| |
| |||||||
Log-Analyse und Auswertung: Nach dem Start des tools TFC ereignete sich ein BluescreenWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
01.09.2014, 16:18
| #1 |
 |  Nach dem Start des tools TFC ereignete sich ein Bluescreen Guten Tag, Mein PC läuft eigentlich zufriedenstellend, allerdings mit Ausnahmen. Ich betreibe darauf praktisch nur den Flugsimulator FSX. die Framerates sind ok. Immerhin, wenn ich manchmal files und Ordner öffnen will, dauert das oft viel zu lange und beim Betrieb des FSX gibt es auch hin und wieder CTD. Bis jetzt habe ich mein System win7 64 regelmässig und problemlos mit dem empfohlenen tool TFC reinigen können. Zweimal ist TFC nun aber abgestürzt, d.h. ich musste das tool jedesmal zweimal laden bevor ich den Scan dennoch durchführen konnte. Ich habe die neuste Version bei file Pony heruntergeladen. Nun aber ereignete sich nach dem letzten Versuch ein Bluescreen. Vielen Dank für Eure Tipps. Gruss Alfred anbei FRST und addition log: Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-08-2014 02 Ran by Alfred (administrator) on ALFRED-PC on 01-09-2014 16:48:11 Running from C:\Users\Alfred\Downloads Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 Boot Mode: Normal The only official download link for FRST: Download link for 32-Bit version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ Download link for 64-Bit Version: hxxp://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ Download link from any site other than Bleeping Computer is unpermitted or outdated. See tutorial for FRST: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe (Beepa P/L) C:\Program Files (x86)\fraps.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Foxit Corporation) C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe (Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (BillP Studios) C:\Program Files (x86)\BillP Studios\WinPatrol\WinPatrol.exe (Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe (Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Security\WDDriveAutoUnlock.exe (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe (Beepa P/L) C:\Program Files (x86)\fraps64.dat (Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe (Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe (FreeDownloadManager.ORG) C:\Program Files (x86)\Free Download Manager\fdm.exe (Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1797064 2014-03-20] (NVIDIA Corporation) HKLM-x32\...\Run: [GoforFilesInstaller Starter] => >쀈>봤>屯皕썸> HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5562736 2014-07-22] (Western Digital Technologies, Inc.) HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-07] (Avira Operations GmbH & Co. KG) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation) HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [161584 2014-08-04] (Avira Operations GmbH & Co. KG) HKU\S-1-5-21-3691312484-3524702341-236613940-1000\...\Run: [WinPatrol] => C:\Program Files (x86)\BillP Studios\WinPatrol\winpatrol.exe [533568 2014-04-23] (BillP Studios) AppInit_DLLs: => File Not Found AppInit_DLLs-x32: €VA => "€VA" File Not Found Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk ShortcutTarget: Secunia PSI Tray.lnk -> C:\PROGRAM FILES (X86)\Secunia\PSI\psi_tray.exe (Secunia) ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => No File ShellIconOverlayIdentifiers: AcronisSyncError -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll (Acronis) ShellIconOverlayIdentifiers: AcronisSyncInProgress -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll (Acronis) ShellIconOverlayIdentifiers: AcronisSyncOk -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll (Acronis) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xB655D88E8A01CB01 HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-ch StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe SearchScopes: HKLM - DefaultScope value is missing. SearchScopes: HKLM-x32 - DefaultScope value is missing. SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search SearchScopes: HKCU - {BEC15BFA-01C6-44A5-BD78-38BF5EBE0604} URL = hxxp://ch.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=937811&p={searchTerms} BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.) BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) BHO-x32: Free Download Manager -> {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -> C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.) DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll () FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll () FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation) FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF Plugin-x32: @real.com/nprpjplug;version=12.0.1.633 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.) FF SearchPlugin: C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\searchplugins\google-images.xml FF SearchPlugin: C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\searchplugins\google-maps.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazondotcom-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\leo_ende_de.xml FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-de.xml FF Extension: Avira Browser Safety - C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\Extensions\abs@avira.com [2014-08-28] FF Extension: DownloadHelper - C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-08-09] FF Extension: Adblock Plus Pop-up Addon - C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\Extensions\adblockpopups@jessehakanen.net.xpi [2013-09-19] FF Extension: Cliqz Beta - C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\Extensions\cliqz@cliqz.com.xpi [2014-08-26] FF Extension: BitAccelerator - C:\Program Files (x86)\Mozilla Firefox\extensions\{5ddeb737-082c-48fb-8c06-aa4b38d61e5f} [2013-09-07] FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF Extension: No Name - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011-03-22] FF HKLM-x32\...\Firefox\Extensions: [{09F060FA-566D-42D7-BF79-97AB30863433}] - C:\Program Files (x86)\Steganos Privacy Suite 12\pfplugin FF HKLM-x32\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] - C:\Program Files (x86)\Steganos Privacy Suite 12\spmplugin3 FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-10-18] FF HKLM-x32\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 FF HKCU\...\Firefox\Extensions: [cliqz@cliqz.com] - C:\Users\Alfred\AppData\Roaming\Mozilla\Firefox\Profiles\xuu6a9cg.default\extensions\cliqz@cliqz.com FF Extension: Free Download Manager plugin - C:\ProgramData\Free Download Manager\Firefox\Extensions\1.6.0.7 [2014-05-11] Chrome: ======= CHR HomePage: Default -> CHR Profile: C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Docs) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-31] CHR Extension: (Google Drive) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-31] CHR Extension: (WOT) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2013-06-29] CHR Extension: (YouTube) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-06-16] CHR Extension: (Google Search) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-06-16] CHR Extension: (RealDownloader) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2013-06-16] CHR Extension: (Google Wallet) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-31] CHR Extension: (Gmail) - C:\Users\Alfred\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-06-16] CHR HKLM-x32\...\Chrome\Extension: [fnjbmmemklcjgepojigaapkoodmkgbae] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\wpa\wpa.crx [] CHR HKLM-x32\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [] CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\google_chrome\html5video\html5video.crx [] CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-07] (Avira Operations GmbH & Co. KG) R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-07] (Avira Operations GmbH & Co. KG) R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [149296 2014-08-04] (Avira Operations GmbH & Co. KG) R2 FoxitCloudUpdateService; C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [242216 2014-06-17] (Foxit Corporation) R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed] R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed] S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed] R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1228504 2013-07-03] (Secunia) R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [660184 2013-07-03] (Secunia) S4 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software) [File not signed] R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1042808 2014-07-22] (Western Digital Technologies, Inc.) R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [296312 2014-06-02] (Western Digital Technologies, Inc.) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation) R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-06-17] (Avira Operations GmbH & Co. KG) R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-06-17] (Avira Operations GmbH & Co. KG) R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-06-17] (Avira Operations GmbH & Co. KG) R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-07-03] (Secunia) S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.) S4 sptd; C:\Windows\System32\Drivers\sptd.sys [828912 2010-06-06] (Duplex Secure Ltd.) R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1120032 2013-07-09] (Acronis International GmbH) R0 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [183224 2013-07-09] (Acronis) R1 UimBus; C:\Windows\System32\DRIVERS\uimx64.sys [59184 2011-11-17] (Windows (R) 2000 DDK provider) R1 Uim_IM; C:\Windows\System32\Drivers\Uim_IMx64.sys [572336 2011-11-17] (Paragon) R1 Uim_VIM; C:\Windows\System32\Drivers\uim_vimx64.sys [352816 2011-11-17] (Paragon) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [File not signed] R0 vidsflt; C:\Windows\System32\DRIVERS\vidsflt.sys [117024 2013-07-09] (Acronis International GmbH) S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 cpuz132; \??