows-AppModelExecEvents.dll	--a---- 208384 bytes	[11:42 16/07/2016]	[11:42 16/07/2016] 3BFAEB03EC2E99013A1C0BB6CEBB81E1
C:\Windows\System32\en-US\Microsoft-Windows-AppModelExecEvents.dll.mui	--a---- 137728 bytes	[22:49 16/07/2016]	[22:49 16/07/2016] 950F3B237AC58473A30C40655DFC74D9
C:\Windows\SysWOW64\GamePanelExternalHook.dll	--a---- 19968 bytes	[11:43 16/07/2016]	[11:43 16/07/2016] 19D5307BCDCCC1984CBFA4CB0EBBDF64
C:\Windows\WinSxS\amd64_microsoft-appmodel-exec-events.resources_31bf3856ad364e35_10.0.14393.0_en-us_d14dfd25af61042c\Microsoft-Windows-AppModelExecEvents.dll.mui	--a---- 137728 bytes	[22:49 16/07/2016]	[22:49 16/07/2016] 950F3B237AC58473A30C40655DFC74D9
C:\Windows\WinSxS\amd64_microsoft-appmodel-exec-events_31bf3856ad364e35_10.0.14393.0_none_4f5b5736ffd85723\Microsoft-Windows-AppModelExecEvents.dll	--a---- 208384 bytes	[11:42 16/07/2016]	[11:42 16/07/2016] 3BFAEB03EC2E99013A1C0BB6CEBB81E1
C:\Windows\WinSxS\amd64_microsoft-xbox-gameoverlay_31bf3856ad364e35_10.0.14393.0_none_6c2a352d3e0335af\GamePanelExternalHook.dll	--a---- 12 bytes	[11:42 16/07/2016]	[11:04 13/10/2016] 8C629B07C4A8E3317EC44CC7A079ACAD
C:\Windows\WinSxS\amd64_microsoft-xbox-gameoverlay_31bf3856ad364e35_10.0.14393.321_none_789f6760c52e61e9\GamePanelExternalHook.dll	--a---- 25088 bytes	[11:42 16/07/2016]	[11:42 16/07/2016] 8E7AFBED04DAF976A9E46D3724A93284
C:\Windows\WinSxS\wow64_microsoft-xbox-gameoverlay_31bf3856ad364e35_10.0.14393.0_none_767edf7f7263f7aa\GamePanelExternalHook.dll	--a---- 12 bytes	[11:43 16/07/2016]	[11:12 13/10/2016] 8C629B07C4A8E3317EC44CC7A079ACAD
C:\Windows\WinSxS\wow64_microsoft-xbox-gameoverlay_31bf3856ad364e35_10.0.14393.321_none_82f411b2f98f23e4\GamePanelExternalHook.dll	--a---- 19968 bytes	[11:43 16/07/2016]	[11:43 16/07/2016] 19D5307BCDCCC1984CBFA4CB0EBBDF64

Searching for "*yac*"
C:\Program Files\corporate benefits\Meine CEWE FOTOWELT\Resources\config\keyaccount.xml	--a---- 968 bytes	[13:43 05/03/2016]	[08:58 22/02/2016] 9C1CE26C6B52849523C3A91363FCBEF2
C:\Program Files\corporate benefits\Meine CEWE FOTOWELT\Resources\guiwidgets\css\general_a_keyaccount.css	--a---- 35234 bytes	[13:43 05/03/2016]	[08:00 03/02/2016] CB299978B498DE507F543A466BAD5F90
C:\Program Files\corporate benefits\Meine CEWE FOTOWELT\Resources\startscreen\html\images\theme\default\Graphics3\symb_obj_kartpost-xl_01.webp	--a---- 35960 bytes	[13:43 05/03/2016]	[08:01 03/02/2016] FA1C4BAFBF8610F6504725A2E06ABEA7
C:\Program Files (x86)\Microsoft Office\Office12\OutlookAutoDiscover\YAHOO.COM.SG.XML	--a---- 812 bytes	[08:26 04/10/2006]	[08:26 04/10/2006] 562AFD4E5B71F349A7BD77D9455673FA
C:\Program Files (x86)\Microsoft Office\Office12\OutlookAutoDiscover\YAHOO.CO.TH.XML	--a---- 810 bytes	[08:26 04/10/2006]	[08:26 04/10/2006] C97F325596B9B1D1AD51B1E82A01548A
C:\Users\Silke\AppData\Local\Microsoft\OneDrive\logs\Personal\SyncEngine-2015-8-17.1357.876.3.odl	--a--c- 42852 bytes	[13:57 17/08/2015]	[14:01 17/08/2015] E81A4616914FB1DBE65C90D981A0785F
C:\Users\Silke\AppData\Local\Packages\windows.immersivecontrolpanel_cw5n1h2txyewy\LocalState\Indexed\Settings\de-DE\AAA_SettingsPagePrivacyAccountInfo.settingcontent-ms	--a---- 1123 bytes	[17:13 15/08/2015]	[11:42 16/07/2016] 9B43B4462DC2273B2D37D73C28D212F8
C:\Users\Silke\AppData\Roaming\Microsoft\Windows\Recent\ELEX-tech YAC.JPG.lnk	--a---- 618 bytes	[07:33 01/11/2016]	[08:06 01/11/2016] E533E4CAA7BA2B25666D11D87AB157ED
C:\Windows\ImmersiveControlPanel\Settings\AAA_SettingsPagePrivacyAccountInfo.settingcontent-ms	--a---- 1123 bytes	[11:42 16/07/2016]	[11:42 16/07/2016] 9B43B4462DC2273B2D37D73C28D212F8
C:\Windows\Installer\$PatchCache$\Managed\6414876250E69FF3395387C6C7F05BEB\4.5.51209\System.ServiceModel.WasHosting.dll_gac_x86	-ra---- 39672 bytes	[21:08 11/04/2014]	[21:08 11/04/2014] A7900DC14DBDEC66162F97A2F57E6ABF
