Trojaner-Board - Rechner arbeitet viel im hintergrund, ist langsamer und stürzt auch manchmal ab...

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Rechner arbeitet viel im hintergrund, ist langsamer und stürzt auch manchmal ab... (https://www.trojaner-board.de/149125-rechner-arbeitet-viel-hintergrund-langsamer-stuerzt-manchmal-ab.html)

Rechner arbeitet viel im hintergrund, ist langsamer und stürzt auch manchmal ab...

Hallo zusammen,

wie im Titel zu erkennen habe ich Probleme mit meinem Rechner (na gut...wäre ich sonst hier? )

1.) Er arbeitet oft sehr viel im Hintergrund ohne dass ich weiß was da so passiert...
2.) Vieles geht immer langsamer, dauert lang usw. und ich weiß nicht ob das so normal ist
3.) ab und zu stürzt er einfach ab bzw. beim benutzen von Firefox hängt er sich manchmal auf.

Da ich Laie mit gefährlichem Halbwissen bin :pfui:, habe ich vor geraumer Zeit einen Trojaner mit Hilfe einiger Recherche selbst "beseitigt"...ob das wirklich erfolgreich war würde ich gerne herausfinden, bzw. die Fehler nicht noch einmal machen. :headbang:

Ich habe das Programm FRST runtergeladen und den Scan durchgeführt.
Hier das Ergebnis:

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04

Ran by C (administrator) on C on 02-02-2014 22:56:21

Running from C:\Users\C\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe

(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Dropbox, Inc.) C:\Users\C\AppData\Roaming\Dropbox\bin\Dropbox.exe

(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe

(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_11_9_900_170_ActiveX.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [AppleSyncNotifier] - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2012-02-23] (Apple Inc.)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2014-01-07] (RealNetworks, Inc.)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)

HKU\S-1-5-21-3617237726-889641597-1458545933-1000\...\RunOnce: [Del43859883] - cmd.exe /Q /D /c del "C:\Users\CHRIST~1\AppData\Local\Temp\0.del"

HKU\S-1-5-21-3617237726-889641597-1458545933-1000\...\RunOnce: [Del43874173] - cmd.exe /Q /D /c del "C:\Users\CHRIST~1\AppData\Local\Temp\0.del"

HKU\S-1-5-21-3617237726-889641597-1458545933-1000\...409d6c4515e9\InprocServer32: [Default-shell32]  <==== ATTENTION!

Startup: C:\Users\C\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\C\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.mysearchdial.com/?f=1&a=irmsd0103&cd=2XzuyEtN2Y1L1QzutC0CyC0FyCyDtB0DyE0A0F0EtC0A0BtBtN0D0Tzu0SyByCyEtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=289426412&ir=

URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 

SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0103&cd=2XzuyEtN2Y1L1QzutC0CyC0FyCyDtB0DyE0A0F0EtC0A0BtBtN0D0Tzu0SyByCyEtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=289426412&ir=

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://start.mysearchdial.com/results.php?f=4&q={searchTerms}&a=irmsd0103&cd=2XzuyEtN2Y1L1QzutC0CyC0FyCyDtB0DyE0A0F0EtC0A0BtBtN0D0Tzu0SyByCyEtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=289426412&ir=

BHO: a2zLyrics-1 - {11111111-1111-1111-1111-110411151154} - C:\Program Files (x86)\a2zLyrics-1\a2zLyrics-1-bho64.dll No File

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: ValueApps - {93DBF2BB-A2B3-4683-A92E-57E60751F346} - C:\Program Files\Conduit\ValueApps\IE\ValueAppsLoader.dll No File

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKCU - No Name - {7846AE31-BEA2-438A-8F5E-2D899361656C} -  No File

DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\C\AppData\Roaming\Mozilla\Firefox\Profiles\l4bf69ca.default

FF user.js: detected! => C:\Users\C\AppData\Roaming\Mozilla\Firefox\Profiles\l4bf69ca.default\user.js

FF NetworkProxy: "type", 0

FF Homepage: hxxp://start.mysearchdial.com/?f=1&a=irmsd0103&cd=2XzuyEtN2Y1L1QzutC0CyC0FyCyDtB0DyE0A0F0EtC0A0BtBtN0D0Tzu0SyByCyEtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=289426412&ir=

FF SelectedSearchEngine: Mysearchdial

FF DefaultSearchEngine: Mysearchdial

FF Keyword.URL: user_pref("keyword.URL", "");

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()

FF Plugin: @java.com/DTPlugin,version=10.5.0 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.5.0 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)

FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll No File

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll (RealPlayer)

FF SearchPlugin: C:\Users\C\AppData\Roaming\Mozilla\Firefox\Profiles\l4bf69ca.default\searchplugins\Mysearchdial.xml

FF SearchPlugin: C:\Users\C\AppData\Roaming\Mozilla\Firefox\Profiles\l4bf69ca.default\searchplugins\searchplugins-backup

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: No Name - C:\Users\C\AppData\Roaming\Mozilla\Firefox\Profiles\l4bf69ca.default\Extensions\staged [2014-02-02]

FF Extension: Garmin Communicator - C:\Users\C\AppData\Roaming\Mozilla\Firefox\Profiles\l4bf69ca.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2014-01-01]

FF Extension: Greasemonkey - C:\Users\C\AppData\Roaming\Mozilla\Firefox\Profiles\l4bf69ca.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2013-10-06]

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-12-22]

FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2013-12-22]

FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

FF HKLM-x32\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff

FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []

FF HKCU\...\Firefox\Extensions: [{9A207F60-3F1C-4ED0-972D-0A4CDFBFF803}] - C:\Users\C\AppData\Roaming\13001.012

FF Extension: No Name - C:\Users\C\AppData\Roaming\13001.012 [2012-06-29]
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-26] (Avira Operations GmbH & Co. KG)

R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()

R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1024384 2013-01-14] (Enigma Software Group USA, LLC.)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)

S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [13088 2011-03-02] ()

S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()

R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-02-02 22:56 - 2014-02-02 22:56 - 00015454 _____ () C:\Users\C\Desktop\FRST.txt

2014-02-02 22:56 - 2014-02-02 22:56 - 00000000 ____D () C:\FRST

2014-02-02 22:53 - 2014-02-02 22:53 - 02080256 _____ (Farbar) C:\Users\C\Desktop\FRST64.exe

2014-02-02 22:52 - 2014-02-02 22:52 - 00003280 _____ () C:\Windows\System32\Tasks\MySearchDial

2014-02-02 22:52 - 2014-02-02 22:52 - 00003280 _____ () C:\Windows\System32\Tasks\Digital Sites

2014-02-02 22:52 - 2014-02-02 22:52 - 00000316 _____ () C:\Windows\Tasks\MySearchDial.job

2014-02-02 22:52 - 2014-02-02 22:52 - 00000316 _____ () C:\Windows\Tasks\Digital Sites.job

2014-02-02 22:52 - 2014-02-02 22:52 - 00000045 _____ () C:\Users\C\AppData\Roaming\WB.CFG

2014-02-02 22:52 - 2014-02-02 22:52 - 00000000 ____D () C:\Users\C\AppData\Roaming\mysearchdial

2014-02-02 22:52 - 2014-02-02 22:52 - 00000000 ____D () C:\Users\C\AppData\Roaming\DigitalSites

2014-02-02 22:52 - 2014-02-02 22:52 - 00000000 ____D () C:\Users\C\AppData\Local\Mysearchdial

2014-02-01 22:32 - 2014-02-01 22:33 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-02-01 22:32 - 2014-02-01 22:33 - 00000000 ____D () C:\Program Files\iTunes

2014-02-01 22:32 - 2014-02-01 22:33 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-02-01 22:32 - 2014-02-01 22:32 - 00000000 ____D () C:\Program Files\iPod

2014-01-16 20:03 - 2014-01-16 20:03 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_netaapl64_01009.Wdf

2014-01-14 23:12 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-01-14 23:12 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-01-14 23:12 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-01-14 23:12 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-01-14 23:12 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-01-14 23:12 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2014-01-14 23:12 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-01-14 23:12 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-01-14 23:12 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-01-12 22:54 - 2014-01-12 22:55 - 00009216 ___SH () C:\Users\C\Thumbs.db

2014-01-09 00:00 - 2014-01-09 00:00 - 01214312 _____ () C:\Windows\Minidump\010914-28563-01.dmp

2014-01-07 01:19 - 2014-01-07 01:19 - 00003252 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3617237726-889641597-1458545933-1000

2014-01-07 01:18 - 2014-01-07 01:19 - 00003368 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3617237726-889641597-1458545933-1000

2014-01-07 01:18 - 2014-01-07 01:18 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00272896 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00000000 ____D () C:\Users\C\AppData\Roaming\RealNetworks

2014-01-07 01:18 - 2014-01-07 01:18 - 00000000 ____D () C:\ProgramData\RealNetworks

2014-01-07 01:18 - 2014-01-07 01:18 - 00000000 ____D () C:\Program Files (x86)\RealNetworks

2014-01-07 01:07 - 2014-01-07 01:07 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-01-07 01:07 - 2014-01-07 01:07 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-01-07 01:07 - 2014-01-07 01:07 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-01-07 01:07 - 2014-01-07 01:06 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-01-07 01:06 - 2014-01-07 01:06 - 00000000 ____D () C:\Program Files (x86)\Java

2014-01-04 00:39 - 2014-01-04 00:39 - 00000000 ____D () C:\Users\C\Desktop\Wohnung Rodenbach
 

==================== One Month Modified Files and Folders =======
 

2014-02-02 22:56 - 2014-02-02 22:56 - 00015454 _____ () C:\Users\C\Desktop\FRST.txt

2014-02-02 22:56 - 2014-02-02 22:56 - 00000000 ____D () C:\FRST

2014-02-02 22:54 - 2009-07-14 05:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-02-02 22:54 - 2009-07-14 05:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-02-02 22:53 - 2014-02-02 22:53 - 02080256 _____ (Farbar) C:\Users\C\Desktop\FRST64.exe

2014-02-02 22:52 - 2014-02-02 22:52 - 00003280 _____ () C:\Windows\System32\Tasks\MySearchDial

2014-02-02 22:52 - 2014-02-02 22:52 - 00003280 _____ () C:\Windows\System32\Tasks\Digital Sites

2014-02-02 22:52 - 2014-02-02 22:52 - 00000316 _____ () C:\Windows\Tasks\MySearchDial.job

2014-02-02 22:52 - 2014-02-02 22:52 - 00000316 _____ () C:\Windows\Tasks\Digital Sites.job

2014-02-02 22:52 - 2014-02-02 22:52 - 00000045 _____ () C:\Users\C\AppData\Roaming\WB.CFG

2014-02-02 22:52 - 2014-02-02 22:52 - 00000000 ____D () C:\Users\C\AppData\Roaming\mysearchdial

2014-02-02 22:52 - 2014-02-02 22:52 - 00000000 ____D () C:\Users\C\AppData\Roaming\DigitalSites

2014-02-02 22:52 - 2014-02-02 22:52 - 00000000 ____D () C:\Users\C\AppData\Local\Mysearchdial

2014-02-02 22:39 - 2011-01-11 17:58 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-02-02 22:18 - 2014-01-02 11:46 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-02-02 22:11 - 2011-03-24 01:35 - 01814694 _____ () C:\Windows\WindowsUpdate.log

2014-02-02 17:41 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing

2014-02-02 10:46 - 2009-07-14 18:58 - 00657660 _____ () C:\Windows\system32\perfh007.dat

2014-02-02 10:46 - 2009-07-14 18:58 - 00131032 _____ () C:\Windows\system32\perfc007.dat

2014-02-02 10:46 - 2009-07-14 06:13 - 01507406 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-02-02 10:42 - 2012-02-12 23:19 - 00000000 ___RD () C:\Users\C\Dropbox

2014-02-02 10:42 - 2012-02-12 22:25 - 00000000 ____D () C:\Users\C\AppData\Roaming\Dropbox

2014-02-02 10:42 - 2011-01-11 17:58 - 00001122 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-02-02 10:41 - 2013-10-05 09:32 - 00009207 _____ () C:\Windows\setupact.log

2014-02-02 10:41 - 2011-12-19 21:30 - 00065536 _____ () C:\Windows\system32\Ikeext.etl

2014-02-02 10:41 - 2010-09-04 12:51 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-02-02 10:41 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-02-01 22:33 - 2014-02-01 22:32 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-02-01 22:33 - 2014-02-01 22:32 - 00000000 ____D () C:\Program Files\iTunes

2014-02-01 22:33 - 2014-02-01 22:32 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-02-01 22:33 - 2012-09-28 14:47 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk

2014-02-01 22:32 - 2014-02-01 22:32 - 00000000 ____D () C:\Program Files\iPod

2014-02-01 22:21 - 2010-09-04 17:04 - 00000000 ____D () C:\ProgramData\Apple

2014-01-19 13:58 - 2013-01-01 19:30 - 00000000 ____D () C:\Users\C\Documents\My Digital Editions

2014-01-19 13:56 - 2013-01-01 19:40 - 00000000 ____D () C:\Users\C\Desktop\eBook

2014-01-19 13:55 - 2013-01-01 14:25 - 00000000 ____D () C:\Users\C\Documents\Calibre Bibliothek

2014-01-17 11:13 - 2013-06-02 23:39 - 00001049 _____ () C:\Users\C\Desktop\Dropbox.lnk

