Trojaner-Board
Seite 1 von 5 1 23 Letzte »
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Popups und Werbung in Internet Explorer 11 nehmen plötzlich überhand (https://www.trojaner-board.de/149705-popups-werbung-internet-explorer-11-nehmen-ploetzlich-ueberhand.html)

Frusti 13.02.2014 09:04
Popups und Werbung in Internet Explorer 11 nehmen plötzlich überhand
 
Guten Tag,

mein Problem: Ich kann mich der Popups und der Werbung bei IE 11 "nicht mehr erwehren", und würde mich freuen, wenn ich hier eine Hilfe bekomme.
Ich habe das Gefühl, daß mit Beginn des Jahres die Werbung im Internet aggressiver geworden ist!
Mit der "Technik" bin ich eines PCs nicht so sehr vertraut, deshalb kann ich mir für dieses Problem nur sehr bedingt selber helfen.

Ich habe:
- Windows 7 (64 bit)
- Internet Explorer 11

Getan habe ich bisher:
1. Abschalten der Popups bei IE / Extras / Popupblocker
2. Bei IE / Extras / Internetoptionen / Datenschutz / Popupblocker. Dort: Einstellungen --> Blockierungsstufe: Hoch
3. (auf Anraten eines Freundes) im Registrierungsschlüssel:
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT"
statt "1" eine "0" gesetzt. (Merkwürdigerweise war genau der gleiche Schlüssel zwei Mal vorhanden!?)

Mit diesen Angaben möchte ich es erst mal belassen in der Hoffnung, daß ich hier einen Expertenrat erhalten kann. - Ich würde mich freuen.

Gruß
Frusti

Aneri 13.02.2014 09:15
:hallo:

Eine Bereinigung ist mitunter mit viel Arbeit für Dich verbunden.
  • Bitte arbeite alle Schritte der Reihe nach ab.
  • Lese die Anleitungen sorgfältig. Sollte es Probleme geben, bitte stoppen und hier so gut es geht beschreiben.
  • Nur Scanns durchführen zu denen Du von einem Helfer aufgefordert wirst.
  • Bitte kein Crossposting ( posten in mehreren Foren).
  • Installiere oder Deinstalliere während der Bereinigung keine Software ausser Du wurdest dazu aufgefordert.
  • Lese Dir die Anleitung zuerst vollständig durch. Sollte etwas unklar sein, frage bevor Du beginnst.
  • Poste die Logfiles direkt in deinen Thread. Nicht anhängen ausser ich fordere Dich dazu auf. Erschwert mir nämlich das auswerten.

Hinweis: Ich kann Dir niemals eine Garantie geben, dass ich auch alles finde. Eine Formatierung ist meist der Schnellere und immer der sicherste Weg.
Solltest Du Dich für eine Bereinigung entscheiden, arbeite solange mit, bis dir jemand vom Team sagt, dass Du clean bist.

Vista und Win7 User
Alle Tools mit Rechtsklick "als Administrator ausführen" starten.

Schritt 1

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)


Frusti 13.02.2014 09:49
Hallo,
vielen Dank für Deine Bereitschaft, mir helfen zu wollen.

Hier die beiden Auswertungen, ( ich hoffe, es kommt alles richtig an):



FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt)[/B] (x64) Version: 12-02-2014 01
Ran by Besitzer (administrator) on BESITZER-PC on 13-02-2014 09:32:29
Running from C:\Users\Besitzer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CA88SO2K
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forums

==================== Processes (Whitelisted) =================

(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
() C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
() C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
( ) C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\AppIntegrator64.exe
() C:\Users\Besitzer\AppData\Local\HD Streamer\crxmon.exe
() C:\Program Files (x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(VER_COMPANY_NAME) C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe
(VER_COMPANY_NAME) C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbrmon64.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
() C:\Program Files (x86)\Universal Updater\UpdaterService.exe
(COMPANYVERS_NAME) C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbarsvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\swriter.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\soffice.exe
(Apache Software Foundation) C:\Program Files (x86)\OpenOffice 4\program\soffice.bin
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_12_0_0_44_ActiveX.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Mail\wlmail.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
() C:\Program Files (x86)\HD Streamer\BackgroundHost64.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [WrtMon.exe] - C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [20480 2006-09-20] ()
HKLM\...\Run: [VideoDownloadConverter Home Page Guard 64 bit] - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\AppIntegrator64.exe [485448 2014-02-02] ( )
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [TrueImageMonitor.exe] - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5078416 2009-08-28] (Acronis)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [VideoDownloadConverter EPM Support] - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zmedint.exe [12872 2014-02-02] (Mindspark Interactive Network, Inc.)
HKLM-x32\...\Run: [VideoDownloadConverter Search Scope Monitor] - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrchMn.exe [55368 2014-02-02] (Mindspark)
HKLM-x32\...\Run: [VideoDownloadConverter_4z Browser Plugin Loader] - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbrmon.exe [61512 2014-02-02] (VER_COMPANY_NAME)
HKLM-x32\...\Run: [VideoDownloadConverter_4z Browser Plugin Loader 64] - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbrmon64.exe [71752 2014-02-02] (VER_COMPANY_NAME)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1654125919-855541359-3433209274-1000\...\Run: [NextLive] - C:\Windows\SysWOW64\rundll32.exe "C:\Users\Besitzer\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKU\S-1-5-21-1654125919-855541359-3433209274-1000\...\Run: [HD Streamer Sync] - C:\Users\Besitzer\AppData\Local\HD Streamer\crxmon.exe [128952 2014-01-15] ()
AppInit_DLLs: c:\progra~2\movies~1\safety~1\x64\safety~2.dll => File Not Found
AppInit_DLLs-x32: c:\progra~2\movies~1\safety~1\safety~2.dll => File Not Found
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\browsemngr.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browsermngr.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe
IFEO\cltmngsvc.exe: [Debugger] tasklist.exe
IFEO\delta babylon.exe: [Debugger] tasklist.exe
IFEO\delta tb.exe: [Debugger] tasklist.exe
IFEO\delta2.exe: [Debugger] tasklist.exe
IFEO\deltainstaller.exe: [Debugger] tasklist.exe
IFEO\deltasetup.exe: [Debugger] tasklist.exe
IFEO\deltatb.exe: [Debugger] tasklist.exe
IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe
IFEO\iminentsetup.exe: [Debugger] tasklist.exe
IFEO\mediabuilder.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\rjatydimofu.exe: [Debugger] tasklist.exe
IFEO\sweetimsetup.exe: [Debugger] tasklist.exe
IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe
IFEO\trueimagelauncher.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=5bdc670b-611f-628a-a97d-b1af013e3718&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=&type=hp1000
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=5bdc670b-611f-628a-a97d-b1af013e3718&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=&type=hp1000
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = Babylon Search
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF249114589E0CE01
URLSearchHook: HKCU - (No Name) - {93a3111f-4f74-4ed8-895e-d9708497629e} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll (Mindspark)
SearchScopes: HKLM - {52db1893-8a90-4192-aede-08e00b8f8473} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=100&systemid=473&v=n9602-172&apn_uid=3029124234214494&apn_dtid=BND473&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=5bdc670b-611f-628a-a97d-b1af013e3718&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=&type=hp1000
SearchScopes: HKLM-x32 - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=5bdc670b-611f-628a-a97d-b1af013e3718&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=&type=hp1000
SearchScopes: HKLM-x32 - {cf6e4b1c-dbde-457e-9cef-ab8ecac8a5e8} URL = hxxp://search.tb.ask.com/search/GGmain.jhtml?p2=^HJ^xdm255^YYA^de&si=CNiE-_CGrrwCFQsCwwodsj8AiA&ptb=A37A0A48-85D5-4D1E-8CC2-8328E11C5F6D&ind=2014020213&n=780b8275&psa=&st=sb&searchfor={searchTerms}
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?publisher=YahooOC&dpid=YahooOC&co=DE&userid=5bdc670b-611f-628a-a97d-b1af013e3718&searchtype=ds&p={searchTerms}&fr=linkury-tb&installDate=&type=hp1000
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {3E762055-979B-459A-AC05-D200656890B9} URL = hxxp://de.wikipedia.org/w/index.php?title=Spezial:Suche&search={searchTerms}
SearchScopes: HKCU - {52db1893-8a90-4192-aede-08e00b8f8473} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HD Streamer - {E6062A33-016E-4BDA-A6F1-890D989F8656} - C:\Program Files (x86)\HD Streamer\ScriptHost64.dll (HD Streamer)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: Toolbar BHO - {312f84fb-8970-4fd3-bddb-7012eac4afc9} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll (Mindspark)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Babylon IE plugin - {9CFACCB6-2F3F-4177-94EA-0D2B72D384C1} -  No File
BHO-x32: Search Assistant BHO - {c547c6c2-561b-4169-a2a5-20ba771ca93b} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zSrcAs.dll (Mindspark)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HD Streamer - {E6062A33-016E-4BDA-A6F1-890D989F8656} - C:\Program Files (x86)\HD Streamer\ScriptHost.dll (HD Streamer)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - VideoDownloadConverter - {48586425-6bb7-4f51-8dc6-38c88e3ebb58} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll (Mindspark)
Toolbar: HKCU - No Name - {C424171E-592A-415A-9EB1-DFD6D95D3530} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.4.24.0.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default
FF user.js: detected! => C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\user.js
FF Homepage: user_pref("browser.startup.homepage", );
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Users\Besitzer\Desktop\Programme - ÖFNNEN\Picasa3\npPicasa3.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @real.com/nppl3260;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @VideoDownloadConverter_4z.com/Plugin - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll (Mindspark)
FF Plugin-x32: @VideoDownloadConverter_ScriptHelper.com/Plugin - C:\Program Files (x86)\VideoDownloadConverter\npVDCPlugin.dll (Mindspark)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\searchplugins\buenosearch.xml
FF SearchPlugin: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\searchplugins\Web Search.xml
FF Extension: VideoDownloadConverter - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\4zffxtbr@VideoDownloadConverter_4z.com [2014-02-02]
FF Extension: incredibar.com - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\ffxtlbr@incredibar.com [2012-08-26]
FF Extension: HD Streamer - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\hd_streamer@iMedia [2014-01-23]
FF Extension: No Name - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\staged [2014-01-23]
FF Extension: IMinent Toolbar - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444} [2011-12-30]
FF Extension: Adblock Plus - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-11]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011-04-05]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011-04-06]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} [2011-10-24]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2012-07-02]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-09-24]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2012-11-12]
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Web Assistant\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-05-09]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-05-09]
FF HKLM-x32\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Web Assistant\Firefox
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [2013-11-21]

Chrome:
=======
CHR Extension: (HD Streamer) - C:\Users\Besitzer\AppData\Local\Google\Chrome\User Data\Default\Extensions\oleglodmkonbpfmlffapjfednjopbeeh [2014-01-22]
CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx [2014-01-22]
CHR HKLM-x32\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx [2014-01-22]
CHR HKLM-x32\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2011-12-22]
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-12-08]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\Exts\Chrome.crx [2014-01-21]

==================== Services (Whitelisted) =================

R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [103936 2014-01-20] (Freemake)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe [275696 2013-10-08] (Symantec Corporation)
S3 Symantec RemoteAssist; C:\Program Files (x86)\Common Files\Symantec Shared\Support Controls\ssrc.exe [394704 2008-01-29] (Symantec, Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2103096 2013-12-18] (TuneUp Software)
R2 UniversalUpdater; C:\Program Files (x86)\Universal Updater\UpdaterService.exe [401336 2014-01-19] ()
R2 VideoDownloadConverter_4zService; C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbarsvc.exe [88648 2014-02-02] (COMPANYVERS_NAME)

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140121.001\BHDrvx64.sys [1526488 2013-12-18] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2014-02-04] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140212.001\IDSvia64.sys [521944 2014-01-21] (Symantec Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140212.019\ENG64.SYS [126040 2014-02-04] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140212.019\EX64.SYS [2099288 2014-02-04] (Symantec Corporation)
S3 Spyder3; C:\Windows\System32\DRIVERS\Spyder3.sys [15360 2008-09-08] ()
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1501000.012\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-21] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1501000.012\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
R0 tdrpman251; C:\Windows\System32\DRIVERS\tdrpm251.sys [1455648 2012-06-03] (Acronis)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-13 09:32 - 2014-02-13 09:32 - 00000000 ____D () C:\FRST
2014-02-13 07:18 - 2014-02-13 07:18 - 00002214 _____ () C:\Windows\PFRO.log
2014-02-13 07:18 - 2014-02-13 07:18 - 00000056 _____ () C:\Windows\setupact.log
2014-02-13 07:18 - 2014-02-13 07:18 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-13 07:15 - 2014-02-13 07:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{08B1F1C3-D572-4D7F-A8F2-7C64E8550B62}
2014-02-12 17:15 - 2014-02-12 17:40 - 00000000 ____D () C:\Users\Besitzer\Desktop\afrotits
2014-02-12 06:54 - 2014-02-12 06:54 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{F97E2884-8C88-4FF2-81AF-395626CCD696}
2014-02-11 18:49 - 2014-02-11 18:49 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{AE8415A6-9719-46F9-ADF4-C1E9126752EA}
2014-02-11 10:00 - 2014-02-11 10:04 - 00000000 ____D () C:\Users\Besitzer\Desktop\Air Pad -Kettler-
2014-02-11 08:41 - 2014-02-11 08:43 - 00049026 _____ () C:\Users\Besitzer\Desktop\Schauspielerin Iris Berben genießt Offline-Dasein.odt
2014-02-11 06:33 - 2014-02-11 06:33 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B434DDC1-18BC-4E24-8887-CC3F8AA9CC66}
2014-02-10 20:41 - 2014-02-10 20:41 - 00016802 _____ () C:\Users\Besitzer\Desktop\ebay-Schuhregal.odt
2014-02-10 13:44 - 2014-02-10 13:44 - 00000000 ____D () C:\Program Files (x86)\buenosearch LTD
2014-02-10 13:43 - 2014-02-10 13:46 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\PerformerSoft
2014-02-10 13:43 - 2014-02-10 13:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\buenosearch LTD
2014-02-10 13:39 - 2014-02-10 13:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{69C73E7F-0273-46B3-B1E1-7B10132A56D5}
2014-02-10 13:38 - 2014-02-10 13:39 - 00000000 ____D () C:\Users\Besitzer\Desktop\PC Tisch
2014-02-10 09:05 - 2014-02-10 09:05 - 00015531 _____ () C:\Users\Besitzer\Desktop\Langenscheidt Spanisch-Deutsch.odt
2014-02-09 21:59 - 2014-02-09 21:59 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{763C83ED-FE6A-4C0D-B05E-4C06D46B6F45}
2014-02-09 19:50 - 2014-02-09 19:50 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{E01C63AC-F378-4C84-8416-02A903AC0852}
2014-02-09 08:58 - 2014-02-09 09:00 - 00519719 _____ () C:\Users\Besitzer\Desktop\URUK - 5000 Jahre Megacity.odt
2014-02-09 08:04 - 2014-02-09 08:04 - 00337136 _____ () C:\Users\Besitzer\Desktop\Fürstenberg Porzellan gr. Bonboniere.odt
2014-02-09 06:46 - 2014-02-09 06:46 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B0F17908-36D5-43DB-9E81-5C48B3DFB234}
2014-02-08 21:29 - 2014-02-08 21:29 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{57C5F2C6-2F7A-4306-88B8-81F479C6E2E1}
2014-02-08 13:04 - 2014-02-08 13:06 - 00027856 _____ () C:\Users\Besitzer\Desktop\Mit Scholl-Latour im Libanon.odt
2014-02-08 06:36 - 2014-02-08 06:36 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{1A6BED29-FD24-445B-9291-5B1EF6D11794}
2014-02-07 13:13 - 2014-02-07 17:31 - 00026362 _____ () C:\Users\Besitzer\Desktop\Schildkröt Fitness Balancekissen.odt
2014-02-07 06:46 - 2014-02-07 06:46 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{09A8728B-3076-4375-9B1E-06BD9C29A79D}
2014-02-06 18:06 - 2014-02-06 18:06 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-02-06 18:05 - 2014-02-07 06:07 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-06 08:43 - 2014-02-06 08:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B3D4F4E4-1694-4E30-BBF0-AD59B26733DE}
2014-02-05 20:43 - 2014-02-05 20:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{F19EC089-AF05-40E5-BD37-13BEB5AB1085}
2014-02-05 20:23 - 2014-02-05 20:23 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{00631558-D67F-4F70-A996-530A28982928}
2014-02-05 15:31 - 2014-02-05 15:32 - 00000000 ____D () C:\Users\Besitzer\Desktop\Pr. v. Hes.-Weingut
2014-02-05 11:17 - 2014-02-05 11:17 - 00027652 _____ () C:\Users\Besitzer\Desktop\KROATIEN - BOSNIEN-HERZEGOWINA - MONTENEGRO.odt
2014-02-05 11:05 - 2014-02-05 11:06 - 00013716 _____ () C:\Users\Besitzer\Desktop\Pan con tomate.odt
2014-02-05 10:53 - 2014-02-05 10:53 - 00011777 _____ () C:\Users\Besitzer\Desktop\Dulcinea-Don Quijote-Ulcinj-Dulcinium.odt
2014-02-05 06:47 - 2014-02-05 06:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{82B2DA4B-425B-40DA-BA2C-495AA1ED237D}
2014-02-04 16:18 - 2014-02-04 16:19 - 00015363 _____ () C:\Users\Besitzer\Desktop\Montenegro.odt
2014-02-04 15:37 - 2014-02-04 15:37 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 - Verknüpfung
2014-02-04 11:31 - 2014-02-04 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{623DA965-A95D-418F-9526-B7A4899E006A}
2014-02-04 10:42 - 2014-02-04 10:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\OpenOffice
2014-02-04 10:41 - 2014-02-04 14:24 - 00000000 ___SD () C:\Program Files (x86)\OpenOffice 4.0.1
2014-02-04 10:40 - 2014-02-04 10:40 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-04 08:45 - 2014-02-13 08:41 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine-1
2014-02-03 21:47 - 2014-02-03 21:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{87B7D477-A026-4AA2-ABC5-2E02C1AF973E}
2014-02-03 07:39 - 2014-02-03 07:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{2A7498CC-7C15-4D8D-9FEE-A7ECE1DE8ECA}
2014-02-02 19:57 - 2014-02-02 19:57 - 00000000 ____D () C:\Program Files (x86)\HD Streamer
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\VideoDownloadConverter_4z
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Program Files (x86)\VideoDownloadConverter_4z
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Program Files (x86)\VideoDownloadConverter
2014-02-02 11:16 - 2014-02-02 15:14 - 00000000 ____D () C:\Users\Besitzer\Desktop\Psycho
2014-02-02 11:12 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Fotos
2014-02-02 11:09 - 2014-02-11 11:34 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine
2014-02-02 08:56 - 2014-02-02 08:56 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{5AE2CD3B-1102-4B01-AB88-6BF124F199CC}
2014-02-01 17:15 - 2014-02-01 17:15 - 00011303 _____ () C:\Users\Besitzer\Desktop\a) Anzüge.odt
2014-02-01 14:24 - 2014-02-01 14:24 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{39A75A6A-D543-475C-A918-91AA252DC637}
2014-01-31 20:43 - 2014-01-31 20:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{8A9F5CC2-A23C-463A-993B-BC1B34636D1E}
2014-01-31 07:42 - 2014-01-31 07:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{F0E71F7E-D761-43EA-AF36-F225A730CB4E}
2014-01-30 07:00 - 2014-01-30 07:00 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{814FD173-CAE7-472B-883D-AA84801E82D5}
2014-01-29 17:37 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-3
2014-01-29 17:28 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-2
2014-01-29 10:29 - 2014-01-29 10:29 - 00024872 _____ () C:\Users\Besitzer\Desktop\Verrückt nach Meer-Sendefolge.odt
2014-01-29 08:29 - 2014-01-29 08:29 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{3C16D6D4-3541-499F-8589-DEB5E2C72432}
2014-01-28 20:42 - 2014-01-28 20:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{16473A40-C639-421F-8118-2816C8D99AA6}
2014-01-28 17:29 - 2014-01-28 17:29 - 00025284 _____ () C:\Users\Besitzer\Desktop\Tea Time.odt
2014-01-28 07:54 - 2014-01-28 07:55 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{83624252-3D60-4BCB-8EF5-D788AC51D7BC}
2014-01-27 13:08 - 2014-01-27 13:08 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Ashampoo
2014-01-27 13:07 - 2014-01-27 13:07 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-01-27 13:00 - 2014-01-27 13:03 - 384551131 _____ () C:\Users\Besitzer\Downloads\Plácido Domingo at Loreley 2013.mp4
2014-01-27 12:05 - 2014-01-27 12:05 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{87119EEF-C842-49E8-B4F1-FC074BC73DA1}
2014-01-26 08:04 - 2014-01-26 08:04 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{AAC0BB77-84EF-4261-8B8D-7A1B5EAA945A}
2014-01-25 08:34 - 2014-01-25 08:34 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B9A27ACD-A380-442B-A2B2-032AC99D320B}
2014-01-24 08:40 - 2014-01-24 08:40 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{E9FAA848-62C3-4DC6-A6F9-B87DC88D34B4}
2014-01-24 06:54 - 2014-01-24 06:54 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{848BD269-EC0A-4CFF-AC6D-C0127A83DDB0}
2014-01-23 10:35 - 2014-01-23 10:35 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{01A54B7D-23E3-4A41-8558-F89FBF8DD795}
2014-01-23 09:49 - 2014-01-23 09:54 - 00000048 _____ () C:\RB.rdat
2014-01-23 09:49 - 2014-01-23 09:54 - 00000048 _____ () C:\License_Time.rdat
2014-01-23 09:49 - 2014-01-23 09:49 - 00000000 ____D () C:\ProgramData\FileCure
2014-01-23 09:47 - 2014-01-23 09:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\FreemakeVideoConverter
2014-01-23 09:45 - 2014-01-23 09:45 - 01071000 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_flashplayer12x32_mssa_aaa_aih(1).exe
2014-01-23 09:45 - 2014-01-23 09:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Macromedia
2014-01-23 09:39 - 2014-01-23 09:39 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-23 09:26 - 2014-01-23 09:26 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm(2).xpi
2014-01-23 09:26 - 2014-01-23 09:26 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm(1).xpi
2014-01-23 09:25 - 2014-01-23 09:25 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm.xpi
2014-01-22 20:59 - 2014-01-22 20:59 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{89FBFF02-7AD4-40A2-A902-F4C222557738}
2014-01-22 11:31 - 2014-02-13 07:19 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\newnext.me
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\Documents\Mobogenie
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\HD Streamer
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\genienext
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\.android
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Program Files (x86)\Universal Updater
2014-01-22 11:30 - 2014-01-22 11:32 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
2014-01-22 08:32 - 2014-01-22 08:32 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{A00C52AD-203B-47AB-B448-4B598AB1941E}
2014-01-21 06:46 - 2014-01-21 06:46 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{92C35054-FE81-491C-8D2F-A9AC3AC432A6}
2014-01-20 14:20 - 2014-01-20 14:20 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-20 14:20 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-20 14:20 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-20 14:20 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-20 14:20 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-20 07:16 - 2014-01-20 07:16 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{E704DAE2-E02A-434F-84F4-591E9275DFC8}
2014-01-19 08:33 - 2014-01-19 08:34 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{BC4C38FD-995A-4CFC-A8AC-A8C186D2BF82}
2014-01-18 10:41 - 2014-01-18 10:42 - 00012812 _____ () C:\Users\Besitzer\Desktop\Hochzeit im Walde.odt
2014-01-18 09:18 - 2014-01-18 09:18 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{7260AB82-9BAF-4464-9B6F-5848CF13DCB4}
2014-01-17 20:55 - 2014-02-10 13:36 - 00000000 ____D () C:\Users\Besitzer\Desktop\Ostpreußen_Danzig-Königsberg_DAMALS
2014-01-17 09:29 - 2014-01-17 09:29 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{E4D65991-EBC4-48CF-880A-3FA086121026}
2014-01-16 10:15 - 2014-01-16 10:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B91B4B55-44B3-49A5-A5EE-FA6F35707B6F}
2014-01-15 21:47 - 2014-01-15 21:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{F75E891B-996F-4939-9F9B-668D98EBAC8E}
2014-01-15 07:25 - 2014-01-15 07:25 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{3753C3F9-793E-40D0-B37C-12F62E025956}
2014-01-15 06:55 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 06:55 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 06:55 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-14 07:29 - 2014-01-14 07:29 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{A7ADC18D-D03A-461F-B52A-7F6BC06F4DC2}

