Trojaner-Board
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Unregelmaessige Weiterleitungen im FF Browser (https://www.trojaner-board.de/173829-unregelmaessige-weiterleitungen-ff-browser.html)

Pauli#01 06.12.2015 10:36
Unregelmaessige Weiterleitungen im FF Browser
 
Hallo Spezialisten,
ich habe da ein Problem was ich allein nicht gelöst bekomme.
Ich habe mir letzte diese Woche irgend etwas in meinem FFBrowser eingefangen.
Es wird öfter auf eine andere Seite weitergeleitet.

Folgendes habe ich bereits gemacht:
- Alle Programme deinstalliert die an dem Tag von dem Trojaner installiert wurden deinstalliert.
z.B. Oursurfing, Google? usw. Insgesamt waren es wohl 5 Programme.
- FF und internetexplorer unter Eigenschaften überprüft. Dort stand unter Ziel kein zusätslicher Eintrag drin.
- Dann nach euren Vorgaben Malwarebytes Anti-Malware ausgeführt. Dort wurden einige Pup gefunden.
Habe ich alle entfernen lassen.
- PC Reboot
Problem bestand immer noch
- Nocheinmal Malwarebytes Anti-Malware ausgeführt. Keine Fehler
- AdWCleaner von eure Seite (filepony) heruntergeladen und ausgeführt. Keine Fehler gefunden.
- Junkware Removal Tool geladen und ausgeführt.
- Firefox deinstalliert. inkl der Ordner, auch unter AppData
- Firfox neuinstalliert. Ich werde immer noch auf irgend welche Seiten umgelenkt.
- AD Blocker installiert. Dann waren die weiterleitungen nicht mehr sichtbar. Muss aber manchmal 2 x auf einen Link drücken um weiter zu kommen. In der "Neue Tab" Ansicht sind da immer Seiten hinterlegt, wo ich nie drauf war
- MalewareBytes heruntergeladen und ausgeführt. Keine Fehler.
- Junkware Removal Tool heruntergeladen und ausgeführt. Keine Fehler.

Jetzt weiß ich nicht mehr weiter. Vielleicht könnt ihr mir noch helfen.

Gruß
Klaus
Aktueller FRST von Heute
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-12-2015
durchgeführt von Klaus (Administrator) auf PC-KLAUS (06-12-2015 10:32:26)
Gestartet von C:\Users\Klaus\Downloads\_FRST
Geladene Profile: Klaus (Verfügbare Profile: Klaus)
Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(FUJITSU LIMITED) C:\Program Files\FUJITSU\FUJ02E3\FUJ02E3.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Program Files\Windows Server\Bin\SharedServiceHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
(AxoNet Software GmbH) C:\Program Files\AxoNet Software GmbH\LightsOutClient\LightsOutClientService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(FUJITSU LIMITED) C:\Program Files\FUJITSU\Plugfree NETWORK\PFNService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files\Windows Server\Bin\WSConnectorUpdate.exe
(Microsoft Corporation) C:\Program Files\Windows Server\Bin\LANConfigSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Server\Bin\ProviderRegistryService.exe
(Microsoft Corporation) C:\Program Files\Windows Server\Bin\SharedServiceHost.exe
(Microsoft Corporation) C:\Program Files\Windows Server\Bin\SharedServiceHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(FUJITSU LIMITED) C:\Program Files\FUJITSU\Plugfree NETWORK\PFNetDm.exe
(FUJITSU LIMITED) C:\Program Files\FUJITSU\Plugfree NETWORK\PFNTray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_245.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_245.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1215632 2012-08-17] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-24] (Synaptics Incorporated)
HKLM\...\Run: [Launchpad] => C:\Program Files\Windows Server\Bin\Launchpad.exe [1099360 2013-02-08] (Microsoft Corporation)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [571192 2014-08-14] (Acronis)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-04-09] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508240 2015-08-05] (Adobe Systems Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-10-16] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2015-12-04] (AVAST Software)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [FJ Camera_Monitor] => C:\Program Files (x86)\FJ Camera\monitor_Metro.exe [1724280 2013-10-23] (SunplusIT, Inc.)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5380368 2015-07-20] (Acronis)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [693336 2015-07-19] (Acronis International GmbH)
HKLM-x32\...\Run: [LexwareInfoService] => C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe [196648 2014-09-26] (Haufe-Lexware GmbH & Co. KG)
HKLM-x32\...\Run: [New Value] => C:\Program Files\Division-M\Drive Bender Client\DriveBenderTray.exe [7106160 2015-06-04] (Division-M)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\Run: [RoboForm] => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [110160 2015-10-01] (Siber Systems)
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1403304 2015-10-29] (Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\MountPoints2: {15a2a7ed-4c01-11e4-bedd-c01885ac5883} - "H:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\MountPoints2: {15a2a87e-4c01-11e4-bedd-c01885ac5883} - "H:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\Winlogon: [Shell] C:\WINDOWS\Explorer.exe [2501368 2015-01-28] (Microsoft Corporation) <==== ACHTUNG
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1403304 2015-10-29] (Garmin Ltd. or its subsidiaries)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-12-04] (AVAST Software)
ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)
ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)
ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

AutoConfigURL: [S-1-5-21-2032405694-3072891623-2312475013-1005] => hxxp://unstopp.me/wpad.dat?d64b029a1372c370b518de42bc424f152110607
Tcpip\Parameters: [DhcpNameServer] 192.168.115.254
Tcpip\..\Interfaces\{38053D6A-BF08-4FAA-9952-81D119C8A6E8}: [DhcpNameServer] 192.168.115.254
Tcpip\..\Interfaces\{627AC899-19AE-474B-A2FB-3949C461ED7E}: [DhcpNameServer] 192.168.115.254
Tcpip\..\Interfaces\{BEE4684A-FB88-48C2-BBFC-16F09E5DDE02}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=hp-avast&type=avastbcl
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://de.yahoo.com/?fr=hp-avast&type=avastbcl
SearchScopes: HKLM-x32 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2032405694-3072891623-2312475013-1005 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2032405694-3072891623-2312475013-1005 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2015-10-01] (Siber Systems Inc.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-11-25] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-11-26] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-25] (Oracle Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
BHO-x32: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2015-10-01] (Siber Systems Inc.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-11-25] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-26] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-25] (Oracle Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2015-10-01] (Siber Systems Inc.)
Toolbar: HKLM - Kein Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Keine Datei
Toolbar: HKLM - Kein Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  Keine Datei
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2015-10-01] (Siber Systems Inc.)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
Toolbar: HKU\S-1-5-21-2032405694-3072891623-2312475013-1005 -> &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2015-10-01] (Siber Systems Inc.)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Klaus\AppData\Roaming\Mozilla\Firefox\Profiles\1ordtzn4.default
FF Homepage: google.de
FF Session Restore: -> ist aktiviert.
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll [2015-12-02] ()
FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-25] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-25] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-12-02] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Extension: FireSSH - C:\Users\Klaus\AppData\Roaming\Mozilla\Firefox\Profiles\1ordtzn4.default\extensions\firessh@nightlight.ws [2015-12-02]
FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi
FF Extension: RoboForm Toolbar - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi [2015-10-01]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-04]
FF HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-11-26]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2016448 2015-11-25] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2015-12-04] (AVAST Software)
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252504 2013-09-04] (Broadcom Corporation.)
R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [233328 2012-01-23] (DTS, Inc)
R2 FUJ02E3Service; C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe [80752 2012-07-18] (FUJITSU LIMITED)
S3 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [777744 2015-10-29] (Garmin Ltd. or its subsidiaries)
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2011-08-18] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.) [Datei ist nicht signiert]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-08-27] (Intel Corporation)
S2 initMonitor; C:\Program Files\Windows Server\Bin\SharedServiceHost.exe [30592 2011-03-02] (Microsoft Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 Lexware_Update_Service; C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe [64552 2014-11-06] (Haufe-Lexware GmbH & Co. KG)
R2 LoClntService; C:\Program Files\AxoNet Software GmbH\LightsOutClient\LightsOutClientService.exe [25520 2015-10-16] (AxoNet Software GmbH)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2014-01-08] ()
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 NotificationsProviderSvc; C:\Program Files\Windows Server\Bin\SharedServiceHost.exe [30592 2011-03-02] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-04-09] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-04-09] (NVIDIA Corporation)
R2 PFNService; C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe [2219520 2012-07-11] (FUJITSU LIMITED) [Datei ist nicht signiert]
S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 providers_system; C:\Program Files\Windows Server\Bin\SharedServiceHost.exe [30592 2011-03-02] (Microsoft Corporation)
R2 ServiceProviderRegistry; C:\Program Files\Windows Server\Bin\ProviderRegistryService.exe [41568 2012-11-02] (Microsoft Corporation)
S4 SqmProviderSvc; C:\Program Files\Windows Server\Bin\SharedServiceHost.exe [30592 2011-03-02] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
R2 WSS_ComputerBackupProviderSvc; C:\Program Files\Windows Server\Bin\SharedServiceHost.exe [30592 2011-03-02] (Microsoft Corporation)
S2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3674864 2014-01-08] (Intel® Corporation)
U4 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-12-04] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2015-12-04] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-12-04] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-12-04] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1055560 2015-12-04] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [450504 2015-12-04] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [155304 2015-12-04] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2015-12-04] (AVAST Software)
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2013-09-04] (Broadcom Corporation.)
R3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [132608 2015-01-30] (Microsoft Corporation)
R3 BthHFAud; C:\Windows\System32\drivers\BthHfAud.sys [32768 2014-10-08] (Microsoft Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2015-12-02] ()
R0 FBIOSDRV; C:\Windows\System32\Drivers\FBIOSDRV.sys [20848 2012-08-01] (FUJITSU LIMITED)
R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [296736 2015-05-16] (Acronis International GmbH)
R3 FUJ02B1; C:\Windows\System32\drivers\FUJ02B1.sys [15696 2013-08-12] (FUJITSU LIMITED)
R3 FUJ02E3; C:\Windows\System32\drivers\FUJ02E3.sys [21200 2013-08-12] (FUJITSU LIMITED)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3349984 2014-02-25] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-04-09] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2015-04-09] (NVIDIA Corporation)
S3 pwdrvio; C:\WINDOWS\system32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2013-09-30] ()
R1 RrNetCapFilterDriver; C:\Windows\system32\DRIVERS\RrNetCapFilterDriver.sys [24744 2013-10-07] (Audials AG)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-24] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-24] (Synaptics Incorporated)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [1510392 2013-10-22] (Sunplus)
R2 tib; C:\Windows\system32\DRIVERS\tib.sys [1058632 2015-07-29] (Acronis International GmbH)
R2 tib_mounter; C:\Windows\system32\DRIVERS\tib_mounter.sys [248648 2015-07-29] (Acronis International GmbH)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [116232 2015-03-16] (Oracle Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
U4 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-04 19:59 - 2015-12-04 19:59 - 00017388 _____ C:\Users\Klaus\Dokuments\cc_20151204_195919.reg
2015-12-04 18:45 - 2015-12-04 18:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-04 18:45 - 2015-12-04 18:45 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-04 18:45 - 2015-12-04 18:45 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-04 18:32 - 2015-12-04 18:32 - 13155552 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\Silverlight_x64(1).exe
2015-12-04 17:38 - 2015-12-04 17:38 - 00386096 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-12-04 17:38 - 2015-12-04 17:38 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-12-04 15:29 - 2015-12-05 22:55 - 00000543 _____ C:\Users\Klaus\Desktop\JRT.txt
2015-12-04 14:28 - 2015-12-05 23:50 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-12-04 14:26 - 2015-12-05 23:50 - 00000000 ____D C:\Users\Klaus\Desktop\mbar
2015-12-04 14:11 - 2015-12-06 10:32 - 00000000 ____D C:\Users\Klaus\Downloads\_FRST
2015-12-04 14:03 - 2015-12-06 10:32 - 00000000 ____D C:\FRST
2015-12-03 14:24 - 2015-12-03 14:24 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2015-12-03 14:24 - 2015-12-03 14:24 - 00000000 ____D C:\Program Files\Common Files\AV
2015-12-02 18:23 - 2015-12-02 18:31 - 00000000 ____D C:\Users\Klaus\AppData\Local\Mozilla
2015-12-02 18:23 - 2015-12-02 18:23 - 00001182 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-02 18:23 - 2015-12-02 18:23 - 00001170 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-12-02 18:23 - 2015-12-02 18:23 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Mozilla
2015-12-02 18:23 - 2015-12-02 18:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-02 18:23 - 2015-12-02 18:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-12-02 17:31 - 2015-12-02 17:31 - 00001197 _____ C:\Users\Klaus\Desktop\mbam.txt
2015-12-02 15:26 - 2015-12-02 15:26 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-12-02 15:26 - 2015-12-02 15:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-02 15:24 - 2015-12-02 15:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2015-12-02 15:24 - 2015-12-02 15:24 - 00000000 ____D C:\Program Files\7-Zip
2015-12-02 14:37 - 2015-12-02 14:37 - 00243976 _____ C:\Users\Klaus\Downloads\Firefox Setup Stub 42.0.exe
2015-12-02 14:35 - 2015-12-04 21:24 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2032405694-3072891623-2312475013-1005
2015-12-02 11:27 - 2015-12-02 11:27 - 00000000 _____ C:\autoexec.bat
2015-12-02 11:26 - 2015-12-02 11:26 - 00022704 _____ C:\WINDOWS\system32\Drivers\EsgScanner.sys
2015-12-02 10:21 - 2015-12-02 10:21 - 00288007 _____ C:\Users\Klaus\Dokuments\Visio-Zeichnung1_3.pdf
2015-12-01 21:48 - 2015-12-04 21:38 - 00000000 ____D C:\AdwCleaner
2015-12-01 21:34 - 2015-12-01 21:34 - 00021000 _____ C:\Users\Klaus\Dokuments\cc_20151201_213431.reg
2015-12-01 21:00 - 2015-12-05 22:59 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-12-01 20:59 - 2015-12-05 22:59 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-12-01 20:59 - 2015-12-01 21:57 - 00001119 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-12-01 20:59 - 2015-12-01 20:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-12-01 20:59 - 2015-12-01 20:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-12-01 20:59 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-12-01 20:59 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-12-01 11:27 - 2014-11-24 22:09 - 00020872 _____ (Phoenix Technologies) C:\WINDOWS\SysWOW64\Drivers\DrvAgent64.SYS
2015-11-29 21:16 - 2015-11-29 21:16 - 01202911 _____ C:\Users\Klaus\Downloads\phpsysinfo-3.2.3.zip
2015-11-29 20:38 - 2015-11-29 21:12 - 01274789 _____ C:\Users\Klaus\Downloads\RDPWrap-v1.6.rar
2015-11-29 11:23 - 2015-11-29 11:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2015-11-26 11:56 - 2015-12-01 21:57 - 00002116 _____ C:\Users\Public\Desktop\WISO steuer Sparbuch 2016.lnk
2015-11-26 11:54 - 2015-11-26 11:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WISO steuer Sparbuch 2016
2015-11-25 11:51 - 2015-12-01 21:57 - 00002074 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2015-11-25 11:51 - 2015-11-25 11:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer
2015-11-25 11:51 - 2015-11-25 11:51 - 00000000 ____D C:\Program Files (x86)\MyPhoneExplorer
2015-11-25 11:39 - 2015-11-25 11:39 - 00063775 _____ C:\Users\Klaus\Dokuments\Backup Motorola Klaus 2015-11-25.mpb
2015-11-23 14:55 - 2015-11-23 14:55 - 00066336 _____ C:\Users\Klaus\Downloads\CHIP_Windows10UpdateStopper.exe
2015-11-23 10:28 - 2015-11-23 10:28 - 22859232 _____ (Splashtop Inc.) C:\Users\Klaus\Downloads\Splashtop_Streamer_WIN_v3.0.2.1.EXE
2015-11-22 17:53 - 2015-11-22 17:53 - 00016176 _____ C:\Users\Klaus\AppData\Local\recently-used.xbel
2015-11-18 23:27 - 2015-11-18 23:27 - 00039402 _____ C:\Users\Klaus\Dokuments\cc_20151118_232705.reg
2015-11-16 20:02 - 2015-11-16 20:03 - 00000000 ____D C:\Users\Klaus\Downloads\Adobe Dokumente
2015-11-16 20:00 - 2015-11-24 16:49 - 00000000 ____D C:\Users\Klaus\Downloads\Solarlog Sicherung
2015-11-15 18:58 - 2015-11-15 18:58 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Autodesk
2015-11-12 11:02 - 2015-11-12 11:02 - 00000000 ____D C:\Users\Klaus\Downloads\SolarLog-Toolkit-v1.0b
2015-11-11 11:10 - 2015-11-03 01:23 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-11-11 11:10 - 2015-11-03 01:23 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-11 09:47 - 2015-10-13 16:59 - 00397224 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2015-11-11 09:47 - 2015-10-13 16:59 - 00340872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2015-11-11 09:47 - 2015-10-13 16:59 - 00137960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncrypt.dll
2015-11-11 09:47 - 2015-10-13 16:59 - 00120376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncrypt.dll
2015-11-11 09:47 - 2015-10-13 16:59 - 00106952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2015-11-11 09:47 - 2015-10-13 16:59 - 00091416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2015-11-11 09:47 - 2015-10-11 07:36 - 00561952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-11-11 09:47 - 2015-10-11 07:36 - 00177496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-11-11 09:47 - 2015-10-10 19:40 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2015-11-11 09:47 - 2015-10-10 19:39 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2015-11-11 09:47 - 2015-10-10 19:07 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-11-11 09:47 - 2015-10-10 18:33 - 01441280 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-11-11 09:47 - 2015-10-10 18:27 - 00432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-11-11 09:47 - 2015-10-10 18:11 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-11-11 09:47 - 2015-10-10 17:45 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-11-11 09:47 - 2015-09-29 13:24 - 00155480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2015-11-11 09:46 - 2015-10-31 00:46 - 25818624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-11-11 09:46 - 2015-10-30 23:52 - 20331520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-11-11 09:46 - 2015-10-30 23:22 - 14457856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-11-11 09:46 - 2015-10-15 17:08 - 00990208 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-11-11 09:46 - 2015-10-15 16:46 - 00803328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-11-11 09:46 - 2015-10-13 18:10 - 00559616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-11-11 09:46 - 2015-10-13 18:10 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-11-11 09:46 - 2015-09-12 14:47 - 00414559 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-11-11 09:46 - 2015-09-07 17:22 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2015-11-11 09:46 - 2015-09-07 16:54 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2015-11-11 09:46 - 2015-09-07 16:30 - 01091584 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-11-11 09:46 - 2015-09-04 20:24 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys
2015-11-11 09:46 - 2015-08-28 23:20 - 00183368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2015-11-11 09:46 - 2015-08-20 21:45 - 01380048 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-11-11 09:46 - 2015-08-20 18:48 - 01096704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-11-11 09:45 - 2015-10-31 00:25 - 02886656 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-11-11 09:45 - 2015-10-31 00:24 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-11-11 09:45 - 2015-10-31 00:11 - 05990912 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-11-11 09:45 - 2015-10-31 00:11 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-11-11 09:45 - 2015-10-30 23:47 - 00504832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-11-11 09:45 - 2015-10-30 23:42 - 02279936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-11-11 09:45 - 2015-10-30 23:39 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-11-11 09:45 - 2015-10-30 23:36 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-11-11 09:45 - 2015-10-30 23:32 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-11-11 09:45 - 2015-10-30 23:31 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-11-11 09:45 - 2015-10-30 23:17 - 02487808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-11-11 09:45 - 2015-10-30 23:16 - 04527616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-11-11 09:45 - 2015-10-30 23:14 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-11-11 09:45 - 2015-10-30 23:10 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-11-11 09:45 - 2015-10-30 23:09 - 12854272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-11-11 09:45 - 2015-10-30 23:04 - 01547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-11-11 09:45 - 2015-10-30 22:53 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-11-11 09:45 - 2015-10-30 22:51 - 02011136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-11-11 09:45 - 2015-10-30 22:48 - 01311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-11-11 09:45 - 2015-10-30 22:46 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-11-11 09:45 - 2015-10-20 22:54 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-11-11 09:45 - 2015-10-20 15:53 - 03705856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-11-11 09:45 - 2015-10-20 15:36 - 02243072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-11-11 09:45 - 2015-10-20 15:35 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-11-11 09:45 - 2015-10-20 15:34 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-11-11 09:45 - 2015-10-20 15:34 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-11-11 09:45 - 2015-10-20 15:34 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-11-11 09:45 - 2015-10-20 15:33 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-11-11 09:45 - 2015-10-20 15:14 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-11-11 09:45 - 2015-10-20 15:13 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-11-11 09:45 - 2015-10-20 15:13 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-11-11 09:45 - 2015-10-20 15:13 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-11-11 09:45 - 2015-10-15 00:02 - 07455064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-11-11 09:45 - 2015-10-15 00:02 - 01659560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2015-11-11 09:45 - 2015-10-15 00:02 - 01519592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2015-11-11 09:45 - 2015-10-15 00:02 - 01487008 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2015-11-11 09:45 - 2015-10-15 00:02 - 01355848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2015-11-11 09:44 - 2015-10-17 15:19 - 04176384 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-11-11 09:43 - 2015-10-08 17:08 - 01083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2015-11-08 11:03 - 2015-11-08 11:03 - 00056786 _____ C:\Users\Klaus\Dokuments\Visio-Heizung Montage.pdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-06 09:38 - 2015-10-14 09:59 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-06 09:32 - 2013-11-21 16:15 - 00003930 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{1EDCF81F-5A5E-402C-8B3A-DBF578C7E2D0}
2015-12-06 09:29 - 2014-06-13 10:49 - 00000000 __SHD C:\Users\Klaus\IntelGraphicsProfiles
2015-12-06 09:29 - 2013-11-21 09:22 - 00000000 ____D C:\ProgramData\LightsOut
2015-12-05 23:56 - 2013-11-21 18:13 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\ClassicShell
2015-12-05 23:56 - 2013-11-20 23:33 - 00000000 ____D C:\Users\Klaus
2015-12-05 22:43 - 2014-12-25 12:46 - 00002282 ____H C:\Users\Klaus\Dokuments\Default.rdp
2015-12-05 21:40 - 2014-12-25 10:29 - 00000000 ____D C:\Users\Klaus\Dokuments\Outlook-Dateien
2015-12-05 19:48 - 2013-11-21 00:16 - 00000000 ____D C:\ProgramData\NVIDIA
2015-12-05 19:48 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-04 20:22 - 2014-12-27 13:54 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Kodi
2015-12-04 20:04 - 2014-02-25 22:49 - 00003702 _____ C:\WINDOWS\System32\Tasks\Launch HTC Sync Loader
2015-12-04 19:59 - 2014-12-25 13:12 - 00000000 ___RD C:\Users\Klaus\Dokuments
2015-12-04 18:40 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-12-04 18:38 - 2015-05-16 14:59 - 00000000 ____D C:\Users\Klaus\AppData\Local\ElevatedDiagnostics
2015-12-04 18:17 - 2013-08-22 14:36 - 00000000 ____D C:\Windows
2015-12-04 17:40 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\Inf
2015-12-04 17:38 - 2014-04-22 09:51 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-12-04 17:38 - 2013-12-25 18:00 - 00155304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-12-04 17:38 - 2013-11-21 14:48 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-12-04 17:38 - 2013-11-21 14:47 - 01055560 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-12-04 17:38 - 2013-11-21 14:47 - 00450504 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-12-04 17:38 - 2013-11-21 14:47 - 00273784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-12-04 17:38 - 2013-11-21 14:47 - 00097648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-12-04 17:38 - 2013-11-21 14:47 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-12-04 17:38 - 2013-11-21 14:47 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-12-03 10:43 - 2015-07-27 13:41 - 00001910 _____ C:\Users\Klaus\Desktop\Pfarrer-Ferstl.txt
2015-12-02 23:55 - 2015-10-14 09:59 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-12-02 23:55 - 2015-05-18 22:59 - 00000000 ____D C:\Users\Klaus\AppData\Local\Adobe
2015-12-02 21:44 - 2014-12-25 15:55 - 00000000 ____D C:\Users\Klaus\Dokuments\_Photovoltaik
2015-12-02 15:27 - 2013-11-21 21:16 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Skype
2015-12-02 15:26 - 2013-11-21 21:15 - 00000000 ____D C:\ProgramData\Skype
2015-12-02 15:24 - 2014-10-05 16:52 - 00004108 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-02 15:24 - 2014-10-05 16:52 - 00003872 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-02 15:24 - 2014-10-05 16:52 - 00001136 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-02 15:24 - 2014-10-05 16:52 - 00001132 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-02 14:59 - 2013-09-30 05:14 - 01789004 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-02 14:59 - 2013-09-30 04:56 - 00770130 _____ C:\WINDOWS\system32\perfh007.dat
2015-12-02 14:59 - 2013-09-30 04:56 - 00160912 _____ C:\WINDOWS\system32\perfc007.dat
2015-12-01 21:57 - 2015-11-01 20:02 - 00002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-12-01 21:57 - 2015-10-26 18:24 - 00001726 _____ C:\Users\Public\Desktop\iTunes.lnk
2015-12-01 21:57 - 2015-10-22 16:13 - 00001293 _____ C:\Users\Public\Desktop\TA-Designer.lnk
2015-12-01 21:57 - 2015-10-22 15:26 - 00001257 _____ C:\Users\Public\Desktop\F-Editor.lnk
2015-12-01 21:57 - 2015-10-18 10:17 - 00001229 _____ C:\Users\Public\Desktop\Winsol.lnk
2015-12-01 21:57 - 2015-09-05 18:28 - 00001419 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
2015-12-01 21:57 - 2015-08-29 21:56 - 00001144 _____ C:\Users\Public\Desktop\Drive Bender Manager.lnk
2015-12-01 21:57 - 2015-08-22 11:54 - 00002136 _____ C:\Users\Public\Desktop\WISO Hausverwalter 2016.lnk
2015-12-01 21:57 - 2015-07-14 17:43 - 00002781 _____ C:\Users\Public\Desktop\Finanzmanager 2016.lnk
2015-12-01 21:57 - 2015-06-14 15:11 - 00000945 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealtimeSync.lnk
2015-12-01 21:57 - 2015-05-18 23:48 - 00000999 _____ C:\Users\Klaus\Desktop\Adobe Lightroom.lnk
2015-12-01 21:57 - 2015-05-18 23:48 - 00000999 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom.lnk
2015-12-01 21:57 - 2015-05-16 15:32 - 00001224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis True Image 2015.lnk
2015-12-01 21:57 - 2015-05-16 15:32 - 00001218 _____ C:\Users\Public\Desktop\Acronis True Image 2015.lnk
2015-12-01 21:57 - 2015-04-13 19:59 - 00001053 _____ C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
2015-12-01 21:57 - 2015-03-30 21:33 - 00000716 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) HD Graphics Control Panel.lnk
2015-12-01 21:57 - 2015-03-30 21:33 - 00000710 _____ C:\Users\Public\Desktop\Intel(R) HD Graphics Control Panel.lnk
2015-12-01 21:57 - 2015-03-30 21:28 - 00001183 _____ C:\Users\Public\Desktop\Intel(R) Driver Update Utility 2.0.lnk
2015-12-01 21:57 - 2015-03-05 21:03 - 00001305 _____ C:\Users\Public\Desktop\X2-Simulator.lnk
2015-12-01 21:57 - 2015-02-05 23:28 - 00000303 _____ C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Heimnetzgruppe.lnk
2015-12-01 21:57 - 2015-01-25 15:17 - 00001244 _____ C:\Users\Klaus\Desktop\Kodineu.lnk
2015-12-01 21:57 - 2015-01-15 18:45 - 00000996 _____ C:\Users\Public\Desktop\Mp3tag.lnk
2015-12-01 21:57 - 2015-01-12 14:43 - 00001114 _____ C:\Users\Klaus\Desktop\Kodi Verzeichnis.lnk
2015-12-01 21:57 - 2015-01-02 14:39 - 00001197 _____ C:\Users\Klaus\Desktop\Kodi Start.lnk
2015-12-01 21:57 - 2014-12-27 14:09 - 00001860 _____ C:\Users\Klaus\Desktop\Kodi.lnk
2015-12-01 21:57 - 2014-12-20 22:17 - 00002208 _____ C:\Users\Klaus\Desktop\TV Movie ClickFinder.lnk
2015-12-01 21:57 - 2014-12-13 11:24 - 00000839 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-12-01 21:57 - 2014-11-24 20:53 - 00000938 _____ C:\Users\Klaus\Desktop\X-Plane.lnk
2015-12-01 21:57 - 2014-09-22 10:26 - 00002261 _____ C:\Users\Klaus\Desktop\iDevice Manager.lnk
2015-12-01 21:57 - 2014-09-10 09:42 - 00002169 _____ C:\Users\Klaus\Desktop\MPTagThat.lnk
2015-12-01 21:57 - 2014-09-03 11:16 - 00001412 _____ C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Windows herunterladen.lnk
2015-12-01 21:57 - 2014-06-21 10:49 - 00001153 _____ C:\Users\Public\Desktop\Digital Photo Professional.lnk
2015-12-01 21:57 - 2014-06-02 17:44 - 00001888 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk
2015-12-01 21:57 - 2014-04-19 14:23 - 00000949 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2015-12-01 21:57 - 2014-02-07 13:48 - 00001291 _____ C:\Users\Klaus\Desktop\Revo Uninstaller.lnk
2015-12-01 21:57 - 2014-01-15 20:58 - 00001262 _____ C:\Users\Public\Desktop\ElsterFormular.lnk
2015-12-01 21:57 - 2013-12-29 21:10 - 00000955 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeFileSync.lnk
2015-12-01 21:57 - 2013-12-29 21:10 - 00000949 _____ C:\Users\Public\Desktop\FreeFileSync.lnk
2015-12-01 21:57 - 2013-12-13 20:22 - 00002523 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-12-01 21:57 - 2013-12-11 18:01 - 00001229 _____ C:\Users\Public\Desktop\Tapps2.lnk
2015-12-01 21:57 - 2013-12-09 17:27 - 00001960 _____ C:\Users\Public\Desktop\Sonos.lnk
2015-12-01 21:57 - 2013-12-07 18:48 - 00001058 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Family Tree Maker World Express.lnk
2015-12-01 21:57 - 2013-12-07 18:48 - 00001046 _____ C:\Users\Public\Desktop\Family Tree Maker World Express.lnk
2015-12-01 21:57 - 2013-11-23 21:38 - 00001502 _____ C:\Users\Klaus\Desktop\Win32DiskImager.lnk
2015-12-01 21:57 - 2013-11-21 18:37 - 00001896 _____ C:\Users\Public\Desktop\ELOoffice.lnk
2015-12-01 21:57 - 2013-11-21 17:08 - 00001072 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-Registrierung.lnk
2015-12-01 21:57 - 2013-11-21 17:07 - 00001384 _____ C:\ProgramData\Microsoft\Windows\Start Menu\HP Solution Center.lnk
2015-12-01 21:57 - 2013-11-21 13:42 - 00000655 _____ C:\Users\Public\Desktop\Total Commander 64 bit.lnk
2015-12-01 21:57 - 2013-11-21 12:24 - 00001683 _____ C:\Users\Klaus\Desktop\SolarAnalyzer.lnk
2015-12-01 21:57 - 2013-11-20 23:33 - 00001461 _____ C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-01 21:57 - 2013-11-20 23:06 - 00001511 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-12-01 12:27 - 2014-03-04 21:24 - 00000000 ___RD C:\Users\Klaus\SkyDrive
2015-12-01 11:11 - 2013-12-10 17:28 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MyPhoneExplorer
2015-11-29 21:49 - 2013-12-09 17:26 - 00000000 ____D C:\ProgramData\Sonos,_Inc
2015-11-29 20:23 - 2013-12-29 21:10 - 00000000 ____D C:\Program Files\FreeFileSync
2015-11-29 11:24 - 2014-01-15 20:58 - 00000000 ____D C:\Program Files (x86)\ElsterFormular
2015-11-29 11:24 - 2013-11-21 18:20 - 00000000 ____D C:\ProgramData\elsterformular
2015-11-29 00:20 - 2014-12-25 15:55 - 00000000 ____D C:\Users\Klaus\Dokuments\_Eprimo Strom
2015-11-28 14:26 - 2013-12-13 11:42 - 00000000 ____D C:\Users\Klaus\AppData\Local\MPTagThat
2015-11-27 22:33 - 2013-11-21 12:24 - 00000000 ___RD C:\Users\Klaus\Desktop\Programme
2015-11-27 22:32 - 2015-03-11 10:47 - 00000000 ____D C:\Users\Klaus\AppData\Local\CDex
2015-11-27 22:28 - 2014-03-02 11:18 - 00000000 ____D C:\Program Files (x86)\WISO
2015-11-27 22:28 - 2013-03-29 17:53 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-11-27 16:29 - 2014-11-12 16:13 - 00000000 ____D C:\WINDOWS\SysWOW64\vbox
2015-11-27 16:29 - 2014-11-12 16:13 - 00000000 ____D C:\WINDOWS\system32\vbox
2015-11-26 16:04 - 2014-12-25 10:29 - 00000000 ____D C:\Users\Klaus\Dokuments\Steuer-Sparbuch
2015-11-26 11:56 - 2013-11-21 18:06 - 00000000 ____D C:\Users\Klaus\AppData\Local\Buhl
2015-11-25 14:57 - 2013-11-21 15:36 - 00000000 ____D C:\ProgramData\Oracle
2015-11-25 14:54 - 2014-07-18 18:26 - 00000000 ____D C:\Program Files\Java
2015-11-25 14:54 - 2014-07-18 14:16 - 00000000 ____D C:\Program Files (x86)\Java
2015-11-25 14:54 - 2014-01-15 15:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-11-25 14:53 - 2015-08-27 16:04 - 00000000 ____D C:\Users\Klaus\.oracle_jre_usage
2015-11-25 14:53 - 2014-07-18 18:27 - 00110176 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2015-11-25 11:02 - 2013-11-21 17:56 - 00000000 ____D C:\ProgramData\Lexware
2015-11-25 10:27 - 2013-11-21 18:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Technische Alternative
2015-11-22 21:19 - 2013-11-21 18:20 - 00000000 ____D C:\Technische Alternative
2015-11-22 17:54 - 2014-04-19 14:32 - 00000000 ____D C:\Users\Klaus\.gimp-2.8
2015-11-22 17:53 - 2014-04-19 14:36 - 00000000 ____D C:\Users\Klaus\AppData\Local\gtk-2.0
2015-11-22 15:46 - 2015-10-31 20:01 - 00000000 ____D C:\Users\Klaus\Downloads\CMI_WE_mit_Wartungsfunktion
2015-11-22 15:29 - 2015-08-15 20:48 - 00000212 _____ C:\Users\Klaus\Desktop\Lightsout win10.txt
2015-11-19 21:21 - 2013-12-09 17:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sonos
2015-11-19 21:21 - 2013-12-09 17:27 - 00000000 ____D C:\Program Files (x86)\Sonos
2015-11-19 21:21 - 2013-12-09 17:26 - 00000000 ____D C:\Users\Klaus\AppData\Local\Downloaded Installations
2015-11-17 09:57 - 2013-11-21 18:41 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Notepad++
2015-11-17 09:57 - 2013-11-21 18:41 - 00000000 ____D C:\Program Files (x86)\Notepad++
2015-11-16 15:28 - 2015-04-28 17:10 - 00000632 _____ C:\Users\Klaus\Desktop\Mercer.txt
2015-11-13 20:08 - 2014-11-20 23:38 - 00000028 _____ C:\Users\Klaus\AppData\Local\X-Plane Installer.prf
2015-11-13 20:03 - 2014-11-20 23:38 - 00000073 _____ C:\Users\Klaus\AppData\Local\X-Plane_drm.prf
2015-11-12 11:32 - 2013-12-06 15:48 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\TeamViewer
2015-11-11 11:23 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2015-11-11 11:08 - 2013-08-22 15:44 - 00498216 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-11-11 11:05 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-11-11 09:56 - 2012-07-26 08:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-11-11 09:54 - 2013-11-20 18:19 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-11-11 09:48 - 2013-11-20 18:19 - 145617392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-11-11 09:32 - 2013-11-21 13:41 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-11-11 09:31 - 2013-11-21 19:14 - 00000039 _____ C:\WINDOWS\vbaddin.ini
2015-11-07 12:01 - 2013-11-21 22:27 - 00000000 ____D C:\Users\Klaus\.VirtualBox
2015-11-07 10:35 - 2014-12-25 15:45 - 00000000 ____D C:\Users\Klaus\Downloads\Virtual Box
2015-11-06 09:39 - 2014-04-15 14:37 - 00000000 ____D C:\ProgramData\Package Cache
2015-11-06 09:38 - 2014-06-09 08:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2015-11-06 09:38 - 2014-04-15 15:02 - 00003554 _____ C:\WINDOWS\System32\Tasks\GarminUpdaterTask
2015-11-06 09:38 - 2014-04-06 20:34 - 00000000 ____D C:\Program Files (x86)\Garmin

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-11-02 22:13 - 2015-11-02 22:18 - 1359736205 _____ () C:\Users\Klaus\AppData\Roaming\Kodi_15.2.rar
2014-03-20 18:33 - 2014-03-20 18:33 - 0012955 _____ () C:\Users\Klaus\AppData\Roaming\Kommagetrennte Werte (DOS).CAL
2015-05-01 13:05 - 2015-05-01 14:09 - 0000261 _____ () C:\Users\Klaus\AppData\Roaming\OpenSceneryX Installationsprogramm.plist
2014-09-08 11:16 - 2014-09-08 11:34 - 0000600 _____ () C:\Users\Klaus\AppData\Roaming\winscp.rnd
2013-11-22 15:51 - 2015-08-29 22:27 - 0000600 _____ () C:\Users\Klaus\AppData\Local\PUTTY.RND
2015-11-22 17:53 - 2015-11-22 17:53 - 0016176 _____ () C:\Users\Klaus\AppData\Local\recently-used.xbel
2015-05-03 15:42 - 2015-09-12 21:20 - 0007604 _____ () C:\Users\Klaus\AppData\Local\Resmon.ResmonCfg
2014-11-20 23:38 - 2015-11-13 20:08 - 0000028 _____ () C:\Users\Klaus\AppData\Local\X-Plane Installer.prf
2014-11-20 23:38 - 2015-11-13 20:03 - 0000073 _____ () C:\Users\Klaus\AppData\Local\X-Plane_drm.prf
2014-11-20 19:44 - 2015-07-24 14:17 - 0000088 _____ () C:\Users\Klaus\AppData\Local\x-plane_install_10.txt
2013-11-21 17:03 - 2013-11-21 17:14 - 0000821 _____ () C:\ProgramData\hpzinstall.log

==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-11-27 17:29

==================== Ende von FRST.txt ============================
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-12-2015
durchgeführt von Klaus (2015-12-06 10:33:35)
Gestartet von C:\Users\Klaus\Downloads\_FRST
Windows 8.1 (X64) (2013-11-20 22:16:46)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2032405694-3072891623-2312475013-500 - Administrator - Disabled)
Gast (S-1-5-21-2032405694-3072891623-2312475013-501 - Limited - Disabled)
Klaus (S-1-5-21-2032405694-3072891623-2312475013-1005 - Administrator - Enabled) => C:\Users\Klaus
Sonos (S-1-5-21-2032405694-3072891623-2312475013-1006 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

4500_G510nz_Help (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
4500G510nz (x32 Version: 140.0.001.000 - Hewlett-Packard) Hidden
4500G510nz_Software_Min (x32 Version: 140.0.001.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
7-Zip 15.12 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1512-000001000000}) (Version: 15.12.00.0 - Igor Pavlov)
Acronis True Image 2015 (HKLM-x32\...\{2F70A6E6-2F71-4907-8441-BDC5D300310B}Visible) (Version: 18.0.6613 - Acronis)
Acronis True Image 2015 (x32 Version: 18.0.6613 - Acronis) Hidden
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.245 - Adobe Systems Incorporated)
Adobe Lightroom (HKLM-x32\...\{8048A5DF-8A70-5BE1-954B-E0FDE1BD0D0D}) (Version: 6.2.1 - Adobe Systems Incorporated)
Airport Amsterdam (HKLM-x32\...\Airport Amsterdam) (Version: 1.0.0.0 - Aerosoft GmbH)
ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Anytime USB Charge Utility (HKLM-x32\...\InstallShield_{A794229E-401E-44D4-A8B5-B21E975676DE}) (Version: 2.01.00.001 - FUJITSU LIMITED)
Anytime USB Charge Utility (Version: 2.01.00.001 - FUJITSU LIMITED) Hidden
Apple Application Support (32-Bit) (HKLM-x32\...\{649A1FD9-5892-46AD-8DF0-C4A43FF61CB7}) (Version: 4.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{0DE0A178-AC7B-4650-806C-CF226DE03766}) (Version: 4.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2245 - AVAST Software)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Canon Utilities Digital Photo Professional (HKLM-x32\...\Digital Photo Professional) (Version: 3.14.0.0 - Canon Inc.)
Canon Utilities EOS Utility 2 (HKLM-x32\...\EOS Utility 2) (Version: 2.14.0.0 - Canon Inc.)
Canon Utilities ImageBrowser EX (HKLM-x32\...\ImageBrowser EX) (Version: 1.4.0.5 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.23.47 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.14.0.0 - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.12 - Piriform)
Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)
CyberLink YouCam 5 (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.2931.0 - CyberLink Corp.)
DDBAC (HKLM-x32\...\{40B12E76-C97D-45D8-BD85-008FE8C860EF}) (Version: 5.3.37.0 - DataDesign)
DeskUpdate (HKLM-x32\...\DeskUpdate_is1) (Version: 4.15.0144 - Fujitsu Technology Solutions)
Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
doPDF 7.3 printer (HKLM\...\doPDF 7 printer_is1) (Version: 7.3.393 - Softland)
Drive Bender Client (HKLM\...\{1963E50F-7C00-4BF8-A68C-DF4AB67B07AB}) (Version: 2.3.9.0 - Division-M)
Elevated Installer (x32 Version: 4.1.10.0 - Garmin Ltd or its subsidiaries) Hidden
ELO Pdf Drucker (HKLM-x32\...\{C7ACA1FD-E1A7-42D1-93C2-6EBD868584E9}) (Version: 6.0 - ELO Digital Office GmbH)
ELOoffice (HKLM-x32\...\{C08EF2EB-27C6-4E99-B5C3-15AE8210B614}) (Version: 9.0 - ELO Digital Office GmbH)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.3.17800 - Landesfinanzdirektion Thüringen)
Family Tree Maker World Express (HKLM-x32\...\Family Tree Maker World Express) (Version: 21.1.865 - Ancestry.com, Inc.)
Family Tree Maker World Express (x32 Version: 21.1.865 - Ancestry.com, Inc.) Hidden
Fax (x32 Version: 140.0.307.000 - Hewlett-Packard) Hidden
F-Editor Version 1.10 (HKLM-x32\...\{2A8AEFF7-E7DA-4440-979A-2AB137BE185C}_is1) (Version: 1.10 - Technische Alternative GmbH)
Finanzmanager 2016 (x32 Version: 23.36.00.0179 - Haufe-Lexware GmbH & Co.KG) Hidden
Finanzmanager Import Export Server 2016 (x32 Version: 23.33.00.0106 - Haufe-Lexware GmbH & Co.KG) Hidden
FJ Camera (HKLM-x32\...\Sunplus SPUVCb) (Version: 3.4.9.19 - SunplusIT)
FreeFileSync 7.6 (HKLM-x32\...\FreeFileSync_is1) (Version: 7.6 - www.FreeFileSync.org)
Fujitsu BIOS Driver (HKLM-x32\...\InstallShield_{7292FFCF-FA9A-4585-AB80-A71961F931AF}) (Version: 1.1.0.0 - FUJITSU LIMITED)
Fujitsu BIOS Driver (Version: 1.1.0.0 - FUJITSU LIMITED) Hidden
Fujitsu MobilityCenter Extension Utility (HKLM-x32\...\InstallShield_{EC314CDF-3521-482B-A21C-65AC95664814}) (Version: 4.01.00.000 - FUJITSU LIMITED)
Fujitsu MobilityCenter Extension Utility (Version: 4.01.00.000 - FUJITSU LIMITED) Hidden
Fujitsu System Extension Utility (HKLM-x32\...\InstallShield_{E8A5B78F-4456-4511-AB3D-E7BFFB974A7A}) (Version: 3.5.0.0 - FUJITSU LIMITED)
Fujitsu System Extension Utility (Version: 3.5.0.0 - FUJITSU LIMITED) Hidden
Garmin BaseCamp (HKLM-x32\...\{36A0D446-B8E9-4753-BDFE-335F6F4DE59C}) (Version: 4.5.2 - Garmin Ltd or its subsidiaries)
Garmin City Navigator Europe NTU 2016.20 (HKLM-x32\...\{7F485A74-C557-4EF4-B934-97DA9A74E74B}) (Version: 2.0.0.0 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{b292f4e5-60ca-4bb8-8810-e5f908c3c1ff}) (Version: 4.1.10.0 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 4.1.10.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 4.1.10.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin MapSource (HKLM-x32\...\{AFBAB9A0-DDE8-49AE-8C17-A01B61BEE64B}) (Version: 6.16.3 - Garmin Ltd or its subsidiaries)
Garmin POI Loader (HKLM-x32\...\{3213ED5E-7BBE-4613-BE69-8B1E4FE520DD}) (Version: 2.7.3 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
GeoSetter 3.4.16 (HKLM-x32\...\GeoSetter_is1) (Version:  - Friedemann Schmidt)
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version:  - )
Harmony Desktop 2.0.14 (HKLM-x32\...\{44A829C9-EC11-4612-A977-37D19114D739}) (Version: 2.0.1400 - Fallbrook Technologies)
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Officejet 4500 G510n-z 14.0 Rel. 6 (HKLM\...\{6B9B2E57-D988-4258-8A2C-6F3657A600BD}) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}) (Version: 5.002.006.003 - Hewlett-Packard)
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) Driver Update Utility 2.0 (x32 Version: 2.0.0.29 - Intel) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Driver Update Utility (HKLM-x32\...\{8409c4f7-2340-4933-a304-5d37db4fb48b}) (Version: 2.0.0.29 - Intel)
Intel® PROSet/Wireless Software (HKLM-x32\...\{eddf4201-b72e-4e94-9e7b-ac1ba97c029f}) (Version: 16.11.0 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.40 - Irfan Skiljan)
iTunes (HKLM\...\{E690A491-702F-4DEC-9977-C015D1DBB57C}) (Version: 12.3.1.23 - Apple Inc.)
Java 8 Update 66 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Kodi (HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\Kodi) (Version:  - XBMC-Foundation)
LAV Filters 0.62.0 (HKLM-x32\...\lavfilters_is1) (Version: 0.62.0 - Hendrik Leppkes)
Lexware Finanzmanager 2016 (HKLM-x32\...\{f8af6484-cb0b-426f-b8de-dd70753f69fc}) (Version: 23.33.0.114 - Haufe-Lexware GmbH & Co.KG)
Lexware Info Service (x32 Version: 5.00.00.0044 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware Installations Dienst (x32 Version: 4.01.00.0009 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware online banking (HKLM-x32\...\{BDED7C2D-BAC0-40CA-90AA-E3D23FDAC87D}) (Version: 22.02.00.0040 - Haufe-Lexware GmbH & Co.KG)
LIFEBOOK Application Panel (HKLM-x32\...\InstallShield_{6226477E-444F-4DFE-BA19-9F4F7D4565BC}) (Version: 8.5.0.0 - FUJITSU LIMITED)
LIFEBOOK Application Panel (Version: 8.5.0.0 - FUJITSU LIMITED) Hidden
Lights-Out Client x64 (HKLM\...\{DA0D6B4B-EED6-4EE8-9ECF-0F7D83F5E0CE}) (Version: 1.6.1.2408 - AxoNet Software GmbH)
Logitech Harmony Remote Software 7 (HKLM-x32\...\{5C6F884D-680C-448B-B4C9-22296EE1B206}) (Version: 7.7.0.0 - Logitech)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
MarketResearch (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Visio Premium 2010 (HKLM-x32\...\Office14.VISIOR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
MOBackup - Datensicherung für Outlook (Vollversion) (HKLM-x32\...\MOBackup-DatensicherungfürOutlook) (Version: 8.0 - Heiko Schröder)
Mozilla Firefox 42.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 de)) (Version: 42.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0 - Mozilla)
Mp3tag v2.70 (HKLM-x32\...\Mp3tag) (Version: v2.70 - Florian Heidenreich)
MPTagThat (HKLM-x32\...\MPTagThat) (Version: 3.0.0 - Helmut Wahrmann)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.6 - F.J. Wechselberger)
Network64 (Version: 140.0.306.000 - Hewlett-Packard) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.6 - Notepad++ Team)
NVIDIA 3D Vision Treiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 350.12 - NVIDIA Corporation)
NVIDIA Grafiktreiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Oracle VM VirtualBox 4.3.26 (HKLM\...\{5771F59A-BFC9-4FAF-A883-7642EF4BA3C3}) (Version: 4.3.26 - Oracle Corporation)
Plugfree NETWORK (HKLM\...\{7BA64D21-EE46-4a9a-8145-52B0175C3F86}) (Version: 7.0.0.1 - FUJITSU LIMITED)
Plugfree NETWORK (Version: 7.0.001 - FUJITSU LIMITED) Hidden
Pointing Device Utility (HKLM-x32\...\InstallShield_{DDC49774-40B9-47AE-9C63-5569C08C4082}) (Version: 2.0.0.0 - FUJITSU LIMITED)
Pointing Device Utility (Version: 2.0.0.0 - FUJITSU LIMITED) Hidden
Power Saving Utility (Version: 33.01.00.000 - FUJITSU LIMITED) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6714 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.2.8400.30137 - Realtek Semiconductor Corp.)
Remote Control USB Driver (HKLM-x32\...\{8471021C-F529-43DE-84DF-3612E10F58C4}) (Version: 2.3.2.317 - )
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
RoboForm 7-9-16-7 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-9-16-7 - Siber Systems)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.)
Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{359ADBEC-068A-4CC9-9174-77AB8EDB867A}) (Version:  - Microsoft)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype™ 7.15 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.15.103 - Skype Technologies S.A.)
SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Sonos Controller (HKLM-x32\...\{7BBA9BF8-05DF-47D8-8880-82A9B99505B9}) (Version: 31.3.22220 - Sonos, Inc.)
Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.10.12 - Synaptics Incorporated)
System Requirements Lab for Intel (HKLM-x32\...\{04C4B49D-45D9-4A28-9ED1-B45CBD99B8C7}) (Version: 4.5.24.0 - Husdawg, LLC)
TA-Designer 1.13 (HKLM-x32\...\TA-Designer_is1) (Version: 1.13 - Technische Alternative GmbH)
Tapps2 1.04 (HKLM-x32\...\Tapps2_is1) (Version: 1.04 - Technische Alternative GmbH)
Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51 beta 2 - Ghisler Software GmbH)
TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
TV Movie ClickFinder (HKLM-x32\...\{A1A2ACDC-0C22-4EB1-B958-1898A93DAF28}) (Version: 1.00.0000 - TV Movie)
UltraISO Premium V9.36 (HKLM-x32\...\UltraISO_is1) (Version:  - )
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.8030 - Broadcom Corporation)
Windows Driver Package - FUJITSU LIMITED (FUJ02B1) System  (06/09/2012 1.23) (HKLM\...\7D737DCFBBA92B6A4335FA93E0B846D9D2DE908E) (Version: 06/09/2012 1.23 - FUJITSU LIMITED)
Windows Driver Package - FUJITSU LIMITED (FUJ02E3) System  (06/22/2012 1.30.0.0) (HKLM\...\3DCA6835C7741E181396F76FD94C05C19F4124A9) (Version: 06/22/2012 1.30.0.0 - FUJITSU LIMITED)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Home Server 2011 Connector (HKLM\...\{C1E4D639-4A33-4314-809E-89BD0EF48522}) (Version: 6.1.8800.16402 - Microsoft Corporation)
Windows Media Encoder 9 Series (HKLM-x32\...\Windows Media Encoder 9) (Version:  - )
Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
WinMerge 2.14.0 (HKLM-x32\...\WinMerge_is1) (Version: 2.14.0 - Thingamahoochie Software)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Winsol 2.05 (HKLM-x32\...\Winsol_is1) (Version: 2.05 - Technische Alternative GmbH)
Wireless Radio Switch Driver (HKLM-x32\...\InstallShield_{13031CDF-00D2-4FCE-AB13-8430D8733574}) (Version: 1.0.0.0 - FUJITSU LIMITED)
Wireless Radio Switch Driver (Version: 1.0.0.0 - FUJITSU LIMITED) Hidden
WISO Hausverwalter 2016 (HKLM-x32\...\{FF698809-CD68-4A77-BAD9-C1D5DD9AEF5B}) (Version: 10.00.8837 - Buhl Data Service GmbH)
WISO steuer:Sparbuch 2016 (HKLM-x32\...\{C14E44A8-325E-4E95-84A4-C4EC43BF0325}) (Version: 23.00.1146 - Buhl Data Service GmbH)
X2-Simulator 1.10 (HKLM-x32\...\X2-Simulator_is1) (Version: 1.10 - Technische Alternative GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2032405694-3072891623-2312475013-1005_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