C:\Windows\Provisioning\Packages\Power.EnergyEstimationEngine.StandbyActivation.ppkg	--a---- 5340 bytes	[03:28 29/09/2016]	[03:28 29/09/2016] F2FE7BC223FB3F6D24CA42A8F263C2C9
C:\Windows\WinSxS\amd64_microsoft-windows-p..ne-client-overrides_31bf3856ad364e35_10.0.14393.0_none_5fe52cac391f412a\Power.EnergyEstimationEngine.StandbyActivation.ppkg	--a---- 1137 bytes	[11:42 16/07/2016]	[06:24 30/09/2016] 2B1AC2C312ACCFD6DBBF3B3EDFB62627
C:\Windows\WinSxS\amd64_microsoft-windows-p..ne-client-overrides_31bf3856ad364e35_10.0.14393.187_none_6c1f7d47c075b2c6\Power.EnergyEstimationEngine.StandbyActivation.ppkg	--a---- 5340 bytes	[03:28 29/09/2016]	[03:28 29/09/2016] F2FE7BC223FB3F6D24CA42A8F263C2C9
C:\Windows\WinSxS\amd64_microsoft-windows-s..settings-searchdata_31bf3856ad364e35_10.0.14393.0_none_bb1fc3c1adc6ecc6\AAA_SettingsPagePrivacyAccountInfo.settingcontent-ms	--a---- 1123 bytes	[11:42 16/07/2016]	[11:42 16/07/2016] 9B43B4462DC2273B2D37D73C28D212F8
C:\Windows\WinSxS\Backup\amd64_microsoft-windows-p..ne-client-overrides_31bf3856ad364e35_10.0.14393.187_none_6c1f7d47c075b2c6_power.energyestimationengine.standbyactivation.ppkg_21aafe77	--a---- 3112 bytes	[03:29 29/09/2016]	[06:49 30/09/2016] C4DB92DA68FE6349D1C7045428DE9035

========== folderfind ==========

Searching for "*elex*"
No folders found.

Searching for "*yac*"
C:\Program Files\corporate benefits\Meine CEWE FOTOWELT\Resources\keyaccount	d------	[13:43 05/03/2016]

========== regfind ==========

Searching for "elex"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\iSafeRKScan]
"Icon"="C:\Program Files (x86)\Elex-tech\YAC\iStart.exe,-109"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\iSafeRKScan\command]
@=""C:\Program Files (x86)\Elex-tech\YAC\iStart.exe" -iSafeRightKeyShell -isafeRKShell_opt=isafeRKShell_opt_deepclean -isafeRKShell_executorPath="C:\Program Files (x86)\Elex-tech\YAC\iSafe.exe""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{21D0D7DE-D64A-4299-B715-165FCA5502AF}]
@="IPushNotificationChannelExtensionForPhoneLegacy"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{21D0D7DE-D64A-4299-B715-165FCA5502AF}]
@="IPushNotificationChannelExtensionForPhoneLegacy"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\Locales\loc_042A\InputMethods\2]
"StackId"="vi-VN.TELEX"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{eb65a492-86c0-406a-bace-9912d595bd69}]
"ResourceFileName"="%SystemRoot%\system32\Microsoft-Windows-AppModelExecEvents.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WINEVT\Publishers\{eb65a492-86c0-406a-bace-9912d595bd69}]
"MessageFileName"="%SystemRoot%\system32\Microsoft-Windows-AppModelExecEvents.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Input\Locales\loc_042A\InputMethods\2]
"StackId"="vi-VN.TELEX"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{21D0D7DE-D64A-4299-B715-165FCA5502AF}]
@="IPushNotificationChannelExtensionForPhoneLegacy"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager]
"RunLevelExecute"="WinInit ServiceControlManager"
[HKEY_LOCAL_MACHINE\SYSTEM\DriverDatabase\DriverPackages\usb.inf_amd64_20f76ee4fbfc4cb8\Descriptors\USB\VID_04A1&PID_FFF0]
"Manufacturer"="%telex.mfg%"
[HKEY_LOCAL_MACHINE\SYSTEM\DriverDatabase\DriverPackages\usb.inf_amd64_20f76ee4fbfc4cb8\Descriptors\USB\VID_04A1&PID_FFF0]
"Description"="%usb.telexcompositedevice.devicedesc%"
[HKEY_LOCAL_MACHINE\SYSTEM\DriverDatabase\DriverPackages\usb.inf_amd64_20f76ee4fbfc4cb8\Descriptors\USB\VID_0562&PID_0000]
"Manufacturer"="%telex.mfg%"
[HKEY_LOCAL_MACHINE\SYSTEM\DriverDatabase\DriverPackages\usb.inf_amd64_20f76ee4fbfc4cb8\Descriptors\USB\VID_0562&PID_0000]
"Description"="%usb.telexcompositedevice.devicedesc%"