\C:\Users\Alfred\AppData\Local\Temp\cpuz132\cpuz132_x64.sys [X] S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-01 16:48 - 2014-09-01 16:48 - 00019555 _____ () C:\Users\Alfred\Downloads\FRST.txt 2014-09-01 16:47 - 2014-09-01 16:48 - 00000000 ____D () C:\FRST 2014-09-01 16:45 - 2014-09-01 16:45 - 02104832 _____ (Farbar) C:\Users\Alfred\Downloads\FRST64.exe 2014-09-01 16:44 - 2014-09-01 16:46 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat 2014-09-01 16:38 - 2014-09-01 16:39 - 00000020 _____ () C:\Users\Alfred\defogger_reenable 2014-09-01 10:21 - 2013-02-06 06:36 - 11636271 _____ () C:\Users\Alfred\Desktop\Mir2000Cfsx.zip 2014-09-01 10:17 - 2013-02-06 07:11 - 76884051 _____ () C:\Users\Alfred\Desktop\mirage2000n_unarmed_fsx.zip 2014-08-31 20:54 - 2014-08-31 20:54 - 00018226 _____ () C:\Users\Alfred\Downloads\halo.zip 2014-08-31 11:23 - 2014-08-31 11:24 - 00290432 _____ () C:\Windows\Minidump\083114-110838-01.dmp 2014-08-31 11:20 - 2014-08-31 11:20 - 00001180 _____ () C:\Users\Alfred\Desktop\TROJANERBOARD.DE 3.5.14 - Verknüpfung.lnk 2014-08-31 11:09 - 2014-08-31 11:10 - 00000000 ____D () C:\Users\Alfred\Documents\1. eSATA inventar bup von kingston per 31.8.14 2014-08-31 11:09 - 2014-08-31 11:09 - 00000834 _____ () C:\Users\Alfred\Desktop\1.eSATA Inventar 17.4.14 - Verknüpfung.lnk 2014-08-31 10:48 - 2014-08-31 10:48 - 00000000 ____D () C:\Users\Alfred\Downloads\Acronis 2013 program setup 2014-08-29 21:36 - 2014-08-29 21:36 - 00000693 _____ () C:\Users\Alfred\Desktop\JRT.txt 2014-08-29 08:59 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-29 08:59 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-08-29 08:59 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-28 23:01 - 2014-08-28 23:06 - 19092635 _____ () C:\Users\Alfred\Downloads\fouga_magister_cm170_v1.1_fsx.zip 2014-08-28 22:48 - 2014-08-28 22:48 - 00000000 ____D () C:\Users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fouga Zephyr 2014-08-28 22:47 - 2012-10-08 15:53 - 00000797 _____ () C:\Users\Alfred\Desktop\FSX zips installed F gamerPC - Verknüpfung.lnk 2014-08-28 21:32 - 2014-08-28 21:32 - 00000000 ____D () C:\Users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nord 3202 2014-08-27 09:37 - 2014-08-27 09:37 - 00001333 _____ () C:\Users\Alfred\Desktop\0.PENDINGS DESKTOP - Verknüpfung.lnk 2014-08-24 13:45 - 2014-08-24 13:45 - 00000000 ____D () C:\Users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FSX737 2014-08-24 13:45 - 2014-08-24 13:45 - 00000000 ____D () C:\Users\Alfred\AppData\Local\Deployment 2014-08-24 08:25 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2014-08-24 08:25 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2014-08-24 08:25 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2014-08-24 08:25 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2014-08-24 08:24 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2014-08-24 08:24 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2014-08-24 08:24 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2014-08-24 08:24 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2014-08-24 08:24 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2014-08-24 08:24 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2014-08-24 08:24 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2014-08-24 08:24 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2014-08-24 08:24 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2014-08-24 08:24 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2014-08-23 22:51 - 2014-08-23 22:51 - 00000000 ____D () C:\Users\Alfred\AppData\Local\Figerty_Systems_Inc 2014-08-22 10:25 - 2014-08-22 10:25 - 00000000 ____D () C:\Users\Alfred\Documents\0.SSD Benchmark FSX F zustand 2014-08-22 09:55 - 2014-08-22 09:55 - 00286305 _____ () C:\Users\Alfred\Downloads\AS_SSD17_Benchmark.zip 2014-08-22 09:55 - 2011-05-13 12:16 - 00493056 _____ ( datenhaus GmbH) C:\Windows\SysWOW64\dhRichClient3.dll 2014-08-22 09:55 - 2011-03-25 20:42 - 00338432 _____ () C:\Windows\SysWOW64\sqlite36_engine.dll 2014-08-22 09:02 - 2014-08-22 09:02 - 00001103 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-08-20 19:13 - 2012-10-17 16:10 - 00001120 _____ () C:\Users\Alfred\Desktop\FTX Central.lnk 2014-08-20 19:00 - 2014-08-20 19:00 - 00001195 _____ () C:\Users\Alfred\Desktop\FS Water Configurator.exe - Verknüpfung.lnk 2014-08-20 12:16 - 2014-08-20 12:16 - 00001786 _____ () C:\Users\Alfred\Desktop\Google Earth - Verknüpfung.lnk 2014-08-18 21:12 - 2014-07-25 12:49 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe 2014-08-18 21:11 - 2014-08-18 21:11 - 00004286 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log 2014-08-18 21:11 - 2014-08-18 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-08-18 21:11 - 2014-07-25 12:55 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2014-08-18 21:11 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe 2014-08-18 21:11 - 2014-07-25 12:49 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe 2014-08-15 22:46 - 2014-08-15 22:46 - 00000000 ____D () C:\Users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dornier Do328 SkyWork Airlines 2014-08-15 22:46 - 2014-08-15 22:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dornier Do328 SkyWork Airlines 2014-08-15 09:01 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll 2014-08-15 09:01 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll 2014-08-15 09:01 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe 2014-08-15 09:01 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe 2014-08-15 09:01 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe 2014-08-15 09:01 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll 2014-08-15 09:01 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe 2014-08-15 09:01 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll 2014-08-15 08:56 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-08-15 08:56 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-08-15 08:56 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2014-08-15 08:56 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2014-08-15 08:56 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2014-08-15 08:56 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2014-08-15 08:56 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2014-08-15 08:56 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2014-08-15 08:56 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2014-08-15 08:56 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2014-08-15 08:56 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2014-08-15 08:56 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2014-08-15 08:56 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2014-08-15 08:56 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2014-08-15 08:56 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2014-08-15 08:56 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2014-08-15 08:56 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2014-08-15 08:56 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2014-08-15 08:56 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2014-08-15 08:56 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2014-08-15 08:56 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2014-08-15 08:56 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2014-08-15 08:56 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2014-08-15 08:56 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2014-08-15 08:56 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2014-08-15 08:56 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2014-08-15 08:56 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2014-08-15 08:56 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2014-08-15 08:56 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2014-08-15 08:56 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2014-08-15 08:56 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2014-08-15 08:56 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2014-08-15 08:56 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2014-08-15 08:56 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2014-08-15 08:56 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2014-08-15 08:56 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2014-08-15 08:56 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2014-08-15 08:56 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2014-08-15 08:56 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2014-08-15 08:56 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2014-08-15 08:56 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2014-08-15 08:56 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2014-08-15 08:56 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2014-08-15 08:56 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2014-08-15 08:56 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2014-08-15 08:56 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2014-08-15 08:56 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2014-08-15 08:56 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2014-08-15 08:56 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2014-08-15 08:56 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2014-08-15 08:56 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2014-08-15 08:56 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2014-08-15 08:56 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2014-08-15 08:56 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2014-08-15 08:56 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2014-08-15 08:56 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2014-08-15 08:56 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2014-08-15 08:56 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2014-08-15 08:56 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2014-08-15 08:56 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2014-08-15 08:56 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2014-08-15 08:56 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2014-08-15 08:56 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL 2014-08-15 08:56 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL 2014-08-15 08:56 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL 2014-08-15 08:56 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL 2014-08-15 08:56 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL 2014-08-15 08:56 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL 2014-08-15 08:56 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL 2014-08-15 08:56 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL 2014-08-15 08:56 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL 2014-08-15 08:56 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL 2014-08-15 08:56 - 2014-07-09 00:38 - 00419992 _____ () C:\Windows\system32\locale.nls 2014-08-15 08:56 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls 2014-08-15 08:56 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2014-08-15 08:56 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2014-08-15 08:56 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2014-08-15 08:56 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2014-08-15 08:56 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2014-08-15 08:56 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll 2014-08-15 08:56 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2014-08-15 08:56 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2014-08-15 08:56 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2014-08-15 08:56 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll 2014-08-10 11:44 - 2014-08-10 11:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ant's Airplanes 2014-08-08 22:55 - 2014-08-08 23:09 - 43405296 _____ () C:\Users\Alfred\Downloads\Tu104Tu124-1.zip 2014-08-08 20:39 - 2014-08-08 20:39 - 00000000 ____D () C:\Program Files\Western Digital 2014-08-06 12:09 - 2014-08-06 12:09 - 00001226 _____ () C:\Users\Alfred\Desktop\1.FSX F - Verknüpfung.lnk ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2014-09-01 16:48 - 2014-09-01 16:48 - 00019555 _____ () C:\Users\Alfred\Downloads\FRST.txt 2014-09-01 16:48 - 2014-09-01 16:47 - 00000000 ____D () C:\FRST 2014-09-01 16:48 - 2013-06-16 21:19 - 01215727 _____ () C:\Windows\WindowsUpdate.log 2014-09-01 16:48 - 2010-07-11 07:32 - 00000000 ____D () C:\Program Files (x86)\Movies 2014-09-01 16:48 - 2010-06-27 19:40 - 00000000 ____D () C:\Program Files (x86)\Screenshots 2014-09-01 16:46 - 2014-09-01 16:44 - 00008192 _____ () C:\Windows\SysWOW64\WDPABKP.dat 2014-09-01 16:45 - 2014-09-01 16:45 - 02104832 _____ (Farbar) C:\Users\Alfred\Downloads\FRST64.exe 