==================== Wiederherstellungspunkte =========================

04-12-2015 19:53:40 JRT Pre-Junkware Removal
05-12-2015 22:52:16 JRT Pre-Junkware Removal

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0CA7350B-C3D1-4116-BBD3-7C3D4033C160} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {0D5337D3-6619-4ABE-A3D5-0FA28ABC6EFF} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN2S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {118A429D-03C2-42F7-A498-7935091AE125} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN4S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {12850010-BCC3-4405-A8C2-94D82B6CF46D} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe
Task: {129FED17-8CC6-4729-8573-74B0D779D406} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndOnABN3S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {1594F58A-7C43-4A0C-BA56-5C5F742384A0} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndSetWakeupSetting => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {1BF9C2BD-5511-4BBC-9A63-ED2B17348BC2} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN1S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {25680AE4-43AA-4EEA-8E9D-52FDCD7803A4} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndCheckOnWakeupBySwitch => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {299C396D-FFE9-42BE-82E6-572B5032A378} - System32\Tasks\Synaptics TouchPad Enhancements => Program Files\Synaptics\SynTP\SynTPEnh.exe
Task: {2B0A6054-69F0-43DF-B15F-3153C1263EBF} - System32\Tasks\Microsoft\Windows\Windows Server\UploadCEIPData => C:\Program Files\Windows Server\Bin\RunTask.exe [2012-11-02] (Microsoft Corporation)
Task: {2F890F2B-8AD9-44E9-A845-1775C67B9BD1} - System32\Tasks\Fujitsu\PointingDeviceUtility\SetDriverIfFuj02b1DisableOnLogon => C:\Program Files\Fujitsu\PointingDeviceUtility\FJPDAutoSet.exe [2012-08-04] (FUJITSU LIMITED)
Task: {38AB1C2E-BC82-4619-B82F-D8B13564434D} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndOnABN2S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {4D71A68C-9EAE-4267-94B6-E922A6B2465B} - System32\Tasks\Microsoft\Windows\Windows Server\SaveCEIPData => C:\Program Files\Windows Server\Bin\RunTask.exe [2012-11-02] (Microsoft Corporation)
Task: {4F4EA827-004D-4616-864B-5F1A09FF38C6} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN5S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {55272939-E147-41ED-98A6-E93CC5181E00} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2015-10-01] (Siber Systems)
Task: {69F2794C-A710-41F0-AF35-95A5B95448D7} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMJJMJMJLMJJNJPMPMCNPMKJIMOJCNLMKMOMNMCNNJGMHMOJCNOMNMKMLJKJMMMMPMJJJMKJMMJNJICMIMCNGMCNOMJMFMOMOMCNPMCNGMJMPMPMFMJMCNMMCNGMJMPMPMCNNMJNPICMOMFMEKMICNJJCKFMOMIMLMLMJNHICMMJBJKJLIMJJNBJCMELDJOJKIMIJNKJCMJNNICMJNDJCMLJKJJNMJCMOMFMNMLMOMFMMMHMJNFICMGJLJKJBJLIGJLIGJKJMIBNKJHIKJ"
Task: {6D1F98FD-8A2C-4751-9EA2-2921E75EBF5E} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndCheckOnWakeup => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {7007E703-1CA8-431F-97FB-64F49CE9CE42} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-26] (Apple Inc.)
Task: {74480064-61E1-4C1A-9116-CE965B7EC27C} - System32\Tasks\Microsoft\Windows\Windows Server\InstallAddIns => C:\Program Files\Windows Server\Bin\RunTask.exe [2012-11-02] (Microsoft Corporation)
Task: {7BA9DF59-5443-4F34-8022-3EC8B6D456C2} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-12-03] (AVAST Software)
Task: {816385D1-8A26-42F1-96A3-AC23FBDDC31D} - System32\Tasks\Microsoft\Windows\Windows Server\Alert Evaluations => C:\Program Files\Windows Server\Bin\RunTask.exe [2012-11-02] (Microsoft Corporation)
Task: {8E8E4554-C13A-4190-92F8-A3AE75FF4470} - System32\Tasks\Microsoft\Windows\Windows Server\RenewClientCertificate => C:\Program Files\Windows Server\Bin\RunTask.exe [2012-11-02] (Microsoft Corporation)
Task: {914CBA6E-9C73-4339-AD83-BCBCC6B81D54} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnWakeupNow => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {94B7CB14-E9C0-4C15-AE22-CE1743582718} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2015-10-29] ()
Task: {9EAD94C4-20AE-4605-BB3C-8CDAC9D41982} - System32\Tasks\Microsoft\Windows\Windows Server\Health Definition Updates => C:\Program Files\Windows Server\Bin\RunTask.exe [2012-11-02] (Microsoft Corporation)
Task: {AB42AB79-9402-45DD-BA90-ACB993436CBC} - System32\Tasks\Fujitsu\PointingDeviceUtility\ToggleIPD => C:\Program Files\Fujitsu\PointingDeviceUtility\FJPDAutoSet.exe [2012-08-04] (FUJITSU LIMITED)
Task: {B51B808B-E894-4E03-A63E-9E980723CFCD} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartBtnHndHKB => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {BC7B808C-4F96-4E26-B46D-7C32556E49F9} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnWakeupAtLogon => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {C21774D0-2255-4A7E-8BAB-C77239A00EE0} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndOnABN5S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {C9D4E068-773E-45E5-9539-732CE066125C} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN6S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {CF43D3B7-35DC-4BAC-A7FF-BD8CC6493435} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-12-04] (AVAST Software)
Task: {D26FF231-43EF-440C-B422-804AE6973B44} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-11-16] (Piriform Ltd)
Task: {D4128710-27B7-4B37-84C8-2077ABA3BD94} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndOnABN6S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {D48F23C5-98BC-4FB9-86A8-6764C9504846} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {D5704809-1587-4E2A-BB2B-24582EC27A63} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndOnABN4S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {D5BB8465-B5AF-4E1D-977F-B842B6D4862E} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-02] (Adobe Systems Incorporated)
Task: {D5BBB570-C823-4F0D-8D43-B49B2049ED38} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN3S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {DCE64EF3-04F5-4F10-91AD-866F351C4E2F} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndOnABN1S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {E1259FD2-35FA-47BF-8ADA-B08BFC912A95} - System32\Tasks\Outlook Sicherung => C:\Program Files (x86)\MOBackup\mobackup.exe [2015-07-22] (Heiko Schröder)
Task: {EEEC24C8-8CEF-4198-B04E-7EE527BC98EE} - System32\Tasks\Fujitsu\ApplicationPanel\DisableBtnHndStartQuickTouchOnWakeupAtLogon => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {FC3CEF65-4ED6-4BAD-BC95-CD8E98A12346} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {FCCF636B-01A4-46E9-AE7D-83ACF596EFD5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\Klaus\Desktop\Kodi Start.lnk -> D:\Kodi Dateien\Kodi Startup Skript\Kodi.bat () <==== ACHTUNG
Shortcut: C:\Users\Klaus\Desktop\Kodineu.lnk -> D:\Kodi Dateien\Kodi Startup Skript\Kodineu.bat () <==== ACHTUNG

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-02-13 04:20 - 2015-02-13 04:20 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-09-25 14:20 - 2013-09-25 14:20 - 00049368 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btwleapi.dll
2013-10-27 09:03 - 2015-04-09 01:58 - 00012104 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2015-07-20 08:08 - 2015-07-20 08:08 - 00034624 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\thread_pool.dll
2015-07-20 08:15 - 2015-07-20 08:15 - 00420160 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\ulxmlrpcpp.dll
2014-11-27 09:44 - 2014-11-27 09:44 - 00129344 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\EXPAT.dll
2013-03-29 17:47 - 2012-06-25 02:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-05-16 18:33 - 2015-04-09 01:58 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-12-04 17:38 - 2015-12-04 17:38 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-12-04 17:38 - 2015-12-04 17:38 - 00103888 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-12-04 17:38 - 2015-12-04 17:38 - 00125512 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-12-04 17:38 - 2015-12-04 17:38 - 00469008 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2015-05-16 18:30 - 2015-04-09 01:58 - 00012104 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2015-12-05 20:30 - 2015-12-05 20:30 - 02803200 _____ () C:\Program Files\AVAST Software\Avast\defs\15120504\algo.dll
2015-12-06 10:25 - 2015-12-06 10:25 - 02803200 _____ () C:\Program Files\AVAST Software\Avast\defs\15120600\algo.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.115.254 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\StartupFolder: => "Bluetooth.lnk"
HKLM\...\StartupApproved\StartupFolder: => "HP Digital Imaging Monitor.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Quicken 2014 Zahlungserinnerung.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Winsol_Autostart.lnk"
HKLM\...\StartupApproved\StartupFolder: => "ImageBrowser EX Agent.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Quicken 2015 Zahlungserinnerung.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Finanzmanager 2016 Zahlungserinnerung.lnk"
HKLM\...\StartupApproved\Run: => "Launchpad"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "Acronis Scheduler2 Service"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "DeskUpdateNotifier"
HKLM\...\StartupApproved\Run32: => "FJ Camera_Monitor"
HKLM\...\StartupApproved\Run32: => "YouCam Service"
HKLM\...\StartupApproved\Run32: => "BCSSync"
HKLM\...\StartupApproved\Run32: => "HP Software Update"
HKLM\...\StartupApproved\Run32: => "LexwareInfoService"
HKLM\...\StartupApproved\Run32: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "New Value"
HKLM\...\StartupApproved\Run32: => "AcronisTibMounterMonitor"
HKLM\...\StartupApproved\Run32: => "TrueImageMonitor.exe"
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\StartupApproved\StartupFolder: => "EOS Utility.lnk"
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\StartupApproved\Run: => "GarminExpressTrayApp"
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\StartupApproved\Run: => "iDevice Manager Launcher"
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\StartupApproved\Run: => "CCleaner Monitoring"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{F4A9D810-C459-4358-88CA-8A63720597B7}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{D5B647B3-C146-4CF4-8871-877E79415E4D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{69346E45-C28B-4790-AAB0-D60CE7FA6E1E}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{6CAE0CBE-15C6-4323-8FCB-949D852F127D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{DC5CE5AE-2441-4ABD-87BF-542B7A412D40}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{9F8DBE80-86BB-49D1-BC91-5D321EFEA8AF}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{4B307344-DD0B-4D52-8354-E6D06DF5D303}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{5BB1E69A-E4A3-4ABD-B750-CC67BD2F1C29}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{D6BCDCA8-70EF-4891-AE73-235C964422E3}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{4F6D4854-2A79-42B1-9A3C-759D8E6EA5B1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{0823F6A0-5F62-4C2B-A1CA-E602485F3348}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{4E507199-0E83-4C5B-AA12-6FE4A2491809}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{B408FDA0-D8B1-4CE3-9CBC-E7DEBBFE41CE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{D6BEB72C-11BF-41A2-9BF5-9852C6D88889}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{F7B07158-4431-44DF-AEA2-1D5622907BA0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{6CC74370-41C0-4F46-BFE3-E6EECF9B3710}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{B42F2DC0-6339-4417-B714-CE9BAAB9B918}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [TCP Query User{71AF4574-C332-465B-9257-2706D0723950}C:\programdata\elo digital office\volltext\bin\eloocr_fr.exe] => (Allow) C:\programdata\elo digital office\volltext\bin\eloocr_fr.exe
FirewallRules: [UDP Query User{C1C1C993-923E-41C1-BAB5-89C45A3A4043}C:\programdata\elo digital office\volltext\bin\eloocr_fr.exe] => (Allow) C:\programdata\elo digital office\volltext\bin\eloocr_fr.exe
FirewallRules: [TCP Query User{B05E7C62-10D8-4DC5-9DBD-754A366538FF}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{70808B14-050F-4AD3-940E-805A2A5B5E19}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{EE30F330-EA6E-4607-AEA9-FB0859CA607D}] => (Allow) C:\Program Files (x86)\Sonos\Sonos.exe
FirewallRules: [{4BA447A4-3DBA-44DA-827B-936DB31327C9}] => (Allow) C:\Program Files (x86)\Sonos\Sonos.exe
FirewallRules: [{98EE9E56-C170-4FA7-9556-13007A87C3AD}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{8C38F049-C376-4CA1-AE66-34BB99EA91C4}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{13966F86-5F95-4FFB-98A4-16266121BB68}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{F90BE7AC-521B-46E4-9F60-348E412124FA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{F6A6C742-566D-4F50-8D14-B9D85220BBBD}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{BD4C3C56-E396-4438-853F-FAEB7968CA3F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{5CE20C4F-2645-40CD-9364-1CC28A696E44}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{C996CFF0-F36A-4086-A589-26994BB01AA5}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{5E666F93-32AC-4F0D-89CA-C6BD0DD3B412}] => (Allow) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
FirewallRules: [{C488373F-2C06-459C-86ED-8DFDB6FDEF08}] => (Allow) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
FirewallRules: [{32993ACF-E887-4F36-8C07-35513A132768}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [TCP Query User{7CEB7CDF-C42D-4ED1-B125-88D2AE5AEFAA}C:\program files (x86)\xbmc\wake.exe] => (Allow) C:\program files (x86)\xbmc\wake.exe
FirewallRules: [UDP Query User{7E71E0E6-59CF-46FA-9C1D-6142F8D758CA}C:\program files (x86)\xbmc\wake.exe] => (Allow) C:\program files (x86)\xbmc\wake.exe
FirewallRules: [{D1EB2436-E81C-44B9-9878-E85363D88374}] => (Block) C:\program files (x86)\xbmc\wake.exe
FirewallRules: [{5967A1FD-6942-4CF5-A04A-F30F6E35BD4E}] => (Block) C:\program files (x86)\xbmc\wake.exe
FirewallRules: [TCP Query User{89597B40-4BC0-4842-B4AD-A19D2BD18DED}D:\x-plane 10\x-plane.exe] => (Allow) D:\x-plane 10\x-plane.exe
FirewallRules: [UDP Query User{189E8A20-2EB0-4887-9EE5-2A4E59433320}D:\x-plane 10\x-plane.exe] => (Allow) D:\x-plane 10\x-plane.exe
FirewallRules: [{0BEF704C-EF9E-4AF4-A761-4BF90398F21B}] => (Block) D:\x-plane 10\x-plane.exe
FirewallRules: [{594CB74C-CB4B-4A51-8E2E-B0AE60209F09}] => (Block) D:\x-plane 10\x-plane.exe
FirewallRules: [TCP Query User{AA5959E7-C5EE-4DB6-9113-65850382F693}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe
FirewallRules: [UDP Query User{DFBDDE3D-B1B0-4815-9A1B-18399E3BB5C9}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe
FirewallRules: [{14997928-6522-4DC3-AFC8-CE83486583C5}] => (Block) C:\program files (x86)\kodi\kodi.exe
FirewallRules: [{C05930D8-7A52-4311-B1D4-3107D10D136D}] => (Block) C:\program files (x86)\kodi\kodi.exe
FirewallRules: [TCP Query User{367DBBCA-0D21-4E02-ABB4-A3D77C330951}D:\kodi dateien\kodi startup skript\wake.exe] => (Allow) D:\kodi dateien\kodi startup skript\wake.exe
FirewallRules: [UDP Query User{0FA04778-563A-4496-8104-96E489161E0B}D:\kodi dateien\kodi startup skript\wake.exe] => (Allow) D:\kodi dateien\kodi startup skript\wake.exe
FirewallRules: [{61478CCD-4C11-4B07-A5F4-7DDD821CA87E}] => (Block) D:\kodi dateien\kodi startup skript\wake.exe
FirewallRules: [{DAD70CAD-6490-4268-84D8-CF5CFDF87593}] => (Block) D:\kodi dateien\kodi startup skript\wake.exe
FirewallRules: [{CB9B33B2-0FFA-41D1-A0B3-F8934A9F30B8}] => (Allow) C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe
FirewallRules: [{A8119655-F1B9-42B9-8783-E39F51927836}] => (Allow) C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe
FirewallRules: [{A768239C-AC66-47BD-8E7E-D958DE10C832}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{95E3D279-EBC6-40D8-8854-E2B7B92B0CC4}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{6BF698D1-F228-4465-B027-2C9CAFBDB558}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{15E0FEA9-69D5-42F4-9AC3-A4ADEFC59A98}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{ADF98F16-2F31-4819-A8BF-084F5FBEEF8F}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{211330CD-AF03-4BA7-A8FF-A6411E42E957}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{3FC131AB-CA9B-442F-89C1-B3987686878C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{B3F23426-AAEC-4355-83B2-ACBD914B0E36}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{94CCE881-6BFF-46BE-8269-BD756B50EB9C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{12835AF7-DB49-433A-AFB8-EAED640436CD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{17316687-6E0C-431E-AF5B-CAFC6DF67CB1}] => (Allow) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
FirewallRules: [{9591D6BB-8852-4FD0-BE1A-DD0A38472E86}] => (Allow) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
FirewallRules: [TCP Query User{5F7699DA-4672-48B7-9F70-E570D1E95F5F}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{9975F651-A28D-4894-8080-88F1B3368C18}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [{284B7C92-1AFC-4EE4-B002-472E03F967E3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2FF862E2-84F4-4651-9B14-2BACF281A5CC}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{51C68FA0-2E8F-4B1E-BFF6-58C7BCD86B26}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{7EECBABA-F89F-4E56-A9A4-F63BDBCEC5A8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C12DE224-510D-4862-92F4-EFAA4D0531DB}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [TCP Query User{22E71012-F3ED-4281-8B09-629F97520B92}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [UDP Query User{6CDD5378-96E9-4FCB-B3A8-8D427BCFF81C}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [{3A515EDF-8EDF-4924-A311-A05F7D980722}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7468C166-0E10-47E9-A95A-EE1E707F70A8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
DomainProfile\AuthorizedApplications: [C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe] => Enabled:Logitech Harmony Remote Software 7
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe] => Enabled:Logitech Harmony Remote Software 7

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Officejet 4500 G510n-z
Description: Officejet 4500 G510n-z
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Controller der Familie Realtek PCIe GBE
Description: Controller der Familie Realtek PCIe GBE
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: RTL8168
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Officejet 4500 G510n-z
Description: Officejet 4500 G510n-z
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: HP
Service: StillCam
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/05/2015 07:51:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ZeroConfigService.exe, Version: 16.10.0.0, Zeitstempel: 0x52cda7eb
Name des fehlerhaften Moduls: MurocApi.dll, Version: 16.10.0.0, Zeitstempel: 0x52cda6c5
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000002bcd8
ID des fehlerhaften Prozesses: 0x1178
Startzeit der fehlerhaften Anwendung: 0xZeroConfigService.exe0
Pfad der fehlerhaften Anwendung: ZeroConfigService.exe1
Pfad des fehlerhaften Moduls: ZeroConfigService.exe2
Berichtskennung: ZeroConfigService.exe3
Vollständiger Name des fehlerhaften Pakets: ZeroConfigService.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: ZeroConfigService.exe5

Error: (12/05/2015 06:42:43 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: 80070005

Error: (12/04/2015 07:53:29 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (12/04/2015 03:30:55 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 3516

Error: (12/04/2015 03:30:55 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 3516

Error: (12/04/2015 03:30:55 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/04/2015 03:30:54 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2360

Error: (12/04/2015 03:30:54 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2360

Error: (12/04/2015 03:30:54 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (12/04/2015 03:30:53 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1204


Systemfehler:
=============
Error: (12/06/2015 10:25:11 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avast Antivirus" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/05/2015 10:52:52 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Streamer Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (12/05/2015 10:52:51 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (12/05/2015 08:33:22 PM) (Source: DCOM) (EventID: 10010) (User: PC-KLAUS)
Description: {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Error: (12/05/2015 07:52:22 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) PROSet/Wireless Zero Configuration Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (12/05/2015 07:51:06 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {DDCFD26B-FEED-44CD-B71D-79487D2E5E5A}

Error: (12/05/2015 07:48:31 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎05.‎12.‎2015 um 19:33:22 unerwartet heruntergefahren.

Error: (12/04/2015 07:54:37 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Streamer Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (12/04/2015 07:54:31 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (12/04/2015 05:48:07 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Der Dienst "Acronis Sync Agent Service" wurde nicht richtig gestartet.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i5-3230M CPU @ 2.60GHz
Prozentuale Nutzung des RAM: 30%
Installierter physikalischer RAM: 8074.79 MB
Verfügbarer physikalischer RAM: 5620.38 MB
Summe virtueller Speicher: 9354.79 MB
Verfügbarer virtueller Speicher: 6450.24 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:133.34 GB) (Free:61.54 GB) NTFS
Drive d: (Volume) (Fixed) (Total:781.05 GB) (Free:587.95 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 5895590F)

Partition: GPT.

==================== Ende von Addition.txt ============================

M-K-D-B 06.12.2015 13:50
:hallo:


Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.


Bitte beachte folgende Hinweise:
  • Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
  • Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
  • Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
  • Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
  • Bitte beachten: Download bei filepony.de: So ladet Ihr unsere Tools richtig!
  • Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!


Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:
So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.
http://www.trojaner-board.de/picture...&pictureid=307

Danke für deine Mitarbeit!






Zukünftig bitte beachten:
Zitat:
Gestartet von C:\Users\Klaus\Downloads\_FRST
Leider hast du unsere Anleitung nicht richtig befolgt:
Bitte alle Tools direkt auf den Desktop downloaden bzw. dorthin verschieben und vom Desktop starten, da unsere Anleitungen daraufhin ausgelegt sind.
Zudem lassen sich dann am Ende der Bereinigung alle verwendeten Tools sehr einfach entfernen.
Alle Tools bis zum Ende der Bereinigung auf dem Desktop lassen, evtl. benötigen wir manche öfter.








Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.

Pauli#01 06.12.2015 14:44
Hallo Matthias,
vielen Dank das Du mir helfen willst.
Gruß
Klaus

