| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Aufstarten PC mit Win 7 64 dauert viel zulangeWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
05.05.2014, 19:05
| #16 |
 |  Aufstarten PC mit Win 7 64 dauert viel zulange Hallo Schrauber, hier noch 5 logfiles: 1.das nachgeholte AdwCleaner 2.checkup 3.ESET 4.Frst64 5.Addition Bis jetzt ist der Aufstart von Win7 immer noch sehr langsam. Es dauert bis 5 Minuten! Ich nehme an, es bessesrt sich, nachdem ich jetzt diese 5 Aktionen durchgeführt habe. Mit vielem Dank und freundlichen Grüssen AlfredAdwCleaner Logfile: Code:
ATTFilter # AdwCleaner v3.205 - Bericht erstellt am 04/05/2014 um 09:36:13
# Aktualisiert 28/04/2014 von Xplode
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (64 bits)
# Benutzername : Alfred - ALFRED-PC
# Gestartet von : C:\Users\Alfred\Desktop\adwcleaner.exe
# Option : Löschen
***** [ Dienste ] *****
***** [ Dateien / Ordner ] *****
Ordner Gelöscht : C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\CT2851647
Ordner Gelöscht : C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\Extensions\{C840E246-6B95-475E-9BD7-CAA1C7ECA9F2}
Datei Gelöscht : C:\Uninstall.exe
***** [ Verknüpfungen ] *****
***** [ Registrierungsdatenbank ] *****
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{A1CCCE0D-AE21-42A2-BE58-8E6109410995}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{F13D3582-1359-4F8F-9A48-EF3AE9F5701C}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Schlüssel Gelöscht : HKCU\Software\InstalledThirdPartyPrograms
Schlüssel Gelöscht : HKCU\Software\Pokki
Schlüssel Gelöscht : HKLM\Software\Minibar
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledThirdPartyPrograms
***** [ Browser ] *****
-\\ Internet Explorer v11.0.9600.17041
-\\ Mozilla Firefox v28.0 (de)
[ Datei : C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\prefs.js ]
Zeile gelöscht : user_pref("extensions.kango.storage.m2_k1", "4");
Zeile gelöscht : user_pref("extensions.kango.storage.m2_k2", "0");
Zeile gelöscht : user_pref("extensions.kango.storage.m2_k3", "1381941787242");
Zeile gelöscht : user_pref("extensions.kango.storage.m2_k4", "0");
Zeile gelöscht : user_pref("extensions.kango.storage.m2_k5", "1381943410926");
Zeile gelöscht : user_pref("extensions.kango.storage.minibar.config", "{\"name\":\"Apps Hat\",\"description\":\"Apps Hat\",\"button\":{\"tooltip\":\"Visit AppsHat.com\",\"icon\":\"hxxp://www.bigspeedpro.com/button/%af[...]
Zeile gelöscht : user_pref("extensions.kango.storage.nero_options", "\"{\\\"m1\\\":{\\\"ads\\\":{\\\"n1\\\":{\\\"url\\\":\\\"//ulayout.com/nero/hatter/google_post_results_728x90.html?aff_slug=appshat\\\",\\\"width\\\"[...]
Zeile gelöscht : user_pref("extensions.kango.storage.ui.button.iconCache", "\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABMAAAATCAYAAAByUDbMAAADlElEQVQ4jb3S3U9adxwG8F/BuooQAQscXj0cOIC8nANUPYjoHDClvqAoZ04gpqsZKmrUV[...]
-\\ Google Chrome v34.0.1847.131
*************************
AdwCleaner[R0].txt - [2687 octets] - [13/09/2013 11:09:45]
AdwCleaner[R1].txt - [3327 octets] - [02/05/2014 20:37:28]
AdwCleaner[R2].txt - [3387 octets] - [04/05/2014 08:34:33]
AdwCleaner[S0].txt - [2702 octets] - [13/09/2013 11:12:13]
AdwCleaner[S1].txt - [3035 octets] - [04/05/2014 09:36:13]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [3095 octets] ##########
Results of screen317's Security Check version 0.99.82 Windows 7 Service Pack 1 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Microsoft Security Essentials Antivirus up to date! `````````Anti-malware/Other Utilities Check:````````` SpywareBlaster 5.0 Secunia PSI (3.0.0.7011) TuneUp Utilities Language Pack (de-DE) Java 7 Update 55 Adobe Flash Player 13.0.0.206 Adobe Reader XI Mozilla Firefox (28.0) Google Chrome 34.0.1847.116 Google Chrome 34.0.1847.131 Google Chrome Plugins... ````````Process Check: objlist.exe by Laurent```````` Microsoft Security Essentials msseces.exe Windows Defender MSMpEng.exe Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbam.exe system32 OnlineScannerApp.exe -?- `````````````````System Health check````````````````` Total Fragmentation on Drive C: ````````````````````End of Log`````````````````````` FRST Logfile: FRST Logfile: FRST Logfile: Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 05-05-2014 Ran by Alfred (administrator) on ALFRED-PC on 05-05-2014 19:54:21 Running from C:\Users\Alfred\Desktop Windows 7 Home Premium Service Pack 1 (X64) OS Language: German Standard Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: Downloading Farbar Recovery Scan Tool Download link for 64-Bit Version: Downloading Farbar Recovery Scan Tool Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: FRST Tutorial - How to use Farbar Recovery Scan Tool - Malware Removal Guides and Tutorials ==================== Processes (Whitelisted) ================= (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe (Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe (Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (Malwarebytes Corporation) C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Abelssoft) C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe (DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTShellHlp.exe (FreeDownloadManager.ORG) C:\Program Files (x86)\Free Download Manager\fdm.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (ESET) C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe ==================== Registry (Whitelisted) ================== HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation) HKLM\...\Run: [Nvtmru] => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-08-27] (NVIDIA Corporation) HKLM\...\Run: [Onboard] => C:\Program Files\Western Digital\WD SmartWare\WDSmartWare.exe [3165040 2013-08-14] (Western Digital Technologies, Inc.) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.) HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) HKLM-x32\...\Run: [WD Drive Unlocker] => C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe [1694080 2013-07-10] (Western Digital Technologies, Inc.) HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5537136 2013-08-14] (Western Digital Technologies, Inc.) HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDFXAudioPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDFXAudioPlugin.dll",DllRegisterServer [X] HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DSEPlugins\DFXAudioPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DSEPlugins\DFXAudioPlugin.dll",DllRegisterServer [X] HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXBannerAdPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXBannerAdPlugin.dll",DllRegisterServer [X] HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDownloadManagerPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDownloadManagerPlugin.dll",DllRegisterServer [X] HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXMediaManagerPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXMediaManagerPlugin.dll",DllRegisterServer [X] HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll",DllRegisterServer [X] Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia) ==================== Internet (Whitelisted) ==================== HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Sign In HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB655D88E8A01CB01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-ch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = Bing SearchScopes: HKCU - {BEC15BFA-01C6-44A5-BD78-38BF5EBE0604} URL = hxxp://ch.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} BHO-x32: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG) BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll () FF Plugin: @microsoft.com/GENUINE - disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.0 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll () FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE - disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @real.com/nprpjplug;version=12.0.1.633 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: DownloadHelper - C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-04-12] FF Extension: Adblock Plus Pop-up Addon - C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\Extensions\adblockpopups@jessehakanen.net.xpi [2013-09-19] FF Extension: BitAccelerator - C:\Program Files (x86)\Mozilla Firefox\extensions\{5ddeb737-082c-48fb-8c06-aa4b38d61e5f} [2013-09-07] FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF Extension: No Name - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-03-22] FF HKLM-x32\...\Firefox\Extensions: [{09F060FA-566D-42D7-BF79-97AB30863433}] - C:\Program Files (x86)\Steganos Privacy Suite 12\pfplugin FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] - C:\Program Files (x86)\Steganos Privacy Suite 12\spmplugin3 FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-10-18] FF HKLM-x32\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF Extension: No Name - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-03-22] FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-10-18] Chrome: ======= Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION CHR Extension: (WOT) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2013-06-29] CHR Extension: (YouTube) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-06-16] CHR Extension: (Google Search) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-06-16] CHR Extension: (RealDownloader) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-06-16] CHR Extension: (Gmail) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-06-16] CHR HKLM-x32\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\wpa\wpa.crx [2013-06-16] CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2013-06-16] CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\html5video\html5video.crx [2013-06-16] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= R2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1809720 2014-04-03] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [857912 2014-04-03] (Malwarebytes Corporation) R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation) R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14997280 2013-08-27] (NVIDIA Corporation) R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1228504 2013-07-03] (Secunia) R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [660184 2013-07-03] (Secunia) S4 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software) R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2013-08-14] (Western Digital Technologies, Inc.) R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [270704 2013-07-10] (Western Digital Technologies, Inc.) ==================== Drivers (Whitelisted) ==================== U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-04-03] (Malwarebytes Corporation) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-05] (Malwarebytes Corporation) R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63192 2014-04-03] (Malwarebytes Corporation) S1 mbmiodrvr; C:\Windows\syswow64\mbmiodrvr.sys [4608 2004-04-10] (cansoft@livewiredev.com) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation) R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-08-20] (NVIDIA Corporation) R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-07-03] (Secunia) S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) R0 sptd; C:\Windows\System32\Drivers\sptd.sys [828912 2010-06-06] () R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2013-07-09] (Acronis International GmbH) R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [183224 2013-07-09] (Acronis) R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [59184 2011-11-17] (Windows (R) 2000 DDK provider) R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [572336 2011-11-17] (Paragon) R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [352816 2011-11-17] (Paragon) R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [117024 2013-07-09] (Acronis International GmbH) U3 acbxmsjk; C:\Windows\System32\Drivers\acbxmsjk.sys [0 ] (Advanced Micro Devices) U3 agjdvbzl; C:\Windows\System32\Drivers\agjdvbzl.sys [0 ] (Advanced Micro Devices) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 cpuz132; \??