[HKEY_LOCAL_MACHINE\SYSTEM\DriverDatabase\DriverPackages\usb.inf_amd64_20f76ee4fbfc4cb8\Strings]
"usb.telexcompositedevice.devicedesc"="Telex Composite USB Device"
[HKEY_LOCAL_MACHINE\SYSTEM\DriverDatabase\DriverPackages\usb.inf_amd64_20f76ee4fbfc4cb8\Strings]
"telex.mfg"="Telex"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager]
"RunLevelExecute"="WinInit ServiceControlManager"

Searching for "yac"
[HKEY_CURRENT_USER\InstTransferWC\_A95C327C-A16D-4CBC-85FD-27C63DD662C1\cRecentFiles\c96]
"tDIText"="/C/Users/Silke/Downloads/ViewMyAccount-Documents(2)"
[HKEY_CURRENT_USER\SOFTWARE\AppDataLow\Software\PaybackToolbar32\Toolbar\Configuration\1.2.0\4\BandItems\{9619D822-414E-4bcd-AE46-AB49C1A31AD3}]
"Config"="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
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.com/search?q=yac&form=WNSGPH&qs=AS&cvid=94aaf026be464863a4fee575d4238b4c&pq=yac&nclid=DA985CCBF08E0CBC426E6C7C8A3B5929&ts=1453048255143&nclidts=1453048255&tsms=143]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Roaming\OpenWith\FileExts\.mkv\UserChoice]
"Hash"="ZXS+GrSXyAc="
[HKEY_CURRENT_USER\SOFTWARE\paint.net]
"File/MostRecent/Thumbnail0"="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
[HKEY_CURRENT_USER\SOFTWARE\paint.net]
"File/MostRecent/Thumbnail2"="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
[HKEY_CURRENT_USER\SOFTWARE\paint.net]
"File/MostRecent/Thumbnail3"="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
[HKEY_CURRENT_USER\SOFTWARE\Classes\AppXv3w8be6gretzpzjq0s27982mxr4acyac]
[HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\MrtCache\C:%5CWINDOWS%5CSystemResources%5CWindows.UI.SettingsAppThreshold%5CWindows.UI.SettingsAppThreshold.pri\1d21a01876458fe\25913318]
"@{windows?ms-resource://Windows.UI.SettingsAppThreshold/SearchResources/SettingsPagePrivacyAccountInfo/Description}"="Einstellungen zum Datenschutz von Kontoinformationen"
[HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\MrtCache\C:%5CWINDOWS%5CSystemResources%5CWindows.UI.SettingsAppThreshold%5CWindows.UI.SettingsAppThreshold.pri\1d21a01876458fe\25913318]
"@{windows?ms-resource://Windows.UI.SettingsAppThreshold/SearchResources/SettingsPagePrivacyAccountInfo/HighKeywords}"="Benutzerinformationen;user information"
[HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\App\Capabilities\URLAssociations]
"skypesettings"="AppXv3w8be6gretzpzjq0s27982mxr4acyac"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\iSafeRKScan]
@="Völlig reinigen mit YAC"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\iSafeRKScan]
"Icon"="C:\Program Files (x86)\Elex-tech\YAC\iStart.exe,-109"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\iSafeRKScan\command]
@=""C:\Program Files (x86)\Elex-tech\YAC\iStart.exe" -iSafeRightKeyShell -isafeRKShell_opt=isafeRKShell_opt_deepclean -isafeRKShell_executorPath="C:\Program Files (x86)\Elex-tech\YAC\iSafe.exe""
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{91f39027-217f-11da-b2a4-000e7bbb2b09}\ProgID]
@="X509Enrollment.CX509EnrollmentPolicyActiveDirectory.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{91f39027-217f-11da-b2a4-000e7bbb2b09}\VersionIndependentProgID]
@="X509Enrollment.CX509EnrollmentPolicyActiveDirectory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\c:|Program Files (x86)|Microsoft Silverlight|5.1.30514.0|ca|Microsoft.VisualBasic.resources.dll]
"Microsoft.VisualBasic.resources,version="5.0.5.0",publicKeyToken="31bf3856ad364e35",processorArchitecture="MSIL",fileVersion="5.1.30514.0",culture="ca""="3PgDT0$gy?~Dc}DI]?&!Complete5.1.30514.0>g'{W6F'x,9vJe7OsknI% 3PgDT0$gy?~Dc}DI]?&!Complete5.1.30514.0>YaC`T(JW09yvA,gZ?G}c"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Components\4F33FB1578E100649B629029A307DFB1]