Teil1 TDSSKiller

Code:
14:24:27.0717 0x0578  TDSS rootkit removing tool 3.1.0.7 Nov 29 2015 22:37:04
14:24:27.0717 0x0578  UEFI system
14:24:30.0314 0x0578  ============================================================
14:24:30.0314 0x0578  Current date / time: 2015/12/06 14:24:30.0314
14:24:30.0314 0x0578  SystemInfo:
14:24:30.0314 0x0578 
14:24:30.0314 0x0578  OS Version: 6.3.9600 ServicePack: 0.0
14:24:30.0314 0x0578  Product type: Workstation
14:24:30.0314 0x0578  ComputerName: PC-KLAUS
14:24:30.0314 0x0578  UserName: Klaus
14:24:30.0314 0x0578  Windows directory: C:\WINDOWS
14:24:30.0314 0x0578  System windows directory: C:\WINDOWS
14:24:30.0314 0x0578  Running under WOW64
14:24:30.0314 0x0578  Processor architecture: Intel x64
14:24:30.0314 0x0578  Number of processors: 4
14:24:30.0314 0x0578  Page size: 0x1000
14:24:30.0314 0x0578  Boot type: Normal boot
14:24:30.0314 0x0578  ============================================================
14:24:30.0818 0x0578  KLMD registered as C:\WINDOWS\system32\drivers\11836741.sys
14:24:30.0912 0x0578  System UUID: {2A9A9A65-9A67-6535-E93F-DE341938E2CC}
14:24:31.0263 0x0578  Drive \Device\Harddisk0\DR0 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
14:24:31.0266 0x0578  ============================================================
14:24:31.0266 0x0578  \Device\Harddisk0\DR0:
14:24:31.0266 0x0578  GPT partitions:
14:24:31.0267 0x0578  \Device\Harddisk0\DR0\Partition1: GPT, TypeGUID: {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}, UniqueGUID: {A36AE9AD-5CB5-4DB3-9F61-4C8797F85F90}, Name: , StartLBA 0x22, BlocksNum 0x40000
14:24:31.0267 0x0578  \Device\Harddisk0\DR0\Partition2: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {7F17246D-CF6C-46A1-A5FD-22941C0F9FFC}, Name: , StartLBA 0x40800, BlocksNum 0x200000
14:24:31.0267 0x0578  \Device\Harddisk0\DR0\Partition3: GPT, TypeGUID: {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}, UniqueGUID: {C685E26E-FC03-4BA8-99AF-E805583E6EA5}, Name: , StartLBA 0x240800, BlocksNum 0x200000
14:24:31.0267 0x0578  \Device\Harddisk0\DR0\Partition4: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {6028DC9E-2708-47C8-A6F1-CADDAD5C56F1}, Name: , StartLBA 0x440800, BlocksNum 0x10AAC000
14:24:31.0267 0x0578  \Device\Harddisk0\DR0\Partition5: GPT, TypeGUID: {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}, UniqueGUID: {B4FE158C-844A-4170-8D58-27F3A239ED5A}, Name: , StartLBA 0x10EED000, BlocksNum 0x61A17800
14:24:31.0267 0x0578  \Device\Harddisk0\DR0\Partition6: GPT, TypeGUID: {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}, UniqueGUID: {9D11651B-20B7-47CD-8470-57D59CD80107}, Name: , StartLBA 0x72904800, BlocksNum 0x1E02000
14:24:31.0267 0x0578  MBR partitions:
14:24:31.0267 0x0578  ============================================================
14:24:31.0285 0x0578  C: <-> \Device\Harddisk0\DR0\Partition4
14:24:31.0339 0x0578  D: <-> \Device\Harddisk0\DR0\Partition5
14:24:31.0339 0x0578  ============================================================
14:24:31.0339 0x0578  Initialize success
14:24:31.0339 0x0578  ============================================================
14:24:48.0516 0x1e90  ============================================================
14:24:48.0516 0x1e90  Scan started
14:24:48.0516 0x1e90  Mode: Manual; SigCheck; TDLFS;
14:24:48.0516 0x1e90  ============================================================
14:24:48.0516 0x1e90  KSN ping started
14:24:50.0860 0x1e90  KSN ping finished: true
14:24:54.0582 0x1e90  ================ Scan system memory ========================
14:24:54.0582 0x1e90  System memory - ok
14:24:54.0582 0x1e90  ================ Scan services =============================
14:24:54.0769 0x1e90  [ E1832BD9FD7E0FC2DC9FA5935DE3E8C1, 41FF7418887AFC8B9C96EF21C5950DD342CC9E3C0D87AFD60A05B988C1D6CC23 ] 1394ohci        C:\WINDOWS\System32\drivers\1394ohci.sys
14:24:54.0847 0x1e90  1394ohci - ok
14:24:54.0878 0x1e90  [ AD508A1A46EC21B740AB31C28EFDFDB1, 9B1046CF0B80723149BD359B55CC0B8B3ABBEAA9038469F542A4C345C503FB02 ] 3ware          C:\WINDOWS\system32\drivers\3ware.sys
14:24:54.0894 0x1e90  3ware - ok
14:24:54.0941 0x1e90  [ E796AE43DDD1844281DB4D57294D17C0, 21AE69615044A96041E46476BE814B52C22624B6C7EA6BFC77BB64F69C3C21F5 ] ACPI            C:\WINDOWS\system32\drivers\ACPI.sys
14:24:54.0988 0x1e90  ACPI - ok
14:24:54.0988 0x1e90  [ AC8279D229398BCF05C3154ADCA86813, 083E86CBE53244D24C334DB1511C77025133AE7875191845764B890A8CA5AFA9 ] acpiex          C:\WINDOWS\system32\Drivers\acpiex.sys
14:24:55.0019 0x1e90  acpiex - ok
14:24:55.0035 0x1e90  [ A8970D9BF23CD309E0403978A1B58F3F, 9946C8477104EEC7DB197E2222F9905307F101C398CCED4B5FD0F86A5622C791 ] acpipagr        C:\WINDOWS\System32\drivers\acpipagr.sys
14:24:55.0066 0x1e90  acpipagr - ok
14:24:55.0097 0x1e90  [ 111A89C99C5B4F1A7BCE5F643DD86F65, 41A2E49FF443927D05F7EF638518108227852984E68D4663C8761178C0B84A45 ] AcpiPmi        C:\WINDOWS\System32\drivers\acpipmi.sys
14:24:55.0128 0x1e90  AcpiPmi - ok
14:24:55.0160 0x1e90  [ 5758387D68A20AE7D3245011B07E36E7, 77832E200E8B0D259552F6F60FE454A887E3EBBB9EA2F3590E6645289A04E293 ] acpitime        C:\WINDOWS\System32\drivers\acpitime.sys
14:24:55.0207 0x1e90  acpitime - ok
14:24:55.0347 0x1e90  [ 8EEC0269D86CFADD292C9B05F59F23ED, 779F863563F9F31B102EB7A7C1580281D73F083213B0DD17A82A9EF2886DFD79 ] AcrSch2Svc      C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
14:24:55.0378 0x1e90  AcrSch2Svc - ok
14:24:55.0457 0x1e90  [ 5DB2C6B908C50767E2EDAA294A7566B5, 13AE4879D679BB0C6B2A5A5B13910359815A9D2E569BC1DE740B5A387A78CF33 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
14:24:55.0488 0x1e90  AdobeARMservice - ok
14:24:55.0597 0x1e90  [ 280A526E8111AC6A5BCC1A059E1E0340, FB92DDAE29A097D148AB23D8A0BD2B9E662EC1DBF0DA8B716374D6919B4C646F ] AdobeFlashPlayerUpdateSvc C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
14:24:55.0628 0x1e90  AdobeFlashPlayerUpdateSvc - ok
14:24:55.0675 0x1e90  [ 7C1FDF1B48298CBA7CE4BDD4978951AD, 80F4D536E1231B30E836F72ADC8814AE6AA9FEC573FB5F3F965FAC8ABCCAF0F8 ] ADP80XX        C:\WINDOWS\system32\drivers\ADP80XX.SYS
14:24:55.0722 0x1e90  ADP80XX - ok
14:24:55.0769 0x1e90  [ BCD58DACAA1EAAADC115EDD940478F6D, F31613F583C302F62A00E6766B031531C9E193CAED563689B178BA257715B992 ] AeLookupSvc    C:\WINDOWS\System32\aelupsvc.dll
14:24:55.0802 0x1e90  AeLookupSvc - ok
14:24:55.0958 0x1e90  [ 3B0908381A28DEFD42F42DBA9F06D39B, 3179AC9F26338D684CB806F29CD37EA75BE7F4553834F682E65ECE6D6D797FD4 ] afcdpsrv        C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
14:24:56.0037 0x1e90  afcdpsrv - ok
14:24:56.0068 0x1e90  [ A460C3AF3755A2A79A3C8EFE72E147B5, 62CEA85DA53D86D3E7B5D79F94095C6126FFF3DEE1427BBF3DEF5EA366B4513B ] AFD            C:\WINDOWS\system32\drivers\afd.sys
14:24:56.0130 0x1e90  AFD - ok
14:24:56.0146 0x1e90  [ 7DFAEBA9AD62D20102B576D5CAC45EC8, 9FA5207335303D1E8E9A3C9E1FB82C09AD21B04382F69D777A67E48EE91D2093 ] agp440          C:\WINDOWS\system32\drivers\agp440.sys
14:24:56.0162 0x1e90  agp440 - ok
14:24:56.0287 0x1e90  [ A9F3294F6939172C45D6C5AF2E563714, 5A3C1CFF254222D210974E974D4E5FEC38CA83D855E3DF341719CD0E3BA67171 ] AGSService      C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
14:24:56.0318 0x1e90  AGSService - ok
14:24:56.0349 0x1e90  [ FE14D249D39368CA62D8DA6BC94AC694, E1036E22BFBD3750FD2D3DA6AB939B2DD54E824F4BD3E6539EF0E45AB5453DD1 ] ahcache        C:\WINDOWS\system32\DRIVERS\ahcache.sys
14:24:56.0380 0x1e90  ahcache - ok
14:24:56.0412 0x1e90  [ 14A45BE6F5678339F0EC5752D9849410, DD0F60E96FAC68FBD5B86382E541408C613BD0F871D0E0A1EF9AB6E7B26E545C ] ALG            C:\WINDOWS\System32\alg.exe
14:24:56.0474 0x1e90  ALG - ok
14:24:56.0505 0x1e90  [ 7589DE749DB6F71A68489DCE04158729, 5F35EDD50737985595C9D6703237CA2ADE49AA5443331020899698EB5114A0FB ] AmdK8          C:\WINDOWS\System32\drivers\amdk8.sys
14:24:56.0568 0x1e90  AmdK8 - ok
14:24:56.0584 0x1e90  [ B46D2D89AFF8A9490FA8C98C7A5616E3, BE0765B5423B690E0F097FECD9717FAA95BFDFFDC6CF1B93DE5A19A1B7797879 ] AmdPPM          C:\WINDOWS\System32\drivers\amdppm.sys
14:24:56.0630 0x1e90  AmdPPM - ok
14:24:56.0646 0x1e90  [ D2BF2F94A47D332814910FD47C6BBCD2, FE273D77D119D958676E1197D9EA7B008E3B05C6192B1962A81D4223ED204C35 ] amdsata        C:\WINDOWS\system32\drivers\amdsata.sys
14:24:56.0662 0x1e90  amdsata - ok
14:24:56.0709 0x1e90  [ A8E04943C7BBA7219AA50400272C3C6E, 794C0BD12DF0392654E9A37AE4A24B5BE2D83F1F24F74DD48A1A0BF3AB8B1FF8 ] amdsbs          C:\WINDOWS\system32\drivers\amdsbs.sys
14:24:56.0724 0x1e90  amdsbs - ok
14:24:56.0755 0x1e90  [ CEA5F4F27CFC08E3A44D576811B35F50, 89DF64B81BD109BAABAE93A4603C1617241219F38DDAF325EFE6BD35FF6FD717 ] amdxata        C:\WINDOWS\system32\drivers\amdxata.sys
14:24:56.0787 0x1e90  amdxata - ok
14:24:56.0818 0x1e90  [ 415DD71628795197F7AFC176CBADC74E, 5F0359053A6CD6EE239139E0E6F46E1FA9A73F017C0CE9B7BC052216B2C846EC ] AppID          C:\WINDOWS\system32\drivers\appid.sys
14:24:56.0849 0x1e90  AppID - ok
14:24:56.0880 0x1e90  [ 88358135810B9DFD830A9D3A8C3D149A, DF914DA3828EE2310895D156342E3B3DF5E8C6F6F9B851C359E82A1F48180D4B ] AppIDSvc        C:\WINDOWS\System32\appidsvc.dll
14:24:56.0912 0x1e90  AppIDSvc - ok
14:24:56.0959 0x1e90  [ 680BFB820C5A943AB709BAA2B1EF27F2, A51D2A7976A762FE470C13C6D1BA0319A0FB19C9E66BF02AA44F83EAEC7130F8 ] Appinfo        C:\WINDOWS\System32\appinfo.dll
14:24:57.0021 0x1e90  Appinfo - ok
14:24:57.0146 0x1e90  [ 2D564BB1C4559A517B390A031955714D, 3048C187FD107C958D43DD8B954AB55FDD1BC538D3E0066CBFCB428C7A8A87E1 ] Apple Mobile Device Service C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
14:24:57.0162 0x1e90  Apple Mobile Device Service - ok
14:24:57.0209 0x1e90  [ 35E28923A23ADABAA5A1B43256D0AB58, A5F3AF8BBEE58B2165BAFACC5FF8B167B55B020998D3D1565C2229ED8753B269 ] AppReadiness    C:\WINDOWS\system32\AppReadiness.dll
14:24:57.0302 0x1e90  AppReadiness - ok
14:24:57.0365 0x1e90  [ 573542B5E97772021B73E854DA861DAA, C3FD00FA28060F8D7CDFD455BBB5FF8239CB76DDFFF2BDAE6AA944674DD993D3 ] AppXSvc        C:\WINDOWS\system32\appxdeploymentserver.dll
14:24:57.0427 0x1e90  AppXSvc - ok
14:24:57.0443 0x1e90  [ 65045784366F7EC5FB4E71BCF923187B, 53C215C64FF12E44B097F7CB88E8482438CE0ACBD3C68D8FD38BA0D0D8747FAA ] arcsas          C:\WINDOWS\system32\drivers\arcsas.sys
14:24:57.0474 0x1e90  arcsas - ok
14:24:57.0490 0x1e90  [ 7BC1F2FC2A9D79E1EBBBF6D69AC3BA1F, 236265BE3F1B2130025A3A10152893BD0D18AD8965732361058B775F010539A2 ] aswHwid        C:\WINDOWS\system32\drivers\aswHwid.sys
14:24:57.0521 0x1e90  aswHwid - ok
14:24:57.0521 0x1e90  [ 82065730918234A15A3A7AD6153FF8F2, 8426FF72512F7C7456E9A648100BFD35AC43FA8C01F98493B036F78F13C1F2C8 ] aswMonFlt      C:\WINDOWS\system32\drivers\aswMonFlt.sys
14:24:57.0552 0x1e90  aswMonFlt - ok
14:24:57.0552 0x1e90  [ 2D6B49A071216796106E7804AB2BA7DC, 6A58A3B36EA05A24333482F87CFD315F73E56A64E46493E82E0FE9115E284168 ] aswRdr          C:\WINDOWS\system32\drivers\aswRdr2.sys
14:24:57.0568 0x1e90  aswRdr - ok
14:24:57.0584 0x1e90  [ E46B51C99BB750A81AC6A68362475A5C, 2A61C09902B39696D151B9D5E6A60FFC3CF3EA02613EC64BBAB4DEE3C78838E2 ] aswRvrt        C:\WINDOWS\system32\drivers\aswRvrt.sys
14:24:57.0599 0x1e90  aswRvrt - ok
14:24:57.0646 0x1e90  [ A428CC308673A5E74F91D92E4A2B205D, 0A768AA4BD1CD22B5181EDA692F7CB9A43F627BB4FFEEFBB8CBC77A45107A443 ] aswSnx          C:\WINDOWS\system32\drivers\aswSnx.sys
14:24:57.0709 0x1e90  aswSnx - ok
14:24:57.0724 0x1e90  [ 5C0C4440A27074BBABC5D572DD29CA9B, 9545498B55994D427DB71F67B28C24804FECFE6BF225B24B067A7F0658429EDF ] aswSP          C:\WINDOWS\system32\drivers\aswSP.sys
14:24:57.0755 0x1e90  aswSP - ok
14:24:57.0755 0x1e90  [ D9079E1A1C2A1F8ED5F37AF8E6CD3161, 629E3A642C5E3BEA65CDD2E08CAD69F9649A98BDA906678B51D3D2C9DB5BB253 ] aswStm          C:\WINDOWS\system32\drivers\aswStm.sys
14:24:57.0771 0x1e90  aswStm - ok
14:24:57.0788 0x1e90  [ 3BEC32A0B646D914921FD56AA39998C1, 8DB7CBF3DEF8EAE1D7D28C38B3A0FCD5C2A04D772078B907F35C66451355A04A ] aswVmm          C:\WINDOWS\system32\drivers\aswVmm.sys
14:24:57.0804 0x1e90  aswVmm - ok
14:24:57.0819 0x1e90  [ 3DB7721F06BC2FEDB25029EA23AB27DA, 221861148C66FE53E4D6EE49C6E656479AB5804A2D348A280A1CD8093E8AB788 ] AsyncMac        C:\WINDOWS\system32\DRIVERS\asyncmac.sys
14:24:57.0851 0x1e90  AsyncMac - ok
14:24:57.0882 0x1e90  [ 74B14192CF79A72F7536B27CB8814FBD, 0CF6BBB63FFE0C12777664D80B2797923844C8392D0FD81D7962EE5EE2C3C3D9 ] atapi          C:\WINDOWS\system32\drivers\atapi.sys
14:24:57.0897 0x1e90  atapi - ok
14:24:57.0929 0x1e90  [ 431FE56F5A2F5937994CB2DA330B47DB, E5AED551529A21494114959251FDF566802DD6D9B9D86A937A0EECE53338CAC7 ] AudioEndpointBuilder C:\WINDOWS\System32\AudioEndpointBuilder.dll
14:24:57.0960 0x1e90  AudioEndpointBuilder - ok
14:24:57.0991 0x1e90  [ 0F03CC00645D7F841879A048787D6AC7, 3ECD2486157469F2EDB63D4868338D1445F2909153DF0AFFE432083730EEE3F5 ] Audiosrv        C:\WINDOWS\System32\Audiosrv.dll
14:24:58.0054 0x1e90  Audiosrv - ok
14:24:58.0116 0x1e90  [ F5CB8703A4F51EE30E5C090C78073AA4, 90683F39E9AA315FFB66A9F014AD1BEBF19EA62908247C133455815F6632E578 ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
14:24:58.0147 0x1e90  avast! Antivirus - ok
14:24:58.0163 0x1e90  AvastVBoxSvc - ok
14:24:58.0194 0x1e90  [ 3C6ED74AF41DD1A5585CE5EF3D00915F, A742F576407776634E5A8E49C60023FFDF395DE0B2DE36662A23F85B79405ED2 ] AxInstSV        C:\WINDOWS\System32\AxInstSV.dll
14:24:58.0257 0x1e90  AxInstSV - ok
14:24:58.0304 0x1e90  [ A4A73F631FE2AA2826FBE4A399B04DEF, 973AACE8DC8DA669D0DF20F17EFDEEABB90AA046AC980948D16A62D39A606A79 ] b06bdrv        C:\WINDOWS\system32\drivers\bxvbda.sys
14:24:58.0351 0x1e90  b06bdrv - ok
14:24:58.0366 0x1e90  [ 7729395761F4061A643B573BF7F19AA8, 4CDDA920FA238E63563FB28C5B12E7DCDA3ADCBA7358E0996A0DF357EB51CBC4 ] BackupReader    C:\WINDOWS\System32\drivers\BackupReader.sys
14:24:58.0397 0x1e90  BackupReader - ok
14:24:58.0413 0x1e90  [ 8CC7F7E4AFCBA605921B137ED7992C68, 71406E6D6E9964740A6D90B05329D5492BB90AF40E0630CF2FBF4BA4BA14F2DD ] BasicDisplay    C:\WINDOWS\System32\drivers\BasicDisplay.sys
14:24:58.0444 0x1e90  BasicDisplay - ok
14:24:58.0476 0x1e90  [ 38A82F4EE8C416A6744B6D30381ED768, 9EAAE5F43BA09359130AC04B1DCA0F5D4DF32ED89C02DC5CEB640918948847F7 ] BasicRender    C:\WINDOWS\System32\drivers\BasicRender.sys
14:24:58.0522 0x1e90  BasicRender - ok
14:24:58.0554 0x1e90  [ 70433F7A216BD0B5EC7DA1202EE53E65, 12F3210EC5546714B34225770242F5CF4AC36032BB49A8E8989620BA274AC505 ] bcbtums        C:\WINDOWS\system32\drivers\bcbtums.sys
14:24:58.0569 0x1e90  bcbtums - ok
14:24:58.0632 0x1e90  [ 18B186BCC56EC611DE519CBA7D4F65B0, 6F2520AAFDAA4208717DCD121527911D580727C5A6B8C4C7F07C4155C4D8662D ] BcmBtRSupport  C:\WINDOWS\system32\BtwRSupportService.exe
14:24:58.0694 0x1e90  BcmBtRSupport - ok
14:24:58.0726 0x1e90  [ C1ABB0F7E3BEA48A0417BDF6FF14AB21, 1CAC63A1A0FB9855A27EE977794576A860F6650C9EF7667FFB27F2A2FF721857 ] bcmfn2          C:\WINDOWS\System32\drivers\bcmfn2.sys
14:24:58.0741 0x1e90  bcmfn2 - ok
14:24:58.0772 0x1e90  [ 4B6F61BD394DCEDA9B06D702836531C2, 83C739467BD9A00FE09BCE83BB9409EA2DA62FCDD2384F9EE98626226223E918 ] BDESVC          C:\WINDOWS\System32\bdesvc.dll
14:24:58.0804 0x1e90  BDESVC - ok
14:24:58.0851 0x1e90  [ EC19013E4CF87609534165DF897274D6, 8ED45537CF2D58D759A587CCBFDADD5580C7447B0C3B172CF19ECC7585E073FC ] Beep            C:\WINDOWS\system32\drivers\Beep.sys
14:24:58.0897 0x1e90  Beep - ok
14:24:58.0944 0x1e90  [ 8F2AD111B47A190F325EE7495D3C1803, C61F1506E74A9EFBB61B8A06B30886B6E891C33211F755F30B924EBA202ECEC5 ] BFE            C:\WINDOWS\System32\bfe.dll
14:24:59.0022 0x1e90  BFE - ok
14:24:59.0069 0x1e90  [ 48554994279BFE17A3D2B00076D0CB1A, 6521B1EC0BC6B01F63976370D89FE7DC2E7404899F68B6FAC37A9173B9C5D489 ] BITS            C:\WINDOWS\System32\qmgr.dll
14:24:59.0147 0x1e90  BITS - ok
14:24:59.0194 0x1e90  [ B5C2F92EE1106DFE7BB1CCE4D35B6037, E399C390687589194D8AAD385055F0CFA7D52AD9E837D8FF95008B8EB2B34E50 ] Bonjour Service C:\Program Files\Bonjour\mDNSResponder.exe
14:24:59.0210 0x1e90  Bonjour Service - ok
14:24:59.0226 0x1e90  [ 6B4FFFDDC618FCF64473CAA86E305697, 29EA66071D5822920F5C50533673ADAB5204F8B25C11027AD27450D881F1142D ] bowser          C:\WINDOWS\system32\DRIVERS\bowser.sys
14:24:59.0241 0x1e90  bowser - ok
14:24:59.0288 0x1e90  [ FA601515FF2B59F25FDD8EDB1D2A1104, 21DFB53241F8E880F7546B9ADF38F47D6AD0782EC7F8F0284ED69DE7CEF7DCB9 ] BrokerInfrastructure C:\WINDOWS\System32\bisrv.dll
14:24:59.0319 0x1e90  BrokerInfrastructure - ok
14:24:59.0351 0x1e90  [ BC111AADACD0BF59D56547461D13AB6E, 91E3619930C29EE4B2683683888BA7EE3CF6B1DDB0C19A14E0880470CBE40EF4 ] Browser        C:\WINDOWS\System32\browser.dll
14:24:59.0382 0x1e90  Browser - ok
14:24:59.0429 0x1e90  [ F4CB6F457D019857C8DB6F04CA2957F5, D9E7DD49AF9C38D1696045F6004E1B504A65227B41256961E28A8DCA9B068EA9 ] BthA2DP        C:\WINDOWS\system32\drivers\BthA2DP.sys
14:24:59.0476 0x1e90  BthA2DP - ok
14:24:59.0491 0x1e90  [ A8F23D453A424FF4DE04989C4727ECC7, AE4A9081395C7379F1C947EF8243F7609F90C843E086B8E77E1A2C06E36D4381 ] BthAvrcpTg      C:\WINDOWS\System32\drivers\BthAvrcpTg.sys
14:24:59.0522 0x1e90  BthAvrcpTg - ok
14:24:59.0554 0x1e90  [ 12418846B057E4F92FC621F5C6CF737D, 0B8B0EADE4F2AD95D450A5C71C287C0F04F33897ABF27D3E3B6428A3C99C7B5D ] BthEnum        C:\WINDOWS\System32\drivers\BthEnum.sys
14:24:59.0585 0x1e90  BthEnum - ok
14:24:59.0601 0x1e90  [ 7A2E3CB427309F56C2571F0610B7ADA8, 25C178EA7FC2CE6375CA1B75057FA7A992CF71BB7821F4A71107CDE6D0F04667 ] BthHFAud        C:\WINDOWS\System32\drivers\BthHfAud.sys
14:24:59.0616 0x1e90  BthHFAud - ok
14:24:59.0647 0x1e90  [ 272A62B660A48AEF366F8A1836CED19F, 78EFAC6B1B2313482329BBFFBF0DDA6462BD88E5BE3C817C5E8E0EAF3074C925 ] BthHFEnum      C:\WINDOWS\System32\drivers\bthhfenum.sys
14:24:59.0679 0x1e90  BthHFEnum - ok
14:24:59.0710 0x1e90  [ 71FE2A48E4C93DDB9798C024880B6C07, 8E93DE29C61A5FA64216231228CB3C4A1A693FE87CAA2C070BCAD7BE2D8ED000 ] bthhfhid        C:\WINDOWS\System32\drivers\BthHFHid.sys
14:24:59.0741 0x1e90  bthhfhid - ok
14:24:59.0788 0x1e90  [ 9307A4B743D277C499CDA8E19E5687AC, 7A01989EC3D54581F292BDEDC9B9445F2ABD50165102617E3089BDD061C63A19 ] BthHFSrv        C:\WINDOWS\System32\BthHFSrv.dll
14:24:59.0819 0x1e90  BthHFSrv - ok
14:24:59.0851 0x1e90  [ D30C67473A2E229662D21F27EAA9AAA5, D009C4836B0DFE963D8E3DEEDE611068838F2BBCAB146E6D70692FAB838E11F1 ] BthLEEnum      C:\WINDOWS\System32\drivers\BthLEEnum.sys
14:24:59.0898 0x1e90  BthLEEnum - ok
14:24:59.0929 0x1e90  [ EF4B9E7C9AD88C00C18A12B0D22D1894, 672537E75201E690D86CD65252B8AEF887C76EBD37AB0C419462D69164B350CC ] BTHMODEM        C:\WINDOWS\System32\drivers\bthmodem.sys
14:24:59.0960 0x1e90  BTHMODEM - ok
14:24:59.0976 0x1e90  [ FEA8FC81431AD93F44D5FBFBBF096AA7, C0581DF6B2AD24836604B083F4866F93A3F4D9091D382029948A5E6221EDF788 ] BthPan          C:\WINDOWS\System32\drivers\bthpan.sys
14:25:00.0007 0x1e90  BthPan - ok
14:25:00.0054 0x1e90  [ B810B2B39CCA90DC6BF42AF1658AE0D1, D184F927BCFBDE7063A0C9873BF2C174226E1AB5081A7108FCC66210CD117465 ] BTHPORT        C:\WINDOWS\System32\Drivers\BTHport.sys
14:25:00.0148 0x1e90  BTHPORT - ok
14:25:00.0179 0x1e90  [ 043A0F37631BF453F16D478B71320F46, C368296B802984F438852927B8A40EA3F4205724A05828F3173F08EC17228356 ] bthserv        C:\WINDOWS\system32\bthserv.dll
14:25:00.0210 0x1e90  bthserv - ok
14:25:00.0210 0x1e90  [ 52A1B7ECAB4C9EF70FD41241691E09D3, F7A5BFE72D3151E73DD9922A76964C08AC1FDCB8460D9A17DCF8B7969006AD42 ] BTHUSB          C:\WINDOWS\System32\Drivers\BTHUSB.sys
14:25:00.0257 0x1e90  BTHUSB - ok
14:25:00.0288 0x1e90  [ 20C8EB70C0B179DF06A01CA503F4A824, 1C2DADCBC5D85C1D4F6A28B7F374C829E6DCE0EB720EBDA43CF6AC0AC934AA5E ] btwampfl        C:\WINDOWS\system32\DRIVERS\btwampfl.sys
14:25:00.0304 0x1e90  btwampfl - ok
14:25:00.0335 0x1e90  [ 49665DD72F8DB515AB51D04984DB1D38, 8ABE06213D11309E6A2A6C21223852C33E28B4C9A5E9E6CAE20D4F6142F153F2 ] btwaudio        C:\WINDOWS\system32\drivers\btwaudio.sys
14:25:00.0351 0x1e90  btwaudio - ok
14:25:00.0382 0x1e90  [ 1611FFAFBB372A3BDA5ABDA3F9202882, D491A4F0F59B5C8779169C853F6CF27D13B59135335CCE243D3A54052B7B97A8 ] btwavdt        C:\WINDOWS\System32\drivers\btwavdt.sys
14:25:00.0398 0x1e90  btwavdt - ok
14:25:00.0460 0x1e90  [ D90264CCC8D627F5ADD89C8565331A19, A9597DA9B6C89F8CE2CF7C3F69365074045B9D9422F29BBB7A4AF7EA93DECFE3 ] btwdins        C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
14:25:00.0476 0x1e90  btwdins - ok
14:25:00.0523 0x1e90  [ C3C8974D99F976C927165363855690CD, 2B73E11FE341DE581CFF655E58C5671B83F4331529C30DADCAA9B6BE615D5E1F ] btwl2cap        C:\WINDOWS\system32\DRIVERS\btwl2cap.sys
14:25:00.0554 0x1e90  btwl2cap - ok
14:25:00.0585 0x1e90  [ BF79442906F4BB3DC4A81EA6B82EAD60, 2B67731D1C43C83A19CDC4ACE9605C9F3DA7347CC64C420DD00F8828227E939F ] btwrchid        C:\WINDOWS\System32\drivers\btwrchid.sys
14:25:00.0616 0x1e90  btwrchid - ok
14:25:00.0648 0x1e90  [ 2FA6510E33F7DEFEC03658B74101A9B9, 61C8C8E3F09B427711464C974EE22E1E01C48E10DB54A4EC9901F482FC36C978 ] cdfs            C:\WINDOWS\system32\DRIVERS\cdfs.sys
14:25:00.0679 0x1e90  cdfs - ok
14:25:00.0710 0x1e90  [ C6796EA22B513E3457514D92DCDB1A3D, 2B893F3950C6B913B934C2089B69F3B0B77F229AE1820907E598455CBB78139C ] cdrom          C:\WINDOWS\System32\drivers\cdrom.sys
14:25:00.0741 0x1e90  cdrom - ok
14:25:00.0773 0x1e90  [ 41C0D7B1A6D4AD119BA6AC0487EA5C8E, 516C2B34BA7507D0DA4148B4ABC0A8C36286570D4EA5C60B28647B1249C15018 ] CertPropSvc    C:\WINDOWS\System32\certprop.dll
14:25:00.0805 0x1e90  CertPropSvc - ok
14:25:00.0836 0x1e90  [ BE9936EDD3267FAAFF94A7835867F00B, 3CEEF2377D45ED38C7CD3CE4C746EC5EA7277EFEC728A5438F0EF5F62FC7C859 ] circlass        C:\WINDOWS\System32\drivers\circlass.sys
14:25:00.0867 0x1e90  circlass - ok
14:25:00.0898 0x1e90  [ 8EB7E70C2D348FE2476A2E3F2D585E3D, 2B5D407FACF1D049261026CC552A7C93B028A661B0F4E959815EAE7670054127 ] CLFS            C:\WINDOWS\system32\drivers\CLFS.sys
14:25:00.0914 0x1e90  CLFS - ok
14:25:00.0945 0x1e90  [ 39F71BF21E7F8EBE9B4810BC95EE26D6, 6134013F918D41A1AA8C814217A272F2C428FA3FE97DB66501FA50A488B0C991 ] clwvd          C:\WINDOWS\system32\DRIVERS\clwvd.sys
14:25:00.0961 0x1e90  clwvd - ok
14:25:00.0992 0x1e90  [ EF6EF85DADC3184A10D8F2F7159973CB, 42FCB286CED95A5DEBC5C0C894FCBC4818A2C818BB71087142FB51A08A0BE96B ] CmBatt          C:\WINDOWS\System32\drivers\CmBatt.sys
14:25:01.0008 0x1e90  CmBatt - ok
14:25:01.0055 0x1e90  [ 0DE32A0BB1FE2A773666572F79584520, C417C12476B937265BEDC9A2C3C3F6C50FD19AEC096362337B0921627A2A92EA ] CNG            C:\WINDOWS\system32\Drivers\cng.sys
14:25:01.0133 0x1e90  CNG - ok
14:25:01.0164 0x1e90  [ 03AAED827C36F35D70900558B8274905, 8E44A23C6013FFAE7769F99CAA3B1D6288DE00A38937F9056903AC265B503AFA ] CompositeBus    C:\WINDOWS\System32\drivers\CompositeBus.sys
14:25:01.0211 0x1e90  CompositeBus - ok
14:25:01.0211 0x1e90  COMSysApp - ok
14:25:01.0242 0x1e90  [ A1FF7DFBFBE164CF92603C651D304DD2, 470ACE5A75E64FC62C950037201199857E974803625DC73BEDBCF6FA4DDD496C ] condrv          C:\WINDOWS\system32\drivers\condrv.sys
14:25:01.0305 0x1e90  condrv - ok
14:25:01.0367 0x1e90  [ BB812787B838A74943DEF209350C3883, 2C168F48A68644AA3CB6167BEC2A260E3E9C78D0766A15AA0FAA39CDBD7FA040 ] cphs            C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
14:25:01.0398 0x1e90  cphs - ok
14:25:01.0430 0x1e90  [ 6324F0D18FB52833BA64BC828E29054C, 04118FA1BDFC512F76E4A81FEF34C78B6BD98429DB1D65123B6802B4A1E30584 ] CryptSvc        C:\WINDOWS\system32\cryptsvc.dll
14:25:01.0461 0x1e90  CryptSvc - ok
14:25:01.0477 0x1e90  [ 389C998C64319CD97625B0550E52ECFA, DD0EDDD9C8412F78D2D2B648D67DA887C3040E05DF29F48F71299CB68FDDD0F8 ] dam            C:\WINDOWS\system32\drivers\dam.sys
14:25:01.0492 0x1e90  dam - ok
14:25:01.0523 0x1e90  [ 7AF9DAC504FBD047CBC3E64AE52C92BF, CA8F9564733DED4C3895CF7150BB254995D66889E6BE08D6654E4F897E4FF7A4 ] dc3d            C:\WINDOWS\System32\drivers\dc3d.sys
14:25:01.0555 0x1e90  dc3d - ok
14:25:01.0602 0x1e90  [ A6F17C299A03BAFEFB9257C462A19E00, EB68967D28355271897166D7B6FD963D1E546D3C24AE1AEAAC561F94357A9345 ] DcomLaunch      C:\WINDOWS\system32\rpcss.dll
14:25:01.0633 0x1e90  DcomLaunch - ok
14:25:01.0680 0x1e90  [ 95E1ABFB27F8A62ED764805775F0D2F3, 692865DA60C93481E01592883678B2C51FD9AC9A835DFB00A8E3F2DFEE7AB0ED ] defragsvc      C:\WINDOWS\System32\defragsvc.dll
14:25:01.0727 0x1e90  defragsvc - ok
14:25:01.0758 0x1e90  [ FF086DEF5995558CCB1B5AAC2110195D, CED52FF01F9247BFDAFC5C7EFC538F8638146ED715574A422496EE0F846CB079 ] DeviceAssociationService C:\WINDOWS\system32\das.dll
14:25:01.0789 0x1e90  DeviceAssociationService - ok
14:25:01.0820 0x1e90  [ 2C02AFF8383D893F8DBEB07A84F6E77C, 7CC34BAC67E2988E3D16DD6EB6F6785CD2460E3EF7FBD0BD5F86E49793BD473E ] DeviceInstall  C:\WINDOWS\system32\umpnpmgr.dll
14:25:01.0836 0x1e90  DeviceInstall - ok
14:25:01.0852 0x1e90  [ A03F362C5557E238CBFA914689C77248, BAD0A1124E6A384C15028FBE121ADF650F7716442555AD3737B9EA1F58A69246 ] Dfsc            C:\WINDOWS\system32\Drivers\dfsc.sys
14:25:01.0883 0x1e90  Dfsc - ok
14:25:01.0914 0x1e90  [ 73BDD44A6088916964945886F9025409, 8E2ECC9AAEF3C6EBA2E61D25F657FDFCC72AB517CC4FD5FFF992E1F9EB942662 ] dg_ssudbus      C:\WINDOWS\system32\DRIVERS\ssudbus.sys
14:25:01.0930 0x1e90  dg_ssudbus - ok
14:25:01.0961 0x1e90  [ 3EEAADA3125431980E5804ED7143458A, 381E12C83E3211C255B321D35536F4049D67E31061F8D82155E4D4509E97F43D ] Dhcp            C:\WINDOWS\system32\dhcpcore.dll
14:25:01.0992 0x1e90  Dhcp - ok
14:25:02.0055 0x1e90  [ 21EDAD8188372C912B7BB9B1C6CB0D38, 4A102745DE8A2A82D2C069B30503BF9FF2312A035A82854F84EF9C27E3533CEE ] DiagTrack      C:\WINDOWS\system32\diagtrack.dll
14:25:02.0164 0x1e90  DiagTrack - ok
14:25:02.0195 0x1e90  [ 4D40C9B33F738797CF50E77CB7C53E85, 7BA341342A47DEB15B51971C97A5237ACD8BDAD9033F63DF0000892BE43F8E13 ] disk            C:\WINDOWS\system32\drivers\disk.sys
14:25:02.0211 0x1e90  disk - ok
14:25:02.0242 0x1e90  [ EB70A894708D1BC176AFD690FF06085F, 0DD2A97F5E1B38D1F7C0D44E50F09EA222B18B3B074CC9C8CD25A7526CB1A112 ] dmvsc          C:\WINDOWS\System32\drivers\dmvsc.sys
14:25:02.0273 0x1e90  dmvsc - ok
14:25:02.0320 0x1e90  [ E9AE4FAE83FB38A2962F9032B24CEB3C, CC7D2D8C97CB779791613D76D6E4AF5D628C948C28BAC584C3C7F6A5A6036FBA ] Dnscache        C:\WINDOWS\System32\dnsrslvr.dll
14:25:02.0352 0x1e90  Dnscache - ok
14:25:02.0383 0x1e90  [ 811EACBCC7C51A03AE11F13CC27B2AB6, FAB94F84950FFB7D3649BAFB8D96D43B880D7FDE8D5B879472AE26C4BC4203B0 ] dot3svc        C:\WINDOWS\System32\dot3svc.dll
14:25:02.0445 0x1e90  dot3svc - ok
14:25:02.0508 0x1e90  [ B99CB575986789A93A683DCF292A43A1, 6ACEA31C723B74003E106FC8303542FCC6DBC4952B6B523F6590D006BE57238D ] DPS            C:\WINDOWS\system32\dps.dll
14:25:02.0539 0x1e90  DPS - ok
14:25:02.0555 0x1e90  [ 00C594D5A1DBD22AD8B2902B9F6EFF94, 2920D62B5F7C49A8AFA80FCAD1E834BBAA670AEBDD7E6F21F0496D1D3CCB4E90 ] drmkaud        C:\WINDOWS\system32\drivers\drmkaud.sys
14:25:02.0570 0x1e90  drmkaud - ok
14:25:02.0617 0x1e90  [ 29CCFF428E5EB70AE429C3DA8968E1EC, 8CB62C5D41148DE416014F80BD1FD033FD4D2BD504CB05B90EEB6992A382D58F ] DrvAgent64      C:\WINDOWS\SysWOW64\Drivers\DrvAgent64.SYS
14:25:02.0633 0x1e90  DrvAgent64 - ok
14:25:02.0664 0x1e90  [ 263625A4F616538EB867B6306A6590DB, 2A064720C247EAA3446EFDCC9E01D84CBA875905D78DFED0FBD62D1EE422D416 ] DsmSvc          C:\WINDOWS\System32\DeviceSetupManager.dll
14:25:02.0680 0x1e90  DsmSvc - ok
14:25:02.0742 0x1e90  [ 426D951F2DE2D4DFCBE0D1A42BBBA72F, 0279BED05D51E85B2F94F5F244353E7CCA81B48230C06D5EBFFCE6689D8DCCD7 ] DTSAudioSvc    C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
14:25:02.0773 0x1e90  DTSAudioSvc - ok
14:25:03.0008 0x1e90  [ E1BB0B6F00F470B451AB45EA13EBA0B3, 3A2FC2175B69A5EB98D6C2D563DBFDCB320647AB87A14E47FAE800423DCACDAB ] DXGKrnl        C:\WINDOWS\System32\drivers\dxgkrnl.sys
14:25:03.0086 0x1e90  DXGKrnl - ok
14:25:03.0117 0x1e90  [ E253530BD5EDE28F1FF6AF93C4D8034D, 787A70C3E946348F066FB8EB81FCE60157217D93FD78ADC631B5835E8D76A253 ] Eaphost        C:\WINDOWS\System32\eapsvc.dll
14:25:03.0149 0x1e90  Eaphost - ok
14:25:03.0258 0x1e90  [ 114BCFDF367FF37C3F1B0A96AF542E4D, D385BC1D91BC1406091C8C3691C07A90BD60EDE05B1384E5AA3506FCB909C857 ] ebdrv          C:\WINDOWS\system32\drivers\evbda.sys
14:25:03.0367 0x1e90  ebdrv - ok
14:25:03.0399 0x1e90  [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] EFS            C:\WINDOWS\System32\lsass.exe
14:25:03.0414 0x1e90  EFS - ok
14:25:03.0430 0x1e90  [ 43531A5993380CC5113242C29D265FD9, EE0076D96F7F3CF29884AC7A67C08A429115A7201354A1FB5DE45FD63ABB4960 ] EhStorClass    C:\WINDOWS\system32\drivers\EhStorClass.sys
14:25:03.0445 0x1e90  EhStorClass - ok
14:25:03.0461 0x1e90  [ 6F8E738A9505A388B1157FDDE7B3101B, 3696CA634102B41EEA11EB9DCA0B24439D8636AED4A7190C138C5E64A2EFB514 ] EhStorTcgDrv    C:\WINDOWS\system32\drivers\EhStorTcgDrv.sys
14:25:03.0477 0x1e90  EhStorTcgDrv - ok
14:25:03.0508 0x1e90  [ BE2902E13CA69383F449B6BF927844FB, F092785E305D8E1FE795AF98A7A7B7B4548A0D6687060568C9E078FFA8D65C1C ] ElbyCDIO        C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
14:25:03.0524 0x1e90  ElbyCDIO - ok
14:25:03.0539 0x1e90  [ DFFFAE1442BA4076E18EED5E406FA0D3, 329FC6FB8D14BEACDBE2A5D4C496EDEA485E838B1DF27566E278F8F8E0D8E82E ] ErrDev          C:\WINDOWS\System32\drivers\errdev.sys
14:25:03.0570 0x1e90  ErrDev - ok
14:25:03.0617 0x1e90  [ 3B32CAA07D672F8A2E0DF5CB3A873F45, 09687E30FA5779C3593769D66CAEBED95C932746EDD6E83DABE3DCFD126AB5EC ] EsgScanner      C:\WINDOWS\system32\DRIVERS\EsgScanner.sys
14:25:03.0649 0x1e90  EsgScanner - ok
14:25:03.0727 0x1e90  [ F00C593994D57C75273F820653440536, 2DC986D9890EC907405FB2045E6F55ACC384169B45F0B56CCB1A953CF71D9A5D ] EventSystem    C:\WINDOWS\system32\es.dll
14:25:03.0774 0x1e90  EventSystem - ok
14:25:03.0930 0x1e90  [ C8559336BB21FF701CBEF14527D7660F, AE8CD6514C0B121B260D9101D76E6225599B832504EB5719FD110E348C9E6682 ] EvtEng          C:\Program Files\Intel\WiFi\bin\EvtEng.exe
14:25:03.0946 0x1e90  EvtEng - ok
14:25:03.0977 0x1e90  [ 7729D294A555C7AEB281ED8E4D0E01E4, 7269E79D72CCE477AC108294D0DDFB59CF533B03C587599C5AB0507C43A0B6D4 ] exfat          C:\WINDOWS\system32\drivers\exfat.sys
14:25:04.0055 0x1e90  exfat - ok
14:25:04.0071 0x1e90  [ 7C4E0D5900B2A1D11EDD626D6DDB937B, 732F310F8F6016C56F432A81636B13CE0124A802FE8DD91287B618EED22C9A1D ] fastfat        C:\WINDOWS\system32\drivers\fastfat.sys
14:25:04.0086 0x1e90  fastfat - ok
14:25:04.0133 0x1e90  [ 304B6AEC4639A7CCCCF544C6BA6177B2, B75CDD52FD3890B3008E06C503945D1E36478F0EC5E067C8DBC2822D7935D24B ] Fax            C:\WINDOWS\system32\fxssvc.exe
14:25:04.0180 0x1e90  Fax - ok
14:25:04.0211 0x1e90  [ 4C347E0315E64241FC70E8EEF8B0DC68, D5C12FE825D35C82C03805D98EAE9CD1F018457B3453FB083FB60FAEAEB644A8 ] FBIOSDRV        C:\WINDOWS\system32\Drivers\FBIOSDRV.sys
14:25:04.0227 0x1e90  FBIOSDRV - ok
14:25:04.0242 0x1e90  [ 5D8402613E778B3BD45E687A8372710B, EE9EA10805168D309A609B9019AEC5961EE46D18207B5E0EA2DE4064A5770AF8 ] fdc            C:\WINDOWS\System32\drivers\fdc.sys
14:25:04.0274 0x1e90  fdc - ok
14:25:04.0289 0x1e90  [ 020D2F29009F893ADEFF4405B4B44565, 9F8501064C72933D1442DA00E70392B30D0207EB7D60F50E6648FF363799E6F1 ] fdPHost        C:\WINDOWS\system32\fdPHost.dll
14:25:04.0321 0x1e90  fdPHost - ok
14:25:04.0352 0x1e90  [ E80D2EDD2F88B6E20076A0A4F5A5A245, E3CD6E0BE152B22E8A7340EFFD10CCDB1B632CD3EDF487E83F697D2E22A7D594 ] FDResPub        C:\WINDOWS\system32\fdrespub.dll
14:25:04.0367 0x1e90  FDResPub - ok
14:25:04.0399 0x1e90  [ 47AB7D16EDE434B934AA4D661456C2D5, D375A92FB3E4BB0A8DA5270DACC888E53FB9F514516039FE6DAE4D4EF6B9A970 ] fhsvc          C:\WINDOWS\system32\fhsvc.dll
14:25:04.0446 0x1e90  fhsvc - ok
14:25:04.0477 0x1e90  [ BCFD8B149B3ADF92D0DB1E909CAF0265, 002B085C131473642450176B4B8359F3E5B04350AFB659B9C0F9EB587D1181E7 ] FileInfo        C:\WINDOWS\system32\drivers\fileinfo.sys
14:25:04.0492 0x1e90  FileInfo - ok
14:25:04.0524 0x1e90  [ A1A66C4FDAFD6B0289523232AFB7D8AF, 0F5832F626BB62190D5F3A088CE6E048D8A400CCF9EA527F06973CAD96D3A81C ] Filetrace      C:\WINDOWS\system32\drivers\filetrace.sys
14:25:04.0571 0x1e90  Filetrace - ok
14:25:04.0602 0x1e90  [ 72CC30F0D6DF8D3FBD5CD728259A8F69, F7774D35B38F35E31A8EEE37FF2F203C1CED433FF84EC265CD92B38CBFE3AB8F ] file_tracker    C:\WINDOWS\system32\DRIVERS\file_tracker.sys
14:25:04.0617 0x1e90  file_tracker - ok
14:25:04.0633 0x1e90  [ BE743083CF7063C486A4398E3AEFE59A, 85796D89943DD6FE3932C1ED6CF01470C1B4DFD243C390B07055FFDA3C231551 ] flpydisk        C:\WINDOWS\System32\drivers\flpydisk.sys
14:25:04.0664 0x1e90  flpydisk - ok
14:25:04.0696 0x1e90  [ C1FB505A73FA2E9019D32444AB33B75A, 765F0635C18295855CA4C0394192E8B94BA2EA1C4D74F86B720358ABA019FFAA ] FltMgr          C:\WINDOWS\system32\drivers\fltmgr.sys
14:25:04.0727 0x1e90  FltMgr - ok
14:25:04.0774 0x1e90  [ 9BD0273A5B650CC16E8A54AD9B312BEB, 1AA219C4CC29E8301075537A330CC7FB677CD884AABD8FB3D99CFBEA1AB4CDF2 ] fltsrv          C:\WINDOWS\system32\DRIVERS\fltsrv.sys
14:25:04.0789 0x1e90  fltsrv - ok
14:25:04.0867 0x1e90  [ 1E93CBB75D167CDF85501A8C790097A8, C9E5DD090C94E7855939CE1F416460DB408EFF897C2CD52E0D52A734D8ED18B7 ] FontCache      C:\WINDOWS\system32\FntCache.dll
14:25:04.0946 0x1e90  FontCache - ok
14:25:05.0055 0x1e90  [ 1C52387BF5A127F5F3BFB31288F30D93, 90D13F60170CD74304F3036A90D596AA3E1E134455A780310BDF67AC7815F2E7 ] FontCache3.0.0.0 C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
14:25:05.0086 0x1e90  FontCache3.0.0.0 - ok
14:25:05.0117 0x1e90  [ A7C31B168F371E8E6796219F23E354DB, C51C9BF568F1E96CBBE57D2432B38F93F40520086DDB6AAAAC48CBCD1691B441 ] FsDepends      C:\WINDOWS\system32\drivers\FsDepends.sys
14:25:05.0133 0x1e90  FsDepends - ok
14:25:05.0164 0x1e90  [ 09F460AFEDCA03F3BF6E07D1CCC9AC42, B832091BC9B2C2FE38A4BCA132ABB58251E851F21EC6F39636E73777AB9A5791 ] Fs_Rec          C:\WINDOWS\system32\drivers\Fs_Rec.sys
14:25:05.0180 0x1e90  Fs_Rec - ok
14:25:05.0196 0x1e90  [ 0B0E36E669B47E256BE7BDB66D76CCCF, EE52E6EB6F4E41429687124246CF988CAFC4D7FF26EDAD5EAB762239E6DF8FBB ] FTDIBUS        C:\WINDOWS\system32\drivers\ftdibus.sys
14:25:05.0211 0x1e90  FTDIBUS - ok
14:25:05.0242 0x1e90  [ F1544BBC7E08BB5B9E9E97996C3FA04B, 2D998E4DCF7EA918B537119583BE678121148DB314BDC338925D8588A30F4BE0 ] FTSER2K        C:\WINDOWS\system32\drivers\ftser2k.sys
14:25:05.0274 0x1e90  FTSER2K - ok
14:25:05.0305 0x1e90  [ 159DE95CED988C2213D8CB1C303CF531, C7E3DFB331B4873A357E844DC47BAAC6EB77FF891B95B8F01F3DFE62A4969149 ] FUJ02B1        C:\WINDOWS\System32\drivers\FUJ02B1.sys
14:25:05.0321 0x1e90  FUJ02B1 - ok
14:25:05.0321 0x1e90  [ 0BC9761EFDB4B822699505ACD157C436, EFF6534EC86D361A145975DCC9F0C091636D53FC867EC5D8A2DBEE139B15C3EB ] FUJ02E3        C:\WINDOWS\System32\drivers\FUJ02E3.sys
14:25:05.0336 0x1e90  FUJ02E3 - ok
14:25:05.0383 0x1e90  [ 199593F002A3092BBFCAF1528DD48A28, 55CD466C94B9D7FE1F6CD57D134DAC51DE70BBCC44D8F9C36D2959BE67AC1C9F ] FUJ02E3Service  C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe
14:25:05.0383 0x1e90  FUJ02E3Service - ok
14:25:05.0430 0x1e90  [ F152D55E497E12256290C43B31C7D0CE, FFC54B14CCFBC1548948C07FB3866E40A11D0C05AC352BD000E71CEF053F6A6E ] fvevol          C:\WINDOWS\system32\DRIVERS\fvevol.sys
14:25:05.0461 0x1e90  fvevol - ok
14:25:05.0492 0x1e90  [ 9591D0B9351ED489EAFD9D1CE52A8015, AC64C236C3AE545FCE8ED44A4A87FB86265A453BA60026EC9A4DE2B631E99996 ] FxPPM          C:\WINDOWS\System32\drivers\fxppm.sys
14:25:05.0524 0x1e90  FxPPM - ok
14:25:05.0553 0x1e90  [ FC3EF65EE20D39F8749C2218DBA681CA, 12980F1DE99B25E6920A33556F3ABDA5EC9BFE4757BE602130B5E939D8D25CE3 ] gagp30kx        C:\WINDOWS\system32\drivers\gagp30kx.sys
14:25:05.0574 0x1e90  gagp30kx - ok
14:25:05.0700 0x1e90  [ F5FEA0CD5BFB434276036C97EA3A848E, 39A005E7B88F3AB542871AB61D75924D69A660B5C18DEAC33227420E3B288731 ] Garmin Device Interaction Service C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe
14:25:05.0738 0x1e90  Garmin Device Interaction Service - ok
14:25:05.0785 0x1e90  [ 8E98D21EE06192492A5671A6144D092F, B8F656B34D361EA5AFB47F3A67AB2221580DADA59C8CD0CB83181E4AD8B562B4 ] GEARAspiWDM    C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
14:25:05.0801 0x1e90  GEARAspiWDM - ok
14:25:05.0841 0x1e90  [ 0BF5CAD281E25F1418E5B8875DC5ADD1, 0929AD8437DD78234553D8B2CDF0D6838FD54ACDE1918AFEBE48684EB32A07A3 ] gencounter      C:\WINDOWS\System32\drivers\vmgencounter.sys
14:25:05.0873 0x1e90  gencounter - ok
14:25:05.0912 0x1e90  [ 8DF1254093B5C354CE725EB6B9B0DE19, DE6C5661CC076DA44B8A5D044FDB7280EDCF38D322A98C14FDC82E25586B3014 ] GPIOClx0101    C:\WINDOWS\system32\Drivers\msgpioclx.sys
14:25:05.0935 0x1e90  GPIOClx0101 - ok
14:25:06.0002 0x1e90  [ 0D03F87D4FF4ADBAF8336DD80548155A, BC10CFA88EA2F41A8D96CB810B7953A4C168B79273A3E804A9F020F49AB58CD3 ] gpsvc          C:\WINDOWS\System32\gpsvc.dll
14:25:06.0093 0x1e90  gpsvc - ok
14:25:06.0158 0x1e90  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdate        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
14:25:06.0179 0x1e90  gupdate - ok
14:25:06.0192 0x1e90  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
14:25:06.0202 0x1e90  gupdatem - ok
14:25:06.0224 0x1e90  [ D4B7ED39C7900384D9E5C1283F1E7926, F93F98858067B40F1C071EAD0F8E85442A78B95342BC692AF4D726540634923F ] HDAudBus        C:\WINDOWS\System32\drivers\HDAudBus.sys
14:25:06.0258 0x1e90  HDAudBus - ok
14:25:06.0272 0x1e90  [ 10A70BC1871CD955D85CD88372724906, 2480A74854D0A89FF028EE9BA41224D4B2F9B0863066BFC43097920794FEE08D ] HidBatt        C:\WINDOWS\System32\drivers\HidBatt.sys
14:25:06.0289 0x1e90  HidBatt - ok
14:25:06.0316 0x1e90  [ 42F88B57CAE42FC10059C887B3FCFCEA, 9363AA2B8E839A6935A7C6A36C491938DF78024886DCCE6D29CB18E1D6A6D806 ] HidBth          C:\WINDOWS\System32\drivers\hidbth.sys
14:25:06.0373 0x1e90  HidBth - ok
14:25:06.0405 0x1e90  [ C241A8BAFBBFC90176EA0F5240EACC17, 571E20B87818618BE9179986177D55739A240F04D1F740B3C1B7809B9427B767 ] hidi2c          C:\WINDOWS\System32\drivers\hidi2c.sys
14:25:06.0429 0x1e90  hidi2c - ok
14:25:06.0460 0x1e90  [ 9BDDEE26255421017E161CCB9D5EDA95, B766FD5E31708F29384F69418FC33C4BCC6E3064AA553D5B1D30EE0B8B1BFB40 ] HidIr          C:\WINDOWS\System32\drivers\hidir.sys
14:25:06.0480 0x1e90  HidIr - ok
14:25:06.0512 0x1e90  [ EA85B5093DF7B5C3E80362B053740AE2, 1D4251385402A2ADEE8FA1642F54180304F88337DA74989BDE44025ABB145FE5 ] hidserv        C:\WINDOWS\system32\hidserv.dll
14:25:06.0542 0x1e90  hidserv - ok
14:25:06.0570 0x1e90  [ 8DB8EAB9D0C6A5DF0BDCADEA239220B4, EDA23E6909EB83E5E148816DFB16CC29EA01BD6BD2F73AA46B3D820B85FB9C83 ] HidUsb          C:\WINDOWS\System32\drivers\hidusb.sys
14:25:06.0606 0x1e90  HidUsb - ok
14:25:06.0631 0x1e90  [ 93C4315F47F8D635C6DB0DF49FCE10EE, 70C52B8927D54ACD23F27948780B522974250FD5CD81AA9801C3F158C402889F ] hkmsvc          C:\WINDOWS\system32\kmsvc.dll
14:25:06.0665 0x1e90  hkmsvc - ok
14:25:06.0699 0x1e90  [ AC49522ED106BD4B545D6614D71C2445, 40BD738A301170378ECFC031635EB04E2F812B676376CADDD6607ECABEC9255F ] HomeGroupListener C:\WINDOWS\system32\ListSvc.dll
14:25:06.0731 0x1e90  HomeGroupListener - ok
14:25:06.0767 0x1e90  [ 99932E30CE0283B73BB6E5019E150394, 1F88C2F56A7B8E1F75E6359281F418F9661DA4FB7B7D7B14FA7F718B15D4DCE0 ] HomeGroupProvider C:\WINDOWS\system32\provsvc.dll
14:25:06.0804 0x1e90  HomeGroupProvider - ok
14:25:06.0870 0x1e90  [ 0D0213498683414DDE29B1686A4C08D5, E9B64406C04B6E55CBD17E7C47B023CEA11FEE07B791154129D6F4F29D15AB7F ] hpqcxs08        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll
14:25:06.0881 0x1e90  hpqcxs08 - ok
14:25:06.0910 0x1e90  [ EE281DD6843F3F697C1AD7933EEB1E9B, 1ECE31C2150B92DDC1DCBBCECFE3E979F2C60B3F106280E3167BEC0269BF7A41 ] hpqddsvc        C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll
14:25:06.0918 0x1e90  hpqddsvc - ok
14:25:06.0945 0x1e90  [ A6AACEA4C785789BDA5912AD1FEDA80D, D197012A5DA6AB3F76FF298336DF0CF027C07ECC71267BAEF5912DE12893E096 ] HpSAMD          C:\WINDOWS\system32\drivers\HpSAMD.sys
14:25:06.0963 0x1e90  HpSAMD - ok
14:25:07.0000 0x1e90  [ C995EA1C6915D897E06D41AF95B9312C, 65DE6599F1C735BBDCCE4728F7F98167BCA0BF1B8D4218BBF7546B025C9A38BD ] HPSLPSVC        C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL
14:25:07.0046 0x1e90  HPSLPSVC - detected UnsignedFile.Multi.Generic ( 1 )
14:25:09.0378 0x1e90  Detect skipped due to KSN trusted
14:25:09.0378 0x1e90  HPSLPSVC - ok
14:25:09.0499 0x1e90  [ E87A6D3B8FECD5B93BC0CFBB48C27970, 55C49B6F3822450447C082B40A263F3370694DB53AD0018ADEB911E4A9F65A88 ] HTTP            C:\WINDOWS\system32\drivers\HTTP.sys
14:25:09.0594 0x1e90  HTTP - ok
14:25:09.0629 0x1e90  [ 90656C0B3864804B090434EFC582404F, BDB60050B729AACB9E009AC7129BEBD6298BBD8A9DB14B817D02E8E13669BD6E ] hwpolicy        C:\WINDOWS\system32\drivers\hwpolicy.sys
14:25:09.0643 0x1e90  hwpolicy - ok
14:25:09.0675 0x1e90  [ 6D6F9E3BF0484967E52F7E846BFF1CA1, C982966BDE6A3E6773D9441ADA7A3B08D13511DFC68D04DF303248B942423F38 ] hyperkbd        C:\WINDOWS\System32\drivers\hyperkbd.sys
14:25:09.0717 0x1e90  hyperkbd - ok
14:25:09.0737 0x1e90  [ 907C870F8C31F8DDD6F090857B46AB25, 308664A31717383D06185875E76C6612407A9F04E7DB28404F574A5706C6715D ] HyperVideo      C:\WINDOWS\system32\DRIVERS\HyperVideo.sys
14:25:09.0770 0x1e90  HyperVideo - ok
14:25:09.0819 0x1e90  [ 49EE0AE9E5B64FFBBD06D55C4984B598, 8866627F9241B24A59C81D8BCC67A4DCA87576F589599BA291D0E323F679EB4D ] i8042prt        C:\WINDOWS\System32\drivers\i8042prt.sys
14:25:09.0851 0x1e90  i8042prt - ok
14:25:09.0884 0x1e90  [ 5D90E32E36CE5D4C535D17CE08AEAF05, 976A463343E8C8308AFBE9E64DF56C430D2241DE002430D00318AB065EB72E4A ] iaLPSSi_GPIO    C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys
14:25:09.0917 0x1e90  iaLPSSi_GPIO - ok
14:25:09.0932 0x1e90  [ DD05E7E80F52ADE9AEB292819920F32C, E71AB6A50B0F90C8F94569CE89F66F915A0A4A00D4AC091B2E5E750D88CFC334 ] iaLPSSi_I2C    C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys
14:25:09.0957 0x1e90  iaLPSSi_I2C - ok
14:25:09.0998 0x1e90  [ 25555186E4FBDF0E30A5DBFC9B9A73F9, 4A9DAC2B56389C5955C343E202C6E81CD3A608E78A4BB7E6ED560719DF02C955 ] iaStorA        C:\WINDOWS\system32\drivers\iaStorA.sys
14:25:10.0032 0x1e90  iaStorA - ok
14:25:10.0057 0x1e90  [ 08BFE413B0B4AA8DFA4B5684CE06D3DC, 95DEEBB203E12EE6E191F5247A74C04AEC0E16DE981FADDC4D6C42EE41D8D079 ] iaStorAV        C:\WINDOWS\system32\drivers\iaStorAV.sys
14:25:10.0099 0x1e90  iaStorAV - ok
14:25:10.0140 0x1e90  [ A2200C3033FA4EF249FC096A7A7D02A2, 5819F5C2020DE2EEE339B0C08CD4B1E3490EAFBBEA1277CE649DB5A5150986B0 ] iaStorV        C:\WINDOWS\system32\drivers\iaStorV.sys
14:25:10.0275 0x1e90  iaStorV - ok
14:25:10.0356 0x1e90  [ 83FF82FE209E7997067B375DAD6CF23D, E312DD068E51DBF96A8232D7D1C9F158652FDA23649655F1102928B320795091 ] ICCS            C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
14:25:10.0370 0x1e90  ICCS - ok
14:25:10.0495 0x1e90  [ ABEFA4BD23329FD9BD47496BF2E58774, 9689D4C6380735EE1CC7F480696CDDC229E0FA511942AC813314D353584D82DD ] IconMan_R      C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
14:25:10.0552 0x1e90  IconMan_R - detected UnsignedFile.Multi.Generic ( 1 )
14:25:12.0861 0x1e90  Detect skipped due to KSN trusted
14:25:12.0862 0x1e90  IconMan_R - ok
14:25:12.0867 0x1e90  IEEtwCollectorService - ok
14:25:13.0032 0x1e90  [ CEFA6BDB4789F3DA003ACBDCC64F5877, 0FE78AEFA9A75B4A99AD6B73AC3252E4C6DFA9D306FEC02D26C1FD574108BFBA ] igfx            C:\WINDOWS\system32\DRIVERS\igdkmd64.sys
14:25:13.0147 0x1e90  igfx - ok
14:25:13.0184 0x1e90  [ 75909533EECD0CD9D5974B59474AA6C0, F81D0F949F1F01D09C91735C79288395B82C27B8FB78804752E5A678D7EF3860 ] igfxCUIService1.0.0.0 C:\WINDOWS\system32\igfxCUIService.exe
14:25:13.0200 0x1e90  igfxCUIService1.0.0.0 - ok
14:25:13.0267 0x1e90  [ AF8A43C376F83A4A1E7DA16461EDE114, EBA10519B074888355A4FC11D52FF1E6A52F88F754B7F1F9863A8313638645CB ] IKEEXT          C:\WINDOWS\System32\ikeext.dll
14:25:13.0333 0x1e90  IKEEXT - ok
14:25:13.0394 0x1e90  [ D319A833EC173AD83C67885B3ED6C71C, CF0B1C31517A7F10F8CD714914CDC52BF82F61037CE2D2C2A7176764465B0AA7 ] initMonitor    C:\Program Files\Windows Server\Bin\SharedServiceHost.exe
14:25:13.0403 0x1e90  initMonitor - ok
14:25:13.0423 0x1e90  [ B1F193AB8FB72E9FC34B3A39314ED872, 408E98D9C8ABB928090DD9E5D1BB227EFBC997BF168437BAEF0461EB0D1DAE3D ] intaud_WaveExtensible C:\WINDOWS\system32\drivers\intelaud.sys
14:25:13.0445 0x1e90  intaud_WaveExtensible - ok
14:25:13.0572 0x1e90  [ 50D261E6921C29C516FDCB68A262829B, 385B00F14E041A53F560EACB8ADA8FF7762C44C6E781666775AFA900AE7BB461 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys
14:25:13.0693 0x1e90  IntcAzAudAddService - ok
14:25:13.0725 0x1e90  [ 8AEEE0F4D210B61F917CFEA9653973C4, F09389C2A3E1DED402C08BF1A30BD79A342B0E55AD4996CF2E5189A004E6E62F ] IntcDAud        C:\WINDOWS\system32\DRIVERS\IntcDAud.sys
14:25:13.0750 0x1e90  IntcDAud - ok
14:25:13.0806 0x1e90  [ C99F8E90DE4B8F0C7FE15BB1CBCD29DC, F791EE101EEF8B9F48102B6C63A89B78F7C0041C750C4F4C0D16D54B583B7B5C ] Intel(R) Capability Licensing Service Interface C:\Program Files\Intel\iCLS Client\HeciServer.exe
14:25:13.0825 0x1e90  Intel(R) Capability Licensing Service Interface - ok
14:25:13.0834 0x1e90  [ 4E448FCFFD00E8D657CD9E48D3E47157, 4A958CF0BF8DAEAE5E008500BA67CE89B21388592811274331EE39CAC1043A00 ] intelide        C:\WINDOWS\system32\drivers\intelide.sys
14:25:13.0849 0x1e90  intelide - ok
14:25:13.0874 0x1e90  [ 7AA01AB1C110916825E6E1389F1B9AF2, E2885955AFA0908E194B1BC364C9582249B2B2AFFF93F17F3414F55B1E5F2C42 ] intelpep        C:\WINDOWS\system32\drivers\intelpep.sys
14:25:13.0891 0x1e90  intelpep - ok
14:25:13.0901 0x1e90  [ 47E74A8E53C7C24DCE38311E1451C1D9, 79B06E37A552C8A847404D4C572CDB8CF525354D8AE3BEBC06892B7C3B330761 ] intelppm        C:\WINDOWS\System32\drivers\intelppm.sys
14:25:13.0936 0x1e90  intelppm - ok
14:25:13.0953 0x1e90  [ 9DB76D7F9E4E53EFE5DD8C53DE837514, 07BA4EDA9BE9139A689A2C3EFC1D1A4F3D1216625ED145F313398292A2CD5703 ] IpFilterDriver  C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
14:25:13.0990 0x1e90  IpFilterDriver - ok
14:25:14.0045 0x1e90  [ A5800036E4EA06697A34742A24ACFBE1, BA67060526E9213000B4206F86A74F904999AD7018EFCBE4FE9708650DA9D973 ] iphlpsvc        C:\WINDOWS\System32\iphlpsvc.dll
14:25:14.0108 0x1e90  iphlpsvc - ok
14:25:14.0132 0x1e90  [ 9C096BF5E10CA8BFA56F32522A89FAF1, 6C1151160799338DA351C7237AB049926C6C15F24F5E154BBF5929B4A96C0B8D ] IPMIDRV        C:\WINDOWS\System32\drivers\IPMIDrv.sys
14:25:14.0161 0x1e90  IPMIDRV - ok
14:25:14.0195 0x1e90  [ B7342B3C58E91107F6E946A93D9D4EFD, D5DA3C02C5C5A343785745EF6983CC9B5FBD3FB8D49FE9B450523E50212D1A32 ] IPNAT          C:\WINDOWS\system32\drivers\ipnat.sys
14:25:14.0217 0x1e90  IPNAT - ok
14:25:14.0276 0x1e90  [ 043A93A498B3C4A88CACA3BCBC9B54C7, C08C5A03940806C6CB75ADDCBE6183145AD2AFE84D77BC85E620E7C1542F0893 ] iPod Service    C:\Program Files\iPod\bin\iPodService.exe
14:25:14.0333 0x1e90  iPod Service - ok
14:25:14.0362 0x1e90  [ AE44C526AB5F8A487D941CEB57B10C97, A783A2EAF7A6FF450FB3F189A5930036FA60D125C42171AC44B6FE2E3DBD6F7A ] IRENUM          C:\WINDOWS\system32\drivers\irenum.sys
14:25:14.0394 0x1e90  IRENUM - ok
14:25:14.0426 0x1e90  [ 8AFEEA3955AA43616A60F133B1D25F21, E99359A4F1D653790133F145CF7C9F97399FD75C5E135AA7E5F989BB660789AF ] isapnp          C:\WINDOWS\system32\drivers\isapnp.sys
14:25:14.0443 0x1e90  isapnp - ok
14:25:14.0468 0x1e90  [ D90AB68D0FAC9F357F663670FDBB511E, A82AAA5DF1B38EFBDCF834535A0C520D1BB2D7A4A906C18CFDD22BCF16BDB97D ] iScsiPrt        C:\WINDOWS\System32\drivers\msiscsi.sys
14:25:14.0523 0x1e90  iScsiPrt - ok
14:25:14.0556 0x1e90  [ 9C6F3F69163133FB8E56AC4A6E163452, BD6CAB093B5451B4CC85B4528DC0251C97A3D11CB3C1493D25F37B06F8CD2238 ] ISODrive        C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys
14:25:14.0576 0x1e90  ISODrive - ok
14:25:14.0606 0x1e90  [ DD1F43B86AD84E53203F92FD3EF3AEB6, 9DE2BA80B315E56DF2E74EAA65F4ECB8324DFC19E30EB56EDDF08340AB100E87 ] iwdbus          C:\WINDOWS\System32\drivers\iwdbus.sys
14:25:14.0624 0x1e90  iwdbus - ok
14:25:14.0675 0x1e90  [ 3C4002D339491AF73D663FFC7F6E5ECB, 0B53047989BDB781572253BC3AA757912FE54366870C1955E687972CE210C285 ] jhi_service    C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
14:25:14.0685 0x1e90  jhi_service - ok
14:25:14.0710 0x1e90  [ 5917AFE4A3F695A54B99C1849C8207FE, DD57638966F2F0387DCF9DA4BBAEE3CDD8CC6F1A2D49581A0374D46A565BED4F ] kbdclass        C:\WINDOWS\System32\drivers\kbdclass.sys
14:25:14.0729 0x1e90  kbdclass - ok
14:25:14.0762 0x1e90  [ 8CD840A062F6BDF41DDE3ACB96164B72, AEAE867F3557C1CE6B931E19D7144A3BD3CBABD81B1542667680D54FC24DEBE1 ] kbdhid          C:\WINDOWS\System32\drivers\kbdhid.sys
14:25:14.0781 0x1e90  kbdhid - ok
14:25:14.0810 0x1e90  [ 813871C7D402A05F2E3A7075F9584A05, FF0C2F87EB083F8CE74C679D80C845CDFBFBBC70BE818F899F3336BBB54A3FFB ] kdnic          C:\WINDOWS\system32\DRIVERS\kdnic.sys
14:25:14.0842 0x1e90  kdnic - ok
14:25:14.0856 0x1e90  [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] KeyIso          C:\WINDOWS\system32\lsass.exe
14:25:14.0867 0x1e90  KeyIso - ok
14:25:14.0896 0x1e90  [ 4E829B18D5BAEC29893792A3C671A847, 64C3B99F53A9D1ACA802B46B09E820AD210B667D5A1CD0ADAF1F12944B15B52E ] KSecDD          C:\WINDOWS\system32\Drivers\ksecdd.sys
14:25:14.0916 0x1e90  KSecDD - ok
14:25:14.0955 0x1e90  [ 35C19AF2116F67914712D7C4CBE47B8C, 5F976726880A6E51D7ABFA7E3EF7294C6FB7F383DC5710A2C2EC8DD26DAEC204 ] KSecPkg        C:\WINDOWS\system32\Drivers\ksecpkg.sys
14:25:14.0977 0x1e90  KSecPkg - ok
14:25:14.0982 0x1e90  [ 11AFB527AA370B1DAFD5C36F35F6D45F, 757AD234284467ADB826F7CA0251F58D48866B91995BC867DEA4BAF676947163 ] ksthunk        C:\WINDOWS\system32\drivers\ksthunk.sys
14:25:15.0014 0x1e90  ksthunk - ok
14:25:15.0041 0x1e90  [ C1591A66028C71147A3E2EAB0B1CCB7E, 82F3D5DCC1614398A144D9791E4BAA814DBA9112677341FD57D5E9834CEDEB41 ] KtmRm          C:\WINDOWS\system32\msdtckrm.dll
14:25:15.0062 0x1e90  KtmRm - ok
14:25:15.0093 0x1e90  [ F11FF47203538DD145FAF56A4DAF5D75, EB90895C0D72162555D958613BD588561C4F54A9490C57D8648358927E507C23 ] LANConfig      C:\Program Files\Windows Server\Bin\LANConfigSvc.exe
14:25:15.0100 0x1e90  LANConfig - ok
14:25:15.0145 0x1e90  [ CA2828DDE4B09FEFFDB7CE68B3D8D00A, B514792FF1EF36C678BB51644A1C420105D5E2CD6DD5A89A3FB252D08277A40C ] LanmanServer    C:\WINDOWS\system32\srvsvc.dll
14:25:15.0180 0x1e90  LanmanServer - ok
14:25:15.0216 0x1e90  [ 3DBD9100745F9B8506B8FEC6FE6CCDE3, C3EF2856A1680AFDE133887E48946CF9CAB6755C3BDC07F0326965DCD4096F62 ] LanmanWorkstation C:\WINDOWS\System32\wkssvc.dll
14:25:15.0237 0x1e90  LanmanWorkstation - ok
14:25:15.0305 0x1e90  [ 91EFE53FB930B8C9C95EE622E4D30295, E91808F63214A510D88F55551EF152DD2264C3FF2800C0EA63225A139E311E3E ] Lexware_Update_Service C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
14:25:15.0315 0x1e90  Lexware_Update_Service - ok
14:25:15.0356 0x1e90  [ 8B9F3796EC1762CF255BDB324E5529C8, F73D6BEF19BE20AEB18DA82CB63E9D8B50ACBBE4ED9B646EF0C9F598F6B81F94 ] lfsvc          C:\WINDOWS\System32\GeofenceMonitorService.dll
14:25:15.0404 0x1e90  lfsvc - ok
14:25:15.0430 0x1e90  [ C09010B3680860131631F53E8FE7BAD8, 35F2A06D5F29478D22ABDCC20DA893EF9D96504C65594A0CEA674D1C21B04FF8 ] lltdio          C:\WINDOWS\system32\DRIVERS\lltdio.sys
14:25:15.0473 0x1e90  lltdio - ok
14:25:15.0498 0x1e90  [ DAE98CC96C5EE308BF4EA7B18F226CB8, 7A6CC56BF075010707715AB6608764291E358EDF27C806A025532869004C686B ] lltdsvc        C:\WINDOWS\System32\lltdsvc.dll
14:25:15.0534 0x1e90  lltdsvc - ok
14:25:15.0559 0x1e90  [ 1E2662D847B7D9995C65D90D254A7E0F, AFD4063D2071FFCB6B0EAC0715276D986F42326919C86E525DCE12E1109A93E2 ] lmhosts        C:\WINDOWS\System32\lmhsvc.dll
14:25:15.0581 0x1e90  lmhosts - ok
14:25:15.0612 0x1e90  [ 4269D44BB47A6DA5D80B11F4C8536458, 7A8FFC8F851DD9E5C43986BE0888831CB71D188138DF3CF7F787DADDA70915B0 ] LMS            C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
14:25:15.0623 0x1e90  LMS - ok
14:25:15.0669 0x1e90  [ 0707033CEC0388618D16329D713A8C0F, 8A42865A6295F7C2024801F0E89B0029C7C74208D46559B16D7EE4CEBD51D98A ] LoClntService  C:\Program Files\AxoNet Software GmbH\LightsOutClient\LightsOutClientService.exe
14:25:15.0676 0x1e90  LoClntService - ok
14:25:15.0713 0x1e90  [ C755AE4635457AA2A11F79C0DF857ABC, E03D1ACAC155287291FE1BD0B653953ADC94279A74D0152088D698FAA796460F ] LSI_SAS        C:\WINDOWS\system32\drivers\lsi_sas.sys
14:25:15.0733 0x1e90  LSI_SAS - ok
14:25:15.0751 0x1e90  [ ADAC09CBE7A2040B7F68B5E5C9A75141, 7865DA7E91404F3642BC444B97F6B7AA42B9523D5EDD7F6365DA236B8EC3410F ] LSI_SAS2        C:\WINDOWS\system32\drivers\lsi_sas2.sys
14:25:15.0769 0x1e90  LSI_SAS2 - ok
14:25:15.0783 0x1e90  [ 04D1274BB9BBCCF12BD12374002AA191, 4B9618F8D25F2278DE1610A70ACAADB074D171D162C3AF27D464F5DC800A8E60 ] LSI_SAS3        C:\WINDOWS\system32\drivers\lsi_sas3.sys
14:25:15.0803 0x1e90  LSI_SAS3 - ok
14:25:15.0823 0x1e90  [ 327469EEF3833D0C584B7E88A76AEC0C, 3D88B5A2D68F93F01B39C6E3D8D5C7A2A20686EFC756086E66AFFF1BC3019B85 ] LSI_SSS        C:\WINDOWS\system32\drivers\lsi_sss.sys
14:25:15.0845 0x1e90  LSI_SSS - ok
14:25:15.0889 0x1e90  [ 9A7A7E45DAED2E8C2816716D8D28236A, C94787988826E546A8DC752BD6BE4EA7423DC3762B2D371DB297A63F865A95FF ] LSM            C:\WINDOWS\System32\lsm.dll
14:25:15.0934 0x1e90  LSM - ok
14:25:15.0969 0x1e90  [ DDEE191AB32DFC22C6465002ECDF5EE4, 190C3930A8449118F9FEDF43C482837EF1C255E6D67F9651156E66A1E2BC6553 ] luafv          C:\WINDOWS\system32\drivers\luafv.sys
14:25:15.0994 0x1e90  luafv - ok
14:25:16.0028 0x1e90  [ CFBC6C6D8A492697CABD1D353EE64933, DDAA844908324740C891EB8F08E2A8BB00457063B31C4A762745C1C2415FC12D ] MBAMProtector  C:\WINDOWS\system32\drivers\mbam.sys
14:25:16.0042 0x1e90  MBAMProtector - ok
14:25:16.0104 0x1e90  [ 40C126CB15FAB7D6C66490DCA9C1AED2, B32CEE2D2409232C245427D5E9647FDF59AF1D8AB5E8A98EE2D1F1314599FD14 ] MBAMService    C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
14:25:16.0130 0x1e90  MBAMService - ok
14:25:16.0142 0x1e90  [ 08DECFCB9BA97786165A69AB1015BC30, EDC8C8447B57BD412E2DEBCA9B5B1B58C19D40105DC7CE9520DE214081696B05 ] MBAMWebAccessControl C:\WINDOWS\system32\drivers\mwac.sys
14:25:16.0159 0x1e90  MBAMWebAccessControl - ok
14:25:16.0192 0x1e90  [ EB5C03A070F30D64A6DF80E53B22F53F, 12051B6AEBDEE1E28F24364F25A52BA3A6E282ECF86D6290E34BD38E6D4E066D ] megasas        C:\WINDOWS\system32\drivers\megasas.sys
14:25:16.0212 0x1e90  megasas - ok
14:25:16.0240 0x1e90  [ F6F13533196DE7A582D422B0241E4363, B3CD9B08937AFFF12141B38634AF3A56F5AC5FF3EF03941802B9841DEC559469 ] megasr          C:\WINDOWS\system32\drivers\megasr.sys
14:25:16.0289 0x1e90  megasr - ok
14:25:16.0321 0x1e90  [ 772A1DEEDFDBC244183B5C805D1B7D85, 7D821B8DF1F174E5414FFDEAB5207DB687740E9842F7203600AEBA086945AFC9 ] MEIx64          C:\WINDOWS\System32\drivers\HECIx64.sys
14:25:16.0336 0x1e90  MEIx64 - ok
14:25:16.0392 0x1e90  Microsoft SharePoint Workspace Audit Service - ok
14:25:16.0420 0x1e90  [ 4C5179DB61B9E14BEC15CDC4B152B2E9, 9048BEC7AD6A3F4B640E99B1F0365AC9A46740B188758FBB2C160EF30AD6E64B ] MMCSS          C:\WINDOWS\system32\mmcss.dll
14:25:16.0449 0x1e90  MMCSS - ok
14:25:16.0473 0x1e90  [ 8B38C44F69259987C95135C9627E2378, E698B82D4EFFF56D66C7FC9866369BA5736FDBDBE2028CC421C51E70DEA74727 ] Modem          C:\WINDOWS\system32\drivers\modem.sys
14:25:16.0515 0x1e90  Modem - ok
14:25:16.0530 0x1e90  [ 601589000CC90F0DF8DA2CC254A3CCC9, D1238A386C41B6C368D9A44B7C112C943995B5403E2A5B4B7346B266DDB0C5A0 ] monitor        C:\WINDOWS\System32\drivers\monitor.sys
14:25:16.0572 0x1e90  monitor - ok
14:25:16.0610 0x1e90  [ 08374E4E5B8914DE6067CBA99F61E930, CBB1390D6523FC968BEDF78FD13699488621ACB2CD1DF55D1606316090548661 ] mouclass        C:\WINDOWS\System32\drivers\mouclass.sys
14:25:16.0634 0x1e90  mouclass - ok