2014-01-17 11:13 - 2013-06-02 23:39 - 00000000 ____D () C:\Users\C\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-01-17 11:13 - 2010-09-03 23:14 - 00000000 ___RD () C:\Users\C\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-01-16 20:03 - 2014-01-16 20:03 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_netaapl64_01009.Wdf

2014-01-15 09:40 - 2013-10-27 18:13 - 00000000 ____D () C:\Users\C\Desktop\Hubert

2014-01-15 09:14 - 2009-07-14 05:45 - 00422120 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-01-15 09:12 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-01-15 01:14 - 2010-09-05 13:21 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-01-15 01:13 - 2013-08-14 21:09 - 00000000 ____D () C:\Windows\system32\MRT

2014-01-15 01:12 - 2010-10-05 07:13 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-01-12 22:55 - 2014-01-12 22:54 - 00009216 ___SH () C:\Users\C\Thumbs.db

2014-01-12 22:54 - 2010-09-03 23:13 - 00000000 ____D () C:\Users\C

2014-01-12 20:59 - 2013-01-01 19:24 - 00007606 _____ () C:\Users\C\AppData\Local\resmon.resmoncfg

2014-01-11 09:40 - 2010-09-04 14:10 - 00000000 ____D () C:\Users\C\Desktop\Eigene Dateien

2014-01-10 00:23 - 2013-12-24 10:11 - 00000000 ____D () C:\Users\C\Desktop\Fotos

2014-01-09 00:00 - 2014-01-09 00:00 - 01214312 _____ () C:\Windows\Minidump\010914-28563-01.dmp

2014-01-09 00:00 - 2013-10-06 11:43 - 00000000 ____D () C:\Windows\Minidump

2014-01-07 15:53 - 2013-10-05 09:32 - 00025796 _____ () C:\Windows\PFRO.log

2014-01-07 01:19 - 2014-01-07 01:19 - 00003252 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3617237726-889641597-1458545933-1000

2014-01-07 01:19 - 2014-01-07 01:18 - 00003368 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3617237726-889641597-1458545933-1000

2014-01-07 01:18 - 2014-01-07 01:18 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00272896 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00000000 ____D () C:\Users\C\AppData\Roaming\RealNetworks

2014-01-07 01:18 - 2014-01-07 01:18 - 00000000 ____D () C:\ProgramData\RealNetworks

2014-01-07 01:18 - 2014-01-07 01:18 - 00000000 ____D () C:\Program Files (x86)\RealNetworks

2014-01-07 01:18 - 2011-07-24 23:36 - 00000000 ____D () C:\Users\C\AppData\Roaming\Real

2014-01-07 01:18 - 2011-07-24 23:36 - 00000000 ____D () C:\ProgramData\Real

2014-01-07 01:18 - 2011-07-24 23:36 - 00000000 ____D () C:\Program Files (x86)\Real

2014-01-07 01:11 - 2014-01-02 11:46 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-01-07 01:11 - 2014-01-02 11:46 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-01-07 01:11 - 2014-01-02 11:46 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-01-07 01:11 - 2010-09-04 13:26 - 00000000 ____D () C:\Users\C\AppData\Local\Adobe

2014-01-07 01:07 - 2014-01-07 01:07 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-01-07 01:07 - 2014-01-07 01:07 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-01-07 01:07 - 2014-01-07 01:07 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-01-07 01:07 - 2013-10-06 10:18 - 00000000 ____D () C:\ProgramData\Oracle

2014-01-07 01:06 - 2014-01-07 01:07 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-01-07 01:06 - 2014-01-07 01:06 - 00000000 ____D () C:\Program Files (x86)\Java

2014-01-04 00:39 - 2014-01-04 00:39 - 00000000 ____D () C:\Users\C\Desktop\Wohnung Rodenbach
 

ZeroAccess:

C:\$Recycle.Bin\S-1-5-21-3617237726-889641597-1458545933-1000\$bcfe656448bbedfa861a706489276a36
 

Files to move or delete:

====================

C:\Users\C\AppData\Roaming\skype.ini
 
 

Some content of TEMP:

====================

C:\Users\C\AppData\Local\Temp\avgnt.exe

C:\Users\C\AppData\Local\Temp\bi_cleaner.exe

C:\Users\C\AppData\Local\Temp\DeltaTB.exe

C:\Users\C\AppData\Local\Temp\dlLogic.exe

C:\Users\C\AppData\Local\Temp\EnableExtDll.dll

C:\Users\C\AppData\Local\Temp\ICReinstall_ZipOpenerSetup.exe

C:\Users\C\AppData\Local\Temp\install_flashplayer11x32ax_mssd_awe_aih.exe

C:\Users\C\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe

C:\Users\C\AppData\Local\Temp\Quarantine.exe

C:\Users\C\AppData\Local\Temp\stubhelper.dll
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-02-02 11:43
 

==================== End Of Log ============================

--- --- ---

Code:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 01-02-2014 04

Ran by C at 2014-02-02 22:56:48

Running from C:\Users\C\Desktop

Boot Mode: Normal

==========================================================
 
 

==================== Security Center ========================
 

AV: Avira Desktop (Enabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

AS: Avira Desktop (Enabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installed Programs ======================
 

 Update for Microsoft Office 2007 (KB2508958) (x32 Version:  - Microsoft)

Adobe Digital Editions 2.0 (x32 Version: 2.0 - Adobe Systems Incorporated)

Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)

Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.170 - Adobe Systems Incorporated)

Adobe PDF ePub DRM Removal 4.1.6 (x32 Version: 4.1.6 - EPUBSOFT)

Adobe Reader XI (11.0.06) - Deutsch (x32 Version: 11.0.06 - Adobe Systems Incorporated)

Apple Application Support (x32 Version: 3.0 - Apple Inc.)

Apple Mobile Device Support (Version: 7.1.0.32 - Apple Inc.)

Apple Software Update (x32 Version: 2.1.3.127 - Apple Inc.)

Audacity 2.0.3 (x32 Version: 2.0.3 - Audacity Team)

Avira Free Antivirus (x32 Version: 14.0.2.286 - Avira)

Bonjour (Version: 3.0.0.10 - Apple Inc.)

calibre (x32 Version: 1.0.0 - Kovid Goyal)

capella reader (x32 Version: 7.1.16 - capella software AG)

CCleaner (Version: 3.20 - Piriform)

Diablo III (x32 Version: 1.0.8.16603 - Blizzard Entertainment)

Dropbox (HKCU Version: 2.4.11 - Dropbox, Inc.)

Free M4a to MP3 Converter 8.0 (x32 Version:  - ManiacTools.com)

Garmin Communicator Plugin (x32 Version: 4.0.4 - Garmin Ltd or its subsidiaries)

Garmin Communicator Plugin x64 (Version: 4.0.4 - Garmin Ltd or its subsidiaries)

GIMP 2.6.10 (x32 Version: 2.6.10 - The GIMP Team)

Google Earth (x32 Version: 7.1.2.2041 - Google)

Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden

Hex-Editor MX (x32 Version: 6.0 - NEXT-Soft)

iTunes (Version: 11.1.4.62 - Apple Inc.)

Java 7 Update 45 (x32 Version: 7.0.450 - Oracle)

Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden

Java(TM) 6 Update 21 (64-bit) (Version: 6.0.210 - Oracle)

Java(TM) 7 Update 5 (64-bit) (Version: 7.0.50 - Oracle)

Malwarebytes Anti-Malware Version 1.75.0.1300 (x32 Version: 1.75.0.1300 - Malwarebytes Corporation)

Mein CEWE FOTOBUCH (x32 Version:  - )

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)

Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden

Microsoft Office 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden

Microsoft Office Access MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)

Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Excel MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office File Validation Add-In (x32 Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Groove MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office InfoPath MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Live Add-in 1.5 (x32 Version: 2.0.4024.1 - Microsoft Corporation)

Microsoft Office Office 64-bit Components 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office OneNote MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Outlook MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office PowerPoint MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (English) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (French) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proof (Italian) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Proofing (German) 2007 (x32 Version: 12.0.4518.1014 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (x32 Version:  - Microsoft) Hidden

Microsoft Office Publisher MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared 64-bit MUI (German) 2007 (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Office Word MUI (German) 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219 - Microsoft Corporation)

MobileMe Control Panel (Version: 3.1.8.0 - Apple Inc.)

Mozilla Firefox 26.0 (x86 de) (x32 Version: 26.0 - Mozilla)

Mozilla Maintenance Service (x32 Version: 26.0 - Mozilla)

Mysearchdial (HKCU Version:  - Mysearchdial) <==== ATTENTION

NVIDIA 3D Vision Treiber 327.23 (Version: 327.23 - NVIDIA Corporation)

NVIDIA Display Control Panel (Version: 6.14.12.5896 - NVIDIA Corporation)

NVIDIA Grafiktreiber 327.23 (Version: 327.23 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.26.4 (Version: 1.3.26.4 - NVIDIA Corporation)

NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden

NVIDIA PhysX (x32 Version: 9.10.0224 - NVIDIA Corporation)

NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.2723 - NVIDIA Corporation) Hidden

NVIDIA Systemsteuerung 327.23 (Version: 327.23 - NVIDIA Corporation) Hidden

NVIDIA Update 1.14.17 (Version: 1.14.17 - NVIDIA Corporation)

NVIDIA Update Components (Version: 1.14.17 - NVIDIA Corporation) Hidden

PDFCreator (x32 Version: 1.0.2 - Frank Heindörfer, Philip Chinery)

RealDownloader (x32 Version: 1.3.3 - RealNetworks, Inc.) Hidden

RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden

RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden

RealPlayer (x32 Version: 16.0.3 - RealNetworks)

RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.4.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.4.0 - Renesas Electronics Corporation) Hidden

Rossmann Fotowelt Software 4.9 (x32 Version: 4.9 - ORWO Net)

Skype Click to Call (x32 Version: 6.0.10297 - Skype Technologies S.A.)

Skype™ 6.1 (x32 Version: 6.1.129 - Skype Technologies S.A.)

SpyHunter (Version: 4.12.13.4202 - Enigma Software Group USA, LLC)

StarCraft II (x32 Version:  - Blizzard Entertainment)

TeamSpeak 3 Client (Version: 3.0.9.2 - TeamSpeak Systems GmbH)

Update for 2007 Microsoft Office System (KB967642) (x32 Version:  - Microsoft)

Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)

Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)

Update for Microsoft Office 2007 suites (KB2596620) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2687493) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767849) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office 2007 suites (KB2767916) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 (KB2687404) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2850085) 32-Bit Edition (x32 Version:  - Microsoft)

Update for Zip Opener (HKCU Version:  - Update for Zip Opener) <==== ATTENTION

Update für Microsoft Office Excel 2007 Help (KB963678) (x32 Version:  - Microsoft)

Update für Microsoft Office Outlook 2007 Help (KB963677) (x32 Version:  - Microsoft)

Update für Microsoft Office Powerpoint 2007 Help (KB963669) (x32 Version:  - Microsoft)

Update für Microsoft Office Word 2007 Help (KB963665) (x32 Version:  - Microsoft)

VLC media player 1.1.11 (x32 Version: 1.1.11 - VideoLAN)

WinRAR 4.01 (64-Bit) (Version: 4.01.0 - win.rar GmbH)
 

==================== Restore Points  =========================
 

21-01-2014 22:32:10 Windows Update

01-02-2014 20:16:13 Windows Update

01-02-2014 20:20:32 Windows-Sicherung

02-02-2014 18:00:34 Windows-Sicherung
 

==================== Hosts content: ==========================
 

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts
 

==================== Scheduled Tasks (whitelisted) =============
 

Task: {0DDA8510-98FD-4431-B987-79E0AD08FC0E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-07] (Adobe Systems Incorporated)

Task: {270087C9-F946-46A9-8F13-733E83A2E9A3} - \BitGuard No Task File

Task: {464D91AE-3417-4E33-A143-5330CC7F20D5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-11] (Google Inc.)

Task: {51CD4448-7191-49A9-B7A7-96F2B47D6A96} - System32\Tasks\Digital Sites => C:\Users\C\AppData\Roaming\DigitalSites\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION

Task: {7219D82E-B15A-4636-994A-BF72EC8475E8} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3617237726-889641597-1458545933-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)

Task: {7DD25E9B-08BC-4596-858E-D4AC4CB387FA} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup

Task: {805110E7-38E3-475D-B0AF-83BB3CFEE3C3} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3617237726-889641597-1458545933-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)

Task: {86433D89-3B6D-4A3F-B431-3708383829F9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-01-11] (Google Inc.)

Task: {882BA251-DDF0-4A90-A215-49603E0517EC} - System32\Tasks\MySearchDial => C:\Users\C\AppData\Roaming\mysearchdial\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION

Task: {8BA63544-E9B6-4618-AF00-855B0F7D3925} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3617237726-889641597-1458545933-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)

Task: {A50B6B3D-583E-42DB-9412-3813A9375DE1} - System32\Tasks\{7224C61D-771D-49A9-99C8-37DA2E7B5AEF} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2013-01-08] (Skype Technologies S.A.)