\C:\Users\Alfred\AppData\Local\Temp\cpuz132\cpuz132_x64.sys [X] ==================== NetSvcs (Whitelisted) =================== ==================== One Month Created Files and Folders ======== 2014-05-05 19:54 - 2014-05-05 19:54 - 00018157 _____ () C:\Users\Alfred\Desktop\FRST.txt 2014-05-05 19:53 - 2014-05-05 19:53 - 02063872 _____ (Farbar) C:\Users\Alfred\Desktop\FRST64.exe 2014-05-05 19:53 - 2014-05-05 19:53 - 00000000 ____D () C:\Users\Alfred\Desktop\FRST-OlderVersion 2014-05-05 19:52 - 2014-05-05 19:52 - 00001071 _____ () C:\Users\Alfred\Desktop\checkup.txt 2014-05-05 19:51 - 2014-05-05 19:51 - 00855379 _____ () C:\Users\Alfred\Desktop\SecurityCheck.exe 2014-05-04 22:46 - 2014-05-04 22:46 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-05-04 22:45 - 2014-05-04 22:45 - 02347384 _____ (ESET) C:\Users\Alfred\Desktop\esetsmartinstaller_deu.exe 2014-05-04 19:08 - 2014-05-04 20:57 - 00000000 ____D () C:\Users\Alfred\Documents\Wechseldatenträger 2014-05-04 16:18 - 2014-05-04 16:22 - 00000000 ____D () C:\Users\Alfred\Desktop\Projekt neuer PC FSX 2014-05-04 09:43 - 2014-05-04 09:43 - 00003187 _____ () C:\Users\Alfred\Desktop\AdwCleaner[S1].txt 2014-05-04 08:34 - 2014-05-02 20:35 - 01310621 _____ () C:\Users\Alfred\Desktop\adwcleaner.exe 2014-05-03 17:42 - 2014-05-03 17:44 - 02521198 _____ () C:\Users\Alfred\Downloads\unalakleet_paunv3_0.zip 2014-05-03 15:46 - 2014-05-03 15:46 - 03511490 _____ () C:\Users\Alfred\Downloads\FSUIPC4(1).zip 2014-05-03 15:45 - 2014-05-03 15:45 - 00002048 _____ () C:\Windows\QW146.lic 2014-05-03 14:16 - 2014-05-03 14:17 - 00000000 ____D () C:\Users\Alfred\Documents\TROJANERBOARD.DE 3.5.14 2014-05-02 23:51 - 2014-04-29 16:01 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-05-02 23:51 - 2014-04-29 15:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-05-02 23:51 - 2014-04-29 14:48 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-05-02 23:51 - 2014-04-29 14:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-05-02 22:22 - 2014-05-02 22:22 - 01016261 _____ (Thisisu) C:\Users\Alfred\Downloads\JRT.exe 2014-05-02 20:38 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll 2014-05-02 20:35 - 2014-05-02 20:35 - 01310621 _____ () C:\Users\Alfred\Downloads\adwcleaner.exe 2014-05-02 18:31 - 2014-05-05 19:00 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-05-02 18:31 - 2014-05-02 18:31 - 00001068 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-05-02 18:31 - 2014-05-02 18:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-05-02 18:31 - 2014-05-02 18:31 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-05-02 18:31 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2014-05-02 18:31 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2014-05-02 18:31 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2014-05-02 12:21 - 2014-05-02 12:21 - 00001239 _____ () C:\Users\Alfred\Desktop\Mustang Pilot's Guide.lnk 2014-05-02 10:28 - 2014-05-02 10:28 - 41380253 _____ () C:\Users\Alfred\Downloads\EFASS_1.0.1714.5921.zip 2014-05-02 06:53 - 2014-05-02 06:54 - 00000000 ____D () C:\Users\Alfred\Documents\TROJANERBOARD.DE.2.5.14 2014-05-01 21:36 - 2014-05-01 21:36 - 00039277 _____ () C:\ComboFix.txt 2014-05-01 21:28 - 2011-06-26 08:45 - 00256000 _____ () C:\Windows\PEV.exe 2014-05-01 21:28 - 2010-11-07 19:20 - 00208896 _____ () C:\Windows\MBR.exe 2014-05-01 21:28 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2014-05-01 21:28 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2014-05-01 21:28 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2014-05-01 21:28 - 2000-08-31 02:00 - 00098816 _____ () C:\Windows\sed.exe 2014-05-01 21:28 - 2000-08-31 02:00 - 00080412 _____ () C:\Windows\grep.exe 2014-05-01 21:28 - 2000-08-31 02:00 - 00068096 _____ () C:\Windows\zip.exe 2014-05-01 21:27 - 2014-05-01 21:36 - 00000000 ____D () C:\Qoobox 2014-05-01 21:23 - 2014-05-01 21:23 - 00000000 ____D () C:\Windows\System32\Tasks\Western Digital 2014-05-01 21:22 - 2014-05-01 21:22 - 00000000 ____D () C:\Users\Alfred\AppData\Local\Western Digital 2014-05-01 21:21 - 2014-05-01 21:21 - 00000000 ____D () C:\Users\Alfred\AppData\Local\Western_Digital_Technolog 2014-05-01 21:16 - 2014-05-04 09:48 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat 2014-05-01 21:15 - 2014-05-01 21:15 - 00000000 ____D () C:\Program Files\Western Digital 2014-05-01 21:15 - 2014-05-01 21:15 - 00000000 ____D () C:\Program Files\Common Files\Western Digital 2014-05-01 21:14 - 2014-05-01 21:21 - 00000000 ____D () C:\ProgramData\Western Digital 2014-05-01 21:14 - 2014-05-01 21:15 - 00014218 _____ () C:\Windows\DPINST.LOG 2014-05-01 21:14 - 2014-05-01 21:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital 2014-05-01 21:14 - 2014-05-01 21:15 - 00000000 ____D () C:\Program Files (x86)\Western Digital 2014-04-29 22:07 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-04-29 22:07 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-04-29 22:07 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-04-29 22:07 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-04-29 22:07 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-04-29 22:07 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-04-29 22:07 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-04-29 22:07 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-04-29 22:07 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-04-29 22:07 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-04-29 22:07 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-04-29 22:07 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-04-29 22:07 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-04-29 22:07 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-04-29 22:07 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-04-29 22:07 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-04-29 22:07 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-04-29 22:07 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-04-29 22:07 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-04-29 22:07 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-04-29 22:07 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-04-29 22:07 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-04-29 22:07 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-04-29 22:07 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-04-29 22:07 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-04-29 22:07 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-04-29 22:07 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-04-29 22:07 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-04-29 22:07 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-04-29 22:07 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-04-29 22:07 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-04-29 22:07 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-04-29 22:07 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-04-29 22:07 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-04-29 22:07 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-04-29 22:07 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-04-29 22:07 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-04-29 22:07 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-04-29 22:07 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-04-29 22:07 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-04-29 22:07 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-04-29 22:07 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-04-29 22:07 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-04-29 22:07 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-04-27 20:14 - 2014-04-27 20:14 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-04-26 22:09 - 2014-04-26 22:09 - 02061824 _____ (Farbar) C:\Users\Alfred\Downloads\FRST64.exe 2014-04-26 09:39 - 2013-09-16 11:18 - 00000679 _____ () C:\Users\Alfred\Desktop\AVIATION - Verknüpfung.lnk 2014-04-23 08:11 - 2014-04-23 08:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CLS DC10 2014-04-22 14:11 - 2014-04-22 14:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VFR Extreeme - Boise X 2014-04-22 14:11 - 2014-04-22 14:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Boise X - Patch V1.2 2014-04-22 14:01 - 2014-04-22 14:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VFR Kaui HI01 Taxiway sign fix 2014-04-22 14:00 - 2014-04-22 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kalaupapa Molokai Compatibility Patch 2014-04-22 12:11 - 2014-04-22 12:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-04-22 12:11 - 2014-04-22 12:10 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-04-22 12:11 - 2014-04-22 12:10 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-04-22 12:11 - 2014-04-22 12:10 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-04-22 12:11 - 2014-04-22 12:10 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-04-21 13:01 - 2014-04-21 13:01 - 00000000 ____D () C:\Users\Alfred\Documents\0.0.my Documents ex PC DELL new 2014-04-19 17:41 - 2014-04-21 15:07 - 00000000 ____D () C:\Users\Alfred\Desktop\FSX F 2014-04-19 17:39 - 2014-04-19 17:39 - 00000000 ____D () C:\Users\Alfred\Documents\1.speedtest 2014-04-19 17:38 - 2014-04-21 14:34 - 00001943 _____ () C:\Users\Alfred\Desktop\eSATA inventar23.4.14.lnk 2014-04-19 17:35 - 2014-04-27 16:46 - 00000000 ____D () C:\Users\Alfred\Documents\0.PENDINGS 2014-04-19 17:26 - 2014-04-19 17:30 - 02853583 _____ () C:\Users\Alfred\Downloads\l1011p1.zip 2014-04-18 21:36 - 2014-04-18 22:03 - 550797932 _____ () C:\Users\Alfred\Downloads\Grand_Canyon_KGCN_V2.zip 2014-04-18 21:35 - 2014-04-18 21:35 - 00599860 _____ () C:\Users\Alfred\Downloads\kgcn_jrm(1).zip 2014-04-18 21:34 - 2014-04-18 21:34 - 00599860 _____ () C:\Users\Alfred\Downloads\kgcn_jrm.zip 2014-04-18 11:44 - 2014-04-18 11:44 - 00000933 _____ () C:\Users\Alfred\Desktop\aerofly-fs.exe - Verknüpfung.lnk 2014-04-18 11:40 - 2014-04-18 11:42 - 510211567 _____ (IPACS ) C:\Users\Alfred\Downloads\aerofly-fs-update-win-v1020005.exe 2014-04-17 07:37 - 2014-04-17 07:37 - 00000691 _____ () C:\Users\Alfred\Desktop\Alfred - Verknüpfung.lnk 2014-04-15 18:36 - 2014-04-15 18:36 - 00000000 ____D () C:\0.abelssoft checkdrive 100% 2014-04-14 06:10 - 2014-04-14 11:01 - 862628484 _____ () C:\Users\Alfred\Downloads\AZ_North4West7_FSX.zip 2014-04-14 06:09 - 2014-04-14 11:00 - 881134877 _____ () C:\Users\Alfred\Downloads\AZ_North3West7_FSX.zip 2014-04-14 05:59 - 2014-04-14 09:57 - 701746171 _____ () C:\Users\Alfred\Downloads\AZ_North6_FSX.zip 2014-04-14 05:58 - 2014-04-14 10:40 - 853437347 _____ () C:\Users\Alfred\Downloads\AZ_North6West_FSX.zip 2014-04-14 05:57 - 2014-04-14 10:15 - 761091948 _____ () C:\Users\Alfred\Downloads\AZ_North6West2_FSX.zip 2014-04-14 05:56 - 2014-04-14 10:24 - 824296777 _____ () C:\Users\Alfred\Downloads\AZ_North6West3_FSX.zip 2014-04-13 17:23 - 2014-04-14 00:50 - 781741209 _____ () C:\Users\Alfred\Downloads\AZ_North5West3_FSX.zip 2014-04-13 17:21 - 2014-04-14 01:32 - 887973415 _____ () C:\Users\Alfred\Downloads\AZ_North5West2_FSX.zip 2014-04-13 17:08 - 2014-04-14 00:32 - 719635327 _____ () C:\Users\Alfred\Downloads\AZ_North5_FSX.zip 2014-04-13 17:06 - 2014-04-14 00:15 - 657504760 _____ () C:\Users\Alfred\Downloads\AZ_North5West_FSX(1).zip 2014-04-13 16:16 - 2014-04-13 16:16 - 03803978 _____ () C:\Users\Alfred\Downloads\FSUIPC4.zip 2014-04-13 11:44 - 2014-04-13 11:49 - 14672866 _____ () C:\Users\Alfred\Downloads\tds_boeing_737-900er_united_airlines_n28457.zip 2014-04-13 11:43 - 2014-04-13 11:48 - 13607325 _____ () C:\Users\Alfred\Downloads\tds_boeing_737-700bbj_n111vm.zip 2014-04-13 11:29 - 2014-04-13 11:29 - 00003236 _____ () C:\Windows\System32\Tasks\{457CE8F6-C106-4511-8541-12838E9A7FCD} 2014-04-13 11:24 - 2014-04-13 11:24 - 03434022 _____ () C:\Users\Alfred\Downloads\FSUIPC.zip 2014-04-13 07:38 - 2014-04-13 07:38 - 00000386 _____ () C:\Users\Alfred\Downloads\Autostart-Reparierer.zip 2014-04-12 22:27 - 2014-04-12 22:27 - 00003036 _____ () C:\Windows\System32\Tasks\{96ECFB14-EFAD-4688-B824-B03F910FC9EB} 2014-04-12 21:26 - 2014-04-12 21:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FS Water Configurator 2014-04-12 21:06 - 2014-04-12 21:25 - 00000000 ____D () C:\Program Files\FS Water Configurator 2014-04-12 19:20 - 2014-04-12 19:20 - 03486130 _____ () C:\Users\Alfred\Downloads\fswc3.15.zip 2014-04-12 18:56 - 2014-04-12 18:56 - 00035803 _____ () C:\Users\Alfred\Downloads\wake-isl(1).zip 2014-04-12 18:52 - 2014-04-12 18:52 - 14588631 _____ () C:\Users\Alfred\Downloads\Wake-Island.zip 2014-04-11 17:50 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\Windows\system32\IEUDINIT.EXE 2014-04-11 17:47 - 2014-04-11 17:47 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-04-11 17:47 - 2014-04-11 17:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-04-11 17:47 - 2014-04-11 17:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-04-11 17:47 - 2014-04-11 17:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-04-11 17:47 - 2014-04-11 17:47 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-04-11 17:47 - 2014-04-11 17:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-04-11 17:47 - 2014-04-11 17:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-04-11 17:46 - 2014-04-11 17:50 - 00009961 _____ () C:\Windows\IE11_main.log 2014-04-10 21:20 - 2014-04-10 21:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2014-04-10 21:19 - 2014-04-10 21:19 - 00002563 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2014-04-10 21:19 - 2014-04-10 21:19 - 00000000 ____D () C:\Windows\System32\Tasks\Apple 2014-04-10 21:19 - 2014-04-10 21:19 - 00000000 ____D () C:\Users\Default\AppData\Local\Apple 2014-04-10 21:19 - 2014-04-10 21:19 - 00000000 ____D () C:\Users\Default User\AppData\Local\Apple 2014-04-10 21:19 - 2014-04-10 21:19 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update 2014-04-10 21:05 - 2013-05-10 07:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2014-04-10 21:05 - 2013-05-10 07:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2014-04-10 21:05 - 2013-05-10 06:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2014-04-10 21:05 - 2013-05-10 06:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2014-04-10 19:01 - 2013-10-30 04:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll 2014-04-10 19:01 - 2013-10-30 04:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll 2014-04-10 19:00 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2014-04-10 19:00 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2014-04-10 19:00 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2014-04-10 19:00 - 2014-01-01 01:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls 2014-04-10 19:00 - 2014-01-01 01:04 - 00420008 _____ () C:\Windows\system32\locale.nls 2014-04-10 19:00 - 2013-11-23 20:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll 2014-04-10 19:00 - 2013-11-23 19:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll 2014-04-10 19:00 - 2013-11-12 04:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-04-10 19:00 - 2013-11-12 04:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-04-10 19:00 - 2013-10-19 04:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll 2014-04-10 19:00 - 2013-10-19 03:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll 2014-04-10 18:59 - 2013-12-06 04:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2014-04-10 18:59 - 2013-12-06 04:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll 2014-04-10 18:59 - 2013-12-06 04:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2014-04-10 18:59 - 2013-12-06 04:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll 2014-04-10 18:58 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-04-10 18:58 - 2014-02-04 04:35 - 00274880 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2014-04-10 18:58 - 2014-02-04 04:35 - 00190912 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys 2014-04-10 18:58 - 2014-02-04 04:35 - 00027584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys 2014-04-10 18:58 - 2014-02-04 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll 2014-04-10 18:58 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iologmsg.dll 2014-04-10 18:58 - 2013-12-25 01:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll 2014-04-10 18:58 - 2013-12-25 00:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll 2014-04-10 18:58 - 2013-12-04 04:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll 2014-04-10 18:58 - 2013-12-04 04:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll 2014-04-10 18:58 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll 2014-04-10 18:58 - 2013-12-04 04:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll 2014-04-10 18:58 - 2013-12-04 04:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll 2014-04-10 18:58 - 2013-12-04 04:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe 2014-04-10 18:58 - 2013-12-04 04:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe 2014-04-10 18:58 - 2013-12-04 04:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe 2014-04-10 18:58 - 2013-12-04 04:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe 2014-04-10 18:58 - 2013-12-04 04:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll 2014-04-10 18:58 - 2013-12-04 04:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll 2014-04-10 18:58 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll 2014-04-10 18:58 - 2013-12-04 04:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll 2014-04-10 18:58 - 2013-12-04 04:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll 2014-04-10 18:58 - 2013-12-04 03:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe 2014-04-10 18:58 - 2013-12-04 03:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe 2014-04-10 18:58 - 2013-12-04 03:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe 2014-04-10 18:58 - 2013-12-04 03:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe 2014-04-10 18:58 - 2013-11-27 03:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys 2014-04-10 18:58 - 2013-11-27 03:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys 2014-04-10 18:58 - 2013-11-27 03:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys 2014-04-10 18:58 - 2013-11-27 03:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys 2014-04-10 18:58 - 2013-11-27 03:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys 2014-04-10 18:58 - 2013-11-27 03:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys 2014-04-10 18:58 - 2013-11-27 03:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys 2014-04-10 18:58 - 2013-11-26 10:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2014-04-10 18:58 - 2013-11-23 00:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll 2014-04-10 18:58 - 2013-10-04 04:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys 2014-04-10 18:58 - 2013-10-04 03:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys 2014-04-10 18:57 - 2014-03-04 11:44 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2014-04-10 18:57 - 2014-03-04 11:44 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2014-04-10 18:57 - 2014-03-04 11:44 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2014-04-10 18:57 - 2014-03-04 11:44 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2014-04-10 18:57 - 2014-03-04 11:44 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2014-04-10 18:57 - 2014-03-04 11:17 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2014-04-10 18:57 - 2014-03-04 11:16 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2014-04-10 18:57 - 2014-03-04 11:16 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2014-04-10 18:57 - 2014-03-04 11:16 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2014-04-10 18:57 - 2014-03-04 10:09 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2014-04-10 18:57 - 2014-03-04 10:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2014-04-10 18:57 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll 2014-04-10 18:57 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll 2014-04-10 18:57 - 2014-01-24 04:37 - 01684928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2014-04-10 18:57 - 2013-11-26 13:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys 2014-04-10 18:57 - 2013-10-12 04:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx 2014-04-10 18:57 - 2013-10-12 04:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll 2014-04-10 18:57 - 2013-10-12 04:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx 2014-04-10 18:57 - 2013-10-12 04:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll 2014-04-10 18:57 - 2013-10-12 03:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe 2014-04-10 18:57 - 2013-10-12 03:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe 2014-04-10 18:57 - 2013-10-12 03:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe 2014-04-10 18:57 - 2013-10-12 03:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe 2014-04-10 18:48 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2014-04-10 18:48 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2014-04-10 18:44 - 2014-04-10 18:44 - 00000000 ____D () C:\Windows\Temp49BB3881-48A0-2973-C58E-D790194EC1C9-Signatures ==================== One Month Modified Files and Folders ======= 2014-05-05 19:54 - 2014-05-05 19:54 - 00018157 _____ () C:\Users\Alfred\Desktop\FRST.txt 2014-05-05 19:54 - 2013-09-13 09:08 - 00000000 ____D () C:\FRST 2014-05-05 19:53 - 2014-05-05 19:53 - 02063872 _____ (Farbar) C:\Users\Alfred\Desktop\FRST64.exe 2014-05-05 19:53 - 2014-05-05 19:53 - 00000000 ____D () C:\Users\Alfred\Desktop\FRST-OlderVersion 2014-05-05 19:53 - 2011-04-11 14:25 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-05-05 19:52 - 2014-05-05 19:52 - 00001071 _____ () C:\Users\Alfred\Desktop\checkup.txt 2014-05-05 19:51 - 2014-05-05 19:51 - 00855379 _____ () C:\Users\Alfred\Desktop\SecurityCheck.exe 2014-05-05 19:51 - 2013-06-29 12:07 - 00000000 ____D () C:\Users\Alfred\AppData\Roaming\Free Download Manager 2014-05-05 19:05 - 2012-05-31 09:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-05-05 19:00 - 2014-05-02 18:31 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-05-05 18:52 - 2011-04-11 14:25 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-05-05 10:56 - 2010-06-01 14:17 - 00003938 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{B9570399-0E5E-4E61-89B3-CA9D442C62AF} 2014-05-05 10:51 - 2013-06-16 21:19 - 01535002 _____ () C:\Windows\WindowsUpdate.log 2014-05-05 08:42 - 2009-07-14 19:58 - 00699432 _____ () C:\Windows\system32\perfh007.dat 2014-05-05 08:42 - 2009-07-14 19:58 - 00149572 _____ () C:\Windows\system32\perfc007.dat 2014-05-05 08:42 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-05-04 22:46 - 2014-05-04 22:46 - 00000000 ____D () C:\Program Files (x86)\ESET 2014-05-04 22:45 - 2014-05-04 22:45 - 02347384 _____ (ESET) C:\Users\Alfred\Desktop\esetsmartinstaller_deu.exe 2014-05-04 22:40 - 2012-10-06 20:36 - 00000000 ____D () C:\Users\Alfred\Documents\Flight Simulator X-Dateien 2014-05-04 22:40 - 2012-06-06 19:59 - 00002770 _____ () C:\Users\Alfred\d3d_antilag.log 2014-05-04 21:52 - 2013-07-18 21:21 - 00000290 _____ () C:\Windows\Tasks\CheckDriveBackgroundGuard.job 2014-05-04 20:57 - 2014-05-04 19:08 - 00000000 ____D () C:\Users\Alfred\Documents\Wechseldatenträger 2014-05-04 16:22 - 2014-05-04 16:18 - 00000000 ____D () C:\Users\Alfred\Desktop\Projekt neuer PC FSX 2014-05-04 11:28 - 2010-06-01 13:44 - 00072048 _____ () C:\Users\Alfred\AppData\Local\GDIPFONTCACHEV1.DAT 2014-05-04 11:14 - 2012-05-18 17:50 - 00000000 ____D () C:\Users\Alfred\AppData\Roaming\Navdata 2014-05-04 11:12 - 2010-07-15 09:17 - 00000000 ____D () C:\Eaglesoft Development Group 2014-05-04 09:59 - 2009-07-14 06:45 - 00013776 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-05-04 09:59 - 2009-07-14 06:45 - 00013776 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-05-04 09:48 - 2014-05-01 21:16 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat 2014-05-04 09:47 - 2013-09-20 11:27 - 00026674 _____ () C:\Windows\setupact.log 2014-05-04 09:47 - 2012-07-22 22:24 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-05-04 09:47 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-05-04 09:43 - 2014-05-04 09:43 - 00003187 _____ () C:\Users\Alfred\Desktop\AdwCleaner[S1].txt 2014-05-04 09:39 - 2013-09-28 07:53 - 00286854 _____ () C:\Windows\PFRO.log 2014-05-04 09:36 - 2013-09-13 11:09 - 00000000 ____D () C:\AdwCleaner 2014-05-03 22:11 - 2010-08-28 11:39 - 00000000 ____D () C:\Users\Alfred\AppData\Roaming\vlc 2014-05-03 17:57 - 2010-07-11 07:32 - 00000000 ____D () C:\Program Files (x86)\Movies 2014-05-03 17:57 - 2010-06-27 19:40 - 00000000 ____D () C:\Program Files (x86)\Screenshots 2014-05-03 17:55 - 2009-07-14 06:45 - 02237192 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-05-03 17:44 - 2014-05-03 17:42 - 02521198 _____ () C:\Users\Alfred\Downloads\unalakleet_paunv3_0.zip 2014-05-03 16:55 - 2012-11-03 16:34 - 00000000 ____D () C:\Users\Alfred\Desktop\texture.ScandiHD 2014-05-03 15:46 - 2014-05-03 15:46 - 03511490 _____ () C:\Users\Alfred\Downloads\FSUIPC4(1).zip 2014-05-03 15:45 - 2014-05-03 15:45 - 00002048 _____ () C:\Windows\QW146.lic 2014-05-03 14:17 - 2014-05-03 14:16 - 00000000 ____D () C:\Users\Alfred\Documents\TROJANERBOARD.DE 3.5.14 2014-05-02 22:22 - 2014-05-02 22:22 - 01016261 _____ (Thisisu) C:\Users\Alfred\Downloads\JRT.exe 2014-05-02 20:35 - 2014-05-04 08:34 - 01310621 _____ () C:\Users\Alfred\Desktop\adwcleaner.exe 2014-05-02 20:35 - 2014-05-02 20:35 - 01310621 _____ () C:\Users\Alfred\Downloads\adwcleaner.exe 2014-05-02 18:58 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Globalization 2014-05-02 18:31 - 2014-05-02 18:31 - 00001068 _____ () C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk 2014-05-02 18:31 - 2014-05-02 18:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 2014-05-02 18:31 - 2014-05-02 18:31 - 00000000 ____D () C:\Program Files (x86)\ Malwarebytes Anti-Malware 2014-05-02 18:31 - 2013-06-26 13:52 - 00000000 ____D () C:\ProgramData\Malwarebytes 2014-05-02 12:21 - 2014-05-02 12:21 - 00001239 _____ () C:\Users\Alfred\Desktop\Mustang Pilot's Guide.lnk 2014-05-02 12:21 - 2010-06-13 15:57 - 00000000 ____D () C:\Users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flight One Software 2014-05-02 12:07 - 2013-09-14 10:03 - 00002048 _____ () C:\Windows\mustang1.lic 2014-05-02 10:28 - 2014-05-02 10:28 - 41380253 _____ () C:\Users\Alfred\Downloads\EFASS_1.0.1714.5921.zip 2014-05-02 06:54 - 2014-05-02 06:53 - 00000000 ____D () C:\Users\Alfred\Documents\TROJANERBOARD.DE.2.5.14 2014-05-01 21:36 - 2014-05-01 21:36 - 00039277 _____ () C:\ComboFix.txt 2014-05-01 21:36 - 2014-05-01 21:27 - 00000000 ____D () C:\Qoobox 2014-05-01 21:34 - 2009-07-14 04:34 - 00000215 _____ () C:\Windows\system.ini 2014-05-01 21:23 - 2014-05-01 21:23 - 00000000 ____D () C:\Windows\System32\Tasks\Western Digital 2014-05-01 21:22 - 2014-05-01 21:22 - 00000000 ____D () C:\Users\Alfred\AppData\Local\Western Digital 2014-05-01 21:21 - 2014-05-01 21:21 - 00000000 ____D () C:\Users\Alfred\AppData\Local\Western_Digital_Technolog 2014-05-01 21:21 - 2014-05-01 21:14 - 00000000 ____D () C:\ProgramData\Western Digital 2014-05-01 21:15 - 2014-05-01 21:15 - 00000000 ____D () C:\Program Files\Western Digital 2014-05-01 21:15 - 2014-05-01 21:15 - 00000000 ____D () C:\Program Files\Common Files\Western Digital 2014-05-01 21:15 - 2014-05-01 21:14 - 00014218 _____ () C:\Windows\DPINST.LOG 2014-05-01 21:15 - 2014-05-01 21:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Western Digital 2014-05-01 21:15 - 2014-05-01 21:14 - 00000000 ____D () C:\Program Files (x86)\Western Digital 2014-05-01 07:47 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-04-30 21:43 - 2012-12-02 23:05 - 00000000 ____D () C:\Users\Alfred\AppData\Roaming\PC Utility Kit 2014-04-30 21:43 - 2012-12-02 23:05 - 00000000 ____D () C:\ProgramData\PC Utility Kit 2014-04-29 22:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-04-29 22:15 - 2012-05-31 09:11 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2014-04-29 22:15 - 2012-05-31 09:11 - 00003822 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater 2014-04-29 22:15 - 2011-05-21 08:12 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2014-04-29 16:01 - 2014-05-02 23:51 - 23547904 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-04-29 15:40 - 2014-05-02 23:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-04-29 14:48 - 2014-05-02 23:51 - 17384448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-04-29 14:34 - 2014-05-02 23:51 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-04-27 20:14 - 2014-04-27 20:14 - 00000000 ____D () C:\Program Files (x86)\VS Revo Group 2014-04-27 16:46 - 2014-04-19 17:35 - 00000000 ____D () C:\Users\Alfred\Documents\0.PENDINGS 2014-04-27 09:26 - 2010-06-02 11:44 - 00000000 ___RD () C:\Users\Alfred\Documents\2.C O M P U T E R 2014-04-26 22:09 - 2014-04-26 22:09 - 02061824 _____ (Farbar) C:\Users\Alfred\Downloads\FRST64.exe 2014-04-23 08:11 - 2014-04-23 08:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CLS DC10 2014-04-22 20:37 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD 2014-04-22 18:14 - 2011-06-03 18:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Just Flight 2014-04-22 18:13 - 2010-07-01 10:38 - 00000000 ____D () C:\Users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wilco Publishing 2014-04-22 14:11 - 2014-04-22 14:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VFR Extreeme - Boise X 2014-04-22 14:11 - 2014-04-22 14:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Boise X - Patch V1.2 2014-04-22 14:01 - 2014-04-22 14:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VFR Kaui HI01 Taxiway sign fix 2014-04-22 14:00 - 2014-04-22 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kalaupapa Molokai Compatibility Patch 2014-04-22 12:11 - 2014-04-22 12:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-04-22 12:10 - 2014-04-22 12:11 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-04-22 12:10 - 2014-04-22 12:11 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-04-22 12:10 - 2014-04-22 12:11 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-04-22 12:10 - 2014-04-22 12:11 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-04-22 12:10 - 2010-08-26 10:16 - 00000000 ____D () C:\Program Files (x86)\Java 2014-04-21 15:07 - 2014-04-19 17:41 - 00000000 ____D () C:\Users\Alfred\Desktop\FSX F 2014-04-21 14:34 - 2014-04-19 17:38 - 00001943 _____ () C:\Users\Alfred\Desktop\eSATA inventar23.4.14.lnk 2014-04-21 13:01 - 2014-04-21 13:01 - 00000000 ____D () C:\Users\Alfred\Documents\0.0.my Documents ex PC DELL new 2014-04-19 17:39 - 2014-04-19 17:39 - 00000000 ____D () C:\Users\Alfred\Documents\1.speedtest 2014-04-19 17:33 - 2013-10-04 11:16 - 00000000 ____D () C:\Users\Alfred\Downloads\OPENZIP 2014-04-19 17:30 - 2014-04-19 17:26 - 02853583 _____ () C:\Users\Alfred\Downloads\l1011p1.zip 2014-04-18 22:03 - 2014-04-18 21:36 - 550797932 _____ () C:\Users\Alfred\Downloads\Grand_Canyon_KGCN_V2.zip 2014-04-18 21:35 - 2014-04-18 21:35 - 00599860 _____ () C:\Users\Alfred\Downloads\kgcn_jrm(1).zip 2014-04-18 21:34 - 2014-04-18 21:34 - 00599860 _____ () C:\Users\Alfred\Downloads\kgcn_jrm.zip 2014-04-18 11:44 - 2014-04-18 11:44 - 00000933 _____ () C:\Users\Alfred\Desktop\aerofly-fs.exe - Verknüpfung.lnk 2014-04-18 11:42 - 2014-04-18 11:40 - 510211567 _____ (IPACS ) C:\Users\Alfred\Downloads\aerofly-fs-update-win-v1020005.exe 2014-04-18 10:18 - 2013-06-29 14:02 - 00002471 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk 2014-04-17 09:53 - 2013-10-08 14:52 - 00001227 _____ () C:\Users\Alfred\Desktop\DESKTOP icons - Verknüpfung.lnk 2014-04-17 07:37 - 2014-04-17 07:37 - 00000691 _____ () C:\Users\Alfred\Desktop\Alfred - Verknüpfung.lnk 2014-04-16 19:20 - 2013-06-16 10:59 - 00001457 _____ () C:\Users\Alfred\Desktop\F A V O R I T E N - Verknüpfung.lnk 2014-04-16 17:32 - 2012-06-01 15:26 - 00000000 ___RD () C:\Users\Alfred\Documents\2.PC 2014-04-15 18:36 - 2014-04-15 18:36 - 00000000 ____D () C:\0.abelssoft checkdrive 100% 2014-04-14 12:55 - 2010-06-07 11:00 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-04-14 11:01 - 2014-04-14 06:10 - 862628484 _____ () C:\Users\Alfred\Downloads\AZ_North4West7_FSX.zip 2014-04-14 11:00 - 2014-04-14 06:09 - 881134877 _____ () C:\Users\Alfred\Downloads\AZ_North3West7_FSX.zip 2014-04-14 10:40 - 2014-04-14 05:58 - 853437347 _____ () C:\Users\Alfred\Downloads\AZ_North6West_FSX.zip 2014-04-14 10:24 - 2014-04-14 05:56 - 824296777 _____ () C:\Users\Alfred\Downloads\AZ_North6West3_FSX.zip 2014-04-14 10:15 - 2014-04-14 05:57 - 761091948 _____ () C:\Users\Alfred\Downloads\AZ_North6West2_FSX.zip 2014-04-14 09:57 - 2014-04-14 05:59 - 701746171 _____ () C:\Users\Alfred\Downloads\AZ_North6_FSX.zip 2014-04-14 01:32 - 2014-04-13 17:21 - 887973415 _____ () C:\Users\Alfred\Downloads\AZ_North5West2_FSX.zip 2014-04-14 00:50 - 2014-04-13 17:23 - 781741209 _____ () C:\Users\Alfred\Downloads\AZ_North5West3_FSX.zip 2014-04-14 00:32 - 2014-04-13 17:08 - 719635327 _____ () C:\Users\Alfred\Downloads\AZ_North5_FSX.zip 2014-04-14 00:15 - 2014-04-13 17:06 - 657504760 _____ () C:\Users\Alfred\Downloads\AZ_North5West_FSX(1).zip 2014-04-13 16:16 - 2014-04-13 16:16 - 03803978 _____ () C:\Users\Alfred\Downloads\FSUIPC4.zip 2014-04-13 15:30 - 2010-06-07 12:10 - 00000000 ____D () C:\Users\Alfred\AppData\Local\Microsoft Game Studios 2014-04-13 11:49 - 2014-04-13 11:44 - 14672866 _____ () C:\Users\Alfred\Downloads\tds_boeing_737-900er_united_airlines_n28457.zip 2014-04-13 11:48 - 2014-04-13 11:43 - 13607325 _____ () C:\Users\Alfred\Downloads\tds_boeing_737-700bbj_n111vm.zip 2014-04-13 11:29 - 2014-04-13 11:29 - 00003236 _____ () C:\Windows\System32\Tasks\{457CE8F6-C106-4511-8541-12838E9A7FCD} 2014-04-13 11:24 - 2014-04-13 11:24 - 03434022 _____ () C:\Users\Alfred\Downloads\FSUIPC.zip 2014-04-13 11:22 - 2012-08-11 21:16 - 00000000 ____D () C:\Users\Alfred\Documents\Flight Simulator Files 2014-04-13 07:38 - 2014-04-13 07:38 - 00000386 _____ () C:\Users\Alfred\Downloads\Autostart-Reparierer.zip 2014-04-13 06:03 - 2009-07-14 07:08 - 00032640 _____ () C:\Windows\Tasks\SCHEDLGU.TXT 2014-04-12 23:39 - 2011-01-06 11:21 - 01594028 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2014-04-12 22:33 - 2012-08-13 12:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service 2014-04-12 22:27 - 2014-04-12 22:27 - 00003036 _____ () C:\Windows\System32\Tasks\{96ECFB14-EFAD-4688-B824-B03F910FC9EB} 2014-04-12 21:26 - 2014-04-12 21:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FS Water Configurator 2014-04-12 21:25 - 2014-04-12 21:06 - 00000000 ____D () C:\Program Files\FS Water Configurator 2014-04-12 21:19 - 2013-09-07 10:58 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox 2014-04-12 19:20 - 2014-04-12 19:20 - 03486130 _____ () C:\Users\Alfred\Downloads\fswc3.15.zip 2014-04-12 18:56 - 2014-04-12 18:56 - 00035803 _____ () C:\Users\Alfred\Downloads\wake-isl(1).zip 2014-04-12 18:52 - 2014-04-12 18:52 - 14588631 _____ () C:\Users\Alfred\Downloads\Wake-Island.zip 2014-04-11 18:19 - 2011-05-22 13:28 - 00001427 _____ () C:\Users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2014-04-11 17:50 - 2014-04-11 17:46 - 00009961 _____ () C:\Windows\IE11_main.log 2014-04-11 17:47 - 2014-04-11 17:47 - 01228800 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00942592 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00645120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsIntl.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat 2014-04-11 17:47 - 2014-04-11 17:47 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat 2014-04-11 17:47 - 2014-04-11 17:47 - 00610304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00413696 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2014-04-11 17:47 - 2014-04-11 17:47 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2014-04-11 17:47 - 2014-04-11 17:47 - 00263376 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00238288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\url.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00194048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00151552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00139264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00131072 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00116736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00105984 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00101376 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00090112 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00083456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2014-04-11 17:47 - 2014-04-11 17:47 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx 2014-04-11 17:47 - 2014-04-11 17:47 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00056832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00048128 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00024576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll 2014-04-11 17:47 - 2014-04-11 17:47 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe 2014-04-11 17:47 - 2014-04-11 17:47 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe 2014-04-11 17:45 - 2011-01-06 11:21 - 00001912 _____ () C:\Windows\epplauncher.mif 2014-04-11 17:45 - 2011-01-06 11:21 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client 2014-04-11 17:45 - 2011-01-06 11:20 - 00002123 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk 2014-04-11 17:45 - 2011-01-06 11:20 - 00000000 ____D () C:\Program Files\Microsoft Security Client 2014-04-10 21:20 - 2014-04-10 21:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime 2014-04-10 21:20 - 2010-08-28 11:57 - 00000000 ____D () C:\Program Files (x86)\QuickTime 2014-04-10 21:19 - 2014-04-10 21:19 - 00002563 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk 2014-04-10 21:19 - 2014-04-10 21:19 - 00000000 ____D () C:\Windows\System32\Tasks\Apple 2014-04-10 21:19 - 2014-04-10 21:19 - 00000000 ____D () C:\Users\Default\AppData\Local\Apple 2014-04-10 21:19 - 2014-04-10 21:19 - 00000000 ____D () C:\Users\Default User\AppData\Local\Apple 2014-04-10 21:19 - 2014-04-10 21:19 - 00000000 ____D () C:\Program Files (x86)\Apple Software Update 2014-04-10 21:13 - 2013-04-09 16:55 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2014-04-10 21:13 - 2013-04-09 16:55 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2014-04-10 20:53 - 2013-08-16 11:41 - 00000000 ____D () C:\Windows\system32\MRT 2014-04-10 20:51 - 2013-04-09 16:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2014-04-10 18:50 - 2013-10-11 10:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN 2014-04-10 18:47 - 2011-04-11 14:25 - 00004106 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2014-04-10 18:47 - 2011-04-11 14:25 - 00003854 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2014-04-10 18:44 - 2014-04-10 18:44 - 00000000 ____D () C:\Windows\Temp49BB3881-48A0-2973-C58E-D790194EC1C9-Signatures Files to move or delete: ==================== C:\Users\Alfred\Aerosoft_FlorenceX.reg C:\Users\Alfred\Cloud9_Xcity Rome.reg C:\Users\Alfred\FSDreamTeam_Geneva.reg C:\Users\Alfred\FSDreamTeam_Hawaiian Airports Volume 2.reg C:\Users\Alfred\FSDreamTeam_Honolulu.reg C:\Users\Alfred\FSDreamTeam_ZurichX.reg Some content of TEMP: ==================== C:\Users\Alfred\AppData\Local\Temp\Quarantine.exe ==================== Bamital & volsnap Check ================= C:\Windows\System32\winlogon.exe => MD5 is legit C:\Windows\System32\wininit.exe => MD5 is legit C:\Windows\SysWOW64\wininit.exe => MD5 is legit C:\Windows\explorer.exe => MD5 is legit C:\Windows\SysWOW64\explorer.exe => MD5 is legit C:\Windows\System32\svchost.exe => MD5 is legit C:\Windows\SysWOW64\svchost.exe => MD5 is legit C:\Windows\System32\services.exe => MD5 is legit C:\Windows\System32\User32.dll => MD5 is legit C:\Windows\SysWOW64\User32.dll => MD5 is legit C:\Windows\System32\userinit.exe => MD5 is legit C:\Windows\SysWOW64\userinit.exe => MD5 is legit C:\Windows\System32\rpcss.dll => MD5 is legit C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit LastRegBack: 2014-05-01 07:38 ==================== End Of Log ============================ --- --- --- --- --- ---
__________________ Suche nicht das Glueck - lebe es (Buddha) |
|
05.05.2014, 22:41
| #17 |
| | Aufstarten PC mit Win 7 64 dauert viel zulange FRST Additions Logfile:
__________________Code:
ATTFilter Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-05-2014
Ran by Alfred at 2014-05-05 19:55:04
Running from C:\Users\Alfred\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
==================== Installed Programs ======================
1.01 (HKLM-x32\...\MILVIZ F-15E Strike Eagle_is1) (Version: - )