Pauli#01 06.12.2015 14:45
Teil 2 TDSSKiller
Code:
14:25:16.0672 0x1e90  [ 5FCBAB60598AE119E02B4C27DE6B99EA, 36F30094F700DE41C293047ACB49ED1961DD927BEDAD8DFDAB7023D4D24CB0DE ] mouhid          C:\WINDOWS\System32\drivers\mouhid.sys
14:25:16.0706 0x1e90  mouhid - ok
14:25:16.0738 0x1e90  [ 9A788037D768809DFD677F4BA08A224A, E0686B3318F924E440ADA439D6671D44D3FF97C13D45C2E0A3A7B9E23DA38350 ] mountmgr        C:\WINDOWS\system32\drivers\mountmgr.sys
14:25:16.0765 0x1e90  mountmgr - ok
14:25:16.0835 0x1e90  [ 0DE2474F316C515482ABAD3B697F8714, 62862AE7432F5350068E96AD466093359C6CF444EB517AE6D09134FAF78C49F5 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
14:25:16.0847 0x1e90  MozillaMaintenance - ok
14:25:16.0884 0x1e90  [ 6FC047578785B0435F4E2660946D1ADC, 8AEA5659F01FC2F75160922C69622502DABA39F33CB90D5178DD679A1CDE617D ] mpsdrv          C:\WINDOWS\system32\drivers\mpsdrv.sys
14:25:16.0923 0x1e90  mpsdrv - ok
14:25:17.0096 0x1e90  [ C18AA14126ADC66478E8E962B2DFAA98, A6F8CE9D88D590DC083253004392572C3BD02C33433CD6C0D9117D2AA7171EEC ] MpsSvc          C:\WINDOWS\system32\mpssvc.dll
14:25:17.0146 0x1e90  MpsSvc - ok
14:25:17.0191 0x1e90  [ DB32958F0E704EFBF7F15161A569E39F, 8A26448B954F8A16EE9BA72EF47F6C549A75B30BD13FEB5A29EB099A74D8F678 ] MRxDAV          C:\WINDOWS\system32\drivers\mrxdav.sys
14:25:17.0245 0x1e90  MRxDAV - ok
14:25:17.0286 0x1e90  [ 89DE71940A0E7F5BA617AE08321EF5C3, BD056C9E18E902D6F118E59A6AC68415BFA0690A02D2B360F6C111CE3B5EAC67 ] mrxsmb          C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
14:25:17.0336 0x1e90  mrxsmb - ok
14:25:17.0368 0x1e90  [ BCBD64220AD85C26823453FF1DC3EFBD, 0245E3659E9135B9276F3CCFBEA0CEFFC4F4C0826F6D19B6329057620235F087 ] mrxsmb10        C:\WINDOWS\system32\DRIVERS\mrxsmb10.sys
14:25:17.0414 0x1e90  mrxsmb10 - ok
14:25:17.0443 0x1e90  [ EE16457030175F449BAB0ABD279F4B6A, DF627054136079553A24AD12DC7374F1ACEEAD782EFFDC278996AD7BCCE98877 ] mrxsmb20        C:\WINDOWS\system32\DRIVERS\mrxsmb20.sys
14:25:17.0469 0x1e90  mrxsmb20 - ok
14:25:17.0497 0x1e90  [ F3C060444777A59FC63D920719E43CCD, 8766A2746E3DFB0749E902F458141269335CA6F0CEDCA3D5F8C204637C19E783 ] MsBridge        C:\WINDOWS\system32\DRIVERS\bridge.sys
14:25:17.0536 0x1e90  MsBridge - ok
14:25:17.0558 0x1e90  [ 915747E010A9414B069173284A9B93F4, 8A335C28FE1EF96DD71485877F2E86155D24B5614ACE05468F4B07E2ACD56331 ] MSDTC          C:\WINDOWS\System32\msdtc.exe
14:25:17.0582 0x1e90  MSDTC - ok
14:25:17.0614 0x1e90  [ D13329FBF8345B28AB30F44CC247DC08, 9C7EC2D4D65E6510EB5B9E61BB0D14F725D7E8FE98D65161C3971E43EF1AB6EB ] Msfs            C:\WINDOWS\system32\drivers\Msfs.sys
14:25:17.0664 0x1e90  Msfs - ok
14:25:17.0689 0x1e90  [ C6B474E46F9E543B875981ED3FFE6ADD, E16687E52FB649C23D92159A1F036CB662202C1E58D961EECDAA528AA4FA669A ] msgpiowin32    C:\WINDOWS\System32\drivers\msgpiowin32.sys
14:25:17.0739 0x1e90  msgpiowin32 - ok
14:25:17.0758 0x1e90  [ 65C92EB9D08DB5C69F28C7FFD4E84E31, D709BA4723225321F665B1157A33A4AE230420752308EF535DA9A41CAC164628 ] mshidkmdf      C:\WINDOWS\System32\drivers\mshidkmdf.sys
14:25:17.0803 0x1e90  mshidkmdf - ok
14:25:17.0819 0x1e90  [ 52299F086AC2DAFD100DD5DC4A8614BA, B36BE0FC96798E5EB8C193C318970E3906961E3ABC3BFAAD73138C76D9A95B0B ] mshidumdf      C:\WINDOWS\System32\drivers\mshidumdf.sys
14:25:17.0841 0x1e90  mshidumdf - ok
14:25:17.0887 0x1e90  [ 36D92AF3343C3A3E57FEF11C449AEA4C, ECC85AA1E530DF55B4A4545798219F87F0FCA66DDD2E37BCEF0850D3C9129DD2 ] msisadrv        C:\WINDOWS\system32\drivers\msisadrv.sys
14:25:17.0904 0x1e90  msisadrv - ok
14:25:17.0937 0x1e90  [ 4EAEEBAC8CFF4E0D717DFA920BC58A90, A65CB1BB3392B6A04B978348CAC18A414560A6B04A727F22DFC0ADB20DD3AF6B ] MSiSCSI        C:\WINDOWS\system32\iscsiexe.dll
14:25:17.0964 0x1e90  MSiSCSI - ok
14:25:17.0969 0x1e90  msiserver - ok
14:25:17.0981 0x1e90  [ A9BBBD2BAE6142253B9195E949AC2E8D, 599D2952D4E0B0B3E02D91E38A30F4900B1ADA330716B887B156A1CB9A3E6EE9 ] MSKSSRV        C:\WINDOWS\system32\drivers\MSKSSRV.sys
14:25:18.0019 0x1e90  MSKSSRV - ok
14:25:18.0051 0x1e90  [ 51B3AC0560848CD6D65AC2033E293113, 73A27E88774C6929328E6C9FC9C389F4DF76D4D4D5CBFC4F51651CC308829628 ] MsLldp          C:\WINDOWS\system32\DRIVERS\mslldp.sys
14:25:18.0079 0x1e90  MsLldp - ok
14:25:18.0087 0x1e90  [ 7B2128EB875DCBC006E6A913211006D6, 97BBD7FF770741FBFC0F181A609AD0954EA926DA203B742E8F08C89AD8FE476E ] MSPCLOCK        C:\WINDOWS\system32\drivers\MSPCLOCK.sys
14:25:18.0120 0x1e90  MSPCLOCK - ok
14:25:18.0149 0x1e90  [ 1E88171579B218115C7A772F8DE04BD8, B9EAA835D0BF8F9C4DF8403D95EF1400E8AE38F28F9DBA87657DE2129FEF02D2 ] MSPQM          C:\WINDOWS\system32\drivers\MSPQM.sys
14:25:18.0186 0x1e90  MSPQM - ok
14:25:18.0220 0x1e90  [ BBE2A455053E63BECBF42C2F9B21FAE0, 7C5DF563499DF59DF9895A1581E47ADF5FD54C94ECEF6C886CDB60E5E95A6DAE ] MsRPC          C:\WINDOWS\system32\drivers\MsRPC.sys
14:25:18.0255 0x1e90  MsRPC - ok
14:25:18.0262 0x1e90  [ 8D6B7D515C5CBCDB75B928A0B73C3C5E, 1EB4DC3DD21D2627C78EC3F9931D9E5D033169087E43B5D7C17BF1FF2A0028CD ] mssmbios        C:\WINDOWS\System32\drivers\mssmbios.sys
14:25:18.0284 0x1e90  mssmbios - ok
14:25:18.0354 0x1e90  [ 115019AE01E0EB9C048530D2928AB4A2, 6E2275E85EACF2D0FC784792E0D72A165589D33CBAB3BCFA8E271CA09566C925 ] MSTEE          C:\WINDOWS\system32\drivers\MSTEE.sys
14:25:18.0409 0x1e90  MSTEE - ok
14:25:18.0456 0x1e90  [ 96D604A35070360F0DD4A7A8AF410B5E, F94DD1A3566C7C8D0A76D6E1E2530552A9B7F99C5DA0DE11829325EAB9F8B7ED ] MTConfig        C:\WINDOWS\System32\drivers\MTConfig.sys
14:25:18.0500 0x1e90  MTConfig - ok
14:25:18.0507 0x1e90  [ 619CA29326B82372621DB2C0964D8365, 4091F08E266DB45A6E33A4A8B1CE9FA78BB294B3111526AA9E3868620F30AFDF ] Mup            C:\WINDOWS\system32\Drivers\mup.sys
14:25:18.0534 0x1e90  Mup - ok
14:25:18.0565 0x1e90  [ B8C35C94DCB2DFEAF03BB42131F2F77F, F0FCF367CA8F722D6ABCF7F363CD406D890D71452E91C3FC6677B47AD74D6324 ] mvumis          C:\WINDOWS\system32\drivers\mvumis.sys
14:25:18.0601 0x1e90  mvumis - ok
14:25:18.0687 0x1e90  [ 50E1967C1C2A2BBF4E361DE1A6DD9A5E, 914650EE73313FF15F778F9002D8A1F43D9850D3D1086282B408CD71AC3874D0 ] MyWiFiDHCPDNS  C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
14:25:18.0707 0x1e90  MyWiFiDHCPDNS - ok
14:25:18.0749 0x1e90  [ 8DF30698BDD9492A9D45A4B94FB4A82A, 26B1B2D7E785E29B8BCB74C467C66AE4EBDD481ACFF36334F3BDF4506B778244 ] napagent        C:\WINDOWS\system32\qagentRT.dll
14:25:18.0801 0x1e90  napagent - ok
14:25:18.0838 0x1e90  [ 008F7CED69FD5B30CBDE1E03C6F36A27, D4ADA7834C470B17A3CD976012DC5A511B32545B9F91D23D09A85722E0B75320 ] NativeWifiP    C:\WINDOWS\system32\DRIVERS\nwifi.sys
14:25:18.0913 0x1e90  NativeWifiP - ok
14:25:18.0943 0x1e90  [ BFCE1225D10619029E68946929CEB64C, 499F560331FFBA82E3D673B47F027FDAB7BEE4F2CB5B811D69E0218839F6E6A5 ] NcaSvc          C:\WINDOWS\System32\ncasvc.dll
14:25:18.0976 0x1e90  NcaSvc - ok
14:25:19.0004 0x1e90  [ 267C97373110B7AFD3B46DF60B6CBB85, CEBB99F71D47634BB9C04DF2836DF6B47F15B3073FEFC237F85526DF01E4E38B ] NcbService      C:\WINDOWS\System32\ncbservice.dll
14:25:19.0061 0x1e90  NcbService - ok
14:25:19.0083 0x1e90  [ 0813B71EAF097208DC76CE0605B48AF0, A93A2E6A8FB77B58AC4D580E6F8BF307A25BADC9493994F9BE235EBFB0E1DB22 ] NcdAutoSetup    C:\WINDOWS\System32\NcdAutoSetup.dll
14:25:19.0102 0x1e90  NcdAutoSetup - ok
14:25:19.0196 0x1e90  [ 97DC5967F65503213FD1F1B3E4A6F983, 3EC515856C7CE9B30032F963DC04190F66EE62402A819781DC45B7D088C84229 ] NDIS            C:\WINDOWS\system32\drivers\ndis.sys
14:25:19.0298 0x1e90  NDIS - ok
14:25:19.0336 0x1e90  [ 8CECC8DA55F3274181FD1EA28AD76664, 188112424CEF97FB926A0FB915260B803555A775DD2E1846725A9C8616300F42 ] NdisCap        C:\WINDOWS\system32\DRIVERS\ndiscap.sys
14:25:19.0359 0x1e90  NdisCap - ok
14:25:19.0389 0x1e90  [ 269882812E9A68FFF1AFE1283D428322, 50B99EBC42DA9B46A8C2C28C9BADCF58AE3079535CDD1227D0F5C86291C715FF ] NdisImPlatform  C:\WINDOWS\system32\DRIVERS\NdisImPlatform.sys
14:25:19.0417 0x1e90  NdisImPlatform - ok
14:25:19.0435 0x1e90  [ DC1D9F692C2AD84C214584C28501C1F7, 96FC0D1EC48FED963E02648541A2AAC8E72ED00D797EA8E3D0ED02F5EB4816C5 ] NdisTapi        C:\WINDOWS\system32\DRIVERS\ndistapi.sys
14:25:19.0473 0x1e90  NdisTapi - ok
14:25:19.0517 0x1e90  [ B832B35055BA2B7B4181861FF94D8E59, 2E60E5D503E88D27E35ECFEE265D51328E93A9C7B9B931F86D9CBC947636BB00 ] Ndisuio        C:\WINDOWS\system32\DRIVERS\ndisuio.sys
14:25:19.0604 0x1e90  Ndisuio - ok
14:25:19.0611 0x1e90  [ 1F58E48EF75F34C35D8E93A0DC535CFE, D65619A6C4B1747F8B05DA08A44EF0E46B5CC384880E04E4755A2BA6CDB3C4EA ] NdisVirtualBus  C:\WINDOWS\System32\drivers\NdisVirtualBus.sys
14:25:19.0656 0x1e90  NdisVirtualBus - ok
14:25:19.0708 0x1e90  [ DEC29080202D4F9F17F55E18BCFCC41A, F7E543741B1F4F637A99C40543D6AEC6EBF893F74359BBA769D1F882E0AFB571 ] NdisWan        C:\WINDOWS\system32\DRIVERS\ndiswan.sys
14:25:19.0767 0x1e90  NdisWan - ok
14:25:19.0775 0x1e90  [ DEC29080202D4F9F17F55E18BCFCC41A, F7E543741B1F4F637A99C40543D6AEC6EBF893F74359BBA769D1F882E0AFB571 ] NdisWanLegacy  C:\WINDOWS\system32\DRIVERS\ndiswan.sys
14:25:19.0810 0x1e90  NdisWanLegacy - ok
14:25:19.0834 0x1e90  [ B8F36CBC72FC5C8B8A30AD850165EA8E, 478454B1399700B745265A64EC9C797C66BD0141471200BCF222F5EB15B0F40C ] NDProxy        C:\WINDOWS\system32\drivers\NDProxy.sys
14:25:19.0864 0x1e90  NDProxy - ok
14:25:19.0892 0x1e90  [ 3083926D1CC5B56EA0786527B557DD1B, 3C3F0CA0D43398576DBE8F677B353ADDA7E8F56829874958CE668E31261C1590 ] Ndu            C:\WINDOWS\system32\drivers\Ndu.sys
14:25:19.0928 0x1e90  Ndu - ok
14:25:19.0962 0x1e90  [ 2334DC48997BA203B794DF3EE70521DB, 832F4EC1586C9669F2D54AB3B212943E43B87A33B24DCC8CDAD6A0264291EE2F ] Net Driver HPZ12 C:\Windows\System32\HPZinw12.dll
14:25:19.0982 0x1e90  Net Driver HPZ12 - detected UnsignedFile.Multi.Generic ( 1 )
14:25:22.0312 0x1e90  Detect skipped due to KSN trusted
14:25:22.0312 0x1e90  Net Driver HPZ12 - ok
14:25:22.0370 0x1e90  [ EE00C544C025958AF50C7B199F3C8595, D774DB020D9C46D1AA0B2DB9FA2C36C4A9C38D904CC6929695321D32ACA0D4D1 ] Netaapl        C:\WINDOWS\system32\DRIVERS\netaapl64.sys
14:25:22.0394 0x1e90  Netaapl - ok
14:25:22.0431 0x1e90  [ 42FF4975D032CAE558AE4BB8448F6E5A, 0B8FACF3382443DED79A8004A6AA14C32471A6A1C6BAA543AA9F3FEC52620A6D ] NetBIOS        C:\WINDOWS\system32\DRIVERS\netbios.sys
14:25:22.0469 0x1e90  NetBIOS - ok
14:25:22.0489 0x1e90  [ 0217532E19A748F0E5D569307363D5FD, C40C2E7AFA276057E7327A7BB173122689D6CEC9AE443C3850C3F94AF03DFBF5 ] NetBT          C:\WINDOWS\system32\DRIVERS\netbt.sys
14:25:22.0535 0x1e90  NetBT - ok
14:25:22.0557 0x1e90  [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] Netlogon        C:\WINDOWS\system32\lsass.exe
14:25:22.0573 0x1e90  Netlogon - ok
14:25:22.0621 0x1e90  [ 8F074B62E66B6117D9598C62A12069C5, 5FDB19045D3E2F6D0F0C5158AC2ECB0D5404CD2AF7A319755D7E3753CA3B7CF3 ] Netman          C:\WINDOWS\System32\netman.dll
14:25:22.0645 0x1e90  Netman - ok
14:25:22.0684 0x1e90  [ 4A04B1CD5BFB4A978C5F60E86D6C3E45, A946922C1C38ADD3CF9D3B09DDCC301AE4DAC960A081B2F42B32BE1E7095B3FD ] netprofm        C:\WINDOWS\System32\netprofmsvc.dll
14:25:22.0716 0x1e90  netprofm - ok
14:25:22.0810 0x1e90  [ 1092B3190E69E0C5ECBCE90F171DE047, C16106EEFC324EE80E5F659CB71A5DD69FA800D36D829F5B0E6AD3393BD1BAF7 ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
14:25:22.0825 0x1e90  NetTcpPortSharing - ok
14:25:22.0853 0x1e90  [ D4DCE03870314D3354F3501F9DDD4123, 5BFE8299B3F72B8C39A4965365CBF5BA151024451F02DD872FAD1CC35CF94CEA ] netvsc          C:\WINDOWS\System32\drivers\netvsc63.sys
14:25:22.0898 0x1e90  netvsc - ok
14:25:23.0009 0x1e90  [ 4E28478C4CE7A0258BAE7127F8CE1AD6, 985C566978478F6A8DF79F58892119E75E60A0C0BFBA6E15707FE58D136E9EFC ] NETwNe64        C:\WINDOWS\system32\DRIVERS\NETwew00.sys
14:25:23.0176 0x1e90  NETwNe64 - ok
14:25:23.0232 0x1e90  [ E94EB2A95D7D016E119C4D6868788831, 3E4A925D23262FBA0A6432DD635FBE94B0CEF76BD9BB323254B66977497FEE2A ] NlaSvc          C:\WINDOWS\System32\nlasvc.dll
14:25:23.0274 0x1e90  NlaSvc - ok
14:25:23.0306 0x1e90  [ D319A833EC173AD83C67885B3ED6C71C, CF0B1C31517A7F10F8CD714914CDC52BF82F61037CE2D2C2A7176764465B0AA7 ] NotificationsProviderSvc C:\Program Files\Windows Server\Bin\SharedServiceHost.exe
14:25:23.0313 0x1e90  NotificationsProviderSvc - ok
14:25:23.0354 0x1e90  [ 8F44A2F57C9F1A19AC9C6288C10FB351, 310274DDBAC0FE4BE54ECD3B90C97D82A0F9F5CFCA7A35711A36164DE4B94074 ] Npfs            C:\WINDOWS\system32\drivers\Npfs.sys
14:25:23.0393 0x1e90  Npfs - ok
14:25:23.0442 0x1e90  [ CBDB4F0871C88DF930FC0E8588CA67FC, 7E4AA3EA81A9D532F236FD7896744F07ED07CA9B37A9F18A9778BCCCC67490F2 ] npsvctrig      C:\WINDOWS\System32\drivers\npsvctrig.sys
14:25:23.0489 0x1e90  npsvctrig - ok
14:25:23.0517 0x1e90  [ 0F12A72A753CFD7FB0631EE8D08FE983, 860A96471F6CD90DDA9AB3A48E95CEAD826C87D2FA98A00EF91B61C44A4C8B82 ] nsi            C:\WINDOWS\system32\nsisvc.dll
14:25:23.0547 0x1e90  nsi - ok
14:25:23.0580 0x1e90  [ 0E046FF5823B95326D10CF1B4AF23541, 39D22715003746527AB4BFEDED8C34B695DAF589091AE7F3A2A2C4B8A35675A9 ] nsiproxy        C:\WINDOWS\system32\drivers\nsiproxy.sys
14:25:23.0617 0x1e90  nsiproxy - ok
14:25:23.0691 0x1e90  [ 7F68063A5A0461E02BC860CE0E6BFDDC, 47E9F75D27B97278B74034B7D3951A26B1644911ED321455E08D935731C858DE ] Ntfs            C:\WINDOWS\system32\drivers\Ntfs.sys
14:25:23.0799 0x1e90  Ntfs - ok
14:25:23.0830 0x1e90  [ EF1B290FC9F0E47CC0B537292BEE5904, DBC07BBC54EBC2D2E576B23A4CE116B3DA988577AD0D96CB7289A6748A60F9EA ] Null            C:\WINDOWS\system32\drivers\Null.sys
14:25:23.0866 0x1e90  Null - ok
14:25:24.0171 0x1e90  [ 7C28BA74B766F3470128107DA764F711, 43738B3B7F7A493D2B0102B889612A1E91545F38BA82CD911D63361F08048314 ] nvlddmkm        C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys
14:25:24.0464 0x1e90  nvlddmkm - ok
14:25:24.0620 0x1e90  [ F758A5752CA282925CE3324FDBBADBED, E9DE21AE4509BC401FE7BD717E1585BDEAF2E016A4DC8BB829DD43F54101923F ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
14:25:24.0662 0x1e90  NvNetworkService - ok
14:25:24.0694 0x1e90  [ ACE287C78C766F97630E7FAEEE3762B8, 2A0475A72579519BBBFF8F27AEC2DCA23AFF3EE1C6DBF396BB89EA8852C7914B ] nvpciflt        C:\WINDOWS\system32\DRIVERS\nvpciflt.sys
14:25:24.0710 0x1e90  nvpciflt - ok
14:25:24.0742 0x1e90  [ BC6B5942AFF25EBAF62DE43C3807EDF8, CB0FA194084B8C309039D571B5760FDA800E9531B8660C499B4F9977BA5C36D5 ] nvraid          C:\WINDOWS\system32\drivers\nvraid.sys
14:25:24.0767 0x1e90  nvraid - ok
14:25:24.0784 0x1e90  [ 1F43ABFFAC3D6CA356851D517392966E, 6FD7621F67BA94B0E1D8F43BEC2951DBCDEEA1E848BB265AC169E27C01DA68F2 ] nvstor          C:\WINDOWS\system32\drivers\nvstor.sys
14:25:24.0804 0x1e90  nvstor - ok
14:25:24.0902 0x1e90  [ 0772513BF441995A61A6C6F87BE12174, 308203FACAAFC87AA18765F0F358ADF5F99D0CAA9ADE51C14C43416FAB68FA18 ] NvStreamKms    C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
14:25:24.0929 0x1e90  NvStreamKms - ok
14:25:24.0933 0x1e90  NvStreamSvc - ok
14:25:24.0980 0x1e90  [ 2A4F832243E869FD7564AA90402D74BD, E730A517EB6D49036B6FC196BFC930ED93EDB4FD4FA7EB1EB69A434BB94AE3C0 ] nvsvc          C:\WINDOWS\system32\nvvsvc.exe
14:25:25.0023 0x1e90  nvsvc - ok
14:25:25.0038 0x1e90  [ DBFE7B2DF103F74AE51840B3C5F25FE9, 436CAA417FD24BA870F117FA4BABA2AB694825795508BCFCC8C927CC2D5BBC5E ] nvvad_WaveExtensible C:\WINDOWS\system32\drivers\nvvad64v.sys
14:25:25.0053 0x1e90  nvvad_WaveExtensible - ok
14:25:25.0081 0x1e90  [ 6934A936A7369DFE37B7DBA93F5E5E49, 0900FEEB0CE8D09F0FC60630B5B986034A8BCD3882ED66E47170810C32492892 ] nv_agp          C:\WINDOWS\system32\drivers\nv_agp.sys
14:25:25.0101 0x1e90  nv_agp - ok
14:25:25.0173 0x1e90  [ 9D10F99A6712E28F8ACD5641E3A7EA6B, 70964A0ED9011EA94044E15FA77EDD9CF535CC79ED8E03A3721FF007E69595CC ] ose            C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE
14:25:25.0185 0x1e90  ose - ok
14:25:25.0377 0x1e90  [ 61BFFB5F57AD12F83AB64B7181829B34, 1DD0DD35E4158F95765EE6639F217DF03A0A19E624E020DBA609268C08A13846 ] osppsvc        C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
14:25:25.0477 0x1e90  osppsvc - ok
14:25:25.0533 0x1e90  [ 26657F3B4F39A0E64AF859278B599C4E, 3DD65E0BCEF3045DBA29FB8171CA3FCC9781AED3A1C7A160CF26388CE80A3683 ] p2pimsvc        C:\WINDOWS\system32\pnrpsvc.dll
14:25:25.0556 0x1e90  p2pimsvc - ok
14:25:25.0596 0x1e90  [ FD8F61F0D1F64BBB3D835F39A3F979C9, E5C5F86576488EA7F605E26C06EE5AFB36506A446F60C894D55E0A148BF7F02D ] p2psvc          C:\WINDOWS\system32\p2psvc.dll
14:25:25.0643 0x1e90  p2psvc - ok
14:25:25.0670 0x1e90  [ 764B1121867B2D9B31C491668AC72B2B, 32C04B6FCE1DDD09697B81473A23BDCED8BEEFBCD0D2D58DDC9A11A33C756967 ] Parport        C:\WINDOWS\System32\drivers\parport.sys
14:25:25.0692 0x1e90  Parport - ok
14:25:25.0720 0x1e90  [ BAFF6122CFC9F95CA175AD8C348179A4, 079A912D951DF6A57BC1BDB0D182977EE9592751EC9DDCDA2932BDEDB333850C ] partmgr        C:\WINDOWS\system32\drivers\partmgr.sys
14:25:25.0744 0x1e90  partmgr - ok
14:25:25.0790 0x1e90  [ ABE95ABE27A8BD9701782BBCD82C9925, AE3BA1E9ECDE692374D8DAC95A8DAA289DD2470E3D8D58EFAD9F83A37F3AC8E5 ] PcaSvc          C:\WINDOWS\System32\pcasvc.dll
14:25:25.0826 0x1e90  PcaSvc - ok
14:25:25.0862 0x1e90  [ 91ED124E261EA8FAA1C0FFDF2A71B0C4, 20E41A38067395D03184938983A9BE459717A1941352972DBC28D83D542319EC ] pci            C:\WINDOWS\system32\drivers\pci.sys
14:25:25.0888 0x1e90  pci - ok
14:25:25.0902 0x1e90  [ 346E38FCC6859A727DD28AFAD1F0AFF4, FF3DA26F79B3BC3A5B8A8AA0B9139B9EF70297F4EA1203B1E68FB5A212C3AA58 ] pciide          C:\WINDOWS\system32\drivers\pciide.sys
14:25:25.0919 0x1e90  pciide - ok
14:25:25.0948 0x1e90  [ 4D3BDCC1C7B40C9D7B6AD990E6DEC397, 27A7AF2127B699F4579CB77936F38DC102211E26E5E2947DB808756FE06FC98E ] pcmcia          C:\WINDOWS\system32\drivers\pcmcia.sys
14:25:25.0968 0x1e90  pcmcia - ok
14:25:25.0976 0x1e90  [ BF28771D1436C88BE1D297D3098B0F7D, 5F7630916A76A8CF31289E9C577F522B999C74C39E541CD40E62BD53004BEF74 ] pcw            C:\WINDOWS\system32\drivers\pcw.sys
14:25:25.0994 0x1e90  pcw - ok
14:25:26.0020 0x1e90  [ ED54A75050211DC77F9B98C41E026858, F92FB59ADE88469EAA50E91D43165C68CC32FDE11595A0069FD43103A674FE44 ] pdc            C:\WINDOWS\system32\drivers\pdc.sys
14:25:26.0040 0x1e90  pdc - ok
14:25:26.0075 0x1e90  [ 0ECEE590F2E2EF969FB74A6FC583A1E6, 1C611D9225C863CF32125F684B324C58BDE1942F4F283F5674133200AC505D44 ] PEAUTH          C:\WINDOWS\system32\drivers\peauth.sys
14:25:26.0122 0x1e90  PEAUTH - ok
14:25:26.0208 0x1e90  [ 8E3C640FFF5A963F570233AE99C0FFF3, 3DE978B005BF2E88BA858CE37D9E27BD3584642B8412E22C300A1E739743838A ] PerfHost        C:\WINDOWS\SysWow64\perfhost.exe
14:25:26.0236 0x1e90  PerfHost - ok
14:25:26.0358 0x1e90  [ AB5CB118C78A43CFDACFA2E7F1A18515, 9C37965D6D9DC260D5219A6811938228792CD2DDCF4C13FAE6AF592C70775476 ] PFNService      C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe
14:25:26.0418 0x1e90  PFNService - detected UnsignedFile.Multi.Generic ( 1 )
14:25:28.0821 0x1e90  PFNService ( UnsignedFile.Multi.Generic ) - warning
14:25:31.0307 0x1e90  [ 70B39E7241F750A248798CE82C44596D, 54A72199EB277EE586611DCBC21654786FD2196F91D5884C4F531297893CC3EC ] pla            C:\WINDOWS\system32\pla.dll
14:25:31.0374 0x1e90  pla - ok
14:25:31.0418 0x1e90  [ 2C02AFF8383D893F8DBEB07A84F6E77C, 7CC34BAC67E2988E3D16DD6EB6F6785CD2460E3EF7FBD0BD5F86E49793BD473E ] PlugPlay        C:\WINDOWS\system32\umpnpmgr.dll
14:25:31.0432 0x1e90  PlugPlay - ok
14:25:31.0475 0x1e90  [ AC78DF349F0E4CFB8B667C0CFFF83CCE, 7E635AA2E7350FCA0C954E697F1480A6204920AEFBCF06B90FFA02398DA82822 ] Pml Driver HPZ12 C:\Windows\System32\HPZipm12.dll
14:25:31.0499 0x1e90  Pml Driver HPZ12 - detected UnsignedFile.Multi.Generic ( 1 )
14:25:33.0817 0x1e90  Detect skipped due to KSN trusted
14:25:33.0817 0x1e90  Pml Driver HPZ12 - ok
14:25:33.0879 0x1e90  [ 4570F8A37D221660F3A09D6F4DD4BA94, 0EA190CFFA53DF9CCA2D53A4EF1BCB837BA3F2489A3AC5BD11F6D6ED811D118E ] PNRPAutoReg    C:\WINDOWS\system32\pnrpauto.dll
14:25:33.0920 0x1e90  PNRPAutoReg - ok
14:25:33.0947 0x1e90  [ 26657F3B4F39A0E64AF859278B599C4E, 3DD65E0BCEF3045DBA29FB8171CA3FCC9781AED3A1C7A160CF26388CE80A3683 ] PNRPsvc        C:\WINDOWS\system32\pnrpsvc.dll
14:25:33.0975 0x1e90  PNRPsvc - ok
14:25:34.0009 0x1e90  [ BDD52AB4AEBB8B1904568DBD0CCB70CB, C3D1DBA349C79B43DCDD9EF5255C5EE973EFB844235B808B5EF9B63A51FF00AA ] PolicyAgent    C:\WINDOWS\System32\ipsecsvc.dll
14:25:34.0037 0x1e90  PolicyAgent - ok
14:25:34.0067 0x1e90  [ C8DD82C3035E60D671B8CC5DF128D3A9, 6AABF632CBEDA9A7B553BC9134FF100CB6FDC88000D499D2883408FCEDD97576 ] Power          C:\WINDOWS\system32\umpo.dll
14:25:34.0094 0x1e90  Power - ok
14:25:34.0121 0x1e90  [ E075CC071022BD4E9BE7C024717C0E0A, BE65A8C1082AE8DF8C37CA06B2BCC521478AC153EA7388B03F7FAE3913920E75 ] PptpMiniport    C:\WINDOWS\system32\DRIVERS\raspptp.sys
14:25:34.0158 0x1e90  PptpMiniport - ok
14:25:34.0279 0x1e90  [ 3C96A45CA3403A276B0F045C448EC27B, C0011DB8C5A85817CAF815CC0095EE2C1CDD5964DCD8EAF4C35A2495D6A873CC ] PrintNotify    C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
14:25:34.0382 0x1e90  PrintNotify - ok
14:25:34.0408 0x1e90  [ ECD373F9571C745894367CC2635EA44F, E08B2A1017DAE1BF10B986DAFAD14BDE20D79703E0EF3A8C700A3753908C1392 ] Processor      C:\WINDOWS\System32\drivers\processr.sys
14:25:34.0439 0x1e90  Processor - ok
14:25:34.0469 0x1e90  [ 6E409D818C6B342544EAE741B1422B85, B4ADFB7809FC42C432C984C3AC13FAFD1B7AD53BCC7FB16E86371DE4C829DD1A ] ProfSvc        C:\WINDOWS\system32\profsvc.dll
14:25:34.0500 0x1e90  ProfSvc - ok
14:25:34.0562 0x1e90  [ D319A833EC173AD83C67885B3ED6C71C, CF0B1C31517A7F10F8CD714914CDC52BF82F61037CE2D2C2A7176764465B0AA7 ] providers_system C:\Program Files\Windows Server\Bin\SharedServiceHost.exe
14:25:34.0578 0x1e90  providers_system - ok
14:25:34.0620 0x1e90  [ FC0141B4A5AD6D637D883C1A89FC45C5, DCE8942C02EEDAE7A57707CA60CAC3A8CD6BA68E6571E405CA882D4DD6D69E43 ] Psched          C:\WINDOWS\system32\DRIVERS\pacer.sys
14:25:34.0663 0x1e90  Psched - ok
14:25:34.0686 0x1e90  [ C32ECB99AD25E9A04F01C8665DF29EF8, 0489B3DEC6A33E50D8A48A8DAD3F5B923A81F7300E4A71358D90D2879BAC9AA2 ] pwdrvio        C:\WINDOWS\system32\pwdrvio.sys
14:25:34.0710 0x1e90  pwdrvio - ok
14:25:34.0741 0x1e90  [ D619356B955EEFA642F5FF72755E8B3C, 1FD54978A77ACD6FBF1236E177ED074894743A9141E4169FE9AFE28680FC93C5 ] pwdspio        C:\WINDOWS\system32\pwdspio.sys
14:25:34.0765 0x1e90  pwdspio - ok
14:25:34.0804 0x1e90  [ DAA9DEE0A5D5F238C4EE54C2C7FB67C5, 7EC8C603BD92699AC35BDCD294F13BEE90D5C2C195FD93A3F16928BFCF53CA93 ] QWAVE          C:\WINDOWS\system32\qwave.dll
14:25:34.0842 0x1e90  QWAVE - ok
14:25:34.0881 0x1e90  [ 83868EB2924E6BC21A54337C65D614D1, 8D1BE01EBD190231153B867C32120DC8FBFBD32050448A778134D435D76A0B07 ] QWAVEdrv        C:\WINDOWS\system32\drivers\qwavedrv.sys
14:25:34.0912 0x1e90  QWAVEdrv - ok
14:25:34.0929 0x1e90  [ B337B1F1E82A83E20A1743E008E25C0F, A2E8AF041B4CAB78AEE28A2147A189FF0F9D2FCEFB167D60FBBA0A787A5A5BE7 ] RasAcd          C:\WINDOWS\system32\DRIVERS\rasacd.sys
14:25:34.0962 0x1e90  RasAcd - ok
14:25:34.0990 0x1e90  [ 3EE5097945A7F680E320953271EB2D4F, 0B9F2B458177A654F65C5E862B7C55B35E20271B76D5E20A20F30D3223A1216F ] RasAgileVpn    C:\WINDOWS\system32\DRIVERS\AgileVpn.sys
14:25:35.0030 0x1e90  RasAgileVpn - ok
14:25:35.0067 0x1e90  [ 044638489B4A5FE5334F46C5314A0826, E06CC2A9EF369794DAD69FBB5AFD1676D4283DDAB2AD5E3EFE454C473F62F955 ] RasAuto        C:\WINDOWS\System32\rasauto.dll
14:25:35.0105 0x1e90  RasAuto - ok
14:25:35.0123 0x1e90  [ 1BD3022FD6E450B00DE560265638FD2A, 3878B443053DFFED62641BE8736891F426C7121EB8C4DB38FF0F218697133A6D ] Rasl2tp        C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
14:25:35.0142 0x1e90  Rasl2tp - ok
14:25:35.0176 0x1e90  [ F83B38FCD4F69157B3D158433FA149CC, AB103BD3E2B3B134CB355C556DF70BCF0CF4DB11EFF7DB4A9876D5AA43D81293 ] RasMan          C:\WINDOWS\System32\rasmans.dll
14:25:35.0287 0x1e90  RasMan - ok
14:25:35.0301 0x1e90  [ 5247F308C4103CDC4FE12AE1D235800A, E567CD33CA1897D53795E071B7AFBAF98B2C8F725F8BED0BA90F5EF611520E48 ] RasPppoe        C:\WINDOWS\system32\DRIVERS\raspppoe.sys
14:25:35.0346 0x1e90  RasPppoe - ok
14:25:35.0378 0x1e90  [ 41F631007A158FEBB67F0E2AD1601BBA, EB5EA7277F4178BC27E55BF850AEBCD84B6BED80B2383CFB29548824AAFED135 ] RasSstp        C:\WINDOWS\system32\DRIVERS\rassstp.sys
14:25:35.0413 0x1e90  RasSstp - ok
14:25:35.0453 0x1e90  [ A1A5E79C0D1352AFDC08328A623DA051, 01546DDE6F1FF159A7EB7F2BF104910445D3D863F1F37DEA695579BA60D84280 ] rdbss          C:\WINDOWS\system32\DRIVERS\rdbss.sys
14:25:35.0495 0x1e90  rdbss - ok
14:25:35.0531 0x1e90  [ 6B21EBF892CD8CACB71669B35AB5DE32, 0AD8E14FEF16FB2559F5FC8AFBC9D49E4E24F43CF65F480DBF9FAB593269B419 ] rdpbus          C:\WINDOWS\System32\drivers\rdpbus.sys
14:25:35.0561 0x1e90  rdpbus - ok
14:25:35.0567 0x1e90  [ 680C1DAE268B6FB67FA21B389A8B79EF, 856911F77BDD8830C3D683EBE8AF399FB3A54C7D8D0B34EA37D903377F0A39BD ] RDPDR          C:\WINDOWS\system32\drivers\rdpdr.sys
14:25:35.0602 0x1e90  RDPDR - ok
14:25:35.0636 0x1e90  [ BC8A79C625568DDB7DCA49D0C2741A64, AB0A7ED9EC2282EC0356D27EA4F70515943E41C2112428B787636B8BEC278933 ] RdpVideoMiniport C:\WINDOWS\system32\drivers\rdpvideominiport.sys
14:25:35.0652 0x1e90  RdpVideoMiniport - ok
14:25:35.0684 0x1e90  [ A26AEC49F318FEE141DDDB2C5F99B3E6, 246AD79FF27E79DEDCB0AAA7C22A8EA6349DEDAC863413A1E378E68FD94C9C4F ] rdyboost        C:\WINDOWS\system32\drivers\rdyboost.sys
14:25:35.0708 0x1e90  rdyboost - ok
14:25:35.0761 0x1e90  [ 615DFD97DEA56CE1C3A52185A3038FF8, 707BF5F9FAE478A12656D15013F507CC1335E7B72BD21CA99BB813CB95E37BC0 ] ReFS            C:\WINDOWS\system32\drivers\ReFS.sys
14:25:35.0822 0x1e90  ReFS - ok
14:25:35.0893 0x1e90  [ 7256A19A9397E71FADC46E23E11B1609, AF403728F751C3ECFBA68D05C1E9672CB7B52CB078DE85CB16EAEC5230BBD5BC ] RegSrvc        C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
14:25:35.0904 0x1e90  RegSrvc - ok
14:25:35.0949 0x1e90  [ 0CF7CB56BF2D5E9DBCEE0185CB626FAD, 2BD2E2FB1D2EADD1F70EF55E8523C353F95D4FEB1BAD5017FA4D94F790F27825 ] RemoteAccess    C:\WINDOWS\System32\mprdim.dll
14:25:35.0968 0x1e90  RemoteAccess - ok
14:25:36.0004 0x1e90  [ AC8785B53F8436058C90450DA1840AE7, CC1FFC2713910211F8A6AD532DBB9253ACD188CBD784F1BE6613DF382825A3C1 ] RemoteRegistry  C:\WINDOWS\system32\regsvc.dll
14:25:36.0022 0x1e90  RemoteRegistry - ok
14:25:36.0097 0x1e90  [ DC66AE45816614D2999DCD3834DCCC4E, 1C26225135E851DDD1307F52401DD7055B26B3F3B8FDD693B21042C2896E235A ] RFCOMM          C:\WINDOWS\System32\drivers\rfcomm.sys
14:25:36.0142 0x1e90  RFCOMM - ok
14:25:36.0168 0x1e90  [ 65B9FDE300A6DECC03BA44C4616DCAD6, CAD992982733DD20282A3453DC4E554AE1FC077C35479C0CA4E8BC3A9DCD3BB0 ] RpcEptMapper    C:\WINDOWS\System32\RpcEpMap.dll
14:25:36.0195 0x1e90  RpcEptMapper - ok
14:25:36.0240 0x1e90  [ A737B433ABAF3F2DCB2BD7B4CC582B26, 3B5706B0CF0969A9F82060FD4DCC745F2D83C066B663FE8A4F0F493B64032C9C ] RpcLocator      C:\WINDOWS\system32\locator.exe
14:25:36.0253 0x1e90  RpcLocator - ok
14:25:36.0309 0x1e90  [ A6F17C299A03BAFEFB9257C462A19E00, EB68967D28355271897166D7B6FD963D1E546D3C24AE1AEAAC561F94357A9345 ] RpcSs          C:\WINDOWS\system32\rpcss.dll
14:25:36.0335 0x1e90  RpcSs - ok
14:25:36.0355 0x1e90  [ C76BA99AA5DAAE0FB24CB3D39F231783, 8F73B1DD725BBBA752D78BA61F45F0184680F9A0D8BD8528C96822971CD5A02B ] RrNetCapFilterDriver C:\WINDOWS\system32\DRIVERS\RrNetCapFilterDriver.sys
14:25:36.0370 0x1e90  RrNetCapFilterDriver - ok
14:25:36.0412 0x1e90  [ 2D05A5508F4685412F2B89E8C2189ABC, 82F12B4E0E73411A121EFD35FBD3B44CBBC0AE96ACFBB45D8C3C3777E2EA320D ] rspndr          C:\WINDOWS\system32\DRIVERS\rspndr.sys
14:25:36.0446 0x1e90  rspndr - ok
14:25:36.0484 0x1e90  [ 7291CC1B5ECA448B0B9C15E7E987A6B3, 1A61A4E5105354ABF041989044E97F1DEE356D65D77218F2DF97A4D2337177FD ] RSUSBSTOR      C:\WINDOWS\System32\Drivers\RtsUStor.sys
14:25:36.0522 0x1e90  RSUSBSTOR - ok
14:25:36.0560 0x1e90  [ 19764658C1468C2C0CEF133D28414A6B, 87AD4056F6C67052433A366B200B75613148B69B9B9D502AD926A7F7F037B8DE ] RTL8168        C:\WINDOWS\system32\DRIVERS\Rt630x64.sys
14:25:36.0620 0x1e90  RTL8168 - ok
14:25:36.0656 0x1e90  [ 1A063730F221B2746FF00457AE17E4F0, 39A3C258CBFE3BC566C63528C9020A3BC9409736AE5289C08A7BA471D8409263 ] s3cap          C:\WINDOWS\System32\drivers\vms3cap.sys
14:25:36.0684 0x1e90  s3cap - ok
14:25:36.0702 0x1e90  [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] SamSs          C:\WINDOWS\system32\lsass.exe
14:25:36.0714 0x1e90  SamSs - ok
14:25:36.0742 0x1e90  [ C624A1B32211C3166EDB3F4AB02A30B7, 6B2A4607DB52D74242787ED9DF9067058983D310431D8612D2B0236E6201E681 ] sbp2port        C:\WINDOWS\system32\drivers\sbp2port.sys
14:25:36.0766 0x1e90  sbp2port - ok
14:25:36.0805 0x1e90  [ 74A3B67F03877D06B09B1B40C5ED582E, A8FF9BF416F0BF365BFB4E1796859825C811A74B5E54DDDCE8345193BEEBE206 ] SCardSvr        C:\WINDOWS\System32\SCardSvr.dll
14:25:36.0834 0x1e90  SCardSvr - ok
14:25:36.0864 0x1e90  [ 8B9C4D55B4A536FB01C360DDB9533574, 9B939FE68F6F9C171ED0D91E2CE1E67515295D34EC23606BCDFD097DCC8CFD4A ] ScDeviceEnum    C:\WINDOWS\System32\ScDeviceEnum.dll
14:25:36.0880 0x1e90  ScDeviceEnum - ok
14:25:36.0907 0x1e90  [ 13BEA6C882D4D877A5A85CA149C86BC1, 8E9BE5C2A36D5881D9985C3A31309FE03966EA13A3541D3C5B542AB67FA0D55F ] scfilter        C:\WINDOWS\system32\DRIVERS\scfilter.sys
14:25:36.0925 0x1e90  scfilter - ok
14:25:36.0984 0x1e90  [ 3151A020E03DDE31AAC49F35C5EFB4DB, 5ABB1103009979F86C862357E28F37C2744979F2C99F7CF6ABB4EB1B8416B3F6 ] Schedule        C:\WINDOWS\system32\schedsvc.dll
14:25:37.0051 0x1e90  Schedule - ok
14:25:37.0084 0x1e90  [ 41C0D7B1A6D4AD119BA6AC0487EA5C8E, 516C2B34BA7507D0DA4148B4ABC0A8C36286570D4EA5C60B28647B1249C15018 ] SCPolicySvc    C:\WINDOWS\System32\certprop.dll
14:25:37.0097 0x1e90  SCPolicySvc - ok
14:25:37.0117 0x1e90  [ C54B6B2170BF628FD42F799A66956D75, BCF460A124CAA6F1F1A9A7BCBDCC2D5E39B0404D96B7C9FFAC806E041782B91E ] sdbus          C:\WINDOWS\System32\drivers\sdbus.sys
14:25:37.0144 0x1e90  sdbus - ok
14:25:37.0175 0x1e90  [ 0B1E929D11A8E358106955603FAC65E8, A5EC91BFC0873EC6AB1D0DB4E91654BD35339BD680E7E82DA2DC64996B4AE515 ] sdstor          C:\WINDOWS\System32\drivers\sdstor.sys
14:25:37.0193 0x1e90  sdstor - ok
14:25:37.0213 0x1e90  [ 3EA8A16169C26AFBEB544E0E48421186, 34BBB0459C96B3DE94CCB0D73461562935C583D7BF93828DA4E20A6BC9B7301D ] secdrv          C:\WINDOWS\system32\drivers\secdrv.sys
14:25:37.0240 0x1e90  secdrv - ok
14:25:37.0262 0x1e90  [ BA24CEA7152239F42ECD04AFB7C89D24, A2A11EABB0C283772B74667C7544B61BEB1B9745FBF065E831542129EB585AFA ] seclogon        C:\WINDOWS\system32\seclogon.dll
14:25:37.0294 0x1e90  seclogon - ok
14:25:37.0324 0x1e90  [ 81FE9A81EDF8016816C9E91FBFBF7D35, 87FB92A3D15F312F0B9C423EF851061A944B013E5668D8C9A441B4DC0EB690AF ] SENS            C:\WINDOWS\System32\sens.dll
14:25:37.0339 0x1e90  SENS - ok
14:25:37.0369 0x1e90  [ 6E4012AE67F09F867EF620C8D5524C0B, 63933E51F8E413E63481369CE2F9FD224560550FBD3BD2B4573E9F4AD88708A2 ] SensrSvc        C:\WINDOWS\system32\sensrsvc.dll
14:25:37.0400 0x1e90  SensrSvc - ok
14:25:37.0429 0x1e90  [ DB2FF24CE0BDD15FE75870AFE312BA89, 7DB0D978C92CD0A0A81F7AB46FE323B4929CEA01585B0F330921E6DFA7DE1B85 ] SerCx          C:\WINDOWS\system32\drivers\SerCx.sys
14:25:37.0447 0x1e90  SerCx - ok
14:25:37.0470 0x1e90  [ 0044B31F93946D5D41982314381FE431, 95B8A94BA9EF770F29ACD5B23D447EC2B6CF1CB3D0030343BA1550AC31F6E2A5 ] SerCx2          C:\WINDOWS\system32\drivers\SerCx2.sys
14:25:37.0501 0x1e90  SerCx2 - ok
14:25:37.0518 0x1e90  [ 3CD600C089C1251BEEB4CD4CD5164F9E, D9F81951B4454B24E821E33ACA53A851A61F3135E8EC6FBE6761A1A3E1CDCBE2 ] Serenum        C:\WINDOWS\System32\drivers\serenum.sys
14:25:37.0540 0x1e90  Serenum - ok
14:25:37.0563 0x1e90  [ D864381BC9C725FAB01D94C060660166, 132FED95222BBE3B0B25B3F1F0EFC5903D04564BD047BA4D2042AD51E3FDA724 ] Serial          C:\WINDOWS\System32\drivers\serial.sys
14:25:37.0589 0x1e90  Serial - ok
14:25:37.0616 0x1e90  [ 148195AE95D9BC7375A08846439FDAC1, 3A2F78FD18AA7A6D659921E19335E943894530874AC5AB5E7219CEF28FA54F7A ] sermouse        C:\WINDOWS\System32\drivers\sermouse.sys
14:25:37.0666 0x1e90  sermouse - ok
14:25:37.0699 0x1e90  [ 2E70B053A90C040F8BFC28E75C0E4153, 1A404EB64B4A99828AAD0BE5F870C57AFA89DFE5A5BED5FC93B7C1FEE8ADF9A7 ] ServiceProviderRegistry C:\Program Files\Windows Server\Bin\ProviderRegistryService.exe
14:25:37.0723 0x1e90  ServiceProviderRegistry - ok
14:25:37.0766 0x1e90  [ 3A2F1A7472C3B7CC9B89C8516C726488, 9BCBBAC10C900EA7B30822B463A77EE5067F217C4B490857A09E5277983CB89B ] SessionEnv      C:\WINDOWS\system32\sessenv.dll
14:25:37.0799 0x1e90  SessionEnv - ok
14:25:37.0819 0x1e90  [ 472B7A5AC181C050888DB454663DD764, C950A8615D57BFD455E18880398350642B2E1D6B951EC9754FD8D429F3418835 ] sfloppy        C:\WINDOWS\System32\drivers\sfloppy.sys
14:25:37.0853 0x1e90  sfloppy - ok
14:25:37.0878 0x1e90  [ 8081FF3DAE8159FE8956B09BC29CE983, AC0F305AEE8B1AB2E1275F1D33EC1D2F3E23F234F831BD9D41F415A94A19D3AB ] SharedAccess    C:\WINDOWS\System32\ipnathlp.dll
14:25:37.0899 0x1e90  SharedAccess - ok
14:25:37.0941 0x1e90  [ 7FD9A61A3523A61FC135D61D6E160314, 409E1CF7A62FD90CBC31AEAFBB7230B02DBEC6CFCA2D266D221A7643FAEBA13B ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
14:25:37.0983 0x1e90  ShellHWDetection - ok
14:25:38.0001 0x1e90  [ 2F518D13DD6F3053837FE606F1A2EA1F, 64109296CE95BD233525688A350D575CF97B9464659AA07CF78B307B6ADBC835 ] SiSRaid2        C:\WINDOWS\system32\drivers\SiSRaid2.sys
14:25:38.0019 0x1e90  SiSRaid2 - ok
14:25:38.0032 0x1e90  [ 1AC9A200A9C49C4508F04AAFFCA34A3F, 972BCB2A39169155F74111FAC74ACCD8F50E34EADCF087833B0980827627BBF4 ] SiSRaid4        C:\WINDOWS\system32\drivers\sisraid4.sys
14:25:38.0051 0x1e90  SiSRaid4 - ok
14:25:38.0123 0x1e90  [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] SkypeUpdate    C:\Program Files (x86)\Skype\Updater\Updater.exe
14:25:38.0141 0x1e90  SkypeUpdate - ok
14:25:38.0172 0x1e90  [ AF5CC3F9B88F140D78FC967ABF0F4EC7, 7CE3AB7B0A36635CF00E35E84C14B8661FAF794ABCFA61AE45A0E5E8EA996A3B ] SmbDrv          C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys
14:25:38.0181 0x1e90  SmbDrv - ok
14:25:38.0205 0x1e90  [ 19555D03CB179BED8B8AAA239A36BDA4, 7B975821D52ABE077496B3CFC010B33D478CD2C36E6A74D8F72D2BF582B8C84A ] SmbDrvI        C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys
14:25:38.0215 0x1e90  SmbDrvI - ok
14:25:38.0256 0x1e90  [ 3C84DCCE5B322F745A75CA8BA3A0F6B3, 1FB94A8A1C63D6FDB82E28ED5B696B3CB1F64183A89A3B5153B266C292CB7815 ] smphost        C:\WINDOWS\System32\smphost.dll
14:25:38.0269 0x1e90  smphost - ok
14:25:38.0311 0x1e90  [ 2F7A6F88A9516EB47B0BF13024434244, 5FC5635D077AAA42853F78306C941995B56E939015CC3F27D376CBD9395C7410 ] snapman        C:\WINDOWS\system32\DRIVERS\snapman.sys
14:25:38.0335 0x1e90  snapman - ok
14:25:38.0353 0x1e90  [ D0EB0DF8C603BBA084351A92732B1CBE, E24ED8F78EF41C1BC17386AE4BBCE0DC892C5B89B12C03FC9FB61D359B13F1B4 ] SNMPTRAP        C:\WINDOWS\System32\snmptrap.exe
14:25:38.0385 0x1e90  SNMPTRAP - ok
14:25:38.0417 0x1e90  [ D24B1945ED1F9C96DA786DBBF1E983CE, B46CB0B72B7A3DF94A46B8D65E38535C5F8E72A55CF2DC48EFA1F9A0108691C4 ] spaceport      C:\WINDOWS\system32\drivers\spaceport.sys
14:25:38.0451 0x1e90  spaceport - ok
14:25:38.0479 0x1e90  [ F337BE11071818FC3F5DC2940B6BDE34, D5CFF00E5DF37045F71AEE101AC9B270EBB29F372F404757B58600E9966C7E4D ] SpbCx          C:\WINDOWS\system32\drivers\SpbCx.sys
14:25:38.0498 0x1e90  SpbCx - ok
14:25:38.0539 0x1e90  [ 2E3976C857D7230EC8D2B2276E688255, C0A6A84369CB3E709A6FFEBED2B38AB62D731B79D052D6D6FA8EF855BC428778 ] Spooler        C:\WINDOWS\System32\spoolsv.exe
14:25:38.0583 0x1e90  Spooler - ok
14:25:38.0781 0x1e90  [ 46549AF7CB672BC8138264CC4100E9F8, 6434249FADB07A033FD40C37DF2B775CF0617CF0C3E7C170F2984BD3CE423794 ] sppsvc          C:\WINDOWS\system32\sppsvc.exe
14:25:39.0002 0x1e90  sppsvc - ok
14:25:39.0067 0x1e90  [ A3AB8BE2286A6803095560139FE8AC09, E9DCB514AE17C035C87894F7998D451675A88EE7F47137270070FAA96675467A ] SPUVCbv        C:\WINDOWS\System32\Drivers\SPUVCbv_x64.sys
14:25:39.0153 0x1e90  SPUVCbv - ok
14:25:39.0162 0x1e90  [ D319A833EC173AD83C67885B3ED6C71C, CF0B1C31517A7F10F8CD714914CDC52BF82F61037CE2D2C2A7176764465B0AA7 ] SqmProviderSvc  C:\Program Files\Windows Server\Bin\SharedServiceHost.exe
14:25:39.0170 0x1e90  SqmProviderSvc - ok
14:25:39.0188 0x1e90  [ 6416E79A58A8FCC33A447A4DDDD3BF04, 839E3107ACCD520C309BD6C8324DF7A8EB724EAD442AB1F1CACB0D83F84BE488 ] srv            C:\WINDOWS\system32\DRIVERS\srv.sys
14:25:39.0237 0x1e90  srv - ok
14:25:39.0271 0x1e90  [ 00D8AC8E3053290BDE6EA2FB6810D2FC, 957FEF84CBBAE71829529AE99A1B24F52D7831BD666442D0132FBB825409A75D ] srv2            C:\WINDOWS\system32\DRIVERS\srv2.sys
14:25:39.0309 0x1e90  srv2 - ok
14:25:39.0336 0x1e90  [ D047CD668E6277FD80F0C613946F034C, BD0209E7FD89F9295D4DE48C9652DF2A2990277C16AFA473B96704B1CBD2F338 ] srvnet          C:\WINDOWS\system32\DRIVERS\srvnet.sys
14:25:39.0375 0x1e90  srvnet - ok
14:25:39.0427 0x1e90  [ CF6C3037839CF78421A94F9060C2886F, CA98C180AE03F5BE8FEFFBA75BD98DEE2AD4FA975E1EF83215C9CD2476946811 ] SSDPSRV        C:\WINDOWS\System32\ssdpsrv.dll
14:25:39.0461 0x1e90  SSDPSRV - ok
14:25:39.0490 0x1e90  [ 198A737DBA666F4808D62E9A8277A6B7, 90B6E5E2ACE95D850C913A3A1DA1F966C44955C530004C228FA93B2A536F5C27 ] SstpSvc        C:\WINDOWS\system32\sstpsvc.dll
14:25:39.0521 0x1e90  SstpSvc - ok