2014-09-01 16:43 - 2014-07-12 09:05 - 00003170 _____ () C:\Windows\System32\Tasks\FRAPS 2014-09-01 16:41 - 2013-07-18 21:21 - 00000290 _____ () C:\Windows\Tasks\CheckDriveBackgroundGuard.job 2014-09-01 16:41 - 2011-04-11 14:25 - 00001106 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2014-09-01 16:40 - 2013-09-28 07:53 - 28837240 _____ () C:\Windows\PFRO.log 2014-09-01 16:40 - 2013-09-20 11:27 - 00044650 _____ () C:\Windows\setupact.log 2014-09-01 16:40 - 2012-07-22 22:24 - 00000000 ____D () C:\ProgramData\NVIDIA 2014-09-01 16:40 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2014-09-01 16:39 - 2014-09-01 16:38 - 00000020 _____ () C:\Users\Alfred\defogger_reenable 2014-09-01 16:39 - 2013-06-29 12:07 - 00000000 ____D () C:\Users\Alfred\AppData\Roaming\Free Download Manager 2014-09-01 16:38 - 2010-06-01 13:41 - 00000000 ____D () C:\Users\Alfred 2014-09-01 16:35 - 2012-06-06 19:59 - 00004059 _____ () C:\Users\Alfred\d3d_antilag.log 2014-09-01 16:35 - 2010-06-02 07:19 - 00000000 ____D () C:\ProgramData\TEMP 2014-09-01 16:28 - 2012-10-06 20:36 - 00000000 ____D () C:\Users\Alfred\Documents\Flight Simulator X-Dateien 2014-09-01 16:05 - 2012-05-31 09:11 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2014-09-01 16:04 - 2011-04-11 14:25 - 00001110 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2014-09-01 10:11 - 2013-08-24 00:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MILVIZ 2014-09-01 08:13 - 2009-07-14 06:45 - 00022592 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2014-09-01 08:13 - 2009-07-14 06:45 - 00022592 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2014-08-31 23:08 - 2010-08-28 11:39 - 00000000 ____D () C:\Users\Alfred\AppData\Roaming\vlc 2014-08-31 21:29 - 2010-06-01 14:17 - 00003938 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{B9570399-0E5E-4E61-89B3-CA9D442C62AF} 2014-08-31 20:54 - 2014-08-31 20:54 - 00018226 _____ () C:\Users\Alfred\Downloads\halo.zip 2014-08-31 11:48 - 2010-06-18 16:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aerosoft 2014-08-31 11:48 - 2010-06-07 11:00 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2014-08-31 11:41 - 2009-07-14 19:58 - 00699432 _____ () C:\Windows\system32\perfh007.dat 2014-08-31 11:41 - 2009-07-14 19:58 - 00149572 _____ () C:\Windows\system32\perfc007.dat 2014-08-31 11:41 - 2009-07-14 07:13 - 01620684 _____ () C:\Windows\system32\PerfStringBackup.INI 2014-08-31 11:32 - 2014-05-03 14:16 - 00000000 ____D () C:\Users\Alfred\Documents\TROJANERBOARD.DE 3.5.14 2014-08-31 11:24 - 2014-08-31 11:23 - 00290432 _____ () C:\Windows\Minidump\083114-110838-01.dmp 2014-08-31 11:23 - 2010-06-18 11:33 - 00000000 ____D () C:\Windows\Minidump 2014-08-31 11:20 - 2014-08-31 11:20 - 00001180 _____ () C:\Users\Alfred\Desktop\TROJANERBOARD.DE 3.5.14 - Verknüpfung.lnk 2014-08-31 11:20 - 2012-06-10 12:04 - 00259072 ___SH () C:\Users\Alfred\Documents\Thumbs.db 2014-08-31 11:10 - 2014-08-31 11:09 - 00000000 ____D () C:\Users\Alfred\Documents\1. eSATA inventar bup von kingston per 31.8.14 2014-08-31 11:09 - 2014-08-31 11:09 - 00000834 _____ () C:\Users\Alfred\Desktop\1.eSATA Inventar 17.4.14 - Verknüpfung.lnk 2014-08-31 10:48 - 2014-08-31 10:48 - 00000000 ____D () C:\Users\Alfred\Downloads\Acronis 2013 program setup 2014-08-29 21:36 - 2014-08-29 21:36 - 00000693 _____ () C:\Users\Alfred\Desktop\JRT.txt 2014-08-29 20:53 - 2010-12-24 11:42 - 00000000 ____D () C:\Users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Majestic Software 2014-08-29 20:53 - 2010-12-24 11:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Majestic Software 2014-08-29 20:45 - 2010-07-06 23:30 - 00000000 ____D () C:\Windows\SysWOW64\directx 2014-08-29 09:20 - 2009-07-14 06:45 - 02238336 _____ () C:\Windows\system32\FNTCACHE.DAT 2014-08-28 23:11 - 2012-10-14 11:57 - 00000000 ____D () C:\Users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rikoooo Add-ons 2014-08-28 23:06 - 2014-08-28 23:01 - 19092635 _____ () C:\Users\Alfred\Downloads\fouga_magister_cm170_v1.1_fsx.zip 2014-08-28 22:48 - 2014-08-28 22:48 - 00000000 ____D () C:\Users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fouga Zephyr 2014-08-28 21:32 - 2014-08-28 21:32 - 00000000 ____D () C:\Users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nord 3202 2014-08-27 09:37 - 2014-08-27 09:37 - 00001333 _____ () C:\Users\Alfred\Desktop\0.PENDINGS DESKTOP - Verknüpfung.lnk 2014-08-27 09:37 - 2014-05-26 18:41 - 00000000 ____D () C:\Users\Alfred\Documents\Desktop-Dokumente 2014-08-26 09:40 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache 2014-08-25 23:48 - 2012-10-06 20:31 - 00000000 ____D () C:\Users\Alfred\Documents\Flight Simulator X files 2014-08-25 23:48 - 2010-07-08 08:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PMDG Simulations 2014-08-24 13:45 - 2014-08-24 13:45 - 00000000 ____D () C:\Users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FSX737 2014-08-24 13:45 - 2014-08-24 13:45 - 00000000 ____D () C:\Users\Alfred\AppData\Local\Deployment 2014-08-24 13:45 - 2012-10-10 21:09 - 00000000 ____D () C:\Users\Alfred\AppData\Local\Apps\2.0 2014-08-23 22:51 - 2014-08-23 22:51 - 00000000 ____D () C:\Users\Alfred\AppData\Local\Figerty_Systems_Inc 2014-08-23 04:07 - 2014-08-29 08:59 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2014-08-23 03:45 - 2014-08-29 08:59 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2014-08-23 02:59 - 2014-08-29 08:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2014-08-22 11:28 - 2013-10-04 11:16 - 00000000 ____D () C:\Users\Alfred\Downloads\OPENZIP 2014-08-22 10:29 - 2011-01-01 14:46 - 00000000 ____D () C:\Users\Alfred\AppData\Local\World_of_AI 2014-08-22 10:25 - 2014-08-22 10:25 - 00000000 ____D () C:\Users\Alfred\Documents\0.SSD Benchmark FSX F zustand 2014-08-22 09:55 - 2014-08-22 09:55 - 00286305 _____ () C:\Users\Alfred\Downloads\AS_SSD17_Benchmark.zip 2014-08-22 09:04 - 2014-05-07 09:05 - 00000000 ____D () C:\ProgramData\Package Cache 2014-08-22 09:02 - 2014-08-22 09:02 - 00001103 _____ () C:\Users\Public\Desktop\Avira.lnk 2014-08-22 09:02 - 2014-06-24 15:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira 2014-08-22 09:02 - 2014-06-24 15:48 - 00000000 ____D () C:\Program Files (x86)\Avira 2014-08-20 19:00 - 2014-08-20 19:00 - 00001195 _____ () C:\Users\Alfred\Desktop\FS Water Configurator.exe - Verknüpfung.lnk 2014-08-20 12:16 - 2014-08-20 12:16 - 00001786 _____ () C:\Users\Alfred\Desktop\Google Earth - Verknüpfung.lnk 2014-08-20 10:45 - 2010-06-25 22:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SimMarket 2014-08-20 10:43 - 2013-07-30 20:26 - 00000000 ____D () C:\ProgramData\InstallMate 2014-08-18 21:22 - 2014-06-02 15:41 - 00000000 ____D () C:\ProgramData\Oracle 2014-08-18 21:11 - 2014-08-18 21:11 - 00004286 _____ () C:\Windows\SysWOW64\jupdate-1.7.0_67-b01.log 2014-08-18 21:11 - 2014-08-18 21:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2014-08-18 21:11 - 2010-08-26 10:16 - 00000000 ____D () C:\Program Files (x86)\Java 2014-08-15 22:46 - 2014-08-15 22:46 - 00000000 ____D () C:\Users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dornier Do328 SkyWork Airlines 2014-08-15 22:46 - 2014-08-15 22:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dornier Do328 SkyWork Airlines 2014-08-15 22:17 - 2014-07-13 13:57 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2014-08-15 15:54 - 2010-07-28 14:57 - 00000000 ____D () C:\Users\Alfred\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FeelThere 2014-08-15 09:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions 2014-08-15 09:07 - 2013-08-16 11:41 - 00000000 ____D () C:\Windows\system32\MRT 2014-08-15 09:05 - 2010-06-01 14:10 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2014-08-15 09:00 - 2014-05-06 08:58 - 00000000 ___SD () C:\Windows\system32\CompatTel 2014-08-10 11:44 - 2014-08-10 11:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ant's Airplanes 2014-08-08 23:09 - 2014-08-08 22:55 - 43405296 _____ () C:\Users\Alfred\Downloads\Tu104Tu124-1.zip 2014-08-08 20:40 - 2014-05-01 21:14 - 00056206 _____ () C:\Windows\DPINST.LOG 2014-08-08 20:39 - 2014-08-08 20:39 - 00000000 ____D () C:\Program Files\Western Digital 2014-08-08 20:39 - 2014-05-01 21:15 - 00000000 ____D () C:\Program Files\Common Files\Western Digital 2014-08-08 20:39 - 2014-05-01 21:14 - 00000000 ____D () C:\ProgramData\Western Digital 2014-08-08 20:39 - 2014-05-01 21:14 - 00000000 ____D () C:\Program Files (x86)\Western Digital 2014-08-07 04:06 - 2014-08-15 08:56 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll 2014-08-07 04:01 - 2014-08-15 08:56 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2014-08-06 12:09 - 2014-08-06 12:09 - 00001226 _____ () C:\Users\Alfred\Desktop\1.FSX F - Verknüpfung.lnk 2014-08-03 13:02 - 2010-06-27 22:10 - 00000000 ____D () C:\Program Files (x86)\Benchmarks Files to move or delete: ==================== C:\Users\Alfred\Aerosoft_FlorenceX.reg C:\Users\Alfred\Cloud9_Xcity Rome.reg C:\Users\Alfred\FSDreamTeam_Geneva.reg C:\Users\Alfred\FSDreamTeam_Hawaiian Airports Volume 2.reg C:\Users\Alfred\FSDreamTeam_Honolulu.reg C:\Users\Alfred\FSDreamTeam_ZurichX.reg Some content of TEMP: ==================== C:\Users\Alfred\AppData\Local\Temp\avgnt.exe C:\Users\Alfred\AppData\Local\Temp\Foxit Reader Updater.exe C:\Users\Alfred\AppData\Local\Temp\vlc-2.1.5-win64.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-08-27 08:20 ==================== End Of Log ============================ Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-08-2014 02 Ran by Alfred at 2014-09-01 16:49:11 Running from C:\Users\Alfred\Downloads Boot Mode: Normal ========================================================== ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859} AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 1.01 (HKLM-x32\...\MILVIZ F-15E Strike Eagle_is1) (Version: - ) 1011 Captain (Base Pack) 1.2 (HKLM-x32\...\l112) (Version: 1.2.00 - © 1999-2014 Captain Sim) 3U2 Johnson Creek Airport (HKLM-x32\...\{BF86D88F-604B-4F86-8AE6-302E8F0B2B8C}) (Version: 1.0 - Orion Lyau) 737 Captain (737-100 Expansion Model) 1.5 (HKLM-x32\...\e731) (Version: 1.5.00 - © 1999-2012 Captain Sim) 737 Captain (737-100 Exterior Model) 0.2 (HKLM-x32\...\x730) (Version: 0.2.00 - © 1999-2011 Captain Sim) 777 Captain (777-200 Exterior Model) 0.1 (HKLM-x32\...\x770) (Version: 0.1.00 - © 1999-2011 Captain Sim) A2A Accu-Sim P-51 (HKLM-x32\...\A2A Accu-Sim P-51) (Version: - ) A2A Wings of POWER 3 P-51 (HKLM-x32\...\A2A Wings of POWER 3 P-51) (Version: - ) Accu-Feel (HKLM-x32\...\Accu-Feel) (Version: - ) Acronis Drive Monitor (HKLM-x32\...\{706AE61D-40A4-4F50-8359-FE8F6F7FA461}) (Version: 1.0.187 - Acronis) Adisutjipto scenery (HKLM-x32\...\Adisutjipto scenery) (Version: - ) Adobe Flash Player 14 ActiveX (HKLM-x32\...\{C4B95D2E-BDE6-412D-AF7B-EC43A298C55B}) (Version: 14.0.0.145 - Adobe Systems Incorporated) Adobe Flash Player 14 Plugin (HKLM-x32\...\{3FC9A6DE-C105-4576-8F63-656FFB1BF8EB}) (Version: 14.0.0.145 - Adobe Systems Incorporated) Adobe Photoshop 7.0 (HKLM-x32\...\Adobe Photoshop 7.0) (Version: 7.0 - Adobe Systems, Inc.) Adobe Reader XI (11.0.08) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated) aerofly FS (HKLM-x32\...\aerofly FS_is1) (Version: 1.2.0.5 - IPACS) Aerosoft's - Aerosoft Launcher (HKLM-x32\...\{EE11CFFC-898C-4875-8A63-8B732A9AD43B}) (Version: 1.1.0.1 - Aerosoft) aerosoft's - Approaching Innsbruck X (HKLM-x32\...