737 Captain (737-100 Exterior Model) 0.2 (HKLM-x32\...\x730) (Version: 0.2.00 - © 1999-2011 Captain Sim)
737 Pilot in Command (FSX) (HKLM-x32\...\737 Pilot in Command (FSX)) (Version: - )
777 Captain (777-200 Exterior Model) 0.1 (HKLM-x32\...\x770) (Version: 0.1.00 - © 1999-2011 Captain Sim)
A2A Accu-Sim P-51 (HKLM-x32\...\A2A Accu-Sim P-51) (Version: - )
A2A Wings of POWER 3 P-51 (HKLM-x32\...\A2A Wings of POWER 3 P-51) (Version: - )
Accu-Feel (HKLM-x32\...\Accu-Feel) (Version: - )
Acronis Drive Monitor (HKLM-x32\...\{706AE61D-40A4-4F50-8359-FE8F6F7FA461}) (Version: 1.0.187 - Acronis)
Adisutjipto scenery (HKLM-x32\...\Adisutjipto scenery) (Version: - )
Adobe Flash Player 13 ActiveX (HKLM-x32\...\{3799ACD7-66E2-4749-A851-95E1193B217D}) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\{38C8C329-5AB3-480C-86FD-C18D10FBD39A}) (Version: 13.0.0.206 - Adobe Systems Incorporated)
Adobe Photoshop 7.0 (HKLM-x32\...\Adobe Photoshop 7.0) (Version: 7.0 - Adobe Systems, Inc.)
Adobe Reader XI (11.0.06) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.06 - Adobe Systems Incorporated)
aerofly FS (HKLM-x32\...\aerofly FS_is1) (Version: 1.2.0.5 - IPACS)
Aerosoft's - Aerosoft Launcher (HKLM-x32\...\{EE11CFFC-898C-4875-8A63-8B732A9AD43B}) (Version: 1.1.0.1 - Aerosoft)
aerosoft's - Approaching Innsbruck X (HKLM-x32\...\{70864384-DD19-44CB-A999-A917F32F623D}) (Version: 1.20 - aerosoft)
Aerosoft's - DHC-6 Twin Otter X (HKLM-x32\...\{3A8DED06-80E7-4555-AA1F-FF4A2A4D353C}) (Version: 1.10 - Aerosoft)
Aerosoft's - Dornier Do-27 FSX (HKLM-x32\...\{5492C4FC-E430-453D-BF88-EAE9BEB24F45}) (Version: 1.00 - Aerosoft)
Aerosoft's - Dornier Do-27 FSX (HKLM-x32\...\{D09329F8-D7B9-4BCA-AF4C-156819409CFB}) (Version: 1.00 - Aerosoft)
Aerosoft's - F-16 Fighting Falcon - Mission Pack (HKLM-x32\...\{1CC73264-BA0F-4E79-9424-6F93C1BA9DE1}) (Version: 1.00 - Aerosoft)
aerosoft's - Faro X (HKLM-x32\...\{FA9455D9-4ABC-48CF-8FC6-4FDA30F6AACD}) (Version: 1.01 - aerosoft)
Aerosoft's - FlorenceX (HKLM-x32\...\{E764BA22-C1F3-4770-94E3-FB4948786248}) (Version: 1.04 - Aerosoft)
aerosoft's - German Airports 1 - Friedrichshafen (HKLM-x32\...\{AAACB3CD-CE8F-4007-871F-EACF75635817}) (Version: 1.01 - aerosoft)
Aerosoft's - German Airports 1 - Friedrichshafen X (HKLM-x32\...\{411B6A8F-0088-496D-8A0A-1319BB825D7C}) (Version: 1.01 - Aerosoft)
aerosoft's - German Airports 2 - Dortmund X (HKLM-x32\...\{A298A7A7-3BD2-42EE-B48C-12C97A9BBF08}) (Version: 1.00 - aerosoft)
aerosoft's - German Airports 2-Hannover X (HKLM-x32\...\{AF209F10-BD3A-4AA7-A485-845508D6C672}) (Version: 1.00 - aerosoft)
aerosoft's - German Airports 2-Leipzig X (HKLM-x32\...\{26B7F336-1369-49D6-8E4C-DC2C7BD65647}) (Version: 1.00 - aerosoft)
aerosoft's - German Airports 3 - Berlin-Tegel X (HKLM-x32\...\{3DAD565E-1275-4EE8-9568-932CB7B75FB8}) (Version: 1.00 - aerosoft)
aerosoft's - German Airports 3 - Bremen X (HKLM-x32\...\{C1F98ADD-81BF-45E1-A36B-515CA20B61AF}) (Version: 1.00 - aerosoft)
aerosoft's - German Airports 3 - Hamburg X (HKLM-x32\...\{EA6E7823-9E5B-4EDD-9750-C3C87FDF0460}) (Version: 1.00 - aerosoft)
Aerosoft's - Hawaii Dillingham X (HKLM-x32\...\{A0663B00-3376-42C1-B719-995B9CB44DEF}) (Version: 1.00 - Aerosoft)
Aerosoft's - HUGHES H-1B SPECIAL (HKLM-x32\...\{B62D5AE6-6A13-4CA6-A402-9827ACB0822C}) (Version: 1.00 - Aerosoft)
Aerosoft's - Keflavik X (HKLM-x32\...\{0F6047EC-36A9-4735-840F-2BAA134D4B94}) (Version: 1.00 - Aerosoft)
aerosoft's - London City Airport X (HKLM-x32\...\{64996B10-0B55-4625-A124-551CB65F09CE}) (Version: 1.00 - aerosoft)
aerosoft's - Lukla X - Mount Everest (HKLM-x32\...\{EF32F291-8B08-43EF-8BAA-58B9F8C9540F}) (Version: 1.00 - aerosoft)
aerosoft's - Madeira X (HKLM-x32\...\{17440258-DB48-49DE-8391-79900477490C}) (Version: 1.00 - aerosoft)
aerosoft's - Mallorca X for FSX (HKLM-x32\...\{07CC448E-4FFC-444F-999D-10F11AE559FB}) (Version: 1.00 - aerosoft)
Aerosoft's - Manhattan X (HKLM-x32\...\{6ED3756D-BA23-4938-94F9-7C2BFC9B86FC}) (Version: 1.00 - Aerosoft)
Aerosoft's - Mega Airport Budapest (HKLM-x32\...\{AD6C554F-5050-40B1-B84D-51D74A09C7E4}) (Version: 1.50 - Aerosoft)
aerosoft's - Mega Airport Frankfurt X (HKLM-x32\...\{BAEE0C24-C8C2-4820-9DF4-887909F1A286}) (Version: 1.01 - aerosoft)
aerosoft's - Mega Airport Lisbon X (HKLM-x32\...\{DAA73076-84A5-4141-A630-79380E48C9D0}) (Version: 1.10 - aerosoft)
aerosoft's - Mega Airport Madrid Barajas (HKLM-x32\...\{8233F99B-C4C2-44E9-8486-374E9B300BF2}) (Version: 1.00 - aerosoft)
aerosoft's - Mega Airport Paris CDG X (HKLM-x32\...\{0F5E7FC8-3D49-47DA-9A51-6A8B4BE393B0}) (Version: 1.00 - aerosoft)
aerosoft's - Mega Airport Stockholm Arlanda (HKLM-x32\...\{D86B6E8D-F224-4BB6-B959-C8EDC5300B5D}) (Version: 1.10 - aerosoft)
aerosoft's - Mega Airport Stockholm Arlanda X (HKLM-x32\...\{3B6F6E35-900C-4FE3-B2F6-067443353CD1}) (Version: 1.00 - aerosoft)
aerosoft's - Mega Airport Zurich 2012 - FS2004 (HKLM-x32\...\{825C5E8E-04E6-4308-9043-A656B2C01577}) (Version: 1.00 - aerosoft)
Aerosoft's - Mega Airport Zurich 2012 - FSX (HKLM-x32\...\{463A571A-B793-459B-BEA8-028DC323AAB0}) (Version: 1.01 - Aerosoft)
aerosoft's - Menorca X for FSX (HKLM-x32\...\{5BD1BBB6-DC09-420F-B459-DD61DD351541}) (Version: 1.00 - aerosoft)
aerosoft's - Mission Legacy 1 - FSX (HKLM-x32\...\{81E54B03-CF96-481E-9798-8A06E31ABEDF}) (Version: - )
Aerosoft's - MonacoX (HKLM-x32\...\{B56D25A0-1316-4255-AB45-1147C9D01C5E}) (Version: 1.01 - Aerosoft)
Aerosoft's - MyTraffic 2010 (HKLM-x32\...\{37F50C53-EDED-4FFE-9877-532A335C5C18}) (Version: 6.00 - Aerosoft)
aerosoft's - Nice Cote dAzur X (HKLM-x32\...\{90447E05-DE8E-470D-8D3E-C871D2AE74AF}) (Version: 1.00 - aerosoft)
Aerosoft's - PBY Catalina X (HKLM-x32\...\{00606438-902C-4280-84DD-E665911DFBE1}) (Version: 1.00 - Aerosoft)
aerosoft's - Real Germany 1 - FS2004 (HKLM-x32\...\{2F6E1E46-2EC9-4547-B56A-720E97E3A9C1}-FS2004) (Version: - )
aerosoft's - Real Germany 3 - FS2004 (HKLM-x32\...\{74501968-B32C-42EE-8E28-AEDBDEFFB92F}-FS2004) (Version: - )
Aerosoft's - Robin DR400 X - FSX (HKLM-x32\...\Robin DR400 X - FSX) (Version: - )
aerosoft's - Santorini X (HKLM-x32\...\{62B7012A-D02C-4981-9D37-634DF40E9578}) (Version: 1.00 - aerosoft)
aerosoft's - USCitiesX - Chicago (HKLM-x32\...\{A9FF3B7B-F4BC-4F74-AF6B-BC4925682D3D}) (Version: 1.00 - aerosoft)
aerosoft's - USCitiesX - Indianapolis (HKLM-x32\...\{6F99B229-CE71-4A8A-8359-0517191A8A89}) (Version: 1.00 - aerosoft)
aerosoft's - USCitiesX - Los Angeles (HKLM-x32\...\{01BC99D4-671C-4C98-AC99-891FBAA0D870}) (Version: 1.00 - aerosoft)
aerosoft's - USCitiesX - New Orleans (HKLM-x32\...\{BB677B2C-4069-4B4F-9227-2E7FD5F6A596}) (Version: 1.00 - aerosoft)
aerosoft's - USCitiesX - San Francisco (HKLM-x32\...\{DF91C497-0315-43F9-BB85-24D82FE5B11A}) (Version: 1.00 - aerosoft)
aerosoft's - Venice X (HKLM-x32\...\{74F493A2-1264-4BF2-A135-0184C68BD580}) (Version: 1.00 - aerosoft)
Aerosoft's - VFR Germany 2 (HKLM-x32\...\{3BB7B4D3-C534-4700-AA1B-B01A8EA5F27C}) (Version: 1.00 - Aerosoft)
Aerosoft's - VFR Germany 2010 West (HKLM-x32\...\{7E34E4DF-26FA-46D0-BC0F-77CE6CF4CBC5}) (Version: 2.00 - Aerosoft)
Aerosoft's - VFR Germany 3 (HKLM-x32\...\{61C6337D-EDF5-43F0-9E50-541A389070BD}) (Version: 1.00 - Aerosoft)
Aerosoft's - VFR Germany 4 (HKLM-x32\...\{F7016342-C196-44B1-AAC5-D7BA4708473E}) (Version: 1.00 - Aerosoft)
aerosoft's - VFR London X (HKLM-x32\...\{C1002665-A1DD-4764-AEDC-0769E09FAA4D}) (Version: 1.00 - aerosoft)
aerosoft's - Wonderful Madeira - FS2004 (HKLM-x32\...\{A7B4ACF2-5A81-44F4-8253-9211A3B8AFA8}-FS2004) (Version: - )
Aeroworx Super King Air B200 (HKLM-x32\...\Aeroworx Super King Air B200) (Version: - )
Afghanistan - Noshaq (Highest Mountains Package 004) for MSFS 2004 (HKLM-x32\...\Afghanistan - Noshaq (Highest Mountains Package 004) for MSFS 2004) (Version: - )
Aircraft Factory F4u Corsair (HKLM-x32\...\Aircraft Factory F4u Corsair) (Version: - )
ALABEO Pitts S-2S (HKLM-x32\...\ALABEO Pitts S-2S) (Version: 1.00.00.00 - ALABEO)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Atolls of Tuvalu FSX (HKLM-x32\...\AtollsofTuvalu_is1) (Version: - SimMarket)
Autogen Trees Update (HKLM-x32\...\{DF826305-AF8E-11D7-AFD3-0080AD30B67D}) (Version: - )
B-25J "Briefing Time" for FSX (HKLM-x32\...\B-25J "Briefing Time" for FSX) (Version: - )
Beech B60 Duke Rip (HKLM-x32\...\Beech B60 Duke Rip) (Version: - )
Boeing 727-200 Advanced FSX SP2 (HKLM\...\{466DF2BF-8EEF-4688-A9D0-762A0F90DC00}) (Version: - Thomas Ruth)
Boeing 787-8 DreamLiner FSX & P3D (HKLM\...\{E8BA7416-97C5-48D3-9E9D-4FFEC30FE75C}) (Version: 4 - TDS, Alejandro Rojas Lucena, repack by Rikoooo)
Boeing B737-823 Advanced VC FSX & P3D (HKLM\...\{330F6375-B0DB-4CDD-B1EB-B83C43810D11}) (Version: 1 - Project OpenSky, Alejandro Rojas Lucenda, FSRepaintsGER, Adam Murphy)
Boise X - Patch V1.2 (HKLM-x32\...\Boise X - Patch V1.2) (Version: - )
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden
C90B King Air HD SERIES FSX (HKLM-x32\...\C90B King Air HD SERIES FSX) (Version: 1.00.00.00 - Carenado)
Captain Sim 707 All-in-One (HKLM-x32\...\{0906F438-9315-477C-9DBB-4A3050699810}) (Version: 1.00 - SilverWingz)
Carenado Baron 58 FSX (HKLM-x32\...\Carenado Baron 58 FSX) (Version: 1.00.00.00 - Carenado)
Carenado C340 II FSX (HKLM-x32\...\Carenado C340 II FSX) (Version: 1.00.00.00 - Carenado)
Carenado F33A Bonanza (HKLM-x32\...\Carenado F33A Bonanza) (Version: 1.00.00.00 - Carenado)
Carenado V35B Bonanza for FSX (HKCU\...\Carenado V35B Bonanza for FSX) (Version: - )
CheckDrive (HKLM-x32\...\{B83513EC-2E4D-4621-816D-4CCF397BE702}_is1) (Version: 4.4 - Abelssoft)
CLOUD9 Bergen FSX 1.01 (HKLM-x32\...\{A28B5F9A-3AD0-4CB5-AB72-ADF062FD956E}) (Version: 1.01 - )
CLOUD9 Orlando FSX 1.01 (HKLM-x32\...\{FED35768-B947-44EB-92CC-A17D24B8439A}) (Version: 1.01 - )
CLOUD9 Pisa 1.00 (HKLM-x32\...\{52683907-B1CA-44D4-9876-8CE10A78C4DA}) (Version: 1.00 - )
CLOUD9 Xcity Rome 1.01 (HKLM-x32\...\{725EDA28-668D-4E12-AEAA-96CEB5261D0F}) (Version: 1.01 - )
CoffeeCup Free FTP (HKLM-x32\...\CoffeeCup Free FTP 4.3.2) (Version: 4.3.2 - CoffeeCup Software, Inc.)
ConvertHelper 2.2 (HKLM-x32\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1) (Version: - DownloadHelper)
CrystalDiskInfo 5.6.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 5.6.2 - Crystal Dew World)
D4300 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
Data Lifeguard Diagnostic for Windows 1.24 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version: - Western Digital Corporation)
DC-2 for FSX (HKCU\...\DC-2 for FSX) (Version: - )
DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden
DiaporamaWeb (HKLM-x32\...\DiaporamaWeb) (Version: - )
DJ_SF_03_D4300_Software_Min (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden
Dortmund City (HKLM-x32\...\{4DB2D518-0264-4910-A8DE-1754EE5E3BCC}) (Version: 3.0 - Bahrometrix)
Eaglesoft Development Group Citation X 2.0 FSX (HKCU\...\Eaglesoft Development Group Citation X 2.0 FSX) (Version: - )
EasyJet Fleet FSX & P3D (HKLM\...\{31198E95-D05B-4689-AA70-715ED7170F9A}) (Version: 1 - Multiples authors)
Embraer EMB120 Brasilia V1.1 FSX & P3D (HKLM\...\{D3CD5CF6-7439-4DD7-B2F6-2A0D1E097FE1}) (Version: 1 - Erick Cantu - Eagle Rotorcraft Simulations)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
EtendardIV Texture Pack (HKCU\...\EtendardIV Texture Pack ) (Version: - )
F9F Panther (HKLM-x32\...\F9F Panther) (Version: - )
Flight Méditerranée Autogen Pack v1.0 (HKCU\...\Flight Méditerranée Autogen Pack v1.0) (Version: - )
Flight Simulator X (HKLM-x32\...\RTMshadow_{7D606567-5047-451A-B49E-29FCB6012B4E}) (Version: - )
Flight Simulator X Service Pack 1 (HKLM-x32\...\SP1shadow_{7D606567-5047-451A-B49E-29FCB6012B4E}) (Version: - )
Flight1 Citation Mustang (HKLM-x32\...\f1mustang_FSX) (Version: 1.02b - Flight One Software)
FlightAlpes Nord AutogenPack (HKCU\...\FlightAlpes Nord AutogenPack) (Version: - )
FlightParis AutogenPack (HKLM-x32\...\FlightParis AutogenPack) (Version: - )
FlyLogic's - Altenrhein X (HKLM-x32\...\{E5326C48-869C-43C0-A78E-B531CCFF066B}) (Version: 1.00 - FlyLogic)
FlyLogic's - Bern-Belp X (HKLM-x32\...\{930945C3-064B-4ACD-A004-436A4783FCD9}) (Version: 1.00 - FlyLogic)
FlyLogic's - Grenchen FSX (HKLM-x32\...\{E2EC91FE-9353-44F7-B177-EBE78ADF85E0}) (Version: 1.00 - FlyLogic)
FlyLogic's - Kleinflugplätze Schweiz Teil 4 X (HKLM-x32\...\{6F7A63AC-1109-4E10-96C8-7BC9AD57E81A}) (Version: 1.00 - FlyLogic)
FlyLogic's - Lugano X (HKLM-x32\...\{AD7B435D-C7CB-46A4-9D8B-4F54520C7633}) (Version: 1.00 - FlyLogic)
FlyLogic's - Patrouille Suisse X (HKLM-x32\...\{B1E94F7F-ECDC-4799-9EAE-312459D6B9AC}) (Version: 1.00 - FlyLogic)
FormatFactory 2.60 (HKLM-x32\...\FormatFactory) (Version: 2.60 - Free Time)
Foxit Creator (HKLM-x32\...\Foxit Creator) (Version: 3,0,2,0506 - Foxit Corporation)
Foxit Reader (HKLM-x32\...\Foxit Reader) (Version: 4.3.0.1110 - Foxit Corporation)
FranceVFR FlightAlpes Sud: AutogenPack (HKLM-x32\...\FranceVFR FlightAlpes Sud: AutogenPack) (Version: - )
FranceVFR FlightMeditarranee Autogen Pack v0.90 (HKCU\...\FranceVFR FlightMeditarranee Autogen Pack v0.90) (Version: - )
Fraps (HKLM-x32\...\Fraps) (Version: - )
Free Download Manager 3.9.2 (HKLM-x32\...\Free Download Manager_is1) (Version: - FreeDownloadManager.ORG)
Free YouTube Download version 3.2.13.925 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.13.925 - DVDVideoSoft Ltd.)