==================== One Month Modified Files and Folders =======

2014-02-13 09:32 - 2014-02-13 09:32 - 00000000 ____D () C:\FRST
2014-02-13 09:24 - 2013-11-13 17:06 - 00003954 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{083BECD6-A6F2-4401-A905-5865C87918C6}
2014-02-13 09:05 - 2012-12-07 07:53 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-13 08:58 - 2011-04-04 11:29 - 01298834 _____ () C:\Windows\WindowsUpdate.log
2014-02-13 08:52 - 2012-10-04 19:30 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-13 08:41 - 2014-02-04 08:45 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine-1
2014-02-13 07:26 - 2009-07-14 05:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-13 07:26 - 2009-07-14 05:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-13 07:19 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\newnext.me
2014-02-13 07:18 - 2014-02-13 07:18 - 00002214 _____ () C:\Windows\PFRO.log
2014-02-13 07:18 - 2014-02-13 07:18 - 00000056 _____ () C:\Windows\setupact.log
2014-02-13 07:18 - 2014-02-13 07:18 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-13 07:18 - 2012-12-07 07:53 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-13 07:18 - 2011-05-12 17:37 - 36031488 ___SH () C:\Users\Besitzer\Desktop\Thumbs.db
2014-02-13 07:18 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-13 07:15 - 2014-02-13 07:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{08B1F1C3-D572-4D7F-A8F2-7C64E8550B62}
2014-02-13 06:34 - 2011-04-07 17:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\CrashDumps
2014-02-12 18:02 - 2013-09-23 11:36 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\vlc
2014-02-12 18:01 - 2011-05-15 07:22 - 00000000 ____D () C:\Users\Besitzer\Desktop\Video
2014-02-12 17:40 - 2014-02-12 17:15 - 00000000 ____D () C:\Users\Besitzer\Desktop\afrotits
2014-02-12 11:07 - 2012-06-03 19:14 - 00003012 _____ () C:\Windows\System32\Tasks\{1F7E5E00-647A-47E6-9221-252E2625D665}
2014-02-12 06:54 - 2014-02-12 06:54 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{F97E2884-8C88-4FF2-81AF-395626CCD696}
2014-02-11 18:49 - 2014-02-11 18:49 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{AE8415A6-9719-46F9-ADF4-C1E9126752EA}
2014-02-11 11:34 - 2014-02-02 11:09 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine
2014-02-11 10:04 - 2014-02-11 10:00 - 00000000 ____D () C:\Users\Besitzer\Desktop\Air Pad -Kettler-
2014-02-11 08:43 - 2014-02-11 08:41 - 00049026 _____ () C:\Users\Besitzer\Desktop\Schauspielerin Iris Berben genießt Offline-Dasein.odt
2014-02-11 06:33 - 2014-02-11 06:33 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B434DDC1-18BC-4E24-8887-CC3F8AA9CC66}
2014-02-10 20:41 - 2014-02-10 20:41 - 00016802 _____ () C:\Users\Besitzer\Desktop\ebay-Schuhregal.odt
2014-02-10 13:46 - 2014-02-10 13:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\PerformerSoft
2014-02-10 13:44 - 2014-02-10 13:44 - 00000000 ____D () C:\Program Files (x86)\buenosearch LTD
2014-02-10 13:43 - 2014-02-10 13:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\buenosearch LTD
2014-02-10 13:43 - 2011-07-07 07:09 - 00000000 ____D () C:\ProgramData\Babylon
2014-02-10 13:39 - 2014-02-10 13:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{69C73E7F-0273-46B3-B1E1-7B10132A56D5}
2014-02-10 13:39 - 2014-02-10 13:38 - 00000000 ____D () C:\Users\Besitzer\Desktop\PC Tisch
2014-02-10 13:36 - 2014-01-17 20:55 - 00000000 ____D () C:\Users\Besitzer\Desktop\Ostpreußen_Danzig-Königsberg_DAMALS
2014-02-10 12:03 - 2009-07-14 18:58 - 00667970 _____ () C:\Windows\system32\perfh007.dat
2014-02-10 12:03 - 2009-07-14 18:58 - 00136714 _____ () C:\Windows\system32\perfc007.dat
2014-02-10 12:03 - 2009-07-14 06:13 - 01537850 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-10 09:05 - 2014-02-10 09:05 - 00015531 _____ () C:\Users\Besitzer\Desktop\Langenscheidt Spanisch-Deutsch.odt
2014-02-09 21:59 - 2014-02-09 21:59 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{763C83ED-FE6A-4C0D-B05E-4C06D46B6F45}
2014-02-09 19:50 - 2014-02-09 19:50 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{E01C63AC-F378-4C84-8416-02A903AC0852}
2014-02-09 09:00 - 2014-02-09 08:58 - 00519719 _____ () C:\Users\Besitzer\Desktop\URUK - 5000 Jahre Megacity.odt
2014-02-09 08:04 - 2014-02-09 08:04 - 00337136 _____ () C:\Users\Besitzer\Desktop\Fürstenberg Porzellan gr. Bonboniere.odt
2014-02-09 06:46 - 2014-02-09 06:46 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B0F17908-36D5-43DB-9E81-5C48B3DFB234}
2014-02-09 06:08 - 2011-04-10 09:40 - 00000000 ____D () C:\Users\Besitzer\Desktop\Kleidung, Access., Einlegesohlen
2014-02-08 21:29 - 2014-02-08 21:29 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{57C5F2C6-2F7A-4306-88B8-81F479C6E2E1}
2014-02-08 13:06 - 2014-02-08 13:04 - 00027856 _____ () C:\Users\Besitzer\Desktop\Mit Scholl-Latour im Libanon.odt
2014-02-08 10:45 - 2013-11-30 08:00 - 00000000 ____D () C:\Users\Besitzer\Desktop\GARTEN
2014-02-08 06:36 - 2014-02-08 06:36 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{1A6BED29-FD24-445B-9291-5B1EF6D11794}
2014-02-07 17:31 - 2014-02-07 13:13 - 00026362 _____ () C:\Users\Besitzer\Desktop\Schildkröt Fitness Balancekissen.odt
2014-02-07 08:54 - 2012-01-13 20:55 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-02-07 08:07 - 2011-04-06 10:33 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Windows Live
2014-02-07 06:46 - 2014-02-07 06:46 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{09A8728B-3076-4375-9B1E-06BD9C29A79D}
2014-02-07 06:07 - 2014-02-06 18:05 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-06 18:06 - 2014-02-06 18:06 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-02-06 08:43 - 2014-02-06 08:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B3D4F4E4-1694-4E30-BBF0-AD59B26733DE}
2014-02-06 06:52 - 2012-10-04 19:30 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-06 06:52 - 2012-10-04 19:29 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-06 06:52 - 2012-10-04 19:29 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-05 20:43 - 2014-02-05 20:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{F19EC089-AF05-40E5-BD37-13BEB5AB1085}
2014-02-05 20:23 - 2014-02-05 20:23 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{00631558-D67F-4F70-A996-530A28982928}
2014-02-05 15:32 - 2014-02-05 15:31 - 00000000 ____D () C:\Users\Besitzer\Desktop\Pr. v. Hes.-Weingut
2014-02-05 15:17 - 2013-08-24 09:25 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-1
2014-02-05 12:22 - 2011-04-21 17:51 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Stellarium
2014-02-05 12:22 - 2011-04-21 17:50 - 00000000 ____D () C:\Program Files\Stellarium
2014-02-05 11:17 - 2014-02-05 11:17 - 00027652 _____ () C:\Users\Besitzer\Desktop\KROATIEN - BOSNIEN-HERZEGOWINA - MONTENEGRO.odt
2014-02-05 11:06 - 2014-02-05 11:05 - 00013716 _____ () C:\Users\Besitzer\Desktop\Pan con tomate.odt
2014-02-05 10:53 - 2014-02-05 10:53 - 00011777 _____ () C:\Users\Besitzer\Desktop\Dulcinea-Don Quijote-Ulcinj-Dulcinium.odt
2014-02-05 06:47 - 2014-02-05 06:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{82B2DA4B-425B-40DA-BA2C-495AA1ED237D}
2014-02-04 18:38 - 2013-09-08 07:01 - 00289784 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-04 18:11 - 2011-04-05 09:54 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-04 16:19 - 2014-02-04 16:18 - 00015363 _____ () C:\Users\Besitzer\Desktop\Montenegro.odt
2014-02-04 15:37 - 2014-02-04 15:37 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 - Verknüpfung
2014-02-04 14:32 - 2011-04-04 11:29 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-04 14:24 - 2014-02-04 10:41 - 00000000 ___SD () C:\Program Files (x86)\OpenOffice 4.0.1
2014-02-04 12:06 - 2012-06-13 17:06 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\NPE
2014-02-04 11:31 - 2014-02-04 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{623DA965-A95D-418F-9526-B7A4899E006A}
2014-02-04 11:31 - 2013-09-07 17:04 - 00064768 _____ () C:\Users\Besitzer\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-04 11:30 - 2012-12-10 07:41 - 00000000 ____D () C:\Users\Besitzer\Desktop\Programme
2014-02-04 10:42 - 2014-02-04 10:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\OpenOffice
2014-02-04 10:40 - 2014-02-04 10:40 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-03 21:47 - 2014-02-03 21:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{87B7D477-A026-4AA2-ABC5-2E02C1AF973E}
2014-02-03 11:52 - 2014-02-02 11:12 - 00000000 ____D () C:\Users\Besitzer\Desktop\Fotos
2014-02-03 11:52 - 2014-01-29 17:37 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-3
2014-02-03 11:52 - 2014-01-29 17:28 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-2
2014-02-03 07:39 - 2014-02-03 07:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{2A7498CC-7C15-4D8D-9FEE-A7ECE1DE8ECA}
2014-02-02 19:57 - 2014-02-02 19:57 - 00000000 ____D () C:\Program Files (x86)\HD Streamer
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\VideoDownloadConverter_4z
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Program Files (x86)\VideoDownloadConverter_4z
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Program Files (x86)\VideoDownloadConverter
2014-02-02 15:14 - 2014-02-02 11:16 - 00000000 ____D () C:\Users\Besitzer\Desktop\Psycho
2014-02-02 15:10 - 2013-10-10 10:39 - 00017877 _____ () C:\Users\Besitzer\Desktop\Piaf-Konzert.odt
2014-02-02 15:04 - 2013-12-18 10:22 - 00000000 ____D () C:\Users\Besitzer\Desktop\ASTRO
2014-02-02 14:58 - 2011-04-10 09:40 - 00000000 ____D () C:\Users\Besitzer\Desktop\HAUPTORDNER
2014-02-02 14:49 - 2013-11-22 10:43 - 00000000 ____D () C:\Users\Besitzer\Desktop\Mnünzen
2014-02-02 08:56 - 2014-02-02 08:56 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{5AE2CD3B-1102-4B01-AB88-6BF124F199CC}
2014-02-01 17:15 - 2014-02-01 17:15 - 00011303 _____ () C:\Users\Besitzer\Desktop\a) Anzüge.odt
2014-02-01 14:24 - 2014-02-01 14:24 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{39A75A6A-D543-475C-A918-91AA252DC637}
2014-01-31 20:43 - 2014-01-31 20:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{8A9F5CC2-A23C-463A-993B-BC1B34636D1E}
2014-01-31 07:42 - 2014-01-31 07:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{F0E71F7E-D761-43EA-AF36-F225A730CB4E}
2014-01-31 06:31 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-30 07:00 - 2014-01-30 07:00 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{814FD173-CAE7-472B-883D-AA84801E82D5}
2014-01-29 10:29 - 2014-01-29 10:29 - 00024872 _____ () C:\Users\Besitzer\Desktop\Verrückt nach Meer-Sendefolge.odt
2014-01-29 08:29 - 2014-01-29 08:29 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{3C16D6D4-3541-499F-8589-DEB5E2C72432}
2014-01-28 22:49 - 2013-09-23 08:21 - 00000000 ____D () C:\Program Files (x86)\StreamTransport
2014-01-28 20:42 - 2014-01-28 20:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{16473A40-C639-421F-8118-2816C8D99AA6}
2014-01-28 17:29 - 2014-01-28 17:29 - 00025284 _____ () C:\Users\Besitzer\Desktop\Tea Time.odt
2014-01-28 07:55 - 2014-01-28 07:54 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{83624252-3D60-4BCB-8EF5-D788AC51D7BC}
2014-01-27 17:26 - 2011-04-07 17:06 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-27 13:08 - 2014-01-27 13:08 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Ashampoo
2014-01-27 13:07 - 2014-01-27 13:07 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-01-27 13:03 - 2014-01-27 13:00 - 384551131 _____ () C:\Users\Besitzer\Downloads\Plácido Domingo at Loreley 2013.mp4
2014-01-27 12:05 - 2014-01-27 12:05 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{87119EEF-C842-49E8-B4F1-FC074BC73DA1}
2014-01-26 08:04 - 2014-01-26 08:04 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{AAC0BB77-84EF-4261-8B8D-7A1B5EAA945A}
2014-01-25 08:34 - 2014-01-25 08:34 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B9A27ACD-A380-442B-A2B2-032AC99D320B}
2014-01-24 08:40 - 2014-01-24 08:40 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{E9FAA848-62C3-4DC6-A6F9-B87DC88D34B4}
2014-01-24 06:54 - 2014-01-24 06:54 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{848BD269-EC0A-4CFF-AC6D-C0127A83DDB0}
2014-01-23 10:35 - 2014-01-23 10:35 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{01A54B7D-23E3-4A41-8558-F89FBF8DD795}
2014-01-23 10:05 - 2013-09-23 14:57 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\OpenCandy
2014-01-23 09:54 - 2014-01-23 09:49 - 00000048 _____ () C:\RB.rdat
2014-01-23 09:54 - 2014-01-23 09:49 - 00000048 _____ () C:\License_Time.rdat
2014-01-23 09:49 - 2014-01-23 09:49 - 00000000 ____D () C:\ProgramData\FileCure
2014-01-23 09:47 - 2014-01-23 09:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\FreemakeVideoConverter
2014-01-23 09:46 - 2011-04-05 10:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Adobe
2014-01-23 09:45 - 2014-01-23 09:45 - 01071000 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_flashplayer12x32_mssa_aaa_aih(1).exe
2014-01-23 09:45 - 2014-01-23 09:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Macromedia
2014-01-23 09:44 - 2011-12-22 15:27 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2014-01-23 09:44 - 2011-12-22 15:27 - 00000000 ____D () C:\ProgramData\Freemake
2014-01-23 09:39 - 2014-01-23 09:39 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-23 09:26 - 2014-01-23 09:26 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm(2).xpi
2014-01-23 09:26 - 2014-01-23 09:26 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm(1).xpi
2014-01-23 09:25 - 2014-01-23 09:25 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm.xpi
2014-01-23 07:08 - 2011-04-08 09:59 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-01-22 20:59 - 2014-01-22 20:59 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{89FBFF02-7AD4-40A2-A902-F4C222557738}
2014-01-22 13:23 - 2013-08-31 13:51 - 00000000 ____D () C:\Users\Besitzer\Documents\Freemake
2014-01-22 12:30 - 2011-12-22 15:27 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-01-22 11:32 - 2014-01-22 11:30 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
2014-01-22 11:32 - 2013-11-20 15:06 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Mobogenie
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\Documents\Mobogenie
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\HD Streamer
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\genienext
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\.android
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Program Files (x86)\Universal Updater
2014-01-22 11:31 - 2011-04-04 11:29 - 00000000 ____D () C:\Users\Besitzer
2014-01-22 08:32 - 2014-01-22 08:32 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{A00C52AD-203B-47AB-B448-4B598AB1941E}
2014-01-21 06:46 - 2014-01-21 06:46 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{92C35054-FE81-491C-8D2F-A9AC3AC432A6}
2014-01-21 06:41 - 2012-04-02 18:34 - 00000000 ____D () C:\Users\Besitzer\Desktop\Interessenbereiche -Definierung-
2014-01-20 14:21 - 2013-10-21 09:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-20 14:20 - 2014-01-20 14:20 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-20 14:20 - 2011-04-05 11:14 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-20 07:16 - 2014-01-20 07:16 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{E704DAE2-E02A-434F-84F4-591E9275DFC8}
2014-01-19 17:06 - 2012-04-02 18:34 - 00000000 ____D () C:\Users\Besitzer\Desktop\AKTIV - Ordner
2014-01-19 08:34 - 2014-01-19 08:33 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{BC4C38FD-995A-4CFC-A8AC-A8C186D2BF82}
2014-01-18 10:42 - 2014-01-18 10:41 - 00012812 _____ () C:\Users\Besitzer\Desktop\Hochzeit im Walde.odt
2014-01-18 09:18 - 2014-01-18 09:18 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{7260AB82-9BAF-4464-9B6F-5848CF13DCB4}
2014-01-18 07:29 - 2011-12-27 18:22 - 00000000 ____D () C:\Program Files\Google
2014-01-18 07:29 - 2011-06-12 18:56 - 00000000 ____D () C:\Program Files (x86)\Google
2014-01-17 09:29 - 2014-01-17 09:29 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{E4D65991-EBC4-48CF-880A-3FA086121026}
2014-01-17 07:13 - 2013-11-13 15:43 - 00000000 ____D () C:\ProgramData\Google
2014-01-17 07:13 - 2011-04-29 07:04 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Google
2014-01-16 10:15 - 2014-01-16 10:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B91B4B55-44B3-49A5-A5EE-FA6F35707B6F}
2014-01-15 21:52 - 2013-08-14 20:13 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 21:49 - 2011-04-04 14:51 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-15 21:47 - 2014-01-15 21:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{F75E891B-996F-4939-9F9B-668D98EBAC8E}
2014-01-15 07:25 - 2014-01-15 07:25 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{3753C3F9-793E-40D0-B37C-12F62E025956}
2014-01-14 12:13 - 2014-01-13 10:27 - 00022751 _____ () C:\Users\Besitzer\Desktop\Psycho f. P-S.odt
2014-01-14 07:29 - 2014-01-14 07:29 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{A7ADC18D-D03A-461F-B52A-7F6BC06F4DC2}

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.6552.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-08 09:55

================================
FRST Additions Logfile:

       
Code:

       
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-02-2014 01
Ran by Besitzer at 2014-02-13 09:33:39
Running from C:\Users\Besitzer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CA88SO2K
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: Norton Internet Security (Enabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security (Enabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}

==================== Installed Programs ======================

7-Zip 9.20 (x64 edition) (Version: 9.20.00.0 - Igor Pavlov)
Acronis*True*Image*Home (x32 Version: 13.0.5029 - Acronis)
Adobe Flash Player 12 ActiveX (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (x32 Version: 12.0.0.44 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Deutsch (x32 Version: 10.1.9 - Adobe Systems Incorporated)
Amazon Kindle (HKCU Version:  - Amazon)
AM-DeadLink 4.4 (x32 Version: 4.4 - WebSite-Watcher - Software to check websites for updates and changes (web page monitoring))
Apple Application Support (x32 Version: 2.3 - Apple Inc.)
bhv Vokabeltrainer Spanisch (x32 Version: 1.6.0.1 - bhv Software GmbH & Co. KG)
CanoScan 4400F (Version:  - )
Catch the Sperm! (x32 Version:  - )
CCleaner (Version: 4.10 - Piriform)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Diercke Globus Online (x32 Version: 2.1.36 - Imagon GmbH)
Freemake Video Converter Version 4.1.3 (x32 Version: 4.1.3 - Ellora Assets Corporation)
Google Earth (x32 Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.22.3 - Google Inc.) Hidden
HD Streamer (x32 Version: 1.1.4.0 - HD Streamer)
HP Product Detection (x32 Version: 10.7.9.0 - Hewlett-Packard Company)
Intel(R) Graphics Media Accelerator Driver (x32 Version: 8.15.10.2555 - Intel Corporation)
IrfanView (remove only) (x32 Version: 4.36 - Irfan Skiljan)
Java 7 Update 25 (64-bit) (Version: 7.0.250 - Oracle)
Java 7 Update 51 (x32 Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Silverlight (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (x32 Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (x32 Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161 - Microsoft Corporation)
Mozilla Firefox 5.0.1 (x86 de) (x32 Version: 5.0.1 - Mozilla)
MSVCRT (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT_amd64 (x32 Version: 15.4.2862.0708 - Microsoft) Hidden
MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (x32 Version: 4.20.9818.0 - Microsoft Corporation)
Norton Internet Security (x32 Version: 21.1.0.18 - Symantec Corporation)
NTRIP (x32 Version:  - NTRIP)
OEBackup - Outlook Express Datensicherung (Testversion) (x32 Version:  - )
OEMaster - DBX-Reader und Daten-Export für Outlook Express (x32 Version:  - )
OLYMPUS Digital Camera Updater (x32 Version: 1.0.1 - OLYMPUS IMAGING CORP.)
OpenOffice 4.0.1 (x32 Version: 4.01.9714 - Apache Software Foundation)
PDFCreator (x32 Version: 1.7.1 - pdfforge)
QuickTime (x32 Version: 7.74.80.86 - Apple Inc.)
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealPlayer (x32 Version: 15.0.4 - RealNetworks)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.4.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.4.0 - Renesas Electronics Corporation) Hidden
Revo Uninstaller 1.95 (x32 Version: 1.95 - VS Revo Group)
SilverFast 8.0.1r13 (64bit) (x32 Version: 8.0.1r13 - LaserSoft Imaging AG)
Spyder3Express (x32 Version:  - )
STANLY Track (HKCU Version:  - NLR)
Stellarium 0.12.4 (Version: 0.12.4 - Stellarium team)
Symantec Technical Support Web Controls (x32 Version: 3.5.3 - Symantec Corporation)
System Requirements Lab for Intel (x32 Version: 4.4.24.0 - Husdawg, LLC)
TuneUp Utilities 2014 (de-DE) (x32 Version: 14.0.1000.221 - TuneUp Software) Hidden
TuneUp Utilities 2014 (x32 Version: 14.0.1000.221 - TuneUp Software)
TuneUp Utilities 2014 (x32 Version: 14.0.1000.221 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 12.0.3600.73 - TuneUp Software) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3000.132 - TuneUp Software) Hidden
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2473228) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3 - Microsoft Corporation)
VideoDownloadConverter Internet Explorer Toolbar (x32 Version:  - Mindspark Interactive Network) <==== ATTENTION
VLC media player 2.1.2 (x32 Version: 2.1.2 - VideoLAN)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Essentials (x32 Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live ID Sign-in Assistant (Version: 7.250.4232.0 - Microsoft Corporation) Hidden
Windows Live Installer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Language Selector (Version: 15.4.3555.0308 - Microsoft Corporation) Hidden
Windows Live Mail (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Mesh ActiveX control for remote connections (x32 Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live MIME IFilter (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Photo Common (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Remote Client (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Client Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live Remote Service Resources (Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Windows Live SOXE (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (x32 Version: 15.4.3508.1109 - Microsoft Corporation) Hidden
Windows Live Writer (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows Live Writer Resources (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Windows-Treiberpaket - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)

==================== Restore Points  =========================

22-01-2014 11:32:41 Uniblue SpeedUpMyPC installation
29-01-2014 16:02:43 Geplanter Prüfpunkt
04-02-2014 09:32:13 OpenOffice 4.0.1 wird installiert
07-02-2014 14:24:28 Adblock Plus for IE
10-02-2014 16:31:21 Adblock Plus for IE
10-02-2014 16:32:03 Removed Adblock Plus for IE (32-bit and 64-bit)
10-02-2014 16:33:21 Adblock Plus for IE
10-02-2014 16:33:58 Adblock Plus for IE

==================== Hosts content: ==========================

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____N C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {0B2DD2F8-3803-4FFB-A356-B90CCE77374C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-07] (Google Inc.)
Task: {0D0700C1-2039-4203-BB6C-C3B8EAAA4D92} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-02-06] (Adobe Systems Incorporated)
Task: {365582C5-CB63-4A98-BF84-24D4D28D7378} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-1654125919-855541359-3433209274-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-04-30] (RealNetworks, Inc.)
Task: {4AEACD5B-96C1-463B-A1FC-27022F6B6005} - System32\Tasks\RealCreateProcessScheduledTask2742949S-1-5-21-1654125919-855541359-3433209274-1000 => c:\program files (x86)\real\realplayer\realplay.exe [2012-06-08] (RealNetworks, Inc.)
Task: {4C8865D9-815B-4E1C-8C65-83CE7FE3B5A2} - System32\Tasks\Norton Internet Security\Norton Error Analyzer => C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\SymErr.exe [2013-08-01] (Symantec Corporation)
Task: {4DADF2CA-9334-49C8-8826-88B4ACE47900} - System32\Tasks\Google Updater and Installer => C:\Users\Besitzer\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {55515B29-1490-4787-9AAE-48A5A07300B6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-12-07] (Google Inc.)
Task: {5B944C46-99EB-4559-B528-1659F78A0DEC} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-1654125919-855541359-3433209274-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-04-30] (RealNetworks, Inc.)
Task: {5BE15600-93E5-4A44-AB01-C17D071D0C86} - System32\Tasks\5021 => Wscript.exe C:\Users\Besitzer\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Task: {69B4DE0B-5054-4760-9E77-186BDC229F6A} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02] (Oracle Corporation)
Task: {78E05A94-48E1-4866-93F2-D9D38F865EEE} - System32\Tasks\{1F7E5E00-647A-47E6-9221-252E2625D665} => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageLauncher.exe [2009-08-28] (Acronis)
Task: {89A2BBCA-433F-4DA4-BD01-93B5B521943D} - System32\Tasks\Norton WSC Integration => C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\WSCStub.exe [2013-10-08] (Symantec Corporation)
Task: {8BD6AC21-8434-4ADD-8015-50BAA928F8CE} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {A9F98046-3081-4997-B922-FFE619E35DA5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: {B10F2A1C-0C6D-46EF-BCEB-6ABC91D5064B} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [2013-12-18] (TuneUp Software)
Task: {BAAEA414-656B-4B5A-A5CF-DA3D254B63ED} - System32\Tasks\0 => Iexplore.exe  <==== ATTENTION
Task: {BB3C9B46-660E-468F-A7FB-4F0167C925A8} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2012 => C:\Program Files (x86)\TuneUp Utilities 2012\OneClick.exe
Task: {BC7DC894-B831-4252-AC27-90C77817F0B8} - System32\Tasks\Start Registry Reviver => C:\Program Files (x86)\Reviversoft\Registry Reviver\RegistryReviver.exe
Task: {CD968D66-7D79-4C88-A0B5-FED7E68150AE} - System32\Tasks\Norton Internet Security\Norton Error Processor => C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\SymErr.exe [2013-08-01] (Symantec Corporation)
Task: {D4F8EEDC-64E7-49AD-BE69-88852D88F58D} - System32\Tasks\Real Networks Scheduler => c:\program files (x86)\real\realplayer\Update\realsched.exe [2012-06-08] (RealNetworks, Inc.)
Task: {E11A1FE1-3971-49DE-A5A9-9250E2C2DF49} - System32\Tasks\Adobe Reader and Acrobat Manager => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {EE289BC9-387C-488C-B2D6-B6FBFE6DEA46} - System32\Tasks\Adobe-Online-Aktualisierungsprogramm => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21] (Adobe Systems Incorporated)
Task: {F7E186B2-5BEB-4176-B198-85BFCBC22408} - System32\Tasks\Real Player-Online-Aktualisierungsprogramm => c:\program files (x86)\real\realplayer\Update\realsched.exe [2012-06-08] (RealNetworks, Inc.)
Task: {FC1F032C-7853-4FCA-918D-3D213E04DE08} - System32\Tasks\{16D2A7FC-5A97-4D12-B147-F00E9F44C7A0} => C:\Program Files (x86)\Datacolor\Spyder3Express\Spyder3Express.exe [2009-12-03] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2011-04-07 16:34 - 2006-09-20 07:35 - 00020480 _____ () C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
2011-04-07 16:34 - 2006-09-19 15:05 - 00024576 _____ () C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
2014-01-15 11:36 - 2014-01-15 11:36 - 00128952 _____ () C:\Users\Besitzer\AppData\Local\HD Streamer\crxmon.exe
2009-08-11 10:19 - 2009-08-11 10:19 - 06798714 _____ () C:\Program Files (x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility.exe
2014-01-29 12:41 - 2014-01-29 12:41 - 00492032 _____ () C:\Program Files (x86)\HD Streamer\BackgroundHost64.exe
2009-08-11 10:19 - 2009-08-11 10:19 - 00135168 _____ () C:\Program Files (x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility Libs\Appearance Pak.dll
2009-08-11 10:19 - 2009-08-11 10:19 - 00147456 _____ () C:\Program Files (x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility Libs\RegEx.dll
2009-08-11 10:19 - 2009-08-11 10:19 - 00897024 _____ () C:\Program Files (x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility Libs\RBScript.dll
2009-08-11 10:19 - 2009-08-11 10:19 - 00098304 _____ () C:\Program Files (x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility Libs\Shell.dll
2009-08-11 10:19 - 2009-08-11 10:19 - 00762368 _____ () C:\Program Files (x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility Libs\XML.dll
2009-08-11 10:19 - 2009-08-11 10:19 - 00335872 _____ () C:\Program Files (x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility Libs\CGamma.dll
2009-08-11 10:19 - 2009-08-11 10:19 - 00131072 _____ () C:\Program Files (x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility Libs\CSensor.dll
2009-08-11 10:19 - 2009-08-11 10:19 - 00028672 _____ () C:\Program Files (x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility Libs\MBSRegistrationPlugin16042.dll
2009-08-11 10:19 - 2009-08-11 10:19 - 00025600 _____ () C:\Program Files (x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility Libs\MBSPluginVersionPlugin16042.dll
2014-01-19 15:09 - 2014-01-19 15:09 - 00401336 _____ () C:\Program Files (x86)\Universal Updater\UpdaterService.exe
2013-09-20 13:50 - 2013-09-20 13:50 - 00988160 _____ () C:\Program Files (x86)\OpenOffice 4\program\libxml2.dll
2013-09-17 04:54 - 2013-09-17 04:54 - 00170496 _____ () C:\Program Files (x86)\OpenOffice 4\program\libxslt.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (02/12/2014 02:53:44 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: rundll32.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc637
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002d225
ID des fehlerhaften Prozesses: 0x81c
Startzeit der fehlerhaften Anwendung: 0xrundll32.exe0
Pfad der fehlerhaften Anwendung: rundll32.exe1
Pfad des fehlerhaften Moduls: rundll32.exe2
Berichtskennung: rundll32.exe3

Error: (02/11/2014 02:12:41 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: NIS.exe, Version: 12.11.0.16, Zeitstempel: 0x524cbb5e
Name des fehlerhaften Moduls: SPOCCLNT.DLL, Version: 5.1.0.10, Zeitstempel: 0x524228ac
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000018b1
ID des fehlerhaften Prozesses: 0xab4
Startzeit der fehlerhaften Anwendung: 0xNIS.exe0
Pfad der fehlerhaften Anwendung: NIS.exe1
Pfad des fehlerhaften Moduls: NIS.exe2
Berichtskennung: NIS.exe3

Error: (02/11/2014 02:01:40 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: rundll32.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc637
Name des fehlerhaften Moduls: netprofm.dll, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bda75
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00034eea
ID des fehlerhaften Prozesses: 0x818
Startzeit der fehlerhaften Anwendung: 0xrundll32.exe0
Pfad der fehlerhaften Anwendung: rundll32.exe1
Pfad des fehlerhaften Moduls: rundll32.exe2
Berichtskennung: rundll32.exe3

Error: (02/11/2014 07:09:43 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: IEFRAME.dll, Version: 11.0.9600.16476, Zeitstempel: 0x52944cf2
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0027ce17
ID des fehlerhaften Prozesses: 0x10dc
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3

Error: (02/10/2014 01:50:15 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: Au_.exe, Version: 1.8.28.7, Zeitstempel: 0x4b1ae3cc
Name des fehlerhaften Moduls: chrmPref.dll, Version: 1.0.0.1, Zeitstempel: 0x51b96765
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000080c7
ID des fehlerhaften Prozesses: 0x1694
Startzeit der fehlerhaften Anwendung: 0xAu_.exe0
Pfad der fehlerhaften Anwendung: Au_.exe1
Pfad des fehlerhaften Moduls: Au_.exe2
Berichtskennung: Au_.exe3

Error: (02/08/2014 10:21:08 AM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: rundll32.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc637
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0003aff2
ID des fehlerhaften Prozesses: 0x918
Startzeit der fehlerhaften Anwendung: 0xrundll32.exe0
Pfad der fehlerhaften Anwendung: rundll32.exe1
Pfad des fehlerhaften Moduls: rundll32.exe2
Berichtskennung: rundll32.exe3

Error: (02/04/2014 02:09:07 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: rundll32.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc637
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00039342
ID des fehlerhaften Prozesses: 0x904
Startzeit der fehlerhaften Anwendung: 0xrundll32.exe0
Pfad der fehlerhaften Anwendung: rundll32.exe1
Pfad des fehlerhaften Moduls: rundll32.exe2
Berichtskennung: rundll32.exe3

Error: (02/04/2014 10:36:07 AM) (Source: MsiInstaller) (User: Besitzer-PC)
Description: Produkt: OpenOffice.org 3.3 -- Bitte beenden Sie OpenOffice.org 3.3 und den OpenOffice.org 3.3-Schnellstarter, bevor Sie fortfahren. Falls Sie ein Mehrbenutzersystem benutzen, stellen Sie sicher, dass kein anderer Nutzer  OpenOffice.org 3.3 geöffnet hat.