Task: {BD9173C5-7181-401A-9AA1-CA2FED907E39} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {F43EBFF0-4869-43D7-98DF-9E6380845BA6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-06-22] (Piriform Ltd)

Task: {FC671FE9-EF34-4634-971A-0B5686640F36} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3617237726-889641597-1458545933-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\Digital Sites.job => C:\Users\CHRIST~1\AppData\Roaming\DIGITA~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\MySearchDial.job => C:\Users\CHRIST~1\AppData\Roaming\MYSEAR~1\UPDATE~1\UPDATE~1.EXE <==== ATTENTION
 

==================== Loaded Modules (whitelisted) =============
 

2011-12-15 19:29 - 2011-05-28 22:05 - 00164864 _____ () C:\Program Files\WinRAR\rarext.dll

2013-02-28 00:27 - 2013-02-26 19:30 - 00397704 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll

2014-01-20 13:17 - 2014-01-20 13:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2014-01-20 13:16 - 2014-01-20 13:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2013-10-19 00:55 - 2013-10-19 00:55 - 25100288 _____ () C:\Users\C\AppData\Roaming\Dropbox\bin\libcef.dll
 

==================== Alternate Data Streams (whitelisted) =========
 
 

==================== Safe Mode (whitelisted) ===================
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MSIServer => ""="Service"
 

==================== Faulty Device Manager Devices =============
 
 

==================== Event log errors: =========================
 

Application errors:

==================

Error: (02/02/2014 10:16:11 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: MobileMeServices.exe, Version: 1.6.65.0, Zeitstempel: 0x4cafa71a

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116

Ausnahmecode: 0xc06d007e

Fehleroffset: 0x0000c41f

ID des fehlerhaften Prozesses: 0x1f78

Startzeit der fehlerhaften Anwendung: 0xMobileMeServices.exe0

Pfad der fehlerhaften Anwendung: MobileMeServices.exe1

Pfad des fehlerhaften Moduls: MobileMeServices.exe2

Berichtskennung: MobileMeServices.exe3
 

Error: (02/02/2014 10:15:31 PM) (Source: Application Error) (User: )

Description: Name der fehlerhaften Anwendung: MobileMeServices.exe, Version: 1.6.65.0, Zeitstempel: 0x4cafa71a

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7601.18229, Zeitstempel: 0x51fb1116

Ausnahmecode: 0xc06d007e

Fehleroffset: 0x0000c41f

ID des fehlerhaften Prozesses: 0x19f4

Startzeit der fehlerhaften Anwendung: 0xMobileMeServices.exe0

Pfad der fehlerhaften Anwendung: MobileMeServices.exe1

Pfad des fehlerhaften Moduls: MobileMeServices.exe2

Berichtskennung: MobileMeServices.exe3
 

Error: (02/02/2014 11:45:01 AM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".

Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (02/01/2014 09:11:19 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)

Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (01/24/2014 00:24:17 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".

Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (01/22/2014 01:10:21 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".

Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (01/21/2014 11:28:53 PM) (Source: MsiInstaller) (User: NT-AUTORITÄT)

Description: Product: Skype Click to Call -- Error 1609. An error occurred while applying security settings. Users is not a valid user or group. This could be a problem with the package, or a problem connecting to a domain controller on the network. Check your network connection and click Retry, or Cancel to end the install. Unable to locate the user's SID, system error 1332(NULL)(NULL)(NULL)(NULL)(NULL)
 

Error: (01/19/2014 01:34:39 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".

Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (01/17/2014 00:42:24 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".

Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 

Error: (01/16/2014 10:03:35 PM) (Source: SideBySide) (User: )

Description: Fehler beim Generieren des Aktivierungskontextes für "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1".

Die abhängige Assemblierung "rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"" konnte nicht gefunden werden.

Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe".
 
 

System errors:

=============

Error: (02/02/2014 10:16:11 PM) (Source: DCOM) (User: )

Description: {D3F6D4DB-A482-4648-8DBB-3565EBCB7A6B}
 

Error: (02/01/2014 10:43:43 PM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
 

Error: (02/01/2014 10:23:05 PM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
 

Error: (02/01/2014 10:23:05 PM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
 

Error: (02/01/2014 10:23:02 PM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
 

Error: (02/01/2014 10:22:57 PM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
 

Error: (02/01/2014 10:01:34 PM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
 

Error: (02/01/2014 10:01:34 PM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
 

Error: (02/01/2014 09:29:10 PM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
 

Error: (02/01/2014 09:29:10 PM) (Source: Schannel) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.
 
 

Microsoft Office Sessions:

=========================

Error: (10/18/2011 06:13:22 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6562.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 16 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (06/07/2011 06:16:34 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 18 seconds with 0 seconds of active time.  This session ended with a crash.
 

Error: (12/13/2010 04:36:30 PM) (Source: Microsoft Office 12 Sessions)(User: )

Description: ID: 6, Application Name: Microsoft Office Outlook, Application Version: 12.0.6539.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 81 seconds with 0 seconds of active time.  This session ended with a crash.
 
 

CodeIntegrity Errors:

===================================

  Date: 2012-09-28 15:51:16.303

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2012-09-28 15:51:16.225

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2012-09-28 15:50:31.691

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2012-09-28 15:50:31.616

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2012-09-28 15:50:13.684

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 

  Date: 2012-09-28 15:50:13.596

  Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume2\Windows\System32\drivers\usbaapl64.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
 
 

==================== Memory info =========================== 
 

Percentage of memory in use: 45%

Total physical RAM: 4093.55 MB

Available physical RAM: 2216.57 MB

Total Pagefile: 8185.29 MB

Available Pagefile: 5995.96 MB

Total Virtual: 8192 MB

Available Virtual: 8191.81 MB
 

==================== Drives ================================
 

Drive c: () (Fixed) (Total:97.66 GB) (Free:10.53 GB) NTFS

Drive d: () (Fixed) (Total:244.14 GB) (Free:77.27 GB) NTFS

Drive e: (Bilder & Musik) (Fixed) (Total:589.62 GB) (Free:169.76 GB) NTFS
 

==================== MBR & Partition Table ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 3E56E23A)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=98 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=244 GB) - (Type=07 NTFS)

Partition 4: (Not Active) - (Size=590 GB) - (Type=07 NTFS)
 

==================== End Of Log ============================

Für Hilfe wäre ich dankbar.

Hallo und :hallo:

Zitat:

Microsoft Office Enterprise 2007 (x32 Version: 12.0.6612.1000 - Microsoft Corporation)

Woher hast du diese Office-Enterprise-Edition?

Zitat:

ZeroAccess:
C:\$Recycle.Bin\S-1-5-21-3617237726-889641597-1458545933-1000\$bcfe656448bbedfa861a706489276a36

Lesestoff:
Rootkit-Warnung
Dein Computer wurde mit einem besonderen Schädling infiziert, der sich vor herkömmlichen Virenscannern und dem Betriebssystem selbst verstecken kann. Zusätzlich hat so ein Schädling meist auch Backdoor-Funktionalität, reißt also ganz bewußt Löcher durch alle Schutzmaßnahmen, damit er weiteren Schadcode nachladen oder die Daten, die er so sammelt, an die "bösen Jungs" weiterleiten kann. Was heißt das jetzt für dich?

Entscheide bitte ganz bewußt, ob du mit der Bereinigung fortfahren möchtest. Ein einmal derartig kompromittiertes System kann man niemals mit 100%iger Sicherheit wieder absichern. Auch wenn wir gute Chancen haben, deinen Computer zu bereinigen, kann es dennoch möglich sein, dass uns am Ende nur die Neuinstallation bleibt.
Wenn du mit diesem Computer beispielsweise Onlinebanking machst, dann solltest du zumindest dein Passwort von deiner Bank ändern lassen, wenn du ein ansonsten sicheres Verfahren wie beispielsweise "chip-TAN-comfort" nutzt. Hast du noch alte TAN-Bögen auf Papierbasis? Dann ist es höchste Zeit dich bei deiner Bank zu melden und notfalls das Konto temporär sperren zu lassen. Der Sperrnotruf 116 116 von www.sperr-notruf.de kann Tag und Nacht dafür benutzt werden.
Hast du ansonsten sensible Daten auf deinem Computer, dann solltest du auch darüber nachdenken, wie du damit umgehst, da sie sich praktisch "jeder" ansehen konnte.

Teile mir also mit, wie du dich entschieden hast.

Hallo Cosinus,

also ich nehme mal an, dass Microsoft Office Enterprise 2007 word und Excel ist oder?
Da ich den Rechner nicht selbst zusammengebaut , sondern nur alles einzeln gekauft habe weiß ich das nicht 100%.
vor ca.drei Jahren hatte ich die Rechnerteile und auch Windows usw. gekauft und mir zusammenbauen / Installieren lassen. Da sollte das auch her sein.

Ich würde wenn es klappt versuchen die Tore wieder zuschließen.
Wenn es denn sein muss, auch den Rechner platt machen und wieder neu installieren lassen....aber eben ungern.

Zitat:

also ich nehme mal an, dass Microsoft Office Enterprise 2007 word und Excel ist oder?

zu MS-Office gehört Word, Exel, Powerpoint, Outllok und je nachdem welche Edition auch Access und andere

Zitat:

Da ich den Rechner nicht selbst zusammengebaut , sondern nur alles einzeln gekauft habe weiß ich das nicht 100%.
vor ca.drei Jahren hatte ich die Rechnerteile und auch Windows usw. gekauft und mir zusammenbauen / Installieren lassen. Da sollte das auch her sein.

Nein, Windows ist Windows und Office ist Office, wenn man eine Windows-Lizenz kauft ist nicht automatisch ein Nutzungsrecht für MS-Office dabei und schon garnicht für eine Enterprise Edition. Enterprise Editionen gibt es idR nur über teure Volumenlizenzverträge von MS und das auch eigentlich nur für Firmen- bzw Großkunden.

Das war aber schon mit auf dem Rechner seit ich diesen habe.
Ist das Office das Problem?

Es wäre ein Problem wenn es eine illegale Version also gecrackt wär, denn damit landen viel zu häufig Schädlinge auf dem Rechner (die brav im Hintergrund werkeln ohne dass du es merkst) und davon abgesehen supporten wir hier keine Fälle mit illegaler Software. Aber nun gut, machen wir erstmal weiter.

Dann bitte jetzt Combofix ausführen:

Scan mit Combofix

WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link

WICHTIG: Speichere Combofix auf deinem Desktop.

Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.

Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.

Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!

Wenn Combofix fertig ist, wird es ein Logfile erstellen.

Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).

Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

So...hab ich gemacht:

Code:

ComboFix 14-02-01.01 - C 03.02.2014   0:55.1.4 - x64

Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.4094.2686 [GMT 1:00]

ausgeführt von:: c:\users\C\Desktop\ComboFix.exe

AV: Avira Desktop *Disabled/Updated* {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}

SP: Avira Desktop *Disabled/Updated* {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

.

.

((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\users\C\4.0

c:\users\C\AppData\Roaming\13001.009

c:\users\C\AppData\Roaming\13001.009\chrome.manifest

c:\users\C\AppData\Roaming\13001.009\components\AcroFF.txt

c:\users\C\AppData\Roaming\13001.009\install.rdf

c:\users\C\AppData\Roaming\13001.011

c:\users\C\AppData\Roaming\13001.011\chrome.manifest

c:\users\C\AppData\Roaming\13001.011\components\AcroFF.txt

c:\users\C\AppData\Roaming\13001.011\install.rdf

c:\users\C\AppData\Roaming\13001.012

c:\users\C\AppData\Roaming\13001.012\components\AcroFF.txt

c:\users\C\AppData\Roaming\3054.776

c:\users\C\AppData\Roaming\6918.AB2

c:\users\C\AppData\Roaming\AcroIEHelpe.txt

c:\users\C\AppData\Roaming\PCFix

c:\users\C\AppData\Roaming\PCFix\log.dat

c:\users\C\AppData\Roaming\PCFix\unresolvederrors.dat

c:\users\C\AppData\Roaming\skype.ini

c:\users\C\AppData\Roaming\srvblck5.tmp

c:\users\C\AppData\Roaming\Ybhun

c:\users\C\AppData\Roaming\Ybhun\meno.rei

c:\windows\IsUn0407.exe

.

.

(((((((((((((((((((((((   Dateien erstellt von 2014-01-03 bis 2014-02-03  ))))))))))))))))))))))))))))))

.

.