FRP 2004 (HKLM-x32\...\FRP 2004) (Version: - )
FS Global 2010 (HKLM-x32\...\FS Global 2010) (Version: - )
FS Global Ultimate - Asia/Oceania (HKLM-x32\...\FS Global Ultimate - Asia/Oceania) (Version: - )
FS Water Configurator 3.15 (HKLM\...\FS Water Configurator) (Version: - )
FS2004 Hawker Siddeley HS.748 (HKLM-x32\...\FS2004 Hawker Siddeley HS.748) (Version: - )
FS2004 Hawker Siddeley HS.748 Texture pack 1 (HKLM-x32\...\FS2004 Hawker Siddeley HS.748 Texture pack 1) (Version: - )
FS2004 Hawker Siddeley HS.748 Texture Pack 2 (HKLM-x32\...\FS2004 Hawker Siddeley HS.748 Texture Pack 2) (Version: - )
FSDreamTeam Geneva FSX/P3D 1.5.2 (HKLM-x32\...\FSDreamTeam Geneva FSX/P3D_is1) (Version: - )
FSDreamTeam Hawaiian Airports Volume 2 FSX/P3D 1.4 (HKLM-x32\...\FSDreamTeam Hawaiian Airports Volume 2 FSX/P3D_is1) (Version: - )
FSDreamTeam Honolulu International FSX/P3D 1.2 (HKLM-x32\...\FSDreamTeam Honolulu International FSX/P3D_is1) (Version: - )
FSFlyingSchool 2010 (HKLM-x32\...\FSFlyingSchool 2010) (Version: - )
fs-freeware.net Installer - Boeing 737NG 700, 800 and 900 UAL Package version 2.5 (HKLM-x32\...\{1C7714DF-2DDD-41BD-9585-5C96173436A4}_is1) (Version: 2.5 - fs-freeware.net)
FSTramp for FSX (HKLM-x32\...\{0B3EAF6B-BBF1-45EF-B4DA-D16DC7574507}_is1) (Version: 5.2.0 - Team FSTramp)
GayaN™ Airbus A340-300 (HKCU\...\GayaN™ Airbus A340-300) (Version: - )
GeForce Experience NvStream Client Components (Version: 0.1.87 - NVIDIA Corporation) Hidden
Gibraltar X 1.00 (HKLM-x32\...\Gibraltar X 1.00) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 34.0.1847.131 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{79361740-EAE3-11E2-9911-B8AC6F98CCE3}) (Version: 7.1.1.1888 - Google)
Google Update Helper (x32 Version: 1.3.23.9 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Grand Canyon - Photorealistic Scenery (HKLM-x32\...\Grand Canyon - Photorealistic Scenery) (Version: - )
Greatest Airliners: 727 (HKLM-x32\...\F1DF727) (Version: - Flight One Software)
Ground Environment X Atlantic and Pacific Tropics (HKLM-x32\...\Ground Environment X Atlantic and Pacific Tropics1.0) (Version: 1.0 - Flight One Software)
Ground Environment X Europe (HKLM-x32\...\Ground Environment X Europe) (Version: - )
Ground Environment X North America (HKLM-x32\...\Ground Environment X North America) (Version: - )
Hamburg-City Scenery (HKLM-x32\...\Hamburg-City Scenery ) (Version: - )
Hewlett-Packard ACLM.NET v1.1.0.0 (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)
HP Deskjet D4300 Printer Driver Software 13.0 Rel. 3 (HKLM\...\{382300D4-777B-4233-A98C-99EA0F6B881F}) (Version: 13.0 - HP)
HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)
HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP)
HP Product Detection (HKLM-x32\...\{A436F67F-687E-4736-BD2B-537121A804CF}) (Version: 11.14.0001 - HP)
HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP)
HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)
HP Update (HKLM-x32\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden
HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden
Hurricane (HKCU\...\Hurricane) (Version: - )
Image Resizer Powertoy Clone for Windows (64 bit) (HKLM\...\{80A620C1-B22C-4781-A351-B14B8A37BFE3}) (Version: 2.1 - Brice Lambson)
Instant Scenery (HKLM-x32\...\instant scenery2) (Version: 2.03 - Flight1 Software)
IRIS Mig-29 Fulcrum K Navy FSX (HKLM\...\{2DBEDD2C-D5FA-460A-AAB0-0EF2E8C92749}) (Version: - IRIS FLIGHT SIMULATION SOFTWARE)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217055FF}) (Version: 7.0.550 - Oracle)
Just Flight - 757 Jetliner - Freemium Livery Pack 7 (HKLM-x32\...\{D58F6305-EBC2-4B7D-8E14-299C29032FD2}) (Version: 1.00.000 - Just Flight)
Kalaupapa Molokai Compatibility Patch (HKLM-x32\...\Kalaupapa Molokai Compatibility Patch) (Version: - )
KCLE v1.1.2 for FSX (HKLM-x32\...\{C523B4B7-479A-458A-8F00-46AF4E7CCCDA}) (Version: 1.1.2 - BluePrint Simulations)
KDAL v1.1.2 for FSX (HKLM-x32\...\{B7FCEA32-5332-492F-9AF1-643CEB784058}) (Version: 1.1.2 - BluePrint Simulations)
KLAX v1.1.2 for FSX (HKLM\...\{5B9AE6C1-60A6-483D-8C47-69CA0E995A08}) (Version: 1.1.2 - BluePrint Simulations)
KLGA La Guardia FSX (HKLM-x32\...\KLGA La Guardia FSX) (Version: - )
KMCO v1.1.2 for FSX (HKLM\...\{8328FEC4-BC76-40D1-93A2-78B71CC08C43}) (Version: 1.1.2 - BluePrint Simulations)
KMEM v1.1.1 for FS9 (HKLM\...\{EF28AF2A-AF4D-4798-82A9-17E1360F3E66}) (Version: 1.1.1 - BluePrint Simulations)
KMEM v1.1.2 for FSX (HKLM\...\{03EFC5C9-E507-4A80-A7E4-A67AAE976446}) (Version: 1.1.2 - BluePrint Simulations)
KRDU v2.1.2 for FSX (HKLM-x32\...\{364C961B-CAD0-41C9-9A10-24F6552D6F2B}) (Version: 2.1.2 - BluePrint Simulations)
L-1011 Captain (1011-1 Exterior Model) 0.1 (HKLM-x32\...\l111) (Version: 0.1.00 - © 1999-2013 Captain Sim)
La Guadeloupe (HKLM-x32\...\La Guadeloupe) (Version: - )
LAGO FS Falcon FS2004 version 2.00 (HKLM-x32\...\{D36165EF-5846-45A6-BD11-F581D183F312}) (Version: 2.00.00 - )
Level-D Simulations 767-300 (HKLM-x32\...\Level-D Simulations 767-300) (Version: - )
LFKL Brindas (HKCU\...\LFKL Brindas) (Version: - )
LFLP (HKCU\...\LFLP) (Version: - )
LLH5X (HKLM-x32\...\LLH5X) (Version: - )
Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)
Mailsoft's - Kleinflugplätze 6 for FS2004 (HKLM-x32\...\{259E2575-D7A6-436E-8AE3-1E4E14F69ABE}) (Version: 1.00 - Mailsoft)
Mailsoft's - Kleinflugplätze Schweiz Teil 3 (HKLM-x32\...\{BACA4FE0-B0B9-44A9-BB62-E7377C03A96D}) (Version: 1.00 - Mailsoft)
Mailsoft's - Kleinflugplätze Schweiz Teil 3 X (HKLM-x32\...\{6DB56B61-0462-46D7-8E54-7D0782E6113E}) (Version: 1.00 - Mailsoft)
Mailsoft's - Kleinflugplätze Schweiz Teil 5 X (HKLM-x32\...\{8AB7326C-8A0C-4368-A8CD-58B6AB7B3895}) (Version: 1.00 - Mailsoft)
Mailsoft's - Kleinflugplätze Schweiz Teil 6 X (HKLM-x32\...\{CFA5C901-7687-4259-9A64-072926E043FD}) (Version: 1.00 - Mailsoft)
Mailsoft's - Sion X (HKLM-x32\...\{D145DF3E-0DB1-4ABC-90E4-E89BA713B01B}) (Version: 1.00 - Mailsoft)
Mailsoft's - Switzerland Professional (HKLM-x32\...\{ACC75B04-81D2-4AF4-9312-C8CF39D23EA8}) (Version: 1.00 - Mailsoft)
Mailsoft's - Switzerland Professional X (HKLM-x32\...\{C0E7FAD8-F8AE-4819-AEBF-D92562315EEE}) (Version: 1.00 - Mailsoft)
Malwarebytes Anti-Malware Version 2.0.1.1004 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.1.1004 - Malwarebytes Corporation)
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Marshall Islands (HKLM-x32\...\MarshallIslandsPAS_is1) (Version: - PacSim)
McDonnell Douglas DC-10 Version 2 FSX & P3D (HKLM\...\{0D9F34DB-535D-4FA2-B622-D03B6F479EBE}) (Version: 1 - Thomas Ruth and Erick Cantu, sounds by Dennis Vormberge)
MeatWater FO Altitude Callouts v1.0 (HKLM-x32\...\MeatWater FO Altitude Callouts v1.0) (Version: - )
MegaSceneryX Las Vegas (HKLM-x32\...\MegaSceneryX Las Vegas_is1) (Version: 1 - PC Aviator Inc.)
Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Flight Simulator X (HKLM-x32\...\{BB2158B2-6A0A-4159-B373-4D8768C80170}) (Version: 1.00.0000 - Microsoft Games)
Microsoft Flight Simulator X (x32 Version: 10.0.60905 - Microsoft Game Studios) Hidden
Microsoft Flight Simulator X: Acceleration (HKLM-x32\...\FlightSim_{7D606567-5047-451A-B49E-29FCB6012B4E}) (Version: 10.0.61637.0 - Microsoft Game Studios)
Microsoft Flight Simulator X: Acceleration (x32 Version: 10.0.61637.0 - Microsoft Game Studios) Hidden
Microsoft IntelliPoint 8.0 (HKLM\...\{563F041C-DFDB-437B-A1E8-E141E0906076}) (Version: 8.0.225.0 - Microsoft)
Microsoft Security Client (Version: 4.5.0216.0 - Microsoft Corporation) Hidden
Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.5.216.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
MiG E-152 M (HKCU\...\MiG E-152 M) (Version: - )
MiG-29 Codename: Fulcrum (HKCU\...\MiG-29 Codename: Fulcrum) (Version: - )
MIRAGE F1 for FSX SP2 or Acceleration (HKCU\...\MIRAGE F1 for FSX SP2 or Acceleration) (Version: - )
Motherboard Monitor 5 (HKLM-x32\...\Motherboard Monitor 5_is1) (Version: 5 - Alexander van Kaam)
Mozilla Firefox 28.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 28.0 (x86 de)) (Version: 28.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 28.0 - Mozilla)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Mudry Cap-10 (HKCU\...\Mudry Cap-10) (Version: - )
Nauru International (HKLM-x32\...\Nauru International_is1) (Version: 1.0.0.0 - PacSim)
NMG Cape Town International 2012 (FSX) (HKLM-x32\...\NMG Cape Town International 2012 (FSX)) (Version: - )
NVIDIA 3D Vision Controller-Treiber 320.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 320.49 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 320.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 320.49 - NVIDIA Corporation)
NVIDIA GeForce Experience 1.6.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.6.1 - NVIDIA Corporation)
NVIDIA Grafiktreiber 320.49 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 320.49 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.902 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.13.0604 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.13.0604 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0604 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.2049 - NVIDIA Corporation) Hidden
NVIDIA Systemsteuerung 320.49 (Version: 320.49 - NVIDIA Corporation) Hidden
NVIDIA Update 8.3.14 (Version: 8.3.14 - NVIDIA Corporation) Hidden
NVIDIA Update Components (Version: 8.3.14 - NVIDIA Corporation) Hidden
NVIDIA Virtual Audio 1.2.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.5 - NVIDIA Corporation)
OpenOffice 4.0.0 (HKLM-x32\...\{B28DBCBA-60F8-40ED-B35B-F510C327946C}) (Version: 4.00.9702 - Apache Software Foundation)
oZone3D.Net FurMark v1.8.2 (HKLM-x32\...\{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1) (Version: - oZone3D.Net)
PA32R SARATOGA SP FSX (HKLM-x32\...\PA32R SARATOGA SP FSX) (Version: 1.00.00.00 - Carenado)
PA34 200T SENECA II FSX (HKLM-x32\...\PA34 200T SENECA II FSX) (Version: 1.00.00.00 - Carenado)
Paragon Backup & Recovery™ 2012 Free (HKLM-x32\...\{C268B5E1-A5DA-11DF-A289-005056C00008}) (Version: 90.00.0003 - Paragon Software)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.1 - pdfforge)
Phuket International Airport for FSX (HKLM-x32\...\PhuketIntFSX_is1) (Version: 1.0.0.0 - SimMarket)
PIC 737 Call 1.0 (HKLM-x32\...\PIC 737 Call) (Version: 1.0 - FeelThere)
PMDG BAe JS4100 (HKLM-x32\...\{FB647DBE-2231-405D-AC36-C73246CBE305}) (Version: 1.10.1016 - PMDG Simulations, LLC.)