\{70864384-DD19-44CB-A999-A917F32F623D}) (Version: 1.20 - aerosoft) Aerosoft's - DHC-6 Twin Otter X (HKLM-x32\...\{3A8DED06-80E7-4555-AA1F-FF4A2A4D353C}) (Version: 1.10 - Aerosoft) Aerosoft's - Dornier Do-27 FSX (HKLM-x32\...\{5492C4FC-E430-453D-BF88-EAE9BEB24F45}) (Version: 1.00 - Aerosoft) Aerosoft's - Dornier Do-27 FSX (HKLM-x32\...\{D09329F8-D7B9-4BCA-AF4C-156819409CFB}) (Version: 1.00 - Aerosoft) Aerosoft's - F-16 Fighting Falcon - Mission Pack (HKLM-x32\...\{1CC73264-BA0F-4E79-9424-6F93C1BA9DE1}) (Version: 1.00 - Aerosoft) aerosoft's - Faro X (HKLM-x32\...\{FA9455D9-4ABC-48CF-8FC6-4FDA30F6AACD}) (Version: 1.01 - aerosoft) Aerosoft's - FlorenceX (HKLM-x32\...\{E764BA22-C1F3-4770-94E3-FB4948786248}) (Version: 1.04 - Aerosoft) aerosoft's - German Airports 1 - Friedrichshafen (HKLM-x32\...\{AAACB3CD-CE8F-4007-871F-EACF75635817}) (Version: 1.01 - aerosoft) Aerosoft's - German Airports 1 - Friedrichshafen X (HKLM-x32\...\{411B6A8F-0088-496D-8A0A-1319BB825D7C}) (Version: 1.01 - Aerosoft) aerosoft's - German Airports 2 - Dortmund X (HKLM-x32\...\{A298A7A7-3BD2-42EE-B48C-12C97A9BBF08}) (Version: 1.00 - aerosoft) aerosoft's - German Airports 2-Hannover X (HKLM-x32\...\{AF209F10-BD3A-4AA7-A485-845508D6C672}) (Version: 1.00 - aerosoft) aerosoft's - German Airports 2-Leipzig X (HKLM-x32\...\{26B7F336-1369-49D6-8E4C-DC2C7BD65647}) (Version: 1.00 - aerosoft) aerosoft's - German Airports 3 - Berlin-Tegel X (HKLM-x32\...\{3DAD565E-1275-4EE8-9568-932CB7B75FB8}) (Version: 1.00 - aerosoft) aerosoft's - German Airports 3 - Bremen X (HKLM-x32\...\{C1F98ADD-81BF-45E1-A36B-515CA20B61AF}) (Version: 1.00 - aerosoft) aerosoft's - German Airports 3 - Hamburg X (HKLM-x32\...\{EA6E7823-9E5B-4EDD-9750-C3C87FDF0460}) (Version: 1.00 - aerosoft) Aerosoft's - Hawaii Dillingham X (HKLM-x32\...\{A0663B00-3376-42C1-B719-995B9CB44DEF}) (Version: 1.00 - Aerosoft) Aerosoft's - HUGHES H-1B SPECIAL (HKLM-x32\...\{B62D5AE6-6A13-4CA6-A402-9827ACB0822C}) (Version: 1.00 - Aerosoft) Aerosoft's - Keflavik X (HKLM-x32\...\{0F6047EC-36A9-4735-840F-2BAA134D4B94}) (Version: 1.00 - Aerosoft) aerosoft's - London City Airport X (HKLM-x32\...\{64996B10-0B55-4625-A124-551CB65F09CE}) (Version: 1.00 - aerosoft) aerosoft's - Lukla X - Mount Everest (HKLM-x32\...\{EF32F291-8B08-43EF-8BAA-58B9F8C9540F}) (Version: 1.00 - aerosoft) aerosoft's - Madeira X (HKLM-x32\...\{17440258-DB48-49DE-8391-79900477490C}) (Version: 1.00 - aerosoft) aerosoft's - Mallorca X for FSX (HKLM-x32\...\{07CC448E-4FFC-444F-999D-10F11AE559FB}) (Version: 1.00 - aerosoft) Aerosoft's - Manhattan X (HKLM-x32\...\{6ED3756D-BA23-4938-94F9-7C2BFC9B86FC}) (Version: 1.00 - Aerosoft) Aerosoft's - Mega Airport Budapest (HKLM-x32\...\{AD6C554F-5050-40B1-B84D-51D74A09C7E4}) (Version: 1.50 - Aerosoft) aerosoft's - Mega Airport Frankfurt X (HKLM-x32\...\{BAEE0C24-C8C2-4820-9DF4-887909F1A286}) (Version: 1.01 - aerosoft) aerosoft's - Mega Airport Lisbon X (HKLM-x32\...\{DAA73076-84A5-4141-A630-79380E48C9D0}) (Version: 1.10 - aerosoft) aerosoft's - Mega Airport Madrid Barajas (HKLM-x32\...\{8233F99B-C4C2-44E9-8486-374E9B300BF2}) (Version: 1.00 - aerosoft) aerosoft's - Mega Airport Paris CDG X (HKLM-x32\...\{0F5E7FC8-3D49-47DA-9A51-6A8B4BE393B0}) (Version: 1.00 - aerosoft) aerosoft's - Mega Airport Stockholm Arlanda (HKLM-x32\...\{D86B6E8D-F224-4BB6-B959-C8EDC5300B5D}) (Version: 1.10 - aerosoft) aerosoft's - Mega Airport Stockholm Arlanda X (HKLM-x32\...\{3B6F6E35-900C-4FE3-B2F6-067443353CD1}) (Version: 1.00 - aerosoft) aerosoft's - Mega Airport Zurich 2012 - FS2004 (HKLM-x32\...\{825C5E8E-04E6-4308-9043-A656B2C01577}) (Version: 1.00 - aerosoft) Aerosoft's - Mega Airport Zurich 2012 - FSX (HKLM-x32\...\{463A571A-B793-459B-BEA8-028DC323AAB0}) (Version: 1.01 - Aerosoft) aerosoft's - Menorca X for FSX (HKLM-x32\...\{5BD1BBB6-DC09-420F-B459-DD61DD351541}) (Version: 1.00 - aerosoft) aerosoft's - Mission Legacy 1 - FSX (HKLM-x32\...\{81E54B03-CF96-481E-9798-8A06E31ABEDF}) (Version: - ) Aerosoft's - MonacoX (HKLM-x32\...\{B56D25A0-1316-4255-AB45-1147C9D01C5E}) (Version: 1.01 - Aerosoft) Aerosoft's - MyTraffic 2010 (HKLM-x32\...\{37F50C53-EDED-4FFE-9877-532A335C5C18}) (Version: 6.00 - Aerosoft) aerosoft's - Nice Cote dAzur X (HKLM-x32\...\{90447E05-DE8E-470D-8D3E-C871D2AE74AF}) (Version: 1.00 - aerosoft) Aerosoft's - PBY Catalina X (HKLM-x32\...\{00606438-902C-4280-84DD-E665911DFBE1}) (Version: 1.00 - Aerosoft) Aerosoft's - Piper Cheyenne FSX (HKLM-x32\...\{8F00580B-19EC-4709-896D-D21E542630DD}) (Version: 4.00 - Aerosoft) aerosoft's - Real Germany 1 - FS2004 (HKLM-x32\...\{2F6E1E46-2EC9-4547-B56A-720E97E3A9C1}-FS2004) (Version: - ) aerosoft's - Real Germany 3 - FS2004 (HKLM-x32\...\{74501968-B32C-42EE-8E28-AEDBDEFFB92F}-FS2004) (Version: - ) Aerosoft's - Robin DR400 X - FSX (HKLM-x32\...\Robin DR400 X - FSX) (Version: - ) aerosoft's - Santorini X (HKLM-x32\...\{62B7012A-D02C-4981-9D37-634DF40E9578}) (Version: 1.00 - aerosoft) aerosoft's - USCitiesX - Chicago (HKLM-x32\...\{A9FF3B7B-F4BC-4F74-AF6B-BC4925682D3D}) (Version: 1.00 - aerosoft) aerosoft's - USCitiesX - Indianapolis (HKLM-x32\...\{6F99B229-CE71-4A8A-8359-0517191A8A89}) (Version: 1.00 - aerosoft) aerosoft's - USCitiesX - Los Angeles (HKLM-x32\...\{01BC99D4-671C-4C98-AC99-891FBAA0D870}) (Version: 1.00 - aerosoft) aerosoft's - USCitiesX - New Orleans (HKLM-x32\...\{BB677B2C-4069-4B4F-9227-2E7FD5F6A596}) (Version: 1.00 - aerosoft) aerosoft's - USCitiesX - San Francisco (HKLM-x32\...\{DF91C497-0315-43F9-BB85-24D82FE5B11A}) (Version: 1.00 - aerosoft) aerosoft's - Venice X (HKLM-x32\...\{74F493A2-1264-4BF2-A135-0184C68BD580}) (Version: 1.00 - aerosoft) Aerosoft's - VFR Germany 2 (HKLM-x32\...\{3BB7B4D3-C534-4700-AA1B-B01A8EA5F27C}) (Version: 1.00 - Aerosoft) Aerosoft's - VFR Germany 2010 West (HKLM-x32\...\{7E34E4DF-26FA-46D0-BC0F-77CE6CF4CBC5}) (Version: 2.00 - Aerosoft) Aerosoft's - VFR Germany 3 (HKLM-x32\...\{61C6337D-EDF5-43F0-9E50-541A389070BD}) (Version: 1.00 - Aerosoft) Aerosoft's - VFR Germany 4 (HKLM-x32\...\{F7016342-C196-44B1-AAC5-D7BA4708473E}) (Version: 1.00 - Aerosoft) aerosoft's - VFR London X (HKLM-x32\...\{C1002665-A1DD-4764-AEDC-0769E09FAA4D}) (Version: 1.00 - aerosoft) aerosoft's - Wonderful Madeira - FS2004 (HKLM-x32\...\{A7B4ACF2-5A81-44F4-8253-9211A3B8AFA8}-FS2004) (Version: - ) Aeroworx Super King Air B200 (HKLM-x32\...\Aeroworx Super King Air B200) (Version: - ) Afghanistan - Noshaq (Highest Mountains Package 004) for MSFS 2004 (HKLM-x32\...\Afghanistan - Noshaq (Highest Mountains Package 004) for MSFS 2004) (Version: - ) Aircraft Factory F4u Corsair (HKLM-x32\...\Aircraft Factory F4u Corsair) (Version: - ) ALABEO Pitts S-2S (HKLM-x32\...\ALABEO Pitts S-2S) (Version: 1.00.00.00 - ALABEO) Atolls of Tuvalu FSX (HKLM-x32\...\AtollsofTuvalu_is1) (Version: - SimMarket) Autogen Trees Update (HKLM-x32\...\{DF826305-AF8E-11D7-AFD3-0080AD30B67D}) (Version: - ) Avira (HKLM-x32\...\{e67154a7-9cc5-4167-b782-f3982bc6c70d}) (Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG) Avira (x32 Version: 1.1.19.30000 - Avira Operations GmbH & Co. KG) Hidden Avira Free Antivirus (HKLM-x32\...\Avira AntiVir Desktop) (Version: 14.0.6.570 - Avira) B-25J "Briefing Time" for FSX (HKLM-x32\...\B-25J "Briefing Time" for FSX) (Version: - ) Barre des Ecrins Photoreal plus mesh FSX & P3D (HKLM\...\{28008801-3417-46AE-9CBF-444E0DA0B010}) (Version: 1 - Frank Dainese and Rikoooo) Beech B60 Duke Rip (HKLM-x32\...\Beech B60 Duke Rip) (Version: - ) Boeing 727-200 Advanced FSX SP2 (HKLM\...\{466DF2BF-8EEF-4688-A9D0-762A0F90DC00}) (Version: - Thomas Ruth) Boeing 787-8 DreamLiner FSX & P3D (HKLM\...\{E8BA7416-97C5-48D3-9E9D-4FFEC30FE75C}) (Version: 4 - TDS, Alejandro Rojas Lucena, repack by Rikoooo) Boeing B737-823 Advanced VC FSX & P3D (HKLM\...\{330F6375-B0DB-4CDD-B1EB-B83C43810D11}) (Version: 1 - Project OpenSky, Alejandro Rojas Lucenda, FSRepaintsGER, Adam Murphy) Boise X - Patch V1.2 (HKLM-x32\...\Boise X - Patch V1.2) (Version: - ) BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden C90B King Air HD SERIES FSX (HKLM-x32\...\C90B King Air HD SERIES FSX) (Version: 1.00.00.00 - Carenado) Captain Sim 707 All-in-One (HKLM-x32\...\{0906F438-9315-477C-9DBB-4A3050699810}) (Version: 1.00 - SilverWingz) Carenado Baron 58 FSX (HKLM-x32\...\Carenado Baron 58 FSX) (Version: 1.00.00.00 - Carenado) Carenado C340 II FSX (HKLM-x32\...\Carenado C340 II FSX) (Version: 1.00.00.00 - Carenado) Carenado F33A Bonanza (HKLM-x32\...\Carenado F33A Bonanza) (Version: 1.00.00.00 - Carenado) Carenado V35B Bonanza for FSX (HKCU\...\Carenado V35B Bonanza for FSX) (Version: - ) Cliqz (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 0.5.10 - Cliqz.com) CLOUD9 Bergen FSX 1.01 (HKLM-x32\...\{A28B5F9A-3AD0-4CB5-AB72-ADF062FD956E}) (Version: 1.01 - ) CLOUD9 Orlando FSX 1.01 (HKLM-x32\...\{FED35768-B947-44EB-92CC-A17D24B8439A}) (Version: 1.01 - ) CLOUD9 Pisa 1.00 (HKLM-x32\...\{52683907-B1CA-44D4-9876-8CE10A78C4DA}) (Version: 1.00 - ) CLOUD9 Xcity Rome 1.01 (HKLM-x32\...\{725EDA28-668D-4E12-AEAA-96CEB5261D0F}) (Version: 1.01 - ) Commonwealth of Dominica FSX & P3D (HKLM\...\{983E1DE6-D272-40EF-9E3B-BFF4ED67E0FB}) (Version: 1 - Zev C. Richards) D4300 (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden Data Lifeguard Diagnostic for Windows 1.24 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version: - Western Digital Corporation) DC-2 for FSX (HKCU\...\DC-2 for FSX) (Version: - ) DeviceDiscovery (x32 Version: 130.0.465.000 - Hewlett-Packard) Hidden DiaporamaWeb (HKLM-x32\...\DiaporamaWeb) (Version: - ) DJ_SF_03_D4300_Software_Min (x32 Version: 130.0.365.000 - Hewlett-Packard) Hidden Dornier Do328 SkyWork Airlines (HKLM-x32\...\Dornier Do328 SkyWork Airlines) (Version: - ) Dortmund City (HKLM-x32\...\{4DB2D518-0264-4910-A8DE-1754EE5E3BCC}) (Version: 3.0 - Bahrometrix) Eaglesoft Development Group Citation X 2.0 FSX (HKCU\...\Eaglesoft Development Group Citation X 2.0 FSX) (Version: - ) EasyJet Fleet FSX & P3D (HKLM\...\{31198E95-D05B-4689-AA70-715ED7170F9A}) (Version: 1 - Multiples authors) Elba (HKLM-x32\...\Elba) (Version: - ) EtendardIV Texture Pack (HKCU\...\EtendardIV Texture Pack ) (Version: - ) F9F Panther (HKLM-x32\...\F9F Panther) (Version: - ) Fiji Photoreal Package Western FSX & P3D (HKLM\...\{DC17D3A5-1F2A-47F2-8FDD-6F5550C6030E}) (Version: 1 - Tiberius Kowalski) Flight Méditerranée Autogen Pack v1.0 (HKCU\...\Flight Méditerranée Autogen Pack v1.0) (Version: - ) Flight One Software Pilatus PC-12 fsx (HKLM-x32\...\pc12_FSX) (Version: - ) Flight Simulator X (HKLM-x32\...\RTMshadow_{7D606567-5047-451A-B49E-29FCB6012B4E}) (Version: - ) Flight Simulator X Service Pack 1 (HKLM-x32\...\SP1shadow_{7D606567-5047-451A-B49E-29FCB6012B4E}) (Version: - ) Flight1 Citation Mustang (HKLM-x32\...\f1mustang_FSX) (Version: 1.02b - Flight One Software) FlightAlpes Nord AutogenPack (HKCU\...\FlightAlpes Nord AutogenPack) (Version: - ) FlightParis AutogenPack (HKLM-x32\...\FlightParis AutogenPack) (Version: - ) FlyLogic's - Altenrhein X (HKLM-x32\...\{E5326C48-869C-43C0-A78E-B531CCFF066B}) (Version: 1.00 - FlyLogic) FlyLogic's - Bern-Belp X (HKLM-x32\...\{930945C3-064B-4ACD-A004-436A4783FCD9}) (Version: 1.00 - FlyLogic) FlyLogic's - Grenchen FSX (HKLM-x32\...\{E2EC91FE-9353-44F7-B177-EBE78ADF85E0}) (Version: 1.00 - FlyLogic) FlyLogic's - Kleinflugplätze Schweiz Teil 4 X (HKLM-x32\...\{6F7A63AC-1109-4E10-96C8-7BC9AD57E81A}) (Version: 1.00 - FlyLogic) FlyLogic's - Lugano X (HKLM-x32\...