Error: (02/02/2014 08:24:45 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: rundll32.exe, Version: 6.1.7600.16385, Zeitstempel: 0x4a5bc637
Name des fehlerhaften Moduls: ole32.dll, Version: 6.1.7601.17514, Zeitstempel: 0x4ce7b96f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00039342
ID des fehlerhaften Prozesses: 0xa40
Startzeit der fehlerhaften Anwendung: 0xrundll32.exe0
Pfad der fehlerhaften Anwendung: rundll32.exe1
Pfad des fehlerhaften Moduls: rundll32.exe2
Berichtskennung: rundll32.exe3

Error: (02/02/2014 07:58:44 PM) (Source: Application Error) (User: )
Description: Name der fehlerhaften Anwendung: IEXPLORE.EXE, Version: 11.0.9600.16428, Zeitstempel: 0x525b664c
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00038e19
ID des fehlerhaften Prozesses: 0x13ac
Startzeit der fehlerhaften Anwendung: 0xIEXPLORE.EXE0
Pfad der fehlerhaften Anwendung: IEXPLORE.EXE1
Pfad des fehlerhaften Moduls: IEXPLORE.EXE2
Berichtskennung: IEXPLORE.EXE3


System errors:
=============
Error: (02/13/2014 06:52:32 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (02/13/2014 06:52:32 AM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (02/12/2014 06:02:47 PM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (02/12/2014 04:52:47 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (02/12/2014 04:52:47 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (02/12/2014 04:04:41 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (02/12/2014 04:04:41 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.

Error: (02/12/2014 10:59:42 AM) (Source: EventLog) (User: )
Description: Das System wurde zuvor am ‎12.‎02.‎2014 um 09:09:01 unerwartet heruntergefahren.

Error: (02/12/2014 07:44:39 AM) (Source: Service Control Manager) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst lmhosts erreicht.

Error: (02/11/2014 03:26:22 PM) (Source: Schannel) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung generiert: 40. Der interne Fehlerstatus lautet: 252.


Microsoft Office Sessions:
=========================
Error: (02/12/2014 02:53:44 PM) (Source: Application Error)(User: )
Description: rundll32.exe6.1.7600.163854a5bc637ole32.dll6.1.7601.175144ce7b96fc00000050002d22581c01cf27d92f3b0332C:\Windows\SysWOW64\rundll32.exeC:\Windows\syswow64\ole32.dll161382c0-93ed-11e3-a230-4061865ed214

Error: (02/11/2014 02:12:41 PM) (Source: Application Error)(User: )
Description: NIS.exe12.11.0.16524cbb5eSPOCCLNT.DLL5.1.0.10524228acc0000005000018b1ab401cf26ebafd60cfdC:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exeC:\PROGRAM FILES (X86)\NORTON INTERNET SECURITY\ENGINE\21.1.0.18\SPOCCLNT.DLL2f917121-931e-11e3-9fa4-4061865ed214

Error: (02/11/2014 02:01:40 PM) (Source: Application Error)(User: )
Description: rundll32.exe6.1.7600.163854a5bc637netprofm.dll6.1.7600.163854a5bda75c000000500034eea81801cf26ebac26145cC:\Windows\SysWOW64\rundll32.exeC:\Windows\System32\netprofm.dlla5af217a-931c-11e3-9fa4-4061865ed214

Error: (02/11/2014 07:09:43 AM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.16428525b664cIEFRAME.dll11.0.9600.1647652944cf2c00000050027ce1710dc01cf26ed59b705c4C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\system32\IEFRAME.dll19363a61-92e3-11e3-9fa4-4061865ed214

Error: (02/10/2014 01:50:15 PM) (Source: Application Error)(User: )
Description: Au_.exe1.8.28.74b1ae3ccchrmPref.dll1.0.0.151b96765c0000005000080c7169401cf265e94fec119C:\Users\Besitzer\AppData\Local\Temp\~nsu.tmp\Au_.exeC:\Users\Besitzer\AppData\Local\Temp\nsfE7A.tmp\chrmPref.dlle2ee92b9-9251-11e3-a3c0-4061865ed214

Error: (02/08/2014 10:21:08 AM) (Source: Application Error)(User: )
Description: rundll32.exe6.1.7600.163854a5bc637ole32.dll6.1.7601.175144ce7b96fc00000050003aff291801cf248db8cdc955C:\Windows\SysWOW64\rundll32.exeC:\Windows\syswow64\ole32.dll577844ef-90a2-11e3-a220-4061865ed214

Error: (02/04/2014 02:09:07 PM) (Source: Application Error)(User: )
Description: rundll32.exe6.1.7600.163854a5bc637ole32.dll6.1.7601.175144ce7b96fc00000050003934290401cf218ae0072032C:\Windows\SysWOW64\rundll32.exeC:\Windows\syswow64\ole32.dll86fa8f0a-8d9d-11e3-bcfe-4061865ed214

Error: (02/04/2014 10:36:07 AM) (Source: MsiInstaller)(User: Besitzer-PC)
Description: Produkt: OpenOffice.org 3.3 -- Bitte beenden Sie OpenOffice.org 3.3 und den OpenOffice.org 3.3-Schnellstarter, bevor Sie fortfahren. Falls Sie ein Mehrbenutzersystem benutzen, stellen Sie sicher, dass kein anderer Nutzer  OpenOffice.org 3.3 geöffnet hat.(NULL)(NULL)(NULL)(NULL)(NULL)

Error: (02/02/2014 08:24:45 PM) (Source: Application Error)(User: )
Description: rundll32.exe6.1.7600.163854a5bc637ole32.dll6.1.7601.175144ce7b96fc000000500039342a4001cf20488f9c5ac9C:\Windows\SysWOW64\rundll32.exeC:\Windows\syswow64\ole32.dllabbc9df7-8c3f-11e3-826c-4061865ed214

Error: (02/02/2014 07:58:44 PM) (Source: Application Error)(User: )
Description: IEXPLORE.EXE11.0.9600.16428525b664cntdll.dll6.1.7601.18247521ea8e7c000000500038e1913ac01cf2048c8a4d450C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXEC:\Windows\SysWOW64\ntdll.dll091a1a7e-8c3c-11e3-826c-4061865ed214


==================== Memory info ===========================

Percentage of memory in use: 48%
Total physical RAM: 4061.24 MB
Available physical RAM: 2088.76 MB
Total Pagefile: 8120.66 MB
Available Pagefile: 6079.16 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:1397.17 GB) (Free:1335.62 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: 7FD2F734)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=-698828718080) - (Type=07 NTFS)

==================== End Of Log ============================

--- --- ---

--- --- ---

--- --- ---

--- --- ---

==================== End Of Log ============================
--- --- ---

Aneri 13.02.2014 10:06
Zitat:
Zitat von Frusti (Beitrag 1251873)
Hallo,
vielen Dank für Deine Bereitschaft, mir helfen zu wollen.
Ich will dir nicht nur helfen, ich werde dir helfen, was auch dringend nötig ist ;)

Schritt 1:

Deinstalliere bitte folgende Software:
(über Systemsteuerung => Software)

Code:
Java 7 Update 25
TuneUp Utilities 2014
VideoDownloadConverter Internet Explorer Toolbar
Warum Tuneup:
Ich sehe das Du sogenannte Registry Cleaner am System hast.
In deinem Fall TuneUp Utilities 2014.

Wir empfehlen auf keinen Fall jegliche Art von Registry Cleaner.

Der Grund ist ganz einfach:

Die Registry ist das Hirn des Systems. Funktioniert das Hirn nicht, funktioniert der Rest nicht mehr wirklich.
Wir lesen oft genug von Hilfesuchenden, dass deren System nach der Nutzung von Registry Cleanern nicht mehr booted.
  • Wie soll der Cleaner zu 100% wissen ob der Eintrag benötigt wird oder nicht ?
  • Es ist vollkommen egal ob ein paar verwaiste Registry Einträge am System sind oder nicht.
  • Auch die dauernd angepriesene Beschleunigung des Systems ist nur bedingt wahr. Du würdest es nicht merken.
Ein sogenanntes False Positive von einem Cleaner kann auch dein System unbootbar machen.
Zerstörst Du die Registry, zerstörst Du Windows.

Ich empfehle Dir hiermit die oben genannte Software zu deinstallieren und in Zukunft auf solche Art von Software zu verzichten.


Sollte Sich eines Der Programme nicht deinstallieren lassen teile es mir bitte mit.

Schritt 2:
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 3:

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.


Schritt 4:

erstelle ein neues FRST Logfile und Poste es hier

Schritt 5:

teile mir mit ob sich das Verhalten deines Rechners verändert hat.

Frusti 13.02.2014 10:23
Hallo Aneri,

vielen Dank für Deine so schnelle Antwort.

Ich stehe z.Zt. gewaltig unter Zeitdruck, deshalb kann es bis zu ein paar Stunden dauern, bis ich das Empfohlene - um es gewissenhaft durchzuführen - abgearbeitet habe.

Ich melde mich baldmöglichst.

Gruß
Frusti

Aneri 13.02.2014 10:25
kein Problem

einfach melden wenn du durch bist damit, aber bitte erledigen, dein System hat es nötig...

Frusti 14.02.2014 12:13
Hallo Aneri,

so, nun habe ich die Punkte abgearbeitet.

1.) Zu Deinem Schritt 1:
"Tune Up Utilities" lösche ich eigentlich ungern. Bezügl. der registry-Löschungen kann ich ja aktiv verhindern, daß gelöscht wird!
Den Rest des Tune Up-Programms hielt ich eigentlich für recht gut brauchbar!?
Die beiden anderen Programme sind weg.

2.) Die Situation der unerwünschten Popups ist noch nicht so recht befriedigend.
Es erscheinen weiterhin unerwünschte Popups.

3.) Das Ergebnis des AdwCleaner:AdwCleaner Logfile:
Code:
# AdwCleaner v3.018 - Bericht erstellt am 13/02/2014 um 17:51:45
# Updated 28/01/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Besitzer - BESITZER-PC
# Gestartet von : C:\Users\Besitzer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZSF80D\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****

Dienst Gelöscht : VideoDownloadConverter_4zService

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\Ask
Ordner Gelöscht : C:\ProgramData\Babylon
Ordner Gelöscht : C:\ProgramData\BitGuard
Ordner Gelöscht : C:\ProgramData\Browser Manager
Ordner Gelöscht : C:\ProgramData\BrowserProtect
Ordner Gelöscht : C:\ProgramData\DSearchLink
Ordner Gelöscht : C:\ProgramData\IBUpdaterService
Ordner Gelöscht : C:\ProgramData\Tarma Installer
Ordner Gelöscht : C:\Program Files (x86)\Amazon Browser Bar
Ordner Gelöscht : C:\Program Files (x86)\VideoDownloadConverter_4z
Ordner Gelöscht : C:\Users\Besitzer\AppData\Local\Babylon
Ordner Gelöscht : C:\Users\Besitzer\AppData\Local\VideoDownloadConverter_4z
Ordner Gelöscht : C:\Users\Besitzer\AppData\LocalLow\BabylonToolbar
Ordner Gelöscht : C:\Users\Besitzer\AppData\LocalLow\Delta
Ordner Gelöscht : C:\Users\Besitzer\AppData\LocalLow\iac
Ordner Gelöscht : C:\Users\Besitzer\AppData\LocalLow\incredibar.com
Ordner Gelöscht : C:\Users\Besitzer\AppData\LocalLow\Minibar
Ordner Gelöscht : C:\Users\Besitzer\AppData\LocalLow\searchresultstb
Ordner Gelöscht : C:\Users\Besitzer\AppData\LocalLow\VideoDownloadConverter_4z
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\Babylon
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\BrowserCompanion
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\OpenCandy
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\pdfforge
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\PerformerSoft
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444}
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\ffxtlbr@incredibar.com
Datei Gelöscht : C:\Windows\System32\roboot64.exe
Datei Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\bprotector_extensions.sqlite
Datei Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\searchplugins\Web Search.xml
Datei Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\user.js

***** [ Verknüpfungen ] *****

Verknüpfung Desinfiziert : C:\Users\Besitzer\Desktop\Programme\''Free Video to DVD''\Search.lnk

***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403A-B9D2-65C292C39087}]
Wert Gelöscht : [x64] HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{336D0C35-8A85-403A-B9D2-65C292C39087}]
Schlüssel Gelöscht : HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\dlnembnfbcpjnepmfjmngjenhhajpdfd
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Schlüssel Gelöscht : HKCU\Software\Microsoft\Office\Powerpoint\Addins\babylonofficeaddin.officeaddin
Schlüssel Gelöscht : HKCU\Software\Microsoft\Office\Word\Addins\babylonofficeaddin.officeaddin
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\BabylonHelper.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\BabylonIEPI.DLL
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\BabylonTC.EXE
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BabylonIEPI.BabylonIEBho
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BabylonIEPI.BabylonIEBho.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BabylonOfficeAddin.OfficeAddin
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BabylonOfficeAddin.OfficeAddin.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BabylonTC.GingerApplication
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\BabylonTC.GingerApplication.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Prod.cap
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.FeedManager.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLMenu.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.HTMLPanel.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.MultipleButton.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.PseudoTransparentPlugin.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.Radio.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.RadioSettings.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ScriptButton.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.SettingsPlugin
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.SettingsPlugin.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ThirdPartyInstaller.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\BabylonTC_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\incredibar_installer_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\IncredibarToolbar_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Savings Sidekick_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\Savings Sidekick_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasapi32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\smartbar_rasmancs
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Babylon.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_irfanview-plugins[1]_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_irfanview-plugins[1]_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_microsoft-kamera-codec-paket_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_microsoft-kamera-codec-paket_RASMANCS
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_swf-player_RASAPI32
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_fuer_swf-player_RASMANCS
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [VideoDownloadConverter Search Scope Monitor]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [VideoDownloadConverter_4z Browser Plugin Loader]
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [VideoDownloadConverter_4z Browser Plugin Loader 64]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{B16632F1-24E0-4D99-A68D-70BFB6447C48}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C0CEA572-2978-4DFC-A672-8100FF0E276A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{2A1260C1-2964-453F-B0BA-FA429472EB5F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{363D5C92-10DC-4287-93E5-1832EECC48EC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3B41BE90-F731-4137-AFF3-2CA951E7F0D9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{4128C64D-F0DD-4811-9405-D22294E8151F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{69407823-3494-4400-8D49-612549E8F4EE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6AC0BB10-C922-45E2-857D-2A368FE749E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8FCA5302-6D6D-4645-BF99-D43CF76CE474}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C547C6C2-561B-4169-A2A5-20BA771CA93B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DD385519-22E7-4BE2-8A8D-35C66DF4858E}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{DF390AA1-1E65-4825-B8E7-BE6B47BD56B8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{ED345812-2722-4DCA-9976-D01832DB44EE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{47700C35-9E3E-4DAD-934C-0CE28A87237C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5F339F0B-716F-408F-A627-DEEB5DEB4020}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{716E443D-7CAA-44F1-866B-F45D00E712CC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{95734BDE-B702-45B9-86E5-27676729F904}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B7EA2226-F876-4BE4-B478-76EBAE2A668A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D0482C8E-BAEA-4943-911A-B661060F56A7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2D3826A1-F3E8-45D6-94B5-C26D8EC0073B}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{3EE17DD1-E28B-4AED-A3B2-9C29CB2C19D6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{886F93AD-3CBB-4424-8442-A7340243540F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{AA289DBC-59B6-40A5-AC7D-C90DF850289C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{CA723163-6FAD-43D4-8B93-0D8C52BD9974}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{F1F328EB-F5A5-432B-A54C-05F3EF5B0BD8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{FE8DBB09-C3D3-4477-80CB-D38914B94BB8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9CFACCB6-2F3F-4177-94EA-0D2B72D384C1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C547C6C2-561B-4169-A2A5-20BA771CA93B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C547C6C2-561B-4169-A2A5-20BA771CA93B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{312F84FB-8970-4FD3-BDDB-7012EAC4AFC9}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C547C6C2-561B-4169-A2A5-20BA771CA93B}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1F6F39C1-00A8-4752-A94C-D0EA92D978B6}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5354D921-3F52-47C5-938D-77A2FB6DEFE7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{71144427-1368-4D18-8DC9-2AE3CC4C4F83}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ED345812-2722-4DCA-9976-D01832DB44EE}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{628F3201-34D0-49C0-BB9A-82A26AEFB291}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006EE092-9658-4FD6-BD8E-A21A348E59F5}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{C424171E-592A-415A-9EB1-DFD6D95D3530}]
Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{93A3111F-4F74-4ED8-895E-D9708497629E}]
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE07101B-46D4-4A98-AF68-0333EA26E113}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1AD2049E-E483-4425-8555-8E0775ACB631}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2D73F2D0-2FAB-458E-977D-2F9050E0ED60}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3E9469AF-E866-4476-B767-810630F1F6E7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{47700C35-9E3E-4DAD-934C-0CE28A87237C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5F339F0B-716F-408F-A627-DEEB5DEB4020}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{716E443D-7CAA-44F1-866B-F45D00E712CC}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{72063D77-7590-4DA9-A7F8-F5ECAF3632C4}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7FC87AC5-FA93-476E-A32C-A941229DED0B}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{95734BDE-B702-45B9-86E5-27676729F904}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B7EA2226-F876-4BE4-B478-76EBAE2A668A}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D0482C8E-BAEA-4943-911A-B661060F56A7}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
Wert Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{AE07101B-46D4-4A98-AF68-0333EA26E113}]
Schlüssel Gelöscht : HKCU\Software\Alexa Internet
Schlüssel Gelöscht : HKCU\Software\BabylonToolbar
Schlüssel Gelöscht : HKCU\Software\DataMngr
Schlüssel Gelöscht : HKCU\Software\distromatic
Schlüssel Gelöscht : HKCU\Software\IM
Schlüssel Gelöscht : HKCU\Software\ParetoLogic
Schlüssel Gelöscht : HKCU\Software\performersoft llc
Schlüssel Gelöscht : HKCU\Software\smartbar
Schlüssel Gelöscht : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Schlüssel Gelöscht : HKLM\Software\Babylon
Schlüssel Gelöscht : HKLM\Software\BabylonToolbar
Schlüssel Gelöscht : HKLM\Software\bProtector
Schlüssel Gelöscht : HKLM\Software\DataMngr
Schlüssel Gelöscht : HKLM\Software\Iminent
Schlüssel Gelöscht : HKLM\Software\ParetoLogic
Schlüssel Gelöscht : HKLM\Software\Uniblue\DriverScanner
Schlüssel Gelöscht : HKLM\Software\Web Assistant
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Tarma Installer
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Web Assistant

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16428

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]

-\\ Mozilla Firefox v5.0.1 (de)

[ Datei : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\prefs.js ]

Zeile gelöscht : user_pref("browser.search.defaultengine", "Ask.com");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.admin", false);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.autoRvrt", "false");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.babExt", "");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.babTrack", "affID=115849&tt=3612_6");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.bbDpng", "11");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.cntry", "DE");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.dfltSrch", true);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.excTlbr", false);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.hdrMd5", "4AC8320469FB9CCBC18FFD96E13AD16E");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.hmpg", true);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.id", "8a03fc9e0000000000004061865ed214");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.instlDay", "15586");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.keyWordUrl", "hxxp://search.babylon.com/?affID=115849&tt=3612_6&babsrc=KW_ss&mntrId=8a03fc9e0000000000004061865ed214&q=");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.6.9.1218:33:42");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.newTab", false);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?affID=115849&tt=3612_6&babsrc=NT_ss&mntrId=8a03fc9e0000000000004061865ed214");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
Zeile gelöscht : user_pref("extensions.BabylonToolbar.pnu_base", "{\"newVrsn\":\"74\",\"lastVrsn\":\"74\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\"showSilent\":\"true\",\"msgTs\":0,\"lstMsgTs\":\"0\"}");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.sg", "tzb");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.smplGrp", "tzb");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.srcExt", "ss");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=8a03fc9e0000000000004061865ed214&q=");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.vrsn", "1.6.9.12");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.vrsnTs", "1.6.9.1218:33:42");
Zeile gelöscht : user_pref("extensions.BabylonToolbar.vrsni", "1.6.9.12");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.babExt", "");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=115849&tt=3612_6");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.newTab", false);
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Zeile gelöscht : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.6.9.1218:33:42");
Zeile gelöscht : user_pref("extensions.enabledAddons", "{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22,{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24,{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}:6.0.29,{C9B68337-E93A-44EA-94D[...]
Zeile gelöscht : user_pref("extensions.facemoods.DNSErrUrl", "hxxp://start.facemoods.com/?a=make&f=5");
Zeile gelöscht : user_pref("extensions.facemoods.aflt", "make");
Zeile gelöscht : user_pref("extensions.facemoods.dfltSrch", true);
Zeile gelöscht : user_pref("extensions.facemoods.dfltSrchPrvdr", "Facemoods Search");
Zeile gelöscht : user_pref("extensions.facemoods.dnsErr", true);
Zeile gelöscht : user_pref("extensions.facemoods.firstRun", true);
Zeile gelöscht : user_pref("extensions.facemoods.hmpg", true);
Zeile gelöscht : user_pref("extensions.facemoods.hmpgUrl", "hxxp://start.facemoods.com/?a=make");
Zeile gelöscht : user_pref("extensions.facemoods.id", "8a03fc9e0000000000004061865ed214");
Zeile gelöscht : user_pref("extensions.facemoods.instlDay", "15330");
Zeile gelöscht : user_pref("extensions.facemoods.mntz", "");
Zeile gelöscht : user_pref("extensions.facemoods.newTab", true);
Zeile gelöscht : user_pref("extensions.facemoods.newTabUrl", "hxxp://start.facemoods.com/?a=make&f=2");
Zeile gelöscht : user_pref("extensions.facemoods.prtnrId", "facemoods.com");
Zeile gelöscht : user_pref("extensions.facemoods.searchProviderAdded", true);
Zeile gelöscht : user_pref("extensions.facemoods.sid", "1ef7d35917304ead8184dde2e8ce38a4");
Zeile gelöscht : user_pref("extensions.facemoods.tlbrSrchUrl", "hxxp://start.facemoods.com/?a=make&f=3");
Zeile gelöscht : user_pref("extensions.facemoods.vrsn", "1.4.17.11");
Zeile gelöscht : user_pref("extensions.incredibar.RadioMyStations", "[{\"id\":\"1069\",\"name\":\"ORS Rom?ntica en espa?ol\",\"url\":\"hxxp://www.orsradio.com/oldies56k.asx\",\"streamType\":\"mp\"},{\"id\":\"1213\",\"[...]
Zeile gelöscht : user_pref("extensions.incredibar.actvtyRptTime", "1378927736353");
Zeile gelöscht : user_pref("extensions.incredibar.admin", false);
Zeile gelöscht : user_pref("extensions.incredibar.aflt", "orgnl");
Zeile gelöscht : user_pref("extensions.incredibar.afterInstallRpt", "sent");
Zeile gelöscht : user_pref("extensions.incredibar.cntry", "DE");
Zeile gelöscht : user_pref("extensions.incredibar.dfltLng", "EN");
Zeile gelöscht : user_pref("extensions.incredibar.dfltSrch", false);
Zeile gelöscht : user_pref("extensions.incredibar.dfltlng", "en");
Zeile gelöscht : user_pref("extensions.incredibar.dfltsrch", "false");
Zeile gelöscht : user_pref("extensions.incredibar.did", "10643");
Zeile gelöscht : user_pref("extensions.incredibar.envrmnt", "production");
Zeile gelöscht : user_pref("extensions.incredibar.excTlbr", false);
Zeile gelöscht : user_pref("extensions.incredibar.hdrMd5", "D8D22DE52FC2073D88C93CBDCC3D170A");
Zeile gelöscht : user_pref("extensions.incredibar.hmpg", false);
Zeile gelöscht : user_pref("extensions.incredibar.hrdid", "8a03fc9e0000000000004061865ed214");
Zeile gelöscht : user_pref("extensions.incredibar.id", "8a03fc9e0000000000004061865ed214");
Zeile gelöscht : user_pref("extensions.incredibar.installerproductid", "26");
Zeile gelöscht : user_pref("extensions.incredibar.instlDay", "15578");
Zeile gelöscht : user_pref("extensions.incredibar.instlRef", "");
Zeile gelöscht : user_pref("extensions.incredibar.instlday", "15578");
Zeile gelöscht : user_pref("extensions.incredibar.instlref", "");
Zeile gelöscht : user_pref("extensions.incredibar.isDcmntCmplt", true);
Zeile gelöscht : user_pref("extensions.incredibar.isdcmntcmplt", "false");
Zeile gelöscht : user_pref("extensions.incredibar.keywordurl", "");
Zeile gelöscht : user_pref("extensions.incredibar.lastVrsnTs", "1.5.11.1415:58:04");
Zeile gelöscht : user_pref("extensions.incredibar.mntrvrsn", "1.2.0");
Zeile gelöscht : user_pref("extensions.incredibar.newTab", false);
Zeile gelöscht : user_pref("extensions.incredibar.newtab", "false");
Zeile gelöscht : user_pref("extensions.incredibar.newtaburl", "");
Zeile gelöscht : user_pref("extensions.incredibar.noFFXTlbr", false);
Zeile gelöscht : user_pref("extensions.incredibar.ppd", "666661");
Zeile gelöscht : user_pref("extensions.incredibar.prdct", "incredibar");
Zeile gelöscht : user_pref("extensions.incredibar.productid", "26");
Zeile gelöscht : user_pref("extensions.incredibar.prtnrId", "Incredibar");
Zeile gelöscht : user_pref("extensions.incredibar.prtnrid", "Incredibar");
Zeile gelöscht : user_pref("extensions.incredibar.sg", "none");
Zeile gelöscht : user_pref("extensions.incredibar.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.incredibar.smplgrp", "none");
Zeile gelöscht : user_pref("extensions.incredibar.srch", "");
Zeile gelöscht : user_pref("extensions.incredibar.srchprvdr", "");
Zeile gelöscht : user_pref("extensions.incredibar.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.incredibar.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6R8DfWGzg2&loc=IB_TB&i=26&search=");
Zeile gelöscht : user_pref("extensions.incredibar.tlbrid", "base");
Zeile gelöscht : user_pref("extensions.incredibar.tlbrsrchurl", "hxxp://mystart.Incredibar.com/?a=6R8DfWGzg2&loc=IB_TB&i=26&search=");
Zeile gelöscht : user_pref("extensions.incredibar.upn2", "6R8DfWGzg2");
Zeile gelöscht : user_pref("extensions.incredibar.upn2n", "92824947608783518");
Zeile gelöscht : user_pref("extensions.incredibar.vrsn", "1.5.11.14");
Zeile gelöscht : user_pref("extensions.incredibar.vrsnTs", "1.5.11.1415:58:04");
Zeile gelöscht : user_pref("extensions.incredibar.vrsni", "1.5.11.14");
Zeile gelöscht : user_pref("extensions.incredibar.vrsnts", "1.5.11.1415:58:04");
Zeile gelöscht : user_pref("extensions.incredibar.wnd", "{\"cloudcover\":\"25\",\"humidity\":\"88\",\"observation_time\":\"05:25 PM\",\"precipMM\":\"0.8\",\"pressure\":\"1013\",\"temp_C\":\"13\",\"temp_F\":\"55\",\"vi[...]
Zeile gelöscht : user_pref("extensions.incredibar_i.aflt", "orgnl");
Zeile gelöscht : user_pref("extensions.incredibar_i.dfltLng", "");
Zeile gelöscht : user_pref("extensions.incredibar_i.did", "10643");
Zeile gelöscht : user_pref("extensions.incredibar_i.excTlbr", false);
Zeile gelöscht : user_pref("extensions.incredibar_i.id", "8a03fc9e0000000000004061865ed214");
Zeile gelöscht : user_pref("extensions.incredibar_i.installerproductid", "26");
Zeile gelöscht : user_pref("extensions.incredibar_i.instlDay", "15578");
Zeile gelöscht : user_pref("extensions.incredibar_i.instlRef", "");
Zeile gelöscht : user_pref("extensions.incredibar_i.ms_url_id", "");
Zeile gelöscht : user_pref("extensions.incredibar_i.newTab", false);
Zeile gelöscht : user_pref("extensions.incredibar_i.ppd", "666661");
Zeile gelöscht : user_pref("extensions.incredibar_i.prdct", "incredibar");
Zeile gelöscht : user_pref("extensions.incredibar_i.productid", "26");
Zeile gelöscht : user_pref("extensions.incredibar_i.prtnrId", "Incredibar");
Zeile gelöscht : user_pref("extensions.incredibar_i.smplGrp", "none");
Zeile gelöscht : user_pref("extensions.incredibar_i.tlbrId", "base");
Zeile gelöscht : user_pref("extensions.incredibar_i.tlbrSrchUrl", "hxxp://mystart.Incredibar.com/?a=6R8DfWGzg2&loc=IB_TB&i=26&search=");
Zeile gelöscht : user_pref("extensions.incredibar_i.upn2", "6R8DfWGzg2");
Zeile gelöscht : user_pref("extensions.incredibar_i.upn2n", "92824947608783518");
Zeile gelöscht : user_pref("extensions.incredibar_i.vrsn", "1.5.11.14");
Zeile gelöscht : user_pref("extensions.incredibar_i.vrsnTs", "1.5.11.1415:58:04");
Zeile gelöscht : user_pref("extensions.incredibar_i.vrsni", "1.5.11.14");