"capsules.inf"="vUpAVX!!!!!!!!!MKKSkThemesTypicalFiles>YaCS-X8nF9@iZshLxJpa[^16]"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0006302D-0000-0000-C000-000000000046}]
@="_PropertyAccessor"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0220BB94-AF33-412C-A1AC-B1C0489198D8}]
@="INVPropertyActionList"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2FE9F084-1511-3052-BE7C-9010B522C10E}]
@="_QueryAccessibilityHelpEventArgs"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{39D1AE9A-CD84-4141-B7DC-D2FE52FE31C4}]
@="INVPropertyAction"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3CD63077-A08C-481A-93EB-C5D7568AE886}]
@="__x_Windows_CInternal_CSettingSync_CINotifyAccountChange"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{7197B56B-5FA1-31EF-B38B-62FEE737277F}]
@="IContextPropertyActivator"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{72D2B858-9C0E-4D5F-A443-3E03C9E8CA6D}]
@="INVRegistryAction"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C84650E2-FCB3-435B-AEE4-13FD49C3BF5D}]
@="__x_Windows_CUI_CCore_CIAcceleratorKeyActivatedEventHandler"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{CFDE84A5-9FCC-4BED-80A7-9DBFA0DC1102}]
@="INVStandardPropertyAction"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Record\{BA99AE52-D539-362F-B78C-4E84C14158BF}\2.0.0.0]
"Class"="System.Security.Permissions.SecurityAction"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Record\{BA99AE52-D539-362F-B78C-4E84C14158BF}\4.0.0.0]
"Class"="System.Security.Permissions.SecurityAction"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{91f39027-217f-11da-b2a4-000e7bbb2b09}\ProgID]
@="X509Enrollment.CX509EnrollmentPolicyActiveDirectory.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{91f39027-217f-11da-b2a4-000e7bbb2b09}\VersionIndependentProgID]
@="X509Enrollment.CX509EnrollmentPolicyActiveDirectory"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{0006302D-0000-0000-C000-000000000046}]
@="_PropertyAccessor"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{0220BB94-AF33-412C-A1AC-B1C0489198D8}]
@="INVPropertyActionList"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2FE9F084-1511-3052-BE7C-9010B522C10E}]
@="_QueryAccessibilityHelpEventArgs"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{30642042-9221-4388-9C31-3DA8E1E33C33}]
@="IGrooveWebNotificationEntryActionData"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{39D1AE9A-CD84-4141-B7DC-D2FE52FE31C4}]
@="INVPropertyAction"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3CD63077-A08C-481A-93EB-C5D7568AE886}]
@="__x_Windows_CInternal_CSettingSync_CINotifyAccountChange"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7197B56B-5FA1-31EF-B38B-62FEE737277F}]
@="IContextPropertyActivator"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{72D2B858-9C0E-4D5F-A443-3E03C9E8CA6D}]
@="INVRegistryAction"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{B848D512-62C5-42FB-89B3-126098FCD11B}]
@="IGrooveTransportSecurityAccountDiagnosticsEntryEnum"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C84650E2-FCB3-435B-AEE4-13FD49C3BF5D}]
@="__x_Windows_CUI_CCore_CIAcceleratorKeyActivatedEventHandler"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{CFDE84A5-9FCC-4BED-80A7-9DBFA0DC1102}]
@="INVStandardPropertyAction"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E2DF7E6A-4D7F-4FF8-A30A-F01481A33268}]
@="IGrooveTransportSecurityAccountDiagnosticsEntry"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\X509Enrollment.CX509EnrollmentPolicyActiveDirectory]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\X509Enrollment.CX509EnrollmentPolicyActiveDirectory\CurVer]