\{AD7B435D-C7CB-46A4-9D8B-4F54520C7633}) (Version: 1.00 - FlyLogic) FlyLogic's - Patrouille Suisse X (HKLM-x32\...\{B1E94F7F-ECDC-4799-9EAE-312459D6B9AC}) (Version: 1.00 - FlyLogic) Fouga Magister CM170 v1.1 FSX (HKLM\...\{1A54D7A8-2DBC-4207-A0C0-47B240BB0A90}) (Version: - Andre Chancel (Restauravia.com)) Fouga Zephyr (HKCU\...\Fouga Zephyr) (Version: - ) Foxit Cloud (HKLM-x32\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 1.5.129.617 - Foxit Corporation) Foxit Creator (HKLM-x32\...\Foxit Creator) (Version: 3,0,2,0506 - Foxit Corporation) Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 6.2.1.618 - Foxit Corporation) FranceVFR FlightAlpes Sud: AutogenPack (HKLM-x32\...\FranceVFR FlightAlpes Sud: AutogenPack) (Version: - ) FranceVFR FlightMeditarranee Autogen Pack v0.90 (HKCU\...\FranceVFR FlightMeditarranee Autogen Pack v0.90) (Version: - ) Fraps (HKLM-x32\...\Fraps) (Version: - ) Free Download Manager 3.9.2 (HKLM-x32\...\Free Download Manager_is1) (Version: - FreeDownloadManager.ORG) FRP 2004 (HKLM-x32\...\FRP 2004) (Version: - ) FS Dreamscapes Monument Valley Vista+ Beta 002 (HKCU\...\FS Dreamscapes Monument Valley Vista+ Beta 002) (Version: - ) FS Global 2010 (HKLM-x32\...\FS Global 2010) (Version: - ) FS Global Ultimate - Asia/Oceania (HKLM-x32\...\FS Global Ultimate - Asia/Oceania) (Version: - ) FS Water Configurator 3.15 (HKLM\...\FS Water Configurator) (Version: - ) FS2004 Hawker Siddeley HS.748 (HKLM-x32\...\FS2004 Hawker Siddeley HS.748) (Version: - ) FS2004 Hawker Siddeley HS.748 Texture pack 1 (HKLM-x32\...\FS2004 Hawker Siddeley HS.748 Texture pack 1) (Version: - ) FS2004 Hawker Siddeley HS.748 Texture Pack 2 (HKLM-x32\...\FS2004 Hawker Siddeley HS.748 Texture Pack 2) (Version: - ) FSDreamTeam Geneva FSX/P3D 1.5.2 (HKLM-x32\...\FSDreamTeam Geneva FSX/P3D_is1) (Version: - ) FSDreamTeam Hawaiian Airports Volume 2 FSX/P3D 1.4 (HKLM-x32\...\FSDreamTeam Hawaiian Airports Volume 2 FSX/P3D_is1) (Version: - ) FSDreamTeam Honolulu International FSX/P3D 1.2 (HKLM-x32\...\FSDreamTeam Honolulu International FSX/P3D_is1) (Version: - ) FSFlyingSchool 2010 (HKLM-x32\...\FSFlyingSchool 2010) (Version: - ) fs-freeware.net Installer - Boeing 737NG 700, 800 and 900 UAL Package version 2.5 (HKLM-x32\...\{1C7714DF-2DDD-41BD-9585-5C96173436A4}_is1) (Version: 2.5 - fs-freeware.net) FSND Boeing 727-200 FSX (HKLM\...\{8A784417-E922-42E9-B076-CA87B86035A7}) (Version: FSX - Alejandro Rojas Lucena) FSTramp for FSX (HKLM-x32\...\{0B3EAF6B-BBF1-45EF-B4DA-D16DC7574507}_is1) (Version: 5.2.0 - Team FSTramp) FSX737 (HKCU\...\e9badd42bc7b9ff1) (Version: 1.0.0.0 - FSX737) FSXPilot V 1.44 (HKCU\...\FSXPilot V 1.44) (Version: - ) GayaN™ Airbus A340-300 (HKCU\...\GayaN™ Airbus A340-300) (Version: - ) Gibraltar X 1.00 (HKLM-x32\...\Gibraltar X 1.00) (Version: - ) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.102 - Google Inc.) Google Earth Plug-in (HKLM-x32\...\{79361740-EAE3-11E2-9911-B8AC6F98CCE3}) (Version: 7.1.1.1888 - Google) Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden Grand Canyon - Photorealistic Scenery (HKLM-x32\...\Grand Canyon - Photorealistic Scenery) (Version: - ) Greatest Airliners: 727 (HKLM-x32\...\F1DF727) (Version: - Flight One Software) Ground Environment X Atlantic and Pacific Tropics (HKLM-x32\...\Ground Environment X Atlantic and Pacific Tropics1.0) (Version: 1.0 - Flight One Software) Ground Environment X Europe (HKLM-x32\...\Ground Environment X Europe) (Version: - ) Ground Environment X North America (HKLM-x32\...\Ground Environment X North America) (Version: - ) Hamburg-City Scenery (HKLM-x32\...\Hamburg-City Scenery ) (Version: - ) Hawaii Photoreal Vol 1 FSX & P3D (HKLM\...\{6E644BCF-69E1-4CE5-B25B-D34EB52BD070}) (Version: 1 - AveMetal) Hewlett-Packard ACLM.NET v1.1.0.0 (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden HP Deskjet D4300 Printer Driver Software 13.0 Rel. 3 (HKLM\...\{382300D4-777B-4233-A98C-99EA0F6B881F}) (Version: 13.0 - HP) HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP) HP Photosmart Essential 3.5 (HKLM\...\HP Photosmart Essential) (Version: 3.5 - HP) HP Product Detection (HKLM-x32\...\{A436F67F-687E-4736-BD2B-537121A804CF}) (Version: 11.14.0001 - HP) HP Smart Web Printing 4.51 (HKLM\...\HP Smart Web Printing) (Version: 4.51 - HP) HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP) HP Update (HKLM-x32\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard) HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden HPPhotoGadget (x32 Version: 130.0.282.000 - Hewlett-Packard) Hidden HPPhotoSmartDiscLabelContent1 (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden HPPhotosmartEssential (x32 Version: 2.04.0000 - Hewlett-Packard) Hidden HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden Hurricane (HKCU\...\Hurricane) (Version: - ) Image Resizer Powertoy Clone for Windows (64 bit) (HKLM\...\{80A620C1-B22C-4781-A351-B14B8A37BFE3}) (Version: 2.1 - Brice Lambson) Instant Scenery (HKLM-x32\...\instant scenery2) (Version: 2.03 - Flight1 Software) IRIS Mig-29 Fulcrum K Navy FSX (HKLM\...\{2DBEDD2C-D5FA-460A-AAB0-0EF2E8C92749}) (Version: - IRIS FLIGHT SIMULATION SOFTWARE) Java 7 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217060FF}) (Version: 7.0.600 - Oracle) Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) Hidden Just Flight - 757 Jetliner - American Airlines (New) Livery Pack (HKLM-x32\...\{17F122A7-2F9B-4794-91F8-DF0FB253E74F}) (Version: 1.00.000 - Just Flight) Just Flight - 757 Jetliner - Freemium Livery Pack 7 (HKLM-x32\...\{D58F6305-EBC2-4B7D-8E14-299C29032FD2}) (Version: 1.00.000 - Just Flight) Just Flight - 757 Jetliner Freemium (HKLM-x32\...\{B0F7B3B5-E856-4558-BD7C-BDA32943C783}) (Version: 1.00.000 - Just Flight) Just Flight - A320 Jetliner (HKLM-x32\...\{A7908841-C391-4ADC-A847-F83279133052}) (Version: 1.00.0000 - Just Flight) Just Flight MD-81/82 Jetliner (HKLM-x32\...\{6AA6251B-B7C8-40FC-8FB9-DCB9D81BE4C7}) (Version: 1.00.000 - ) Kalaupapa Molokai Compatibility Patch (HKLM-x32\...\Kalaupapa Molokai Compatibility Patch) (Version: - ) KCLE v1.1.2 for FSX (HKLM-x32\...\{C523B4B7-479A-458A-8F00-46AF4E7CCCDA}) (Version: 1.1.2 - BluePrint Simulations) KDAL v1.1.2 for FSX (HKLM-x32\...\{B7FCEA32-5332-492F-9AF1-643CEB784058}) (Version: 1.1.2 - BluePrint Simulations) KLAX v1.1.2 for FSX (HKLM\...\{5B9AE6C1-60A6-483D-8C47-69CA0E995A08}) (Version: 1.1.2 - BluePrint Simulations) KLGA La Guardia FSX (HKLM-x32\...\KLGA La Guardia FSX) (Version: - ) KMCO v1.1.2 for FSX (HKLM\...\{8328FEC4-BC76-40D1-93A2-78B71CC08C43}) (Version: 1.1.2 - BluePrint Simulations) KMEM v1.1.1 for FS9 (HKLM\...\{EF28AF2A-AF4D-4798-82A9-17E1360F3E66}) (Version: 1.1.1 - BluePrint Simulations) KMEM v1.1.2 for FSX (HKLM\...\{03EFC5C9-E507-4A80-A7E4-A67AAE976446}) (Version: 1.1.2 - BluePrint Simulations) KRDU v2.1.2 for FSX (HKLM-x32\...\{364C961B-CAD0-41C9-9A10-24F6552D6F2B}) (Version: 2.1.2 - BluePrint Simulations) L-1011 Captain (1011-1 Exterior Model) 0.1 (HKLM-x32\...\l111) (Version: 0.1.00 - © 1999-2013 Captain Sim) L-39 Albatros Military Trainer Package FSX & P3D (HKLM\...\{9147C850-6F64-49BF-AFEC-E4F6432C4B8E}) (Version: 1 - Mohammad Faali) La Guadeloupe (HKLM-x32\...\La Guadeloupe) (Version: - ) LAGO FS Falcon FS2004 version 2.00 (HKLM-x32\...\{D36165EF-5846-45A6-BD11-F581D183F312}) (Version: 2.00.00 - ) Level-D Simulations 767-300 (HKLM-x32\...\Level-D Simulations 767-300) (Version: - ) LFKL Brindas (HKCU\...\LFKL Brindas) (Version: - ) LFLP (HKCU\...\LFLP) (Version: - ) Liguria 110 (HKLM-x32\...\Liguria 110) (Version: - ) LLH5X (HKLM-x32\...\LLH5X) (Version: - ) Lockheed L-1049H Super Constellation FSX (HKLM\...\{9C5D1F18-A234-4162-BEA8-4C90FF362EA4}) (Version: - Manfred Jahn) Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech) LTU International Airways Fleet FSX & P3D (HKLM\...\{E7319D29-41B2-4B93-93AF-F9C567D79404}) (Version: 1 - Multiples authors, repack by Ricardo_tv, Rikoooo) Mailsoft's - Kleinflugplätze 6 for FS2004 (HKLM-x32\...\{259E2575-D7A6-436E-8AE3-1E4E14F69ABE}) (Version: 1.00 - Mailsoft) Mailsoft's - Kleinflugplätze Schweiz Teil 3 (HKLM-x32\...\{BACA4FE0-B0B9-44A9-BB62-E7377C03A96D}) (Version: 1.00 - Mailsoft) Mailsoft's - Kleinflugplätze Schweiz Teil 3 X (HKLM-x32\...\{6DB56B61-0462-46D7-8E54-7D0782E6113E}) (Version: 1.00 - Mailsoft) Mailsoft's - Kleinflugplätze Schweiz Teil 5 X (HKLM-x32\...\{8AB7326C-8A0C-4368-A8CD-58B6AB7B3895}) (Version: 1.00 - Mailsoft) Mailsoft's - Kleinflugplätze Schweiz Teil 6 X (HKLM-x32\...\{CFA5C901-7687-4259-9A64-072926E043FD}) (Version: 1.00 - Mailsoft) Mailsoft's - Sion X (HKLM-x32\...\{D145DF3E-0DB1-4ABC-90E4-E89BA713B01B}) (Version: 1.00 - Mailsoft) Mailsoft's - Switzerland Professional (HKLM-x32\...\{ACC75B04-81D2-4AF4-9312-C8CF39D23EA8}) (Version: 1.00 - Mailsoft) Mailsoft's - Switzerland Professional X (HKLM-x32\...\{C0E7FAD8-F8AE-4819-AEBF-D92562315EEE}) (Version: 1.00 - Mailsoft) Majestic MJC8Q400 (HKLM-x32\...\MJC8Q400) (Version: - ) Malwarebytes Anti-Malware Version 2.0.2.1012 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.2.1012 - Malwarebytes Corporation) Marshall Islands (HKLM-x32\...\MarshallIslandsPAS_is1) (Version: - PacSim) McDonnell Douglas DC-10 Version 2 FSX & P3D (HKLM\...\{0D9F34DB-535D-4FA2-B622-D03B6F479EBE}) (Version: 1 - Thomas Ruth and Erick Cantu, sounds by Dennis Vormberge) MeatWater FO Altitude Callouts v1.0 (HKLM-x32\...\MeatWater FO Altitude Callouts v1.0) (Version: - ) MegaSceneryX Las Vegas (HKLM-x32\...\MegaSceneryX Las Vegas_is1) (Version: 1 - PC Aviator Inc.) Microsoft .NET Framework 4.5.1 (DEU) (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden Microsoft Antimalware Service DE-DE Language Pack (Version: 3.0.8402.2 - Microsoft Corporation) Hidden Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden Microsoft Flight Simulator X (HKLM-x32\...\{BB2158B2-6A0A-4159-B373-4D8768C80170}) (Version: 1.00.0000 - Microsoft Games) Microsoft Flight Simulator X (x32 Version: 10.0.60905 - Microsoft Game Studios) Hidden Microsoft Flight Simulator X: Acceleration (HKLM-x32\...\FlightSim_{7D606567-5047-451A-B49E-29FCB6012B4E}) (Version: 10.0.61637.0 - Microsoft Game Studios) Microsoft Flight Simulator X: Acceleration (x32 Version: 10.0.61637.0 - Microsoft Game Studios) Hidden Microsoft IntelliPoint 8.0 (HKLM\...\{563F041C-DFDB-437B-A1E8-E141E0906076}) (Version: 8.0.225.0 - Microsoft) Microsoft Security Client DE-DE Language Pack (Version: 2.1.1116.0 - Microsoft Corporation) Hidden Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 (HKLM\...\{EE936C7A-EA40-31D5-9B65-8E3E089C3828}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 (HKLM\...\{8338783A-0968-3B85-AFC7-BAAE0A63DC50}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 (HKLM-x32\...\{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}) (Version: 9.0.30729.5570 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) MiG E-152 M (HKCU\...\MiG E-152 M) (Version: - ) MiG-29 Codename: Fulcrum (HKCU\...\MiG-29 Codename: Fulcrum) (Version: - ) MIRAGE F1 for FSX SP2 or Acceleration (HKCU\...\MIRAGE F1 for FSX SP2 or Acceleration) (Version: - ) Mozilla Firefox 31.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 31.0 (x86 de)) (Version: 31.0 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation) MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation) Mudry Cap-10 (HKCU\...\Mudry Cap-10) (Version: - ) National Airlines B727-200v1 FSX (HKLM-x32\...\National Airlines B727-200v1 FSX) (Version: - ) Nauru International (HKLM-x32\...