-\\ Google Chrome v

[ Datei : C:\Users\Besitzer\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [31815 octets] - [13/02/2014 17:51:02]
AdwCleaner[S0].txt - [29937 octets] - [13/02/2014 17:51:45]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [29998 octets] ##########
--- --- ---


Das Weitere im nächsten post.

Viele Grüße
frusti

Jetzt habe ich ein Problem: Ich bekomme die beiden weitern Dateien nicht ins Forum!?

Aneri 14.02.2014 14:21
Teile die Dateien auf mehrere Posts auf wenn sie für einen zu groß sind

Frusti 14.02.2014 16:06
Anknüpfend an meine vorige Mail hier:

3.) JRT
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.1 (02.04.2014:1)
OS: Windows 7 Home Premium x64
Ran by Besitzer on 14.02.2014 at 14:32:47,91
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Suspicious HKCU\..\Run entries found. Trojan:JS/Medfos.B?

Value Name Type Value Data
========================================================================================
NextLive REG_SZ C:\Windows\SysWOW64\rundll32.exe "C:\Users\Besitzer\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l




~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Empty Folder] C:\Users\Besitzer\appdata\local\{A3C06863-CB31-464C-A844-A7D3E473E59E}



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 14.02.2014 at 14:39:07,61
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

4.) FRST
FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01
Ran by Besitzer (administrator) on BESITZER-PC on 14-02-2014 15:56:35
Running from C:\Users\Besitzer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZSF80D
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
() C:\Program Files (x86)\Universal Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
() C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Users\Besitzer\AppData\Local\HD Streamer\crxmon.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
() C:\Program Files (x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
() C:\Program Files (x86)\HD Streamer\BackgroundHost64.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_12_0_0_44_ActiveX.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(Farbar) C:\Users\Besitzer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0TZSF80D\FRST64 (1).exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [WrtMon.exe] - C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [20480 2006-09-20] ()
HKLM\...\Run: [VideoDownloadConverter Home Page Guard 64 bit] - "C:\PROGRA~2\VIDEOD~2\bar\1.bin\AppIntegrator64.exe"
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [TrueImageMonitor.exe] - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5078416 2009-08-28] (Acronis)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [VideoDownloadConverter EPM Support] - "C:\PROGRA~2\VIDEOD~2\bar\1.bin\4zmedint.exe" T8EPMSUP.DLL,S
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1654125919-855541359-3433209274-1000\...\Run: [NextLive] - C:\Windows\SysWOW64\rundll32.exe "C:\Users\Besitzer\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKU\S-1-5-21-1654125919-855541359-3433209274-1000\...\Run: [HD Streamer Sync] - C:\Users\Besitzer\AppData\Local\HD Streamer\crxmon.exe [128952 2014-01-15] ()
AppInit_DLLs: c:\progra~2\movies~1\safety~1\x64\safety~2.dll => File Not Found
AppInit_DLLs-x32: c:\progra~2\movies~1\safety~1\safety~2.dll => File Not Found
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\browsemngr.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browsermngr.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe
IFEO\cltmngsvc.exe: [Debugger] tasklist.exe
IFEO\delta babylon.exe: [Debugger] tasklist.exe
IFEO\delta tb.exe: [Debugger] tasklist.exe
IFEO\delta2.exe: [Debugger] tasklist.exe
IFEO\deltainstaller.exe: [Debugger] tasklist.exe
IFEO\deltasetup.exe: [Debugger] tasklist.exe
IFEO\deltatb.exe: [Debugger] tasklist.exe
IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe
IFEO\iminentsetup.exe: [Debugger] tasklist.exe
IFEO\mediabuilder.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"
IFEO\rjatydimofu.exe: [Debugger] tasklist.exe
IFEO\sweetimsetup.exe: [Debugger] tasklist.exe
IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe
IFEO\trueimagelauncher.exe: [Debugger] "C:\Program Files (x86)\TuneUp Utilities 2014\TUAutoReactivator64.exe"

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF249114589E0CE01
SearchScopes: HKLM - {52db1893-8a90-4192-aede-08e00b8f8473} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=100&systemid=473&v=n9602-172&apn_uid=3029124234214494&apn_dtid=BND473&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {52db1893-8a90-4192-aede-08e00b8f8473} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: HD Streamer - {E6062A33-016E-4BDA-A6F1-890D989F8656} - C:\Program Files (x86)\HD Streamer\ScriptHost64.dll (HD Streamer)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HD Streamer - {E6062A33-016E-4BDA-A6F1-890D989F8656} - C:\Program Files (x86)\HD Streamer\ScriptHost.dll (HD Streamer)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - VideoDownloadConverter - {48586425-6bb7-4f51-8dc6-38c88e3ebb58} - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\4zbar.dll No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.4.24.0.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default
FF Homepage: user_pref("browser.startup.homepage", );
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Users\Besitzer\Desktop\Programme - ÖFNNEN\Picasa3\npPicasa3.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @real.com/nppl3260;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @VideoDownloadConverter_4z.com/Plugin - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll No File
FF Plugin-x32: @VideoDownloadConverter_ScriptHelper.com/Plugin - C:\Program Files (x86)\VideoDownloadConverter\npVDCPlugin.dll (Mindspark)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\searchplugins\buenosearch.xml
FF Extension: HD Streamer - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\hd_streamer@iMedia [2014-01-23]
FF Extension: Adblock Plus - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-11]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011-04-05]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011-04-06]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} [2011-10-24]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2012-07-02]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-09-24]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2012-11-12]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-05-09]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-05-09]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [2013-11-21]

Chrome:
=======
CHR Extension: (HD Streamer) - C:\Users\Besitzer\AppData\Local\Google\Chrome\User Data\Default\Extensions\oleglodmkonbpfmlffapjfednjopbeeh [2014-01-22]
CHR HKLM-x32\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2011-12-22]
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-12-08]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\Exts\Chrome.crx [2014-01-21]

==================== Services (Whitelisted) =================

R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [103936 2014-01-20] (Freemake)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe [275696 2013-10-08] (Symantec Corporation)
S3 Symantec RemoteAssist; C:\Program Files (x86)\Common Files\Symantec Shared\Support Controls\ssrc.exe [394704 2008-01-29] (Symantec, Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2103096 2013-12-18] (TuneUp Software)
R2 UniversalUpdater; C:\Program Files (x86)\Universal Updater\UpdaterService.exe [401336 2014-01-19] ()

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140121.001\BHDrvx64.sys [1526488 2013-12-18] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2014-02-04] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140213.002\IDSvia64.sys [521944 2014-01-21] (Symantec Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140213.033\ENG64.SYS [126040 2014-02-04] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140213.033\EX64.SYS [2099288 2014-02-04] (Symantec Corporation)
S3 Spyder3; C:\Windows\System32\DRIVERS\Spyder3.sys [15360 2008-09-08] ()
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1501000.012\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-21] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1501000.012\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
R0 tdrpman251; C:\Windows\System32\DRIVERS\tdrpm251.sys [1455648 2012-06-03] (Acronis)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-14 15:44 - 2014-02-14 15:44 - 00002228 _____ () C:\Windows\PFRO.log
2014-02-14 14:39 - 2014-02-14 14:39 - 00001119 _____ () C:\Users\Besitzer\Desktop\JRT.txt
2014-02-14 14:01 - 2014-02-14 14:01 - 00051442 _____ () C:\Users\Besitzer\Desktop\JRT.zip
2014-02-14 13:57 - 2014-02-14 13:57 - 00000979 _____ () C:\Users\Public\Desktop\WinRAR.lnk
2014-02-14 13:57 - 2014-02-14 13:57 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-02-14 13:44 - 2014-02-14 13:44 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\WinRAR
2014-02-14 13:43 - 2014-02-14 13:57 - 00000000 ____D () C:\Program Files\WinRAR
2014-02-14 13:35 - 2014-02-14 13:35 - 00014143 _____ () C:\Users\Besitzer\Desktop\Datei in zip Datei umwandeln.odt
2014-02-14 11:49 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-14 11:49 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-14 06:40 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-14 06:40 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-14 06:40 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-14 06:40 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-14 06:40 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-14 06:40 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-14 06:38 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-14 06:38 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-14 06:38 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-14 06:38 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-14 06:38 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-14 06:38 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-14 06:38 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-14 06:38 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-14 06:38 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-14 06:38 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-14 06:38 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-14 06:38 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-14 06:38 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-14 06:38 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-14 06:38 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-14 06:38 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-14 06:38 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-14 06:38 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-14 06:28 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-14 06:28 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-14 06:28 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-14 06:28 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-14 06:28 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-14 06:28 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-14 06:28 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-14 06:28 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-14 06:28 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-14 06:28 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-14 06:28 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-14 06:28 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-14 06:28 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-14 06:28 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-14 06:28 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-14 06:28 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-14 06:28 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-14 06:28 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-14 06:28 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-14 06:28 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-14 06:28 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-14 06:28 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-14 06:28 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-14 06:28 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-14 06:28 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-14 06:28 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-14 06:28 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-14 06:28 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-14 06:28 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-14 06:28 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-14 06:28 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-14 06:28 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-14 06:28 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-14 06:28 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-14 06:28 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-14 06:28 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-14 06:28 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-14 06:28 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-14 06:28 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-14 06:22 - 2014-02-14 15:44 - 00000280 _____ () C:\Windows\setupact.log
2014-02-14 06:22 - 2014-02-14 06:22 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-13 18:02 - 2014-02-13 18:02 - 00000000 ____D () C:\Windows\ERUNT
2014-02-13 17:50 - 2014-02-13 17:51 - 00000000 ____D () C:\AdwCleaner
2014-02-13 17:18 - 2014-02-13 17:18 - 00014505 _____ () C:\Users\Besitzer\Desktop\Waschvollautomat.odt
2014-02-13 09:38 - 2014-02-13 09:38 - 00033919 _____ () C:\Users\Besitzer\Desktop\FRST Scan result.odt
2014-02-13 09:32 - 2014-02-14 15:56 - 00000000 ____D () C:\FRST
2014-02-11 10:00 - 2014-02-11 10:04 - 00000000 ____D () C:\Users\Besitzer\Desktop\Air Pad -Kettler-
2014-02-11 08:41 - 2014-02-11 08:43 - 00049026 _____ () C:\Users\Besitzer\Desktop\Schauspielerin Iris Berben genießt Offline-Dasein.odt
2014-02-10 20:41 - 2014-02-10 20:41 - 00016802 _____ () C:\Users\Besitzer\Desktop\ebay-Schuhregal.odt
2014-02-10 13:44 - 2014-02-10 13:44 - 00000000 ____D () C:\Program Files (x86)\buenosearch LTD
2014-02-10 13:43 - 2014-02-10 13:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\buenosearch LTD
2014-02-10 13:38 - 2014-02-10 13:39 - 00000000 ____D () C:\Users\Besitzer\Desktop\PC Tisch
2014-02-10 09:05 - 2014-02-10 09:05 - 00015531 _____ () C:\Users\Besitzer\Desktop\Langenscheidt Spanisch-Deutsch.odt
2014-02-09 08:58 - 2014-02-09 09:00 - 00519719 _____ () C:\Users\Besitzer\Desktop\URUK - 5000 Jahre Megacity.odt
2014-02-09 08:04 - 2014-02-09 08:04 - 00337136 _____ () C:\Users\Besitzer\Desktop\Fürstenberg Porzellan gr. Bonboniere.odt
2014-02-08 13:04 - 2014-02-08 13:06 - 00027856 _____ () C:\Users\Besitzer\Desktop\Mit Scholl-Latour im Libanon.odt
2014-02-07 13:13 - 2014-02-07 17:31 - 00026362 _____ () C:\Users\Besitzer\Desktop\Schildkröt Fitness Balancekissen.odt
2014-02-06 18:06 - 2014-02-06 18:06 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-02-06 18:05 - 2014-02-07 06:07 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-05 15:31 - 2014-02-05 15:32 - 00000000 ____D () C:\Users\Besitzer\Desktop\Pr. v. Hes.-Weingut
2014-02-05 11:17 - 2014-02-05 11:17 - 00027652 _____ () C:\Users\Besitzer\Desktop\KROATIEN - BOSNIEN-HERZEGOWINA - MONTENEGRO.odt
2014-02-05 11:05 - 2014-02-05 11:06 - 00013716 _____ () C:\Users\Besitzer\Desktop\Pan con tomate.odt
2014-02-05 10:53 - 2014-02-05 10:53 - 00011777 _____ () C:\Users\Besitzer\Desktop\Dulcinea-Don Quijote-Ulcinj-Dulcinium.odt
2014-02-04 16:18 - 2014-02-04 16:19 - 00015363 _____ () C:\Users\Besitzer\Desktop\Montenegro.odt
2014-02-04 15:37 - 2014-02-04 15:37 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 - Verknüpfung
2014-02-04 10:42 - 2014-02-04 10:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\OpenOffice
2014-02-04 10:41 - 2014-02-04 14:24 - 00000000 ___SD () C:\Program Files (x86)\OpenOffice 4.0.1
2014-02-04 10:40 - 2014-02-04 10:40 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-04 08:45 - 2014-02-14 10:45 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine-1
2014-02-02 19:57 - 2014-02-02 19:57 - 00000000 ____D () C:\Program Files (x86)\HD Streamer
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Program Files (x86)\VideoDownloadConverter
2014-02-02 11:16 - 2014-02-02 15:14 - 00000000 ____D () C:\Users\Besitzer\Desktop\Psycho
2014-02-02 11:12 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Fotos
2014-02-02 11:09 - 2014-02-11 11:34 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine
2014-02-01 17:15 - 2014-02-01 17:15 - 00011303 _____ () C:\Users\Besitzer\Desktop\a) Anzüge.odt
2014-01-29 17:37 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-3
2014-01-29 17:28 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-2
2014-01-29 10:29 - 2014-01-29 10:29 - 00024872 _____ () C:\Users\Besitzer\Desktop\Verrückt nach Meer-Sendefolge.odt
2014-01-28 17:29 - 2014-01-28 17:29 - 00025284 _____ () C:\Users\Besitzer\Desktop\Tea Time.odt
2014-01-27 13:08 - 2014-01-27 13:08 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Ashampoo
2014-01-27 13:07 - 2014-01-27 13:07 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-01-27 13:00 - 2014-01-27 13:03 - 384551131 _____ () C:\Users\Besitzer\Downloads\Plácido Domingo at Loreley 2013.mp4
2014-01-23 09:49 - 2014-01-23 09:54 - 00000048 _____ () C:\RB.rdat
2014-01-23 09:49 - 2014-01-23 09:54 - 00000048 _____ () C:\License_Time.rdat
2014-01-23 09:49 - 2014-01-23 09:49 - 00000000 ____D () C:\ProgramData\FileCure
2014-01-23 09:47 - 2014-01-23 09:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\FreemakeVideoConverter
2014-01-23 09:45 - 2014-01-23 09:45 - 01071000 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_flashplayer12x32_mssa_aaa_aih(1).exe
2014-01-23 09:45 - 2014-01-23 09:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Macromedia
2014-01-23 09:39 - 2014-01-23 09:39 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-23 09:26 - 2014-01-23 09:26 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm(2).xpi
2014-01-23 09:26 - 2014-01-23 09:26 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm(1).xpi
2014-01-23 09:25 - 2014-01-23 09:25 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm.xpi
2014-01-22 11:31 - 2014-02-14 15:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\newnext.me
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\Documents\Mobogenie
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\HD Streamer
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\genienext
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\.android
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Program Files (x86)\Universal Updater
2014-01-22 11:30 - 2014-01-22 11:32 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
2014-01-20 14:20 - 2014-01-20 14:20 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-20 14:20 - 2013-12-18 21:09 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-01-20 14:20 - 2013-12-18 21:04 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-01-20 14:20 - 2013-12-18 21:04 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-01-20 14:20 - 2013-12-18 21:03 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-01-18 10:41 - 2014-01-18 10:42 - 00012812 _____ () C:\Users\Besitzer\Desktop\Hochzeit im Walde.odt
2014-01-17 20:55 - 2014-02-10 13:36 - 00000000 ____D () C:\Users\Besitzer\Desktop\Ostpreußen_Danzig-Königsberg_DAMALS
2014-01-15 06:55 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 06:55 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 06:55 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 06:55 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