2014-02-03 00:03 . 2014-02-03 00:03        --------        d-----w-        c:\users\UpdatusUser\AppData\Local\temp

2014-02-03 00:03 . 2014-02-03 00:03        --------        d-----w-        c:\users\Susanne\AppData\Local\temp

2014-02-02 21:56 . 2014-02-02 21:57        --------        d-----w-        C:\FRST

2014-02-02 21:52 . 2014-02-02 21:52        --------        d-----w-        c:\users\C\AppData\Roaming\DigitalSites

2014-02-01 21:32 . 2014-02-01 21:32        --------        d-----w-        c:\program files\iPod

2014-02-01 21:32 . 2014-02-01 21:33        --------        d-----w-        c:\programdata\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-02-01 21:32 . 2014-02-01 21:33        --------        d-----w-        c:\program files\iTunes

2014-02-01 21:32 . 2014-02-01 21:33        --------        d-----w-        c:\program files (x86)\iTunes

2014-02-01 20:18 . 2013-12-04 03:28        10315576        ----a-w-        c:\programdata\Microsoft\Windows Defender\Definition Updates\{BE6C9B5A-BCB0-470E-BE29-D1B73EF75C40}\mpengine.dll

2014-01-14 22:12 . 2013-11-27 01:41        343040        ----a-w-        c:\windows\system32\drivers\usbhub.sys

2014-01-14 22:12 . 2013-11-27 01:41        99840        ----a-w-        c:\windows\system32\drivers\usbccgp.sys

2014-01-14 22:12 . 2013-11-27 01:41        53248        ----a-w-        c:\windows\system32\drivers\usbehci.sys

2014-01-14 22:12 . 2013-11-27 01:41        325120        ----a-w-        c:\windows\system32\drivers\usbport.sys

2014-01-14 22:12 . 2013-11-27 01:41        25600        ----a-w-        c:\windows\system32\drivers\usbohci.sys

2014-01-14 22:12 . 2013-11-27 01:41        30720        ----a-w-        c:\windows\system32\drivers\usbuhci.sys

2014-01-14 22:12 . 2013-11-27 01:41        7808        ----a-w-        c:\windows\system32\drivers\usbd.sys

2014-01-14 22:12 . 2013-11-26 10:32        3156480        ----a-w-        c:\windows\system32\win32k.sys

2014-01-14 22:12 . 2013-11-26 11:40        376768        ----a-w-        c:\windows\system32\drivers\netio.sys

2014-01-07 00:18 . 2014-01-07 00:18        --------        d-----w-        c:\users\C\AppData\Roaming\RealNetworks

2014-01-07 00:18 . 2014-01-07 00:18        --------        d-----w-        c:\program files (x86)\RealNetworks

2014-01-07 00:18 . 2014-01-07 00:18        --------        d-----w-        c:\programdata\RealNetworks

2014-01-07 00:18 . 2014-01-07 00:18        --------        d-----w-        c:\program files (x86)\Common Files\xing shared

2014-01-07 00:18 . 2014-01-07 00:18        153736        ----a-w-        c:\program files (x86)\Mozilla Firefox\plugins\nppl3260.dll

2014-01-07 00:18 . 2014-01-07 00:18        124504        ----a-w-        c:\program files (x86)\Mozilla Firefox\plugins\nprpplugin.dll

2014-01-07 00:18 . 2014-01-07 00:18        499712        ----a-w-        c:\windows\SysWow64\msvcp71.dll

2014-01-07 00:18 . 2014-01-07 00:18        348160        ----a-w-        c:\windows\SysWow64\msvcr71.dll

2014-01-07 00:07 . 2014-01-07 00:07        --------        d-----w-        c:\program files (x86)\Common Files\Java

2014-01-07 00:07 . 2014-01-07 00:07        96168        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll

2014-01-07 00:06 . 2014-01-07 00:06        --------        d-----w-        c:\program files (x86)\Java

.

.

.

((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2014-01-15 00:12 . 2010-10-05 06:13        86054176        ----a-w-        c:\windows\system32\MRT.exe

2014-01-07 00:11 . 2014-01-02 10:46        71048        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl

2014-01-07 00:11 . 2014-01-02 10:46        692616        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe

2013-12-18 16:44 . 2013-05-02 08:36        84720        ----a-w-        c:\windows\system32\drivers\avnetflt.sys

2013-12-18 16:44 . 2013-03-28 23:37        131576        ----a-w-        c:\windows\system32\drivers\avipbb.sys

2013-12-18 16:44 . 2013-03-28 23:37        108440        ----a-w-        c:\windows\system32\drivers\avgntflt.sys

2013-12-18 05:13 . 2010-09-04 11:29        270496        ------w-        c:\windows\system32\MpSigStub.exe

2013-11-26 19:42 . 2013-03-28 23:37        28600        ----a-w-        c:\windows\system32\drivers\avkmgr.sys

2013-11-26 11:54 . 2013-12-14 19:01        23183360        ----a-w-        c:\windows\system32\mshtml.dll

2013-11-26 10:19 . 2013-12-14 19:01        2724864        ----a-w-        c:\windows\system32\mshtml.tlb

2013-11-26 10:18 . 2013-12-14 19:01        4096        ----a-w-        c:\windows\system32\ieetwcollectorres.dll

2013-11-26 09:48 . 2013-12-14 19:01        66048        ----a-w-        c:\windows\system32\iesetup.dll

2013-11-26 09:46 . 2013-12-14 19:01        48640        ----a-w-        c:\windows\system32\ieetwproxystub.dll

2013-11-26 09:41 . 2013-12-14 19:01        2764288        ----a-w-        c:\windows\system32\iertutil.dll

2013-11-26 09:29 . 2013-12-14 19:01        53760        ----a-w-        c:\windows\system32\jsproxy.dll

2013-11-26 09:27 . 2013-12-14 19:01        33792        ----a-w-        c:\windows\system32\iernonce.dll

2013-11-26 09:23 . 2013-12-14 19:01        2724864        ----a-w-        c:\windows\SysWow64\mshtml.tlb

2013-11-26 09:21 . 2013-12-14 19:01        574976        ----a-w-        c:\windows\system32\ieui.dll

2013-11-26 09:18 . 2013-12-14 19:01        139264        ----a-w-        c:\windows\system32\ieUnatt.exe

2013-11-26 09:18 . 2013-12-14 19:01        111616        ----a-w-        c:\windows\system32\ieetwcollector.exe

2013-11-26 09:16 . 2013-12-14 19:01        708608        ----a-w-        c:\windows\system32\jscript9diag.dll

2013-11-26 08:57 . 2013-12-14 19:01        218624        ----a-w-        c:\windows\system32\ie4uinit.exe

2013-11-26 08:35 . 2013-12-14 19:01        5769216        ----a-w-        c:\windows\system32\jscript9.dll

2013-11-26 08:28 . 2013-12-14 19:01        553472        ----a-w-        c:\windows\SysWow64\jscript9diag.dll

2013-11-26 08:16 . 2013-12-14 19:01        4243968        ----a-w-        c:\windows\SysWow64\jscript9.dll

2013-11-26 08:02 . 2013-12-14 19:01        1995264        ----a-w-        c:\windows\system32\inetcpl.cpl

2013-11-26 07:48 . 2013-12-14 19:01        12996608        ----a-w-        c:\windows\system32\ieframe.dll

2013-11-26 07:32 . 2013-12-14 19:01        1928192        ----a-w-        c:\windows\SysWow64\inetcpl.cpl

2013-11-26 07:07 . 2013-12-14 19:01        2334208        ----a-w-        c:\windows\system32\wininet.dll

2013-11-26 06:40 . 2013-12-14 19:01        1395200        ----a-w-        c:\windows\system32\urlmon.dll

2013-11-26 06:34 . 2013-12-14 19:01        817664        ----a-w-        c:\windows\system32\ieapfltr.dll

2013-11-26 06:33 . 2013-12-14 19:01        1820160        ----a-w-        c:\windows\SysWow64\wininet.dll

2013-11-23 18:26 . 2013-12-13 23:05        417792        ----a-w-        c:\windows\SysWow64\WMPhoto.dll

2013-11-23 17:47 . 2013-12-13 23:05        465920        ----a-w-        c:\windows\system32\WMPhoto.dll

2013-11-15 19:02 . 2013-11-15 19:02        940032        ----a-w-        c:\windows\system32\MsSpellCheckingFacility.exe

2013-11-15 19:02 . 2013-11-15 19:02        194048        ----a-w-        c:\windows\SysWow64\elshyph.dll

2013-11-15 19:02 . 2013-11-15 19:02        71680        ----a-w-        c:\windows\SysWow64\RegisterIEPKEYs.exe

2013-11-15 19:02 . 2013-11-15 19:02        645120        ----a-w-        c:\windows\SysWow64\jsIntl.dll

2013-11-15 19:02 . 2013-11-15 19:02        62464        ----a-w-        c:\windows\SysWow64\tdc.ocx

2013-11-15 19:02 . 2013-11-15 19:02        34816        ----a-w-        c:\windows\SysWow64\JavaScriptCollectionAgent.dll

2013-11-15 19:02 . 2013-11-15 19:02        337408        ----a-w-        c:\windows\SysWow64\html.iec

2013-11-15 19:02 . 2013-11-15 19:02        235008        ----a-w-        c:\windows\system32\elshyph.dll

2013-11-15 19:02 . 2013-11-15 19:02        182272        ----a-w-        c:\windows\SysWow64\msls31.dll

2013-11-15 19:02 . 2013-11-15 19:02        942592        ----a-w-        c:\windows\system32\jsIntl.dll

2013-11-15 19:02 . 2013-11-15 19:02        90112        ----a-w-        c:\windows\system32\SetIEInstalledDate.exe

2013-11-15 19:02 . 2013-11-15 19:02        86016        ----a-w-        c:\windows\SysWow64\iesysprep.dll

2013-11-15 19:02 . 2013-11-15 19:02        86016        ----a-w-        c:\windows\system32\RegisterIEPKEYs.exe

2013-11-15 19:02 . 2013-11-15 19:02        74240        ----a-w-        c:\windows\SysWow64\SetIEInstalledDate.exe

2013-11-15 19:02 . 2013-11-15 19:02        61952        ----a-w-        c:\windows\SysWow64\MshtmlDac.dll

2013-11-15 19:02 . 2013-11-15 19:02        61952        ----a-w-        c:\windows\SysWow64\iesetup.dll

2013-11-15 19:02 . 2013-11-15 19:02        52224        ----a-w-        c:\windows\system32\msfeedsbs.dll

2013-11-15 19:02 . 2013-11-15 19:02        51200        ----a-w-        c:\windows\SysWow64\ieetwproxystub.dll

2013-11-15 19:02 . 2013-11-15 19:02        48640        ----a-w-        c:\windows\SysWow64\mshtmler.dll

2013-11-15 19:02 . 2013-11-15 19:02        48640        ----a-w-        c:\windows\system32\mshtmler.dll

2013-11-15 19:02 . 2013-11-15 19:02        454656        ----a-w-        c:\windows\SysWow64\vbscript.dll

2013-11-15 19:02 . 2013-11-15 19:02        36352        ----a-w-        c:\windows\SysWow64\imgutil.dll

2013-11-15 19:02 . 2013-11-15 19:02        247808        ----a-w-        c:\windows\system32\msls31.dll

2013-11-15 19:02 . 2013-11-15 19:02        24576        ----a-w-        c:\windows\SysWow64\licmgr10.dll

2013-11-15 19:02 . 2013-11-15 19:02        195584        ----a-w-        c:\windows\system32\msrating.dll

2013-11-15 19:02 . 2013-11-15 19:02        151552        ----a-w-        c:\windows\SysWow64\iexpress.exe

2013-11-15 19:02 . 2013-11-15 19:02        139264        ----a-w-        c:\windows\SysWow64\wextract.exe

2013-11-15 19:02 . 2013-11-15 19:02        13312        ----a-w-        c:\windows\SysWow64\mshta.exe

2013-11-15 19:02 . 2013-11-15 19:02        13312        ----a-w-        c:\windows\system32\msfeedssync.exe

2013-11-15 19:02 . 2013-11-15 19:02        131072        ----a-w-        c:\windows\system32\IEAdvpack.dll

2013-11-15 19:02 . 2013-11-15 19:02        112128        ----a-w-        c:\windows\SysWow64\ieUnatt.exe

2013-11-15 19:02 . 2013-11-15 19:02        111616        ----a-w-        c:\windows\SysWow64\IEAdvpack.dll

2013-11-15 19:02 . 2013-11-15 19:02        105984        ----a-w-        c:\windows\system32\iesysprep.dll

2013-11-15 19:02 . 2013-11-15 19:02        1051136        ----a-w-        c:\windows\SysWow64\mshtmlmedia.dll

2013-11-15 19:02 . 2013-11-15 19:02        84992        ----a-w-        c:\windows\system32\mshtmled.dll

2013-11-15 19:02 . 2013-11-15 19:02        83968        ----a-w-        c:\windows\system32\MshtmlDac.dll

2013-11-15 19:02 . 2013-11-15 19:02        81408        ----a-w-        c:\windows\system32\icardie.dll

2013-11-15 19:02 . 2013-11-15 19:02        774144        ----a-w-        c:\windows\system32\jscript.dll

2013-11-15 19:02 . 2013-11-15 19:02        77312        ----a-w-        c:\windows\system32\tdc.ocx

2013-11-15 19:02 . 2013-11-15 19:02        626176        ----a-w-        c:\windows\system32\msfeeds.dll

2013-11-15 19:02 . 2013-11-15 19:02        62464        ----a-w-        c:\windows\system32\pngfilt.dll

2013-11-15 19:02 . 2013-11-15 19:02        616104        ----a-w-        c:\windows\system32\ieapfltr.dat

2013-11-15 19:02 . 2013-11-15 19:02        548352        ----a-w-        c:\windows\system32\vbscript.dll

2013-11-15 19:02 . 2013-11-15 19:02        48128        ----a-w-        c:\windows\system32\imgutil.dll

2013-11-15 19:02 . 2013-11-15 19:02        453120        ----a-w-        c:\windows\system32\dxtmsft.dll

2013-11-15 19:02 . 2013-11-15 19:02        413696        ----a-w-        c:\windows\system32\html.iec

2013-11-15 19:02 . 2013-11-15 19:02        40448        ----a-w-        c:\windows\system32\JavaScriptCollectionAgent.dll

2013-11-15 19:02 . 2013-11-15 19:02        30208        ----a-w-        c:\windows\system32\licmgr10.dll

2013-11-15 19:02 . 2013-11-15 19:02        296960        ----a-w-        c:\windows\system32\dxtrans.dll

2013-11-15 19:02 . 2013-11-15 19:02        263376        ----a-w-        c:\windows\system32\iedkcs32.dll

2013-11-15 19:02 . 2013-11-15 19:02        243200        ----a-w-        c:\windows\system32\webcheck.dll

2013-11-15 19:02 . 2013-11-15 19:02        235520        ----a-w-        c:\windows\system32\url.dll

2013-11-15 19:02 . 2013-11-15 19:02        167424        ----a-w-        c:\windows\system32\iexpress.exe

2013-11-15 19:02 . 2013-11-15 19:02        147968        ----a-w-        c:\windows\system32\occache.dll

2013-11-15 19:02 . 2013-11-15 19:02        143872        ----a-w-        c:\windows\system32\wextract.exe

2013-11-15 19:02 . 2013-11-15 19:02        13824        ----a-w-        c:\windows\system32\mshta.exe

2013-11-15 19:02 . 2013-11-15 19:02        135680        ----a-w-        c:\windows\system32\iepeers.dll

2013-11-15 19:02 . 2013-11-15 19:02        1228800        ----a-w-        c:\windows\system32\mshtmlmedia.dll

2013-11-15 19:02 . 2013-11-15 19:02        101376        ----a-w-        c:\windows\system32\inseng.dll

2013-11-12 02:23 . 2013-12-13 23:05        2048        ----a-w-        c:\windows\system32\tzres.dll

2013-11-12 02:07 . 2013-12-13 23:05        2048        ----a-w-        c:\windows\SysWow64\tzres.dll

.