\Nauru International_is1) (Version: 1.0.0.0 - PacSim) Ni Hao Macau - Macau Intl Airport X (HKLM-x32\...\FSX_THAICREATION_NiHaoMacauIntl_is1) (Version: 1.0.0.1 - SimMarket) NMG Cape Town International 2012 (FSX) (HKLM-x32\...\NMG Cape Town International 2012 (FSX)) (Version: - ) Nord 3202 pour FSX (HKCU\...\Nord 3202 pour FSX) (Version: - ) NVIDIA 3D Vision Treiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 335.23 - NVIDIA Corporation) NVIDIA Grafiktreiber 335.23 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 335.23 - NVIDIA Corporation) NVIDIA Install Application (Version: 2.1002.145.1024 - NVIDIA Corporation) Hidden NVIDIA PhysX (x32 Version: 9.13.0604 - NVIDIA Corporation) Hidden NVIDIA PhysX-Systemsoftware 9.13.0604 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0604 - NVIDIA Corporation) NVIDIA Stereoscopic 3D Driver (x32 Version: 7.17.13.3523 - NVIDIA Corporation) Hidden NVIDIA Systemsteuerung 335.23 (Version: 335.23 - NVIDIA Corporation) Hidden NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation) NVIDIA Update Core (Version: 10.4.0 - NVIDIA Corporation) Hidden OpenOffice 4.0.0 (HKLM-x32\...\{B28DBCBA-60F8-40ED-B35B-F510C327946C}) (Version: 4.00.9702 - Apache Software Foundation) oZone3D.Net FurMark v1.8.2 (HKLM-x32\...\{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1) (Version: - oZone3D.Net) P-3C Orion V3.1 FSX & P3D (HKLM\...\{CE6DA500-D22D-4DDF-BE50-4ECFB65FE06E}) (Version: 1 - Team FS KBT) PA32R SARATOGA SP FSX (HKLM-x32\...\PA32R SARATOGA SP FSX) (Version: 1.00.00.00 - Carenado) PA34 200T SENECA II FSX (HKLM-x32\...\PA34 200T SENECA II FSX) (Version: 1.00.00.00 - Carenado) Paragon Backup & Recovery™ 2012 Free (HKLM-x32\...\{C268B5E1-A5DA-11DF-A289-005056C00008}) (Version: 90.00.0003 - Paragon Software) PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.1 - pdfforge) Phuket International Airport for FSX (HKLM-x32\...\PhuketIntFSX_is1) (Version: 1.0.0.0 - SimMarket) PIC 737 Call 1.0 (HKLM-x32\...\PIC 737 Call) (Version: 1.0 - FeelThere) PMDG BAe JS4100 (HKLM-x32\...\{FB647DBE-2231-405D-AC36-C73246CBE305}) (Version: 1.10.1016 - PMDG Simulations, LLC.) PMDG_MD11_FSX (HKLM-x32\...\{CED6EAB9-9FFD-44B2-939A-D77905AD35F3}) (Version: 1.20.0055 - Precision Manuals Development Group) PMDGMD11X_PW_SR (HKLM-x32\...\{5D2CB37E-DF43-421E-93B1-85D0AF5EB2E3}) (Version: 1.00.0000 - Precision Manuals Development Group) PMDGMD11X_PW_SR2 (HKLM-x32\...\{5B545767-D712-44C3-A894-AC5FA62331BA}) (Version: 1.00.0000 - Precision Manuals Development Group) PNG Bush Flying (HKLM-x32\...\PASPNGBushFlyingX_is1) (Version: 1.0.0.0 - PacSim) POSKY Boeing B737-900 Alaska Airlines FSX (HKLM\...\{707639F3-E47D-4A41-BD3C-3F68B1088B45}) (Version: - POSKY, Kevin McDermott) POSKY Embraer ERJ 145 FSX (HKLM\...\{3DE32671-5023-4304-848A-16E912CA6D11}) (Version: FSX - Project Open Sky) Project Tupolev Tu-154m for MS FS2004 (HKCU\...\Project Tupolev Tu-154m for MS FS2004) (Version: - ) PSS - Boeing 757 Pro. v1.3 (HKLM-x32\...\PSS - Boeing 757 Pro. v1.3) (Version: - ) QualityWings Ultimate 146 Collection FSX (HKLM-x32\...\QualityWings Ultimate 146 Collection FSX) (Version: - ) QuitoX (HKLM-x32\...\QuitoX_is1) (Version: - SimMarket) Real Environment Xtreme (HKLM-x32\...\{4CFCC6FD-AEA2-4208-99A6-45CBF9DFFD82}) (Version: 1.0.2008.1128 - Real Environment Xtreme) Real Environment Xtreme FS2004 (HKLM-x32\...\{46559469-7C15-49F4-BB76-21480BE1BEF4}) (Version: 1.0.8 - Real Environment Simulations) RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden Rennes St-Jacques (HKLM-x32\...\Rennes St-Jacques) (Version: - ) Republic XP-47J Escort Experimental FSX & P3D & FS9 (HKLM\...\{1C8F584F-FD18-4632-99B6-FB7F535BEBB2}) (Version: 1 - Milton Shupe, Tom Falley, Nigel Richards, Damian Radice, Thomas, Jan Visser) Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) SAAB 35 Draken 3.0 (HKLM-x32\...\SAAB 35 Draken 3.0) (Version: - ) SAEZ-SVMI v1.1.2 for FSX (HKLM\...\{39ECE2E2-E2A7-4E92-BF10-D060BBE257B2}) (Version: 1.1.2 - BluePrint Simulations) Samui International Airport for FS2004 (HKLM-x32\...\SamuiInternationalAirport_is1) (Version: - SimMarket) SBD Dauntless FSX (HKCU\...\SBD Dauntless FSX) (Version: - ) SceneryTech Asia Landclass v1.0 (HKLM-x32\...\{F22EE695-4EF1-4188-A209-FD959A494F7B}) (Version: 1.0 - SceneryTech) SceneryTech Indo-Pacific Landclass v1.0 (HKLM-x32\...\{EFF0D84D-C49A-461E-BC21-D6ED8B2C0D5D}) (Version: 1.0 - SceneryTech) SceneryTech North America Landclass v1.4 (HKLM-x32\...\{E91C757A-854C-4057-A67D-7FAE297B2016}) (Version: 1.4 - SceneryTech) SceneryTech South America Landclass v1.0 (HKLM-x32\...\{0DC9C45C-966C-488D-B97E-5C68E161CDCC}) (Version: 1.0 - SceneryTech) Secunia PSI (3.0.0.7011) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.7011 - Secunia) Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP) Sky Simulations DC-9 (HKLM-x32\...\Sky Simulations DC-9) (Version: - ) Smart Data Recovery v4.3 (HKLM-x32\...\Smart Data Recovery_is1) (Version: 4.3 - Smart PC Solutions) SmartWebPrinting (x32 Version: 130.0.457.000 - Hewlett-Packard) Hidden SMS MD-11 Dutch Package FSX & P3D (HKLM\...\{DB534440-33E4-4230-ACD6-12FDF5751424}) (Version: 1 - SMS Overland - Repaint by Stephen Browning ) Soekarno-Hatta airport scenery (HKLM-x32\...\Soekarno-Hatta airport scenery) (Version: - ) Sofia Airport (LBSF) v2.0 (HKLM-x32\...\Sofia Airport (LBSF) v2.0) (Version: - ) SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden Southern California Scenery Enhancements v2.0 (HKLM-x32\...\Southern California Scenery Enhancements v2.0) (Version: - ) SSD Fresh (HKLM-x32\...\SSD Fresh_is1) (Version: 2013 - Abelssoft) Status (x32 Version: 130.0.469.000 - Hewlett-Packard) Hidden Sun Mod (HKLM-x32\...\Sun Mod) (Version: - Nick Needham/Paul Wheeler/Striking Software) SuperFortress 'Mania' - PRE-RELEASE - B-29B (HKLM-x32\...\SuperFortress 'Mania' - PRE-RELEASE - B-29B) (Version: - ) Swordfish X (HKCU\...\Swordfish X) (Version: - ) System Requirements Lab (HKLM-x32\...\SystemRequirementsLab) (Version: - ) TDS Boeing 737-700 AA FSX & P3D (HKLM\...\{E07401D2-F2F3-43A9-A2D4-69CBC4E646EA}) (Version: 1 - TDS, Alejandro Rojas Lucena, repaint by G Catena, repack by Chris Evans) TeamViewer 5 (HKLM-x32\...\TeamViewer 5) (Version: 5.1.13999 - TeamViewer GmbH) Thai Creation - Nepal, Kathmandu VNKT (FSX Portover) (HKLM-x32\...\Thai Creation - Nepal, Kathmandu VNKT (FSX Portover)) (Version: - ) The Real VCBI (HKCU\...\The Real VCBI) (Version: - ) The Very Singapore (HKLM-x32\...\The Very Singapore) (Version: - ) Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden TrayApp (x32 Version: 130.0.422.000 - Hewlett-Packard) Hidden TreeX V2 (HKLM-x32\...\TreeX_is1) (Version: - Aimé Leclercq) True Image 2013 (HKLM-x32\...\{4AA75223-6CBF-46F4-8EE4-7BF0591089F7}Visible) (Version: 16.0.6514 - Acronis) True Image 2013 (x32 Version: 16.0.6514 - Acronis) Hidden TuneUp Utilities Language Pack (de-DE) (x32 Version: 13.0.3000.132 - TuneUp Software) Hidden Tuscany MESH (HKLM-x32\...\Tuscany MESH) (Version: - ) Tuscany v1.1 (HKLM-x32\...\Tuscany v1.1) (Version: - ) Ultimate Alaska X V1.0 (HKCU\...\Ultimate Alaska X V1.0) (Version: - ) UnloadSupport (x32 Version: 11.0.0 - Hewlett-Packard) Hidden Unlocker 1.9.1-x64 (HKLM\...\Unlocker) (Version: 1.9.1 - Cedrick Collomb) USNN Scenery (HKLM-x32\...\USNN Scenery) (Version: - ) VFR Extreeme - Boise X (HKLM-x32\...\VFR Extreeme - Boise X) (Version: - ) VFR Kaui HI01 Taxiway sign fix (HKLM-x32\...\VFR Kaui HI01 Taxiway sign fix) (Version: - ) VFR-Airfields Final Edition (HKLM-x32\...\{F11BD98D-9A2B-4535-A51A-25B0B88EEBFC}) (Version: - ) VFR-Airfields Locarno (HKLM-x32\...\{069A1D97-F8ED-40AA-B6E9-9915F4BC0CC9}) (Version: - ) VFR-Airfields Lugano (HKLM-x32\...\{09FDD417-EB57-4B44-A8C5-FFDDF041D7A1}) (Version: - ) VFR-Airfields Traffic (HKLM-x32\...\{7B94A603-694C-11D8-A9CB-0080AD30B67D}) (Version: - ) VIRTUALI Addon ManagerX FSX (HKLM-x32\...\VIRTUALI Addon ManagerX FSX_is1) (Version: 2.9.0.20 - VIRTUALI Sagl) VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN) VTBS-FSX 2010 1.00 Ver.FSX (HKLM-x32\...\VTBS-FSX 2010 1.00 Ver.FSX) (Version: - ) WD Drive Utilities (HKLM-x32\...\{B2BCCFEC-2623-40E5-9522-DEC488E6B730}) (Version: 1.0.6.3 - Western Digital Technologies, Inc.) WD Quick View (HKLM-x32\...\{57F80E51-A2F3-44AD-BA17-3275B0433165}) (Version: 2.4.2.26 - Western Digital Technologies, Inc.) WD Security (HKLM-x32\...\{8A7B24E8-864E-4794-95C4-17644D0991AA}) (Version: 1.0.6.3 - Western Digital Technologies, Inc.) WD SmartWare (HKLM\...\{2A9937AF-6650-40D6-ADFA-EEB731B908DF}) (Version: 2.4.2.26 - Western Digital Technologies, Inc.) WD SmartWare Installer (HKLM-x32\...\{2d588de7-f4f6-4d6d-8719-32cbb9637e9e}) (Version: 2.4.2.26 - Western Digital Technologies, Inc.) WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden Wings of POWER II: P51 Mustang (HKLM-x32\...\Wings of POWER II: P51 Mustang) (Version: - ) WinPatrol (HKLM\...\{84481A87-2316-4923-8FAB-3BA8CA29323D}) (Version: 30.9.2014.0 - BillP Studios) WinRAR 5.10 Beta 4 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.4 - win.rar GmbH) YS-11 for FSX (HKLM-x32\...\InstallShield_{41975C09-63C4-48A9-B501-D77FA88174BB}) (Version: 1.00.0000 - AeroSim Co.,Ltd.) YS-11 for FSX (x32 Version: 1.00.0000 - AeroSim Co.,Ltd.) Hidden ==================== Custom CLSID (selected items): ========================== (If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.) ==================== Restore Points ========================= 31-08-2014 09:47:44 Installiert Piper Cheyenne FSX 31-08-2014 09:48:31 Installiert Piper Cheyenne FSX ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2014-05-01 21:34 - 00000027 ____N C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (whitelisted) ============= (If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.) Task: {12F488FC-F24C-4CE1-8179-5DBE5F671A6F} - System32\Tasks\{90B71D0C-A26D-47EA-8562-791141A2D196} => F:\FSX\ORBX\Scripts\FTXCentral\FTXCentral.exe Task: {1E89487B-881D-4DC6-80E3-7EFAA756BCC4} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.) Task: {33AD978A-F621-4C3E-B37B-137ABBCA66BF} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe Task: {5674B2E5-B1FF-46A0-9D89-CBEA16E9D43D} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.) Task: {58266234-6549-4EA8-A2CD-FDB39D35478D} - System32\Tasks\{FEAAE5CB-CC56-4C17-9BBD-90FB7BF32AE7} => E:\F gamerPC\FSX\1.FSX DIVERSE FILES\WOAI\WOAI INSTALLER\WOAI INSTALLER unzipped\WOAI Installer.exe Task: {5C2278E2-6A74-466E-AC92-6AEF4E3B18EF} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe Task: {6217D114-77D5-4C52-BFCF-DF39E8BCCE2F} - System32\Tasks\{044B2827-FF37-4CA9-9BFC-3B0AED03929C} => E:\F gamerPC\FSX\1.FSX DIVERSE FILES\WOAI\WOAI Installer.exe Task: {72DA1F02-EEC3-4E61-AD26-418FC57E8858} - System32\Tasks\CheckDriveBackgroundGuard => C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe Task: {735783D6-1E0E-46F1-B8F1-863B49821CEC} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.) Task: {82EF7FE5-2D83-415F-9A94-8CD58491B2C9} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe Task: {8F149B57-D2EC-4C5D-AA38-A6ED0CBB580A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-09] (Adobe Systems Incorporated) Task: {9627C922-1B9B-4EFB-8C7A-919BCA5EDC0B} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup Task: {9A9B5530-46BF-4E8E-A24E-11DE513E0FB2} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe Task: {9B60C4AD-9DA0-4907-A8BF-3E8434E0A04E} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-04-16] (RealNetworks, Inc.) Task: {A34A30DE-F01B-46C4-9D82-20B95A84EDDB} - System32\Tasks\{E118B320-009D-4A25-BF00-2A474247AA2E} => E:\F gamerPC\FSX\1.FSX DIVERSE FILES\WOAI\WOAI Installer.exe Task: {BDA32272-1823-4928-9935-14BAC6A1F738} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-11] (Google Inc.) Task: {C368B004-6099-4FFC-B091-FA1FA1E913E1} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation) Task: {D098F37F-393C-4DD0-ACA2-00096CF7F8CB} - System32\Tasks\{14E8ACFB-E0CC-411A-A771-F01482F8C473} => F:\FSX\ORBX\Scripts\FTXCentral\FTXCentral.exe Task: {D4C49F25-BB96-4783-8ABC-31D510740F97} - System32\Tasks\{3E095D85-DC07-4C02-8946-1CEF64E631C6} => E:\F gamerPC\FSX\1.FSX DIVERSE FILES\WOAI\WOAI Installer.exe Task: {DECBC250-577A-461A-9463-A565B05CF49D} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2010-07-21] (Microsoft Corporation) Task: {E5223509-5072-4856-8EE2-E3FE311DEB9D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2011-04-11] (Google Inc.) Task: {F2779192-8E3D-4E42-A930-D60215482C55} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3691312484-3524702341-236613940-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe Task: {F8B0DF29-BB50-4575-99E2-0D2F737736F9} - System32\Tasks\FRAPS => C:\Program Files (x86)\fraps.exe [2009-11-21] (Beepa P/L) Task: {FA4CEEE6-F259-419A-86B4-73E36E8FA6DD} - System32\Tasks\{00EFEFE2-1944-4C07-9C49-A9C2C400669B} => E:\F gamerPC\FSX\1.FSX DIVERSE FILES\WOAI\WOAI INSTALLER\WOAI INSTALLER unzipped\WOAI Installer.