==================== One Month Modified Files and Folders =======

2014-02-14 15:56 - 2014-02-13 09:32 - 00000000 ____D () C:\FRST
2014-02-14 15:52 - 2012-10-04 19:30 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-14 15:52 - 2009-07-14 05:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-14 15:52 - 2009-07-14 05:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-14 15:45 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\newnext.me
2014-02-14 15:45 - 2012-12-07 07:53 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-14 15:44 - 2014-02-14 15:44 - 00002228 _____ () C:\Windows\PFRO.log
2014-02-14 15:44 - 2014-02-14 06:22 - 00000280 _____ () C:\Windows\setupact.log
2014-02-14 15:44 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-14 15:42 - 2011-04-04 11:29 - 02002550 _____ () C:\Windows\WindowsUpdate.log
2014-02-14 15:05 - 2012-12-07 07:53 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-14 14:39 - 2014-02-14 14:39 - 00001119 _____ () C:\Users\Besitzer\Desktop\JRT.txt
2014-02-14 14:29 - 2013-11-13 17:06 - 00003954 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{083BECD6-A6F2-4401-A905-5865C87918C6}
2014-02-14 14:15 - 2012-12-10 07:41 - 00000000 ____D () C:\Users\Besitzer\Desktop\Programme
2014-02-14 14:01 - 2014-02-14 14:01 - 00051442 _____ () C:\Users\Besitzer\Desktop\JRT.zip
2014-02-14 13:57 - 2014-02-14 13:57 - 00000979 _____ () C:\Users\Public\Desktop\WinRAR.lnk
2014-02-14 13:57 - 2014-02-14 13:57 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-02-14 13:57 - 2014-02-14 13:43 - 00000000 ____D () C:\Program Files\WinRAR
2014-02-14 13:44 - 2014-02-14 13:44 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\WinRAR
2014-02-14 13:35 - 2014-02-14 13:35 - 00014143 _____ () C:\Users\Besitzer\Desktop\Datei in zip Datei umwandeln.odt
2014-02-14 13:35 - 2011-05-12 17:37 - 36079616 ___SH () C:\Users\Besitzer\Desktop\Thumbs.db
2014-02-14 12:10 - 2009-07-14 18:58 - 00667970 _____ () C:\Windows\system32\perfh007.dat
2014-02-14 12:10 - 2009-07-14 18:58 - 00136714 _____ () C:\Windows\system32\perfc007.dat
2014-02-14 12:10 - 2009-07-14 06:13 - 01537850 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-14 10:45 - 2014-02-04 08:45 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine-1
2014-02-14 08:15 - 2012-06-03 19:14 - 00003012 _____ () C:\Windows\System32\Tasks\{1F7E5E00-647A-47E6-9221-252E2625D665}
2014-02-14 06:22 - 2014-02-14 06:22 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-13 18:02 - 2014-02-13 18:02 - 00000000 ____D () C:\Windows\ERUNT
2014-02-13 17:51 - 2014-02-13 17:50 - 00000000 ____D () C:\AdwCleaner
2014-02-13 17:18 - 2014-02-13 17:18 - 00014505 _____ () C:\Users\Besitzer\Desktop\Waschvollautomat.odt
2014-02-13 09:38 - 2014-02-13 09:38 - 00033919 _____ () C:\Users\Besitzer\Desktop\FRST Scan result.odt
2014-02-13 06:34 - 2011-04-07 17:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\CrashDumps
2014-02-12 18:02 - 2013-09-23 11:36 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\vlc
2014-02-12 18:01 - 2011-05-15 07:22 - 00000000 ____D () C:\Users\Besitzer\Desktop\Video
2014-02-11 11:34 - 2014-02-02 11:09 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine
2014-02-11 10:04 - 2014-02-11 10:00 - 00000000 ____D () C:\Users\Besitzer\Desktop\Air Pad -Kettler-
2014-02-11 08:43 - 2014-02-11 08:41 - 00049026 _____ () C:\Users\Besitzer\Desktop\Schauspielerin Iris Berben genießt Offline-Dasein.odt
2014-02-10 20:41 - 2014-02-10 20:41 - 00016802 _____ () C:\Users\Besitzer\Desktop\ebay-Schuhregal.odt
2014-02-10 13:44 - 2014-02-10 13:44 - 00000000 ____D () C:\Program Files (x86)\buenosearch LTD
2014-02-10 13:43 - 2014-02-10 13:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\buenosearch LTD
2014-02-10 13:39 - 2014-02-10 13:38 - 00000000 ____D () C:\Users\Besitzer\Desktop\PC Tisch
2014-02-10 13:36 - 2014-01-17 20:55 - 00000000 ____D () C:\Users\Besitzer\Desktop\Ostpreußen_Danzig-Königsberg_DAMALS
2014-02-10 09:05 - 2014-02-10 09:05 - 00015531 _____ () C:\Users\Besitzer\Desktop\Langenscheidt Spanisch-Deutsch.odt
2014-02-09 09:00 - 2014-02-09 08:58 - 00519719 _____ () C:\Users\Besitzer\Desktop\URUK - 5000 Jahre Megacity.odt
2014-02-09 08:04 - 2014-02-09 08:04 - 00337136 _____ () C:\Users\Besitzer\Desktop\Fürstenberg Porzellan gr. Bonboniere.odt
2014-02-09 06:08 - 2011-04-10 09:40 - 00000000 ____D () C:\Users\Besitzer\Desktop\Kleidung, Access., Einlegesohlen
2014-02-08 13:06 - 2014-02-08 13:04 - 00027856 _____ () C:\Users\Besitzer\Desktop\Mit Scholl-Latour im Libanon.odt
2014-02-08 10:45 - 2013-11-30 08:00 - 00000000 ____D () C:\Users\Besitzer\Desktop\GARTEN
2014-02-07 17:31 - 2014-02-07 13:13 - 00026362 _____ () C:\Users\Besitzer\Desktop\Schildkröt Fitness Balancekissen.odt
2014-02-07 08:54 - 2012-01-13 20:55 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-02-07 08:07 - 2011-04-06 10:33 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Windows Live
2014-02-07 06:07 - 2014-02-06 18:05 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-06 18:06 - 2014-02-06 18:06 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-02-06 13:16 - 2014-02-14 06:28 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-14 06:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-14 06:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-14 06:28 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-14 06:28 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-14 06:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-14 06:28 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-14 06:28 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-14 06:28 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-14 06:28 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-14 06:28 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-14 06:28 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-14 06:28 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-14 06:28 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-14 06:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-14 06:28 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-14 06:28 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-14 06:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-14 06:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-14 06:28 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-14 06:28 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-14 06:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-14 06:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-14 06:28 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-14 06:28 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-14 06:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-14 06:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-14 06:28 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-14 06:28 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-14 06:28 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-14 06:28 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-14 06:28 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-14 06:28 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-14 06:28 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-14 06:28 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-14 06:28 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-14 06:28 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-14 06:28 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-14 06:28 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-06 06:52 - 2012-10-04 19:30 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-06 06:52 - 2012-10-04 19:29 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-06 06:52 - 2012-10-04 19:29 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-05 15:32 - 2014-02-05 15:31 - 00000000 ____D () C:\Users\Besitzer\Desktop\Pr. v. Hes.-Weingut
2014-02-05 15:17 - 2013-08-24 09:25 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-1
2014-02-05 12:22 - 2011-04-21 17:51 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Stellarium
2014-02-05 12:22 - 2011-04-21 17:50 - 00000000 ____D () C:\Program Files\Stellarium
2014-02-05 11:17 - 2014-02-05 11:17 - 00027652 _____ () C:\Users\Besitzer\Desktop\KROATIEN - BOSNIEN-HERZEGOWINA - MONTENEGRO.odt
2014-02-05 11:06 - 2014-02-05 11:05 - 00013716 _____ () C:\Users\Besitzer\Desktop\Pan con tomate.odt
2014-02-05 10:53 - 2014-02-05 10:53 - 00011777 _____ () C:\Users\Besitzer\Desktop\Dulcinea-Don Quijote-Ulcinj-Dulcinium.odt
2014-02-04 18:38 - 2013-09-08 07:01 - 00289784 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-04 18:11 - 2011-04-05 09:54 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-04 16:19 - 2014-02-04 16:18 - 00015363 _____ () C:\Users\Besitzer\Desktop\Montenegro.odt
2014-02-04 15:37 - 2014-02-04 15:37 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 - Verknüpfung
2014-02-04 14:32 - 2011-04-04 11:29 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-04 14:24 - 2014-02-04 10:41 - 00000000 ___SD () C:\Program Files (x86)\OpenOffice 4.0.1
2014-02-04 12:06 - 2012-06-13 17:06 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\NPE
2014-02-04 11:31 - 2013-09-07 17:04 - 00064768 _____ () C:\Users\Besitzer\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-04 10:42 - 2014-02-04 10:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\OpenOffice
2014-02-04 10:40 - 2014-02-04 10:40 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-03 11:52 - 2014-02-02 11:12 - 00000000 ____D () C:\Users\Besitzer\Desktop\Fotos
2014-02-03 11:52 - 2014-01-29 17:37 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-3
2014-02-03 11:52 - 2014-01-29 17:28 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-2
2014-02-02 19:57 - 2014-02-02 19:57 - 00000000 ____D () C:\Program Files (x86)\HD Streamer
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Program Files (x86)\VideoDownloadConverter
2014-02-02 15:14 - 2014-02-02 11:16 - 00000000 ____D () C:\Users\Besitzer\Desktop\Psycho
2014-02-02 15:10 - 2013-10-10 10:39 - 00017877 _____ () C:\Users\Besitzer\Desktop\Piaf-Konzert.odt
2014-02-02 15:04 - 2013-12-18 10:22 - 00000000 ____D () C:\Users\Besitzer\Desktop\ASTRO
2014-02-02 14:58 - 2011-04-10 09:40 - 00000000 ____D () C:\Users\Besitzer\Desktop\HAUPTORDNER
2014-02-02 14:49 - 2013-11-22 10:43 - 00000000 ____D () C:\Users\Besitzer\Desktop\Mnünzen
2014-02-01 17:15 - 2014-02-01 17:15 - 00011303 _____ () C:\Users\Besitzer\Desktop\a) Anzüge.odt
2014-01-31 06:31 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-29 10:29 - 2014-01-29 10:29 - 00024872 _____ () C:\Users\Besitzer\Desktop\Verrückt nach Meer-Sendefolge.odt
2014-01-28 22:49 - 2013-09-23 08:21 - 00000000 ____D () C:\Program Files (x86)\StreamTransport
2014-01-28 17:29 - 2014-01-28 17:29 - 00025284 _____ () C:\Users\Besitzer\Desktop\Tea Time.odt
2014-01-27 17:26 - 2011-04-07 17:06 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-27 13:08 - 2014-01-27 13:08 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Ashampoo
2014-01-27 13:07 - 2014-01-27 13:07 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-01-27 13:03 - 2014-01-27 13:00 - 384551131 _____ () C:\Users\Besitzer\Downloads\Plácido Domingo at Loreley 2013.mp4
2014-01-23 09:54 - 2014-01-23 09:49 - 00000048 _____ () C:\RB.rdat
2014-01-23 09:54 - 2014-01-23 09:49 - 00000048 _____ () C:\License_Time.rdat
2014-01-23 09:49 - 2014-01-23 09:49 - 00000000 ____D () C:\ProgramData\FileCure
2014-01-23 09:47 - 2014-01-23 09:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\FreemakeVideoConverter
2014-01-23 09:46 - 2011-04-05 10:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Adobe
2014-01-23 09:45 - 2014-01-23 09:45 - 01071000 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_flashplayer12x32_mssa_aaa_aih(1).exe
2014-01-23 09:45 - 2014-01-23 09:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Macromedia
2014-01-23 09:44 - 2011-12-22 15:27 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2014-01-23 09:44 - 2011-12-22 15:27 - 00000000 ____D () C:\ProgramData\Freemake
2014-01-23 09:39 - 2014-01-23 09:39 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-23 09:26 - 2014-01-23 09:26 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm(2).xpi
2014-01-23 09:26 - 2014-01-23 09:26 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm(1).xpi
2014-01-23 09:25 - 2014-01-23 09:25 - 00774595 _____ () C:\Users\Besitzer\Downloads\video_downloadhelper-4.9.14-fx_sm.xpi
2014-01-23 07:08 - 2011-04-08 09:59 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-01-22 13:23 - 2013-08-31 13:51 - 00000000 ____D () C:\Users\Besitzer\Documents\Freemake
2014-01-22 12:30 - 2011-12-22 15:27 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-01-22 11:32 - 2014-01-22 11:30 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
2014-01-22 11:32 - 2013-11-20 15:06 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Mobogenie
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\Documents\Mobogenie
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\HD Streamer
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\genienext
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\.android
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Program Files (x86)\Universal Updater
2014-01-22 11:31 - 2011-04-04 11:29 - 00000000 ____D () C:\Users\Besitzer
2014-01-21 06:41 - 2012-04-02 18:34 - 00000000 ____D () C:\Users\Besitzer\Desktop\Interessenbereiche -Definierung-
2014-01-20 14:21 - 2013-10-21 09:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-01-20 14:20 - 2014-01-20 14:20 - 00005327 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_51-b13.log
2014-01-20 14:20 - 2011-04-05 11:14 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-19 17:06 - 2012-04-02 18:34 - 00000000 ____D () C:\Users\Besitzer\Desktop\AKTIV - Ordner
2014-01-18 10:42 - 2014-01-18 10:41 - 00012812 _____ () C:\Users\Besitzer\Desktop\Hochzeit im Walde.odt
2014-01-18 07:29 - 2011-12-27 18:22 - 00000000 ____D () C:\Program Files\Google
2014-01-18 07:29 - 2011-06-12 18:56 - 00000000 ____D () C:\Program Files (x86)\Google
2014-01-17 07:13 - 2013-11-13 15:43 - 00000000 ____D () C:\ProgramData\Google
2014-01-17 07:13 - 2011-04-29 07:04 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Google
2014-01-15 21:52 - 2013-08-14 20:13 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-15 21:49 - 2011-04-04 14:51 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Files to move or delete:
====================
C:\Users\Public\AlexaNSISPlugin.6552.dll


Some content of TEMP:
====================
C:\Users\Besitzer\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-08 09:55

==================== End Of Log ============================
--- --- ---

--- --- ---


Ich hoffe, ich habe Dir nun die angeforderten Dinge geben können.
Ich freue mich auf Deine Antwort.

Viele Grüße
Frusti

Aneri 18.02.2014 16:56
Hi sry war länger auße Haus :(

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.

Frusti 19.02.2014 16:58
Hallo,

vielen Dank für die Fortsetzung Deiner Bemühungen.

Ich habe mir Mühe gegeben, alles nach Deinen Anweisungen zu machen. Ich hoffe, es ist ok so:

Hier die "Combo"-Datei:

Combofix Logfile:
Code:
ComboFix 14-02-16.01 - Besitzer 18.02.2014  17:59:19.1.2 - x64
Microsoft Windows 7 Home Premium  6.1.7601.1.1252.49.1031.18.4061.2105 [GMT 1:00]
ausgeführt von:: c:\users\Besitzer\Downloads\ComboFix.exe
AV: Norton Internet Security *Disabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
FW: Norton Internet Security *Disabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
SP: Norton Internet Security *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((  Weitere Löschungen  ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\Install.exe
c:\users\Besitzer\AppData\Roaming\Microsoft\Windows\Recent\Thumbs.db
c:\users\Public\AlexaNSISPlugin.6552.dll
c:\windows\IsUn0407.exe
c:\windows\SysWow64\Packet.dll
c:\windows\SysWow64\wpcap.dll
.
.
(((((((((((((((((((((((  Dateien erstellt von 2014-01-18 bis 2014-02-18  ))))))))))))))))))))))))))))))
.
.
2014-02-18 17:04 . 2014-02-18 17:04        --------        d-----w-        c:\users\Default\AppData\Local\temp
2014-02-18 10:54 . 2014-02-18 10:54        --------        d-----w-        c:\users\Besitzer\MediathekView
2014-02-18 10:38 . 2014-02-18 10:40        108968        ----a-w-        c:\windows\system32\WindowsAccessBridge-64.dll
2014-02-18 10:37 . 2014-02-18 10:37        189352        ----a-w-        c:\windows\system32\javaw.exe
2014-02-18 10:37 . 2014-02-18 10:37        189352        ----a-w-        c:\windows\system32\java.exe
2014-02-18 10:37 . 2014-02-18 10:37        --------        d-----w-        c:\program files\Java
2014-02-14 12:43 . 2014-02-14 12:57        --------        d-----w-        c:\program files\WinRAR
2014-02-14 10:49 . 2013-12-21 09:53        548864        ----a-w-        c:\windows\system32\vbscript.dll
2014-02-14 10:49 . 2013-12-21 08:56        454656        ----a-w-        c:\windows\SysWow64\vbscript.dll
2014-02-14 05:40 . 2013-12-06 02:30        1882112        ----a-w-        c:\windows\system32\msxml3.dll
2014-02-14 05:40 . 2013-12-06 02:02        1237504        ----a-w-        c:\windows\SysWow64\msxml3.dll
2014-02-14 05:40 . 2013-12-06 02:30        2048        ----a-w-        c:\windows\system32\msxml3r.dll
2014-02-14 05:40 . 2013-12-06 02:02        2048        ----a-w-        c:\windows\SysWow64\msxml3r.dll
2014-02-14 05:28 . 2014-02-06 11:30        2724864        ----a-w-        c:\windows\system32\mshtml.tlb
2014-02-13 17:02 . 2014-02-13 17:02        --------        d-----w-        c:\windows\ERUNT
2014-02-13 16:50 . 2014-02-13 16:51        --------        d-----w-        C:\AdwCleaner
2014-02-13 08:32 . 2014-02-14 14:57        --------        d-----w-        C:\FRST
2014-02-10 12:44 . 2014-02-10 12:44        --------        d-----w-        c:\program files (x86)\buenosearch LTD
2014-02-10 12:43 . 2014-02-10 12:43        --------        d-----w-        c:\users\Besitzer\AppData\Roaming\buenosearch LTD
2014-02-06 17:06 . 2014-02-06 17:06        51496        ----a-w-        c:\windows\system32\drivers\stflt.sys
2014-02-06 17:05 . 2014-02-07 05:07        --------        d-----w-        c:\program files (x86)\Spyware Terminator
2014-02-04 09:42 . 2014-02-04 09:42        --------        d-----w-        c:\users\Besitzer\AppData\Roaming\OpenOffice
2014-02-04 09:40 . 2014-02-04 09:40        --------        d-----w-        c:\program files (x86)\OpenOffice 4
2014-02-02 18:57 . 2014-02-02 18:57        --------        d-----w-        c:\program files (x86)\HD Streamer
2014-02-02 18:20 . 2014-02-02 18:20        --------        d-----w-        c:\program files (x86)\VideoDownloadConverter
2014-01-27 12:08 . 2014-01-27 12:08        --------        d-----w-        c:\users\Besitzer\AppData\Roaming\Ashampoo
2014-01-27 12:07 . 2014-01-27 12:07        --------        d-----w-        c:\programdata\Ashampoo
2014-01-23 08:49 . 2014-01-23 08:49        --------        d-----w-        c:\programdata\FileCure
2014-01-23 08:47 . 2014-01-23 08:47        --------        d-----w-        c:\users\Besitzer\AppData\Local\FreemakeVideoConverter
2014-01-23 08:45 . 2014-01-23 08:45        --------        d-----w-        c:\users\Besitzer\AppData\Local\Macromedia
2014-01-23 08:39 . 2014-01-23 08:39        --------        d-----w-        c:\programdata\McAfee
2014-01-22 10:31 . 2014-01-22 10:31        --------        d-----w-        c:\users\Besitzer\AppData\Local\HD Streamer
2014-01-22 10:31 . 2014-01-22 10:31        --------        d-----w-        c:\program files (x86)\Universal Updater
2014-01-22 10:31 . 2014-01-22 10:31        --------        d-----w-        c:\users\Besitzer\.android
2014-01-22 10:31 . 2014-02-18 11:21        --------        d-----w-        c:\users\Besitzer\AppData\Roaming\newnext.me
2014-01-22 10:31 . 2014-01-22 10:31        --------        d-----w-        c:\users\Besitzer\AppData\Local\genienext
2014-01-22 10:30 . 2014-01-22 10:32        --------        d-----w-        c:\program files (x86)\Mobogenie
2014-01-20 13:20 . 2013-12-18 20:09        96168        ----a-w-        c:\windows\SysWow64\WindowsAccessBridge-32.dll
.
.
.
((((((((((((((((((((((((((((((((((((  Find3M Bericht  ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-02-16 08:33 . 2011-04-04 13:51        88567024        ----a-w-        c:\windows\system32\MRT.exe
2014-02-06 05:52 . 2012-10-04 18:29        71048        ----a-w-        c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-02-06 05:52 . 2012-10-04 18:29        692616        ----a-w-        c:\windows\SysWow64\FlashPlayerApp.exe
2013-12-18 09:01 . 2013-09-07 12:37        40760        ----a-w-        c:\windows\system32\TURegOpt.exe
2013-12-18 09:01 . 2014-01-07 07:18        29496        ----a-w-        c:\windows\system32\authuitu.dll
2013-12-18 09:01 . 2014-01-07 07:18        25400        ----a-w-        c:\windows\SysWow64\authuitu.dll
2013-12-18 09:01 . 2013-09-10 13:37        43320        ----a-w-        c:\windows\system32\uxtuneup.dll
2013-12-18 09:01 . 2013-09-10 13:37        36152        ----a-w-        c:\windows\SysWow64\uxtuneup.dll
2013-12-04 11:43 . 2013-12-04 11:43        940032        ----a-w-        c:\windows\system32\MsSpellCheckingFacility.exe
2013-12-04 11:43 . 2013-12-04 11:43        194048        ----a-w-        c:\windows\SysWow64\elshyph.dll
2013-12-04 11:43 . 2013-12-04 11:43        942592        ----a-w-        c:\windows\system32\jsIntl.dll
2013-12-04 11:43 . 2013-12-04 11:43        90112        ----a-w-        c:\windows\system32\SetIEInstalledDate.exe
2013-12-04 11:43 . 2013-12-04 11:43        86016        ----a-w-        c:\windows\SysWow64\iesysprep.dll
2013-12-04 11:43 . 2013-12-04 11:43        86016        ----a-w-        c:\windows\system32\RegisterIEPKEYs.exe
2013-12-04 11:43 . 2013-12-04 11:43        84992        ----a-w-        c:\windows\system32\mshtmled.dll
2013-12-04 11:43 . 2013-12-04 11:43        83968        ----a-w-        c:\windows\system32\MshtmlDac.dll
2013-12-04 11:43 . 2013-12-04 11:43        81408        ----a-w-        c:\windows\system32\icardie.dll
2013-12-04 11:43 . 2013-12-04 11:43        774144        ----a-w-        c:\windows\system32\jscript.dll
2013-12-04 11:43 . 2013-12-04 11:43        77312        ----a-w-        c:\windows\system32\tdc.ocx
2013-12-04 11:43 . 2013-12-04 11:43        74240        ----a-w-        c:\windows\SysWow64\SetIEInstalledDate.exe
2013-12-04 11:43 . 2013-12-04 11:43        71680        ----a-w-        c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-12-04 11:43 . 2013-12-04 11:43        645120        ----a-w-        c:\windows\SysWow64\jsIntl.dll
2013-12-04 11:43 . 2013-12-04 11:43        62464        ----a-w-        c:\windows\SysWow64\tdc.ocx
2013-12-04 11:43 . 2013-12-04 11:43        62464        ----a-w-        c:\windows\system32\pngfilt.dll
2013-12-04 11:43 . 2013-12-04 11:43        61952        ----a-w-        c:\windows\SysWow64\MshtmlDac.dll
2013-12-04 11:43 . 2013-12-04 11:43        616104        ----a-w-        c:\windows\system32\ieapfltr.dat
2013-12-04 11:43 . 2013-12-04 11:43        52224        ----a-w-        c:\windows\system32\msfeedsbs.dll
2013-12-04 11:43 . 2013-12-04 11:43        48640        ----a-w-        c:\windows\SysWow64\mshtmler.dll
2013-12-04 11:43 . 2013-12-04 11:43        48640        ----a-w-        c:\windows\system32\mshtmler.dll
2013-12-04 11:43 . 2013-12-04 11:43        48128        ----a-w-        c:\windows\system32\imgutil.dll
2013-12-04 11:43 . 2013-12-04 11:43        453120        ----a-w-        c:\windows\system32\dxtmsft.dll
2013-12-04 11:43 . 2013-12-04 11:43        413696        ----a-w-        c:\windows\system32\html.iec
2013-12-04 11:43 . 2013-12-04 11:43        40448        ----a-w-        c:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-04 11:43 . 2013-12-04 11:43        36352        ----a-w-        c:\windows\SysWow64\imgutil.dll
2013-12-04 11:43 . 2013-12-04 11:43        34816        ----a-w-        c:\windows\SysWow64\JavaScriptCollectionAgent.dll
2013-12-04 11:43 . 2013-12-04 11:43        337408        ----a-w-        c:\windows\SysWow64\html.iec
2013-12-04 11:43 . 2013-12-04 11:43        30208        ----a-w-        c:\windows\system32\licmgr10.dll
2013-12-04 11:43 . 2013-12-04 11:43        296960        ----a-w-        c:\windows\system32\dxtrans.dll
2013-12-04 11:43 . 2013-12-04 11:43        263376        ----a-w-        c:\windows\system32\iedkcs32.dll
2013-12-04 11:43 . 2013-12-04 11:43        247808        ----a-w-        c:\windows\system32\msls31.dll
2013-12-04 11:43 . 2013-12-04 11:43        24576        ----a-w-        c:\windows\SysWow64\licmgr10.dll
2013-12-04 11:43 . 2013-12-04 11:43        243200        ----a-w-        c:\windows\system32\webcheck.dll
2013-12-04 11:43 . 2013-12-04 11:43        235520        ----a-w-        c:\windows\system32\url.dll
2013-12-04 11:43 . 2013-12-04 11:43        235008        ----a-w-        c:\windows\system32\elshyph.dll
2013-12-04 11:43 . 2013-12-04 11:43        182272        ----a-w-        c:\windows\SysWow64\msls31.dll
2013-12-04 11:43 . 2013-12-04 11:43        167424        ----a-w-        c:\windows\system32\iexpress.exe
2013-12-04 11:43 . 2013-12-04 11:43        151552        ----a-w-        c:\windows\SysWow64\iexpress.exe
2013-12-04 11:43 . 2013-12-04 11:43        147968        ----a-w-        c:\windows\system32\occache.dll
2013-12-04 11:43 . 2013-12-04 11:43        143872        ----a-w-        c:\windows\system32\wextract.exe
2013-12-04 11:43 . 2013-12-04 11:43        139264        ----a-w-        c:\windows\SysWow64\wextract.exe
2013-12-04 11:43 . 2013-12-04 11:43        13824        ----a-w-        c:\windows\system32\mshta.exe
2013-12-04 11:43 . 2013-12-04 11:43        135680        ----a-w-        c:\windows\system32\iepeers.dll
2013-12-04 11:43 . 2013-12-04 11:43        13312        ----a-w-        c:\windows\SysWow64\mshta.exe
2013-12-04 11:43 . 2013-12-04 11:43        13312        ----a-w-        c:\windows\system32\msfeedssync.exe
2013-12-04 11:43 . 2013-12-04 11:43        131072        ----a-w-        c:\windows\system32\IEAdvpack.dll
2013-12-04 11:43 . 2013-12-04 11:43        1228800        ----a-w-        c:\windows\system32\mshtmlmedia.dll
2013-12-04 11:43 . 2013-12-04 11:43        111616        ----a-w-        c:\windows\SysWow64\IEAdvpack.dll
2013-12-04 11:43 . 2013-12-04 11:43        105984        ----a-w-        c:\windows\system32\iesysprep.dll
2013-12-04 11:43 . 2013-12-04 11:43        1051136        ----a-w-        c:\windows\SysWow64\mshtmlmedia.dll
2013-12-04 11:43 . 2013-12-04 11:43        101376        ----a-w-        c:\windows\system32\inseng.dll
2013-11-27 01:41 . 2014-01-15 05:55        343040        ----a-w-        c:\windows\system32\drivers\usbhub.sys
2013-11-27 01:41 . 2014-01-15 05:55        99840        ----a-w-        c:\windows\system32\drivers\usbccgp.sys
2013-11-27 01:41 . 2014-01-15 05:55        53248        ----a-w-        c:\windows\system32\drivers\usbehci.sys
2013-11-27 01:41 . 2014-01-15 05:55        325120        ----a-w-        c:\windows\system32\drivers\usbport.sys
2013-11-27 01:41 . 2014-01-15 05:55        25600        ----a-w-        c:\windows\system32\drivers\usbohci.sys
2013-11-27 01:41 . 2014-01-15 05:55        30720        ----a-w-        c:\windows\system32\drivers\usbuhci.sys
2013-11-27 01:41 . 2014-01-15 05:55        7808        ----a-w-        c:\windows\system32\drivers\usbd.sys
2013-11-26 11:40 . 2014-01-15 05:55        376768        ----a-w-        c:\windows\system32\drivers\netio.sys
2013-11-26 10:32 . 2014-01-15 05:55        3156480        ----a-w-        c:\windows\system32\win32k.sys
2013-11-23 18:26 . 2013-12-12 05:20        417792        ----a-w-        c:\windows\SysWow64\WMPhoto.dll
2013-11-23 17:47 . 2013-12-12 05:20        465920        ----a-w-        c:\windows\system32\WMPhoto.dll
2013-11-21 18:39 . 2012-11-13 17:30        177752        ----a-w-        c:\windows\system32\drivers\SYMEVENT64x86.SYS
.
.
((((((((((((((((((((((((((((  Autostartpunkte der Registrierung  ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\~\Browser Helper Objects\{E6062A33-016E-4BDA-A6F1-890D989F8656}]
2014-01-29 11:41        438784        ----a-w-        c:\program files (x86)\HD Streamer\ScriptHost.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NextLive"="c:\users\Besitzer\AppData\Roaming\newnext.me\nengine.dll" [2014-01-06 1283584]
"HD Streamer Sync"="c:\users\Besitzer\AppData\Local\HD Streamer\crxmon.exe" [2014-01-15 128952]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288]
"TrueImageMonitor.exe"="c:\program files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" [2009-08-28 5078416]
"APSDaemon"="c:\program files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2012-10-11 59280]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Spyder3Utility.lnk - c:\program files (x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility.exe [2009-8-11 6798714]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"LoadAppInit_DLLs"=1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\run-]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe"
"TkBellExe"="c:\program files (x86)\real\realplayer\Update\realsched.exe" -osboot
"QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" -atboottime
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 Freemake Improver;Freemake Improver;c:\programdata\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe;c:\programdata\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [x]
R3 afcdp;afcdp;c:\windows\system32\DRIVERS\afcdp.sys;c:\windows\SYSNATIVE\DRIVERS\afcdp.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI;c:\windows\system32\drivers\IntcHdmi.sys;c:\windows\SYSNATIVE\drivers\IntcHdmi.sys [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Spyder3;Datacolor Spyder3;c:\windows\system32\DRIVERS\Spyder3.sys;c:\windows\SYSNATIVE\DRIVERS\Spyder3.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R4 afcdpsrv;Acronis Nonstop Backup service;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe;c:\program files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe;c:\program files\Windows Live\Mesh\wlcrasvc.exe [x]
S0 SymDS;Symantec Data Store;c:\windows\system32\drivers\NISx64\1501000.012\SYMDS64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1501000.012\SYMDS64.SYS [x]
S0 SymEFA;Symantec Extended File Attributes;c:\windows\system32\drivers\NISx64\1501000.012\SYMEFA64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1501000.012\SYMEFA64.SYS [x]
S0 tdrpman251;Acronis Try&Decide and Restore Points filter (build 251);c:\windows\system32\DRIVERS\tdrpm251.sys;c:\windows\SYSNATIVE\DRIVERS\tdrpm251.sys [x]
S1 BHDrvx64;BHDrvx64;c:\program files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140121.001\BHDrvx64.sys;c:\program files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140121.001\BHDrvx64.sys [x]
S1 ccSet_NIS;NIS Settings Manager;c:\windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys;c:\windows\SYSNATIVE\drivers\NISx64\1501000.012\ccSetx64.sys [x]
S1 IDSVia64;IDSVia64;c:\program files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140217.001\IDSvia64.sys;c:\program files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140217.001\IDSvia64.sys [x]
S1 SymIRON;Symantec Iron Driver;c:\windows\system32\drivers\NISx64\1501000.012\Ironx64.SYS;c:\windows\SYSNATIVE\drivers\NISx64\1501000.012\Ironx64.SYS [x]
S1 SymNetS;Symantec Network Security WFP Driver;c:\windows\System32\Drivers\NISx64\1501000.012\SYMNETS.SYS;c:\windows\SYSNATIVE\Drivers\NISx64\1501000.012\SYMNETS.SYS [x]
S2 NIS;Norton Internet Security;c:\program files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe;c:\program files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe [x]
S2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [x]
S2 UniversalUpdater;Universal Updater Service;c:\program files (x86)\Universal Updater\UpdaterService.exe;c:\program files (x86)\Universal Updater\UpdaterService.exe [x]
S3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys;c:\program files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\nusb3xhc.sys [x]
S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x]
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys;c:\program files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [x]
.
.
Inhalt des "geplante Tasks" Ordners
.
2014-02-18 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-10-04 05:52]
.
2014-02-18 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-07 06:53]
.
2014-02-18 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2012-12-07 06:53]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{E6062A33-016E-4BDA-A6F1-890D989F8656}]
2014-01-29 11:41        425984        ----a-w-        c:\program files (x86)\HD Streamer\ScriptHost64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"WrtMon.exe"="c:\windows\system32\spool\drivers\x64\3\WrtMon.exe" [2006-09-20 20480]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-10-13 162584]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-10-13 386840]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-10-13 417560]
.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost  - NetSvcs
UxTuneUp
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = about:blank
mLocal Page = c:\windows\SysWOW64\blank.htm
uSearchAssistant = hxxp://www.google.com
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant =
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
TCP: DhcpNameServer = 192.168.178.1
FF - ProfilePath - c:\users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\
FF - prefs.js: browser.startup.homepage -
FF - ExtSQL: 2014-01-23 09:23; hd_streamer@iMedia; c:\users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\extensions\hd_streamer@iMedia
FF - ExtSQL: 2014-01-23 09:44; {5bdc670b-611f-628a-a97d-b1af013e3718}; c:\users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\extensions\{5bdc670b-611f-628a-a97d-b1af013e3718}
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-10 - (no file)
Toolbar-{48586425-6bb7-4f51-8dc6-38c88e3ebb58} - (no file)
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
Toolbar-10 - (no file)
AddRemove-STANLY Track - c:\windows\system32\javaws.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\NIS]
"ImagePath"="\"c:\program files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe\" /s \"NIS\" /m \"c:\program files (x86)\Norton Internet Security\Engine\21.1.0.18\diMaster.dll\" /prefetch:1"
"ImagePath"="\SystemRoot\System32\Drivers\NISx64\1501000.012\SYMNETS.SYS"
"TrustedImagePaths"="c:\program files (x86)\Norton Internet Security\Engine\21.1.0.18;c:\program files (x86)\Norton Internet Security\Engine64\21.1.0.18"
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\ B*e*s*s*e*r*e*  *I*n*f*o*r*m*a*t*i*o*n*s*q*u*e*l*l*e*n*\Diskuss. mit arab. Welt]
"Order"=hex:08,00,00,00,02,00,00,00,0c,00,00,00,01,00,00,00,00,00,00,00
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\ B*e*s*s*e*r*e*  *I*n*f*o*r*m*a*t*i*o*n*s*q*u*e*l*l*e*n*\Info Quellen Nahost]
"Order"=hex:08,00,00,00,02,00,00,00,0c,00,00,00,01,00,00,00,00,00,00,00
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\ B*e*s*s*e*r*e*  *I*n*f*o*r*m*a*t*i*o*n*s*q*u*e*l*l*e*n*\INFORMATIONSQUELLEN]
"Order"=hex:08,00,00,00,02,00,00,00,0c,00,00,00,01,00,00,00,00,00,00,00
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\ B*e*s*s*e*r*e*  *I*n*f*o*r*m*a*t*i*o*n*s*q*u*e*l*l*e*n*\neutrale Medien-INFO-QUELLEN]
"Order"=hex:08,00,00,00,02,00,00,00,0c,00,00,00,01,00,00,00,00,00,00,00
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\MenuOrder\Favorites\ B*e*s*s*e*r*e*  *I*n*f*o*r*m*a*t*i*o*n*s*q*u*e*l*l*e*n*\Seriöse, objektive Berichterstattung - gute Frage.net]
"Order"=hex:08,00,00,00,02,00,00,00,0c,00,00,00,01,00,00,00,00,00,00,00
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID]
@DACL=(02 0000)
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.1_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.1_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_26"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0026-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_26"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_27"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0027-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_27"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_28"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0028-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_28"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_29"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0029-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_29"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_30"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0030-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_30"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_31"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0031-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_31"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_32"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0032-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_32"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_33"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0033-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_33"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_34"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0034-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_34"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_35"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0035-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_35"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_36"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0036-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_36"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_37"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0037-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_37"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_38"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0038-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_38"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_39"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0039-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_39"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_40"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0040-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_40"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_41"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0041-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_41"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_42"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0042-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_42"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_43"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-0043-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2_43"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0014-0002-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.4.2"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0000-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0001-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0004-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0005-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0006-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0007-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0008-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0009-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0011-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0012-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0013-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0014-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0015-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0016-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0017-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0018-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0019-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0020-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0022-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0023-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0024-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0025-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_26"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_26"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0026-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_26"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_27"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_27"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0027-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_27"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_28"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_28"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0028-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_28"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_29"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_29"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0029-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_29"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_30"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_30"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0030-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_30"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_31"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_31"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0031-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_31"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_32"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_32"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0032-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_32"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_33"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_33"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0033-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_33"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_34"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_34"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0034-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_34"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_35"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_35"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0035-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_35"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_36"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_36"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0036-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_36"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_37"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_37"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0037-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_37"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_38"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_38"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0038-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_38"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_39"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_39"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0039-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_39"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_40"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_40"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0040-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_40"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_41"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_41"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0041-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_41"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_42"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_42"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0042-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_42"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_43"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_43"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0043-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_43"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_44"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_44"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0044-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_44"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_45"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_45"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0045-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_45"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_46"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_46"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0046-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_46"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_47"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_47"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0047-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_47"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_48"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_48"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0048-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_48"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_49"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_49"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0049-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_49"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_50"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_50"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0050-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_50"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_51"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_51"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-0051-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0_51"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0015-0000-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.5.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0008-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0009-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0010-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0012-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0014-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0018-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0019-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_26"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_26"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_26"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_27"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_27"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0027-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_27"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_28"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_28"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0028-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_28"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_29"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_29"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_29"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_30"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_30"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_30"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_31"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_31"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0031-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_31"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_32"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_32"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_32"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_33"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_33"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_33"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_34"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_34"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0034-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_34"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_35"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_35"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_35"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_36"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_36"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0036-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_36"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_37"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_37"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_37"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_38"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_38"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_38"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_39"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_39"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_39"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_40"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_40"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0040-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_40"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_41"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_41"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0041-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_41"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_42"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_42"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0042-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_42"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_43"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_43"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0043-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_43"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_44"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_44"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0044-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_44"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_45"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_45"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_45"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_46"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_46"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0046-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_46"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_47"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_47"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0047-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_47"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_48"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_48"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0048-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_48"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_49"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_49"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0049-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_49"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_50"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_50"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0050-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_50"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_51"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_51"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-0051-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0_51"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0016-0000-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.6.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0001-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_01"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0002-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_02"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0003-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_03"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0004-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_04"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0005-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_05"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0006-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_06"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0007-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_07"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0008-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_08"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0009-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_09"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0010-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_10"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0011-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_11"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0012-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_12"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0013-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_13"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0014-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_14"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0015-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_15"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0016-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_16"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0017-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_17"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0018-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_18"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0019-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_19"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0020-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_20"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0021-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_21"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0022-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_22"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0023-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_23"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0024-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_24"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBB}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-0025-ABCDEFFEDCBC}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0_25"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{CAFEEFAC-0017-0000-FFFF-ABCDEFFEDCBA}]
@DACL=(02 0000)
@="Java Plug-in 1.7.0"
.
[HKEY_USERS\S-1-5-21-1654125919-855541359-3433209274-1000_Classes\CLSID\{E19F9331-3110-11D4-991C-005004D3B3DB}]
@DACL=(02 0000)
@="Java Plug-in 1.3.0_02"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_12_0_0_44_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_12_0_0_44.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Zeit der Fertigstellung: 2014-02-18  18:06:33
ComboFix-quarantined-files.txt  2014-02-18 17:06
.
Vor Suchlauf: 9 Verzeichnis(se), 1.435.326.980.096 Bytes frei
Nach Suchlauf: 12 Verzeichnis(se), 1.435.250.413.568 Bytes frei
.
- - End Of File - - B24D4A2FBD461446F49996AE2B918DF7
--- --- ---
A36C5E4F47E84449FF07ED3517B43A31