.

((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))

.

.

*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        131248        ----a-w-        c:\users\C\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        131248        ----a-w-        c:\users\C\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        131248        ----a-w-        c:\users\C\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]

"GrooveMonitor"="c:\program files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]

"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288]

"AppleSyncNotifier"="c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe" [2012-02-23 59240]

"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2014-01-20 43848]

"avgnt"="c:\program files (x86)\Avira\AntiVir Desktop\avgnt.exe" [2013-12-18 684600]

"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-11-21 959904]

"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]

"TkBellExe"="c:\program files (x86)\real\realplayer\Update\realsched.exe" [2014-01-07 295512]

"iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2014-01-20 152392]

.

c:\users\C\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\

Dropbox.lnk - c:\users\C\AppData\Roaming\Dropbox\bin\Dropbox.exe /systemstartup [2014-1-3 30714328]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 5 (0x5)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]

"LoadAppInit_DLLs"=1 (0x1)

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37Crusader]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HitmanPro37CrusaderBoot]

@=""

.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer]

@="Service"

.

R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]

R2 Skype C2C Service;Skype C2C Service;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe;c:\programdata\Skype\Toolbars\Skype C2C Service\c2c_service.exe [x]

R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]

R3 BrSerIb;Brother MFC Serial Interface Driver(WDM);c:\windows\system32\DRIVERS\BrSerIb.sys;c:\windows\SYSNATIVE\DRIVERS\BrSerIb.sys [x]

R3 BrUsbSIb;Brother MFC Serial USB Driver(WDM);c:\windows\system32\DRIVERS\BrUsbSIb.sys;c:\windows\SYSNATIVE\DRIVERS\BrUsbSIb.sys [x]

R3 esgiguard;esgiguard;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys;c:\program files\Enigma Software Group\SpyHunter\esgiguard.sys [x]

R3 EsgScanner;EsgScanner;c:\windows\system32\DRIVERS\EsgScanner.sys;c:\windows\SYSNATIVE\DRIVERS\EsgScanner.sys [x]

R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]

R3 Netaapl;Apple Mobile Device Ethernet Service;c:\windows\system32\DRIVERS\netaapl64.sys;c:\windows\SYSNATIVE\DRIVERS\netaapl64.sys [x]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]

R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]

R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys;c:\windows\SYSNATIVE\Drivers\usbaapl64.sys [x]

S1 avkmgr;avkmgr;c:\windows\system32\DRIVERS\avkmgr.sys;c:\windows\SYSNATIVE\DRIVERS\avkmgr.sys [x]

S2 AntiVirSchedulerService;Avira Planer;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe;c:\program files (x86)\Avira\AntiVir Desktop\sched.exe [x]

S2 RealNetworks Downloader Resolver Service;RealNetworks Downloader Resolver Service;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe;c:\program files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [x]

S2 SpyHunter 4 Service;SpyHunter 4 Service;c:\progra~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE;c:\progra~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE [x]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]

S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]

S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]

.

.

Inhalt des "geplante Tasks" Ordners

.

2014-02-02 c:\windows\Tasks\Adobe Flash Player Updater.job

- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-01-02 00:11]

.

2014-02-02 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-11 16:58]

.

2014-02-02 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-01-11 16:58]

.

.

--------- X64 Entries -----------

.

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]

@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        164016        ----a-w-        c:\users\C\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]

@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        164016        ----a-w-        c:\users\C\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]

@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        164016        ----a-w-        c:\users\C\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]

@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"

[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]

2013-09-11 02:09        164016        ----a-w-        c:\users\C\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll

.

------- Zusätzlicher Suchlauf -------

.

uLocal Page = c:\windows\system32\blank.htm

uStart Page = hxxp://web.de/

mStart Page = hxxp://www.google.com

mDefault_Search_URL = hxxp://www.google.com

mDefault_Page_URL = hxxp://www.google.com

mLocal Page = c:\windows\SysWOW64\blank.htm

mSearch Page = hxxp://www.google.com

TCP: DhcpNameServer = 192.168.178.1

DPF: Garmin Communicator Plug-In - hxxps://static.garmincdn.com/gcp/ie/4.0.4.0/GarminAxControl_32.CAB

FF - ProfilePath - c:\users\C\AppData\Roaming\Mozilla\Firefox\Profiles\l4bf69ca.default\

FF - prefs.js: browser.startup.homepage - hxxp://start.mysearchdial.com/?f=1&a=irmsd0103&cd=2XzuyEtN2Y1L1QzutC0CyC0FyCyDtB0DyE0A0F0EtC0A0BtBtN0D0Tzu0SyByCyEtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=289426412&ir=

FF - prefs.js: browser.search.selectedEngine - Mysearchdial

FF - prefs.js: keyword.URL - 

FF - prefs.js: network.proxy.type - 0

FF - user.js: extensions.mysearchdial.hmpg - true

FF - user.js: extensions.mysearchdial.hmpgUrl - hxxp://start.mysearchdial.com/?f=1&a=irmsd0103&cd=2XzuyEtN2Y1L1QzutC0CyC0FyCyDtB0DyE0A0F0EtC0A0BtBtN0D0Tzu0SyByCyEtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=289426412&ir=

FF - user.js: extensions.mysearchdial.dfltSrch - true

FF - user.js: extensions.mysearchdial.srchPrvdr - Mysearchdial

FF - user.js: extensions.mysearchdial.dnsErr - true

FF - user.js: extensions.mysearchdial_i.newTab - false

FF - user.js: extensions.mysearchdial.newTabUrl - hxxp://start.mysearchdial.com/?f=2&a=irmsd0103&cd=2XzuyEtN2Y1L1QzutC0CyC0FyCyDtB0DyE0A0F0EtC0A0BtBtN0D0Tzu0SyByCyEtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=289426412&ir=

FF - user.js: extensions.mysearchdial.tlbrSrchUrl - hxxp://start.mysearchdial.com/?f=3&a=irmsd0103&cd=2XzuyEtN2Y1L1QzutC0CyC0FyCyDtB0DyE0A0F0EtC0A0BtBtN0D0Tzu0SyByCyEtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R&cr=289426412&ir=&q=

FF - user.js: extensions.mysearchdial.id - 1C6F652D4AFE1AB2

FF - user.js: extensions.mysearchdial.instlDay - 16103

FF - user.js: extensions.mysearchdial.vrsn - 1.8.21.0

FF - user.js: extensions.mysearchdial.vrsni - 1.8.21.0

FF - user.js: extensions.mysearchdial_i.vrsnTs - 1.8.21.022:52

FF - user.js: extensions.mysearchdial.prtnrId - mysearchdial

FF - user.js: extensions.mysearchdial.prdct - mysearchdial

FF - user.js: extensions.mysearchdial.aflt - irmsd0103

FF - user.js: extensions.mysearchdial_i.smplGrp - none

FF - user.js: extensions.mysearchdial.tlbrId - base

FF - user.js: extensions.mysearchdial.instlRef - 

FF - user.js: extensions.mysearchdial.dfltLng - 

FF - user.js: extensions.mysearchdial.appId - {CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}

FF - user.js: extensions.mysearchdial.excTlbr - false

FF - user.js: extensions.mysearchdial_i.hmpg - true

FF - user.js: extensions.mysearchdial.cr - 289426412

FF - user.js: extensions.mysearchdial.cd - 2XzuyEtN2Y1L1QzutC0CyC0FyCyDtB0DyE0A0F0EtC0A0BtBtN0D0Tzu0SyByCyEtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R

FF - user.js: extensions.mysearchdial.AL - 2

FF - user.js: extensions.irmysearch.aflt - irmsd0103

FF - user.js: extensions.irmysearch.instlRef - 

FF - user.js: extensions.irmysearch.cr - 289426412

FF - user.js: extensions.irmysearch.cd - 2XzuyEtN2Y1L1QzutC0CyC0FyCyDtB0DyE0A0F0EtC0A0BtBtN0D0Tzu0SyByCyEtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1N1R

.

- - - - Entfernte verwaiste Registrierungseinträge - - - -

.

HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start

BHO-{11111111-1111-1111-1111-110411151154} - c:\program files (x86)\a2zLyrics-1\a2zLyrics-1-bho64.dll

BHO-{93DBF2BB-A2B3-4683-A92E-57E60751F346} - c:\program files\Conduit\ValueApps\IE\ValueAppsLoader.dll

WebBrowser-{7846AE31-BEA2-438A-8F5E-2D899361656C} - (no file)

AddRemove-RealPlayer 16.0 - c:\program files (x86)\real\realplayer\Update\r1puninst.exe

.

.

.

--------------------- Gesperrte Registrierungsschluessel ---------------------

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{8AD9C840-044E-11D1-B3E9-00805F499D93}]

@DACL=(02 0000)

@="Java Plug-in 10.5.0"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.0_03"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.0_04"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.0_05"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_01"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_01"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_02"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_02"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_03"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_03"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_04"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_04"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_05"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_05"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_06"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_06"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_07"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_07"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_08"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_08"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_09"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_09"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_10"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_10"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_11"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_11"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_12"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_12"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_13"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_13"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_14"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_14"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_15"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_15"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_16"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_16"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_17"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_17"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_18"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_18"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_19"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_19"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_20"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_20"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_21"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_21"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_22"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_22"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_23"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_23"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_24"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_24"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_25"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_25"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_26"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_26"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_27"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_27"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_28"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_28"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_29"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_29"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_30"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.1_30"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.0"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.0"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.0_01"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.0_01"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.0_02"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.0_02"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.0_03"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.0_03"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.0_04"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.0_04"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.1"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.1"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.1_01"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.1_01"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.1_02"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.1_02"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.1_03"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.1_03"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.1_04"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.1_04"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.1_05"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.1_05"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.1_06"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.1_06"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.1_07"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.1_07"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_01"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_01"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_02"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_02"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_03"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_03"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_04"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_04"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_05"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_05"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_06"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_06"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_07"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_07"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_08"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_08"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_09"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_09"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_10"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_10"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_11"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_11"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_12"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_12"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_13"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_13"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_14"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_14"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_15"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_15"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_16"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_16"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_17"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_17"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_18"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_18"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_19"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_19"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_20"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_20"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_21"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_21"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_22"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_22"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_23"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_23"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_24"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_24"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_25"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_25"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_26"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_26"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_27"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_27"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_28"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_28"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_29"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_29"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_30"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_30"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_31"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_31"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_32"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_32"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_33"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_33"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_34"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_34"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_35"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_35"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_36"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_36"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_37"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_37"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_38"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2_38"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.4.2"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_01"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_01"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_01"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_02"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_02"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_02"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_03"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_03"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_03"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_04"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_04"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_04"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_05"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_05"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_05"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_06"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_06"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_06"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_07"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_07"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_07"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_08"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_08"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_08"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_09"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_09"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_09"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_10"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_10"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_10"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_11"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_11"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_11"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_12"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_12"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_12"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_13"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_13"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_13"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_14"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_14"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_14"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_15"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_15"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_15"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_16"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_16"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_16"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_17"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_17"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_17"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_18"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_18"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_18"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_19"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_19"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_19"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_20"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_20"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_20"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_21"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_21"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_21"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_22"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_22"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_22"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_23"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_23"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_23"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_24"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_24"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_24"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_25"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_25"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_25"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_26"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_26"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_26"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_27"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_27"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_27"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_28"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_28"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_28"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_29"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_29"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_29"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_30"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_30"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_30"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_31"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_31"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_31"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_32"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_32"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_32"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_33"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_33"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_33"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_34"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_34"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_34"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_35"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_35"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_35"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_36"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_36"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0_36"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.5.0"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_01"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_01"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_01"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_02"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_02"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_02"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_03"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_03"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_03"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_04"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_04"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_04"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_05"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_05"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_05"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_06"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_06"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_06"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_07"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_07"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_07"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_08"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_08"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_08"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_09"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_09"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_09"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_10"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_10"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_10"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_11"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_11"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_11"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_12"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_12"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_12"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_13"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_13"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_13"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_14"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_14"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_14"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_15"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_15"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_15"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_16"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_16"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_16"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_17"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_17"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_17"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_18"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_18"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_18"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_19"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_19"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_19"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_20"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_20"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_20"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_21"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_21"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_21"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_22"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_22"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_22"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_23"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_23"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_23"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_24"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_24"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_24"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_25"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_25"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_25"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_26"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_26"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_26"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_27"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_27"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_27"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_28"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_28"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_28"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_29"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_29"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_29"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_30"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_30"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_30"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_31"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_31"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_31"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_32"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_32"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_32"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_33"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_33"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0_33"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.6.0"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.7.0"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.7.0"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.7.0"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.7.0_01"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.7.0_01"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.7.0_01"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.7.0_02"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.7.0_02"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.7.0_02"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.7.0_03"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.7.0_03"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.7.0_03"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.7.0_04"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.7.0_04"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.7.0_04"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.7.0_05"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBB}]

@DACL=(02 0000)

@="Java Plug-in 1.7.0_05"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBC}]

@DACL=(02 0000)

@="Java Plug-in 1.7.0_05"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 1.7.0"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}]

@DACL=(02 0000)

@="Java Plug-in 10.5.0"

.