@="X509Enrollment.CX509EnrollmentPolicyActiveDirectory.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\X509Enrollment.CX509EnrollmentPolicyActiveDirectory.1]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\DataProtection\AllowDirectMemoryAccess]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\knobs\Power/EnergyEstimationEngine/StandbyActivationEnergy/DripsPowerFloorMilliWatts]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\knobs\Power/EnergyEstimationEngine/StandbyActivationEnergy/DripsPowerFloorMilliWatts]
"RegKeyPathRedirect"="SYSTEM\CurrentControlSet\Control\Power\EnergyEstimation\StandbyActivationEnergy"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Provisioning\Results\{8d196d7f-3eef-48ad-8bea-be749f12d3ad}]
"PackageFileName"="Power.EnergyEstimationEngine.StandbyActivation.ppkg"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00002109030000000000000000F01FEC\Features]
"ThemesTypicalFiles"="bxw0=a+]F9mnkkP2Hm6$]MEU0l_RU@lnYR^6&3Ljc4[z+7M&ZAG+&hLw)33'&+kfoK]aH?%U!`PLGSF^{8o3@W9Oi@$ql,oq+EIgBW20SUnI,?oX,EeU2.h((Iws_6.mI=f.[hpJWu}.YaCS-X8nF9@iZshLxJpaHs01q3&g49DaROul[Q5^xh1~t9O*)?=X@H^fSzUTfLP)[R}~]=`*HC-s%t^r6RS$V.Ce&@JaZ^@+r&s@opc-xSfWu84%R=c)en=Q.^MBg*Ujq@dA3^P1'3IvvF[Q`*npm9P5'*9GtuIN]npHtm}T@A~^zPaK{(Ty?G{KwcoYv?eX&O^m'$`V4+dVX?lv&9HIrsgtrew[WesOi[4Ui9z$-?GSSLRa}71lgD~78@yEl@^=2s+lZD%mxVxx'=P@42z~arqWOjZ^h[tNn?aVDY.MC?84!K%7keYDM98F25q@h!Kl=i7-p.(_m8?3'RF?-KDtAaFWtOi[ZAQ3x@@G%I-FSpqPp}&S+=Uo(Mjl!bLzcI0!b-C'z?=8J{ySPY6k$yoeA0Akq@gh00',kc-mydMd%fu1*ATPGxK1_9%XKe)cVIzUt=Z=N.bf]DF?iIq$wIPU7@B+$5Vt-I$*wpW2sgBCp@xCdG6j(`sFTHEMESFiles"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6414876250E69FF3395387C6C7F05BEB\Features]
"F_compilers_core_amd64"="`yFM`V.(j?5]i'AKuKOKJQ-fL.MGAAWWvkZC2t!Y(91'3NpGO@ya,]$={]vm(~u-_m8U!AL*w{j!wgZZ-mu'YIdC'AnZb-nwxX'gK?QEZcsQX9?=Z!pPD],5lM4p.ricy@JuL~@&9rDLpn@yjcvcW9{`5Gu3.3))c6N1LYaC!9DW`G*oh(@NNetFx_Full_amd64"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\98C1782F5A8CEE24D854F0200536586A\Features]
"AppleApplicationSupport"="=JJ*5.q6R9m~e?-X$O^78(O]jRKex@feOx'VL=,is[I4rauh]8lcA^QNL)lu-yNtYXDhC@!{cKOQzal!uquNc2%0j9e3N7%g$goD)p4+qeEw!?-1$&v3Z%RucEOhbFs[_=e8nRx9i4b-2L=c^&)O]@)qQ(8.IWCpf.^B`ywEh(MJbFq+$wkREzcJiLEU^@P)3d9KnBfS&'2L'&a3C?D,j$m*I`Z&49'acEdi}D7bDttz8PZ4uyAdI''bqBd)-(k9I'),IVA^Ip'n&EBeQpVYa}f.Z0!0VtS](EGk^fQe+W7vVKJT4pU,hF0?&Lj&,m2bJ_%2D{KPhF8Nby4ir[qulPtobo3yeBBpz]V=2?]r?tV.LqxZ'E0pJ5qu,P*q9D.+XogBnACBq$E0w6ixdxynN=PzqCw0It(u6{y`k05AZJ~}.EX~k%w`Gq}JYrOJuGmz&BY~a%0]Mwr`}zIy!LT8CC$AxHfAJB-NoL`cyP'LNB^P+_ow=]qiJ]+hMxMl$BMuA38PZJrVIaZdrEm49D+$M``8UX=_(k2{8Ir9IBcYR90te!I!_JGO0MI2QD$*k8Blf]tR`!@qQ?l!yDyxXDZuKGj7Ss9*%drjCE`p@)-oj*W*b%77tBP2MC1kDH$E1L}Q9ZceC5srsAS*AE*y'M1s[PS.Al({bD])k`wC$_oBEvbC5b'grA@Br{I?ni2HDZmzO,)0$EA20o3yn]4eoQk4ZBIA5C@$HBBGv5&OW0mnEFKr0CBPdQs[4Y(O~}oBX4G12EzV(1qCX*+xXfvnuzO{{AC-F{.zX=U1JSS^oDxcXBf(%6@k6Gy2l5%k!gr~HDOmGtuQLo?WDS,.aoi,1DL.&r
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\PnpResources\Registry\HKLM\System\CurrentControlSet\Services\Lsi_sas\Parameters\Device\EnableQueryAccessAlignment]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\PnpResources\Registry\HKLM\System\CurrentControlSet\Services\Lsi_sas2i\Parameters\Device\EnableQueryAccessAlignment]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\PnpResources\Registry\HKLM\System\CurrentControlSet\Services\Lsi_sas3i\Parameters\Device\EnableQueryAccessAlignment]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\PnpResources\Registry\HKLM\System\CurrentControlSet\Services\Lsi_sss\Parameters\Device\EnableQueryAccessAlignment]
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\KasperskyLab]
"MyAccountLogin"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\KasperskyLab\AVP16.0.0\Data\MigrationState]
"NewKeyActivationCode"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\12.0\Registration\{90120000-0030-0000-0000-0000000FF1CE}]