14:25:39.0552 0x1e90  [ 5252D7BC56E5E0ED715AEA8FE173A455, 1408B3E98B35A449434718777EE70595F0D306197A428279C6281D2F1953F259 ] ssudmdm        C:\WINDOWS\system32\DRIVERS\ssudmdm.sys
14:25:39.0563 0x1e90  ssudmdm - ok
14:25:39.0643 0x1e90  [ F82B2FC221CA0E408874884787491667, A9C7FB9C4719484BDA4FB69A8F948DC556CFEA19DFE89D2E63536F2C42725E66 ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
14:25:39.0656 0x1e90  Stereo Service - ok
14:25:39.0686 0x1e90  [ 366DEA74BBA65B362BCCFC6FC2ADFD8B, 4D28122AB9D8DAB724021E6513B4474BD34FCEDF47769B1D27AC7551FCA002F8 ] stexstor        C:\WINDOWS\system32\drivers\stexstor.sys
14:25:39.0702 0x1e90  stexstor - ok
14:25:39.0717 0x1e90  [ 8F3C0CCF27CFFE89424F30E9FB3381AB, 74E54541B4A16DC97098428E1715A27557BAB97E05AF346F88958580199C1541 ] StillCam        C:\WINDOWS\System32\drivers\serscan.sys
14:25:39.0752 0x1e90  StillCam - ok
14:25:39.0789 0x1e90  [ 63E9CE568CF1192771A5F0460DE7D2B9, C27B21FD2C14AD41A59EF62EB8AC95C08EB13CCB1CEECD8378B8CDD4DC352E69 ] stisvc          C:\WINDOWS\System32\wiaservc.dll
14:25:39.0831 0x1e90  stisvc - ok
14:25:39.0853 0x1e90  [ 0ED2E318ABB68C1A35A8B8038BDB4C90, 5C3ABC245F4BCFE64E646D9C0E2F5E211244956C84D03084C71FF6A7E0CDED30 ] storahci        C:\WINDOWS\system32\drivers\storahci.sys
14:25:39.0871 0x1e90  storahci - ok
14:25:39.0898 0x1e90  [ 8B9486B64E5FC17FB9CC04CA10B77A34, C1EAC9D27DC83E4C56B890D97988C3CCFAE3877309610601F2E3FFFE97686D43 ] storflt        C:\WINDOWS\system32\drivers\vmstorfl.sys
14:25:39.0916 0x1e90  storflt - ok
14:25:39.0935 0x1e90  [ 6B06E2D11E604BE2B1A406C4CB3B90DE, 2DDEA1568A85AD64FCE5D10D348304FCD9BE6E96C2313353EF70A2933306D188 ] stornvme        C:\WINDOWS\system32\drivers\stornvme.sys
14:25:39.0964 0x1e90  stornvme - ok
14:25:39.0985 0x1e90  [ A45F5AC9D8069D0EC66E3CA73103073B, 996788F1C58E016E8E5CF3FD1D220A3C40AFFD6C21361A34636415DB12E0D381 ] StorSvc        C:\WINDOWS\system32\storsvc.dll
14:25:40.0014 0x1e90  StorSvc - ok
14:25:40.0039 0x1e90  [ 548759755BC73DAD663250239D7E0B9F, D31A05A8CE800B539420B6E545F1F4BF6E4B02EAF8366DE89CAF13A83C6CA48D ] storvsc        C:\WINDOWS\system32\drivers\storvsc.sys
14:25:40.0061 0x1e90  storvsc - ok
14:25:40.0089 0x1e90  [ E395BE02F80A79A6CF973BA38DBB8135, 4C6F85B0EB8E7725BA720F9742561D229726C0D7C17505D1E79F19A5626F6325 ] svsvc          C:\WINDOWS\system32\svsvc.dll
14:25:40.0161 0x1e90  svsvc - ok
14:25:40.0228 0x1e90  [ 65454187E0F8B6C0DCECB0287D06EC43, 87550000CF5B3C1DF3E69633934AFE8554AE40B6638F190D3185AD63F1D7A2EE ] swenum          C:\WINDOWS\System32\drivers\swenum.sys
14:25:40.0247 0x1e90  swenum - ok
14:25:40.0613 0x1e90  [ 1C71D72D4997A284128FBEE770726330, 21682BDE74A1108FED1124FB1EA35A03CBFA94ABE1B89CC0FADB4DD82596C43E ] swprv          C:\WINDOWS\System32\swprv.dll
14:25:40.0682 0x1e90  swprv - ok
14:25:40.0945 0x1e90  [ 06A5A15C89E5F2C08D0C595C1DA776AF, EEFC5803E3C76115DF24B00A4BD6F3196D6CD87049802EF58BE6CF2CCB758FBF ] syncagentsrv    C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
14:25:41.0078 0x1e90  syncagentsrv - ok
14:25:41.0160 0x1e90  [ 3F45C3FE208CA5E68832B65C597A35A6, EACE9AAFC01C2BA52F4DA129AEF7BFA3CF7F10146E4F4330CD344BFC39DC959C ] SynTP          C:\WINDOWS\system32\DRIVERS\SynTP.sys
14:25:41.0176 0x1e90  SynTP - ok
14:25:41.0225 0x1e90  [ 7E85DB0463AD2403AE84AD162B162279, 996C42ECAFC6E24C623068AFAFCC0A2612526333AF9315F7536C6D40C2570632 ] SysMain        C:\WINDOWS\system32\sysmain.dll
14:25:41.0286 0x1e90  SysMain - ok
14:25:41.0312 0x1e90  [ D73DBBB96CEE90C2856164AAD8543425, D11ADB5D4C5DD355314CA656D375D0062CAE7462E866F94F1B26D5803F65DCB2 ] SystemEventsBroker C:\WINDOWS\System32\SystemEventsBrokerServer.dll
14:25:41.0339 0x1e90  SystemEventsBroker - ok
14:25:41.0378 0x1e90  [ D6A71B95ACF71ACA63B67232059F1BCD, C5CEC032E7AB507500D1CC7A4E65DA6322412C798201A9D770CBDE892E50DFC8 ] TabletInputService C:\WINDOWS\System32\TabSvc.dll
14:25:41.0415 0x1e90  TabletInputService - ok
14:25:41.0452 0x1e90  [ 5A5BAB1CA9621E73E25EE4744B67CDA6, 479EBD7BAE1E2AD431153FDC016742F7A8D824716EAB1A4CA87EBBD21D61DECD ] TapiSrv        C:\WINDOWS\System32\tapisrv.dll
14:25:41.0488 0x1e90  TapiSrv - ok
14:25:41.0518 0x1e90  [ 048CFE7569D6ADCAB9349BB1A566A79E, E248D2A66881FDFF9505896F383EFFEF2FD5AFC15D8992E653F5C31F1F80DAF3 ] tbhsd          C:\WINDOWS\system32\drivers\tbhsd.sys
14:25:41.0554 0x1e90  tbhsd - ok
14:25:41.0668 0x1e90  [ 746DDF7D59AB8D721C88D48434597E8D, 78BDBAB8D1E86A11804FEB19B355C0FAD04ACE8DD4BDDFDADCE5461E259BCE82 ] Tcpip          C:\WINDOWS\system32\drivers\tcpip.sys
14:25:41.0808 0x1e90  Tcpip - ok
14:25:41.0881 0x1e90  [ 746DDF7D59AB8D721C88D48434597E8D, 78BDBAB8D1E86A11804FEB19B355C0FAD04ACE8DD4BDDFDADCE5461E259BCE82 ] TCPIP6          C:\WINDOWS\system32\DRIVERS\tcpip.sys
14:25:41.0967 0x1e90  TCPIP6 - ok
14:25:41.0982 0x1e90  [ 41CF802064F72E55F50CA0A221FD36D4, 70ABCDF9E96611E8C83042C581575E26649FE479475E8E118CD3FF6CB1C84C3F ] tcpipreg        C:\WINDOWS\system32\drivers\tcpipreg.sys
14:25:42.0019 0x1e90  tcpipreg - ok
14:25:42.0038 0x1e90  [ E0BD2D83875464FEEEB242CBA8B7E073, A3067165128F36035FA9F3CBA55CFED736E180C495497FA7332B3D97908C3D90 ] tdx            C:\WINDOWS\system32\DRIVERS\tdx.sys
14:25:42.0057 0x1e90  tdx - ok
14:25:42.0085 0x1e90  [ 232D185D2337F141311D0CF1983E1431, 02EB56D3F26174AF1741C1A444CE30DE84D5BAF583C1A52C7A953BCC52445547 ] terminpt        C:\WINDOWS\System32\drivers\terminpt.sys
14:25:42.0102 0x1e90  terminpt - ok
14:25:42.0163 0x1e90  [ C50997E282576DA492EBA66B059D4196, EBD793CB396F9503376207FA60353F5672DEDB620C8E01C8D6AE0030B3B03339 ] TermService    C:\WINDOWS\System32\termsrv.dll
14:25:42.0244 0x1e90  TermService - ok
14:25:42.0277 0x1e90  [ 2180DBCE75B914E5E5BBFFFAAE97AA21, 8000AECC8855903DB50ABA7E304396D1FCEAE8DC9ADD4FC50275CF24B4D914DE ] Themes          C:\WINDOWS\system32\themeservice.dll
14:25:42.0291 0x1e90  Themes - ok
14:25:42.0321 0x1e90  [ 4C5179DB61B9E14BEC15CDC4B152B2E9, 9048BEC7AD6A3F4B640E99B1F0365AC9A46740B188758FBB2C160EF30AD6E64B ] THREADORDER    C:\WINDOWS\system32\mmcss.dll
14:25:42.0334 0x1e90  THREADORDER - ok
14:25:42.0377 0x1e90  [ AEEEB1EE424A8D6F17B3A6461E0FC7E6, 3A5FD27DF6132E84DC03366FB684B31A454C0805A5E4EA0C67B0CE85FF446B93 ] tib            C:\WINDOWS\system32\DRIVERS\tib.sys
14:25:42.0450 0x1e90  tib - ok
14:25:42.0458 0x1e90  [ 3813F93D8A69EDE68913CC3050640FE3, 4931BC6DA6FD0808C985CD6202FB759F6B8DE8957FB44E6AD8844EA58C891AC1 ] tib_mounter    C:\WINDOWS\system32\DRIVERS\tib_mounter.sys
14:25:42.0480 0x1e90  tib_mounter - ok
14:25:42.0493 0x1e90  [ B5ED9CC61798C7D44BD535D40B89EFB5, 1BDCEAA9AF2096381870D92129C748F4EE06A1167ABA9367B9DD43BAF27E3F5B ] TimeBroker      C:\WINDOWS\System32\TimeBrokerServer.dll
14:25:42.0521 0x1e90  TimeBroker - ok
14:25:42.0546 0x1e90  [ 80A2FC1A089A71F2DBE5D8394FFB009F, DEA30E751F6EA42E43E16869713FC7E37832B15DAFA0062B1798DFA476981385 ] TPM            C:\WINDOWS\system32\drivers\tpm.sys
14:25:42.0567 0x1e90  TPM - ok
14:25:42.0589 0x1e90  [ 884113C2BB703FE806C8608B75F34831, 24DE5750CA4363455412BABB0B1FAB08497153E8F158ED44958F100410F93506 ] TrkWks          C:\WINDOWS\System32\trkwks.dll
14:25:42.0619 0x1e90  TrkWks - ok
14:25:42.0679 0x1e90  [ 44A94FB4C76528D2382FFE04B05827C3, B0BCDF7CD1D65E61A9061D539D83527A89B69583958F8A26C6BF9766C1B61E0C ] TrustedInstaller C:\WINDOWS\servicing\TrustedInstaller.exe
14:25:42.0715 0x1e90  TrustedInstaller - ok
14:25:42.0731 0x1e90  [ BF8F54CA37E9C9D6582C31C5761F8C93, 337C566792F6FB9B7FD5D1D4384B767CFE4CF5DBB2E4688CCC36CBB018A0DD0F ] TsUsbFlt        C:\WINDOWS\system32\drivers\tsusbflt.sys
14:25:42.0763 0x1e90  TsUsbFlt - ok
14:25:42.0782 0x1e90  [ 20185BEB7512EDE4EFECDFA148AC9F99, 6F539478493C0F87F3DDF67A4A6D4D41E9474EEF21434E856350CE149A34EA9F ] TsUsbGD        C:\WINDOWS\System32\drivers\TsUsbGD.sys
14:25:42.0811 0x1e90  TsUsbGD - ok
14:25:42.0844 0x1e90  [ E85916632CD3B9E9B546968DB950BF42, DECE3852C763CC6293C7D1B772296C43A0AE1E47BBCC4979C96B3B2AD70413F3 ] tunnel          C:\WINDOWS\system32\DRIVERS\tunnel.sys
14:25:42.0867 0x1e90  tunnel - ok
14:25:42.0907 0x1e90  [ F6EEAD052943B5A3104C1405BB856C54, FE422813E6C1012E9F392EFF2AE4C6D3A4DBD9CB2BD5E6A5CAB57D4E89A29468 ] uagp35          C:\WINDOWS\system32\drivers\uagp35.sys
14:25:42.0929 0x1e90  uagp35 - ok
14:25:42.0942 0x1e90  [ FE6067B1FD4E63650C667B33D080565B, 2C330ED00E49BA55E25564230E0DFB8A35F2B5320EB18D4AF7CAACFA9A449044 ] UASPStor        C:\WINDOWS\System32\drivers\uaspstor.sys
14:25:42.0961 0x1e90  UASPStor - ok
14:25:42.0991 0x1e90  [ 807F8CF3E973305FC435C61CBBEE2A49, 43CDEAC2BFC5091C11DFC0E7F7171AF9A598AE56CB056C3CF382AE7807F79EF0 ] UCX01000        C:\WINDOWS\System32\drivers\ucx01000.sys
14:25:43.0014 0x1e90  UCX01000 - ok
14:25:43.0039 0x1e90  [ C61EAF8E1E4B2F62BA4FDF457440B2C6, 961F76A789925234AC27F56AAE34556FA06088D71580B42C24B0BC209EAFD67E ] udfs            C:\WINDOWS\system32\DRIVERS\udfs.sys
14:25:43.0078 0x1e90  udfs - ok
14:25:43.0107 0x1e90  [ 9578691F297E1B1F519970FE6D47CB21, 080C352AAF22A16A4F3C4AB4DCEA5BFA656457C73F735CEBA30516FDACCF6301 ] UEFI            C:\WINDOWS\System32\drivers\UEFI.sys
14:25:43.0123 0x1e90  UEFI - ok
14:25:43.0158 0x1e90  [ A867F0F978EE64C87FADC3B100869EE4, 2686BE85F963D0D0BB275E92E5B543280D8742CF10772303E3189D0719B6A277 ] UI0Detect      C:\WINDOWS\system32\UI0Detect.exe
14:25:43.0171 0x1e90  UI0Detect - ok
14:25:43.0187 0x1e90  [ 5EAB5117DDB24FC4D39E6FFFCF1837B9, 2BC709240867F161E94BE6625A04F478EAAA3EEE7BC7C37ED0DFA9EEA5928E98 ] uliagpkx        C:\WINDOWS\system32\drivers\uliagpkx.sys
14:25:43.0203 0x1e90  uliagpkx - ok
14:25:43.0212 0x1e90  [ DA34C39A18E60E7C3FA0630566408034, 2F162504214053894C72760D9933D01DBF3578609FE5E2376C3272818599FE32 ] umbus          C:\WINDOWS\System32\drivers\umbus.sys
14:25:43.0244 0x1e90  umbus - ok
14:25:43.0264 0x1e90  [ AE8294875E5446E359B1E8035D40C05E, AE0357BAB47C07C3576BC76951CD258C009BC5A1B93259D2122A841BD9CDA8FA ] UmPass          C:\WINDOWS\System32\drivers\umpass.sys
14:25:43.0296 0x1e90  UmPass - ok
14:25:43.0321 0x1e90  [ A023F267A262D5DA6CE1436D9C5E8FD9, 92AD7AF91184C244A7E392F49663143193A80D5D81114546A00F18227DE31D23 ] UmRdpService    C:\WINDOWS\System32\umrdp.dll
14:25:43.0356 0x1e90  UmRdpService - ok
14:25:43.0404 0x1e90  [ 9DC07E73A4ABB9ACF692113B36A5009F, CA7176FC219515D58DCFA66EC61880ECE5617275C9B83701BB74D8B60E733D34 ] UnlockerDriver5 C:\Program Files\Unlocker\UnlockerDriver5.sys
14:25:43.0418 0x1e90  UnlockerDriver5 - ok
14:25:43.0495 0x1e90  [ DBE2E6388379D5CC78099650541E9566, 1914BC929F109A49FB18ED31F239A9813A010B0A3914BC8CD0D6A94A67A072D7 ] UNS            C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
14:25:43.0516 0x1e90  UNS - ok
14:25:43.0556 0x1e90  [ C98493DD8E6A50154FAC75C15E1C36BB, CECD1C826C8F7AF05468871BF6A0ACDBB6B0202F4F87F48C6D367E5BD699E800 ] upnphost        C:\WINDOWS\System32\upnphost.dll
14:25:43.0578 0x1e90  upnphost - ok
14:25:43.0599 0x1e90  [ F957092C63CD71D85903CA0D8370F473, 4DEC2FC20329F248135DA24CB6694FD972DCCE8B1BBEA8D872FDE41939E96AAF ] USBAAPL64      C:\WINDOWS\System32\Drivers\usbaapl64.sys
14:25:43.0636 0x1e90  USBAAPL64 - ok
14:25:43.0660 0x1e90  [ FF78D053A05E5A394F4E3C1816CC65A8, 5DAE02414271231F5FDBB751AFEB99874779B467947020815D4AE54432D4269D ] usbccgp        C:\WINDOWS\System32\drivers\usbccgp.sys
14:25:43.0681 0x1e90  usbccgp - ok
14:25:43.0708 0x1e90  [ 0139248F6B95CF0D837B5B46A2722D40, 38E3E704E0364F07732DB418AEBD126B040FB3CDB7D78EA36E8605D50D528A80 ] usbcir          C:\WINDOWS\System32\drivers\usbcir.sys
14:25:43.0729 0x1e90  usbcir - ok
14:25:43.0750 0x1e90  [ 48BA326A3DBA5B5BEB5F2777F4618696, B9EC8155F11A3A7644BD9DC8910681B46AE44AE3BF53F052DF50E9C5555E3229 ] usbehci        C:\WINDOWS\System32\drivers\usbehci.sys
14:25:43.0767 0x1e90  usbehci - ok
14:25:43.0792 0x1e90  [ FEF0BC107812B36849741C3211BA6B60, B3EF738BE1E6B6027F29C9713CD3F367EA067D2BE46580AFBC0FB58046EF6BBD ] usbhub          C:\WINDOWS\System32\drivers\usbhub.sys
14:25:43.0823 0x1e90  usbhub - ok
14:25:43.0859 0x1e90  [ 95B0179BDA907252025DEEA183699FB3, A6BDFB93EE9418A83407024204A41640A08638C60E2BE75C249D102601DC1D80 ] USBHUB3        C:\WINDOWS\System32\drivers\UsbHub3.sys
14:25:43.0890 0x1e90  USBHUB3 - ok
14:25:43.0950 0x1e90  [ 3019097FB6C985EF24C058090FF3BDBD, 24AC518D34E338D94BF3D5B3F72E53F8A1369BAA7F32FEA3EDBCF928C4FF1D17 ] usbohci        C:\WINDOWS\System32\drivers\usbohci.sys
14:25:43.0997 0x1e90  usbohci - ok
14:25:44.0029 0x1e90  [ 4D655E3B684BE9B0F7FFD8A2935C348C, 3A7FC1748C5AEA8CFE0E7C22ADC77E3DCA475455FC16D9C6A5C16EB5E949A516 ] usbprint        C:\WINDOWS\System32\drivers\usbprint.sys
14:25:44.0078 0x1e90  usbprint - ok
14:25:44.0104 0x1e90  [ 029DFB6E5B38ADD45561A8CE0F60B331, 09F616C1F17CB8D51D19017D6AD02479B709A713349AC69CFFED695ABFD753D2 ] usbser          C:\WINDOWS\system32\DRIVERS\usbser.sys
14:25:44.0122 0x1e90  usbser - ok
14:25:44.0149 0x1e90  [ 66732C13628BDB1AB0D6FD46027327C2, B582C0F348D8F79419CA5A58F10CA151E06D7CA3BE162344CADA46D9D7FED97C ] USBSTOR        C:\WINDOWS\System32\drivers\USBSTOR.SYS
14:25:44.0182 0x1e90  USBSTOR - ok
14:25:44.0208 0x1e90  [ 064260B3A5868AC894A4943543BC7AB7, D3534E98B34C4AC9A430D7E0AB301A0E5E1511E3117C2FEA392636B0DE2C38E2 ] usbuhci        C:\WINDOWS\System32\drivers\usbuhci.sys
14:25:44.0228 0x1e90  usbuhci - ok
14:25:44.0265 0x1e90  [ 44603DA5A87FB491EF59C889EBBB4DDB, 59AA9B6B0B5D66F9312CD3F999D0D9F12F1A2C5D230365AD7287CD71FD86961C ] USBXHCI        C:\WINDOWS\System32\drivers\USBXHCI.SYS
14:25:44.0292 0x1e90  USBXHCI - ok
14:25:44.0302 0x1e90  [ 382100E75B6F4668AEAEF228C6CEFFAD, 9C7229F10F11D18E1FED6395391A46225A84B421034B9AB6F81AF7430FDC556F ] VaultSvc        C:\WINDOWS\system32\lsass.exe
14:25:44.0312 0x1e90  VaultSvc - ok
14:25:44.0347 0x1e90  VBoxAswDrv - ok
14:25:44.0390 0x1e90  [ 8693BF3C413D225DB72D3F4F4E90FC21, E37D1BAB6C32C29A50ED83094EFEC6CE26BED42BF73660A7BCADD366E3471354 ] VBoxDrv        C:\WINDOWS\system32\DRIVERS\VBoxDrv.sys
14:25:44.0450 0x1e90  VBoxDrv - ok
14:25:44.0470 0x1e90  [ 87D4E923785CDFA655B53A78DD99BD2B, CCE460ED6C1292284B22B675CEDBB86CC3D329B15B1B9F77EA80AC7EDB774B65 ] VBoxNetAdp      C:\WINDOWS\system32\DRIVERS\VBoxNetAdp.sys
14:25:44.0488 0x1e90  VBoxNetAdp - ok
14:25:44.0512 0x1e90  [ 3BE9EEA378F69D296E8168D01A6913BD, EEB76C217CFE2960506E4012D130233858D74C4FF1657DF3EA499CFF651B2C3F ] VBoxNetFlt      C:\WINDOWS\system32\DRIVERS\VBoxNetFlt.sys
14:25:44.0530 0x1e90  VBoxNetFlt - ok
14:25:44.0561 0x1e90  [ 2902A7CDFD170579961EBE7682CA1729, 83859AC337A1F9E33EA90B7098DF7148A18F8AF99110371A4AA56F692666AD8C ] VBoxUSB        C:\WINDOWS\System32\Drivers\VBoxUSB.sys
14:25:44.0570 0x1e90  VBoxUSB - ok
14:25:44.0593 0x1e90  [ B820D9ACE4EDB499D33B2051B973FBBF, F5D344BA8640DE46DD825B20C1A9F3546342938DEA1571CD1245B6F4EC938346 ] VBoxUSBMon      C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys
14:25:44.0611 0x1e90  VBoxUSBMon - ok
14:25:44.0626 0x1e90  [ 3C8E2C591345F38149C69FE8E5DF8C90, 9F4BB9BDA09CB2E99A6A888B288F322AE5C460B5D124CD714C6F00FF5029144B ] VClone          C:\WINDOWS\System32\drivers\VClone.sys
14:25:44.0653 0x1e90  VClone - ok
14:25:44.0690 0x1e90  [ FEB26E3B8345A7E8D62F945C4AE86562, 3AAFE87C402FC8E92542DFE60EC9540559863065F88D429A16D7B1BF829223FF ] vdrvroot        C:\WINDOWS\system32\drivers\vdrvroot.sys
14:25:44.0708 0x1e90  vdrvroot - ok
14:25:44.0769 0x1e90  [ 8A4D808D1EC7C1C47B2C8BF488A9A07A, 63C07312ADB6F8A8BDE93361C30AC63DAB4DE1141AF54630EEF11E54B0BF983D ] vds            C:\WINDOWS\System32\vds.exe
14:25:44.0842 0x1e90  vds - ok
14:25:44.0881 0x1e90  [ A026EDEAA5EECAE0B08E2748B616D4BD, 2525A54DC7F49DDFBB999C22BF3FAB6D9E9F70C0806E58D81E90AC59F9F46089 ] VerifierExt    C:\WINDOWS\system32\drivers\VerifierExt.sys
14:25:44.0903 0x1e90  VerifierExt - ok
14:25:44.0939 0x1e90  [ F6ECFD6128A16A4851CFE98D4E01B011, C349893E8D7FB9B510A3FAD040F70C3C72B0ACDD5F6EB336951849F9E953717D ] vhdmp          C:\WINDOWS\System32\drivers\vhdmp.sys
14:25:44.0974 0x1e90  vhdmp - ok
14:25:45.0012 0x1e90  [ 06D38968028E9AB19DE9B618C7B6D199, 62022297A47F440D1C82CA0B0E57C0C8E9D5033D83DD3B40492B218DF65EBF68 ] viaide          C:\WINDOWS\system32\drivers\viaide.sys
14:25:45.0044 0x1e90  viaide - ok
14:25:45.0063 0x1e90  [ 511AD3FF957A0127E6BD336FF6F89C38, 55325BFD0857A1204F7F6F8ED8C91C07B0E20A50402105708E7365ECD9E25A21 ] vmbus          C:\WINDOWS\system32\drivers\vmbus.sys
14:25:45.0087 0x1e90  vmbus - ok
14:25:45.0102 0x1e90  [ DA40BEA0A863CE768C940CA9723BF81F, 567C0C3F422325635808B0CF76E05D3B6187F96845C33F85F92F98C9FE53A5B8 ] VMBusHID        C:\WINDOWS\System32\drivers\VMBusHID.sys
14:25:45.0123 0x1e90  VMBusHID - ok
14:25:45.0167 0x1e90  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicguestinterface C:\WINDOWS\System32\ICSvc.dll
14:25:45.0221 0x1e90  vmicguestinterface - ok
14:25:45.0259 0x1e90  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicheartbeat  C:\WINDOWS\System32\ICSvc.dll
14:25:45.0290 0x1e90  vmicheartbeat - ok
14:25:45.0312 0x1e90  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmickvpexchange C:\WINDOWS\System32\ICSvc.dll
14:25:45.0332 0x1e90  vmickvpexchange - ok
14:25:45.0353 0x1e90  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicrdv        C:\WINDOWS\System32\ICSvc.dll
14:25:45.0372 0x1e90  vmicrdv - ok
14:25:45.0398 0x1e90  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicshutdown    C:\WINDOWS\System32\ICSvc.dll
14:25:45.0417 0x1e90  vmicshutdown - ok
14:25:45.0442 0x1e90  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmictimesync    C:\WINDOWS\System32\ICSvc.dll
14:25:45.0461 0x1e90  vmictimesync - ok
14:25:45.0487 0x1e90  [ C42C38E15C0DC39D4B0BDF34F733E468, 7264680C44FA68BB1FC0A490FE3988AFDE19892295F7458943D8CBEE6C01D4F0 ] vmicvss        C:\WINDOWS\System32\ICSvc.dll
14:25:45.0506 0x1e90  vmicvss - ok
14:25:45.0548 0x1e90  [ 55D7D963DE85162F1C49721E502F9744, 5AD34D6DB707EF3E5242BD8CA67B21D6258EE7E7FC477D5227BD15500AE7F45F ] volmgr          C:\WINDOWS\system32\drivers\volmgr.sys
14:25:45.0567 0x1e90  volmgr - ok
14:25:45.0576 0x1e90  [ CCB9E901F7254BF96D28EB1B0E5329B7, F0E3CA4EFA544CDAEF4092284CF3EC7DF07F806A770285E281816457AD8813F5 ] volmgrx        C:\WINDOWS\system32\drivers\volmgrx.sys
14:25:45.0603 0x1e90  volmgrx - ok
14:25:45.0631 0x1e90  [ 64CA2B4A49A8EAF495E435623ECCE7DB, 81151F295A54DE2B8B88C7F48C86BF58CDFF96F98493509C06D6F41484594386 ] volsnap        C:\WINDOWS\system32\drivers\volsnap.sys
14:25:45.0657 0x1e90  volsnap - ok
14:25:45.0673 0x1e90  [ EF31713EE4C7CCFE4049F7E7F15645A2, 35D198D3F1061E19A7EF89FA1E75377049CD6BCA9702F8076B9F95BB8737E0D4 ] vpci            C:\WINDOWS\System32\drivers\vpci.sys
14:25:45.0690 0x1e90  vpci - ok
14:25:45.0702 0x1e90  [ 4539F45F9F4C9757A86A56C949421E07, DEC362314B2C66414F39354AFE79C02B18BF4EEF90787FB58307F6EB62237E2C ] vsmraid        C:\WINDOWS\system32\drivers\vsmraid.sys
14:25:45.0723 0x1e90  vsmraid - ok
14:25:45.0780 0x1e90  [ 3B7F9612439EA47151EC5EAB232C1C3F, CA08CCB14CB46512F72E2C20454242B18BC57E34C55B42A37B7EC27B79242CDC ] VSS            C:\WINDOWS\system32\vssvc.exe
14:25:45.0839 0x1e90  VSS - ok
14:25:45.0856 0x1e90  [ 0849B7260F26FE05EA56DED0672E2F4B, 7EAC0E7988F45CB4133A15932955B7B03CE715C967A3BAC9999D81543EBCAEC5 ] VSTXRAID        C:\WINDOWS\system32\drivers\vstxraid.sys
14:25:45.0882 0x1e90  VSTXRAID - ok
14:25:45.0935 0x1e90  [ BE970C369E43B509C1EDA2B8FA7CECB0, 18951F2AA842A0795AA79A4E164EE925A35E6270EBE4C4CDB19D0A891830E383 ] vwifibus        C:\WINDOWS\System32\drivers\vwifibus.sys
14:25:45.0953 0x1e90  vwifibus - ok
14:25:45.0976 0x1e90  [ 35BF5C5F5E3C9902C98978C7640574DA, C61E50B04000DCEC72365723F0C0725C2E005529DAF2777A59E624C14DA29E55 ] vwififlt        C:\WINDOWS\system32\DRIVERS\vwififlt.sys
14:25:46.0010 0x1e90  vwififlt - ok
14:25:46.0014 0x1e90  [ 65ED7B9CFEA893DF7748D5FF692690DE, 73AB9D8BB928B3247BDFC7BB47AD7FCA763B375DC250C251DB4E0573531040E8 ] vwifimp        C:\WINDOWS\system32\DRIVERS\vwifimp.sys
14:25:46.0036 0x1e90  vwifimp - ok
14:25:46.0063 0x1e90  [ DC821E811EFBB65CDD77FBB8B6ECA385, B7C8AACDF81DBA298F2F384983D36B269876C31F0398D89BF9070217A069B96F ] W32Time        C:\WINDOWS\system32\w32time.dll
14:25:46.0097 0x1e90  W32Time - ok
14:25:46.0127 0x1e90  [ 0910AB9ED404C1434E2D0376C2AD5D8B, 62585CA5F1375BDA440D28D5DF1ADDC9DE3DDFA196D49BBFF3456A5A09EE1C6B ] WacomPen        C:\WINDOWS\System32\drivers\wacompen.sys
14:25:46.0160 0x1e90  WacomPen - ok
14:25:46.0181 0x1e90  [ 23006D660C0E54BF1CE8253E15F5E995, 4FA7ED2F6B29BACBE2BB43C79FC8231C4C59F27C79AB09DB07BBFE36B35689E5 ] Wanarp          C:\WINDOWS\system32\DRIVERS\wanarp.sys
14:25:46.0205 0x1e90  Wanarp - ok
14:25:46.0210 0x1e90  [ 23006D660C0E54BF1CE8253E15F5E995, 4FA7ED2F6B29BACBE2BB43C79FC8231C4C59F27C79AB09DB07BBFE36B35689E5 ] Wanarpv6        C:\WINDOWS\system32\DRIVERS\wanarp.sys
14:25:46.0233 0x1e90  Wanarpv6 - ok
14:25:46.0298 0x1e90  [ A81988DCC4FA440AA88B84CA452F5E22, 3573AAA09971E8ADB6FEFA778E02B2D8EE5E4249267CF37A524D9F019CC836FB ] wbengine        C:\WINDOWS\system32\wbengine.exe
14:25:46.0356 0x1e90  wbengine - ok
14:25:46.0394 0x1e90  [ 0F1DFA2FED73FA78B8C3CDE332A870F6, 1089F6F585F5350D349A640EBD3117832DF6B3657EB6667CB00AE217E04ACA17 ] WbioSrvc        C:\WINDOWS\System32\wbiosrvc.dll
14:25:46.0415 0x1e90  WbioSrvc - ok
14:25:46.0436 0x1e90  [ 0EAEC313B24837613621B4A2536ED382, 61C194ED7FA7D65BBE61A546D5FCA52F52AB08324E084D3EC23C9706E9BF0175 ] Wcmsvc          C:\WINDOWS\System32\wcmsvc.dll
14:25:46.0456 0x1e90  Wcmsvc - ok
14:25:46.0505 0x1e90  [ F6B4C2280FF7C7156AC8A4687B9DA35E, 1899D584D7469BB49355D84080051E2575B033E6312009D9C6C1DD3F7F9AA4C5 ] wcncsvc        C:\WINDOWS\System32\wcncsvc.dll
14:25:46.0527 0x1e90  wcncsvc - ok
14:25:46.0571 0x1e90  [ B7BF1D783F5B2484E8CE1C0C78257F16, 468601199FCCF63DBAE86EE6B8825EA85B2A1EE177413353FFA2CC9CA5249FCD ] WcsPlugInService C:\WINDOWS\System32\WcsPlugInService.dll
14:25:46.0600 0x1e90  WcsPlugInService - ok
14:25:46.0616 0x1e90  [ 81285DDC994F03379DB46419300B2DCB, 98D3622E11F375718AEA1DE3B5F0104DDAB4F96B6D4C19788C14F7B338A6F235 ] WdBoot          C:\WINDOWS\system32\drivers\WdBoot.sys
14:25:46.0634 0x1e90  WdBoot - ok
14:25:46.0671 0x1e90  [ CB6C63FF8342B467E2EF76E98D5B934D, BE017CE91E3BAB293DE6ECF143797CCE3F33CC63024437472B4E38C6961AD884 ] Wdf01000        C:\WINDOWS\system32\drivers\Wdf01000.sys
14:25:46.0733 0x1e90  Wdf01000 - ok
14:25:46.0776 0x1e90  [ 26B8FED3F3B85F5F0C4BD03FD00B9941, 7F94FE7954498223B33C025258DB588A3AC9FF25C58EEAD204514FD20652FE40 ] WdFilter        C:\WINDOWS\system32\drivers\WdFilter.sys
14:25:46.0801 0x1e90  WdFilter - ok
14:25:46.0837 0x1e90  [ F581F9C9D6953FABFA24E67105F0B614, 5A7BB72523D1C53BBE68700537D7AE0D150BC7E4B8227A916B2E29EE4CA267A9 ] WdiServiceHost  C:\WINDOWS\system32\wdi.dll
14:25:46.0871 0x1e90  WdiServiceHost - ok
14:25:46.0876 0x1e90  [ F581F9C9D6953FABFA24E67105F0B614, 5A7BB72523D1C53BBE68700537D7AE0D150BC7E4B8227A916B2E29EE4CA267A9 ] WdiSystemHost  C:\WINDOWS\system32\wdi.dll
14:25:46.0890 0x1e90  WdiSystemHost - ok
14:25:46.0917 0x1e90  [ CE67080F00E0AF32755096CEA6430ABA, 0E5D626F9F76C0BC63B2D246AD66D9CBF7D92F34B56398417BCFD0C331DBD282 ] WdNisDrv        C:\WINDOWS\system32\Drivers\WdNisDrv.sys
14:25:46.0937 0x1e90  WdNisDrv - ok
14:25:46.0966 0x1e90  WdNisSvc - ok
14:25:47.0017 0x1e90  [ 40F83492DB9ABBA59773A45FB487C8B2, 0D0DE0B0C9B929FEFD2674CCF17F5F2FC4B16EAB8E1981BBCE51B0305FD7D75E ] WebClient      C:\WINDOWS\System32\webclnt.dll
14:25:47.0034 0x1e90  WebClient - ok
14:25:47.0077 0x1e90  [ 384E1D04FE20845B2559D292F17A9FA1, AD3B0B2B2219691AC30FEEC8AFDB3BBB74B51BB7D02038AE2B4DEA514E245315 ] Wecsvc          C:\WINDOWS\system32\wecsvc.dll
14:25:47.0109 0x1e90  Wecsvc - ok
14:25:47.0135 0x1e90  [ 455014F4E48B67EBE0F032E2B0E06BF2, A36435784A034B27056A0E606683A20C69F1B0AB2B6BAEDEAEAA190F6287CAEF ] WEPHOSTSVC      C:\WINDOWS\system32\wephostsvc.dll
14:25:47.0167 0x1e90  WEPHOSTSVC - ok
14:25:47.0195 0x1e90  [ F13DBA57CEA9B7074B95EDCA6AD2635E, 1D9BA4841EF1343A5D9096B5FE27FC65DC1901D6683DD13516171638549666B5 ] wercplsupport  C:\WINDOWS\System32\wercplsupport.dll
14:25:47.0243 0x1e90  wercplsupport - ok
14:25:47.0274 0x1e90  [ FD7E58B6AA3EABF2D12B9762A20E11E4, 4C5E2E246C5C70074866BB3DBC2AAF483ECE4345004CCB8D1FE285047268685D ] WerSvc          C:\WINDOWS\System32\WerSvc.dll
14:25:47.0330 0x1e90  WerSvc - ok
14:25:47.0360 0x1e90  [ 715ABA3DD164D06457A2A3C92F6EA9D5, E6F8269D2FFC4A548B65724C0A3F53756ED15E47229861FBD40B656EE40FE166 ] WFPLWFS        C:\WINDOWS\system32\DRIVERS\wfplwfs.sys
14:25:47.0387 0x1e90  WFPLWFS - ok
14:25:47.0398 0x1e90  [ 8C840E1FD7584E74BD0CC1EA581EC187, 148E534A94B4882E7396B13FABE17407802292E7890713540080D03D5629C81D ] WiaRpc          C:\WINDOWS\System32\wiarpc.dll
14:25:47.0413 0x1e90  WiaRpc - ok
14:25:47.0448 0x1e90  [ 5F66B7BB330AA80067FC66149A692620, 92C5D7115A168A23108B65EEEB5FBA8FA43D781855355792596D2419160263C2 ] WIMMount        C:\WINDOWS\system32\drivers\wimmount.sys
14:25:47.0464 0x1e90  WIMMount - ok
14:25:47.0467 0x1e90  WinDefend - ok
14:25:47.0532 0x1e90  [ 10DAD6A7FC617A221313BD584E3C3A00, F139B878668ECF38FE59831E8595A207D5CEEE76C6FFDA8C9F735435E601A763 ] WinHttpAutoProxySvc C:\WINDOWS\system32\winhttp.dll
14:25:47.0592 0x1e90  WinHttpAutoProxySvc - ok
14:25:47.0656 0x1e90  [ FC8BD690321216C32BB58B035B6D5674, D61698DB19D9DB2593B60B6BA13F7B7735667206F41D751D507135469D6D3CDD ] Winmgmt        C:\WINDOWS\system32\wbem\WMIsvc.dll
14:25:47.0677 0x1e90  Winmgmt - ok
14:25:47.0783 0x1e90  [ 75436315AA383CF527695C6D49D0CA59, E3D55F2ACBD45D4D031FA6CA799394459C89BE50FF6ADE4FE36F2CAB2D2E63D0 ] WinRM          C:\WINDOWS\system32\WsmSvc.dll
14:25:47.0870 0x1e90  WinRM - ok
14:25:47.0914 0x1e90  [ AC263C2F66405589528995AA41040599, 81B46E551D6130A2C3D113EC3B563CEDB5A06BB340986C0E03136CE5BE729481 ] WinUsb          C:\WINDOWS\System32\drivers\WinUsb.sys
14:25:47.0945 0x1e90  WinUsb - ok
14:25:48.0008 0x1e90  [ DC079BA8390089E4EBCA63D27EEA3ECB, 4D549217A68292E2B16C09FD9F84317011EE54A2DAF4E2AB85554267DF0D3249 ] WlanSvc        C:\WINDOWS\System32\wlansvc.dll
14:25:48.0084 0x1e90  WlanSvc - ok
14:25:48.0144 0x1e90  [ 06BF5897949A8F24893F792E876B71F5, 9D3719492A86BF52A56E2EA798FD6FDB5862A03F6D360FCC4B0CEA9BE9792AE4 ] wlidsvc        C:\WINDOWS\system32\wlidsvc.dll
14:25:48.0216 0x1e90  wlidsvc - ok
14:25:48.0250 0x1e90  [ 2834D9D3B4F554A39C72F00EA3F0E128, D10124343C67FE9A0B711AD569BB8080495FCEA0ECEF9AC3F3FBD6865F436A44 ] WmiAcpi        C:\WINDOWS\System32\drivers\wmiacpi.sys
14:25:48.0266 0x1e90  WmiAcpi - ok
14:25:48.0352 0x1e90  [ B96F7A1236C3F21212DE2C40A3DDB005, 5A29EBB6DA036E303611EB1304192655021405BB05452FD37886DDE604FF0D9D ] wmiApSrv        C:\WINDOWS\system32\wbem\WmiApSrv.exe
14:25:48.0394 0x1e90  wmiApSrv - ok
14:25:48.0432 0x1e90  WMPNetworkSvc - ok
14:25:48.0479 0x1e90  [ 7FC5667DF73D4B04AA457CC3A4180E09, CB7B014945DCA16B6D120DBE0E5876C4C867A4ACD3C3536AEADC14B908613D4E ] Wof            C:\WINDOWS\system32\drivers\Wof.sys
14:25:48.0506 0x1e90  Wof - ok
14:25:48.0769 0x1e90  [ 588040D595BBF0856CA1ADD941A8ED17, CBC92BB5453FE1BEA6F33239B7CE884F312559591383408EA5F95A006156C5D3 ] workfolderssvc  C:\WINDOWS\system32\workfolderssvc.dll
14:25:48.0816 0x1e90  workfolderssvc - ok
14:25:48.0860 0x1e90  [ A2468CC3509394A33C4C32F99563D845, 62690C7D41F382DF74B8F4B942647842858E37DE35FF2DE028192E4D09ABB2C5 ] wpcfltr        C:\WINDOWS\system32\DRIVERS\wpcfltr.sys
14:25:48.0885 0x1e90  wpcfltr - ok
14:25:48.0927 0x1e90  [ 19F4DF69876DA7E9C4965351560FE6B7, 127247A7964F55EE3AF842D25120F5ACD387632BEE2BF3D28FAC05840CEA19BA ] WPCSvc          C:\WINDOWS\System32\wpcsvc.dll
14:25:48.0959 0x1e90  WPCSvc - ok
14:25:48.0994 0x1e90  [ 2ADE11F3D84709C5F6781E4C59F11683, F003C43396CF8FCF44EAB87583650DB4D2A233322D28D6A78D1694945D9073BB ] WPDBusEnum      C:\WINDOWS\system32\wpdbusenum.dll
14:25:49.0044 0x1e90  WPDBusEnum - ok
14:25:49.0080 0x1e90  [ 9F2904B55F6CECCD1A8D986B5CE2609A, E19ED4DD3CEF3A22C058FC324824604FB3FC98A029C94E6C2A3389F938D680B6 ] WpdUpFltr      C:\WINDOWS\system32\drivers\WpdUpFltr.sys
14:25:49.0101 0x1e90  WpdUpFltr - ok
14:25:49.0125 0x1e90  [ AE072B0339D0A18E455DC21666CAD572, AB1DAEA25E2C7AD610818D4B4783F6D4190D85EBB3963BBAD410E8CEA7899EDB ] ws2ifsl        C:\WINDOWS\system32\drivers\ws2ifsl.sys
14:25:49.0169 0x1e90  ws2ifsl - ok
14:25:49.0201 0x1e90  [ AAA0F5CDE4D5C357A65E14DF793FDA81, 96088295105AF0F22EE2B275508C3B9312D0CA1E0C3FE1C9553988B083429EC9 ] WSConnectorUpdate C:\Program Files\Windows Server\Bin\WSConnectorUpdate.exe
14:25:49.0211 0x1e90  WSConnectorUpdate - ok
14:25:49.0245 0x1e90  [ 5596C0960ED6ED7494BF2A55DE428684, C95CF09A657F37F421CC80E16F2F95B8EC59A8D5D48F104551155EAC8E53DCB2 ] wscsvc          C:\WINDOWS\System32\wscsvc.dll
14:25:49.0279 0x1e90  wscsvc - ok
14:25:49.0295 0x1e90  [ F586F3F1BF962FE9AE4316E0D896B22F, 8D0AD48D79294567123D943D0F5B6D5A32D7A82B129A24DC821D3095AFAA100B ] WSDPrintDevice  C:\WINDOWS\System32\drivers\WSDPrint.sys
14:25:49.0327 0x1e90  WSDPrintDevice - ok
14:25:49.0330 0x1e90  WSearch - ok
14:25:49.0439 0x1e90  [ 6B2D71124C1EA86B74412F414C42431D, 078CC6C9667EF6BDA3E6900BC26A5A5B030CAA66928A6BBB7B7DC43C5C199EDC ] WSService      C:\WINDOWS\System32\WSService.dll
14:25:49.0569 0x1e90  WSService - ok
14:25:49.0584 0x1e90  [ D319A833EC173AD83C67885B3ED6C71C, CF0B1C31517A7F10F8CD714914CDC52BF82F61037CE2D2C2A7176764465B0AA7 ] WSS_ComputerBackupProviderSvc C:\Program Files\Windows Server\Bin\SharedServiceHost.exe
14:25:49.0591 0x1e90  WSS_ComputerBackupProviderSvc - ok
14:25:49.0701 0x1e90  [ 4BD3138EF061E24F9FDC722B49274B40, F9339F6AA8822E5E1334E41BE4140F9E8E5B24D1CD85B4C746D714AFDD485B49 ] wuauserv        C:\WINDOWS\system32\wuaueng.dll
14:25:49.0775 0x1e90  wuauserv - ok
14:25:49.0816 0x1e90  [ 481286719402E4BAEFEA0604AB1B5113, F3CF65DF2AB39F79AE4C1335831408418E40726706E0242677E8B96B0FAD988F ] WudfPf          C:\WINDOWS\system32\drivers\WudfPf.sys
14:25:49.0870 0x1e90  WudfPf - ok
14:25:49.0899 0x1e90  [ D7B4859227B02BCC1055B279A63C937F, 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 ] WUDFRd          C:\WINDOWS\System32\drivers\WUDFRd.sys
14:25:49.0940 0x1e90  WUDFRd - ok
14:25:49.0946 0x1e90  [ D7B4859227B02BCC1055B279A63C937F, 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 ] WUDFSensorLP    C:\WINDOWS\System32\drivers\WUDFRd.sys
14:25:49.0968 0x1e90  WUDFSensorLP - ok
14:25:49.0992 0x1e90  [ 51D28F7F1F888DDCF2C67DCF3B79A5D3, 74FF2936AFCEB9A36175D5B00EB91A5AD614B52BE3FB3FA9B994A025A484D2B7 ] wudfsvc        C:\WINDOWS\System32\WUDFSvc.dll
14:25:50.0025 0x1e90  wudfsvc - ok
14:25:50.0033 0x1e90  [ D7B4859227B02BCC1055B279A63C937F, 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 ] WUDFWpdFs      C:\WINDOWS\System32\drivers\WUDFRd.sys
14:25:50.0054 0x1e90  WUDFWpdFs - ok
14:25:50.0060 0x1e90  [ D7B4859227B02BCC1055B279A63C937F, 82C99844CC596C2723523B1B98573488FF23337947B78AA04BA21E58394BB751 ] WUDFWpdMtp      C:\WINDOWS\System32\drivers\WUDFRd.sys
14:25:50.0083 0x1e90  WUDFWpdMtp - ok
14:25:50.0124 0x1e90  [ A0900F8F628B5AF6841414EB3CF11E50, 8A531F2472FF4B4D895D469D28C215C834ECADBEF539894B8F3F606079A86184 ] WwanSvc        C:\WINDOWS\System32\wwansvc.dll
14:25:50.0167 0x1e90  WwanSvc - ok
14:25:50.0337 0x1e90  [ 19137CA32DA7AA6F4936514721AA53BA, E9E5E6F05A1D529D19339F0C71AA5F9D412F6D3AE4BF84CF340C8569BA367D51 ] ZeroConfigService C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
14:25:50.0408 0x1e90  ZeroConfigService - ok
14:25:50.0425 0x1e90  ================ Scan global ===============================
14:25:50.0456 0x1e90  [ 05B08C20B8428ECE088CB5635696A48D, 471642A2D0E5C3BB235962FC8D86A49AC30D7DDE80B97E348425BBFCDE4DCDC3 ] C:\WINDOWS\system32\basesrv.dll
14:25:50.0496 0x1e90  [ EAB311B0A7A8EA0346F14F08D4BC8F46, 11168E4074679F8A69DA714C0ABD0C68BA49D171B379343F14783C9C563202CA ] C:\WINDOWS\system32\winsrv.dll
14:25:50.0530 0x1e90  [ 3600ED7EA8AED849E20700551C0BD63B, 4A8C346C1646E80B58EF93F87F915A41E05CA2E993BB1C96955AE62A0669AF66 ] C:\WINDOWS\system32\sxssrv.dll
14:25:50.0566 0x1e90  [ E0C7813A97CA7947FF5C18A8F3B61A45, 083BB4F3B20419C87DB656F1465E5F782ACDE76838CDE6207F26AAD035C69DE0 ] C:\WINDOWS\system32\services.exe
14:25:50.0576 0x1e90  [ Global ] - ok
14:25:50.0577 0x1e90  ================ Scan MBR ==================================
14:25:50.0589 0x1e90  [ 5FB38429D5D77768867C76DCBDB35194 ] \Device\Harddisk0\DR0
14:25:51.0007 0x1e90  \Device\Harddisk0\DR0 - ok
14:25:51.0008 0x1e90  ================ Scan VBR ==================================
14:25:51.0012 0x1e90  [ B1E27AA018409DE6BFD73F8AFB883A65 ] \Device\Harddisk0\DR0\Partition1
14:25:51.0012 0x1e90  \Device\Harddisk0\DR0\Partition1 - ok
14:25:51.0041 0x1e90  [ D184F9F919E68F26F73BB11FDB111589 ] \Device\Harddisk0\DR0\Partition2
14:25:51.0111 0x1e90  \Device\Harddisk0\DR0\Partition2 - ok
14:25:51.0121 0x1e90  [ 02FA44346AA8043B8E09ABCF387875B3 ] \Device\Harddisk0\DR0\Partition3
14:25:51.0175 0x1e90  \Device\Harddisk0\DR0\Partition3 - ok
14:25:51.0192 0x1e90  [ 8F2E1824B4F9AA395FEFEBDD9B84155B ] \Device\Harddisk0\DR0\Partition4
14:25:51.0259 0x1e90  \Device\Harddisk0\DR0\Partition4 - ok
14:25:51.0273 0x1e90  [ ADD811A7F4AF3B6241C0552384F92D08 ] \Device\Harddisk0\DR0\Partition5
14:25:51.0315 0x1e90  \Device\Harddisk0\DR0\Partition5 - ok
14:25:51.0346 0x1e90  [ 9ADDE83EED78D0FD7D7674C20DDAFEE5 ] \Device\Harddisk0\DR0\Partition6
14:25:51.0362 0x1e90  \Device\Harddisk0\DR0\Partition6 - ok
14:25:51.0362 0x1e90  ================ Scan generic autorun ======================
14:25:51.0755 0x1e90  [ F61140A7D41E2B3CB73D28A2F6ABC405, E2C242507C41398781A9C39B47F2104F9BC928E60950291759987BB4EE05AEBF ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
14:25:51.0979 0x1e90  RTHDVCPL - ok
14:25:52.0042 0x1e90  [ D0AA4593126F4FCA79173D00DF054454, C18F6780ADFA44C49E6C6C8CEE4C5E25829ADE125C97A56467456B173BE4A7F2 ] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
14:25:52.0068 0x1e90  RtHDVBg_DTS - ok
14:25:52.0069 0x1e90  SynTPEnh - ok
14:25:52.0071 0x1e90  Launchpad - ok
14:25:52.0130 0x1e90  [ 690EB331346D7ADFDA18E50042DEA4B4, 0C219D7A5FCD4E0252C815373E67F843DBD7356FAE7AB836C451068B51438FE7 ] C:\Program Files\Classic Shell\ClassicStartMenu.exe
14:25:52.0151 0x1e90  Classic Start Menu - detected UnsignedFile.Multi.Generic ( 1 )
14:25:54.0482 0x1e90  Detect skipped due to KSN trusted
14:25:54.0482 0x1e90  Classic Start Menu - ok
14:25:54.0540 0x1e90  [ F06F76C6D57022CF30D5B8853A8D873D, 4F373451A9D8CD16D2B4B339C730531936A993BDC819703C737E53384B79A289 ] C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
14:25:54.0562 0x1e90  Acronis Scheduler2 Service - ok
14:25:54.0734 0x1e90  [ 638644168D9B5B5093AD84C9C162B550, BDBAB13BA6D369B7F87F721518F7EBD4B14D85B80BCC1E37FA929BB77200401B ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
14:25:54.0786 0x1e90  NvBackend - ok
14:25:54.0863 0x1e90  [ 63B913AAB1244D8DED54CF0EFC8A56BD, 639830E9ECB004F09EA968EDF68C0037B5DFF7CCFF007DE5D11DEF2166707341 ] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
14:25:54.0891 0x1e90  AdobeAAMUpdater-1.0 - ok
14:25:54.0929 0x1e90  [ 1BF113E377E570DB915EE7D228E594D6, FF4D198D412CA21C49E0A3E6FE52EAD69786B305429095B5BD25CB4FAFD33B51 ] C:\Program Files\iTunes\iTunesHelper.exe
14:25:54.0938 0x1e90  iTunesHelper - ok
14:25:55.0137 0x1e90  [ 8A312D5764B4FC4C55CEDDEED4652CF1, C4E726C9C77614CD32D5B76DA2E9A049EC490C2392D9A94B84712BCBF47BA7C6 ] C:\Program Files\AVAST Software\Avast\AvastUI.exe
14:25:55.0257 0x1e90  AvastUI.exe - ok
14:25:55.0323 0x1e90  [ 68046243B8D7F08C3767F82674E211A3, 54E16EE3F24943016FA24E3C433981F4B5B4E8DA17D6CB88EC980876109293AF ] C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe
14:25:55.0338 0x1e90  RoboForm - ok
14:25:55.0429 0x1e90  [ 1CF4F220784B02E140FF28D5060884DC, B9F611AC7403EFE8992A97F81E8BDFA829D99FC275A29CC2B196881FCF4DEC5D ] C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe
14:25:55.0481 0x1e90  GarminExpressTrayApp - ok
14:25:55.0483 0x1e90  Waiting for KSN requests completion. In queue: 227
14:25:56.0484 0x1e90  Waiting for KSN requests completion. In queue: 227
14:25:57.0484 0x1e90  Waiting for KSN requests completion. In queue: 227
14:25:57.0888 0x1d24  Object required for P2P: [ 8A312D5764B4FC4C55CEDDEED4652CF1 ] C:\Program Files\AVAST Software\Avast\AvastUI.exe
14:25:58.0485 0x1e90  Waiting for KSN requests completion. In queue: 3
14:25:59.0486 0x1e90  Waiting for KSN requests completion. In queue: 3
14:26:00.0363 0x1d24  Object send P2P result: true
14:26:00.0558 0x1e90  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.8.207.0 ), 0x60100 ( disabled : updated )
14:26:00.0570 0x1e90  AV detected via SS2: avast! Antivirus, C:\Program Files\AVAST Software\Avast\VisthAux.exe ( 11.1.2245.1540 ), 0x41000 ( enabled : updated )
14:26:00.0591 0x1e90  Win FW state via NFP2: enabled ( trusted )
14:26:02.0942 0x1e90  ============================================================
14:26:02.0942 0x1e90  Scan finished
14:26:02.0943 0x1e90  ============================================================
14:26:02.0961 0x1e88  Detected object count: 1
14:26:02.0961 0x1e88  Actual detected object count: 1
14:26:43.0344 0x1e88  PFNService ( UnsignedFile.Multi.Generic ) - skipped by user
14:26:43.0344 0x1e88  PFNService ( UnsignedFile.Multi.Generic ) - User select action: Skip