[HKEY_USERS\S-1-5-21-3617237726-889641597-1458545933-1000_Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}]

@DACL=(02 0000)

@="Java Plug-in 1.3.0_02"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_9_900_170_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="FlashBroker"

"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe,-101"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]

"Enabled"=dword:00000001

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_9_900_170_ActiveX.exe"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Shockwave Flash Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]

@="0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]

@="ShockwaveFlash.ShockwaveFlash.11"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="ShockwaveFlash.ShockwaveFlash"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]

@Denied: (A 2) (Everyone)

@="Macromedia Flash Factory Object"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx"

"ThreadingModel"="Apartment"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]

@="FlashFactory.FlashFactory.1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]

@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_9_900_170.ocx, 1"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]

@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]

@="1.0"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]

@="FlashFactory.FlashFactory"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]

@Denied: (A 2) (Everyone)

@="IFlashBroker5"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]

@="{00020424-0000-0000-C000-000000000046}"

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]

@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

"Version"="1.0"

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]

@Denied: (A) (Users)

@Denied: (A) (Everyone)

@Allowed: (B 1 2 3 4 5) (S-1-5-20)

"BlindDial"=dword:00000000

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Zeit der Fertigstellung: 2014-02-03  01:05:39

ComboFix-quarantined-files.txt  2014-02-03 00:05

.

Vor Suchlauf: 11 Verzeichnis(se), 11.098.402.816 Bytes frei

Nach Suchlauf: 15 Verzeichnis(se), 11.233.017.856 Bytes frei

.

- - End Of File - - 21B1A41BCAE71EEAB6FEC3ED3B739C41

A36C5E4F47E84449FF07ED3517B43A31

achso: es kam eine Fehlermeldung von Avira ,obwohl ich es deaktiviert hatte, das eine Änderung der Registry-Datei unterdrückt wird (oder so ähnlicher Wortlaut)

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Er hat nichts gefunden

Code:

Malwarebytes Anti-Rootkit BETA 1.07.0.1009

www.malwarebytes.org
 

Database version: v2014.02.02.05
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.16476

C :: C [administrator]
 

03.02.2014 01:18:37

mbar-log-2014-02-03 (01-18-37).txt
 

Scan type: Quick scan

Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken

Scan options disabled: 

Objects scanned: 309519

Time elapsed: 10 minute(s), 24 second(s)
 

Memory Processes Detected: 0

(No malicious items detected)
 

Memory Modules Detected: 0

(No malicious items detected)
 

Registry Keys Detected: 0

(No malicious items detected)
 

Registry Values Detected: 0

(No malicious items detected)
 

Registry Data Items Detected: 0

(No malicious items detected)
 

Folders Detected: 0

(No malicious items detected)
 

Files Detected: 0

(No malicious items detected)
 

Physical Sectors Detected: 0

(No malicious items detected)
 

(end)

Adware/Junkware/Toolbars entfernen

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

OK, erledigt:

Code:

***** [ Dateien / Ordner ] *****
 

Datei Gelöscht : C:\Users\C\AppData\Roaming\Mozilla\Firefox\Profiles\l4bf69ca.default\searchplugins\Mysearchdial.xml

Datei Gelöscht : C:\Users\C\AppData\Roaming\Mozilla\Firefox\Profiles\l4bf69ca.default\user.js
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}

Schlüssel Gelöscht : HKCU\Software\dsiteproducts

Schlüssel Gelöscht : HKCU\Software\InstallCore
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.16428
 
 

-\\ Mozilla Firefox v26.0 (de)
 

[ Datei : C:\Users\C\AppData\Roaming\Mozilla\Firefox\Profiles\l4bf69ca.default\prefs.js ]
 

Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://start.mysearchdial.com/?f=1&a=irmsd0103&cd=2XzuyEtN2Y1L1QzutC0CyC0FyCyDtB0DyE0A0F0EtC0A0BtBtN0D0Tzu0SyByCyEtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1[...]

Zeile gelöscht : user_pref("browser.search.selectedEngine", "Mysearchdial");

Zeile gelöscht : user_pref("browser.search.defaultenginename", "Mysearchdial");
 

*************************
 

AdwCleaner[R0].txt - [19644 octets] - [30/12/2013 01:51:40]

AdwCleaner[R1].txt - [2464 octets] - [03/02/2014 01:43:48]

AdwCleaner[S0].txt - [17110 octets] - [30/12/2013 01:52:23]

AdwCleaner[S1].txt - [2153 octets] - [03/02/2014 01:44:39]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [2213 octets] ##########

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Thisisu

Version: 6.1.0 (01.07.2014:1)

OS: Windows 7 Home Premium x64

Ran by C on 03.02.2014 at  1:47:16,89

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

~~~ Services
 
 
 

~~~ Registry Values
 

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName

Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL
 
 
 

~~~ Registry Keys
 

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\ApnStub_RASDLG
 
 
 

~~~ Files
 
 
 

~~~ Folders
 

Successfully deleted: [Folder] "C:\Users\C\AppData\Roaming\getrighttogo"
 
 
 

~~~ FireFox
 

Successfully deleted: [Folder] C:\Users\C\AppData\Roaming\mozilla\firefox\profiles\l4bf69ca.default\extensions\staged

Emptied folder: C:\Users\C\AppData\Roaming\mozilla\firefox\profiles\l4bf69ca.default\minidumps [6 files]
 