"Current"="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
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\12.0\User Settings\Outlook_AutoDiscover\Create\Software\Microsoft\Office\12.0\Outlook\AutoDiscover]
"yahoo.com.sg"="C:\PROGRA~2\MICROS~1\Office12\OUTLOO~1\YAC50A~1.XML"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Office\12.0\User Settings\Outlook_AutoDiscover\Create\Software\Microsoft\Office\12.0\Outlook\AutoDiscover]
"yahoo.co.th"="C:\PROGRA~2\MICROS~1\Office12\OUTLOO~1\YACB7D~1.XML"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Setup\PnpResources\Registry\HKLM\System\CurrentControlSet\Services\Lsi_sas\Parameters\Device\EnableQueryAccessAlignment]
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Setup\PnpResources\Registry\HKLM\System\CurrentControlSet\Services\Lsi_sas2i\Parameters\Device\EnableQueryAccessAlignment]
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Setup\PnpResources\Registry\HKLM\System\CurrentControlSet\Services\Lsi_sas3i\Parameters\Device\EnableQueryAccessAlignment]
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Setup\PnpResources\Registry\HKLM\System\CurrentControlSet\Services\Lsi_sss\Parameters\Device\EnableQueryAccessAlignment]
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{91f39027-217f-11da-b2a4-000e7bbb2b09}\ProgID]
@="X509Enrollment.CX509EnrollmentPolicyActiveDirectory.1"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\CLSID\{91f39027-217f-11da-b2a4-000e7bbb2b09}\VersionIndependentProgID]
@="X509Enrollment.CX509EnrollmentPolicyActiveDirectory"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{0006302D-0000-0000-C000-000000000046}]
@="_PropertyAccessor"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{0220BB94-AF33-412C-A1AC-B1C0489198D8}]
@="INVPropertyActionList"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{2FE9F084-1511-3052-BE7C-9010B522C10E}]
@="_QueryAccessibilityHelpEventArgs"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{30642042-9221-4388-9C31-3DA8E1E33C33}]
@="IGrooveWebNotificationEntryActionData"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{39D1AE9A-CD84-4141-B7DC-D2FE52FE31C4}]
@="INVPropertyAction"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{3CD63077-A08C-481A-93EB-C5D7568AE886}]
@="__x_Windows_CInternal_CSettingSync_CINotifyAccountChange"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{7197B56B-5FA1-31EF-B38B-62FEE737277F}]
@="IContextPropertyActivator"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{72D2B858-9C0E-4D5F-A443-3E03C9E8CA6D}]
@="INVRegistryAction"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{B848D512-62C5-42FB-89B3-126098FCD11B}]
@="IGrooveTransportSecurityAccountDiagnosticsEntryEnum"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{C84650E2-FCB3-435B-AEE4-13FD49C3BF5D}]
@="__x_Windows_CUI_CCore_CIAcceleratorKeyActivatedEventHandler"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{CFDE84A5-9FCC-4BED-80A7-9DBFA0DC1102}]
@="INVStandardPropertyAction"
[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Classes\Interface\{E2DF7E6A-4D7F-4FF8-A30A-F01481A33268}]
@="IGrooveTransportSecurityAccountDiagnosticsEntry"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Power\EnergyEstimation\StandbyActivationEnergy]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\EnergyEstimation\StandbyActivationEnergy]
[HKEY_USERS\S-1-5-21-1071034996-3370113837-20168928-1000\InstTransferWC\_A95C327C-A16D-4CBC-85FD-27C63DD662C1\cRecentFiles\c96]
"tDIText"="/C/Users/Silke/Downloads/ViewMyAccount-Documents(2)"
[HKEY_USERS\S-1-5-21-1071034996-3370113837-20168928-1000\SOFTWARE\AppDataLow\Software\PaybackToolbar32\Toolbar\Configuration\1.2.0\4\BandItems\{9619D822-414E-4bcd-AE46-AB49C1A31AD3}]