M-K-D-B 06.12.2015 20:07
Servus,




Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Pauli#01 06.12.2015 21:24
Hallo Matthias,
Mbar hat nichts gefunden.
Was mir noch aufgefallen ist. In unregelmässigen Abständen kommt es beim FF Browser vor, das wenn ich auf einen weiterführenden Link mit der Maus drüber fahre kein Finger mit der Maus angezeigt wird. Drücke ich jetzt auf den Link werde ich auf eine Fremde Seite weitergeleitet. Refresche ich die Seite, wird auf dem Link der Finger angezeigt und der Richtige Link wird aufgerufen.
Gruß
Klaus

Code:
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2015.12.06.05
  rootkit: v2015.11.26.01

Windows 8.1 x64 NTFS
Internet Explorer 11.0.9600.18098
Klaus :: PC-KLAUS [administrator]

06.12.2015 20:24:54
mbar-log-2015-12-06 (20-24-54).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled:
Objects scanned: 384496
Time elapsed: 52 minute(s), 24 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)

M-K-D-B 07.12.2015 18:11
Servus,



Hinweis: Registry Cleaner

Ich sehe, dass du sogenannte Registry Cleaner installiert hast.
In deinem Fall CCleaner.

Wir raten von der Verwendung jeglicher Art von Registry Cleaner ab.

Der Grund ist ganz einfach:
Die Registry ist das Hirn des Systems. Funktioniert das Hirn nicht, funktioniert der Rest nicht mehr wirklich.
Man sollte nicht unnötigerweise an der Registry rumbasteln. Schon ein kleiner Fehler kann gravierende Folgen haben und auch Programme machen manchmal Fehler.
Zerstörst du die Registry, zerstörst du Windows.

Zudem ist der Nutzen zur Performancesteigerung umstritten und meist kaum im wahrnehmbaren Bereich.

Ich würde dir empfehlen, Registry Cleaner nicht weiterhin zu verwenden und über
Start --> Systemsteuerung --> Software (bei Windows XP)
Start --> Systemsteuerung --> Programme und Funktionen (bei Vista / Win 7)
zu deinstallieren.

Selbst Microsoft unterstützt sog. Registry-Cleaner nicht.






Hinweis: Der Suchlauf mit ESET kann länger dauern.





Schritt 0
Deaktiviere bitte dein Antivirenprogramm, da es die Entfernung von SpyHunter blockieren kann.
Bitte downloade SpyHunterCleaner und speichere die Datei auf dem Desktop. (Bebilderte Anleitung)
  • Speichere alle Arbeiten und schließe alle noch offenen Programme und Browser.
  • Starte die SpyHunterCleaner.exe.
  • Drücke eine beliebige Taste, um den Entfernungsprozess zu starten.
  • Wenn das Tool fertig ist, wird es automatisch einen Neustart durchführen.
  • Nach dem Neustart sollte SpyHunter entfernt sein. Solltest du trotzdem noch Reste entdecken, so teile mir das bitte mit.






Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument


Code:
start
CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\Winlogon: [Shell] C:\WINDOWS\Explorer.exe [2501368 2015-01-28] (Microsoft Corporation) <==== ACHTUNG
AutoConfigURL: [S-1-5-21-2032405694-3072891623-2312475013-1005] => hxxp://unstopp.me/wpad.dat?d64b029a1372c370b518de42bc424f152110607
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=hp-avast&type=avastbcl
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://de.yahoo.com/?fr=hp-avast&type=avastbcl
SearchScopes: HKLM-x32 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2032405694-3072891623-2312475013-1005 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2032405694-3072891623-2312475013-1005 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
Toolbar: HKLM - Kein Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Keine Datei
Toolbar: HKLM - Kein Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  Keine Datei
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.







Schritt 2
Downloade dir die passende Version von HitmanPro auf deinen Desktop: HitmanPro - 32 Bit | HitmanPro - 64 Bit.
  • Starte die HitmanPro.exe
  • Klicke auf
  • Entferne den Haken bei
  • Klicke auf
    und
  • Akzeptiere die Lizenzbedingungen und klicke auf
  • Klicke auf

    und auf
  • Wenn der Scan beendet wurde, nichts löschen lassen etc. sondern wähle unten links auf der Button-Leiste
    und speichere die Logdatei auf Deinem Desktop.
  • Schließe HitmanPro und poste mir das Log.

 







Schritt 3

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset








Schritt 4
  • Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und Shortcut.txt und drücke auf Untersuchen.
  • FRST erstellt nun drei Logdateien (FRST.txt, Addition.txt und Shortcut.txt).
  • Poste mir alle drei Logdateien mit deiner nächsten Antwort.






Bitte poste mit deiner nächsten Antwort
  • die Logdatei des FRST-Fix,
  • die Logdatei von HitmanPro,
  • die Logdatei von ESET,
  • die neuen Logdateien von FRST.

Pauli#01 07.12.2015 22:43
Hallo Matthias,
hier die Fixlog vom SpyhunterCleaner.

Du hast geschrieben
"Nach dem Neustart sollte SpyHunter entfernt sein. Solltest du trotzdem noch Reste entdecken, so teile mir das bitte mit."
Das ist mir nicht ganz klar, wie ich das machen kann.

Werde jetzt die weiteren Schritte abarbeiten und berichten.
Gruß
Klaus

HTML-Code:
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-12-2015
durchgeführt von Klaus (2015-12-07 19:38:58) Run:1
Gestartet von C:\Users\Klaus\Desktop
Geladene Profile: Klaus (Verfügbare Profile: Klaus)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
start
CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\Winlogon: [Shell] C:\WINDOWS\Explorer.exe [2501368 2015-01-28] (Microsoft Corporation) <==== ACHTUNG
AutoConfigURL: [S-1-5-21-2032405694-3072891623-2312475013-1005] => hxxp://unstopp.me/wpad.dat?d64b029a1372c370b518de42bc424f152110607
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=hp-avast&type=avastbcl
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://de.yahoo.com/?fr=hp-avast&type=avastbcl
SearchScopes: HKLM-x32 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM-x32 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2032405694-3072891623-2312475013-1005 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2032405694-3072891623-2312475013-1005 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://de.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
Toolbar: HKLM - Kein Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Keine Datei
Toolbar: HKLM - Kein Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  Keine Datei
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end

*****************

Prozess erfolgreich geschlossen.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Wert erfolgreich entfernt
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => Wert erfolgreich entfernt
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\AutoConfigURL => Wert nicht gefunden.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Schlüssel erfolgreich entfernt
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Wert erfolgreich wiederhergestellt
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Wert erfolgreich wiederhergestellt
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Wert erfolgreich wiederhergestellt
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Wert erfolgreich wiederhergestellt
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\Software\Microsoft\Internet Explorer\Main\\Search Page => Wert erfolgreich wiederhergestellt
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\Software\Microsoft\Internet Explorer\Main\\Search Bar => Wert erfolgreich entfernt
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wert erfolgreich wiederhergestellt
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB}" => Schlüssel erfolgreich entfernt
HKCR\Wow6432Node\CLSID\{9CB96984-43C3-4D44-90EF-01466EFCF7BB} => Schlüssel nicht gefunden.
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Wert erfolgreich entfernt
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9CB96984-43C3-4D44-90EF-01466EFCF7BB} => Schlüssel nicht gefunden.
HKCR\CLSID\{9CB96984-43C3-4D44-90EF-01466EFCF7BB} => Schlüssel nicht gefunden.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => Wert erfolgreich entfernt
HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => Schlüssel nicht gefunden.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => Wert erfolgreich entfernt
HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => Schlüssel nicht gefunden.

========= RemoveProxy: =========

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt


========= Ende von RemoveProxy: =========


=========  ipconfig /flushdns =========


Windows-IP-Konfiguration

Der DNS-Aufl�sungscache wurde geleert.

========= Ende von CMD: =========


=========  netsh winsock reset =========


Der Winsock-Katalog wurde zur�ckgesetzt.
Sie m�ssen den Computer neu starten, um den Vorgang abzuschlie�en.


========= Ende von CMD: =========

EmptyTemp: => 306.2 MB temporäre Dateien entfernt.


Das System musste neu gestartet werden.

==== Ende von Fixlog 19:39:10 ====
Hallo Matthias,
hier die Fixlog vom HitmanPro.

Gruß
Klaus

Code:

       
Code:

       
HitmanPro 3.7.10.251
www.hitmanpro.com

   Computer name . . . . : PC-KLAUS
   Windows . . . . . . . : 6.3.0.9600.X64/4
   User name . . . . . . : PC-KLAUS\Klaus
   UAC . . . . . . . . . : Enabled
   License . . . . . . . : Free

   Scan date . . . . . . : 2015-12-07 19:57:20
   Scan mode . . . . . . : Normal
   Scan duration . . . . : 10m 21s
   Disk access mode  . . : Direct disk access (SRB)
   Cloud . . . . . . . . : Internet
   Reboot  . . . . . . . : No

   Threats . . . . . . . : 0
   Traces  . . . . . . . : 6

   Objects scanned . . . : 2.521.637
   Files scanned . . . . : 84.360
   Remnants scanned  . . : 630.907 files / 1.806.370 keys

Suspicious files ____________________________________________________________

   C:\Users\Klaus\Desktop\FRST64.exe
      Size . . . . . . . : 2.369.024 bytes
      Age  . . . . . . . : 0.0 days (2015-12-07 19:38:18)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : DD61D2EA4C8059F67734E11221DED682276773D0361CB530D346E4C01C0A0176
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.

   C:\Users\Klaus\Downloads\_FRST\FRST-OlderVersion\FRST64.exe
      Size . . . . . . . : 2.350.080 bytes
      Age  . . . . . . . : 3.2 days (2015-12-04 14:00:53)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : FC6290F63FCACA00ABF0881A94D3124C879594C1624C2BBAD3D422E5CC1D39B0
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.

   C:\Users\Klaus\Downloads\_FRST\FRST64.exe
      Size . . . . . . . : 2.369.024 bytes
      Age  . . . . . . . : 1.4 days (2015-12-06 10:32:16)
      Entropy  . . . . . : 7.6
      SHA-256  . . . . . : DD61D2EA4C8059F67734E11221DED682276773D0361CB530D346E4C01C0A0176
      Needs elevation  . : Yes
      Fuzzy  . . . . . . : 24.0
         Program has no publisher information but prompts the user for permission elevation.
         Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
         Authors name is missing in version info. This is not common to most programs.
         Version control is missing. This file is probably created by an individual. This is not typical for most programs.
         Time indicates that the file appeared recently on this computer.
      Forensic Cluster
          0.0s C:\Users\Klaus\Downloads\_FRST\FRST64.exe
          2.3s C:\Users\Klaus\Downloads\_FRST\FRST-OlderVersion\
         10.2s C:\Users\Klaus\Downloads\_FRST\FRST.txt


Potential Unwanted Programs _________________________________________________

   C:\WINDOWS\SysWOW64\Drivers\DrvAgent64.SYS (DriverRestore)
      Size . . . . . . . : 20.872 bytes
      Age  . . . . . . . : 6.4 days (2015-12-01 11:27:14)
      Entropy  . . . . . : 6.3
      SHA-256  . . . . . : 8CB62C5D41148DE416014F80BD1FD033FD4D2BD504CB05B90EEB6992A382D58F
      Product  . . . . . : DriverAgent
      Publisher  . . . . : Phoenix Technologies
      Description  . . . : DriverAgent Direct I/O for 64-bit Windows
      Version  . . . . . : 6.0
      Copyright  . . . . : EnTech Taiwan, 1997-2009
      RSA Key Size . . . : 2048
      Service  . . . . . : DrvAgent64
      LanguageID . . . . : 1033
      Authenticode . . . : Valid
      Fuzzy  . . . . . . : -2.0
      Startup
         HKLM\SYSTEM\CurrentControlSet\Services\DrvAgent64\

   HKLM\SYSTEM\ControlSet001\Services\DrvAgent64\ (DriverRestore)
   HKLM\SYSTEM\CurrentControlSet\Services\DrvAgent64\ (DriverRestore)

hier da Logfile vom Eset

Gruß
Klaus

Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=da652b6d99eba9429401da6021c33107
# end=init
# utc_time=2015-12-07 07:12:39
# local_time=2015-12-07 08:12:39 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 27086
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=da652b6d99eba9429401da6021c33107
# end=updated
# utc_time=2015-12-07 07:15:21
# local_time=2015-12-07 08:15:21 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=da652b6d99eba9429401da6021c33107
# engine=27086
# end=stopped
# remove_checked=false
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-12-07 07:15:22
# local_time=2015-12-07 08:15:22 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 71 94 272026 64477647 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 9893441 27029252 0 0
# scanned=49
# found=0
# cleaned=0
# scan_time=0
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=da652b6d99eba9429401da6021c33107
# end=init
# utc_time=2015-12-07 07:15:48
# local_time=2015-12-07 08:15:48 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
esets_scanner_update returned -1 esets_gle=53251
Update Finalize
Updated modules version: 27086
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=da652b6d99eba9429401da6021c33107
# end=updated
# utc_time=2015-12-07 07:16:48
# local_time=2015-12-07 08:16:48 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=da652b6d99eba9429401da6021c33107
# engine=27086
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=true
# antistealth_checked=true
# utc_time=2015-12-07 09:26:05
# local_time=2015-12-07 10:26:05 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 71 94 276269 64485490 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 9901284 27037095 0 0
# scanned=585592
# found=0
# cleaned=0
# scan_time=7756
So, jetzt die restlichen Logs.