PMDG_MD11_FSX (HKLM-x32\...\{CED6EAB9-9FFD-44B2-939A-D77905AD35F3}) (Version: 1.20.0055 - Precision Manuals Development Group)
PMDGMD11X_PW_SR (HKLM-x32\...\{5D2CB37E-DF43-421E-93B1-85D0AF5EB2E3}) (Version: 1.00.0000 - Precision Manuals Development Group)
PMDGMD11X_PW_SR2 (HKLM-x32\...\{5B545767-D712-44C3-A894-AC5FA62331BA}) (Version: 1.00.0000 - Precision Manuals Development Group)
PNG Bush Flying (HKLM-x32\...\PASPNGBushFlyingX_is1) (Version: 1.0.0.0 - PacSim)
POSKY Boeing B737-900 Alaska Airlines FSX (HKLM\...\{707639F3-E47D-4A41-BD3C-3F68B1088B45}) (Version: - POSKY, Kevin McDermott)
POSKY Embraer ERJ 145 FSX (HKLM\...\{3DE32671-5023-4304-848A-16E912CA6D11}) (Version: FSX - Project Open Sky)
Project Tupolev Tu-154m for MS FS2004 (HKCU\...\Project Tupolev Tu-154m for MS FS2004) (Version: - )
PSS - Boeing 757 Pro. v1.3 (HKLM-x32\...\PSS - Boeing 757 Pro. v1.3) (Version: - )
QualityWings Ultimate 146 Collection FSX (HKLM-x32\...\QualityWings Ultimate 146 Collection FSX) (Version: - )
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Real Environment Xtreme (HKLM-x32\...\{4CFCC6FD-AEA2-4208-99A6-45CBF9DFFD82}) (Version: 1.0.2008.1128 - Real Environment Xtreme)
Real Environment Xtreme FS2004 (HKLM-x32\...\{46559469-7C15-49F4-BB76-21480BE1BEF4}) (Version: 1.0.8 - Real Environment Simulations)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
Rennes St-Jacques (HKLM-x32\...\Rennes St-Jacques) (Version: - )
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
SAAB 35 Draken 3.0 (HKLM-x32\...\SAAB 35 Draken 3.0) (Version: - )
SAEZ-SVMI v1.1.2 for FSX (HKLM\...\{39ECE2E2-E2A7-4E92-BF10-D060BBE257B2}) (Version: 1.1.2 - BluePrint Simulations)
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Samui International Airport for FS2004 (HKLM-x32\...\SamuiInternationalAirport_is1) (Version: - SimMarket)
SBD Dauntless FSX (HKCU\...\SBD Dauntless FSX) (Version: - )
SceneryTech Asia Landclass v1.0 (HKLM-x32\...\{F22EE695-4EF1-4188-A209-FD959A494F7B}) (Version: 1.0 - SceneryTech)
SceneryTech Indo-Pacific Landclass v1.0 (HKLM-x32\...\{EFF0D84D-C49A-461E-BC21-D6ED8B2C0D5D}) (Version: 1.0 - SceneryTech)
SceneryTech North America Landclass v1.4 (HKLM-x32\...\{E91C757A-854C-4057-A67D-7FAE297B2016}) (Version: 1.4 - SceneryTech)
SceneryTech South America Landclass v1.0 (HKLM-x32\...\{0DC9C45C-966C-488D-B97E-5C68E161CDCC}) (Version: 1.0 - SceneryTech)
Secunia PSI (3.0.0.7011) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.7011 - Secunia)
Shader 3 Mod for Flight Simulator X (HKLM-x32\...\{B813B812-CBAA-4BC0-95A5-4D07C8B215BD}) (Version: 1.5.0 - Bojote)
SHIELD Streaming (Version: 1.05.28 - NVIDIA Corporation) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)
Smart Data Recovery v4.3 (HKLM-x32\...\Smart Data Recovery_is1) (Version: 4.3 - Smart PC Solutions)
SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden
SMS MD-11 Dutch Package FSX & P3D (HKLM\...\{DB534440-33E4-4230-ACD6-12FDF5751424}) (Version: 1 - SMS Overland - Repaint by Stephen Browning )
Soekarno-Hatta airport scenery (HKLM-x32\...\Soekarno-Hatta airport scenery) (Version: - )
Sofia Airport (LBSF) v2.0 (HKLM-x32\...\Sofia Airport (LBSF) v2.0) (Version: - )
SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden
SpywareBlaster 5.0 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.0.0 - BrightFort LLC)
SSD Fresh (HKLM-x32\...\SSD Fresh_is1) (Version: 2013 - Abelssoft)
Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden
SuperFortress 'Mania' - PRE-RELEASE - B-29B (HKLM-x32\...\SuperFortress 'Mania' - PRE-RELEASE - B-29B) (Version: - )
Swordfish X (HKCU\...\Swordfish X) (Version: - )
System Requirements Lab (HKLM-x32\...\SystemRequirementsLab) (Version: - )
TDS Boeing 737-700 AA FSX & P3D (HKLM\...\{E07401D2-F2F3-43A9-A2D4-69CBC4E646EA}) (Version: 1 - TDS, Alejandro Rojas Lucena, repaint by G Catena, repack by Chris Evans)
TeamViewer 5 (HKLM-x32\...\TeamViewer 5) (Version: 5.1.13999 - TeamViewer GmbH)
Thai Creation - Nepal, Kathmandu VNKT (FSX Portover) (HKLM-x32\...\Thai Creation - Nepal, Kathmandu VNKT (FSX Portover)) (Version: - )
The Real VCBI (HKCU\...\The Real VCBI) (Version: - )
The Very Singapore (HKLM-x32\...\The Very Singapore) (Version: - )
Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden
TreeX V2 (HKLM-x32\...\TreeX_is1) (Version: - Aimé Leclercq)
True Image 2013 (HKLM-x32\...\{4AA75223-6CBF-46F4-8EE4-7BF0591089F7}Visible) (Version: 16.0.6514 - Acronis)
True Image 2013 (x32 Version: 16.0.6514 - Acronis) Hidden
TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3000.132 - TuneUp Software) Hidden
Ultimate Alaska X V1.0 (HKCU\...\Ultimate Alaska X V1.0) (Version: - )
UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden
Unlocker 1.9.1-x64 (HKLM\...\Unlocker) (Version: 1.9.1 - Cedrick Collomb)
USNN Scenery (HKLM-x32\...\USNN Scenery) (Version: - )
VFR Extreeme - Boise X (HKLM-x32\...\VFR Extreeme - Boise X) (Version: - )
VFR Kaui HI01 Taxiway sign fix (HKLM-x32\...\VFR Kaui HI01 Taxiway sign fix) (Version: - )
VFR-Airfields Final Edition (HKLM-x32\...\{F11BD98D-9A2B-4535-A51A-25B0B88EEBFC}) (Version: - )
VFR-Airfields Locarno (HKLM-x32\...\{069A1D97-F8ED-40AA-B6E9-9915F4BC0CC9}) (Version: - )
VFR-Airfields Lugano (HKLM-x32\...\{09FDD417-EB57-4B44-A8C5-FFDDF041D7A1}) (Version: - )
VFR-Airfields Traffic (HKLM-x32\...\{7B94A603-694C-11D8-A9CB-0080AD30B67D}) (Version: - )
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: - Elaborate Bytes)
VIRTUALI Addon ManagerX (HKLM-x32\...\VIRTUALI Addon ManagerX 2.9.0.4_is1) (Version: - )
VIRTUALI Addon ManagerX (HKLM-x32\...\VIRTUALI Addon ManagerX 2.9.0.7_is1) (Version: - )
VIRTUALI Addon ManagerX (HKLM-x32\...\VIRTUALI Addon ManagerX 2.9.0.8_is1) (Version: - )
VLC media player 2.1.4 (HKLM\...\VLC media player) (Version: 2.1.4 - VideoLAN)
VTBS-FSX 2010 1.00 Ver.FSX (HKLM-x32\...\VTBS-FSX 2010 1.00 Ver.FSX) (Version: - )
WD Drive Utilities (HKLM-x32\...\{B2BCCFEC-2623-40E5-9522-DEC488E6B730}) (Version: 1.0.6.3 - Western Digital Technologies, Inc.)
WD Security (HKLM-x32\...\{8A7B24E8-864E-4794-95C4-17644D0991AA}) (Version: 1.0.6.3 - Western Digital Technologies, Inc.)
WD SmartWare (HKLM\...\{232EB8E6-9B8C-4785-A994-B1E5E2376CDC}) (Version: 2.2.0.8 - Western Digital Technologies, Inc.)
WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden
Wings of POWER II: P51 Mustang (HKLM-x32\...\Wings of POWER II: P51 Mustang) (Version: - )
WinRAR archiver (HKLM\...\WinRAR archiver) (Version: - )
YS-11 for FSX (HKLM-x32\...\InstallShield_{41975C09-63C4-48A9-B501-D77FA88174BB}) (Version: 1.00.0000 - AeroSim Co.,Ltd.)
YS-11 for FSX (x32 Version: 1.00.0000 - AeroSim Co.,Ltd.) Hidden
==================== Restore Points =========================
30-04-2014 19:35:48 Revo Uninstaller's restore point - PC Utility Kit
02-05-2014 21:50:51 Windows Update
==================== Hosts content: ==========================
2009-07-14 04:34 - 2014-05-01 21:34 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
Task: {12F488FC-F24C-4CE1-8179-5DBE5F671A6F} - System32\Tasks\{90B71D0C-A26D-47EA-8562-791141A2D196} => F:\FSX\ORBX\Scripts\FTXCentral\FTXCentral.exe [2011-11-28] (Orbx Simulation Systems Pty Ltd)
Task: {17ADF888-2209-4AFA-8A59-1D47ECC65B0A} - System32\Tasks\Abelssoft\CheckDriveBackgroundGuard => C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe [2013-10-10] (Abelssoft)
Task: {1E89487B-881D-4DC6-80E3-7EFAA756BCC4} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {33AD978A-F621-4C3E-B37B-137ABBCA66BF} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe
Task: {5674B2E5-B1FF-46A0-9D89-CBEA16E9D43D} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {58266234-6549-4EA8-A2CD-FDB39D35478D} - System32\Tasks\{FEAAE5CB-CC56-4C17-9BBD-90FB7BF32AE7} => E:\F gamerPC\FSX\1.FSX DIVERSE FILES\WOAI\WOAI INSTALLER\WOAI INSTALLER unzipped\WOAI Installer.exe
Task: {5C2278E2-6A74-466E-AC92-6AEF4E3B18EF} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {6217D114-77D5-4C52-BFCF-DF39E8BCCE2F} - System32\Tasks\{044B2827-FF37-4CA9-9BFC-3B0AED03929C} => E:\F gamerPC\FSX\1.FSX DIVERSE FILES\WOAI\WOAI Installer.exe
Task: {72DA1F02-EEC3-4E61-AD26-418FC57E8858} - System32\Tasks\CheckDriveBackgroundGuard => C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe [2013-10-10] (Abelssoft)
Task: {735783D6-1E0E-46F1-B8F1-863B49821CEC} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {82EF7FE5-2D83-415F-9A94-8CD58491B2C9} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {8F149B57-D2EC-4C5D-AA38-A6ED0CBB580A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-04-29] (Adobe Systems Incorporated)
Task: {9627C922-1B9B-4EFB-8C7A-919BCA5EDC0B} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {9A9B5530-46BF-4E8E-A24E-11DE513E0FB2} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe
Task: {9B60C4AD-9DA0-4907-A8BF-3E8434E0A04E} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.)
Task: {A34A30DE-F01B-46C4-9D82-20B95A84EDDB} - System32\Tasks\{E118B320-009D-4A25-BF00-2A474247AA2E} => E:\F gamerPC\FSX\1.FSX DIVERSE FILES\WOAI\WOAI Installer.exe
Task: {BDA32272-1823-4928-9935-14BAC6A1F738} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-11] (Google Inc.)
Task: {C368B004-6099-4FFC-B091-FA1FA1E913E1} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)
Task: {D098F37F-393C-4DD0-ACA2-00096CF7F8CB} - System32\Tasks\{14E8ACFB-E0CC-411A-A771-F01482F8C473} => F:\FSX\ORBX\Scripts\FTXCentral\FTXCentral.exe [2011-11-28] (Orbx Simulation Systems Pty Ltd)
Task: {D4C49F25-BB96-4783-8ABC-31D510740F97} - System32\Tasks\{3E095D85-DC07-4C02-8946-1CEF64E631C6} => E:\F gamerPC\FSX\1.FSX DIVERSE FILES\WOAI\WOAI Installer.exe
Task: {DECBC250-577A-461A-9463-A565B05CF49D} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2010-07-21] (Microsoft Corporation)
Task: {E5223509-5072-4856-8EE2-E3FE311DEB9D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-11] (Google Inc.)
Task: {F2779192-8E3D-4E42-A930-D60215482C55} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
Task: {F6572B8D-7237-47AD-A57D-8AAFACAA04F8} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {FA4CEEE6-F259-419A-86B4-73E36E8FA6DD} - System32\Tasks\{00EFEFE2-1944-4C07-9C49-A9C2C400669B} => E:\F gamerPC\FSX\1.FSX DIVERSE FILES\WOAI\WOAI INSTALLER\WOAI INSTALLER unzipped\WOAI Installer.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\CheckDriveBackgroundGuard.job => C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2013-03-27 22:39 - 2013-03-27 22:39 - 00021824 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\x64\ti_managers_proxy_stub.dll
2010-07-15 06:44 - 2010-07-15 06:44 - 00020032 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
2010-06-06 08:11 - 2010-03-15 11:28 - 00166400 _____ () C:\Program Files\WinRAR\rarext.dll
2013-07-01 15:20 - 2013-06-21 12:23 - 00087328 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2013-10-06 11:05 - 2013-10-10 15:06 - 00020608 _____ () C:\Program Files (x86)\CheckDrive\AbStartManager.dll
2013-10-06 11:05 - 2013-10-10 15:06 - 00017024 _____ () C:\Program Files (x86)\CheckDrive\AbMessages.dll
2013-03-27 22:09 - 2013-03-27 22:09 - 00420160 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\ulxmlrpcpp.dll
2013-06-29 12:07 - 2013-01-11 03:22 - 03547136 _____ () C:\Program Files (x86)\Free Download Manager\fdmbtsupp.dll
2013-09-07 10:58 - 2014-04-12 21:19 - 03642480 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll
2014-05-01 21:20 - 2014-05-01 21:20 - 00283648 _____ () C:\ProgramData\Free Download Manager\Firefox\Extensions\1.6.0.3\components\vmsfdmff22.dll
2013-06-29 12:07 - 2013-01-11 03:17 - 00105984 _____ () C:\Program Files (x86)\Free Download Manager\fdmumsp.dll
2013-03-27 22:36 - 2013-03-27 22:36 - 00021312 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\ti_managers_proxy_stub.dll
==================== Alternate Data Streams (whitelisted) =========
AlternateDataStreams: C:\ProgramData\TEMP:5C321E34
AlternateDataStreams: C:\ProgramData\TEMP:74603393
AlternateDataStreams: C:\ProgramData\TEMP:A1D5C6AA
AlternateDataStreams: C:\ProgramData\TEMP:F98C6604
==================== Safe Mode (whitelisted) ===================
==================== EXE Association (whitelisted) =============
==================== Disabled items from MSCONFIG ==============
MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: Apple Mobile Device => 2
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: bthserv => 3
MSCONFIG\Services: ehRecvr => 3
MSCONFIG\Services: Fax => 3
MSCONFIG\Services: FLEXnet Licensing Service => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: IDriverT => 3
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: NAUpdate => 2
MSCONFIG\Services: nvUpdatusService => 2
MSCONFIG\Services: PDF Architect Helper Service => 2
MSCONFIG\Services: PDF Architect Service => 2
MSCONFIG\Services: RealNetworks Downloader Resolver Service => 2
MSCONFIG\Services: Secunia Update Agent => 2
MSCONFIG\Services: StarWindServiceAE => 2
MSCONFIG\Services: TabletInputService => 3
MSCONFIG\Services: TapiSrv => 3
MSCONFIG\Services: TeamViewer5 => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk => C:\Windows\pss\Adobe Gamma Loader.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Secunia PSI Tray.lnk => C:\Windows\pss\Secunia PSI Tray.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Alfred^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk => C:\Windows\pss\OpenOffice.org 3.2.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Alfred^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.4.1.lnk => C:\Windows\pss\OpenOffice.org 3.4.1.lnk.Startup
MSCONFIG\startupreg: Acronis Scheduler2 Service => "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe"
MSCONFIG\startupreg: AcronisTibMounterMonitor => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe
MSCONFIG\startupreg: adm_tray.exe => C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: AlcoholAutomount => "C:\Program Files (x86)\Alcohol Soft\Alcohol 120\axcmd.exe" /automount
MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: DAEMON Tools Pro Agent => "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
MSCONFIG\startupreg: DivX Download Manager => "C:\Program Files (x86)\DivX\DivX Plus Web Player\DDmService.exe" start
MSCONFIG\startupreg: DivXUpdate => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
MSCONFIG\startupreg: Free Download Manager => "C:\Program Files (x86)\Free Download Manager\fdm.exe" -autorun
MSCONFIG\startupreg: HDD Observer => C:\Program Files\HDD Observer\HDD Observer.exe
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: hpqSRMon => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe
MSCONFIG\startupreg: IntelliPoint => "C:\Program Files\Microsoft IntelliPoint\ipoint.exe"
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: SearchSettings => "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe"
MSCONFIG\startupreg: SSS12 Browser Monitor => "C:\Program Files (x86)\Steganos Privacy Suite 12\SteganosBrowserMonitor.exe"
MSCONFIG\startupreg: SSS12 File Redirection Starter => "C:\Program Files (x86)\Steganos Privacy Suite 12\fredirstarter.exe"
MSCONFIG\startupreg: SSS12 HotKeys => "C:\Program Files (x86)\Steganos Privacy Suite 12\SteganosHotKeyService.exe"
MSCONFIG\startupreg: Start WingMan Profiler => C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: TkBellExe => "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot
MSCONFIG\startupreg: TrueImageMonitor.exe => "C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe"
MSCONFIG\startupreg: UnlockerAssistant => "C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe"
MSCONFIG\startupreg: uTorrent => "C:\Program Files (x86)\uTorrent\uTorrent.exe"
MSCONFIG\startupreg: VirtualCloneDrive => "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (05/05/2014 07:53:16 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (05/05/2014 07:51:28 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (05/05/2014 07:50:15 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (05/04/2014 10:46:32 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (05/04/2014 10:46:27 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (05/04/2014 10:45:41 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (05/04/2014 10:45:30 PM) (Source: SideBySide) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Error: (05/04/2014 10:00:13 PM) (Source: Application Hang) (User: )
Description: Programm FSX.EXE, Version 10.0.61637.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 13dc
Startzeit: 01cf67d274e31457
Endzeit: 79
Anwendungspfad: F:\FSX\FSX.EXE
Berichts-ID: 2f8aeeef-d3c6-11e3-85a5-00241dc7db61
Error: (05/04/2014 09:03:10 PM) (Source: Application Hang) (User: )
Description: Programm fsx.exe, Version 10.0.61637.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1614
Startzeit: 01cf67cb29591ac5
Endzeit: 61
Anwendungspfad: F:\FSX\fsx.exe
Berichts-ID: b7bd2eb0-d3be-11e3-85a5-00241dc7db61
Error: (05/04/2014 08:55:39 PM) (Source: Application Hang) (User: )
Description: Programm fsx.exe, Version 10.0.61637.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1550
Startzeit: 01cf67c856f9b1cc
Endzeit: 120
Anwendungspfad: F:\FSX\fsx.exe
Berichts-ID: 2b8bb3c3-d3bd-11e3-85a5-00241dc7db61
System errors:
=============
Error: (05/04/2014 08:44:50 PM) (Source: Disk) (User: )
Description: Das Gerät \Device\Harddisk1\DR1 ist für den Zugriff noch nicht bereit.