Viele Grüße
Frusti

Hallo Aneri,

es scheinen sich erste Erfolge zu zeigen: Viele (alle?) aggressiven Popups erscheinen derzeit nicht mehr.

Allerdings, ein erster Fehler zeigt sich auch:
Wenn ich bei Internet Explorer 11 in der Suchleiste einen Begriff - z.B. "Wetter", oder "Marsoberfläche" - eingebe, zeigt er mir kein Ergebnis an. Google Suggestions" macht zwar in einem Aufklapp-Fenster einige Vorschläge, wenn ich die aber anklicke, erscheint ein leeres Fenster!
Auch: Der von mir eingestellte Suchanbieter "Wikipedia" ist nicht mehr vorhanden!

Aus dem Bereich der gespeicherten "Favoriten" heraus kann ich allerdings Websites aufrufen!?

Viele Grüße
Frusti

Zusatz zu meinem letzten posting:

Ich bin durch die fehlende Suchmöglichkeit und auch durch die fehlende Möglichkeit, eingegebene Websites aufrufen zu können, vom Internet ausgesperrt!
Wie kann ich das wieder "reparieren"?

Leider ist das, was ich z.Zt. überhaupt nicht gebrauchen kann, eingetreten: Die Suche mit Google fällt völlig aus! Die Ursache ist mir grundsätzlich schleierhaft, da ich dies noch nie erlebt habe.

"Wikipedia" habe ich wenigstens durch einfaches erneutes Hinzufügen reparieren können. Es war merkwürdigerweise nach dem gestrigen Durchlauf von "Combo" plötzlich weg.

Aber bei "Google" haben alle Möglichkeiten versagt. Auch dies ist erst nach dem "Combo-Durchlauf eingetreten.(?)

Ich hoffe und bin bei Deiner Kompetenz auch sicher, daß Du einen Weg finden wirst, daß ich sehr bald wieder mit der "Google"-Suche weiterarbeiten kann.

Aneri 20.02.2014 14:48
HI

erstelle bitte ein neues FRST Logfile und poste es hier. Combofix setzt normalerweise Standartwerte für die Suchmaschinen. Wir schauen uns das mal an

Kannst du Wikipedia nicht normal aufrufen?

Frusti 20.02.2014 16:52
Halo Aneri,

ich habe "sehnsüchtig" auf Deine Nachricht gewartet.
Ich glaube, wir waren auf einem guten Weg, dann passiert dieses Malheur mit der 'Google-Such-Funktion'.
Ich hoffe so sehr, Du kannst mir helfen, daß ich auf den "graden Weg" zurückgelange (ich bin anderweitig in 'heftigen Schwierigkeiten', sodaß mir der PC keinesfalls ausfallen darf!).

Kann ich denn irgendetwas falsch gemacht haben?


Also:

1.)

FRST Logfile:

FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-02-2014
Ran by Besitzer (administrator) on BESITZER-PC on 20-02-2014 16:30:09
Running from C:\Users\Besitzer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ZMPRJ5P
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
() C:\Program Files (x86)\Universal Updater\UpdaterService.exe
() C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
() C:\Users\Besitzer\AppData\Local\HD Streamer\crxmon.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
() C:\Program Files (x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
() C:\Program Files (x86)\HD Streamer\BackgroundHost64.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_12_0_0_44_ActiveX.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [WrtMon.exe] - C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [20480 2006-09-20] ()
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [TrueImageMonitor.exe] - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5078416 2009-08-28] (Acronis)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1654125919-855541359-3433209274-1000\...\Run: [NextLive] - C:\Windows\SysWOW64\rundll32.exe "C:\Users\Besitzer\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKU\S-1-5-21-1654125919-855541359-3433209274-1000\...\Run: [HD Streamer Sync] - C:\Users\Besitzer\AppData\Local\HD Streamer\crxmon.exe [128952 2014-01-15] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF249114589E0CE01
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {52db1893-8a90-4192-aede-08e00b8f8473} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=100&systemid=473&v=n9602-172&apn_uid=3029124234214494&apn_dtid=BND473&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {52db1893-8a90-4192-aede-08e00b8f8473} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKCU - {7F77D80B-4B89-46CD-B430-59AD534DEAEF} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}
SearchScopes: HKCU - {830039F3-07E5-4C4D-9663-C9743D343886} URL = hxxp://de.wikipedia.org/w/index.php?title=Spezial:Suche&search={searchTerms}
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HD Streamer - {E6062A33-016E-4BDA-A6F1-890D989F8656} - C:\Program Files (x86)\HD Streamer\ScriptHost64.dll (HD Streamer)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HD Streamer - {E6062A33-016E-4BDA-A6F1-890D989F8656} - C:\Program Files (x86)\HD Streamer\ScriptHost.dll (HD Streamer)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - No Name - {48586425-6bb7-4f51-8dc6-38c88e3ebb58} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.4.24.0.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Users\Besitzer\Desktop\Programme - ÖFNNEN\Picasa3\npPicasa3.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @real.com/nppl3260;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @VideoDownloadConverter_4z.com/Plugin - C:\Program Files (x86)\VideoDownloadConverter_4z\bar\1.bin\NP4zStub.dll No File
FF Plugin-x32: @VideoDownloadConverter_ScriptHelper.com/Plugin - C:\Program Files (x86)\VideoDownloadConverter\npVDCPlugin.dll (Mindspark)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\searchplugins\buenosearch.xml
FF Extension: HD Streamer - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\hd_streamer@iMedia [2014-01-23]
FF Extension: Adblock Plus - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-11]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011-04-05]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011-04-06]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} [2011-10-24]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2012-07-02]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-09-24]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2012-11-12]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-05-09]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-05-09]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [2013-11-21]

Chrome:
=======
CHR Extension: (HD Streamer) - C:\Users\Besitzer\AppData\Local\Google\Chrome\User Data\Default\Extensions\oleglodmkonbpfmlffapjfednjopbeeh [2014-01-22]
CHR HKLM-x32\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2011-12-22]
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-12-08]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\Exts\Chrome.crx [2014-01-21]

==================== Services (Whitelisted) =================

R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [103936 2014-01-20] (Freemake)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe [275696 2013-10-08] (Symantec Corporation)
S3 Symantec RemoteAssist; C:\Program Files (x86)\Common Files\Symantec Shared\Support Controls\ssrc.exe [394704 2008-01-29] (Symantec, Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2103096 2013-12-18] (TuneUp Software)
R2 UniversalUpdater; C:\Program Files (x86)\Universal Updater\UpdaterService.exe [401336 2014-01-19] ()

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140214.001\BHDrvx64.sys [1526488 2013-12-18] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2014-02-04] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140219.001\IDSvia64.sys [521944 2014-01-21] (Symantec Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140219.033\ENG64.SYS [126040 2014-02-04] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140219.033\EX64.SYS [2099288 2014-02-04] (Symantec Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 Spyder3; C:\Windows\System32\DRIVERS\Spyder3.sys [15360 2008-09-08] ()
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1501000.012\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-21] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1501000.012\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
R0 tdrpman251; C:\Windows\System32\DRIVERS\tdrpm251.sys [1455648 2012-06-03] (Acronis)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-20 16:25 - 2014-02-20 16:25 - 00010486 _____ () C:\Users\Besitzer\Desktop\Probleme Google.odt
2014-02-20 11:44 - 2014-02-20 11:44 - 00206647 _____ () C:\Users\Besitzer\Desktop\Einen Moment der Ruhe.odt
2014-02-20 09:39 - 2014-02-20 09:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{9D8B4C73-DDCE-4E13-9615-83F75CB8B04D}
2014-02-20 07:34 - 2014-02-20 07:34 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{43FD4C98-9286-41BD-83C4-098FCD67A5DE}
2014-02-20 07:22 - 2013-11-27 00:29 - 05693440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-02-20 07:22 - 2013-11-26 23:49 - 06573056 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-19 17:59 - 2014-02-20 09:29 - 00000280 _____ () C:\Windows\setupact.log
2014-02-19 17:59 - 2014-02-19 17:59 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-19 17:52 - 2014-02-19 17:52 - 01069920 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_reader11_de_mssa_aaa_aih.exe
2014-02-19 12:17 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-02-19 12:17 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-19 12:17 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-19 12:17 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-02-19 12:17 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-02-19 12:17 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-02-19 12:17 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-19 12:17 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-02-19 12:17 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-02-19 12:17 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-02-19 12:17 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-02-19 12:17 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-02-19 12:17 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-02-19 12:17 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-02-19 12:17 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-02-19 12:17 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-02-19 12:16 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-02-19 12:16 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-02-19 07:39 - 2014-02-19 07:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{77F185F0-738D-4C67-B041-E7B4C59808ED}
2014-02-18 21:38 - 2014-02-18 21:38 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{9FA4C146-EEBA-4E4D-BFBF-1FFBB1A381AE}
2014-02-18 21:37 - 2014-02-18 21:37 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{455F7D01-CB43-473E-991A-7EE8C06FF49A}
2014-02-18 21:34 - 2014-02-18 21:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-02-18 18:38 - 2014-02-18 18:39 - 00084347 _____ () C:\Users\Besitzer\Desktop\Iris Berben empfindet Leben ohne Internet als befreiend.odt
2014-02-18 18:06 - 2014-02-18 18:06 - 00115576 _____ () C:\ComboFix.txt
2014-02-18 17:58 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-02-18 17:58 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-02-18 17:58 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-02-18 17:58 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-02-18 17:58 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-02-18 17:58 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-02-18 17:58 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-02-18 17:58 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-02-18 17:57 - 2014-02-18 18:06 - 00000000 ____D () C:\Qoobox
2014-02-18 17:56 - 2014-02-18 18:05 - 00000000 ____D () C:\Windows\erdnt
2014-02-18 12:30 - 2014-02-18 12:30 - 00009900 _____ () C:\Users\Besitzer\Desktop\MediathekView 4.0 Final.odt
2014-02-18 12:16 - 2014-02-18 12:16 - 29640231 _____ () C:\Users\Besitzer\Downloads\MediathekView_4.zip
2014-02-18 11:54 - 2014-02-18 14:12 - 582821958 _____ () C:\Users\Besitzer\Desktop\Der_große_Haushaltscheck-Mikrowellen-344029_3483249.mp4
2014-02-18 11:54 - 2014-02-18 11:54 - 00000000 ____D () C:\Users\Besitzer\MediathekView
2014-02-18 11:38 - 2014-02-18 11:40 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-02-18 11:37 - 2014-02-18 11:37 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-02-18 11:37 - 2014-02-18 11:37 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-02-18 11:37 - 2014-02-18 11:37 - 00000000 ____D () C:\Program Files\Java
2014-02-18 11:31 - 2014-02-18 11:31 - 00022192 _____ () C:\Users\Besitzer\Desktop\ARD Mediathek Download.odt
2014-02-18 09:05 - 2014-02-18 09:06 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{17B7F846-D90A-4D9B-ACF2-3184BA7A8AD5}
2014-02-17 06:44 - 2014-02-17 06:44 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B04677A7-4A84-4891-B8B1-68927CCFC398}
2014-02-16 08:10 - 2014-02-16 08:10 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{133D7684-F07E-40FB-AEC9-CC9009B4C041}
2014-02-15 18:53 - 2014-02-15 18:53 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{EC5BE35E-91CF-4835-9555-E24D0F57A9B0}
2014-02-15 13:47 - 2014-02-15 13:47 - 00000000 ____D () C:\Users\Besitzer\Desktop\Sport-Fitneß
2014-02-15 08:55 - 2014-02-16 12:19 - 00016091 _____ () C:\Users\Besitzer\Desktop\Rückz-Ummelden.odt
2014-02-15 06:52 - 2014-02-15 06:53 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{1B189B65-49A6-47CB-B0EF-55F617D264A3}
2014-02-14 16:58 - 2014-02-14 16:58 - 00010152 _____ () C:\Users\Besitzer\Desktop\Geberth, Wilhelm.odt
2014-02-14 13:57 - 2014-02-14 13:57 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-02-14 13:44 - 2014-02-14 13:44 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\WinRAR
2014-02-14 13:43 - 2014-02-14 13:57 - 00000000 ____D () C:\Program Files\WinRAR
2014-02-14 13:35 - 2014-02-14 13:35 - 00014143 _____ () C:\Users\Besitzer\Desktop\Datei in zip Datei umwandeln.odt
2014-02-14 11:49 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-14 11:49 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-14 06:40 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-14 06:40 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-14 06:40 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-14 06:40 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-14 06:40 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-14 06:40 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-14 06:38 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-14 06:38 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-14 06:38 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-14 06:38 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-14 06:38 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-14 06:38 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-14 06:38 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-14 06:38 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-14 06:38 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-14 06:38 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-14 06:38 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-14 06:38 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-14 06:38 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-14 06:38 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-14 06:38 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-14 06:38 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-14 06:38 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-14 06:38 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-14 06:28 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-14 06:28 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-14 06:28 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-14 06:28 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-14 06:28 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-14 06:28 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-14 06:28 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-14 06:28 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-14 06:28 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-14 06:28 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-14 06:28 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-14 06:28 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-14 06:28 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-14 06:28 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-14 06:28 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-14 06:28 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-14 06:28 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-14 06:28 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-14 06:28 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-14 06:28 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-14 06:28 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-14 06:28 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-14 06:28 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-14 06:28 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-14 06:28 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-14 06:28 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-14 06:28 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-14 06:28 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-14 06:28 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-14 06:28 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-14 06:28 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-14 06:28 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-14 06:28 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-14 06:28 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-14 06:28 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-14 06:28 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-14 06:28 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-14 06:28 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-14 06:28 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-13 18:02 - 2014-02-13 18:02 - 00000000 ____D () C:\Windows\ERUNT
2014-02-13 17:50 - 2014-02-13 17:51 - 00000000 ____D () C:\AdwCleaner
2014-02-13 17:18 - 2014-02-13 17:18 - 00014505 _____ () C:\Users\Besitzer\Desktop\Waschvollautomat.odt
2014-02-13 09:38 - 2014-02-13 09:38 - 00033919 _____ () C:\Users\Besitzer\Desktop\FRST Scan result.odt
2014-02-13 09:32 - 2014-02-20 16:30 - 00000000 ____D () C:\FRST
2014-02-11 08:41 - 2014-02-11 08:43 - 00049026 _____ () C:\Users\Besitzer\Desktop\Schauspielerin Iris Berben genießt Offline-Dasein.odt
2014-02-10 20:41 - 2014-02-10 20:41 - 00016802 _____ () C:\Users\Besitzer\Desktop\ebay-Schuhregal.odt
2014-02-10 13:44 - 2014-02-10 13:44 - 00000000 ____D () C:\Program Files (x86)\buenosearch LTD
2014-02-10 13:43 - 2014-02-10 13:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\buenosearch LTD
2014-02-10 09:05 - 2014-02-14 16:53 - 00015905 _____ () C:\Users\Besitzer\Desktop\Langensch.-Vokabel-PC Span-Dt..odt
2014-02-09 08:58 - 2014-02-09 09:00 - 00519719 _____ () C:\Users\Besitzer\Desktop\URUK - 5000 Jahre Megacity.odt
2014-02-09 08:04 - 2014-02-09 08:04 - 00337136 _____ () C:\Users\Besitzer\Desktop\Fürstenberg Porzellan gr. Bonboniere.odt
2014-02-08 13:04 - 2014-02-08 13:06 - 00027856 _____ () C:\Users\Besitzer\Desktop\Mit Scholl-Latour im Libanon.odt
2014-02-06 18:06 - 2014-02-06 18:06 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-02-06 18:05 - 2014-02-07 06:07 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-04 15:37 - 2014-02-04 15:37 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 - Verknüpfung
2014-02-04 10:42 - 2014-02-04 10:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\OpenOffice
2014-02-04 10:41 - 2014-02-04 14:24 - 00000000 ___SD () C:\Program Files (x86)\OpenOffice 4.0.1
2014-02-04 10:40 - 2014-02-04 10:40 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-04 08:45 - 2014-02-20 16:25 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine-1
2014-02-02 19:57 - 2014-02-02 19:57 - 00000000 ____D () C:\Program Files (x86)\HD Streamer
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Program Files (x86)\VideoDownloadConverter
2014-02-02 11:16 - 2014-02-02 15:14 - 00000000 ____D () C:\Users\Besitzer\Desktop\Psycho
2014-02-02 11:12 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Fotos
2014-02-02 11:09 - 2014-02-19 15:14 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine
2014-02-01 17:15 - 2014-02-01 17:15 - 00011303 _____ () C:\Users\Besitzer\Desktop\a) Anzüge.odt
2014-01-29 17:37 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-3
2014-01-29 17:28 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-2
2014-01-29 10:29 - 2014-01-29 10:29 - 00024872 _____ () C:\Users\Besitzer\Desktop\Verrückt nach Meer-Sendefolge.odt
2014-01-28 17:29 - 2014-01-28 17:29 - 00025284 _____ () C:\Users\Besitzer\Desktop\Tea Time.odt
2014-01-27 13:08 - 2014-01-27 13:08 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Ashampoo
2014-01-27 13:07 - 2014-01-27 13:07 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-01-27 13:00 - 2014-01-27 13:03 - 384551131 _____ () C:\Users\Besitzer\Downloads\Plácido Domingo at Loreley 2013.mp4
2014-01-23 09:49 - 2014-01-23 09:54 - 00000048 _____ () C:\RB.rdat
2014-01-23 09:49 - 2014-01-23 09:54 - 00000048 _____ () C:\License_Time.rdat
2014-01-23 09:49 - 2014-01-23 09:49 - 00000000 ____D () C:\ProgramData\FileCure
2014-01-23 09:47 - 2014-01-23 09:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\FreemakeVideoConverter
2014-01-23 09:45 - 2014-01-23 09:45 - 01071000 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_flashplayer12x32_mssa_aaa_aih(1).exe
2014-01-23 09:45 - 2014-01-23 09:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Macromedia
2014-01-23 09:39 - 2014-01-23 09:39 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-22 11:31 - 2014-02-20 11:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\newnext.me
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\Documents\Mobogenie
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\HD Streamer
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\genienext
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\.android
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Program Files (x86)\Universal Updater
2014-01-22 11:30 - 2014-01-22 11:32 - 00000000 ____D () C:\Program Files (x86)\Mobogenie