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\CheckDriveBackgroundGuard.job => C:\Program Files (x86)\CheckDrive\CheckDriveBackgroundGuard.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Loaded Modules (whitelisted) ============= 2014-06-02 16:57 - 2014-03-04 15:05 - 00116056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2013-03-27 22:39 - 2013-03-27 22:39 - 00021824 _____ () C:\Program Files (x86)\Acronis\TrueImageHome\x64\ti_managers_proxy_stub.dll 2014-05-25 10:18 - 2014-04-22 20:39 - 00645592 ____N () C:\Program Files (x86)\BillP Studios\WinPatrol\sqlite3.dll 2014-08-27 07:43 - 2014-08-04 14:20 - 00052472 _____ () C:\Users\Alfred\AppData\Local\Temp\avgnt.exe\Avira.OE.ExtApi.dll 2014-08-04 14:20 - 2014-08-04 14:20 - 00139056 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.NativeCore.dll 2014-08-04 14:20 - 2014-08-04 14:20 - 00067832 _____ () C:\Program Files (x86)\Avira\My Avira\Avira.OE.AvConnectorNative.dll 2013-06-29 12:07 - 2013-01-11 03:22 - 03547136 _____ () C:\Program Files (x86)\Free Download Manager\fdmbtsupp.dll 2013-03-27 22:09 - 2013-03-27 22:09 - 00420160 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\ulxmlrpcpp.dll 2013-09-07 10:58 - 2014-07-30 18:18 - 03800688 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll 2013-06-29 12:07 - 2013-01-11 03:17 - 00105984 _____ () C:\Program Files (x86)\Free Download Manager\fdmumsp.dll 2014-05-11 08:59 - 2014-05-11 08:59 - 00284160 _____ () C:\ProgramData\Free Download Manager\Firefox\Extensions\1.6.0.7\components\vmsfdmff30.dll ==================== Alternate Data Streams (whitelisted) ========= (If an entry is included in the fixlist, only the Alternate Data Streams will be removed.) AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 AlternateDataStreams: C:\ProgramData\TEMP:74603393 AlternateDataStreams: C:\ProgramData\TEMP:A1D5C6AA AlternateDataStreams: C:\ProgramData\TEMP:F98C6604 ==================== Safe Mode (whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (whitelisted) ============= (If an entry is included in the fixlist, the default will be restored. None default entries will be removed.) ==================== MSCONFIG/TASK MANAGER disabled items ========= (Currently there is no automatic fix for this section.) MSCONFIG\Services: AdobeARMservice => 2 MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3 MSCONFIG\Services: Apple Mobile Device => 2 MSCONFIG\Services: Bonjour Service => 2 MSCONFIG\Services: bthserv => 3 MSCONFIG\Services: ehRecvr => 3 MSCONFIG\Services: Fax => 3 MSCONFIG\Services: FLEXnet Licensing Service => 3 MSCONFIG\Services: gupdate => 2 MSCONFIG\Services: gupdatem => 3 MSCONFIG\Services: IDriverT => 3 MSCONFIG\Services: iPod Service => 3 MSCONFIG\Services: MozillaMaintenance => 3 MSCONFIG\Services: NAUpdate => 2 MSCONFIG\Services: nvUpdatusService => 2 MSCONFIG\Services: PDF Architect Helper Service => 2 MSCONFIG\Services: PDF Architect Service => 2 MSCONFIG\Services: RealNetworks Downloader Resolver Service => 2 MSCONFIG\Services: Secunia Update Agent => 2 MSCONFIG\Services: StarWindServiceAE => 2 MSCONFIG\Services: TabletInputService => 3 MSCONFIG\Services: TapiSrv => 3 MSCONFIG\Services: TeamViewer5 => 2 MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk => C:\Windows\pss\Adobe Gamma Loader.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\Windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Secunia PSI Tray.lnk => C:\Windows\pss\Secunia PSI Tray.lnk.CommonStartup MSCONFIG\startupfolder: C:^Users^Alfred^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk => C:\Windows\pss\OpenOffice.org 3.2.lnk.Startup MSCONFIG\startupfolder: C:^Users^Alfred^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.4.1.lnk => C:\Windows\pss\OpenOffice.org 3.4.1.lnk.Startup MSCONFIG\startupreg: Acronis Scheduler2 Service => "C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe" MSCONFIG\startupreg: AcronisTibMounterMonitor => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe MSCONFIG\startupreg: adm_tray.exe => C:\Program Files (x86)\Acronis\DriveMonitor\adm_tray.exe MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: AlcoholAutomount => "C:\Program Files (x86)\Alcohol Soft\Alcohol 120\axcmd.exe" /automount MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" MSCONFIG\startupreg: DAEMON Tools Pro Agent => "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun MSCONFIG\startupreg: DivX Download Manager => "C:\Program Files (x86)\DivX\DivX Plus Web Player\DDmService.exe" start MSCONFIG\startupreg: DivXUpdate => "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW MSCONFIG\startupreg: Free Download Manager => "C:\Program Files (x86)\Free Download Manager\fdm.exe" -autorun MSCONFIG\startupreg: HDD Observer => C:\Program Files\HDD Observer\HDD Observer.exe MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe MSCONFIG\startupreg: hpqSRMon => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe MSCONFIG\startupreg: IntelliPoint => "C:\Program Files\Microsoft IntelliPoint\ipoint.exe" MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe" MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime MSCONFIG\startupreg: SearchSettings => "C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe" MSCONFIG\startupreg: SSS12 Browser Monitor => "C:\Program Files (x86)\Steganos Privacy Suite 12\SteganosBrowserMonitor.exe" MSCONFIG\startupreg: SSS12 File Redirection Starter => "C:\Program Files (x86)\Steganos Privacy Suite 12\fredirstarter.exe" MSCONFIG\startupreg: SSS12 HotKeys => "C:\Program Files (x86)\Steganos Privacy Suite 12\SteganosHotKeyService.exe" MSCONFIG\startupreg: Start WingMan Profiler => C:\Program Files\Logitech\Gaming Software\LWEMon.exe /noui MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" MSCONFIG\startupreg: TkBellExe => "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot MSCONFIG\startupreg: TrueImageMonitor.exe => "C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe" MSCONFIG\startupreg: UnlockerAssistant => "C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe" MSCONFIG\startupreg: uTorrent => "C:\Program Files (x86)\uTorrent\uTorrent.exe" MSCONFIG\startupreg: VirtualCloneDrive => "C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (09/01/2014 04:43:41 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: WDBackupEngine.exe, Version: 2.0.0.15, Zeitstempel: 0x53cee30c Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7 Ausnahmecode: 0xc00000fd Fehleroffset: 0x00033df8 ID des fehlerhaften Prozesses: 0xa48 Startzeit der fehlerhaften Anwendung: 0xWDBackupEngine.exe0 Pfad der fehlerhaften Anwendung: WDBackupEngine.exe1 Pfad des fehlerhaften Moduls: WDBackupEngine.exe2 Berichtskennung: WDBackupEngine.exe3 Error: (09/01/2014 04:03:09 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm fsx.exe, Version 10.0.61637.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 11bc Startzeit: 01cfc5ed65a095f0 Endzeit: 10 Anwendungspfad: F:\FSX\fsx.exe Berichts-ID: ada0a024-31e0-11e4-87fd-00241dc7db61 Error: (09/01/2014 04:02:34 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: fsx.exe, Version: 10.0.61637.0, Zeitstempel: 0x46fadb14 Name des fehlerhaften Moduls: kernel32.dll, Version: 6.1.7601.18409, Zeitstempel: 0x53159a85 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00011359 ID des fehlerhaften Prozesses: 0xda4 Startzeit der fehlerhaften Anwendung: 0xfsx.exe0 Pfad der fehlerhaften Anwendung: fsx.exe1 Pfad des fehlerhaften Moduls: fsx.exe2 Berichtskennung: fsx.exe3 Error: (09/01/2014 08:18:37 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: WDBackupEngine.exe, Version: 2.0.0.15, Zeitstempel: 0x53cee30c Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7 Ausnahmecode: 0xc00000fd Fehleroffset: 0x0002defe ID des fehlerhaften Prozesses: 0x754 Startzeit der fehlerhaften Anwendung: 0xWDBackupEngine.exe0 Pfad der fehlerhaften Anwendung: WDBackupEngine.exe1 Pfad des fehlerhaften Moduls: WDBackupEngine.exe2 Berichtskennung: WDBackupEngine.exe3 Error: (09/01/2014 08:15:51 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: WDBackupEngine.exe, Version: 2.0.0.15, Zeitstempel: 0x53cee30c Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7 Ausnahmecode: 0xc00000fd Fehleroffset: 0x0002df0f ID des fehlerhaften Prozesses: 0x14c0 Startzeit der fehlerhaften Anwendung: 0xWDBackupEngine.exe0 Pfad der fehlerhaften Anwendung: WDBackupEngine.exe1 Pfad des fehlerhaften Moduls: WDBackupEngine.exe2 Berichtskennung: WDBackupEngine.exe3 Error: (09/01/2014 08:13:34 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: WDBackupEngine.exe, Version: 2.0.0.15, Zeitstempel: 0x53cee30c Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7 Ausnahmecode: 0xc00000fd Fehleroffset: 0x0002defe ID des fehlerhaften Prozesses: 0x624 Startzeit der fehlerhaften Anwendung: 0xWDBackupEngine.exe0 Pfad der fehlerhaften Anwendung: WDBackupEngine.exe1 Pfad des fehlerhaften Moduls: WDBackupEngine.exe2 Berichtskennung: WDBackupEngine.exe3 Error: (09/01/2014 08:11:42 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: WDBackupEngine.exe, Version: 2.0.0.15, Zeitstempel: 0x53cee30c Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7 Ausnahmecode: 0xc00000fd Fehleroffset: 0x00033c52 ID des fehlerhaften Prozesses: 0xbb0 Startzeit der fehlerhaften Anwendung: 0xWDBackupEngine.exe0 Pfad der fehlerhaften Anwendung: WDBackupEngine.exe1 Pfad des fehlerhaften Moduls: WDBackupEngine.exe2 Berichtskennung: WDBackupEngine.exe3 Error: (09/01/2014 08:09:52 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: WDBackupEngine.exe, Version: 2.0.0.15, Zeitstempel: 0x53cee30c Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7 Ausnahmecode: 0xc00000fd Fehleroffset: 0x0002defe ID des fehlerhaften Prozesses: 0xef8 Startzeit der fehlerhaften Anwendung: 0xWDBackupEngine.exe0 Pfad der fehlerhaften Anwendung: WDBackupEngine.exe1 Pfad des fehlerhaften Moduls: WDBackupEngine.exe2 Berichtskennung: WDBackupEngine.exe3 