"Config"="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
[HKEY_USERS\S-1-5-21-1071034996-3370113837-20168928-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.com/search?q=yac&form=WNSGPH&qs=AS&cvid=94aaf026be464863a4fee575d4238b4c&pq=yac&nclid=DA985CCBF08E0CBC426E6C7C8A3B5929&ts=1453048255143&nclidts=1453048255&tsms=143]
[HKEY_USERS\S-1-5-21-1071034996-3370113837-20168928-1000\SOFTWARE\Microsoft\Windows\Roaming\OpenWith\FileExts\.mkv\UserChoice]
"Hash"="ZXS+GrSXyAc="
[HKEY_USERS\S-1-5-21-1071034996-3370113837-20168928-1000\SOFTWARE\paint.net]
"File/MostRecent/Thumbnail0"="iVBORw0KGgoAAAANSUhEUgAAAEgAAABICAYAAABV7bNHAAAABGdBTUEAALGPC/xhBQAAAAlwSFlzAAAScQAAEnEB89x6jgAAKzBJREFUeF7lnFV0nVeWrfu9q7sqiUMVx3ESM4iZjpgZLGZGM7NMMskCy5YsZkuWbNliZmYGU5IKp6p6dHV3VXV3peade8uurtFP90F+ufcfY439n6PEzv4011xr7fOf/MP/5fVLhjJD8f9IiL2IPa3ZpdxUW4P25mZ0d3ZhoH8AExNTmJqaxvj4FCrLS+HtbA0fZwt4OpjDw84UbrYmcLU2hou1As5WhrAz0+OqjwBnE4TusUSMrzVi/GyxN8wDdhb6eP/d97Bl8+c4EOWNhFA3xPg7QFd9Jz58/z2oKe9GbIgXogLdEeHvzHtPxIX6YG9kAA7GhuFAfCQO74/Dkf3xOHpwH+8TcGRfLA4lRGNfbAT2MxKiI7AvIY4Rj5joSIg9rW5tbS5Ffc0DtDc1orujAwN9/RgZGcXc3DzGxiYwOTmF6FB/+LhYEZKlhLTH3gzuBOVqYwIXG2M4WhrA3kwX/gQU5mmFCC9LRBNSQpg7fFyt8MF77+LDD3+NfZFeiA9xQZSfHQy1lPDhB+9Baed2RAa4M1wR7ueImCAPxBBYQrgf9seESAAHE2JwaG8sISXg8L44CedgXCT2xYQRTjjiCCghLoYRi5ioCAFIKGnNLsWTqlK0NtSiq70Vfb09GBoaooKooulpqaScrAz4udvB390Gvq7W8HKygIe9qYQk1ORMJTmY6xOeEcK8rBHiYY5oPxvEBbsgJthVAnrnnXXcvCvigpwQ5WsDEz1V/JqAdmzdTDAuDGeE+dhLJUUH75Eq2hcVSAjh2E8YBwnl8L54KipaQtsfG46EqFDERgQhITYKcTHR
[HKEY_USERS\S-1-5-21-1071034996-3370113837-20168928-1000\SOFTWARE\paint.net]
"File/MostRecent/Thumbnail2"="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
[HKEY_USERS\S-1-5-21-1071034996-3370113837-20168928-1000\SOFTWARE\paint.net]
"File/MostRecent/Thumbnail3"="iVBORw0KGgoAAAANSUhEUgAAAEgAAABICAYAAABV7bNHAAAABGdBTUEAALGPC/xhBQAAAAlwSFlzAAAScQAAEnEB89x6jgAAJrVJREFUeF7lnHdQVOnW7k/VOTNjzohKEokGJCsI2CQBUQwEFXXMOYEgOSdBEDDnRAazoghiwDDmNDPqGGacnHM+c+5X33Of9e7GmW+qbtX9A/65d1etenfv7t7d67eflXZT/OP/cutOs6fp/h8x8UV8arPN3tbaCrY2Vhhsq9kQW2uu1uqYjbUlrCzMYTnIDBYDTTFooIkyc3MTWPCYlcVA9by15SBlVn8xS3kfn5fXDaKZm5vC3MwUZmYmMDM1phnB1GQATIz7KzM26gejAYYY0L8v+vczgGHf3nrrhb4GvWDQpyf69Kb16oHePbuhl1iPbujZvSu6d+tC64yuXTtDfNJca5tNZ2NlAWurQbCxMqdjNHF6EB2jQ60mUCwETCsg/TpooDGdNoI5nRUbaDoAA/l4oNrXzMxEM4GhzFgPhUBeQqHJqqx/K6S+6GfYR0Hqa9CbgHopQL17dldwevYQMBqcbgQj1qVzJwEkSmqzTWdiZMgvawhTfllT479bf7WacRUbSAfNWo0wxBQUPQxzM2MCEjNRqyjFlHBMCMXYiCoZQCAEIM73V87T6LwAaFWJgahEQCilEAZV0oMwerQqpasGpGuXTuhC69y5Izp17KDWzu0BSK6iXE0z/WpCJ4x5JY0H9KUzfXk1DWBEyQ+giVNicmWV0cGX+4YGf9nXO0/rq1eABkIg/Gl9Xu7rIbUeJ6BevbrrVdIKpLMC0KmTBqRDh9fw2muv4pVXX8GrNAHUha8RnzTX2mbTGfJLi/WjI2amJuqKGw3orxxulbfKBfpVOaw3ASCvG0CoA9R7+vK4gXK8
[HKEY_USERS\S-1-5-21-1071034996-3370113837-20168928-1000\SOFTWARE\Classes\AppXv3w8be6gretzpzjq0s27982mxr4acyac]
[HKEY_USERS\S-1-5-21-1071034996-3370113837-20168928-1000\SOFTWARE\Classes\Local Settings\MrtCache\C:%5CWINDOWS%5CSystemResources%5CWindows.UI.SettingsAppThreshold%5CWindows.UI.SettingsAppThreshold.pri\1d21a01876458fe\25913318]
"@{windows?ms-resource://Windows.UI.SettingsAppThreshold/SearchResources/SettingsPagePrivacyAccountInfo/Description}"="Einstellungen zum Datenschutz von Kontoinformationen"
[HKEY_USERS\S-1-5-21-1071034996-3370113837-20168928-1000\SOFTWARE\Classes\Local Settings\MrtCache\C:%5CWINDOWS%5CSystemResources%5CWindows.UI.SettingsAppThreshold%5CWindows.UI.SettingsAppThreshold.pri\1d21a01876458fe\25913318]
"@{windows?ms-resource://Windows.UI.SettingsAppThreshold/SearchResources/SettingsPagePrivacyAccountInfo/HighKeywords}"="Benutzerinformationen;user information"
[HKEY_USERS\S-1-5-21-1071034996-3370113837-20168928-1000\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\App\Capabilities\URLAssociations]