==================== One Month Modified Files and Folders =======

2014-02-20 16:30 - 2014-02-13 09:32 - 00000000 ____D () C:\FRST
2014-02-20 16:25 - 2014-02-20 16:25 - 00010486 _____ () C:\Users\Besitzer\Desktop\Probleme Google.odt
2014-02-20 16:25 - 2014-02-04 08:45 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine-1
2014-02-20 16:25 - 2011-05-12 17:37 - 36243968 ___SH () C:\Users\Besitzer\Desktop\Thumbs.db
2014-02-20 16:16 - 2012-12-07 07:53 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-20 16:05 - 2012-10-04 19:30 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-20 14:43 - 2013-11-13 17:06 - 00003954 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{083BECD6-A6F2-4401-A905-5865C87918C6}
2014-02-20 14:30 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-20 14:18 - 2011-04-04 11:29 - 01297709 _____ () C:\Windows\WindowsUpdate.log
2014-02-20 14:17 - 2012-12-07 07:53 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-20 13:00 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-20 11:44 - 2014-02-20 11:44 - 00206647 _____ () C:\Users\Besitzer\Desktop\Einen Moment der Ruhe.odt
2014-02-20 11:15 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\newnext.me
2014-02-20 09:39 - 2014-02-20 09:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{9D8B4C73-DDCE-4E13-9615-83F75CB8B04D}
2014-02-20 09:36 - 2009-07-14 05:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-20 09:36 - 2009-07-14 05:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-20 09:29 - 2014-02-19 17:59 - 00000280 _____ () C:\Windows\setupact.log
2014-02-20 09:29 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-20 07:34 - 2014-02-20 07:34 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{43FD4C98-9286-41BD-83C4-098FCD67A5DE}
2014-02-19 17:59 - 2014-02-19 17:59 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-19 17:55 - 2013-09-14 09:44 - 07813846 _____ () C:\Users\Besitzer\Downloads\iv_formats.zip
2014-02-19 17:52 - 2014-02-19 17:52 - 01069920 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_reader11_de_mssa_aaa_aih.exe
2014-02-19 15:14 - 2014-02-02 11:09 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine
2014-02-19 07:39 - 2014-02-19 07:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{77F185F0-738D-4C67-B041-E7B4C59808ED}
2014-02-18 21:38 - 2014-02-18 21:38 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{9FA4C146-EEBA-4E4D-BFBF-1FFBB1A381AE}
2014-02-18 21:37 - 2014-02-18 21:37 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{455F7D01-CB43-473E-991A-7EE8C06FF49A}
2014-02-18 21:34 - 2014-02-18 21:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-02-18 21:30 - 2011-04-29 07:04 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Google
2014-02-18 18:39 - 2014-02-18 18:38 - 00084347 _____ () C:\Users\Besitzer\Desktop\Iris Berben empfindet Leben ohne Internet als befreiend.odt
2014-02-18 18:06 - 2014-02-18 18:06 - 00115576 _____ () C:\ComboFix.txt
2014-02-18 18:06 - 2014-02-18 17:57 - 00000000 ____D () C:\Qoobox
2014-02-18 18:06 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-02-18 18:05 - 2014-02-18 17:56 - 00000000 ____D () C:\Windows\erdnt
2014-02-18 18:04 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-02-18 14:12 - 2014-02-18 11:54 - 582821958 _____ () C:\Users\Besitzer\Desktop\Der_große_Haushaltscheck-Mikrowellen-344029_3483249.mp4
2014-02-18 14:11 - 2012-12-07 07:53 - 00004110 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-18 14:11 - 2012-12-07 07:53 - 00003858 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-18 14:09 - 2013-09-23 11:36 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\vlc
2014-02-18 12:30 - 2014-02-18 12:30 - 00009900 _____ () C:\Users\Besitzer\Desktop\MediathekView 4.0 Final.odt
2014-02-18 12:16 - 2014-02-18 12:16 - 29640231 _____ () C:\Users\Besitzer\Downloads\MediathekView_4.zip
2014-02-18 12:14 - 2011-04-04 11:29 - 00000000 ____D () C:\Users\Besitzer
2014-02-18 12:07 - 2012-04-16 15:58 - 00041472 ___SH () C:\Users\Besitzer\Downloads\Thumbs.db
2014-02-18 11:54 - 2014-02-18 11:54 - 00000000 ____D () C:\Users\Besitzer\MediathekView
2014-02-18 11:49 - 2013-12-25 10:08 - 00000000 ____D () C:\Users\Besitzer\.mediathek3
2014-02-18 11:44 - 2013-10-21 09:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-18 11:40 - 2014-02-18 11:38 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-02-18 11:37 - 2014-02-18 11:37 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-02-18 11:37 - 2014-02-18 11:37 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-02-18 11:37 - 2014-02-18 11:37 - 00000000 ____D () C:\Program Files\Java
2014-02-18 11:31 - 2014-02-18 11:31 - 00022192 _____ () C:\Users\Besitzer\Desktop\ARD Mediathek Download.odt
2014-02-18 10:21 - 2009-07-14 18:58 - 00667970 _____ () C:\Windows\system32\perfh007.dat
2014-02-18 10:21 - 2009-07-14 18:58 - 00136714 _____ () C:\Windows\system32\perfc007.dat
2014-02-18 10:21 - 2009-07-14 06:13 - 01537850 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-18 09:06 - 2014-02-18 09:05 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{17B7F846-D90A-4D9B-ACF2-3184BA7A8AD5}
2014-02-17 08:10 - 2012-12-10 07:41 - 00000000 ____D () C:\Users\Besitzer\Desktop\Programme
2014-02-17 06:44 - 2014-02-17 06:44 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B04677A7-4A84-4891-B8B1-68927CCFC398}
2014-02-16 12:19 - 2014-02-15 08:55 - 00016091 _____ () C:\Users\Besitzer\Desktop\Rückz-Ummelden.odt
2014-02-16 09:35 - 2013-08-14 20:13 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-16 09:33 - 2011-04-04 14:51 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-16 09:11 - 2014-01-17 20:55 - 00000000 ____D () C:\Users\Besitzer\Desktop\Ostpreußen_Danzig-Königsberg_DAMALS
2014-02-16 08:10 - 2014-02-16 08:10 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{133D7684-F07E-40FB-AEC9-CC9009B4C041}
2014-02-15 18:53 - 2014-02-15 18:53 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{EC5BE35E-91CF-4835-9555-E24D0F57A9B0}
2014-02-15 15:00 - 2012-06-03 19:14 - 00003012 _____ () C:\Windows\System32\Tasks\{1F7E5E00-647A-47E6-9221-252E2625D665}
2014-02-15 13:56 - 2014-01-18 10:41 - 00013065 _____ () C:\Users\Besitzer\Desktop\Hochzeit im Walde.odt
2014-02-15 13:47 - 2014-02-15 13:47 - 00000000 ____D () C:\Users\Besitzer\Desktop\Sport-Fitneß
2014-02-15 13:43 - 2013-02-21 07:57 - 00000000 ____D () C:\Users\Besitzer\Desktop\Reisen, Events
2014-02-15 13:42 - 2013-12-18 10:22 - 00000000 ____D () C:\Users\Besitzer\Desktop\ASTRO
2014-02-15 06:53 - 2014-02-15 06:52 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{1B189B65-49A6-47CB-B0EF-55F617D264A3}
2014-02-14 17:22 - 2011-04-10 09:40 - 00000000 ____D () C:\Users\Besitzer\Desktop\HAUPTORDNER
2014-02-14 17:19 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2014-02-14 17:09 - 2012-04-08 15:19 - 00000000 ____D () C:\Program Files (x86)\CatchtheSperm
2014-02-14 16:58 - 2014-02-14 16:58 - 00010152 _____ () C:\Users\Besitzer\Desktop\Geberth, Wilhelm.odt
2014-02-14 16:53 - 2014-02-10 09:05 - 00015905 _____ () C:\Users\Besitzer\Desktop\Langensch.-Vokabel-PC Span-Dt..odt
2014-02-14 13:57 - 2014-02-14 13:57 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-02-14 13:57 - 2014-02-14 13:43 - 00000000 ____D () C:\Program Files\WinRAR
2014-02-14 13:44 - 2014-02-14 13:44 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\WinRAR
2014-02-14 13:35 - 2014-02-14 13:35 - 00014143 _____ () C:\Users\Besitzer\Desktop\Datei in zip Datei umwandeln.odt
2014-02-13 18:02 - 2014-02-13 18:02 - 00000000 ____D () C:\Windows\ERUNT
2014-02-13 17:51 - 2014-02-13 17:50 - 00000000 ____D () C:\AdwCleaner
2014-02-13 17:18 - 2014-02-13 17:18 - 00014505 _____ () C:\Users\Besitzer\Desktop\Waschvollautomat.odt
2014-02-13 09:38 - 2014-02-13 09:38 - 00033919 _____ () C:\Users\Besitzer\Desktop\FRST Scan result.odt
2014-02-13 06:34 - 2011-04-07 17:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\CrashDumps
2014-02-12 18:01 - 2011-05-15 07:22 - 00000000 ____D () C:\Users\Besitzer\Desktop\Video
2014-02-11 08:43 - 2014-02-11 08:41 - 00049026 _____ () C:\Users\Besitzer\Desktop\Schauspielerin Iris Berben genießt Offline-Dasein.odt
2014-02-10 20:41 - 2014-02-10 20:41 - 00016802 _____ () C:\Users\Besitzer\Desktop\ebay-Schuhregal.odt
2014-02-10 13:44 - 2014-02-10 13:44 - 00000000 ____D () C:\Program Files (x86)\buenosearch LTD
2014-02-10 13:43 - 2014-02-10 13:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\buenosearch LTD
2014-02-09 09:00 - 2014-02-09 08:58 - 00519719 _____ () C:\Users\Besitzer\Desktop\URUK - 5000 Jahre Megacity.odt
2014-02-09 08:04 - 2014-02-09 08:04 - 00337136 _____ () C:\Users\Besitzer\Desktop\Fürstenberg Porzellan gr. Bonboniere.odt
2014-02-09 06:08 - 2011-04-10 09:40 - 00000000 ____D () C:\Users\Besitzer\Desktop\Kleidung, Access., Einlegesohlen
2014-02-08 13:06 - 2014-02-08 13:04 - 00027856 _____ () C:\Users\Besitzer\Desktop\Mit Scholl-Latour im Libanon.odt
2014-02-08 10:45 - 2013-11-30 08:00 - 00000000 ____D () C:\Users\Besitzer\Desktop\GARTEN
2014-02-07 08:54 - 2012-01-13 20:55 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-02-07 08:07 - 2011-04-06 10:33 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Windows Live
2014-02-07 06:07 - 2014-02-06 18:05 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-06 18:06 - 2014-02-06 18:06 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-02-06 13:16 - 2014-02-14 06:28 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-14 06:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-14 06:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-14 06:28 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-14 06:28 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-14 06:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-14 06:28 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-14 06:28 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-14 06:28 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-14 06:28 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-14 06:28 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-14 06:28 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-14 06:28 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-14 06:28 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-14 06:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-14 06:28 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-14 06:28 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-14 06:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-14 06:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-14 06:28 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-14 06:28 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-14 06:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-14 06:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-14 06:28 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-14 06:28 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-14 06:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-14 06:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-14 06:28 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-14 06:28 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-14 06:28 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-14 06:28 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-14 06:28 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-14 06:28 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-14 06:28 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-14 06:28 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-14 06:28 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-14 06:28 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-14 06:28 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-14 06:28 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-06 06:52 - 2012-10-04 19:30 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-06 06:52 - 2012-10-04 19:29 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-06 06:52 - 2012-10-04 19:29 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-05 15:17 - 2013-08-24 09:25 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-1
2014-02-05 12:22 - 2011-04-21 17:51 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Stellarium
2014-02-05 12:22 - 2011-04-21 17:50 - 00000000 ____D () C:\Program Files\Stellarium
2014-02-04 18:38 - 2013-09-08 07:01 - 00289784 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-04 18:11 - 2011-04-05 09:54 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-04 15:37 - 2014-02-04 15:37 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 - Verknüpfung
2014-02-04 14:32 - 2011-04-04 11:29 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-04 14:24 - 2014-02-04 10:41 - 00000000 ___SD () C:\Program Files (x86)\OpenOffice 4.0.1
2014-02-04 12:06 - 2012-06-13 17:06 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\NPE
2014-02-04 11:31 - 2013-09-07 17:04 - 00064768 _____ () C:\Users\Besitzer\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-04 10:42 - 2014-02-04 10:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\OpenOffice
2014-02-04 10:40 - 2014-02-04 10:40 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-03 11:52 - 2014-02-02 11:12 - 00000000 ____D () C:\Users\Besitzer\Desktop\Fotos
2014-02-03 11:52 - 2014-01-29 17:37 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-3
2014-02-03 11:52 - 2014-01-29 17:28 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-2
2014-02-02 19:57 - 2014-02-02 19:57 - 00000000 ____D () C:\Program Files (x86)\HD Streamer
2014-02-02 19:20 - 2014-02-02 19:20 - 00000000 ____D () C:\Program Files (x86)\VideoDownloadConverter
2014-02-02 15:14 - 2014-02-02 11:16 - 00000000 ____D () C:\Users\Besitzer\Desktop\Psycho
2014-02-02 15:10 - 2013-10-10 10:39 - 00017877 _____ () C:\Users\Besitzer\Desktop\Piaf-Konzert.odt
2014-02-02 14:49 - 2013-11-22 10:43 - 00000000 ____D () C:\Users\Besitzer\Desktop\Mnünzen
2014-02-01 17:15 - 2014-02-01 17:15 - 00011303 _____ () C:\Users\Besitzer\Desktop\a) Anzüge.odt
2014-01-31 06:31 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-29 10:29 - 2014-01-29 10:29 - 00024872 _____ () C:\Users\Besitzer\Desktop\Verrückt nach Meer-Sendefolge.odt
2014-01-28 22:49 - 2013-09-23 08:21 - 00000000 ____D () C:\Program Files (x86)\StreamTransport
2014-01-28 17:29 - 2014-01-28 17:29 - 00025284 _____ () C:\Users\Besitzer\Desktop\Tea Time.odt
2014-01-27 17:26 - 2011-04-07 17:06 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-27 13:08 - 2014-01-27 13:08 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Ashampoo
2014-01-27 13:07 - 2014-01-27 13:07 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-01-27 13:03 - 2014-01-27 13:00 - 384551131 _____ () C:\Users\Besitzer\Downloads\Plácido Domingo at Loreley 2013.mp4
2014-01-23 09:54 - 2014-01-23 09:49 - 00000048 _____ () C:\RB.rdat
2014-01-23 09:54 - 2014-01-23 09:49 - 00000048 _____ () C:\License_Time.rdat
2014-01-23 09:49 - 2014-01-23 09:49 - 00000000 ____D () C:\ProgramData\FileCure
2014-01-23 09:47 - 2014-01-23 09:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\FreemakeVideoConverter
2014-01-23 09:46 - 2011-04-05 10:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Adobe
2014-01-23 09:45 - 2014-01-23 09:45 - 01071000 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_flashplayer12x32_mssa_aaa_aih(1).exe
2014-01-23 09:45 - 2014-01-23 09:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Macromedia
2014-01-23 09:44 - 2011-12-22 15:27 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2014-01-23 09:44 - 2011-12-22 15:27 - 00000000 ____D () C:\ProgramData\Freemake
2014-01-23 09:39 - 2014-01-23 09:39 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-23 07:08 - 2011-04-08 09:59 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-01-22 13:23 - 2013-08-31 13:51 - 00000000 ____D () C:\Users\Besitzer\Documents\Freemake
2014-01-22 12:30 - 2011-12-22 15:27 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-01-22 11:32 - 2014-01-22 11:30 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
2014-01-22 11:32 - 2013-11-20 15:06 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Mobogenie
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\Documents\Mobogenie
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\HD Streamer
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\genienext
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\.android
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Program Files (x86)\Universal Updater
2014-01-21 06:41 - 2012-04-02 18:34 - 00000000 ____D () C:\Users\Besitzer\Desktop\Interessenbereiche -Definierung-

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-18 09:25

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---

--- --- ---


2.)
Die Sache mit der Suchfunktion muß ich mittlerweile relativieren:
Suche mit 'Wikipedia' funktioniert einwandfrei, ebenso z.B. Suche mit einem anderen Suchanbieter: 'Yahoo'.

Bei 'Google':
Ich gebe z.B. das Wort 'Advent' ein, dann erscheint ein weißes Hauptfenster und ganz oben, rechts neben der Stelle, wo ich die Sucheingabe mache, erscheint "Leere Seite".
Markiere ich dann "Advent' und klicke in dem gleichen Suchfenster auf die Lupe, erscheint 'Advent' und davor ein 'Fragezeichen' ??


3.) Die Sache mit den zahlreichen PopUp's ist leider wieder wie früher, also sehr 'nervig'!

Gerne erwarte ich Deine Antwort.

Gruß
Frusti

Aneri 20.02.2014 17:03
Hi

Schitt 1:
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
Task: {BAAEA414-656B-4B5A-A5CF-DA3D254B63ED} - System32\Tasks\0 => Iexplore.exe  <==== ATTENTION
Task: {5BE15600-93E5-4A44-AB01-C17D071D0C86} - System32\Tasks\5021 => Wscript.exe C:\Users\Besitzer\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


Schitt 2:
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schitt 3:

erstell ein neues FRST Logfile und poste es hier

Frusti 20.02.2014 18:00
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 18-02-2014
Ran by Besitzer at 2014-02-20 17:36:31 Run:1
Running from C:\Users\Besitzer\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Task: {BAAEA414-656B-4B5A-A5CF-DA3D254B63ED} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION
Task: {5BE15600-93E5-4A44-AB01-C17D071D0C86} - System32\Tasks\5021 => Wscript.exe C:\Users\Besitzer\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION

*****************

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BAAEA414-656B-4B5A-A5CF-DA3D254B63ED} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BAAEA414-656B-4B5A-A5CF-DA3D254B63ED} => Key deleted successfully.
C:\Windows\System32\Tasks\0 => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\0 => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5BE15600-93E5-4A44-AB01-C17D071D0C86} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5BE15600-93E5-4A44-AB01-C17D071D0C86} => Key deleted successfully.
C:\Windows\System32\Tasks\5021 => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\5021 => Key deleted successfully.

==== End of Fixlog ====


Soweit für dieses.
Ich soll ja lt. Anweisung alle offenen Fenster für Adwcleaner schließen, deshalb folgt eine Unterbrechung des Posts.

2.)AdwCleaner Logfile:
Code:
# AdwCleaner v3.019 - Bericht erstellt am 20/02/2014 um 17:46:29
# Aktualisiert 17/02/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Besitzer - BESITZER-PC
# Gestartet von : C:\Users\Besitzer\Desktop\adwcleaner.exe
# Option : Löschen

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\WinMaximizer
Ordner Gelöscht : C:\Program Files (x86)\Mobogenie
Ordner Gelöscht : C:\Program Files (x86)\VideoDownloadConverter
Ordner Gelöscht : C:\Users\Besitzer\AppData\Local\genienext
Ordner Gelöscht : C:\Users\Besitzer\AppData\Local\Mobogenie
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\newnext.me
Ordner Gelöscht : C:\Users\Besitzer\Documents\Mobogenie
Ordner Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\somotomoviestoolbar1
Datei Gelöscht : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\invalidprefs.js

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Wert Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter.ScriptHelper
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter.ScriptHelper.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ToolbarProtector
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\VideoDownloadConverter_4z.ToolbarProtector.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@VideoDownloadConverter_4z.com/Plugin
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@VideoDownloadConverter_ScriptHelper.com/Plugin
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3719959C-1CCD-4FA7-8EBB-7D9DED86FCCB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3D429207-4689-492D-A0E5-CDC5DFBB5005}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{84B7B98F-E018-4DBB-AB4C-4DDD3DFCB5FB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8A4E8BCB-5598-4CAF-9DEC-4D452760E28D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A86782D8-7B41-452F-A217-1854F72DBA54}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FF48DBA6-5DD8-4D10-9EB0-0FA968502E66}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{385F1935-3784-48D0-A61F-6385493DED3C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8A4E8BCB-5598-4CAF-9DEC-4D452760E28D}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A86782D8-7B41-452F-A217-1854F72DBA54}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A86782D8-7B41-452F-A217-1854F72DBA54}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2D6F0AC3-0C2E-4E07-8FDA-11268AB51211}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3444C3C5-6C56-4A16-A453-832B05BF6EA4}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3D429207-4689-492D-A0E5-CDC5DFBB5005}
Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{48586425-6BB7-4F51-8DC6-38C88E3EBB58}]
Schlüssel Gelöscht : HKCU\Software\VideoDownloadConverter_4z
Schlüssel Gelöscht : HKCU\Software\WinMaximizer
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\VideoDownloadConverter_4z
Schlüssel Gelöscht : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Schlüssel Gelöscht : HKLM\Software\SafetyNut
Schlüssel Gelöscht : HKLM\Software\Uniblue
Schlüssel Gelöscht : HKLM\Software\VideoDownloadConverter
Schlüssel Gelöscht : HKLM\Software\VideoDownloadConverter_4z
Schlüssel Gelöscht : HKLM\Software\WinMaximizer
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VideoDownloadConverter

***** [ Browser ] *****

-\\ Internet Explorer v11.0.9600.16518


-\\ Mozilla Firefox v5.0.1 (de)

[ Datei : C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\prefs.js ]


-\\ Google Chrome v

[ Datei : C:\Users\Besitzer\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [31815 octets] - [13/02/2014 17:51:02]
AdwCleaner[R1].txt - [4695 octets] - [20/02/2014 17:45:20]
AdwCleaner[S0].txt - [30155 octets] - [13/02/2014 17:51:45]
AdwCleaner[S1].txt - [4509 octets] - [20/02/2014 17:46:29]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [4569 octets] ##########
--- --- ---


============================

3.)
FRST Logfile:

FRST Logfile:

FRST Logfile:
Code:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-02-2014
Ran by Besitzer (administrator) on BESITZER-PC on 20-02-2014 17:52:28
Running from C:\Users\Besitzer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0WTXAZZ9
Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool
Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Geeks to Go Forums

==================== Processes (Whitelisted) =================

(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe
() C:\Program Files (x86)\Universal Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
() C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
() C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
() C:\Users\Besitzer\AppData\Local\HD Streamer\crxmon.exe
() C:\Program Files (x86)\Datacolor\Spyder3Express\Utility\Spyder3Utility.exe
(TuneUp Software) C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesApp64.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
() C:\Program Files (x86)\HD Streamer\BackgroundHost64.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_12_0_0_44_ActiveX.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(Farbar) C:\Users\Besitzer\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0WTXAZZ9\FRST64 (1).exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [WrtMon.exe] - C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [20480 2006-09-20] ()
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [TrueImageMonitor.exe] - C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5078416 2009-08-28] (Acronis)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1654125919-855541359-3433209274-1000\...\Run: [HD Streamer Sync] - C:\Users\Besitzer\AppData\Local\HD Streamer\crxmon.exe [128952 2014-01-15] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF249114589E0CE01
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {52db1893-8a90-4192-aede-08e00b8f8473} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=100&systemid=473&v=n9602-172&apn_uid=3029124234214494&apn_dtid=BND473&o=APN10640&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {52db1893-8a90-4192-aede-08e00b8f8473} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKCU - {7F77D80B-4B89-46CD-B430-59AD534DEAEF} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}
SearchScopes: HKCU - {830039F3-07E5-4C4D-9663-C9743D343886} URL = hxxp://de.wikipedia.org/w/index.php?title=Spezial:Suche&search={searchTerms}
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HD Streamer - {E6062A33-016E-4BDA-A6F1-890D989F8656} - C:\Program Files (x86)\HD Streamer\ScriptHost64.dll (HD Streamer)
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID-Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HD Streamer - {E6062A33-016E-4BDA-A6F1-890D989F8656} - C:\Program Files (x86)\HD Streamer\ScriptHost.dll (HD Streamer)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
DPF: HKLM-x32 {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: HKLM-x32 {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.4.24.0.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

FireFox:
========
FF ProfilePath: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Users\Besitzer\Desktop\Programme - ÖFNNEN\Picasa3\npPicasa3.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @real.com/nppl3260;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprjplug;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.4.53 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=15.0.4.53 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\searchplugins\buenosearch.xml
FF Extension: HD Streamer - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\hd_streamer@iMedia [2014-01-23]
FF Extension: Adblock Plus - C:\Users\Besitzer\AppData\Roaming\Mozilla\Firefox\Profiles\7efjm31x.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-09-11]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2011-04-05]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} [2011-04-06]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} [2011-10-24]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2012-07-02]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} [2012-09-24]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} [2012-11-12]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-05-09]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-05-09]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [2013-11-21]

Chrome:
=======
CHR Extension: (HD Streamer) - C:\Users\Besitzer\AppData\Local\Google\Chrome\User Data\Default\Extensions\oleglodmkonbpfmlffapjfednjopbeeh [2014-01-22]
CHR HKLM-x32\...\Chrome\Extension: [jbolfgndggfhhpbnkgnpjkfhinclbigj] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx [2011-12-22]
CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2011-12-08]
CHR HKLM-x32\...\Chrome\Extension: [mkfokfffehpeedafpekjeddnmnjhmcmk] - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\Exts\Chrome.crx [2014-01-21]

==================== Services (Whitelisted) =================

R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [103936 2014-01-20] (Freemake)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe [275696 2013-10-08] (Symantec Corporation)
S3 Symantec RemoteAssist; C:\Program Files (x86)\Common Files\Symantec Shared\Support Controls\ssrc.exe [394704 2008-01-29] (Symantec, Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2103096 2013-12-18] (TuneUp Software)
R2 UniversalUpdater; C:\Program Files (x86)\Universal Updater\UpdaterService.exe [401336 2014-01-19] ()