Error: (09/01/2014 08:08:00 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: WDBackupEngine.exe, Version: 2.0.0.15, Zeitstempel: 0x53cee30c Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7 Ausnahmecode: 0xc00000fd Fehleroffset: 0x0002defe ID des fehlerhaften Prozesses: 0xf24 Startzeit der fehlerhaften Anwendung: 0xWDBackupEngine.exe0 Pfad der fehlerhaften Anwendung: WDBackupEngine.exe1 Pfad des fehlerhaften Moduls: WDBackupEngine.exe2 Berichtskennung: WDBackupEngine.exe3 Error: (09/01/2014 08:05:40 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: WDBackupEngine.exe, Version: 2.0.0.15, Zeitstempel: 0x53cee30c Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7 Ausnahmecode: 0xc00000fd Fehleroffset: 0x0002defe ID des fehlerhaften Prozesses: 0xa44 Startzeit der fehlerhaften Anwendung: 0xWDBackupEngine.exe0 Pfad der fehlerhaften Anwendung: WDBackupEngine.exe1 Pfad des fehlerhaften Moduls: WDBackupEngine.exe2 Berichtskennung: WDBackupEngine.exe3 System errors: ============= Error: (09/01/2014 04:44:04 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "WD Backup" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts. Error: (09/01/2014 04:41:25 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "Gemeinsame Nutzung der Internetverbindung" ist vom Dienst "RAS-Verbindungsverwaltung" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error: (09/01/2014 04:41:21 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Der Dienst "RAS-Verbindungsverwaltung" ist vom Dienst "Telefonie" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058 Error: (09/01/2014 08:18:41 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "WD Backup" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts. Error: (09/01/2014 08:15:55 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "WD Backup" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts. Error: (09/01/2014 08:13:40 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "WD Backup" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts. Error: (09/01/2014 08:11:47 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "WD Backup" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts. Error: (09/01/2014 08:09:57 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "WD Backup" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts. Error: (09/01/2014 08:08:21 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "WD Backup" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts. Error: (09/01/2014 08:06:02 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Der Dienst "WD Backup" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts. Microsoft Office Sessions: ========================= Error: (09/01/2014 04:43:41 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: WDBackupEngine.exe2.0.0.1553cee30cntdll.dll6.1.7601.18247521ea8e7c00000fd00033df8a4801cfc5f2d063423bC:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exeC:\Windows\SysWOW64\ntdll.dll5d0f7050-31e6-11e4-bc5a-00241dc7db61 Error: (09/01/2014 04:03:09 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: fsx.exe10.0.61637.011bc01cfc5ed65a095f010F:\FSX\fsx.exeada0a024-31e0-11e4-87fd-00241dc7db61 Error: (09/01/2014 04:02:34 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: fsx.exe10.0.61637.046fadb14kernel32.dll6.1.7601.1840953159a85c000000500011359da401cfc5e6f9982399F:\FSX\fsx.exeC:\Windows\syswow64\kernel32.dll9eae69ea-31e0-11e4-87fd-00241dc7db61 Error: (09/01/2014 08:18:37 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: WDBackupEngine.exe2.0.0.1553cee30cntdll.dll6.1.7601.18247521ea8e7c00000fd0002defe75401cfc5ac30ad0c3aC:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exeC:\Windows\SysWOW64\ntdll.dllcec6cb5d-319f-11e4-87fd-00241dc7db61 Error: (09/01/2014 08:15:51 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: WDBackupEngine.exe2.0.0.1553cee30cntdll.dll6.1.7601.18247521ea8e7c00000fd0002df0f14c001cfc5abdfc51ac6C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exeC:\Windows\SysWOW64\ntdll.dll6b767931-319f-11e4-87fd-00241dc7db61 Error: (09/01/2014 08:13:34 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: WDBackupEngine.exe2.0.0.1553cee30cntdll.dll6.1.7601.18247521ea8e7c00000fd0002defe62401cfc5ab9c727d00C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exeC:\Windows\SysWOW64\ntdll.dll19fbc815-319f-11e4-87fd-00241dc7db61 Error: (09/01/2014 08:11:42 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: WDBackupEngine.exe2.0.0.1553cee30cntdll.dll6.1.7601.18247521ea8e7c00000fd00033c52bb001cfc5ab5b43439eC:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exeC:\Windows\SysWOW64\ntdll.dlld746a2cd-319e-11e4-87fd-00241dc7db61 Error: (09/01/2014 08:09:52 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: WDBackupEngine.exe2.0.0.1553cee30cntdll.dll6.1.7601.18247521ea8e7c00000fd0002defeef801cfc5ab21e99903C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exeC:\Windows\SysWOW64\ntdll.dll95c1b7e1-319e-11e4-87fd-00241dc7db61 Error: (09/01/2014 08:08:00 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: WDBackupEngine.exe2.0.0.1553cee30cntdll.dll6.1.7601.18247521ea8e7c00000fd0002defef2401cfc5aacfd3d3efC:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exeC:\Windows\SysWOW64\ntdll.dll52e5e78d-319e-11e4-87fd-00241dc7db61 Error: (09/01/2014 08:05:40 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: WDBackupEngine.exe2.0.0.1553cee30cntdll.dll6.1.7601.18247521ea8e7c00000fd0002defea4401cfc5aa73ced743C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exeC:\Windows\SysWOW64\ntdll.dllffce13db-319d-11e4-87fd-00241dc7db61 CodeIntegrity Errors: =================================== Date: 2014-05-25 20:00:47.280 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-25 20:00:47.140 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-25 10:05:26.312 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-25 10:05:26.171 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-25 09:02:13.137 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-25 09:02:12.996 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-24 20:42:23.355 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-24 20:42:23.230 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-24 15:48:00.544 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2014-05-24 15:48:00.419 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\Windows\SysWOW64\mbmiodrvr.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7 CPU 950 @ 3.07GHz Percentage of memory in use: 36% Total physical RAM: 6141.49 MB Available physical RAM: 3884.71 MB Total Pagefile: 12281.16 MB Available Pagefile: 9861.62 MB Total Virtual: 8192 MB Available Virtual: 8191.82 MB ==================== Drives ================================ Drive c: (Volume) (Fixed) (Total:97.66 GB) (Free:13.33 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (Volume) (Fixed) (Total:488.28 GB) (Free:46.95 GB) NTFS Drive e: (Volume) (Fixed) (Total:811.32 GB) (Free:101.92 GB) NTFS Drive f: (Volume) (Fixed) (Total:119.24 GB) (Free:27.96 GB) NTFS Drive h: (AFM_DISK1) (CDROM) (Total:5.27 GB) (Free:0 GB) CDFS Drive i: (TOSHIBA EXT) (Fixed) (Total:1397.26 GB) (Free:39.79 GB) NTFS Drive m: (KINGSTON) (Removable) (Total:14.4 GB) (Free:1.2 GB) FAT32 Drive x: (Volume) (Fixed) (Total:1397.26 GB) (Free:439.2 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 119.2 GB) (Disk ID: 7007A0F9) Partition 1: (Active) - (Size=119.2 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1397.3 GB) (Disk ID: 63C4BC07) Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1397.3 GB) (Disk ID: 4BD0ABA5) Partition 1: (Active) - (Size=97.7 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=488.3 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=811.3 GB) - (Type=07 NTFS) ======================================================== Disk: 3 (MBR Code: Windows 7 or Vista) (Size: 1397.3 GB) (Disk ID: C298BF8D) Partition 1: (Not Active) - (Size=1397.3 GB) - (Type=07 NTFS) ======================================================== Disk: 4 (Size: 14.4 GB) (Disk ID: 4E6F2201) Partition 1: (Active) - (Size=14.4 GB) - (Type=0B) ==================== End Of Log ============================
__________________ Suche nicht das Glueck - lebe es (Buddha) |
|
01.09.2014, 17:57
| #2 | |
| /// the machine /// TB-Ausbilder    | Nach dem Start des tools TFC ereignete sich ein Bluescreen hi,
__________________Zitat:
__________________ |
|
01.09.2014, 20:01
| #3 |
| | Nach dem Start des tools TFC ereignete sich ein Bluescreen Hallo Schrauber,
__________________Vielen Dank fürs prompte Antworten! oh, sehe, dass Du offenbar Deine 1. Antowrt gelöscht hast, habe eben den defogger wieder enabled, wie instruiert. Wie ist das mit dem delfix? Die von Dir nachgefragten japanischen Zeichen stammen, so viel ich mich erinnere, von einer website mit Flugsimulationsthemen, kann es aber nicht belegen. Möglicherweise von hier: FSX ƒŠƒAƒ‹ƒAƒhƒIƒ“ƒVƒŠ[ƒY‡A@YS-11 for FSX Gruss alfred FSX ƒŠƒAƒ‹ƒAƒhƒIƒ“ƒVƒŠ[ƒY‡A@YS-11 for FSX komisch, diese website ist falsch dargestellt worden. Versuche es erneut! nochmals falsch! hier habe ich gegoogelt. Hier müsste es sein: unter FSX aerosim https://www.google.ch/search?q=airsimmer+&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:de  fficial&client=firefox-a&channel=np&source=hp&gfe_rd=cr&ei=ksEEVKiCD6jC8gfdr4Bo#channel=np&q=fsx+namc+aerosim&rls=org.mozilla:defficial
__________________ |
|
02.09.2014, 12:15
| #4 |
| /// the machine /// TB-Ausbilder | Nach dem Start des tools TFC ereignete sich ein Bluescreen ich hab nichts editiert..... TFC ist allgemein gerne mal für einen Bluescreen gut, hat nichts weiter zu bedeuten.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
02.09.2014, 12:18
| #5 |
| | Nach dem Start des tools TFC ereignete sich ein Bluescreen oh, dann habe ich da etwas missverstanden. Wie kommt es aber, dass TFC meldet, "funktioniert nicht mehr"? soll ich weiterhin damit experimentieren, d.h. es weiter versuchen, nochmals das Programm aufstarten?
__________________ Suche nicht das Glueck - lebe es (Buddha) |
|
03.09.2014, 09:52
| #6 |
| /// the machine /// TB-Ausbilder | Nach dem Start des tools TFC ereignete sich ein Bluescreen das bedeutet nur dass das Programm hängt, kommt vor  .Nimm einfach den CCleaner oder so um die Temps zu reinigen.
__________________ --> Nach dem Start des tools TFC ereignete sich ein Bluescreen |
|
03.09.2014, 16:41
| #7 |
| | Nach dem Start des tools TFC ereignete sich ein Bluescreen ok, vielen Dank für den Tipp. Komisch aber, dass sich vorhin erneut ein Bluescreen eingestellt hat, nachdem ich TFC starten wollte. Gruss alfred
__________________ Suche nicht das Glueck - lebe es (Buddha) |
|
04.09.2014, 11:32
| #8 |
| /// the machine /// TB-Ausbilder | Nach dem Start des tools TFC ereignete sich ein Bluescreen TFC hat sowas manchmal auf einigen Rechnern.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
05.09.2014, 06:56
| #10 |
| /// the machine /// TB-Ausbilder | Nach dem Start des tools TFC ereignete sich ein Bluescreen Gern Geschehen
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
|
| Themen zu Nach dem Start des tools TFC ereignete sich ein Bluescreen |
| abelssoft, adware, antivir, antivirus, avira, bluescreen, bonjour, combofix, desktop, firefox, flash player, free download, freemium, helper, home, homepage, iexplore.exe, installation, mozilla, programm, registry, rundll, scan, security, software, super, system, vista, windows |
Linear-Darstellung