 
 

~~~ Event Viewer Logs were cleared
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 03.02.2014 at  1:51:39,83

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

FRST Logfile:

Code:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04

Ran by C (administrator) on C on 03-02-2014 01:53:24

Running from C:\Users\C\Desktop

Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard

Internet Explorer Version 11

Boot Mode: Normal
 
 
 

==================== Processes (Whitelisted) =================
 

(Enigma Software Group USA, LLC.) C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe

(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe

(Dropbox, Inc.) C:\Users\C\AppData\Roaming\Dropbox\bin\Dropbox.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe

(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe

(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe

(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe

(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
 
 

==================== Registry (Whitelisted) ==================
 

HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)

HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)

HKLM-x32\...\Run: [AppleSyncNotifier] - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2012-02-23] (Apple Inc.)

HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-01-20] (Apple Inc.)

HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-18] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)

HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)

HKLM-x32\...\Run: [TkBellExe] - c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2014-01-07] (RealNetworks, Inc.)

HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-01-20] (Apple Inc.)

Startup: C:\Users\C\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk

ShortcutTarget: Dropbox.lnk -> C:\Users\C\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
 

==================== Internet (Whitelisted) ====================
 

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://web.de/

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

URLSearchHook: HKLM-x32 - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe

SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = 

SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search

BHO: a2zLyrics-1 - {11111111-1111-1111-1111-110411151154} - C:\Program Files (x86)\a2zLyrics-1\a2zLyrics-1-bho64.dll No File

BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO: ValueApps - {93DBF2BB-A2B3-4683-A92E-57E60751F346} - C:\Program Files\Conduit\ValueApps\IE\ValueAppsLoader.dll No File

BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)

BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)

BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

Toolbar: HKCU - No Name - {7846AE31-BEA2-438A-8F5E-2D899361656C} -  No File

DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} -  No File

Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
 

FireFox:

========

FF ProfilePath: C:\Users\C\AppData\Roaming\Mozilla\Firefox\Profiles\l4bf69ca.default

FF NetworkProxy: "type", 0

FF Keyword.URL: user_pref("keyword.URL", "");

FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()

FF Plugin: @java.com/DTPlugin,version=10.5.0 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.5.0 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()

FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)

FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)

FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)

FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)

FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)

FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 - C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll No File

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)

FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll (RealPlayer)

FF SearchPlugin: C:\Users\C\AppData\Roaming\Mozilla\Firefox\Profiles\l4bf69ca.default\searchplugins\searchplugins-backup

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml

FF Extension: Garmin Communicator - C:\Users\C\AppData\Roaming\Mozilla\Firefox\Profiles\l4bf69ca.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2014-01-01]

FF Extension: Greasemonkey - C:\Users\C\AppData\Roaming\Mozilla\Firefox\Profiles\l4bf69ca.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2013-10-06]

FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-12-22]

FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} [2013-12-22]

FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext

FF HKLM-x32\...\Firefox\Extensions: [ext@flash-Enhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff

FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\

FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\ []

FF HKCU\...\Firefox\Extensions: [{9A207F60-3F1C-4ED0-972D-0A4CDFBFF803}] - C:\Users\C\AppData\Roaming\13001.012
 

==================== Services (Whitelisted) =================
 

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-18] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-26] (Avira Operations GmbH & Co. KG)

R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()

R2 SpyHunter 4 Service; C:\Program Files\Enigma Software Group\SpyHunter\SH4Service.exe [1024384 2013-01-14] (Enigma Software Group USA, LLC.)
 

==================== Drivers (Whitelisted) ====================
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-18] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-18] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-26] (Avira Operations GmbH & Co. KG)

S3 esgiguard; C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [13088 2011-03-02] ()

S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2012-06-22] ()

R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)

S3 catchme; \??\C:\ComboFix\catchme.sys [x]
 

==================== NetSvcs (Whitelisted) ===================
 
 

==================== One Month Created Files and Folders ========
 

2014-02-03 01:51 - 2014-02-03 01:51 - 00001424 _____ () C:\Users\C\Desktop\JRT.txt

2014-02-03 01:47 - 2014-02-03 01:47 - 00000000 ____D () C:\Windows\ERUNT

2014-02-03 01:42 - 2014-02-03 01:42 - 01037068 _____ (Thisisu) C:\Users\C\Desktop\JRT.exe

2014-02-03 01:41 - 2014-02-03 01:41 - 01166132 _____ () C:\Users\C\Desktop\adwcleaner.exe

2014-02-03 01:41 - 2014-02-03 01:41 - 01037068 _____ (Thisisu) C:\Users\C\Downloads\JRT.exe

2014-02-03 01:18 - 2014-02-03 01:31 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2014-02-03 01:18 - 2014-02-03 01:18 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-02-03 01:17 - 2014-02-03 01:31 - 00000000 ____D () C:\Users\C\Desktop\mbar

2014-02-03 01:17 - 2014-02-03 01:17 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-02-03 01:16 - 2014-02-03 01:16 - 12589848 _____ (Malwarebytes Corp.) C:\Users\C\Desktop\mbar-1.07.0.1009.exe

2014-02-03 01:05 - 2014-02-03 01:05 - 00095318 _____ () C:\ComboFix.txt

2014-02-03 00:53 - 2014-02-03 01:05 - 00000000 ____D () C:\Qoobox

2014-02-03 00:53 - 2014-02-03 01:04 - 00000000 ____D () C:\Windows\erdnt

2014-02-03 00:53 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe

2014-02-03 00:53 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe

2014-02-03 00:53 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe

2014-02-03 00:53 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe

2014-02-03 00:53 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe

2014-02-03 00:53 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe

2014-02-03 00:53 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe

2014-02-03 00:53 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe

2014-02-03 00:46 - 2014-02-03 00:46 - 05179159 ____R (Swearware) C:\Users\C\Desktop\ComboFix.exe

2014-02-02 22:56 - 2014-02-03 01:53 - 00013764 _____ () C:\Users\C\Desktop\FRST.txt

2014-02-02 22:56 - 2014-02-03 01:53 - 00000000 ____D () C:\FRST

2014-02-02 22:56 - 2014-02-02 23:17 - 00025869 _____ () C:\Users\C\Desktop\Addition.txt

2014-02-02 22:53 - 2014-02-02 22:53 - 02080256 _____ (Farbar) C:\Users\C\Desktop\FRST64.exe

2014-02-02 22:52 - 2014-02-02 22:52 - 00000045 _____ () C:\Users\C\AppData\Roaming\WB.CFG

2014-02-02 22:52 - 2014-02-02 22:52 - 00000000 ____D () C:\Users\C\AppData\Roaming\DigitalSites

2014-02-01 22:32 - 2014-02-01 22:33 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-02-01 22:32 - 2014-02-01 22:33 - 00000000 ____D () C:\Program Files\iTunes

2014-02-01 22:32 - 2014-02-01 22:33 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-02-01 22:32 - 2014-02-01 22:32 - 00000000 ____D () C:\Program Files\iPod

2014-01-16 20:03 - 2014-01-16 20:03 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_netaapl64_01009.Wdf

2014-01-14 23:12 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys

2014-01-14 23:12 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys

2014-01-14 23:12 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys

2014-01-14 23:12 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys

2014-01-14 23:12 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys

2014-01-14 23:12 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys

2014-01-14 23:12 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys

2014-01-14 23:12 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys

2014-01-14 23:12 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2014-01-12 22:54 - 2014-01-12 22:55 - 00009216 ___SH () C:\Users\C\Thumbs.db

2014-01-09 00:00 - 2014-01-09 00:00 - 01214312 _____ () C:\Windows\Minidump\010914-28563-01.dmp

2014-01-07 01:19 - 2014-01-07 01:19 - 00003252 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3617237726-889641597-1458545933-1000

2014-01-07 01:18 - 2014-01-07 01:19 - 00003368 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3617237726-889641597-1458545933-1000

2014-01-07 01:18 - 2014-01-07 01:18 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00272896 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00000000 ____D () C:\Users\C\AppData\Roaming\RealNetworks

2014-01-07 01:18 - 2014-01-07 01:18 - 00000000 ____D () C:\ProgramData\RealNetworks

2014-01-07 01:18 - 2014-01-07 01:18 - 00000000 ____D () C:\Program Files (x86)\RealNetworks

2014-01-07 01:07 - 2014-01-07 01:07 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-01-07 01:07 - 2014-01-07 01:07 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-01-07 01:07 - 2014-01-07 01:07 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-01-07 01:07 - 2014-01-07 01:06 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-01-07 01:06 - 2014-01-07 01:06 - 00000000 ____D () C:\Program Files (x86)\Java

2014-01-04 00:39 - 2014-01-04 00:39 - 00000000 ____D () C:\Users\C\Desktop\Wohnung Rodenbach
 

==================== One Month Modified Files and Folders =======
 

2014-02-03 01:54 - 2014-02-02 22:56 - 00013764 _____ () C:\Users\C\Desktop\FRST.txt

2014-02-03 01:54 - 2009-07-14 05:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2014-02-03 01:54 - 2009-07-14 05:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2014-02-03 01:53 - 2014-02-02 22:56 - 00000000 ____D () C:\FRST

2014-02-03 01:52 - 2009-07-14 18:58 - 00657660 _____ () C:\Windows\system32\perfh007.dat

2014-02-03 01:52 - 2009-07-14 18:58 - 00131032 _____ () C:\Windows\system32\perfc007.dat

2014-02-03 01:52 - 2009-07-14 06:13 - 01507406 _____ () C:\Windows\system32\PerfStringBackup.INI

2014-02-03 01:51 - 2014-02-03 01:51 - 00001424 _____ () C:\Users\C\Desktop\JRT.txt

2014-02-03 01:47 - 2014-02-03 01:47 - 00000000 ____D () C:\Windows\ERUNT

2014-02-03 01:46 - 2012-02-12 23:19 - 00000000 ___RD () C:\Users\C\Dropbox

2014-02-03 01:46 - 2012-02-12 22:25 - 00000000 ____D () C:\Users\C\AppData\Roaming\Dropbox

2014-02-03 01:46 - 2011-01-11 17:58 - 00001122 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2014-02-03 01:45 - 2013-10-05 09:32 - 00026336 _____ () C:\Windows\PFRO.log

2014-02-03 01:45 - 2013-10-05 09:32 - 00009319 _____ () C:\Windows\setupact.log

2014-02-03 01:45 - 2011-12-19 21:30 - 00065536 _____ () C:\Windows\system32\Ikeext.etl

2014-02-03 01:45 - 2010-09-04 12:51 - 00000000 ____D () C:\ProgramData\NVIDIA

2014-02-03 01:45 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT

2014-02-03 01:44 - 2013-12-30 01:51 - 00000000 ____D () C:\AdwCleaner

2014-02-03 01:44 - 2011-03-24 01:35 - 01836004 _____ () C:\Windows\WindowsUpdate.log

2014-02-03 01:42 - 2014-02-03 01:42 - 01037068 _____ (Thisisu) C:\Users\C\Desktop\JRT.exe

2014-02-03 01:41 - 2014-02-03 01:41 - 01166132 _____ () C:\Users\C\Desktop\adwcleaner.exe

2014-02-03 01:41 - 2014-02-03 01:41 - 01037068 _____ (Thisisu) C:\Users\C\Downloads\JRT.exe

2014-02-03 01:39 - 2011-01-11 17:58 - 00001126 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2014-02-03 01:31 - 2014-02-03 01:18 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2014-02-03 01:31 - 2014-02-03 01:17 - 00000000 ____D () C:\Users\C\Desktop\mbar

2014-02-03 01:18 - 2014-02-03 01:18 - 00119000 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2014-02-03 01:18 - 2014-01-02 11:46 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job

2014-02-03 01:17 - 2014-02-03 01:17 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2014-02-03 01:16 - 2014-02-03 01:16 - 12589848 _____ (Malwarebytes Corp.) C:\Users\C\Desktop\mbar-1.07.0.1009.exe

2014-02-03 01:05 - 2014-02-03 01:05 - 00095318 _____ () C:\ComboFix.txt

2014-02-03 01:05 - 2014-02-03 00:53 - 00000000 ____D () C:\Qoobox

2014-02-03 01:05 - 2009-07-14 04:20 - 00000000 ___RD () C:\Users\Default

2014-02-03 01:04 - 2014-02-03 00:53 - 00000000 ____D () C:\Windows\erdnt

2014-02-03 01:03 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini

2014-02-03 01:02 - 2010-09-03 23:13 - 00000000 ____D () C:\Users\C

2014-02-03 00:46 - 2014-02-03 00:46 - 05179159 ____R (Swearware) C:\Users\C\Desktop\ComboFix.exe

2014-02-02 23:35 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing

2014-02-02 23:17 - 2014-02-02 22:56 - 00025869 _____ () C:\Users\C\Desktop\Addition.txt

2014-02-02 22:53 - 2014-02-02 22:53 - 02080256 _____ (Farbar) C:\Users\C\Desktop\FRST64.exe

2014-02-02 22:52 - 2014-02-02 22:52 - 00000045 _____ () C:\Users\C\AppData\Roaming\WB.CFG

2014-02-02 22:52 - 2014-02-02 22:52 - 00000000 ____D () C:\Users\C\AppData\Roaming\DigitalSites

2014-02-01 22:33 - 2014-02-01 22:32 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69

2014-02-01 22:33 - 2014-02-01 22:32 - 00000000 ____D () C:\Program Files\iTunes

2014-02-01 22:33 - 2014-02-01 22:32 - 00000000 ____D () C:\Program Files (x86)\iTunes

2014-02-01 22:33 - 2012-09-28 14:47 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk

2014-02-01 22:32 - 2014-02-01 22:32 - 00000000 ____D () C:\Program Files\iPod

2014-02-01 22:21 - 2010-09-04 17:04 - 00000000 ____D () C:\ProgramData\Apple

2014-01-19 13:58 - 2013-01-01 19:30 - 00000000 ____D () C:\Users\C\Documents\My Digital Editions

2014-01-19 13:56 - 2013-01-01 19:40 - 00000000 ____D () C:\Users\C\Desktop\eBook

2014-01-19 13:55 - 2013-01-01 14:25 - 00000000 ____D () C:\Users\C\Documents\Calibre Bibliothek

2014-01-17 11:13 - 2013-06-02 23:39 - 00001049 _____ () C:\Users\C\Desktop\Dropbox.lnk

2014-01-17 11:13 - 2013-06-02 23:39 - 00000000 ____D () C:\Users\C\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2014-01-17 11:13 - 2010-09-03 23:14 - 00000000 ___RD () C:\Users\C\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

2014-01-16 20:03 - 2014-01-16 20:03 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_netaapl64_01009.Wdf

2014-01-15 09:40 - 2013-10-27 18:13 - 00000000 ____D () C:\Users\C\Desktop\Hubert

2014-01-15 09:14 - 2009-07-14 05:45 - 00422120 _____ () C:\Windows\system32\FNTCACHE.DAT

2014-01-15 09:12 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

2014-01-15 01:14 - 2010-09-05 13:21 - 00000000 ____D () C:\ProgramData\Microsoft Help

2014-01-15 01:13 - 2013-08-14 21:09 - 00000000 ____D () C:\Windows\system32\MRT

2014-01-15 01:12 - 2010-10-05 07:13 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2014-01-12 22:55 - 2014-01-12 22:54 - 00009216 ___SH () C:\Users\C\Thumbs.db

2014-01-12 20:59 - 2013-01-01 19:24 - 00007606 _____ () C:\Users\C\AppData\Local\resmon.resmoncfg