==================== Drivers (Whitelisted) ====================

R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140214.001\BHDrvx64.sys [1526488 2013-12-18] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2014-02-04] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140219.001\IDSvia64.sys [521944 2014-01-21] (Symantec Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140219.033\ENG64.SYS [126040 2014-02-04] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140219.033\EX64.SYS [2099288 2014-02-04] (Symantec Corporation)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 Spyder3; C:\Windows\System32\DRIVERS\Spyder3.sys [15360 2008-09-08] ()
R3 SRTSP; C:\Windows\System32\Drivers\NISx64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1501000.012\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-11-21] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1501000.012\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
R0 tdrpman251; C:\Windows\System32\DRIVERS\tdrpm251.sys [1455648 2012-06-03] (Acronis)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [14112 2013-08-21] (TuneUp Software)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-20 17:44 - 2014-02-20 17:44 - 01241834 _____ () C:\Users\Besitzer\Desktop\adwcleaner.exe
2014-02-20 17:41 - 2014-02-20 17:41 - 01241834 _____ () C:\Users\Besitzer\Downloads\adwcleaner.exe
2014-02-20 17:36 - 2014-02-20 17:36 - 02153472 _____ (Farbar) C:\Users\Besitzer\Desktop\FRST64.exe
2014-02-20 16:25 - 2014-02-20 16:25 - 00010486 _____ () C:\Users\Besitzer\Desktop\Probleme Google.odt
2014-02-20 11:44 - 2014-02-20 11:44 - 00206647 _____ () C:\Users\Besitzer\Desktop\Einen Moment der Ruhe.odt
2014-02-20 09:39 - 2014-02-20 09:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{9D8B4C73-DDCE-4E13-9615-83F75CB8B04D}
2014-02-20 07:34 - 2014-02-20 07:34 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{43FD4C98-9286-41BD-83C4-098FCD67A5DE}
2014-02-20 07:22 - 2013-11-27 00:29 - 05693440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-02-20 07:22 - 2013-11-26 23:49 - 06573056 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-19 17:59 - 2014-02-20 17:48 - 00000336 _____ () C:\Windows\setupact.log
2014-02-19 17:59 - 2014-02-19 17:59 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-19 17:52 - 2014-02-19 17:52 - 01069920 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_reader11_de_mssa_aaa_aih.exe
2014-02-19 12:17 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-02-19 12:17 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-19 12:17 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-19 12:17 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-02-19 12:17 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-02-19 12:17 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-02-19 12:17 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-19 12:17 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-02-19 12:17 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-02-19 12:17 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-02-19 12:17 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-02-19 12:17 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-02-19 12:17 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-02-19 12:17 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-02-19 12:17 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-02-19 12:17 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-02-19 12:16 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-02-19 12:16 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-02-19 07:39 - 2014-02-19 07:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{77F185F0-738D-4C67-B041-E7B4C59808ED}
2014-02-18 21:38 - 2014-02-18 21:38 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{9FA4C146-EEBA-4E4D-BFBF-1FFBB1A381AE}
2014-02-18 21:37 - 2014-02-18 21:37 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{455F7D01-CB43-473E-991A-7EE8C06FF49A}
2014-02-18 21:34 - 2014-02-18 21:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-02-18 18:38 - 2014-02-18 18:39 - 00084347 _____ () C:\Users\Besitzer\Desktop\Iris Berben empfindet Leben ohne Internet als befreiend.odt
2014-02-18 18:06 - 2014-02-18 18:06 - 00115576 _____ () C:\ComboFix.txt
2014-02-18 17:58 - 2011-06-26 07:45 - 00256000 _____ () C:\Windows\PEV.exe
2014-02-18 17:58 - 2010-11-07 18:20 - 00208896 _____ () C:\Windows\MBR.exe
2014-02-18 17:58 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2014-02-18 17:58 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2014-02-18 17:58 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2014-02-18 17:58 - 2000-08-31 01:00 - 00098816 _____ () C:\Windows\sed.exe
2014-02-18 17:58 - 2000-08-31 01:00 - 00080412 _____ () C:\Windows\grep.exe
2014-02-18 17:58 - 2000-08-31 01:00 - 00068096 _____ () C:\Windows\zip.exe
2014-02-18 17:57 - 2014-02-18 18:06 - 00000000 ____D () C:\Qoobox
2014-02-18 17:56 - 2014-02-18 18:05 - 00000000 ____D () C:\Windows\erdnt
2014-02-18 12:30 - 2014-02-18 12:30 - 00009900 _____ () C:\Users\Besitzer\Desktop\MediathekView 4.0 Final.odt
2014-02-18 12:16 - 2014-02-18 12:16 - 29640231 _____ () C:\Users\Besitzer\Downloads\MediathekView_4.zip
2014-02-18 11:54 - 2014-02-18 14:12 - 582821958 _____ () C:\Users\Besitzer\Desktop\Der_große_Haushaltscheck-Mikrowellen-344029_3483249.mp4
2014-02-18 11:54 - 2014-02-18 11:54 - 00000000 ____D () C:\Users\Besitzer\MediathekView
2014-02-18 11:38 - 2014-02-18 11:40 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-02-18 11:37 - 2014-02-18 11:37 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-02-18 11:37 - 2014-02-18 11:37 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-02-18 11:37 - 2014-02-18 11:37 - 00000000 ____D () C:\Program Files\Java
2014-02-18 11:31 - 2014-02-18 11:31 - 00022192 _____ () C:\Users\Besitzer\Desktop\ARD Mediathek Download.odt
2014-02-18 09:05 - 2014-02-18 09:06 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{17B7F846-D90A-4D9B-ACF2-3184BA7A8AD5}
2014-02-17 06:44 - 2014-02-17 06:44 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B04677A7-4A84-4891-B8B1-68927CCFC398}
2014-02-16 08:10 - 2014-02-16 08:10 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{133D7684-F07E-40FB-AEC9-CC9009B4C041}
2014-02-15 18:53 - 2014-02-15 18:53 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{EC5BE35E-91CF-4835-9555-E24D0F57A9B0}
2014-02-15 13:47 - 2014-02-15 13:47 - 00000000 ____D () C:\Users\Besitzer\Desktop\Sport-Fitneß
2014-02-15 08:55 - 2014-02-16 12:19 - 00016091 _____ () C:\Users\Besitzer\Desktop\Rückz-Ummelden.odt
2014-02-15 06:52 - 2014-02-15 06:53 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{1B189B65-49A6-47CB-B0EF-55F617D264A3}
2014-02-14 16:58 - 2014-02-14 16:58 - 00010152 _____ () C:\Users\Besitzer\Desktop\Geberth, Wilhelm.odt
2014-02-14 13:57 - 2014-02-14 13:57 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-02-14 13:44 - 2014-02-14 13:44 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\WinRAR
2014-02-14 13:43 - 2014-02-14 13:57 - 00000000 ____D () C:\Program Files\WinRAR
2014-02-14 13:35 - 2014-02-14 13:35 - 00014143 _____ () C:\Users\Besitzer\Desktop\Datei in zip Datei umwandeln.odt
2014-02-14 11:49 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-14 11:49 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-14 06:40 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-14 06:40 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-14 06:40 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-14 06:40 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-14 06:40 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-14 06:40 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-14 06:38 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-14 06:38 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-14 06:38 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-14 06:38 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-14 06:38 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-14 06:38 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-14 06:38 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-14 06:38 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-14 06:38 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-14 06:38 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-14 06:38 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-14 06:38 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-14 06:38 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-14 06:38 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-14 06:38 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-14 06:38 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-14 06:38 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-14 06:38 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-14 06:38 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-14 06:28 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-14 06:28 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-14 06:28 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-14 06:28 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-14 06:28 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-14 06:28 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-14 06:28 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-14 06:28 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-14 06:28 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-14 06:28 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-14 06:28 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-14 06:28 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-14 06:28 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-14 06:28 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-14 06:28 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-14 06:28 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-14 06:28 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-14 06:28 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-14 06:28 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-14 06:28 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-14 06:28 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-14 06:28 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-14 06:28 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-14 06:28 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-14 06:28 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-14 06:28 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-14 06:28 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-14 06:28 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-14 06:28 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-14 06:28 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-14 06:28 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-14 06:28 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-14 06:28 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-14 06:28 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-14 06:28 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-14 06:28 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-14 06:28 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-14 06:28 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-14 06:28 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-13 18:02 - 2014-02-13 18:02 - 00000000 ____D () C:\Windows\ERUNT
2014-02-13 17:50 - 2014-02-20 17:46 - 00000000 ____D () C:\AdwCleaner
2014-02-13 17:18 - 2014-02-13 17:18 - 00014505 _____ () C:\Users\Besitzer\Desktop\Waschvollautomat.odt
2014-02-13 09:38 - 2014-02-13 09:38 - 00033919 _____ () C:\Users\Besitzer\Desktop\FRST Scan result.odt
2014-02-13 09:32 - 2014-02-20 17:52 - 00000000 ____D () C:\FRST
2014-02-11 08:41 - 2014-02-11 08:43 - 00049026 _____ () C:\Users\Besitzer\Desktop\Schauspielerin Iris Berben genießt Offline-Dasein.odt
2014-02-10 20:41 - 2014-02-10 20:41 - 00016802 _____ () C:\Users\Besitzer\Desktop\ebay-Schuhregal.odt
2014-02-10 13:44 - 2014-02-10 13:44 - 00000000 ____D () C:\Program Files (x86)\buenosearch LTD
2014-02-10 13:43 - 2014-02-10 13:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\buenosearch LTD
2014-02-10 09:05 - 2014-02-14 16:53 - 00015905 _____ () C:\Users\Besitzer\Desktop\Langensch.-Vokabel-PC Span-Dt..odt
2014-02-09 08:58 - 2014-02-09 09:00 - 00519719 _____ () C:\Users\Besitzer\Desktop\URUK - 5000 Jahre Megacity.odt
2014-02-09 08:04 - 2014-02-09 08:04 - 00337136 _____ () C:\Users\Besitzer\Desktop\Fürstenberg Porzellan gr. Bonboniere.odt
2014-02-08 13:04 - 2014-02-08 13:06 - 00027856 _____ () C:\Users\Besitzer\Desktop\Mit Scholl-Latour im Libanon.odt
2014-02-06 18:06 - 2014-02-06 18:06 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-02-06 18:05 - 2014-02-07 06:07 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-04 15:37 - 2014-02-04 15:37 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 - Verknüpfung
2014-02-04 10:42 - 2014-02-04 10:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\OpenOffice
2014-02-04 10:41 - 2014-02-04 14:24 - 00000000 ___SD () C:\Program Files (x86)\OpenOffice 4.0.1
2014-02-04 10:40 - 2014-02-04 10:40 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-04 08:45 - 2014-02-20 16:25 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine-1
2014-02-02 19:57 - 2014-02-02 19:57 - 00000000 ____D () C:\Program Files (x86)\HD Streamer
2014-02-02 11:16 - 2014-02-02 15:14 - 00000000 ____D () C:\Users\Besitzer\Desktop\Psycho
2014-02-02 11:12 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Fotos
2014-02-02 11:09 - 2014-02-19 15:14 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine
2014-02-01 17:15 - 2014-02-01 17:15 - 00011303 _____ () C:\Users\Besitzer\Desktop\a) Anzüge.odt
2014-01-29 17:37 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-3
2014-01-29 17:28 - 2014-02-03 11:52 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-2
2014-01-29 10:29 - 2014-01-29 10:29 - 00024872 _____ () C:\Users\Besitzer\Desktop\Verrückt nach Meer-Sendefolge.odt
2014-01-28 17:29 - 2014-01-28 17:29 - 00025284 _____ () C:\Users\Besitzer\Desktop\Tea Time.odt
2014-01-27 13:08 - 2014-01-27 13:08 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Ashampoo
2014-01-27 13:07 - 2014-01-27 13:07 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-01-27 13:00 - 2014-01-27 13:03 - 384551131 _____ () C:\Users\Besitzer\Downloads\Plácido Domingo at Loreley 2013.mp4
2014-01-23 09:49 - 2014-01-23 09:54 - 00000048 _____ () C:\RB.rdat
2014-01-23 09:49 - 2014-01-23 09:54 - 00000048 _____ () C:\License_Time.rdat
2014-01-23 09:49 - 2014-01-23 09:49 - 00000000 ____D () C:\ProgramData\FileCure
2014-01-23 09:47 - 2014-01-23 09:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\FreemakeVideoConverter
2014-01-23 09:45 - 2014-01-23 09:45 - 01071000 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_flashplayer12x32_mssa_aaa_aih(1).exe
2014-01-23 09:45 - 2014-01-23 09:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Macromedia
2014-01-23 09:39 - 2014-01-23 09:39 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\HD Streamer
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\.android
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Program Files (x86)\Universal Updater

==================== One Month Modified Files and Folders =======

2014-02-20 17:52 - 2014-02-13 09:32 - 00000000 ____D () C:\FRST
2014-02-20 17:52 - 2012-10-04 19:30 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-20 17:48 - 2014-02-19 17:59 - 00000336 _____ () C:\Windows\setupact.log
2014-02-20 17:48 - 2012-12-07 07:53 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-20 17:48 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-20 17:47 - 2011-04-04 11:29 - 01305552 _____ () C:\Windows\WindowsUpdate.log
2014-02-20 17:46 - 2014-02-13 17:50 - 00000000 ____D () C:\AdwCleaner
2014-02-20 17:44 - 2014-02-20 17:44 - 01241834 _____ () C:\Users\Besitzer\Desktop\adwcleaner.exe
2014-02-20 17:41 - 2014-02-20 17:41 - 01241834 _____ () C:\Users\Besitzer\Downloads\adwcleaner.exe
2014-02-20 17:36 - 2014-02-20 17:36 - 02153472 _____ (Farbar) C:\Users\Besitzer\Desktop\FRST64.exe
2014-02-20 17:16 - 2012-12-07 07:53 - 00001114 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-20 17:08 - 2011-05-12 17:37 - 36269056 ___SH () C:\Users\Besitzer\Desktop\Thumbs.db
2014-02-20 16:25 - 2014-02-20 16:25 - 00010486 _____ () C:\Users\Besitzer\Desktop\Probleme Google.odt
2014-02-20 16:25 - 2014-02-04 08:45 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine-1
2014-02-20 14:43 - 2013-11-13 17:06 - 00003954 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{083BECD6-A6F2-4401-A905-5865C87918C6}
2014-02-20 14:30 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-20 13:00 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-20 11:44 - 2014-02-20 11:44 - 00206647 _____ () C:\Users\Besitzer\Desktop\Einen Moment der Ruhe.odt
2014-02-20 09:39 - 2014-02-20 09:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{9D8B4C73-DDCE-4E13-9615-83F75CB8B04D}
2014-02-20 09:36 - 2009-07-14 05:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-20 09:36 - 2009-07-14 05:45 - 00015120 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-20 07:34 - 2014-02-20 07:34 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{43FD4C98-9286-41BD-83C4-098FCD67A5DE}
2014-02-19 17:59 - 2014-02-19 17:59 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-19 17:55 - 2013-09-14 09:44 - 07813846 _____ () C:\Users\Besitzer\Downloads\iv_formats.zip
2014-02-19 17:52 - 2014-02-19 17:52 - 01069920 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_reader11_de_mssa_aaa_aih.exe
2014-02-19 15:14 - 2014-02-02 11:09 - 00000000 ____D () C:\Users\Besitzer\Desktop\Tagtäglich Routine
2014-02-19 07:39 - 2014-02-19 07:39 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{77F185F0-738D-4C67-B041-E7B4C59808ED}
2014-02-18 21:38 - 2014-02-18 21:38 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{9FA4C146-EEBA-4E4D-BFBF-1FFBB1A381AE}
2014-02-18 21:37 - 2014-02-18 21:37 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{455F7D01-CB43-473E-991A-7EE8C06FF49A}
2014-02-18 21:34 - 2014-02-18 21:34 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-02-18 21:30 - 2011-04-29 07:04 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Google
2014-02-18 18:39 - 2014-02-18 18:38 - 00084347 _____ () C:\Users\Besitzer\Desktop\Iris Berben empfindet Leben ohne Internet als befreiend.odt
2014-02-18 18:06 - 2014-02-18 18:06 - 00115576 _____ () C:\ComboFix.txt
2014-02-18 18:06 - 2014-02-18 17:57 - 00000000 ____D () C:\Qoobox
2014-02-18 18:06 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-02-18 18:05 - 2014-02-18 17:56 - 00000000 ____D () C:\Windows\erdnt
2014-02-18 18:04 - 2009-07-14 03:34 - 00000215 _____ () C:\Windows\system.ini
2014-02-18 14:12 - 2014-02-18 11:54 - 582821958 _____ () C:\Users\Besitzer\Desktop\Der_große_Haushaltscheck-Mikrowellen-344029_3483249.mp4
2014-02-18 14:11 - 2012-12-07 07:53 - 00004110 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-18 14:11 - 2012-12-07 07:53 - 00003858 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-18 14:09 - 2013-09-23 11:36 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\vlc
2014-02-18 12:30 - 2014-02-18 12:30 - 00009900 _____ () C:\Users\Besitzer\Desktop\MediathekView 4.0 Final.odt
2014-02-18 12:16 - 2014-02-18 12:16 - 29640231 _____ () C:\Users\Besitzer\Downloads\MediathekView_4.zip
2014-02-18 12:14 - 2011-04-04 11:29 - 00000000 ____D () C:\Users\Besitzer
2014-02-18 12:07 - 2012-04-16 15:58 - 00041472 ___SH () C:\Users\Besitzer\Downloads\Thumbs.db
2014-02-18 11:54 - 2014-02-18 11:54 - 00000000 ____D () C:\Users\Besitzer\MediathekView
2014-02-18 11:49 - 2013-12-25 10:08 - 00000000 ____D () C:\Users\Besitzer\.mediathek3
2014-02-18 11:44 - 2013-10-21 09:08 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-18 11:40 - 2014-02-18 11:38 - 00108968 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-02-18 11:37 - 2014-02-18 11:37 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-02-18 11:37 - 2014-02-18 11:37 - 00189352 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-02-18 11:37 - 2014-02-18 11:37 - 00000000 ____D () C:\Program Files\Java
2014-02-18 11:31 - 2014-02-18 11:31 - 00022192 _____ () C:\Users\Besitzer\Desktop\ARD Mediathek Download.odt
2014-02-18 10:21 - 2009-07-14 18:58 - 00667970 _____ () C:\Windows\system32\perfh007.dat
2014-02-18 10:21 - 2009-07-14 18:58 - 00136714 _____ () C:\Windows\system32\perfc007.dat
2014-02-18 10:21 - 2009-07-14 06:13 - 01537850 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-18 09:06 - 2014-02-18 09:05 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{17B7F846-D90A-4D9B-ACF2-3184BA7A8AD5}
2014-02-17 08:10 - 2012-12-10 07:41 - 00000000 ____D () C:\Users\Besitzer\Desktop\Programme
2014-02-17 06:44 - 2014-02-17 06:44 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{B04677A7-4A84-4891-B8B1-68927CCFC398}
2014-02-16 12:19 - 2014-02-15 08:55 - 00016091 _____ () C:\Users\Besitzer\Desktop\Rückz-Ummelden.odt
2014-02-16 09:35 - 2013-08-14 20:13 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-16 09:33 - 2011-04-04 14:51 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-16 09:11 - 2014-01-17 20:55 - 00000000 ____D () C:\Users\Besitzer\Desktop\Ostpreußen_Danzig-Königsberg_DAMALS
2014-02-16 08:10 - 2014-02-16 08:10 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{133D7684-F07E-40FB-AEC9-CC9009B4C041}
2014-02-15 18:53 - 2014-02-15 18:53 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{EC5BE35E-91CF-4835-9555-E24D0F57A9B0}
2014-02-15 15:00 - 2012-06-03 19:14 - 00003012 _____ () C:\Windows\System32\Tasks\{1F7E5E00-647A-47E6-9221-252E2625D665}
2014-02-15 13:56 - 2014-01-18 10:41 - 00013065 _____ () C:\Users\Besitzer\Desktop\Hochzeit im Walde.odt
2014-02-15 13:47 - 2014-02-15 13:47 - 00000000 ____D () C:\Users\Besitzer\Desktop\Sport-Fitneß
2014-02-15 13:43 - 2013-02-21 07:57 - 00000000 ____D () C:\Users\Besitzer\Desktop\Reisen, Events
2014-02-15 13:42 - 2013-12-18 10:22 - 00000000 ____D () C:\Users\Besitzer\Desktop\ASTRO
2014-02-15 06:53 - 2014-02-15 06:52 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\{1B189B65-49A6-47CB-B0EF-55F617D264A3}
2014-02-14 17:22 - 2011-04-10 09:40 - 00000000 ____D () C:\Users\Besitzer\Desktop\HAUPTORDNER
2014-02-14 17:19 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2014-02-14 17:09 - 2012-04-08 15:19 - 00000000 ____D () C:\Program Files (x86)\CatchtheSperm
2014-02-14 16:58 - 2014-02-14 16:58 - 00010152 _____ () C:\Users\Besitzer\Desktop\Geberth, Wilhelm.odt
2014-02-14 16:53 - 2014-02-10 09:05 - 00015905 _____ () C:\Users\Besitzer\Desktop\Langensch.-Vokabel-PC Span-Dt..odt
2014-02-14 13:57 - 2014-02-14 13:57 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-02-14 13:57 - 2014-02-14 13:43 - 00000000 ____D () C:\Program Files\WinRAR
2014-02-14 13:44 - 2014-02-14 13:44 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\WinRAR
2014-02-14 13:35 - 2014-02-14 13:35 - 00014143 _____ () C:\Users\Besitzer\Desktop\Datei in zip Datei umwandeln.odt
2014-02-13 18:02 - 2014-02-13 18:02 - 00000000 ____D () C:\Windows\ERUNT
2014-02-13 17:18 - 2014-02-13 17:18 - 00014505 _____ () C:\Users\Besitzer\Desktop\Waschvollautomat.odt
2014-02-13 09:38 - 2014-02-13 09:38 - 00033919 _____ () C:\Users\Besitzer\Desktop\FRST Scan result.odt
2014-02-13 06:34 - 2011-04-07 17:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\CrashDumps
2014-02-12 18:01 - 2011-05-15 07:22 - 00000000 ____D () C:\Users\Besitzer\Desktop\Video
2014-02-11 08:43 - 2014-02-11 08:41 - 00049026 _____ () C:\Users\Besitzer\Desktop\Schauspielerin Iris Berben genießt Offline-Dasein.odt
2014-02-10 20:41 - 2014-02-10 20:41 - 00016802 _____ () C:\Users\Besitzer\Desktop\ebay-Schuhregal.odt
2014-02-10 13:44 - 2014-02-10 13:44 - 00000000 ____D () C:\Program Files (x86)\buenosearch LTD
2014-02-10 13:43 - 2014-02-10 13:43 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\buenosearch LTD
2014-02-09 09:00 - 2014-02-09 08:58 - 00519719 _____ () C:\Users\Besitzer\Desktop\URUK - 5000 Jahre Megacity.odt
2014-02-09 08:04 - 2014-02-09 08:04 - 00337136 _____ () C:\Users\Besitzer\Desktop\Fürstenberg Porzellan gr. Bonboniere.odt
2014-02-09 06:08 - 2011-04-10 09:40 - 00000000 ____D () C:\Users\Besitzer\Desktop\Kleidung, Access., Einlegesohlen
2014-02-08 13:06 - 2014-02-08 13:04 - 00027856 _____ () C:\Users\Besitzer\Desktop\Mit Scholl-Latour im Libanon.odt
2014-02-08 10:45 - 2013-11-30 08:00 - 00000000 ____D () C:\Users\Besitzer\Desktop\GARTEN
2014-02-07 08:54 - 2012-01-13 20:55 - 00003694 _____ () C:\Windows\System32\Tasks\Adobe-Online-Aktualisierungsprogramm
2014-02-07 08:07 - 2011-04-06 10:33 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Windows Live
2014-02-07 06:07 - 2014-02-06 18:05 - 00000000 ____D () C:\Program Files (x86)\Spyware Terminator
2014-02-06 18:06 - 2014-02-06 18:06 - 00051496 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\stflt.sys
2014-02-06 13:16 - 2014-02-14 06:28 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-14 06:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-14 06:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-14 06:28 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-14 06:28 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-14 06:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-14 06:28 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-14 06:28 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-14 06:28 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-14 06:28 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-14 06:28 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-14 06:28 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-14 06:28 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-14 06:28 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-14 06:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-14 06:28 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-14 06:28 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-14 06:28 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-14 06:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-14 06:28 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-14 06:28 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-14 06:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-14 06:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-14 06:28 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-14 06:28 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-14 06:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-14 06:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-14 06:28 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-14 06:28 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-14 06:28 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-14 06:28 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-14 06:28 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-14 06:28 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-14 06:28 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-14 06:28 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-14 06:28 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-14 06:28 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-14 06:28 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-14 06:28 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-06 06:52 - 2012-10-04 19:30 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-06 06:52 - 2012-10-04 19:29 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-06 06:52 - 2012-10-04 19:29 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-05 15:17 - 2013-08-24 09:25 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-1
2014-02-05 12:22 - 2011-04-21 17:51 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Stellarium
2014-02-05 12:22 - 2011-04-21 17:50 - 00000000 ____D () C:\Program Files\Stellarium
2014-02-04 18:38 - 2013-09-08 07:01 - 00289784 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-04 18:11 - 2011-04-05 09:54 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-04 15:37 - 2014-02-04 15:37 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.0.1 - Verknüpfung
2014-02-04 14:32 - 2011-04-04 11:29 - 00000000 ___RD () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-04 14:24 - 2014-02-04 10:41 - 00000000 ___SD () C:\Program Files (x86)\OpenOffice 4.0.1
2014-02-04 12:06 - 2012-06-13 17:06 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\NPE
2014-02-04 11:31 - 2013-09-07 17:04 - 00064768 _____ () C:\Users\Besitzer\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-04 10:42 - 2014-02-04 10:42 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\OpenOffice
2014-02-04 10:40 - 2014-02-04 10:40 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-02-03 11:52 - 2014-02-02 11:12 - 00000000 ____D () C:\Users\Besitzer\Desktop\Fotos
2014-02-03 11:52 - 2014-01-29 17:37 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-3
2014-02-03 11:52 - 2014-01-29 17:28 - 00000000 ____D () C:\Users\Besitzer\Desktop\Aktuell-2
2014-02-02 19:57 - 2014-02-02 19:57 - 00000000 ____D () C:\Program Files (x86)\HD Streamer
2014-02-02 15:14 - 2014-02-02 11:16 - 00000000 ____D () C:\Users\Besitzer\Desktop\Psycho
2014-02-02 15:10 - 2013-10-10 10:39 - 00017877 _____ () C:\Users\Besitzer\Desktop\Piaf-Konzert.odt
2014-02-02 14:49 - 2013-11-22 10:43 - 00000000 ____D () C:\Users\Besitzer\Desktop\Mnünzen
2014-02-01 17:15 - 2014-02-01 17:15 - 00011303 _____ () C:\Users\Besitzer\Desktop\a) Anzüge.odt
2014-01-31 06:31 - 2009-07-14 06:08 - 00032632 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-29 10:29 - 2014-01-29 10:29 - 00024872 _____ () C:\Users\Besitzer\Desktop\Verrückt nach Meer-Sendefolge.odt
2014-01-28 22:49 - 2013-09-23 08:21 - 00000000 ____D () C:\Program Files (x86)\StreamTransport
2014-01-28 17:29 - 2014-01-28 17:29 - 00025284 _____ () C:\Users\Besitzer\Desktop\Tea Time.odt
2014-01-27 17:26 - 2011-04-07 17:06 - 00000000 ____D () C:\Program Files\CCleaner
2014-01-27 13:08 - 2014-01-27 13:08 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Ashampoo
2014-01-27 13:07 - 2014-01-27 13:07 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-01-27 13:03 - 2014-01-27 13:00 - 384551131 _____ () C:\Users\Besitzer\Downloads\Plácido Domingo at Loreley 2013.mp4
2014-01-23 09:54 - 2014-01-23 09:49 - 00000048 _____ () C:\RB.rdat
2014-01-23 09:54 - 2014-01-23 09:49 - 00000048 _____ () C:\License_Time.rdat
2014-01-23 09:49 - 2014-01-23 09:49 - 00000000 ____D () C:\ProgramData\FileCure
2014-01-23 09:47 - 2014-01-23 09:47 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\FreemakeVideoConverter
2014-01-23 09:46 - 2011-04-05 10:15 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Adobe
2014-01-23 09:45 - 2014-01-23 09:45 - 01071000 _____ (Solid State Networks) C:\Users\Besitzer\Downloads\install_flashplayer12x32_mssa_aaa_aih(1).exe
2014-01-23 09:45 - 2014-01-23 09:45 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\Macromedia
2014-01-23 09:44 - 2011-12-22 15:27 - 00000000 ____D () C:\Users\Besitzer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2014-01-23 09:44 - 2011-12-22 15:27 - 00000000 ____D () C:\ProgramData\Freemake
2014-01-23 09:39 - 2014-01-23 09:39 - 00000000 ____D () C:\ProgramData\McAfee
2014-01-23 07:08 - 2011-04-08 09:59 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-01-22 13:23 - 2013-08-31 13:51 - 00000000 ____D () C:\Users\Besitzer\Documents\Freemake
2014-01-22 12:30 - 2011-12-22 15:27 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\AppData\Local\HD Streamer
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Users\Besitzer\.android
2014-01-22 11:31 - 2014-01-22 11:31 - 00000000 ____D () C:\Program Files (x86)\Universal Updater
2014-01-21 06:41 - 2012-04-02 18:34 - 00000000 ____D () C:\Users\Besitzer\Desktop\Interessenbereiche -Definierung-

Some content of TEMP:
====================
C:\Users\Besitzer\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-18 09:25

==================== End Of Log ============================
--- --- ---

--- --- ---

--- --- ---



Übrigens:
Ich habe heute früh mal den 'Norton Internet Security Scan' laufen lassen:
Er berichtete mir von 5 entfernten "Tracking Cookies" !

Gruß
Frusti


Alle Zeitangaben in WEZ +1. Es ist jetzt 19:26 Uhr.
Seite 1 von 5 1 23 Letzte »
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55