Error: (05/04/2014 08:44:50 PM) (Source: Disk) (User: )
Description: Das Gerät \Device\Harddisk1\DR1 ist für den Zugriff noch nicht bereit.
Error: (05/04/2014 08:44:50 PM) (Source: atapi) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Ide\IdePort3 gefunden.
Error: (05/04/2014 08:44:50 PM) (Source: Disk) (User: )
Description: Das Gerät \Device\Harddisk1\DR1 ist für den Zugriff noch nicht bereit.
Error: (05/04/2014 08:44:50 PM) (Source: Disk) (User: )
Description: Das Gerät \Device\Harddisk1\DR1 ist für den Zugriff noch nicht bereit.
Error: (05/04/2014 08:44:50 PM) (Source: Disk) (User: )
Description: Das Gerät \Device\Harddisk1\DR1 ist für den Zugriff noch nicht bereit.
Error: (05/04/2014 08:44:50 PM) (Source: Disk) (User: )
Description: Das Gerät \Device\Harddisk1\DR1 ist für den Zugriff noch nicht bereit.
Error: (05/04/2014 08:44:50 PM) (Source: Disk) (User: )
Description: Das Gerät \Device\Harddisk1\DR1 ist für den Zugriff noch nicht bereit.
Error: (05/04/2014 07:07:41 PM) (Source: Disk) (User: )
Description: Der Treiber hat einen Controllerfehler auf \Device\Harddisk4\DR6 gefunden.
Error: (05/04/2014 09:49:43 AM) (Source: Service Control Manager) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
mbmiodrvr
Microsoft Office Sessions:
=========================
Error: (05/05/2014 07:53:16 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Downloads\Software\esetsmartinstaller_deu.exe
Error: (05/05/2014 07:51:28 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Downloads\Software\esetsmartinstaller_deu.exe
Error: (05/05/2014 07:50:15 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe
Error: (05/04/2014 10:46:32 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Alfred\Desktop\esetsmartinstaller_deu.exe
Error: (05/04/2014 10:46:27 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Alfred\Desktop\esetsmartinstaller_deu.exe
Error: (05/04/2014 10:45:41 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Users\Alfred\Desktop\esetsmartinstaller_deu.exe
Error: (05/04/2014 10:45:30 PM) (Source: SideBySide)(User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifestC:\Downloads\Software\esetsmartinstaller_deu.exe
Error: (05/04/2014 10:00:13 PM) (Source: Application Hang)(User: )
Description: FSX.EXE10.0.61637.013dc01cf67d274e3145779F:\FSX\FSX.EXE2f8aeeef-d3c6-11e3-85a5-00241dc7db61
Error: (05/04/2014 09:03:10 PM) (Source: Application Hang)(User: )
Description: fsx.exe10.0.61637.0161401cf67cb29591ac561F:\FSX\fsx.exeb7bd2eb0-d3be-11e3-85a5-00241dc7db61
Error: (05/04/2014 08:55:39 PM) (Source: Application Hang)(User: )
Description: fsx.exe10.0.61637.0155001cf67c856f9b1cc120F:\FSX\fsx.exe2b8bb3c3-d3bd-11e3-85a5-00241dc7db61
CodeIntegrity Errors:
===================================
Date: 2014-05-04 09:46:44.393
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-04 09:46:44.252
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-04 09:39:10.514
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-04 09:39:10.374
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-04 08:23:25.483
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-04 08:23:25.358
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-03 20:28:23.299
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-03 20:28:23.159
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-03 17:53:32.920
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
Date: 2014-05-03 17:53:32.795
Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert.
==================== Memory info ===========================
Percentage of memory in use: 56%
Total physical RAM: 6141.49 MB
Available physical RAM: 2699.05 MB
Total Pagefile: 12281.16 MB
Available Pagefile: 9859.64 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB
==================== Drives ================================
Drive c: (Volume) (Fixed) (Total:97.66 GB) (Free:14.49 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (Volume) (Fixed) (Total:488.28 GB) (Free:63.64 GB) NTFS
Drive e: (Volume) (Fixed) (Total:811.32 GB) (Free:89.34 GB) NTFS
Drive f: (Volume) (Fixed) (Total:119.24 GB) (Free:6.94 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 119 GB) (Disk ID: 7007A0F9)
Partition 1: (Active) - (Size=119 GB) - (Type=07 NTFS)
========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: 4BD0ABA5)
Partition 1: (Active) - (Size=98 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=488 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=811 GB) - (Type=07 NTFS)
==================== End Of Log ============================
Kleine Frage noch Schrauber, ist mit dem Desinstallieren und manuellem Löschen von ESET die Bedrohung (2 objekte) eigentlich auch gelöscht? Hallo Schrauber, zu Deiner Info: Der Aufstart dauert immer noch etwa 4 1/2 minuten. Liegt der Grund dazu wohl in den vielen Programmen, die installiert sind??. Vor allem viele Installationen von FSX Flugsimulator addons
__________________ |
|
06.05.2014, 16:40
| #18 |
| /// the machine /// TB-Ausbilder    | Aufstarten PC mit Win 7 64 dauert viel zulange Kann schon an den vielen Programmen liegen.
__________________Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDFXAudioPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDFXAudioPlugin.dll",DllRegisterServer [X]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DSEPlugins\DFXAudioPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DSEPlugins\DFXAudioPlugin.dll",DllRegisterServer [X]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXBannerAdPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXBannerAdPlugin.dll",DllRegisterServer [X]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDownloadManagerPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDownloadManagerPlugin.dll",DllRegisterServer [X]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXMediaManagerPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXMediaManagerPlugin.dll",DllRegisterServer [X]
HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll",DllRegisterServer [X]
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
Log von ESET fehlt noch.
__________________ |
|
06.05.2014, 18:09
| #19 |
| | Aufstarten PC mit Win 7 64 dauert viel zulange Hallo Schrauber, hier 2 logs. 1.ESET log v.5.5.14 2.fixlog.text Gruss alfred ESETSmartInstaller@High as downloader log: all ok # version=8 # OnlineScannerApp.exe=1.0.0.1 # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=f428c97e82875e42ab05ca43174aaaa8 # engine=18132 # end=finished # remove_checked=false # archives_checked=true # unwanted_checked=false # unsafe_checked=false # antistealth_checked=true # utc_time=2014-05-05 11:07:36 # local_time=2014-05-05 01:07:36 (+0100, Mitteleuropäische Sommerzeit) # country="Switzerland" # lang=1031 # osver=6.1.7601 NT Service Pack 1 # compatibility_mode=5893 16776574 100 94 25746370 150917906 0 0 # scanned=2061861 # found=2 # cleaned=0 # scan_time=51589 sh=E9DCB91D8B8D7AA21CD7431525C89CE000959ED4 ft=1 fh=f6685c92b879ccef vn="Variante von Win32/Kryptik.BWJC Trojaner" ac=I fn="D:\Downloads\DownloadManagerSetup.exe" sh=2BEC3A89EB5BF0BED90AD0923C7D12D44AEB3111 ft=1 fh=169012abcb12da52 vn="Win32/SuspLibLoad.B Trojaner" ac=I fn="E:\fs9 files oliver aug 010\fs9\Level-D Simulations\B767-300\flt1chk4.dll" Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 06-05-2014 Ran by Alfred at 2014-05-06 19:05:41 Run:1 Running from C:\Users\Alfred\Desktop Boot Mode: Normal ============================================== Content of fixlist: ***************** HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDFXAudioPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDFXAudioPlugin.dll",DllRegisterServer [X] HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DSEPlugins\DFXAudioPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DSEPlugins\DFXAudioPlugin.dll",DllRegisterServer [X] HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXBannerAdPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXBannerAdPlugin.dll",DllRegisterServer [X] HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDownloadManagerPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDownloadManagerPlugin.dll",DllRegisterServer [X] HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXMediaManagerPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXMediaManagerPlugin.dll",DllRegisterServer [X] HKLM-x32\...\Runonce: [B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll] - "C:\Windows\system32\rundll32.exe" "C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll",DllRegisterServer [X] ***************** HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDFXAudioPlugin.dll => Value deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\B Register C:\Program Files (x86)\DivX\DivX Plus Player\DSEPlugins\DFXAudioPlugin.dll => Value deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXBannerAdPlugin.dll => Value deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXDownloadManagerPlugin.dll => Value deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXMediaManagerPlugin.dll => Value deleted successfully. HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\\B Register C:\Program Files (x86)\DivX\DivX Plus Player\DPXPlugins\DPXPlayerPlugin.dll => Value deleted successfully. ==== End of Fixlog ====
__________________ Suche nicht das Glueck - lebe es (Buddha) |
|
07.05.2014, 11:13
| #20 |
| /// the machine /// TB-Ausbilder | Aufstarten PC mit Win 7 64 dauert viel zulange Fertig  Die Reihenfolge ist hier entscheidend.
Falls Du Lob oder Kritik abgeben möchtest kannst Du das hier tun Hier noch ein paar Tipps zur Absicherung deines Systems. Ich kann garnicht zu oft erwähnen, wie wichtig es ist, dass dein System Up to Date ist.
Anti- Viren Software
Zusätzlicher Schutz
Sicheres Browsen
Alternative Browser Andere Browser tendieren zu etwas mehr Sicherheit als der IE, da diese keine Active X Elemente verwenden. Diese können von Spyware zur Infektion deines Systems missbraucht werden.
Performance Bereinige regelmäßig deine Temp Files. Ich empfehle hierzu TFC Halte dich fern von jedlichen Registry Cleanern. Diese Schaden deinem System mehr als sie helfen. Hier ein paar ( englishe ) Links Miekemoes Blogspot ( MVP ) Bill Castner ( MVP ) Don'ts
Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so das ich diesen Thread aus meinen Abos löschen kann.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
07.05.2014, 17:56
| #21 |
| | Aufstarten PC mit Win 7 64 dauert viel zulange Hallo Schrauber, Wieder einmal mehr hast Du mir geholfen! Ich danke Dir sehr dafür. Habe alle Deine Tipps hinter meine Ohren geschrieben..Wünsche Dir alles Gute. Jetzt bleibt für mich noch die Spende.. Mit freundlichen Grüssen Alfred übrigens, der PC startet jetzt wesentlich schneller auf.
__________________ --> Aufstarten PC mit Win 7 64 dauert viel zulange |
|
08.05.2014, 10:43
| #22 |
| /// the machine /// TB-Ausbilder | Aufstarten PC mit Win 7 64 dauert viel zulange Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
11.05.2014, 08:02
| #23 |
| | Aufstarten PC mit Win 7 64 dauert viel zulange Hallo Schrauber, hier noch eine letzte Frage: wie kann ich die oben erwähnten tools installieren? (adblock und noscript = xpi Dateien) Vielen Dank für Deinen Tipp und freundliche Grüsse alfred
__________________ Suche nicht das Glueck - lebe es (Buddha) |
|
12.05.2014, 10:03
| #24 |
| /// the machine /// TB-Ausbilder | Aufstarten PC mit Win 7 64 dauert viel zulange Die xpi kannste löschen, einfach in Firefox > Extras > Addons die Addons mit Namen suchen und dort direkt installieren.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
12.05.2014, 10:20
| #25 |
| | Aufstarten PC mit Win 7 64 dauert viel zulange oh, vielen Dank Schrauber, für Deinen guten Tipp. Gruss Alfred
__________________ Suche nicht das Glueck - lebe es (Buddha) |
|
13.05.2014, 09:34
| #26 |
| /// the machine /// TB-Ausbilder | Aufstarten PC mit Win 7 64 dauert viel zulange Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Aufstarten PC mit Win 7 64 dauert viel zulange |
| arten, aufgehängt, aufstarten, behebung, dauert, ewigkeit, guten, neustart, performance, recht, win, win 7, zweimal |
Linear-Darstellung