2014-01-11 09:40 - 2010-09-04 14:10 - 00000000 ____D () C:\Users\C\Desktop\Eigene Dateien

2014-01-10 00:23 - 2013-12-24 10:11 - 00000000 ____D () C:\Users\C\Desktop\Fotos

2014-01-09 00:00 - 2014-01-09 00:00 - 01214312 _____ () C:\Windows\Minidump\010914-28563-01.dmp

2014-01-09 00:00 - 2013-10-06 11:43 - 00000000 ____D () C:\Windows\Minidump

2014-01-07 01:19 - 2014-01-07 01:19 - 00003252 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3617237726-889641597-1458545933-1000

2014-01-07 01:19 - 2014-01-07 01:18 - 00003368 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3617237726-889641597-1458545933-1000

2014-01-07 01:18 - 2014-01-07 01:18 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00272896 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\rmoc3260.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5016.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\SysWOW64\pndx5032.dll

2014-01-07 01:18 - 2014-01-07 01:18 - 00000000 ____D () C:\Users\C\AppData\Roaming\RealNetworks

2014-01-07 01:18 - 2014-01-07 01:18 - 00000000 ____D () C:\ProgramData\RealNetworks

2014-01-07 01:18 - 2014-01-07 01:18 - 00000000 ____D () C:\Program Files (x86)\RealNetworks

2014-01-07 01:18 - 2011-07-24 23:36 - 00000000 ____D () C:\Users\C\AppData\Roaming\Real

2014-01-07 01:18 - 2011-07-24 23:36 - 00000000 ____D () C:\ProgramData\Real

2014-01-07 01:18 - 2011-07-24 23:36 - 00000000 ____D () C:\Program Files (x86)\Real

2014-01-07 01:11 - 2014-01-02 11:46 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2014-01-07 01:11 - 2014-01-02 11:46 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2014-01-07 01:11 - 2014-01-02 11:46 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater

2014-01-07 01:11 - 2010-09-04 13:26 - 00000000 ____D () C:\Users\C\AppData\Local\Adobe

2014-01-07 01:07 - 2014-01-07 01:07 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe

2014-01-07 01:07 - 2014-01-07 01:07 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe

2014-01-07 01:07 - 2014-01-07 01:07 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

2014-01-07 01:07 - 2013-10-06 10:18 - 00000000 ____D () C:\ProgramData\Oracle

2014-01-07 01:06 - 2014-01-07 01:07 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe

2014-01-07 01:06 - 2014-01-07 01:06 - 00000000 ____D () C:\Program Files (x86)\Java

2014-01-04 00:39 - 2014-01-04 00:39 - 00000000 ____D () C:\Users\C\Desktop\Wohnung Rodenbach
 

Some content of TEMP:

====================

C:\Users\C\AppData\Local\Temp\avgnt.exe

C:\Users\C\AppData\Local\Temp\Quarantine.exe
 
 

==================== Bamital & volsnap Check =================
 

C:\Windows\System32\winlogon.exe => MD5 is legit

C:\Windows\System32\wininit.exe => MD5 is legit

C:\Windows\SysWOW64\wininit.exe => MD5 is legit

C:\Windows\explorer.exe => MD5 is legit

C:\Windows\SysWOW64\explorer.exe => MD5 is legit

C:\Windows\System32\svchost.exe => MD5 is legit

C:\Windows\SysWOW64\svchost.exe => MD5 is legit

C:\Windows\System32\services.exe => MD5 is legit

C:\Windows\System32\User32.dll => MD5 is legit

C:\Windows\SysWOW64\User32.dll => MD5 is legit

C:\Windows\System32\userinit.exe => MD5 is legit

C:\Windows\SysWOW64\userinit.exe => MD5 is legit

C:\Windows\System32\rpcss.dll => MD5 is legit

C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
 
 

LastRegBack: 2014-02-02 11:43
 

==================== End Of Log ============================

--- --- ---

Log vom adwCleaner ist unvollständig

OK...sorry - hier nochmal

Code:

# AdwCleaner v3.018 - Bericht erstellt am 03/02/2014 um 01:44:39

# Updated 28/01/2014 von Xplode

# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)

# Benutzername : C - C

# Gestartet von : C:\Users\C\Desktop\adwcleaner.exe

# Option : Löschen
 

***** [ Dienste ] *****
 
 

***** [ Dateien / Ordner ] *****
 

Datei Gelöscht : C:\Users\C\AppData\Roaming\Mozilla\Firefox\Profiles\l4bf69ca.default\searchplugins\Mysearchdial.xml

Datei Gelöscht : C:\Users\C\AppData\Roaming\Mozilla\Firefox\Profiles\l4bf69ca.default\user.js
 

***** [ Verknüpfungen ] *****
 
 

***** [ Registrierungsdatenbank ] *****
 

Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{898EA8C8-E7FF-479B-8935-AEC46303B9E5}

Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}

Schlüssel Gelöscht : HKCU\Software\dsiteproducts

Schlüssel Gelöscht : HKCU\Software\InstallCore
 

***** [ Browser ] *****
 

-\\ Internet Explorer v11.0.9600.16428
 
 

-\\ Mozilla Firefox v26.0 (de)
 

[ Datei : C:\Users\C\AppData\Roaming\Mozilla\Firefox\Profiles\l4bf69ca.default\prefs.js ]
 

Zeile gelöscht : user_pref("browser.startup.homepage", "hxxp://start.mysearchdial.com/?f=1&a=irmsd0103&cd=2XzuyEtN2Y1L1QzutC0CyC0FyCyDtB0DyE0A0F0EtC0A0BtBtN0D0Tzu0SyByCyEtN1L2XzutBtFtBtFtCyDtFtCyCtAtCtN1L1CzutBtAtDtC1[...]

Zeile gelöscht : user_pref("browser.search.selectedEngine", "Mysearchdial");

Zeile gelöscht : user_pref("browser.search.defaultenginename", "Mysearchdial");
 

*************************
 

AdwCleaner[R0].txt - [19644 octets] - [30/12/2013 01:51:40]

AdwCleaner[R1].txt - [2464 octets] - [03/02/2014 01:43:48]

AdwCleaner[S0].txt - [17110 octets] - [30/12/2013 01:52:23]

AdwCleaner[S1].txt - [2153 octets] - [03/02/2014 01:44:39]
 

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [2213 octets] ##########

Ich habe gesehen es gibt auch noch eine Log-Datei mit der Endung R1, wird diese auch benötigt?

Sieht ok aus. Wir sollten fast durch sein. Mach bitte zur Kontrolle einen Quickscan mit Malwarebytes Anti-Malware (MBAM)

Hinweis: Denk bitte vorher daran, Malwarebytes Anti-Malware über den Updatebutton zu aktualisieren!

Anschließend über den OnlineScanner von ESET eine zusätzliche Meinung zu holen ist auch nicht verkehrt:

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Hallo,

also der erste Scan ist hier:

Code:

Malwarebytes Anti-Malware 1.75.0.1300

www.malwarebytes.org
 

Datenbank Version: v2014.02.03.05
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.16476

C :: C [Administrator]
 

03.02.2014 19:08:09

mbam-log-2014-02-03 (19-08-09).txt
 

Art des Suchlaufs: Quick-Scan

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 287834

Laufzeit: 4 Minute(n), 40 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 4

HKCR\AppID\{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8} (PUP.Optional.MySearchDial.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCR\CLSID\{E5A7A645-8318-4895-B85C-EDC606B80DB6} (PUP.Optional.DynConIE.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{93DBF2BB-A2B3-4683-A92E-57E60751F346} (PUP.Optional.ValueApps.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

HKCU\Software\AmiExt\IE plugin (PUP.Optional.Amonetize.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Verzeichnisse: 2

C:\Users\C\AppData\Roaming\newnext.me (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\C\AppData\Roaming\newnext.me\cache (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

Infizierte Dateien: 5

C:\Users\C\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\C\AppData\Local\genienext\nengine.dll (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\C\AppData\Roaming\newnext.me\nengine.cookie (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\C\AppData\Roaming\newnext.me\cache\id.txt (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.

C:\Users\C\AppData\Roaming\newnext.me\cache\spark.bin (PUP.Optional.NextLive.A) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

(Ende)

Der Scan von Eset läuft jetzt seit drei Stunden und wird sicher noch die Nacht durchnudeln...
Ich schicke das Logfile sobald er fertig ist.
Allerdings hat er schon zwei Funde und unten steht " a veriant of Win32/Skintrim.LS trojan"

:heulen::heulen:

Sooo...
hat doch länger gedauert:

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=8

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6920

# api_version=3.0.2

# EOSSerial=88eabebe14394f43bda7672a194d0014

# engine=16925

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=false

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2014-02-04 05:49:53

# local_time=2014-02-04 06:49:53 (+0100, Mitteleuropäische Zeit)

# country="Germany"

# lang=1033

# osver=6.1.7601 NT Service Pack 1

# compatibility_mode=1799 16775165 100 96 53733 137259613 46512 0

# compatibility_mode=5893 16776573 100 94 0 143122843 0 0

# scanned=246517

# found=22

# cleaned=0

# scan_time=38908

sh=D540810282E74F3CC947D8C57803B80879AE309B ft=1 fh=e43278fce584a1aa vn="a variant of Win32/Skintrim.LS trojan" ac=I fn="C:\AdwCleaner\Quarantine\C\Users\Christoph Ochs\AppData\Local\lollipop\Lollipop.exe.vir"

sh=03F21B60DF37204FD19D16A592E51B1F77C6DF84 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="C:\Users\Christoph Ochs\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\32\39af6520-237a8fa2"

sh=59E27448E4D3125808DFA2B5D2D9C51DA876429A ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="D:\CHRISTOPHOCHS\Backup Set 2013-03-17 220710\Backup Files 2013-03-17 220710\Backup files 15.zip"

sh=174393C8B7EC5E15A5CD1DECD81C633357D104B4 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="D:\CHRISTOPHOCHS\Backup Set 2013-03-17 220710\Backup Files 2013-03-24 230251\Backup files 4.zip"

sh=44DDCD7E775909242109EAA881FE79075E4F1543 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="D:\CHRISTOPHOCHS\Backup Set 2013-04-14 190000\Backup Files 2013-04-14 190000\Backup files 18.zip"

sh=C761CB227A15B662FFA2708320C96DC5D2E5215B ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="D:\CHRISTOPHOCHS\Backup Set 2013-04-14 190000\Backup Files 2013-05-19 190001\Backup files 1.zip"

sh=68F8A055A4AB53A28CFE5EE216C220F2F82B58FA ft=0 fh=0000000000000000 vn="a variant of Win32/Kryptik.BAWI trojan" ac=I fn="D:\CHRISTOPHOCHS\Backup Set 2013-05-26 190001\Backup Files 2013-05-26 190001\Backup files 10.zip"

sh=69280C93888C14757D1C5BBE6DC07954CF074ACA ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="D:\CHRISTOPHOCHS\Backup Set 2013-05-26 190001\Backup Files 2013-05-26 190001\Backup files 30.zip"

sh=02F1C46256B71786B2DF25840E5775E83DE72152 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="D:\CHRISTOPHOCHS\Backup Set 2013-05-26 190001\Backup Files 2013-06-09 190001\Backup files 1.zip"

sh=30F9524CD55FC56E4F3EE1D4DEA2F31BF6A0E28D ft=0 fh=0000000000000000 vn="a variant of Win32/Kryptik.BGND trojan" ac=I fn="D:\CHRISTOPHOCHS\Backup Set 2013-07-07 200239\Backup Files 2013-07-07 200239\Backup files 11.zip"

sh=12783BDA8FF21EAA912B725862E08CF5767CE6EC ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="D:\CHRISTOPHOCHS\Backup Set 2013-07-07 200239\Backup Files 2013-07-07 200239\Backup files 30.zip"

sh=65C67020164DC245A2F3361499DFF0BDCD9EA86F ft=0 fh=0000000000000000 vn="a variant of Win32/Kryptik.BGND trojan" ac=I fn="D:\CHRISTOPHOCHS\Backup Set 2013-08-25 190001\Backup Files 2013-09-01 190001\Backup files 6.zip"

sh=E74344901E050407F1C3CD3FE0BD2958C360367B ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="D:\CHRISTOPHOCHS\Backup Set 2013-08-25 190001\Backup Files 2013-09-08 190001\Backup files 12.zip"

sh=7A920E5E8B573B7903D7EC956BEBE5CFD17EC6AF ft=0 fh=0000000000000000 vn="a variant of Win32/Kryptik.BGND trojan" ac=I fn="E:\CHRISTOPHOCHS\Backup Set 2013-09-08 225352\Backup Files 2013-09-08 225352\Backup files 11.zip"

sh=B7493581860CFF88AF7EF5819E640B0889C0F88C ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="E:\CHRISTOPHOCHS\Backup Set 2013-09-08 225352\Backup Files 2013-09-08 225352\Backup files 28.zip"

sh=B379020A6365CD0725577E18EE7F4E69F653ED8C ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="E:\CHRISTOPHOCHS\Backup Set 2013-10-13 190001\Backup Files 2013-10-13 190001\Backup files 28.zip"

sh=1A215588DAC3CE25D9B55481E6522AE22502CBD9 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="E:\CHRISTOPHOCHS\Backup Set 2013-10-13 190001\Backup Files 2013-11-10 190001\Backup files 1.zip"

sh=E6EA8FBA5FD99A2BCC798E808DE6046767CE01E6 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="E:\CHRISTOPHOCHS\Backup Set 2013-11-17 190001\Backup Files 2013-11-17 190001\Backup files 28.zip"

sh=79C2CFAD41B60CB3CDF182E60BD028755F4B71EF ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="E:\CHRISTOPHOCHS\Backup Set 2013-12-08 195000\Backup Files 2013-12-08 195000\Backup files 29.zip"

sh=358163CC2C88867C664D51E62040AF0554C374D3 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="E:\CHRISTOPHOCHS\Backup Set 2014-01-12 190001\Backup Files 2014-01-12 190001\Backup files 29.zip"

sh=DF26D1DB42D49D979D094B3192A20364F0D65C71 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="E:\CHRISTOPHOCHS\Backup Set 2014-01-12 190001\Backup Files 2014-01-19 190001\Backup files 32.zip"

sh=565D1BE5DA52B7FB18B8DF7E1AAE6F750E8ABA42 ft=0 fh=0000000000000000 vn="multiple threats" ac=I fn="E:\CHRISTOPHOCHS\Backup Set 2014-02-01 212017\Backup Files 2014-02-01 212017\Backup files 32.zip"

Nur Überreste. Die Funde in den tw. sehr alten Backup-Sets kannst du ignorieren, alte Backup-Sets auch mal löschen.

TFC - Temp File Cleaner

Lade dir

TFC (TempFileCleaner von Oldtimer) herunter und speichere es auf den Desktop.

Öffne die TFC.exe.
Vista und Win 7 User mit Rechtsklick "als Administrator starten".
Schließe alle anderen Programme.
Drücke auf den Button Start.
Falls du zu einem Neustart aufgefordert wirst, bestätige diesen.

Sieht soweit ok aus :daumenhoc

Wegen Cookies und anderer Dinge im Web: Um die Pest von vornherein zu blocken (also TrackingCookies, Werbebanner etc.) müsstest du dir mal sowas wie MVPS Hosts File anschauen => Blocking Unwanted Parasites with a Hosts File - sinnvollerweise solltest du alle 4 Wochen mal bei MVPS nachsehen, ob er eine neue Hosts Datei herausgebracht hat.

Info: Cookies sind keine Schädlinge direkt, aber es besteht die Gefahr der missbräuchlichen Verwendung (eindeutige Wiedererkennung zB für gezielte Werbung o.ä. => HTTP-Cookie )

Ansonsten gibt es noch gute Cookiemanager, Erweiterungen für den Firefox zB wäre da CookieCuller
Wenn du aber damit leben kannst, dich bei jeder Browsersession überall neu einzuloggen (zB Facebook, Ebay, GMX, oder auch Trojaner-Board) dann stell den Browser einfach so ein, dass einfach alles beim Beenden des Browser inkl. Cookies gelöscht wird.

Ist dein System nun wieder in Ordnung oder gibt's noch andere Funde oder Probleme?

Uff...da bin ich erst mal erleichtert.
Auf alle Fälle ein dickes Danke für die Hilfe.
Ich werde es jetzt mal beobachten und falls noch etwas auftritt mich nochmal melden.

:daumenhoc:daumenhoc:daumenhoc

Dann wären wir durch! :daumenhoc

Falls du noch Lob oder Kritik loswerden möchtest => Lob, Kritik und Wünsche - Trojaner-Board

Die Programme, die hier zum Einsatz kamen, können alle deinstalliert werden.

Helfen kann dir dabei delfix:

Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Bitte abschließend noch die Updates prüfen, unten mein Leitfaden dazu. Um in Zukunft die Aktualität der installierten Programme besser im Überblick zu halten, kannst du zB Secunia PSI verwenden.
Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern.

Microsoftupdate
Windows XP:Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren.
Windows Vista/7: Start, Systemsteuerung, Windows-Update

PDF-Reader aktualisieren
Ein veralteter AdobeReader stellt ein großes Sicherheitsrisiko dar. Du solltest daher besser alte Versionen vom AdobeReader über Systemsteuerung => Software bzw. Programme und Funktionen deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. (falls du AdobeReader installiert hast)

Ich empfehle einen alternativen PDF-Reader wie PDF Xchange Viewer, SumatraPDF oder Foxit PDF Reader, die sind sehr viel schlanker und flotter als der AdobeReader.

Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers:
Prüfen => Adobe - Flash Player
Downloadlinks findest du hier => Browsers and Plugins - FilePony.de

Alle Plugins im Firefox-Browser kannst du auch ganz einfach hier auf Aktualität prüfen => https://www.mozilla.org/de/plugincheck

Natürlich auch darauf achten, dass andere installierte Browser wie zB Firefox, Opera oder Chrome aktuell sind.

Java-Update
Veraltete Java-Installationen sind ein großes Sicherheitsrisiko, daher solltest Du die alten Versionen deinstallieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software (bzw. Programme und Funktionen) und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.