"skypesettings"="AppXv3w8be6gretzpzjq0s27982mxr4acyac"
[HKEY_USERS\S-1-5-21-1071034996-3370113837-20168928-1000_Classes\AppXv3w8be6gretzpzjq0s27982mxr4acyac]
[HKEY_USERS\S-1-5-21-1071034996-3370113837-20168928-1000_Classes\Local Settings\MrtCache\C:%5CWINDOWS%5CSystemResources%5CWindows.UI.SettingsAppThreshold%5CWindows.UI.SettingsAppThreshold.pri\1d21a01876458fe\25913318]
"@{windows?ms-resource://Windows.UI.SettingsAppThreshold/SearchResources/SettingsPagePrivacyAccountInfo/Description}"="Einstellungen zum Datenschutz von Kontoinformationen"
[HKEY_USERS\S-1-5-21-1071034996-3370113837-20168928-1000_Classes\Local Settings\MrtCache\C:%5CWINDOWS%5CSystemResources%5CWindows.UI.SettingsAppThreshold%5CWindows.UI.SettingsAppThreshold.pri\1d21a01876458fe\25913318]
"@{windows?ms-resource://Windows.UI.SettingsAppThreshold/SearchResources/SettingsPagePrivacyAccountInfo/HighKeywords}"="Benutzerinformationen;user information"
[HKEY_USERS\S-1-5-21-1071034996-3370113837-20168928-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Repository\Packages\Microsoft.SkypeApp_11.8.197.0_x64__kzf8qxf38zg5c\App\Capabilities\URLAssociations]
"skypesettings"="AppXv3w8be6gretzpzjq0s27982mxr4acyac"

-= EOF =-
Geändert von Schuhmi (03.11.2016 um 14:27 Uhr)

 

Themen zu ELEX-tech YAC Biest :-)
64bit, alarm, bereits, dateien, definitiv, deinstalliere, deinstallieren, elex-tech, grenzen, hoffe, kaspersky, keine dateien, leute, löschen, mehrfach, ordner, programme, schei, schlägt, suche, taucht, unterstützung, update, versuch, win7, windows


« PC wird ungewöhnlich langsam beim starten | Chrome leitet an eine andere Internetseite als die, die angeklickt wurde »


Ähnliche Themen: ELEX-tech YAC Biest :-)


  1. PUP Elex, -.Ghokswa, -TXQQBrowser and more
    Plagegeister aller Art und deren Bekämpfung - 26.10.2016 (3)
  2. Windows 7 Clean Install immernoch mit Symptomen von Malware (PUP.Optional.Elex)
    Plagegeister aller Art und deren Bekämpfung - 06.08.2016 (5)
  3. 394aavndd.tech entfernen
    Anleitungen, FAQs & Links - 02.05.2016 (2)
  4. 383vpbzxksw.tech entfernen
    Anleitungen, FAQs & Links - 02.05.2016 (2)
  5. 415peezndor.tech entfernen
    Anleitungen, FAQs & Links - 02.05.2016 (2)
  6. 373afbfmptjx.tech entfernen
    Anleitungen, FAQs & Links - 02.05.2016 (2)
  7. 396qwgyxm.tech entfernen
    Anleitungen, FAQs & Links - 24.04.2016 (2)
  8. 2784qy54k.tech entfernen
    Anleitungen, FAQs & Links - 20.04.2016 (2)
  9. SpyHunter4 Meldung: ELEX HIJACKER im Internet Explorer
    Plagegeister aller Art und deren Bekämpfung - 29.01.2016 (6)
  10. Eset Online Scanner: Win32/ELEX.Y , Win32/InstallMonetizer.AQ
    Plagegeister aller Art und deren Bekämpfung - 11.10.2014 (5)
  11. Win32/ELEX.J
    Log-Analyse und Auswertung - 17.06.2014 (23)
  12. Windows Vista: Adware Elex und PUP.opencandy und desk 365 (PC shutdown)
    Plagegeister aller Art und deren Bekämpfung - 06.09.2013 (15)
  13. PSW.Goldun.DC - ein übles biest
    Plagegeister aller Art und deren Bekämpfung - 11.05.2006 (1)
  14. Wo versteckt sich das Biest?
    Plagegeister aller Art und deren Bekämpfung - 06.08.2005 (8)
  15. Bekomme das Biest nicht los und jetzt spinnt der ganze PC!!!
    Plagegeister aller Art und deren Bekämpfung - 24.05.2005 (2)
  16. krieg das biest nicht los....
    Log-Analyse und Auswertung - 22.02.2005 (3)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema ELEX-tech YAC Biest :-) - das war absolut nicht böse gemeint ... man kann dir/euch sicherlich nicht dankbar genug sein für deine/eure Zeit und Mühen, ohne eure Hilfe wären wir absolut hilflos und überfordert ... - ELEX-tech YAC Biest :-)...
Archiv
Du betrachtest: ELEX-tech YAC Biest :-) auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55