FRST

Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-12-2015
durchgeführt von Klaus (Administrator) auf PC-KLAUS (07-12-2015 22:31:15)
Gestartet von C:\Users\Klaus\Desktop
Geladene Profile: Klaus (Verfügbare Profile: Klaus)
Platform: Windows 8.1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(DTS, Inc) C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(FUJITSU LIMITED) C:\Program Files\FUJITSU\FUJ02E3\FUJ02E3.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corporation) C:\Program Files\Windows Server\Bin\SharedServiceHost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
(AxoNet Software GmbH) C:\Program Files\AxoNet Software GmbH\LightsOutClient\LightsOutClientService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(FUJITSU LIMITED) C:\Program Files\FUJITSU\Plugfree NETWORK\PFNService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files\Windows Server\Bin\WSConnectorUpdate.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files\Windows Server\Bin\LANConfigSvc.exe
(Microsoft Corporation) C:\Program Files\Windows Server\Bin\ProviderRegistryService.exe
(Microsoft Corporation) C:\Program Files\Windows Server\Bin\SharedServiceHost.exe
(Microsoft Corporation) C:\Program Files\Windows Server\Bin\SharedServiceHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(FUJITSU LIMITED) C:\Program Files\FUJITSU\Plugfree NETWORK\PFNetDm.exe
(FUJITSU LIMITED) C:\Program Files\FUJITSU\Plugfree NETWORK\PFNTray.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1215632 2012-08-17] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2916152 2012-08-24] (Synaptics Incorporated)
HKLM\...\Run: [Launchpad] => C:\Program Files\Windows Server\Bin\Launchpad.exe [1099360 2013-02-08] (Microsoft Corporation)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [571192 2014-08-14] (Acronis)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-04-09] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508240 2015-08-05] (Adobe Systems Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-10-16] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2015-12-04] (AVAST Software)
HKLM-x32\...\Run: [FJ Camera_Monitor] => C:\Program Files (x86)\FJ Camera\monitor_Metro.exe [1724280 2013-10-23] (SunplusIT, Inc.)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5380368 2015-07-20] (Acronis)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [693336 2015-07-19] (Acronis International GmbH)
HKLM-x32\...\Run: [LexwareInfoService] => C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe [196648 2014-09-26] (Haufe-Lexware GmbH & Co. KG)
HKLM-x32\...\Run: [New Value] => C:\Program Files\Division-M\Drive Bender Client\DriveBenderTray.exe [7106160 2015-06-04] (Division-M)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation)
Winlogon\Notify\igfxcui: igfxdev.dll [X]
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\Run: [RoboForm] => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [110160 2015-10-01] (Siber Systems)
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1403304 2015-10-29] (Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\MountPoints2: {15a2a7ed-4c01-11e4-bedd-c01885ac5883} - "H:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\MountPoints2: {15a2a87e-4c01-11e4-bedd-c01885ac5883} - "H:\HTC_Sync_Manager_PC.exe"
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1403304 2015-10-29] (Garmin Ltd. or its subsidiaries)
AppInit_DLLs: C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [175880 2015-04-09] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [154256 2015-04-09] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-12-04] (AVAST Software)
ShellIconOverlayIdentifiers: [AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)
ShellIconOverlayIdentifiers: [AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)
ShellIconOverlayIdentifiers: [AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2014-09-09] (Acronis)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.115.254
Tcpip\..\Interfaces\{38053D6A-BF08-4FAA-9952-81D119C8A6E8}: [DhcpNameServer] 192.168.115.254
Tcpip\..\Interfaces\{627AC899-19AE-474B-A2FB-3949C461ED7E}: [DhcpNameServer] 192.168.115.254
Tcpip\..\Interfaces\{BEE4684A-FB88-48C2-BBFC-16F09E5DDE02}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1

Internet Explorer:
==================
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
BHO: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2015-10-01] (Siber Systems Inc.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-11-25] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-11-26] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-25] (Oracle Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20] (IvoSoft)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
BHO-x32: RoboForm Toolbar Helper -> {724d43a9-0d85-11d4-9908-00400523e39a} -> C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2015-10-01] (Siber Systems Inc.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-11-25] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-26] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-25] (Oracle Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2015-10-01] (Siber Systems Inc.)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll [2015-10-01] (Siber Systems Inc.)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
Toolbar: HKU\S-1-5-21-2032405694-3072891623-2312475013-1005 -> &RoboForm Toolbar - {724D43A0-0D85-11D4-9908-00400523E39A} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll [2015-10-01] (Siber Systems Inc.)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Klaus\AppData\Roaming\Mozilla\Firefox\Profiles\1ordtzn4.default
FF Homepage: google.de
FF Session Restore: -> ist aktiviert.
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_245.dll [2015-12-02] ()
FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-25] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-25] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-16] (VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-12-02] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Extension: FireSSH - C:\Users\Klaus\AppData\Roaming\Mozilla\Firefox\Profiles\1ordtzn4.default\extensions\firessh@nightlight.ws [2015-12-02]
FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi
FF Extension: RoboForm Toolbar - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi [2015-10-01]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-04]
FF HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox\roboform.xpi

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-11-26]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2016448 2015-11-25] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2015-12-04] (AVAST Software)
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2252504 2013-09-04] (Broadcom Corporation.)
R2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [233328 2012-01-23] (DTS, Inc)
R2 FUJ02E3Service; C:\Program Files\Fujitsu\FUJ02E3\FUJ02E3.exe [80752 2012-07-18] (FUJITSU LIMITED)
S3 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [777744 2015-10-29] (Garmin Ltd. or its subsidiaries)
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2011-08-18] (Hewlett-Packard Co.) [Datei ist nicht signiert]
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.) [Datei ist nicht signiert]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [330136 2015-08-27] (Intel Corporation)
S2 initMonitor; C:\Program Files\Windows Server\Bin\SharedServiceHost.exe [30592 2011-03-02] (Microsoft Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 Lexware_Update_Service; C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe [64552 2014-11-06] (Haufe-Lexware GmbH & Co. KG)
R2 LoClntService; C:\Program Files\AxoNet Software GmbH\LightsOutClient\LightsOutClientService.exe [25520 2015-10-16] (AxoNet Software GmbH)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [284912 2014-01-08] ()
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 NotificationsProviderSvc; C:\Program Files\Windows Server\Bin\SharedServiceHost.exe [30592 2011-03-02] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-04-09] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-04-09] (NVIDIA Corporation)
R2 PFNService; C:\Program Files\Fujitsu\Plugfree NETWORK\PFNService.exe [2219520 2012-07-11] (FUJITSU LIMITED) [Datei ist nicht signiert]
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 providers_system; C:\Program Files\Windows Server\Bin\SharedServiceHost.exe [30592 2011-03-02] (Microsoft Corporation)
R2 ServiceProviderRegistry; C:\Program Files\Windows Server\Bin\ProviderRegistryService.exe [41568 2012-11-02] (Microsoft Corporation)
S4 SqmProviderSvc; C:\Program Files\Windows Server\Bin\SharedServiceHost.exe [30592 2011-03-02] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
R2 WSS_ComputerBackupProviderSvc; C:\Program Files\Windows Server\Bin\SharedServiceHost.exe [30592 2011-03-02] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3674864 2014-01-08] (Intel® Corporation)
U4 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-12-04] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2015-12-04] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-12-04] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-12-04] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1055560 2015-12-04] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [450504 2015-12-04] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [155304 2015-12-04] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2015-12-04] (AVAST Software)
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2013-09-04] (Broadcom Corporation.)
R3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [132608 2015-01-30] (Microsoft Corporation)
R3 BthHFAud; C:\Windows\System32\drivers\BthHfAud.sys [32768 2014-10-08] (Microsoft Corporation)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R0 FBIOSDRV; C:\Windows\System32\Drivers\FBIOSDRV.sys [20848 2012-08-01] (FUJITSU LIMITED)
R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [296736 2015-05-16] (Acronis International GmbH)
R3 FUJ02B1; C:\Windows\System32\drivers\FUJ02B1.sys [15696 2013-08-12] (FUJITSU LIMITED)
R3 FUJ02E3; C:\Windows\System32\drivers\FUJ02E3.sys [21200 2013-08-12] (FUJITSU LIMITED)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3349984 2014-02-25] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-04-09] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2015-04-09] (NVIDIA Corporation)
S3 pwdrvio; C:\WINDOWS\system32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2013-09-30] ()
R1 RrNetCapFilterDriver; C:\Windows\system32\DRIVERS\RrNetCapFilterDriver.sys [24744 2013-10-07] (Audials AG)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [41272 2012-08-24] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-24] (Synaptics Incorporated)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv_x64.sys [1510392 2013-10-22] (Sunplus)
R2 tib; C:\Windows\system32\DRIVERS\tib.sys [1058632 2015-07-29] (Acronis International GmbH)
R2 tib_mounter; C:\Windows\system32\DRIVERS\tib_mounter.sys [248648 2015-07-29] (Acronis International GmbH)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [116232 2015-03-16] (Oracle Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
U4 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-07 22:31 - 2015-12-07 22:31 - 00024810 _____ C:\Users\Klaus\Desktop\FRST.txt
2015-12-07 22:27 - 2015-12-07 22:26 - 00002790 _____ C:\Users\Klaus\Desktop\esetlog.txt
2015-12-07 20:12 - 2015-12-07 20:12 - 00000000 ____D C:\Program Files (x86)\ESET
2015-12-07 20:12 - 2015-12-07 20:11 - 02870984 _____ (ESET) C:\Users\Klaus\Desktop\esetsmartinstaller_deu.exe
2015-12-07 20:11 - 2015-12-07 20:11 - 02870984 _____ (ESET) C:\Users\Klaus\Downloads\esetsmartinstaller_deu.exe
2015-12-07 19:56 - 2015-12-07 20:08 - 00000000 ____D C:\ProgramData\HitmanPro
2015-12-07 19:55 - 2015-12-07 19:55 - 11337112 _____ (SurfRight B.V.) C:\Users\Klaus\Desktop\HitmanPro_x64.exe
2015-12-07 19:38 - 2015-12-07 22:31 - 00000000 ____D C:\FRST
2015-12-07 19:38 - 2015-12-07 19:39 - 00006237 _____ C:\Users\Klaus\Desktop\Fixlog.txt
2015-12-07 19:38 - 2015-12-06 10:32 - 02369024 _____ (Farbar) C:\Users\Klaus\Desktop\FRST64.exe
2015-12-07 19:35 - 2015-12-07 19:35 - 00305152 _____ C:\Users\Klaus\Desktop\SpyHunterCleaner-reboot.exe
2015-12-07 19:25 - 2015-12-07 19:24 - 00496640 _____ C:\Users\Klaus\Desktop\SpyHunterCleaner.exe
2015-12-07 19:24 - 2015-12-07 19:24 - 00496640 _____ C:\Users\Klaus\Downloads\SpyHunterCleaner.exe
2015-12-06 20:22 - 2015-12-06 21:17 - 00000000 ____D C:\Users\Klaus\Desktop\mbar
2015-12-06 20:21 - 2015-12-06 20:21 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Klaus\Desktop\mbar-1.09.3.1001.exe
2015-12-06 20:04 - 2015-12-07 11:02 - 00000310 _____ C:\Users\Klaus\Desktop\UVR 16x2.txt
2015-12-06 14:24 - 2015-12-06 14:46 - 00262972 _____ C:\TDSSKiller.3.1.0.7_06.12.2015_14.24.27_log.txt
2015-12-06 14:24 - 2015-12-06 14:21 - 04398264 _____ (Kaspersky Lab ZAO) C:\Users\Klaus\Desktop\tdsskiller.exe
2015-12-06 14:21 - 2015-12-06 14:21 - 04398264 _____ (Kaspersky Lab ZAO) C:\Users\Klaus\Downloads\tdsskiller.exe
2015-12-04 19:59 - 2015-12-04 19:59 - 00017388 _____ C:\Users\Klaus\Dokuments\cc_20151204_195919.reg
2015-12-04 18:45 - 2015-12-04 18:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-04 18:45 - 2015-12-04 18:45 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-04 18:45 - 2015-12-04 18:45 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-04 18:32 - 2015-12-04 18:32 - 13155552 _____ (Microsoft Corporation) C:\Users\Klaus\Downloads\Silverlight_x64(1).exe
2015-12-04 17:38 - 2015-12-04 17:38 - 00386096 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-12-04 17:38 - 2015-12-04 17:38 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-12-04 14:28 - 2015-12-06 21:17 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-12-04 14:11 - 2015-12-06 10:33 - 00000000 ____D C:\Users\Klaus\Downloads\_FRST
2015-12-03 14:24 - 2015-12-03 14:24 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2015-12-03 14:24 - 2015-12-03 14:24 - 00000000 ____D C:\Program Files\Common Files\AV
2015-12-02 18:23 - 2015-12-02 18:31 - 00000000 ____D C:\Users\Klaus\AppData\Local\Mozilla
2015-12-02 18:23 - 2015-12-02 18:23 - 00001182 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-12-02 18:23 - 2015-12-02 18:23 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Mozilla
2015-12-02 18:23 - 2015-12-02 18:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-12-02 18:23 - 2015-12-02 18:23 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-12-02 15:26 - 2015-12-02 15:26 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-12-02 15:26 - 2015-12-02 15:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-02 15:24 - 2015-12-02 15:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2015-12-02 15:24 - 2015-12-02 15:24 - 00000000 ____D C:\Program Files\7-Zip
2015-12-02 14:37 - 2015-12-02 14:37 - 00243976 _____ C:\Users\Klaus\Downloads\Firefox Setup Stub 42.0.exe
2015-12-02 14:35 - 2015-12-07 19:47 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2032405694-3072891623-2312475013-1005
2015-12-02 11:27 - 2015-12-02 11:27 - 00000000 _____ C:\autoexec.bat
2015-12-02 10:21 - 2015-12-02 10:21 - 00288007 _____ C:\Users\Klaus\Dokuments\Visio-Zeichnung1_3.pdf
2015-12-01 21:34 - 2015-12-01 21:34 - 00021000 _____ C:\Users\Klaus\Dokuments\cc_20151201_213431.reg
2015-12-01 21:00 - 2015-12-06 20:24 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-12-01 20:59 - 2015-12-06 20:23 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-12-01 20:59 - 2015-12-01 21:57 - 00001119 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-12-01 20:59 - 2015-12-01 20:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-12-01 20:59 - 2015-12-01 20:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-12-01 20:59 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-12-01 20:59 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2015-12-01 11:27 - 2014-11-24 22:09 - 00020872 _____ (Phoenix Technologies) C:\WINDOWS\SysWOW64\Drivers\DrvAgent64.SYS
2015-11-29 21:16 - 2015-11-29 21:16 - 01202911 _____ C:\Users\Klaus\Downloads\phpsysinfo-3.2.3.zip
2015-11-29 20:38 - 2015-11-29 21:12 - 01274789 _____ C:\Users\Klaus\Downloads\RDPWrap-v1.6.rar
2015-11-29 11:23 - 2015-11-29 11:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular
2015-11-26 11:56 - 2015-12-01 21:57 - 00002116 _____ C:\Users\Public\Desktop\WISO steuer Sparbuch 2016.lnk
2015-11-26 11:54 - 2015-11-26 11:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WISO steuer Sparbuch 2016
2015-11-25 11:51 - 2015-12-01 21:57 - 00002074 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2015-11-25 11:51 - 2015-11-25 11:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer
2015-11-25 11:51 - 2015-11-25 11:51 - 00000000 ____D C:\Program Files (x86)\MyPhoneExplorer
2015-11-25 11:39 - 2015-11-25 11:39 - 00063775 _____ C:\Users\Klaus\Dokuments\Backup Motorola Klaus 2015-11-25.mpb
2015-11-23 14:55 - 2015-11-23 14:55 - 00066336 _____ C:\Users\Klaus\Downloads\CHIP_Windows10UpdateStopper.exe
2015-11-23 10:28 - 2015-11-23 10:28 - 22859232 _____ (Splashtop Inc.) C:\Users\Klaus\Downloads\Splashtop_Streamer_WIN_v3.0.2.1.EXE
2015-11-22 17:53 - 2015-11-22 17:53 - 00016176 _____ C:\Users\Klaus\AppData\Local\recently-used.xbel
2015-11-18 23:27 - 2015-11-18 23:27 - 00039402 _____ C:\Users\Klaus\Dokuments\cc_20151118_232705.reg
2015-11-16 20:02 - 2015-11-16 20:03 - 00000000 ____D C:\Users\Klaus\Downloads\Adobe Dokumente
2015-11-16 20:00 - 2015-11-24 16:49 - 00000000 ____D C:\Users\Klaus\Downloads\Solarlog Sicherung
2015-11-15 18:58 - 2015-11-15 18:58 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Autodesk
2015-11-12 11:02 - 2015-11-12 11:02 - 00000000 ____D C:\Users\Klaus\Downloads\SolarLog-Toolkit-v1.0b
2015-11-11 11:10 - 2015-11-03 01:23 - 00810488 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-11-11 11:10 - 2015-11-03 01:23 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-11-11 09:47 - 2015-10-13 16:59 - 00397224 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2015-11-11 09:47 - 2015-10-13 16:59 - 00340872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2015-11-11 09:47 - 2015-10-13 16:59 - 00137960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncrypt.dll
2015-11-11 09:47 - 2015-10-13 16:59 - 00120376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncrypt.dll
2015-11-11 09:47 - 2015-10-13 16:59 - 00106952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2015-11-11 09:47 - 2015-10-13 16:59 - 00091416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2015-11-11 09:47 - 2015-10-11 07:36 - 00561952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-11-11 09:47 - 2015-10-11 07:36 - 00177496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-11-11 09:47 - 2015-10-10 19:40 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2015-11-11 09:47 - 2015-10-10 19:39 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2015-11-11 09:47 - 2015-10-10 19:07 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2015-11-11 09:47 - 2015-10-10 18:33 - 01441280 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-11-11 09:47 - 2015-10-10 18:27 - 00432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2015-11-11 09:47 - 2015-10-10 18:11 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2015-11-11 09:47 - 2015-10-10 17:45 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2015-11-11 09:47 - 2015-09-29 13:24 - 00155480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2015-11-11 09:46 - 2015-10-31 00:46 - 25818624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-11-11 09:46 - 2015-10-30 23:52 - 20331520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-11-11 09:46 - 2015-10-30 23:22 - 14457856 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-11-11 09:46 - 2015-10-15 17:08 - 00990208 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-11-11 09:46 - 2015-10-15 16:46 - 00803328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-11-11 09:46 - 2015-10-13 18:10 - 00559616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-11-11 09:46 - 2015-10-13 18:10 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-11-11 09:46 - 2015-09-12 14:47 - 00414559 _____ C:\WINDOWS\system32\ApnDatabase.xml
2015-11-11 09:46 - 2015-09-07 17:22 - 00477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2015-11-11 09:46 - 2015-09-07 16:54 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2015-11-11 09:46 - 2015-09-07 16:30 - 01091584 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2015-11-11 09:46 - 2015-09-04 20:24 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tunnel.sys
2015-11-11 09:46 - 2015-08-28 23:20 - 00183368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2015-11-11 09:46 - 2015-08-20 21:45 - 01380048 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2015-11-11 09:46 - 2015-08-20 18:48 - 01096704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2015-11-11 09:45 - 2015-10-31 00:25 - 02886656 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-11-11 09:45 - 2015-10-31 00:24 - 00585728 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-11-11 09:45 - 2015-10-31 00:11 - 05990912 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-11-11 09:45 - 2015-10-31 00:11 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-11-11 09:45 - 2015-10-30 23:47 - 00504832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-11-11 09:45 - 2015-10-30 23:42 - 02279936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-11-11 09:45 - 2015-10-30 23:39 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-11-11 09:45 - 2015-10-30 23:36 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-11-11 09:45 - 2015-10-30 23:32 - 00720896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-11-11 09:45 - 2015-10-30 23:31 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-11-11 09:45 - 2015-10-30 23:17 - 02487808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-11-11 09:45 - 2015-10-30 23:16 - 04527616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-11-11 09:45 - 2015-10-30 23:14 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-11-11 09:45 - 2015-10-30 23:10 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-11-11 09:45 - 2015-10-30 23:09 - 12854272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-11-11 09:45 - 2015-10-30 23:04 - 01547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-11-11 09:45 - 2015-10-30 22:53 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-11-11 09:45 - 2015-10-30 22:51 - 02011136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-11-11 09:45 - 2015-10-30 22:48 - 01311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-11-11 09:45 - 2015-10-30 22:46 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-11-11 09:45 - 2015-10-20 22:54 - 00136904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-11-11 09:45 - 2015-10-20 15:53 - 03705856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-11-11 09:45 - 2015-10-20 15:36 - 02243072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-11-11 09:45 - 2015-10-20 15:35 - 00891904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-11-11 09:45 - 2015-10-20 15:34 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-11-11 09:45 - 2015-10-20 15:34 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-11-11 09:45 - 2015-10-20 15:34 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-11-11 09:45 - 2015-10-20 15:33 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-11-11 09:45 - 2015-10-20 15:14 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-11-11 09:45 - 2015-10-20 15:13 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-11-11 09:45 - 2015-10-20 15:13 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-11-11 09:45 - 2015-10-20 15:13 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-11-11 09:45 - 2015-10-15 00:02 - 07455064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-11-11 09:45 - 2015-10-15 00:02 - 01659560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2015-11-11 09:45 - 2015-10-15 00:02 - 01519592 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2015-11-11 09:45 - 2015-10-15 00:02 - 01487008 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2015-11-11 09:45 - 2015-10-15 00:02 - 01355848 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2015-11-11 09:44 - 2015-10-17 15:19 - 04176384 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-11-11 09:43 - 2015-10-08 17:08 - 01083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2015-11-08 11:03 - 2015-11-08 11:03 - 00056786 _____ C:\Users\Klaus\Dokuments\Visio-Heizung Montage.pdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-07 22:29 - 2013-11-21 16:15 - 00003930 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{1EDCF81F-5A5E-402C-8B3A-DBF578C7E2D0}
2015-12-07 21:38 - 2015-10-14 09:59 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-07 20:48 - 2014-12-25 12:46 - 00002284 ____H C:\Users\Klaus\Dokuments\Default.rdp
2015-12-07 19:42 - 2014-06-13 10:49 - 00000000 __SHD C:\Users\Klaus\IntelGraphicsProfiles
2015-12-07 19:40 - 2013-11-21 00:16 - 00000000 ____D C:\ProgramData\NVIDIA
2015-12-07 19:40 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-07 19:38 - 2013-08-22 14:36 - 00000000 ____D C:\Windows
2015-12-07 19:32 - 2013-11-21 14:48 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-12-07 19:27 - 2013-11-20 23:33 - 00000000 ____D C:\Users\Klaus
2015-12-07 19:22 - 2013-11-21 18:20 - 00000000 ____D C:\Technische Alternative
2015-12-07 18:21 - 2013-11-21 18:13 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\ClassicShell
2015-12-07 17:04 - 2014-12-25 10:29 - 00000000 ____D C:\Users\Klaus\Dokuments\Outlook-Dateien
2015-12-07 14:04 - 2013-12-06 15:48 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\TeamViewer
2015-12-07 08:53 - 2013-11-21 09:22 - 00000000 ____D C:\ProgramData\LightsOut
2015-12-06 20:02 - 2015-07-23 13:48 - 00000246 _____ C:\Users\Klaus\Desktop\Kodi upgrade.txt
2015-12-06 19:54 - 2014-09-24 16:05 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth-Geräte
2015-12-04 20:22 - 2014-12-27 13:54 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Kodi
2015-12-04 20:04 - 2014-02-25 22:49 - 00003702 _____ C:\WINDOWS\System32\Tasks\Launch HTC Sync Loader
2015-12-04 19:59 - 2014-12-25 13:12 - 00000000 ___RD C:\Users\Klaus\Dokuments
2015-12-04 18:40 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-12-04 18:38 - 2015-05-16 14:59 - 00000000 ____D C:\Users\Klaus\AppData\Local\ElevatedDiagnostics
2015-12-04 17:40 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\Inf
2015-12-04 17:38 - 2014-04-22 09:51 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-12-04 17:38 - 2013-12-25 18:00 - 00155304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-12-04 17:38 - 2013-11-21 14:47 - 01055560 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-12-04 17:38 - 2013-11-21 14:47 - 00450504 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-12-04 17:38 - 2013-11-21 14:47 - 00273784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-12-04 17:38 - 2013-11-21 14:47 - 00097648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-12-04 17:38 - 2013-11-21 14:47 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-12-04 17:38 - 2013-11-21 14:47 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-12-02 23:55 - 2015-10-14 09:59 - 00003772 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-12-02 23:55 - 2015-05-18 22:59 - 00000000 ____D C:\Users\Klaus\AppData\Local\Adobe
2015-12-02 21:44 - 2014-12-25 15:55 - 00000000 ____D C:\Users\Klaus\Dokuments\_Photovoltaik
2015-12-02 15:27 - 2013-11-21 21:16 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Skype
2015-12-02 15:26 - 2013-11-21 21:15 - 00000000 ____D C:\ProgramData\Skype
2015-12-02 15:24 - 2014-10-05 16:52 - 00004108 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-02 15:24 - 2014-10-05 16:52 - 00003872 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-02 15:24 - 2014-10-05 16:52 - 00001136 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-02 15:24 - 2014-10-05 16:52 - 00001132 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-02 14:59 - 2013-09-30 05:14 - 01789004 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-02 14:59 - 2013-09-30 04:56 - 00770130 _____ C:\WINDOWS\system32\perfh007.dat
2015-12-02 14:59 - 2013-09-30 04:56 - 00160912 _____ C:\WINDOWS\system32\perfc007.dat
2015-12-01 21:57 - 2015-11-01 20:02 - 00002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-12-01 21:57 - 2015-10-26 18:24 - 00001726 _____ C:\Users\Public\Desktop\iTunes.lnk
2015-12-01 21:57 - 2015-10-22 16:13 - 00001293 _____ C:\Users\Public\Desktop\TA-Designer.lnk
2015-12-01 21:57 - 2015-10-22 15:26 - 00001257 _____ C:\Users\Public\Desktop\F-Editor.lnk
2015-12-01 21:57 - 2015-10-18 10:17 - 00001229 _____ C:\Users\Public\Desktop\Winsol.lnk
2015-12-01 21:57 - 2015-09-05 18:28 - 00001419 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
2015-12-01 21:57 - 2015-08-29 21:56 - 00001144 _____ C:\Users\Public\Desktop\Drive Bender Manager.lnk
2015-12-01 21:57 - 2015-08-22 11:54 - 00002136 _____ C:\Users\Public\Desktop\WISO Hausverwalter 2016.lnk
2015-12-01 21:57 - 2015-07-14 17:43 - 00002781 _____ C:\Users\Public\Desktop\Finanzmanager 2016.lnk
2015-12-01 21:57 - 2015-06-14 15:11 - 00000945 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealtimeSync.lnk
2015-12-01 21:57 - 2015-05-18 23:48 - 00000999 _____ C:\Users\Klaus\Desktop\Adobe Lightroom.lnk
2015-12-01 21:57 - 2015-05-18 23:48 - 00000999 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom.lnk
2015-12-01 21:57 - 2015-05-16 15:32 - 00001224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis True Image 2015.lnk
2015-12-01 21:57 - 2015-05-16 15:32 - 00001218 _____ C:\Users\Public\Desktop\Acronis True Image 2015.lnk
2015-12-01 21:57 - 2015-04-13 19:59 - 00001053 _____ C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk
2015-12-01 21:57 - 2015-03-30 21:33 - 00000716 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) HD Graphics Control Panel.lnk
2015-12-01 21:57 - 2015-03-30 21:33 - 00000710 _____ C:\Users\Public\Desktop\Intel(R) HD Graphics Control Panel.lnk
2015-12-01 21:57 - 2015-03-30 21:28 - 00001183 _____ C:\Users\Public\Desktop\Intel(R) Driver Update Utility 2.0.lnk
2015-12-01 21:57 - 2015-03-05 21:03 - 00001305 _____ C:\Users\Public\Desktop\X2-Simulator.lnk
2015-12-01 21:57 - 2015-02-05 23:28 - 00000303 _____ C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Heimnetzgruppe.lnk
2015-12-01 21:57 - 2015-01-25 15:17 - 00001244 _____ C:\Users\Klaus\Desktop\Kodineu.lnk
2015-12-01 21:57 - 2015-01-15 18:45 - 00000996 _____ C:\Users\Public\Desktop\Mp3tag.lnk
2015-12-01 21:57 - 2015-01-12 14:43 - 00001114 _____ C:\Users\Klaus\Desktop\Kodi Verzeichnis.lnk
2015-12-01 21:57 - 2015-01-02 14:39 - 00001197 _____ C:\Users\Klaus\Desktop\Kodi Start.lnk
2015-12-01 21:57 - 2014-12-27 14:09 - 00001860 _____ C:\Users\Klaus\Desktop\Kodi.lnk
2015-12-01 21:57 - 2014-12-20 22:17 - 00002208 _____ C:\Users\Klaus\Desktop\TV Movie ClickFinder.lnk
2015-12-01 21:57 - 2014-11-24 20:53 - 00000938 _____ C:\Users\Klaus\Desktop\X-Plane.lnk
2015-12-01 21:57 - 2014-09-10 09:42 - 00002169 _____ C:\Users\Klaus\Desktop\MPTagThat.lnk
2015-12-01 21:57 - 2014-09-03 11:16 - 00001412 _____ C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Windows herunterladen.lnk
2015-12-01 21:57 - 2014-06-21 10:49 - 00001153 _____ C:\Users\Public\Desktop\Digital Photo Professional.lnk
2015-12-01 21:57 - 2014-06-02 17:44 - 00001888 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk
2015-12-01 21:57 - 2014-04-19 14:23 - 00000949 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk
2015-12-01 21:57 - 2014-02-07 13:48 - 00001291 _____ C:\Users\Klaus\Desktop\Revo Uninstaller.lnk
2015-12-01 21:57 - 2014-01-15 20:58 - 00001262 _____ C:\Users\Public\Desktop\ElsterFormular.lnk
2015-12-01 21:57 - 2013-12-29 21:10 - 00000955 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeFileSync.lnk
2015-12-01 21:57 - 2013-12-29 21:10 - 00000949 _____ C:\Users\Public\Desktop\FreeFileSync.lnk
2015-12-01 21:57 - 2013-12-13 20:22 - 00002523 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2015-12-01 21:57 - 2013-12-11 18:01 - 00001229 _____ C:\Users\Public\Desktop\Tapps2.lnk
2015-12-01 21:57 - 2013-12-09 17:27 - 00001960 _____ C:\Users\Public\Desktop\Sonos.lnk
2015-12-01 21:57 - 2013-12-07 18:48 - 00001058 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Family Tree Maker World Express.lnk
2015-12-01 21:57 - 2013-12-07 18:48 - 00001046 _____ C:\Users\Public\Desktop\Family Tree Maker World Express.lnk
2015-12-01 21:57 - 2013-11-23 21:38 - 00001502 _____ C:\Users\Klaus\Desktop\Win32DiskImager.lnk
2015-12-01 21:57 - 2013-11-21 18:37 - 00001896 _____ C:\Users\Public\Desktop\ELOoffice.lnk
2015-12-01 21:57 - 2013-11-21 17:08 - 00001072 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-Registrierung.lnk
2015-12-01 21:57 - 2013-11-21 17:07 - 00001384 _____ C:\ProgramData\Microsoft\Windows\Start Menu\HP Solution Center.lnk
2015-12-01 21:57 - 2013-11-21 13:42 - 00000655 _____ C:\Users\Public\Desktop\Total Commander 64 bit.lnk
2015-12-01 21:57 - 2013-11-21 12:24 - 00001683 _____ C:\Users\Klaus\Desktop\SolarAnalyzer.lnk
2015-12-01 21:57 - 2013-11-20 23:33 - 00001461 _____ C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-01 21:57 - 2013-11-20 23:06 - 00001511 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-12-01 12:27 - 2014-03-04 21:24 - 00000000 ___RD C:\Users\Klaus\SkyDrive
2015-12-01 11:11 - 2013-12-10 17:28 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\MyPhoneExplorer
2015-11-29 21:49 - 2013-12-09 17:26 - 00000000 ____D C:\ProgramData\Sonos,_Inc
2015-11-29 20:23 - 2013-12-29 21:10 - 00000000 ____D C:\Program Files\FreeFileSync
2015-11-29 11:24 - 2014-01-15 20:58 - 00000000 ____D C:\Program Files (x86)\ElsterFormular
2015-11-29 11:24 - 2013-11-21 18:20 - 00000000 ____D C:\ProgramData\elsterformular
2015-11-29 00:20 - 2014-12-25 15:55 - 00000000 ____D C:\Users\Klaus\Dokuments\_Eprimo Strom
2015-11-28 14:26 - 2013-12-13 11:42 - 00000000 ____D C:\Users\Klaus\AppData\Local\MPTagThat
2015-11-27 22:33 - 2013-11-21 12:24 - 00000000 ___RD C:\Users\Klaus\Desktop\Programme
2015-11-27 22:32 - 2015-03-11 10:47 - 00000000 ____D C:\Users\Klaus\AppData\Local\CDex
2015-11-27 22:28 - 2014-03-02 11:18 - 00000000 ____D C:\Program Files (x86)\WISO
2015-11-27 22:28 - 2013-03-29 17:53 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-11-27 16:29 - 2014-11-12 16:13 - 00000000 ____D C:\WINDOWS\SysWOW64\vbox
2015-11-27 16:29 - 2014-11-12 16:13 - 00000000 ____D C:\WINDOWS\system32\vbox
2015-11-26 16:04 - 2014-12-25 10:29 - 00000000 ____D C:\Users\Klaus\Dokuments\Steuer-Sparbuch
2015-11-26 11:56 - 2013-11-21 18:06 - 00000000 ____D C:\Users\Klaus\AppData\Local\Buhl
2015-11-25 14:57 - 2013-11-21 15:36 - 00000000 ____D C:\ProgramData\Oracle
2015-11-25 14:54 - 2014-07-18 18:26 - 00000000 ____D C:\Program Files\Java
2015-11-25 14:54 - 2014-07-18 14:16 - 00000000 ____D C:\Program Files (x86)\Java
2015-11-25 14:54 - 2014-01-15 15:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-11-25 14:53 - 2015-08-27 16:04 - 00000000 ____D C:\Users\Klaus\.oracle_jre_usage
2015-11-25 14:53 - 2014-07-18 18:27 - 00110176 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2015-11-25 11:02 - 2013-11-21 17:56 - 00000000 ____D C:\ProgramData\Lexware
2015-11-25 10:27 - 2013-11-21 18:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Technische Alternative
2015-11-22 17:54 - 2014-04-19 14:32 - 00000000 ____D C:\Users\Klaus\.gimp-2.8
2015-11-22 17:53 - 2014-04-19 14:36 - 00000000 ____D C:\Users\Klaus\AppData\Local\gtk-2.0
2015-11-22 15:46 - 2015-10-31 20:01 - 00000000 ____D C:\Users\Klaus\Downloads\CMI_WE_mit_Wartungsfunktion
2015-11-22 15:29 - 2015-08-15 20:48 - 00000212 _____ C:\Users\Klaus\Desktop\Lightsout win10.txt
2015-11-19 21:21 - 2013-12-09 17:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sonos
2015-11-19 21:21 - 2013-12-09 17:27 - 00000000 ____D C:\Program Files (x86)\Sonos
2015-11-19 21:21 - 2013-12-09 17:26 - 00000000 ____D C:\Users\Klaus\AppData\Local\Downloaded Installations
2015-11-17 09:57 - 2013-11-21 18:41 - 00000000 ____D C:\Users\Klaus\AppData\Roaming\Notepad++
2015-11-17 09:57 - 2013-11-21 18:41 - 00000000 ____D C:\Program Files (x86)\Notepad++
2015-11-16 15:28 - 2015-04-28 17:10 - 00000632 _____ C:\Users\Klaus\Desktop\Mercer.txt
2015-11-13 20:08 - 2014-11-20 23:38 - 00000028 _____ C:\Users\Klaus\AppData\Local\X-Plane Installer.prf
2015-11-13 20:03 - 2014-11-20 23:38 - 00000073 _____ C:\Users\Klaus\AppData\Local\X-Plane_drm.prf
2015-11-11 11:23 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\rescache
2015-11-11 11:08 - 2013-08-22 15:44 - 00498216 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-11-11 11:05 - 2013-08-22 16:36 - 00000000 ___RD C:\WINDOWS\ToastData
2015-11-11 09:56 - 2012-07-26 08:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-11-11 09:54 - 2013-11-20 18:19 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-11-11 09:48 - 2013-11-20 18:19 - 145617392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-11-11 09:32 - 2013-11-21 13:41 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-11-11 09:31 - 2013-11-21 19:14 - 00000039 _____ C:\WINDOWS\vbaddin.ini
2015-11-07 12:01 - 2013-11-21 22:27 - 00000000 ____D C:\Users\Klaus\.VirtualBox
2015-11-07 10:35 - 2014-12-25 15:45 - 00000000 ____D C:\Users\Klaus\Downloads\Virtual Box

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-11-02 22:13 - 2015-11-02 22:18 - 1359736205 _____ () C:\Users\Klaus\AppData\Roaming\Kodi_15.2.rar
2014-03-20 18:33 - 2014-03-20 18:33 - 0012955 _____ () C:\Users\Klaus\AppData\Roaming\Kommagetrennte Werte (DOS).CAL
2015-05-01 13:05 - 2015-05-01 14:09 - 0000261 _____ () C:\Users\Klaus\AppData\Roaming\OpenSceneryX Installationsprogramm.plist
2014-09-08 11:16 - 2014-09-08 11:34 - 0000600 _____ () C:\Users\Klaus\AppData\Roaming\winscp.rnd
2013-11-22 15:51 - 2015-08-29 22:27 - 0000600 _____ () C:\Users\Klaus\AppData\Local\PUTTY.RND
2015-11-22 17:53 - 2015-11-22 17:53 - 0016176 _____ () C:\Users\Klaus\AppData\Local\recently-used.xbel
2015-05-03 15:42 - 2015-09-12 21:20 - 0007604 _____ () C:\Users\Klaus\AppData\Local\Resmon.ResmonCfg
2014-11-20 23:38 - 2015-11-13 20:08 - 0000028 _____ () C:\Users\Klaus\AppData\Local\X-Plane Installer.prf
2014-11-20 23:38 - 2015-11-13 20:03 - 0000073 _____ () C:\Users\Klaus\AppData\Local\X-Plane_drm.prf
2014-11-20 19:44 - 2015-07-24 14:17 - 0000088 _____ () C:\Users\Klaus\AppData\Local\x-plane_install_10.txt
2013-11-21 17:03 - 2013-11-21 17:14 - 0000821 _____ () C:\ProgramData\hpzinstall.log

==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-11-27 17:29

==================== Ende von FRST.txt ============================

Pauli#01 07.12.2015 22:45
Shortcut Teil 1

Code:
Untersuchungsergebnis der Verknüpfungen des Benutzers (x64) Version:05-12-2015
durchgeführt von Klaus (2015-12-07 22:34:55)
Gestartet von C:\Users\Klaus\Desktop
Start-Modus: Normal

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)



Shortcut: C:\Users\Klaus\Desktop\Kodi Start.lnk -> D:\Kodi Dateien\Kodi Startup Skript\Kodi.bat ()
Shortcut: C:\Users\Klaus\Desktop\Kodineu.lnk -> D:\Kodi Dateien\Kodi Startup Skript\Kodineu.bat ()


Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Family Tree Maker World Express.lnk -> C:\Program Files (x86)\Family Tree Maker World Express\FTM.exe (Ancestry.com)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\HP Solution Center.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\Hpqdirec.exe (Hewlett-Packard Company)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk -> C:\Windows\Installer\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}\SC_Reader.ico (Flexera Software LLC)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis True Image 2015.lnk -> C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageLauncher.exe (Acronis)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\core\PDapp.exe (Adobe Systems Incorporated)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom.lnk -> C:\Program Files\Adobe\Adobe Lightroom\lightroom.exe (Adobe Systems)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk -> C:\Windows\Installer\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}\AppleSoftwareUpdateIco.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Camera.lnk -> C:\Windows\Camera\Camera.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileManager.lnk -> C:\Windows\FileManager\FileManager.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeFileSync.lnk -> C:\Program Files\FreeFileSync\FreeFileSync.exe (www.FreeFileSync.org)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.lnk -> C:\Program Files\GIMP 2\bin\gimp-2.8.exe (Spencer Kimball, Peter Mattis and the GIMP Development Team)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\I.R.I.S. OCR-Registrierung.lnk -> C:\Program Files (x86)\HP\Digital Imaging\DocProc\regipe.exe (I.R.I.S. Image Recognition Integarted Systems)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk -> C:\Program Files (x86)\ImgBurn\ImgBurn.exe (LIGHTNING UK!)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) HD Graphics Control Panel.lnk -> C:\Windows\System32\GfxUIEx.exe (Intel Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotosApp.lnk -> C:\Windows\FileManager\PhotosApp.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealtimeSync.lnk -> C:\Program Files\FreeFileSync\RealtimeSync.exe (www.FreeFileSync.org)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Store.lnk -> C:\Windows\WinStore\WinStore.htm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WISO steuer Sparbuch 2016\WISO steuer Sparbuch 2016.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2016\wiso2016.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WISO Hausverwalter 2016\WISO Hausverwalter 2016 entfernen.lnk -> C:\Program Files (x86)\InstallShield Installation Information\{FF698809-CD68-4A77-BAD9-C1D5DD9AEF5B}\setup.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WISO Hausverwalter 2016\WISO Hausverwalter 2016.lnk -> C:\Program Files (x86)\Buhl\WISO Hausverwalter 2016\hv2016.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WISO Hausverwalter 2016\Hilfen\WISO Hausverwalter 2016 Ratgeber.lnk -> C:\Program Files (x86)\Buhl\WISO Hausverwalter 2016\Handbuch\haus2016.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Benutzerhandbuch für die Konsolenversion von RAR.lnk -> C:\Program Files\WinRAR\Rar.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Hilfe zu WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Was ist neu in dieser Version.lnk -> C:\Program Files\WinRAR\WhatsNew.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMerge\Benutzerhandbuch.lnk -> C:\Program Files (x86)\WinMerge\Docs\WinMerge.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMerge\LIESMICH-Datei.lnk -> C:\Program Files (x86)\WinMerge\Docs\ReadMe.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMerge\WinMerge.lnk -> C:\Program Files (x86)\WinMerge\WinMergeU.exe (hxxp://winmerge.org)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media\Windows Media Encoder.lnk -> C:\Program Files (x86)\Windows Media Components\Encoder\wmenc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media\Utilities\Windows Media Encoding Script.lnk -> C:\Program Files (x86)\Windows Media Components\Encoder\WMEncUtil.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media\Utilities\Windows Media File Editor.lnk -> C:\Program Files (x86)\Windows Media Components\Encoder\wmeditor.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media\Utilities\Windows Media Profile Editor.lnk -> C:\Program Files (x86)\Windows Media Components\Encoder\WMProEdt.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media\Utilities\Windows Media Stream Editor.lnk -> C:\Program Files (x86)\Windows Media Components\Encoder\wmstreamedt.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Home Server 2011\Windows Home Server 2011-Dashboard.lnk -> C:\Program Files\Windows Server\Bin\DashboardClient.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Home Server 2011\Windows Home Server 2011-Launchpad.lnk -> C:\Program Files\Windows Server\Bin\Launchpad.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Documentation.lnk -> C:\Program Files\VideoLAN\VLC\Documentation.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\Release Notes.lnk -> C:\Program Files\VideoLAN\VLC\NEWS.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VideoLAN Website.lnk -> C:\Program Files\VideoLAN\VLC\VideoLAN Website.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player - reset preferences and cache files.lnk -> C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player skinned.lnk -> C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN\VLC media player.lnk -> C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraISO\UltraISO Help.lnk -> C:\Program Files (x86)\UltraISO\ultraiso.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraISO\UltraISO Readme.lnk -> C:\Program Files (x86)\UltraISO\Readme.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraISO\UltraISO Revision History.lnk -> C:\Program Files (x86)\UltraISO\History.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraISO\UltraISO.lnk -> C:\Program Files (x86)\UltraISO\UltraISO.exe (EZB Systems, Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraISO\Uninstall UltraISO.lnk -> C:\Program Files (x86)\UltraISO\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander\Total Commander 64 bit Entfernen oder Reparieren.lnk -> C:\totalcmd\TCUNIN64.EXE ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander\Total Commander 64 bit.lnk -> C:\totalcmd\TOTALCMD64.EXE (Ghisler Software GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Commander\Total Commander Hilfe.lnk -> C:\totalcmd\TOTALCMD.CHM ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Technische Alternative\F-Editor.lnk -> C:\Program Files (x86)\Technische Alternative\F-Editor\F-Editor.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Technische Alternative\TA-Designer.lnk -> C:\Program Files (x86)\Technische Alternative\TA-Designer\TA-Designer.exe (Technische Alternative GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Technische Alternative\Tapps2.lnk -> C:\Program Files (x86)\Technische Alternative\Tapps2\Tapps2.exe (Technische Alternative GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Technische Alternative\Winsol.lnk -> C:\Program Files (x86)\Technische Alternative\Winsol\Winsol.exe (Technische Alternative GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Technische Alternative\X2-Simulator.lnk -> C:\Program Files (x86)\Technische Alternative\X2-Simulator\X2-Simulator.exe (Technische Alternative GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Team MediaPortal\MPTagThat\MPTagThat.lnk -> C:\Program Files (x86)\Team MediaPortal\MPTagThat\MPTagThat.exe (Helmut Wahrmann)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Team MediaPortal\MPTagThat\Uninstall MPTagThat.lnk -> C:\Program Files (x86)\Team MediaPortal\MPTagThat\uninstall.exe (Team MediaPortal)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Team MediaPortal\MPTagThat\User Files.lnk -> C:\Users\Klaus\AppData\Roaming\MPTagThat ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Default Programs.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows Easy Transfer.lnk -> C:\Windows\System32\migwiz\migwiz.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sonos\Sonos.lnk -> C:\Program Files (x86)\Sonos\Sonos.exe (Sonos, Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk -> C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint\Microsoft SharePoint Workspace 2010.lnk -> C:\Windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\grvicons.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm\RoboForm.lnk -> C:\Program Files (x86)\Siber Systems\AI RoboForm\identities.exe (Siber Systems)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pointing Device Utility\Pointing Device Utility.lnk -> C:\Program Files\FUJITSU\PointingDeviceUtility\mlstart.exe (FUJITSU LIMITED)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plugfree NETWORK\Location Manager.lnk -> C:\Program Files\FUJITSU\Plugfree NETWORK\PfNet.exe (FUJITSU LIMITED)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plugfree NETWORK\Network Diagnosis.lnk -> C:\Program Files\FUJITSU\Plugfree NETWORK\FMNetCheck.exe (FUJITSU LIMITED)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plugfree NETWORK\Readme.lnk -> C:\Program Files\FUJITSU\Plugfree NETWORK\PFNLauncher.exe (FUJITSU LIMITED)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plugfree NETWORK\Help\Using the Location Manager.lnk -> C:\Program Files\FUJITSU\Plugfree NETWORK\PFNLauncher.exe (FUJITSU LIMITED)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plugfree NETWORK\Help\Using the Network Diagnosis.lnk -> C:\Program Files\FUJITSU\Plugfree NETWORK\PFNLauncher.exe (FUJITSU LIMITED)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox\License (English).lnk -> C:\Program Files\Oracle\VirtualBox\License_en_US.rtf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox\Oracle VM VirtualBox.lnk -> C:\Program Files\Oracle\VirtualBox\VirtualBox.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox\User manual (CHM, English).lnk -> C:\Program Files\Oracle\VirtualBox\VirtualBox.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox\User manual (PDF, English).lnk -> C:\Program Files\Oracle\VirtualBox\doc\UserManual.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++\Notepad++.lnk -> C:\Program Files (x86)\Notepad++\notepad++.exe (Don HO don.h@free.fr)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer\MyPhoneExplorer.lnk -> C:\Program Files (x86)\MyPhoneExplorer\MyPhoneExplorer.exe (F.J. Wechselberger)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer\Uninstall.lnk -> C:\Program Files (x86)\MyPhoneExplorer\uninstall.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag\Mp3tag deinstallieren.lnk -> C:\Program Files (x86)\Mp3tag\Mp3tagUninstall.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag\Mp3tag Hilfe.lnk -> C:\Program Files (x86)\Mp3tag\help\index.html ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag\Mp3tag.lnk -> C:\Program Files (x86)\Mp3tag\Mp3tag.exe (Florian Heidenreich)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag\Neu in dieser Version.lnk -> C:\Program Files (x86)\Mp3tag\Mp3tagVersion.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\Silverlight.Configuration.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Access 2010.lnk -> C:\Windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\accicons.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Excel 2010.lnk -> C:\Windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\xlicons.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft InfoPath Designer 2010.lnk -> C:\Windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\inficon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft InfoPath Filler 2010.lnk -> C:\Windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\inficon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Outlook 2010.lnk -> C:\Windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\outicon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft PowerPoint 2010.lnk -> C:\Windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\pptico.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Publisher 2010.lnk -> C:\Windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\pubs.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft SharePoint Workspace 2010.lnk -> C:\Windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\grvicons.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Visio 2010.lnk -> C:\Windows\Installer\{91140000-0057-0000-0000-0000000FF1CE}\visicon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Word 2010.lnk -> C:\Windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\wordicon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010-Tools\Digitales Zertifikat für VBA-Projekte.lnk -> C:\Windows\Installer\{91140000-0057-0000-0000-0000000FF1CE}\misc.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010-Tools\Microsoft Clip Organizer.lnk -> C:\Windows\Installer\{91140000-0057-0000-0000-0000000FF1CE}\cagicon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010-Tools\Microsoft Office 2010 Upload Center.lnk -> C:\Windows\Installer\{91140000-0057-0000-0000-0000000FF1CE}\msouc.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010-Tools\Microsoft Office 2010-Spracheinstellungen.lnk -> C:\Windows\Installer\{91140000-0057-0000-0000-0000000FF1CE}\misc.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office\Microsoft Office 2010-Tools\Microsoft Office Picture Manager.lnk -> C:\Windows\Installer\{91140000-0057-0000-0000-0000000FF1CE}\oisicon.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Malwarebytes Anti-Malware entfernen.lnk -> C:\Program Files (x86)\Malwarebytes Anti-Malware\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Malwarebytes Anti-Malware Notifications.lnk -> C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (Malwarebytes)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Malwarebytes Anti-Malware.lnk -> C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (Malwarebytes)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware\Tools\Malwarebytes Anti-Malware Chameleon.lnk -> C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\chameleon.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech\Logitech Harmony Remote\Logitech Harmony Remote Software 7.lnk -> C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lexware\Lexware Zubehör.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lexware\Finanzmanager 2016\Finanzmanager 2016.lnk -> C:\Windows\Installer\{7429B83A-5AB6-4AEE-A53B-79B9742B9158}\NewShortcut5_1.8C5DA79E_7079_4AB3_81F7_712153351D0D.exe (Macrovision Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters\LAV Audio Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters\LAV Splitter Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters\LAV Video Configuration.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters\Uninstall LAV Filters.lnk -> C:\Program Files (x86)\LAV Filters\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Auf Updates prüfen.lnk -> C:\Program Files\Java\jre1.8.0_66\bin\javacpl.exe (Oracle Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Info zu Java.lnk -> C:\Program Files\Java\jre1.8.0_66\bin\javacpl.exe (Oracle Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Java konfigurieren.lnk -> C:\Program Files\Java\jre1.8.0_66\bin\javacpl.exe (Oracle Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes\iTunes.lnk -> C:\Program Files\iTunes\iTunes.exe (Apple Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes\Über iTunes.lnk -> C:\Program Files\iTunes\iTunes.Resources\de.lproj\About iTunes.rtf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView\About IrfanView.lnk -> C:\Program Files (x86)\IrfanView\i_about.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView\Available Languages.lnk -> C:\Program Files (x86)\IrfanView\i_languages.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView\Available PlugIns.lnk -> C:\Program Files (x86)\IrfanView\i_plugins.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView\Command line Options.lnk -> C:\Program Files (x86)\IrfanView\i_options.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView\IrfanView - Thumbnails.lnk -> C:\Program Files (x86)\IrfanView\i_view32.exe (Irfan Skiljan)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView\IrfanView Help.lnk -> C:\Program Files (x86)\IrfanView\i_view32.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView\What's New.lnk -> C:\Program Files (x86)\IrfanView\i_changes.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless\WiFi Advanced Statistics.lnk -> C:\Program Files\Common Files\Intel\WirelessCommon\imFrmwrk.exe (Intel(R) Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless\WiFi Event Viewer.lnk -> C:\Program Files\Common Files\Intel\WirelessCommon\imFrmwrk.exe (Intel(R) Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless\WiFi Manual Diagnostics.lnk -> C:\Program Files\Common Files\Intel\WirelessCommon\imFrmwrk.exe (Intel(R) Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver Update Utility\Intel(R) Driver Update Utility 2.0.lnk -> C:\Program Files (x86)\Intel Driver Update Utility\DriverUpdateUI.exe (Intel)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn\ImgBurn Read Me.lnk -> C:\Program Files (x86)\ImgBurn\ReadMe.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn\ImgBurn.lnk -> C:\Program Files (x86)\ImgBurn\ImgBurn.exe (LIGHTNING UK!)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn\Uninstall.lnk -> C:\Program Files (x86)\ImgBurn\uninstall.exe (LIGHTNING UK!)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP Solution Center.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\Hpqdirec.exe (Hewlett-Packard Company)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\HP*Update.lnk -> C:\Program Files (x86)\HP\HP Software Update\hpwucli.exe (Hewlett-Packard)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\Shop für HP Zubehör.lnk -> C:\Program Files (x86)\HP\HPSSUPPLY\hpqSSupply.exe (Hewlett-Packard Development Company L.P.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\Officejet 4500 G510n-z\Deinstallieren.lnk -> C:\Program Files (x86)\HP\Digital Imaging\{6B9B2E57-D988-4258-8A2C-6F3657A600BD}\setup\hpzscr40.exe (Hewlett-Packard)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\Officejet 4500 G510n-z\Einstellungen für den kabellosen Druck konfigurieren.lnk -> C:\Program Files (x86)\HP\Digital Imaging\{6B9B2E57-D988-4258-8A2C-6F3657A600BD}\hpzstub.exe (Hewlett-Packard)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\Officejet 4500 G510n-z\Funktionen.lnk -> C:\Program Files (x86)\HP\Digital Imaging\hp officejet 4500 g510n-z\data\hpbLTBX.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\Officejet 4500 G510n-z\Gerät hinzufügen.lnk -> C:\Program Files (x86)\HP\Digital Imaging\{6B9B2E57-D988-4258-8A2C-6F3657A600BD}\hpzstub.exe (Hewlett-Packard)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\Officejet 4500 G510n-z\Hilfe.lnk -> C:\Program Files (x86)\HP\Digital Imaging\help\inkjet28.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\Officejet 4500 G510n-z\HP Support-Website.lnk -> C:\Program Files (x86)\HP\Digital Imaging\HP Officejet 4500 G510n-z\help\HP Product Support Website.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\Officejet 4500 G510n-z\Liesmich.lnk -> C:\Program Files (x86)\HP\Digital Imaging\{6B9B2E57-D988-4258-8A2C-6F3657A600BD}\help\readme.html ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\Officejet 4500 G510n-z\Produktregistrierung.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqwrg.exe (Hewlett-Packard Company)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP\Officejet 4500 G510n-z\Setup-Handbuch.lnk -> C:\Program Files (x86)\HP\Digital Imaging\{6B9B2E57-D988-4258-8A2C-6F3657A600BD}\setup\hwsetupwizard\setup_guide.exe (Adobe Systems, Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heiko Schröder Software\MOBackup - Datensicherung für Outlook\Hilfe.lnk -> C:\Program Files (x86)\MOBackup\hilfe.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heiko Schröder Software\MOBackup - Datensicherung für Outlook\MOBackup.lnk -> C:\Program Files (x86)\MOBackup\mobackup.exe (Heiko Schröder)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heiko Schröder Software\MOBackup - Datensicherung für Outlook\Wichtige Informationen!.lnk -> C:\Program Files (x86)\MOBackup\ReadMe.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Harmony Desktop\Harmony Desktop.lnk -> C:\Windows\Installer\{44A829C9-EC11-4612-A977-37D19114D739}\_46120226CD622DA7EE52C8.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter\GDSMux.lnk -> C:\Program Files (x86)\Haali\MatroskaSplitter\gdsmux.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter\Media Splitter Settings.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter\Uninstall.lnk -> C:\Program Files (x86)\Haali\MatroskaSplitter\uninstall.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth\Uninstall Google Earth Plug-in.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GeoSetter\GeoSetter.lnk -> C:\Program Files (x86)\GeoSetter\GeoSetter.exe (Friedemann Schmidt)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin\BaseCamp (2D only).lnk -> C:\Program Files (x86)\Garmin\BaseCamp\BaseCamp.exe (GARMIN Corp.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin\BaseCamp.lnk -> C:\Program Files (x86)\Garmin\BaseCamp\BaseCamp.exe (GARMIN Corp.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin\Garmin Express.lnk -> C:\Program Files (x86)\Garmin\Express\express.exe (Garmin Ltd. or its subsidiaries)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin\MapInstall.lnk -> C:\Program Files (x86)\Garmin\MapInstall\MapInstall.exe (GARMIN Corp.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin\MapSource Manual.lnk -> C:\Program Files (x86)\Garmin\MapInstall\MapsourceManual.pdf (Keine Datei)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin\MapSource.lnk -> C:\Program Files (x86)\Garmin\MapInstall\MapSource.exe (Keine Datei)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin\POI Loader.lnk -> C:\Program Files (x86)\Garmin\POI Loader\POILoader.exe (GARMIN Corp.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin\WebUpdater.lnk -> C:\Program Files (x86)\Garmin\Garmin\WebUpdater\WebUpdater.exe (GARMIN Corp.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FUJITSU - LIFEBOOK Application Panel\Help.lnk -> C:\Program Files\FUJITSU\Application Panel\mlstart.exe (FUJITSU LIMITED)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FUJITSU - LIFEBOOK Application Panel\InitTool.lnk -> C:\Program Files\FUJITSU\Application Panel\QTInit.exe (FUJITSU LIMITED)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FUJITSU - LIFEBOOK Application Panel\Readme.lnk -> C:\Program Files\FUJITSU\Application Panel\mlstart.exe (FUJITSU LIMITED)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FUJITSU - LIFEBOOK Application Panel\Setting.lnk -> C:\Program Files\FUJITSU\Application Panel\QuickTouch.exe (FUJITSU LIMITED)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FUJITSU - Anytime USB Charge Utility\Help.lnk -> C:\Program Files\FUJITSU\USBCharge\PGLauncher.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FUJITSU - Anytime USB Charge Utility\Setting.lnk -> C:\Program Files\FUJITSU\USBCharge\USBChargeMain.exe (FUJITSU LIMITED)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fujitsu\AddOns.lnk -> C:\Fujitsu\AddOns ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fujitsu\AudialsOne Full Version.lnk -> C:\Program Files (x86)\Audials Webinstaller\Audials Webinstaller.exe (Keine Datei)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fujitsu\CorelDRAW Full Version.lnk -> C:\Program Files (x86)\CorelDRAW Webinstaller\CorelDRAW Webinstaller.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fujitsu\DeskUpdate.lnk -> C:\Program Files (x86)\Fujitsu\DeskUpdate\DeskUpdate.exe (Fujitsu Technology Solutions)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fujitsu\eBay.lnk -> C:\Program Files (x86)\eBay\DesktopShortcut\redirect.html ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Family Tree Maker World Express\Family Tree Maker World Express.lnk -> C:\Program Files (x86)\Family Tree Maker World Express\FTM.exe (Ancestry.com)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular\Deinstallation.lnk -> C:\ProgramData\elsterformular\uninstall.exe (Landesfinanzdirektion Thüringen)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular\ElsterFormular.lnk -> C:\Program Files (x86)\ElsterFormular\bin\pica.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular\Hilfe.lnk -> C:\Program Files (x86)\ElsterFormular\bin\hilfepica.exe (Digia Plc and/or its subsidiary(-ies))
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular\Infodatei - Support.lnk -> C:\Program Files (x86)\ElsterFormular\bin\hotlinetool.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular\Installationsverwaltung.lnk -> C:\Program Files (x86)\ElsterFormular\bin\installationsverwaltung.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular\Integritätsprüfer.lnk -> C:\Program Files (x86)\ElsterFormular\bin\integritaetspruefer.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsterFormular\Screenreadermodus.lnk -> C:\Program Files (x86)\ElsterFormular\bin\pica.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ELOoffice\ELOoffice  .lnk -> C:\Program Files (x86)\ELOoffice\ELO32.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ELOoffice\ELOoffice Handbuch.lnk -> C:\Program Files (x86)\ELOoffice\Handbuch.pdf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ELOoffice\ELOoffice Hilfe.lnk -> C:\WINDOWS\system32\HH.EXE (Keine Datei)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ELOoffice\ELOoffice Information.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ELOoffice\ELOoffice Tools\Datenbank komprimieren.lnk -> C:\Program Files (x86)\ELOoffice\ELOMDBCompress.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ELOoffice\ELOoffice Tools\ELO Image Viewer.lnk -> C:\Program Files (x86)\ELOoffice\ELOmmView.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ELOoffice\ELOoffice Tools\ELO Web Updater.lnk -> C:\Program Files (x86)\ELOoffice\UpdateLoader.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ELOoffice\ELOoffice Tools\ELO-Makros deinstallieren.lnk -> C:\Program Files (x86)\ELOoffice\ELOUninstMacros.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ELOoffice\ELOoffice Tools\Makros für neue Benutzer registrieren.lnk -> C:\Program Files (x86)\ELOoffice\RegMacrosForUser.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ELOoffice\ELOoffice Tools\Outlook Addin registrieren.lnk -> C:\Program Files (x86)\ELOoffice\InstEloAddin.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ELOoffice\ELOoffice Tools\Testprogramm für Scanner.lnk -> C:\Program Files (x86)\ELOoffice\ELOScanTest.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ELOoffice\ELOoffice Tools\TIFF Drucker Einstellungen.lnk -> C:\Program Files (x86)\ELOoffice\PrinterConfiguration.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ELOoffice\ELOoffice Tools\Userbezogene Registrierung für Makros löschen.lnk -> C:\Program Files (x86)\ELOoffice\UnregMacrosForUser.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ELOoffice\ELOoffice Tools\Versions-Informationen anzeigen.lnk -> C:\Program Files (x86)\ELOoffice\ELOVersion.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes\VirtualCloneDrive\Anleitung.lnk -> C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\HelpLauncher.exe (Elaborate Bytes AG)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes\VirtualCloneDrive\Uninstall.lnk -> C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\vcd-uninst.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes\VirtualCloneDrive\Virtual CloneDrive Revision History.lnk -> C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\manual\changes_vcd.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes\VirtualCloneDrive\Virtual CloneDrive.lnk -> C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDPrefs.exe (Elaborate Bytes AG)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Drive Bender Client\Drive Bender Console.lnk -> C:\Program Files\Division-M\Drive Bender Client\DriveBenderConsole.exe (Division-M Pty Ltd)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Drive Bender Client\Drive Bender Manager.lnk -> C:\Program Files\Division-M\Drive Bender Client\DriveBenderManager.exe (Division-M Pty Ltd)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Drive Bender Client\License.lnk -> C:\Program Files\Division-M\Drive Bender Client\License_en.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\doPDF 7\doPDF 7 entfernen.lnk -> C:\Program Files\Softland\doPDF 7\unins000.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\doPDF 7\doPDF Help.lnk -> C:\Program Files\Softland\doPDF 7\dopdf7.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\doPDF 7\doPDF.lnk -> C:\Program Files\Softland\doPDF 7\dopdf.exe (Softland)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam 5\CyberLink YouCam 5.lnk -> C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe (CyberLink Corp.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam 5\CyberLink YouCam Mirror.lnk -> C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe (CyberLink Corp.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell\Classic Explorer Settings.lnk -> C:\Program Files\Classic Shell\ClassicExplorerSettings.exe (IvoSoft)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell\Classic IE Settings.lnk -> C:\Program Files\Classic Shell\ClassicIE_32.exe (IvoSoft)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell\Classic Shell Help.lnk -> C:\Program Files\Classic Shell\ClassicShell.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell\Classic Shell Readme.lnk -> C:\Program Files\Classic Shell\ClassicShellReadme.rtf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell\Classic Shell Update.lnk -> C:\Program Files\Classic Shell\ClassicShellUpdate.exe (IvoSoft)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell\Classic Start Menu Settings.lnk -> C:\Program Files\Classic Shell\ClassicStartMenu.exe (IvoSoft)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\Picture Style Editor\Picture Style Editor.lnk -> C:\Program Files (x86)\Canon\Picture Style Editor\PSEditor.exe (CANON INC.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\PhotoStitch\PhotoStitch - INFO.lnk -> C:\Program Files (x86)\Canon\PhotoStitch\Readme.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\PhotoStitch\PhotoStitch.lnk -> C:\Program Files (x86)\Canon\PhotoStitch\STLauncher.exe (Canon Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\Movie Uploader for YouTube\Movie Uploader for YouTube Readme.lnk -> C:\Program Files (x86)\Canon\Movie Uploader for YouTube\ReadMe(MovieUploaderForYouTube).rtf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\ImageBrowser EX\ImageBrowser EX.lnk -> C:\Program Files (x86)\Canon\ImageBrowser EX\ImageBrowserEX.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\ImageBrowser EX\Readme\EOS Video Snapshot Task Readme.lnk -> C:\Program Files (x86)\Canon\EOS Video Snapshot Task\Readme.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\ImageBrowser EX\Readme\ImageBrowser EX - INFO.lnk -> C:\Program Files (x86)\Canon\ImageBrowser EX\Readme(ImageBrowser EX).rtf ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\ImageBrowser EX\Readme\MovieEdit Task Readme.lnk -> C:\Program Files (x86)\Canon\ImageBrowser EX\ReadMeMET.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\EOS Utility\EOS Utility 2 - INFO.lnk -> C:\Program Files (x86)\Canon\EOS Utility\EU2\readme.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\EOS Utility\EOS Utility 2.lnk -> C:\Program Files (x86)\Canon\EOS Utility\EU2\EOS Utility 2.exe (CANON INC.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\EOS Utility\EOS Utility.lnk -> C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe (Canon INC.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities\Digital Photo Professional\Digital Photo Professional.lnk -> C:\Program Files (x86)\Canon\Digital Photo Professional\DPPViewer.exe (CANON INC.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software\Avast Free Antivirus.lnk -> C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (32-bit).lnk -> C:\Windows\SysWOW64\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (64-bit).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis\True Image\Acronis True Image 2015.lnk -> C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageLauncher.exe (Acronis)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis\True Image\Extras und Werkzeuge\Acronis Secure Zone verwalten.lnk -> C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageTools.exe (Acronis)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis\True Image\Extras und Werkzeuge\Acronis Startup Recovery Manager aktivieren.lnk -> C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageTools.exe (Acronis)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis\True Image\Extras und Werkzeuge\Acronis System Report.lnk -> C:\Program Files (x86)\Acronis\TrueImageHome\SystemReport.exe (Acronis)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis\True Image\Extras und Werkzeuge\Bootable Rescue*Media Builder.lnk -> C:\Program Files (x86)\Acronis\TrueImageHome\MediaBuilder.exe (Acronis)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis\True Image\Extras und Werkzeuge\DriveCleanser.lnk -> C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageTools.exe (Acronis)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis\True Image\Extras und Werkzeuge\Laufwerk klonen.lnk -> C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageTools.exe (Acronis)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis\True Image\Extras und Werkzeuge\Neues Laufwerk hinzufügen.lnk -> C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageTools.exe (Acronis)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis\True Image\Extras und Werkzeuge\Systembereinigung.lnk -> C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageTools.exe (Acronis)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sound Recorder.lnk -> C:\Windows\System32\SoundRecorder.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Steps Recorder.lnk -> C:\Windows\System32\psr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Sticky Notes.lnk -> C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Tablet PC\Windows Journal.lnk -> C:\Program Files\Windows Journal\Journal.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip File Manager.lnk -> C:\Program Files\7-Zip\7zFM.exe (Igor Pavlov)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip Help.lnk -> C:\Program Files\7-Zip\7-zip.chm ()
Shortcut: C:\ProgramData\GARMIN\Maps\City Navigator Europe NTU 2016.20.gmap.lnk -> D:\Garmin\Maps\City Navigator Europe NTU 2016.20.gmap ()
Shortcut: C:\Users\Default\Favorites\eBay.lnk -> C:\Program Files (x86)\eBay\DesktopShortcut\redirect-fav.html ()
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk -> C:\Users\Klaus\Dokuments ()
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk -> C:\Users\Klaus\Pictures ()
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Windows.Defender.lnk -> C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)
Shortcut: C:\Users\Klaus\Links\Desktop.lnk -> C:\Users\Klaus\Desktop ()
Shortcut: C:\Users\Klaus\Links\Downloads.lnk -> C:\Users\Klaus\Downloads ()
Shortcut: C:\Users\Klaus\Favorites\Links\Tools\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\Klaus\Favorites\Links\Tools\Revo Uninstaller.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\revouninstaller.exe (VS Revo Group)
Shortcut: C:\Users\Klaus\Favorites\Links\Tools\UltraISO.lnk -> C:\Program Files (x86)\UltraISO\UltraISO.exe (EZB Systems, Inc.)
Shortcut: C:\Users\Klaus\Desktop\Adobe Lightroom.lnk -> C:\Program Files\Adobe\Adobe Lightroom\lightroom.exe (Adobe Systems)
Shortcut: C:\Users\Klaus\Desktop\Kodi Verzeichnis.lnk -> C:\Users\Klaus\AppData\Roaming\Kodi ()
Shortcut: C:\Users\Klaus\Desktop\Kodi.lnk -> C:\Program Files (x86)\Kodi\Kodi.exe (XBMC-Foundation)
Shortcut: C:\Users\Klaus\Desktop\MPTagThat.lnk -> C:\Program Files (x86)\Team MediaPortal\MPTagThat\MPTagThat.exe (Helmut Wahrmann)
Shortcut: C:\Users\Klaus\Desktop\Revo Uninstaller.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe (VS Revo Group)
Shortcut: C:\Users\Klaus\Desktop\SolarAnalyzer.lnk -> C:\Solaranalyzer\SolarAnalyzer_Pro.jar ()
Shortcut: C:\Users\Klaus\Desktop\TV Movie ClickFinder.lnk -> C:\Program Files (x86)\TV Movie\TV Movie ClickFinder\tvstart.exe (E.W.E.-Software)
Shortcut: C:\Users\Klaus\Desktop\Win32DiskImager.lnk -> C:\Users\Klaus\Downloads\Win32 Diskimager\Win32DiskImager.exe ()
Shortcut: C:\Users\Klaus\Desktop\X-Plane.lnk -> D:\X-Plane 10\X-Plane.exe ()
Shortcut: C:\Users\Klaus\Desktop\Programme\3D Vision Photo Viewer.lnk -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvstview.exe (NVIDIA Corporation)
Shortcut: C:\Users\Klaus\Desktop\Programme\AddOns.lnk -> C:\Fujitsu\AddOns ()
Shortcut: C:\Users\Klaus\Desktop\Programme\Adobe Application Manager.lnk -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\core\PDapp.exe (Adobe Systems Incorporated)
Shortcut: C:\Users\Klaus\Desktop\Programme\CorelDRAW Full Version.lnk -> C:\Program Files (x86)\CorelDRAW Webinstaller\CorelDRAW Webinstaller.exe ()
Shortcut: C:\Users\Klaus\Desktop\Programme\CyberLink YouCam 5.lnk -> C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe (CyberLink Corp.)
Shortcut: C:\Users\Klaus\Desktop\Programme\Digital Photo Professional.lnk -> C:\Program Files (x86)\Canon\Digital Photo Professional\DPPViewer.exe (CANON INC.)
Shortcut: C:\Users\Klaus\Desktop\Programme\EOS Utility.lnk -> C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe (Canon INC.)
Shortcut: C:\Users\Klaus\Desktop\Programme\Garmin Express.lnk -> C:\Program Files (x86)\Garmin\Express\express.exe (Garmin Ltd. or its subsidiaries)
Shortcut: C:\Users\Klaus\Desktop\Programme\GeoSetter.lnk -> C:\Program Files (x86)\GeoSetter\GeoSetter.exe (Friedemann Schmidt)
Shortcut: C:\Users\Klaus\Desktop\Programme\Harmony Desktop.lnk -> C:\Windows\Installer\{44A829C9-EC11-4612-A977-37D19114D739}\_19ADAAB96F235F09436FF6.exe ()
Shortcut: C:\Users\Klaus\Desktop\Programme\HarmonyRemote.lnk -> C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe ()
Shortcut: C:\Users\Klaus\Desktop\Programme\HP Solution Center.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\Hpqdirec.exe (Hewlett-Packard Company)
Shortcut: C:\Users\Klaus\Desktop\Programme\ImageBrowser EX.lnk -> C:\Program Files (x86)\Canon\ImageBrowser EX\ImageBrowserEX.exe ()
Shortcut: C:\Users\Klaus\Desktop\Programme\ImgBurn.lnk -> C:\Program Files (x86)\ImgBurn\ImgBurn.exe (LIGHTNING UK!)
Shortcut: C:\Users\Klaus\Desktop\Programme\IrfanView Thumbnails.lnk -> C:\Program Files (x86)\IrfanView\i_view32.exe (Irfan Skiljan)
Shortcut: C:\Users\Klaus\Desktop\Programme\IrfanView.lnk -> C:\Program Files (x86)\IrfanView\i_view32.exe (Irfan Skiljan)
Shortcut: C:\Users\Klaus\Desktop\Programme\Logitech Harmony Remote Software 7.lnk -> C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe ()
Shortcut: C:\Users\Klaus\Desktop\Programme\MediaSuite.lnk -> C:\Fujitsu\AddOns\MediaSuite\setup.exe (Macrovision Corporation                                  )
Shortcut: C:\Users\Klaus\Desktop\Programme\MOBackup.lnk -> C:\Program Files (x86)\MOBackup\mobackup.exe (Heiko Schröder)
Shortcut: C:\Users\Klaus\Desktop\Programme\Picture Style Editor.lnk -> C:\Program Files (x86)\Canon\Picture Style Editor\PSEditor.exe (CANON INC.)
Shortcut: C:\Users\Klaus\Desktop\Programme\RealtimeSync.lnk -> C:\Program Files\FreeFileSync\RealtimeSync.exe (www.FreeFileSync.org)
Shortcut: C:\Users\Klaus\Desktop\Programme\Skype.lnk -> C:\Windows\Installer\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}\SkypeIcon.exe ()
Shortcut: C:\Users\Klaus\Desktop\Programme\UltraISO.lnk -> C:\Program Files (x86)\UltraISO\UltraISO.exe (EZB Systems, Inc.)
Shortcut: C:\Users\Klaus\Desktop\Programme\Virtual CloneDrive.lnk -> C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDPrefs.exe (Elaborate Bytes AG)
Shortcut: C:\Users\Klaus\Desktop\Programme\VLC media player.lnk -> C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN)
Shortcut: C:\Users\Klaus\Desktop\Programme\WOL2.lnk -> C:\Users\Klaus\Downloads\WOL2\WOL2.exe (www.oette.info)
Shortcut: C:\Users\Klaus\AppData\Roaming\VSRevoGroup\RevoUninstaller\ADAU\Finanzmanager 2016 Zahlungserinnerung.lnk -> C:\Windows\Installer\{7429B83A-5AB6-4AEE-A53B-79B9742B9158}\BillMinder.8C5DA79E_7079_4AB3_81F7_712153351D0D.exe (Macrovision Corporation)
Shortcut: C:\Users\Klaus\AppData\Roaming\VSRevoGroup\RevoUninstaller\ADAU\Winsol_Autostart.lnk -> C:\Program Files (x86)\Technische Alternative\Winsol\Winsol.exe (Technische Alternative GmbH)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Windows herunterladen.lnk -> C:\Users\Klaus\AppData\Local\Microsoft\WebSetup\Sources\WebSetup.exe (Microsoft Corporation)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Benutzerhandbuch für die Konsolenversion von RAR.lnk -> C:\Program Files\WinRAR\Rar.txt ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Hilfe zu WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.chm ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Was ist neu in dieser Version.lnk -> C:\Program Files\WinRAR\WhatsNew.txt ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker\README.lnk -> C:\Program Files\Unlocker\README.TXT ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker\Start Unlocker.lnk -> C:\Program Files\Unlocker\Unlocker.exe ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker\Uninstall.lnk -> C:\Program Files\Unlocker\uninst.exe ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker\Website.lnk -> C:\Program Files\Unlocker\Unlocker.url ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TV Movie\TV Movie ClickFinder.lnk -> C:\Program Files (x86)\TV Movie\TV Movie ClickFinder\tvstart.exe (E.W.E.-Software)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TV Movie\Weitere Programme\Abonnement verwalten.lnk -> C:\Program Files (x86)\TV Movie\TV Movie ClickFinder\tvgetabo.exe (E.W.E.-Software)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TV Movie\Weitere Programme\Clickfinder deinstallieren.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TV Movie\Weitere Programme\Datenbank reparieren.lnk -> C:\Program Files (x86)\TV Movie\TV Movie ClickFinder\tvautoconfig.exe (E.W.E.-Software)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TV Movie\Weitere Programme\Erinnerungsmodul starten.lnk -> C:\Program Files (x86)\TV Movie\TV Movie ClickFinder\tvstart.exe (E.W.E.-Software)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TV Movie\Weitere Programme\Start für eingeschränktes Benutzerkonto.lnk -> C:\Program Files (x86)\TV Movie\TV Movie ClickFinder\xpstartrestricted.exe (E.W.E.-Software)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Windows.Defender.lnk -> C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SolarAnalyzer\SolarAnalyzer Pro.lnk -> C:\Windows\SysWOW64\javaws.exe (Keine Datei)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Revo Uninstaller.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe (VS Revo Group)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Run Hunter Mode.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe (VS Revo Group)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Uninstall.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\uninst.exe (VS Revo Group Ltd.)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller\Website.lnk -> C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revo Uninstaller.url ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kodi\Kodi.lnk -> C:\Program Files (x86)\Kodi\Kodi.exe (XBMC-Foundation)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kodi\Uninstall Kodi.lnk -> C:\Program Files (x86)\Kodi\Uninstall.exe ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView\About IrfanView.lnk -> C:\Program Files (x86)\IrfanView\i_about.txt ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView\Available Languages.lnk -> C:\Program Files (x86)\IrfanView\i_languages.txt ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView\Available PlugIns.lnk -> C:\Program Files (x86)\IrfanView\i_plugins.txt ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView\Command line Options.lnk -> C:\Program Files (x86)\IrfanView\i_options.txt ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView\IrfanView - Thumbnails.lnk -> C:\Program Files (x86)\IrfanView\i_view32.exe (Irfan Skiljan)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView\IrfanView 4.38.lnk -> C:\Program Files (x86)\IrfanView\i_view32.exe (Irfan Skiljan)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView\IrfanView Help.lnk -> C:\Program Files (x86)\IrfanView\i_view32.chm ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView\What's New.lnk -> C:\Program Files (x86)\IrfanView\i_changes.txt ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Heiko Schröder Software\MOBackup - Datensicherung für Outlook\Software deinstallieren.lnk -> C:\Program Files (x86)\MOBackup\uninstall.exe ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Garmin\MapSource Manual.lnk -> C:\Program Files (x86)\Garmin\MapsourceManual.pdf ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Garmin\MapSource.lnk -> C:\Program Files (x86)\Garmin\MapSource.exe (GARMIN Corp.)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth-Geräte\TVBluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTWUIExt.exe (Broadcom Corporation.)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth-Geräte\XT1032.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTWUIExt.exe (Broadcom Corporation.)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth\MDR-ZX750BN.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTWUIExt.exe (Broadcom Corporation.)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\aerosoft\Airport Amsterdam\Charts.lnk -> D:\X-Plane 10\Custom Scenery\Aerosoft - EHAM Airport Amsterdam\Charts.pdf ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\aerosoft\Airport Amsterdam\Handbuch.lnk -> D:\X-Plane 10\Custom Scenery\Aerosoft - EHAM Airport Amsterdam\Handbuch.pdf ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\aerosoft\Airport Amsterdam\Manual.lnk -> D:\X-Plane 10\Custom Scenery\Aerosoft - EHAM Airport Amsterdam\Manual.pdf ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\aerosoft\Airport Amsterdam\Uninstall Airport Amsterdam.lnk -> D:\X-Plane 10\Custom Scenery\Aerosoft - EHAM Airport Amsterdam\_Airport Amsterdam_installation\Change Airport Amsterdam Installation.exe (Flexera Software)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\SendTo\ELOoffice.lnk -> C:\Program Files (x86)\ELOoffice\Explorer2Elo.exe ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\ImgBurn.lnk -> C:\Program Files (x86)\ImgBurn\ImgBurn.exe (LIGHTNING UK!)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE (Microsoft Corporation)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Oracle VM VirtualBox.lnk -> C:\Program Files\Oracle\VirtualBox\VirtualBox.exe ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Calculator.lnk -> C:\Windows\System32\calc.exe (Microsoft Corporation)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Family Tree Maker World Express.lnk -> C:\Program Files (x86)\Family Tree Maker World Express\FTM.exe (Ancestry.com)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\GIMP 2.lnk -> C:\Program Files\GIMP 2\bin\gimp-2.8.exe (Spencer Kimball, Peter Mattis and the GIMP Development Team)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Kodi.lnk -> C:\Program Files (x86)\Kodi\Kodi.exe (XBMC-Foundation)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\MediaElch.lnk -> D:\Kodi Dateien\Tools für Mediaserver\Archivierung Tools\Kodi MediaElch-2.3.2\MediaElch.exe ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Outlook 2010.lnk -> C:\Windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\outicon.exe ()
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Winsol.lnk -> C:\Program Files (x86)\Technische Alternative\Winsol\Winsol.exe (Technische Alternative GmbH)

Pauli#01 07.12.2015 22:46
Shortcut Teil 2

Code:
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\WOL2.lnk -> C:\Users\Klaus\Downloads\WOL2\WOL2.exe (www.oette.info)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\cb9f95d7fe6f269b\Finanzmanager 2016.lnk -> C:\Program Files (x86)\Lexware\Finanzmanager\2016\qw.exe (Haufe-Lexware GmbH & Co. KG)
Shortcut: C:\Users\Klaus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\70d1949085541aa\Quicken 2015.lnk -> C:\Program Files (x86)\Lexware\Quicken\2015\qw.exe (Keine Datei)
Shortcut: C:\Users\Klaus\AppData\Roaming\GARMIN\Maps\City Navigator Europe NT 2012.20.gmap.lnk -> D:\Garmin\Maps\City Navigator Europe NT 2012.20.gmap ()
Shortcut: C:\Users\Klaus\AppData\Roaming\GARMIN\Maps\Topo Deutsch 2010 v4_FAMILY_2215.lnk -> D:\Garmin\Maps\Topo Deutsch 2010 v4_FAMILY_2215 ()
Shortcut: C:\Users\Klaus\AppData\Roaming\GARMIN\Maps\TOPO Osterreich v2.gmap.lnk -> D:\Garmin\Maps\TOPO Osterreich v2.gmap ()
Shortcut: C:\Users\Klaus\AppData\Roaming\ClassicShell\Pinned\MapSource.lnk -> C:\Program Files (x86)\Garmin\MapSource.exe (GARMIN Corp.)
Shortcut: C:\Users\Klaus\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Klaus\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Klaus\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Klaus\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Klaus\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()
Shortcut: C:\Users\Klaus\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()
Shortcut: C:\Users\Klaus\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)
Shortcut: C:\Users\Klaus\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)
Shortcut: C:\Users\Klaus\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)
Shortcut: C:\Users\Public\Desktop\Acronis True Image 2015.lnk -> C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageLauncher.exe (Acronis)
Shortcut: C:\Users\Public\Desktop\Digital Photo Professional.lnk -> C:\Program Files (x86)\Canon\Digital Photo Professional\DPPViewer.exe (CANON INC.)
Shortcut: C:\Users\Public\Desktop\Drive Bender Manager.lnk -> C:\Program Files\Division-M\Drive Bender Client\DriveBenderManager.exe (Division-M Pty Ltd)
Shortcut: C:\Users\Public\Desktop\ELOoffice.lnk -> C:\Program Files (x86)\ELOoffice\ELO32.exe ()
Shortcut: C:\Users\Public\Desktop\ElsterFormular.lnk -> C:\Program Files (x86)\ElsterFormular\bin\pica.exe ()
Shortcut: C:\Users\Public\Desktop\F-Editor.lnk -> C:\Program Files (x86)\Technische Alternative\F-Editor\F-Editor.exe ()
Shortcut: C:\Users\Public\Desktop\Family Tree Maker World Express.lnk -> C:\Program Files (x86)\Family Tree Maker World Express\FTM.exe (Ancestry.com)
Shortcut: C:\Users\Public\Desktop\Finanzmanager 2016.lnk -> C:\Windows\Installer\{7429B83A-5AB6-4AEE-A53B-79B9742B9158}\NewShortcut6.8C5DA79E_7079_4AB3_81F7_712153351D0D.exe (Macrovision Corporation)
Shortcut: C:\Users\Public\Desktop\FreeFileSync.lnk -> C:\Program Files\FreeFileSync\FreeFileSync.exe (www.FreeFileSync.org)
Shortcut: C:\Users\Public\Desktop\Intel(R) Driver Update Utility 2.0.lnk -> C:\Program Files (x86)\Intel Driver Update Utility\DriverUpdateUI.exe (Intel)
Shortcut: C:\Users\Public\Desktop\Intel(R) HD Graphics Control Panel.lnk -> C:\Windows\System32\GfxUIEx.exe (Intel Corporation)
Shortcut: C:\Users\Public\Desktop\iTunes.lnk -> C:\Program Files\iTunes\iTunes.exe (Apple Inc.)
Shortcut: C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk -> C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe (Malwarebytes)
Shortcut: C:\Users\Public\Desktop\Mp3tag.lnk -> C:\Program Files (x86)\Mp3tag\Mp3tag.exe (Florian Heidenreich)
Shortcut: C:\Users\Public\Desktop\MyPhoneExplorer.lnk -> C:\Program Files (x86)\MyPhoneExplorer\MyPhoneExplorer.exe (F.J. Wechselberger)
Shortcut: C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk -> C:\Program Files\Oracle\VirtualBox\VirtualBox.exe ()
Shortcut: C:\Users\Public\Desktop\Sonos.lnk -> C:\Program Files (x86)\Sonos\Sonos.exe (Sonos, Inc.)
Shortcut: C:\Users\Public\Desktop\TA-Designer.lnk -> C:\Program Files (x86)\Technische Alternative\TA-Designer\TA-Designer.exe (Technische Alternative GmbH)
Shortcut: C:\Users\Public\Desktop\Tapps2.lnk -> C:\Program Files (x86)\Technische Alternative\Tapps2\Tapps2.exe (Technische Alternative GmbH)
Shortcut: C:\Users\Public\Desktop\Total Commander 64 bit.lnk -> C:\totalcmd\TOTALCMD64.EXE (Ghisler Software GmbH)
Shortcut: C:\Users\Public\Desktop\Winsol.lnk -> C:\Program Files (x86)\Technische Alternative\Winsol\Winsol.exe (Technische Alternative GmbH)
Shortcut: C:\Users\Public\Desktop\WISO Hausverwalter 2016.lnk -> C:\Program Files (x86)\Buhl\WISO Hausverwalter 2016\hv2016.exe ()
Shortcut: C:\Users\Public\Desktop\WISO steuer Sparbuch 2016.lnk -> C:\Program Files (x86)\WISO\Steuersoftware 2016\wiso2016.exe ()
Shortcut: C:\Users\Public\Desktop\X2-Simulator.lnk -> C:\Program Files (x86)\Technische Alternative\X2-Simulator\X2-Simulator.exe (Technische Alternative GmbH)




ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk -> C:\Windows\System32\rundll32.exe (Microsoft Corporation) -> -sta {C90FB8CA-3295-4462-A721-2935E83694BA}
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - Network Connections.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> ::{7007ACC7-3202-11D1-AAD2-00805FC1270E}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\06 - System.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.System
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\08 - Power Options.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.PowerOptions
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\10 - Programs and Features.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.ProgramsAndFeatures
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> /e,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}
ShortcutWithArgument: C:\Users\Klaus\Favorites\Links\Tools\Logitech Harmony Remote Software 7.lnk -> C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe () -> /launchbrowser
ShortcutWithArgument: C:\Users\Klaus\AppData\Roaming\VSRevoGroup\RevoUninstaller\ADCU\EOS Utility.lnk -> C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe (Canon INC.) -> /AutoStartUp
ShortcutWithArgument: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\SendTo\Skype.lnk -> C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Technologies S.A.) -> /sendto:
ShortcutWithArgument: C:\Users\Klaus\AppData\Roaming\ClassicShell\Pinned\startscreen.lnk -> C:\Program Files\Classic Shell\ClassicStartMenu.exe (IvoSoft) -> -togglenew
ShortcutWithArgument: C:\Users\Klaus\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - Network Connections.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> ::{7007ACC7-3202-11D1-AAD2-00805FC1270E}
ShortcutWithArgument: C:\Users\Klaus\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager
ShortcutWithArgument: C:\Users\Klaus\AppData\Local\Microsoft\Windows\WinX\Group3\06 - System.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.System
ShortcutWithArgument: C:\Users\Klaus\AppData\Local\Microsoft\Windows\WinX\Group3\08 - Power Options.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.PowerOptions
ShortcutWithArgument: C:\Users\Klaus\AppData\Local\Microsoft\Windows\WinX\Group3\10 - Programs and Features.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.ProgramsAndFeatures
ShortcutWithArgument: C:\Users\Klaus\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Klaus\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Klaus\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> /e,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}
ShortcutWithArgument: C:\Users\Klaus\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0
ShortcutWithArgument: C:\Users\Klaus\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}


InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WISO steuer Sparbuch 2016\Hilfen\WISO steuer Sparbuch 2016 Online-Hilfe.url -> hxxp://www.buhl.de/go/325
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WISO Hausverwalter 2016\Hilfen\WISO Hausverwalter 2016 Online-Hilfe.url -> hxxp://www.buhl.de/go/1
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMerge\WinMerge im Internet.url -> hxxp://winmerge.org/
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraISO\UltraISO Online Order.url -> hxxp://www.ezbsystems.com/ultraiso/order.htm
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraISO\UltraISO Web Site.url -> hxxp://www.ezbsystems.com/index.php
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm\Auf neue Version prüfen.url -> file:///C:/Program%20Files%20(x86)/Siber%20Systems/AI%20RoboForm/Auf%20neue%20Version%20pr%FCfen.lnk
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm\Deinstallieren.url -> file:///C:/Program%20Files%20(x86)/Siber%20Systems/AI%20RoboForm/Deinstallieren.lnk
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm\Passwortgenerator.url -> file:///C:/Program%20Files%20(x86)/Siber%20Systems/AI%20RoboForm/Passwortgenerator.lnk
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm\RoboForm Editor.url -> file:///C:/Program%20Files%20(x86)/Siber%20Systems/AI%20RoboForm/RoboForm%20Editor.lnk
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm\RoboForm kaufen.url -> hxxps://www.roboform.com/php/pums/rfprepay.php?lic=upgrade_rf7&upgrade=yes&lang=de
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm\Suche.url -> file:///C:/Program%20Files%20(x86)/Siber%20Systems/AI%20RoboForm/Suche.lnk
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm\Suchfeld.url -> file:///C:/Program%20Files%20(x86)/Siber%20Systems/AI%20RoboForm/Suchfeld.lnk
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RoboForm\Symbol in der Taskleiste.url -> file:///C:/Program%20Files%20(x86)/Siber%20Systems/AI%20RoboForm/Symbol%20in%20der%20Taskleiste.lnk
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag\Mp3tag Website.url -> hxxp://www.mp3tag.de
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters\Visit LAV Filters Home Page.url -> hxxp://1f0.de/
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters\Visit LAV Filters on Doom9.url -> hxxp://forum.doom9.org/showthread.php?t=156191
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Besuchen Sie Java.com.url -> hxxp://java.com/
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Hilfe aufrufen.url -> hxxp://java.com/help
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fujitsu\Manual.url -> hxxp://support.ts.fujitsu.com/FTSWinHelp.asp?action=manual^lng
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fujitsu\Service Shop.url -> hxxp://www.fujitsu.com/fts/pack
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fujitsu\Web Privacy.url -> hxxp://www.idgard.de/fujitsu
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis\True Image\Benutzeranleitung.url -> hxxp://download.acronis.com/pdf/ATI2015_userguide_de-DE.pdf
InternetURL: C:\Users\Default\Favorites\Manual.url -> hxxp://support.ts.fujitsu.com/FTSWinHelp.asp?action=manual^lng
InternetURL: C:\Users\Default\Favorites\Service Shop.url -> hxxp://www.fujitsu.com/fts/pack
InternetURL: C:\Users\Default\Favorites\Web Privacy.url -> hxxp://www.idgard.de/fujitsu
InternetURL: C:\Users\Klaus\Favorites\.  GRAVUR SHOP  . Gravur, Lasergravur, Schlüsselanhänger, Schilder,.URL -> hxxp://www.gravur-shop.at/
InternetURL: C:\Users\Klaus\Favorites\. . insiderdaten.de . . . Infopool für meldepflichtige Wertpapiergeschäfte (Directors Dealings). .URL -> hxxp://www.insiderdaten.de/index.htm?/dbtest.php
InternetURL: C:\Users\Klaus\Favorites\4phones.de - Handy-Preisvergleich mit umfangreicher Handy-Datenbank.URL -> hxxp://www.4phones.de/
InternetURL: C:\Users\Klaus\Favorites\7  LCD VGA Touchscreen Monitor CM13 - Carlights.de.URL -> hxxp://www.carlights.de/stand-einbau-monitore/7-tft-touchscreen-monitor-cm132.html
InternetURL: C:\Users\Klaus\Favorites\All Music.URL -> hxxp://www.allmusic.com/
InternetURL: C:\Users\Klaus\Favorites\Altmühltal-Radweg - Naturpark Altmühltal.URL -> hxxp://www.naturpark-altmuehltal.de/wege/altmuehltal-radweg-166/
InternetURL: C:\Users\Klaus\Favorites\Anhängerkupplung Fahrradträger Anhängerkupplungen Dachträger Anhängerkupplungen Fahrradträger Heckträger Lastenträger Kupplungsträger Thule.URL -> hxxp://www.ahk-preisbrecher.de/2003/enter.html
InternetURL: C:\Users\Klaus\Favorites\Bing.url -> hxxp://go.microsoft.com/fwlink/p/?LinkId=255142
InternetURL: C:\Users\Klaus\Favorites\das ELKO - Elektronik Forum.URL -> hxxp://www.elektronik-kompendium.de/forum/board.php?page=0&category=all&order=last_answer&descasc=DESC
InternetURL: C:\Users\Klaus\Favorites\Ethernet Kabel.URL -> hxxp://de.wikipedia.org/wiki/Auflegestandard
InternetURL: C:\Users\Klaus\Favorites\Fahrrad, Rennrad -Karten basierend auf Openstreetmap.url -> hxxp://www.velomap.org/de/download/
InternetURL: C:\Users\Klaus\Favorites\Fujitsu Technology Solutions - Home.url -> hxxp://www.fujitsu.com/fts
InternetURL: C:\Users\Klaus\Favorites\Fujitsu Technology Solutions - Shop.url -> hxxp://shop.fujitsu.com/
InternetURL: C:\Users\Klaus\Favorites\Fujitsu Technology Solutions - Support.url -> hxxp://www.fujitsu.com/fts/support
InternetURL: C:\Users\Klaus\Favorites\How to do Radpflege...Finish Line.URL -> hxxp://www.fahrrad-gruber.de/technik/howtodo03a.htm
InternetURL: C:\Users\Klaus\Favorites\Höfer Chemie GmbH-Saarbrücken  Wir verkaufen algicid, algenvernichter, algenex.URL -> hxxp://stores.ebay.de/Hofer-Chemie-GmbH_W0QQcolZ4QQdirZQ2d1QQfsubZQ2d999QQftidZ2QQtZkm
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Add-ons herunterladen (Aus Firefox).URL -> hxxps://de.add-ons.mozilla.com/de/firefox/bookmarks/
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Add-ons herunterladen.URL -> hxxp://de.add-ons.mozilla.com/de/firefox/bookmarks/
InternetURL: C:\Users\Klaus\Favorites\PayPal.URL -> hxxp://www.paypal.de/de
InternetURL: C:\Users\Klaus\Favorites\verivox Stromtarife Gaspreise Telefontarife DSL-Tarife Internettarife Handytarife im Vergleich.URL -> hxxp://www.verivox.de/
InternetURL: C:\Users\Klaus\Favorites\Windows 7 vom USB Stick booten.URL -> hxxp://www.ms-windows-seven.de/windows-7-vom-usb-stick-booten/
InternetURL: C:\Users\Klaus\Favorites\Wordpress fabi.URL -> hxxp://fabi.me/
InternetURL: C:\Users\Klaus\Favorites\헠ƣsortierte Lesezeichen\Home Server Blog » HowTo  Livenode konfigurieren.URL -> hxxp://www.home-server-blog.de/howtos/konfiguration/howto-livenode-konfigurieren/
InternetURL: C:\Users\Klaus\Favorites\헠ƣsortierte Lesezeichen\PC-Experience - Das IT-Portal für Tests, Artikel und Problemlösungen -  Artikel und Workshops für Windows 7.URL -> hxxp://www.pc-experience.de/wbb2/board.php?boardid=102&sid=6d3d4bbe26979c28ef8c7171bc75e7b5
InternetURL: C:\Users\Klaus\Favorites\헠ƣsortierte Lesezeichen\SATURN München Theresienhöhe - LCD-TVs.URL -> hxxp://www2.saturn.de/webapp/wcs/stores/servlet/main?langId=-3&storeId=19652&catalogId=20142&categoryId=113055&parentCategory=113052&topCategory=113051&ok=T_PRODUCTS&uk=uwg&sort=manu_name&currentPage=1&compareList=
InternetURL: C:\Users\Klaus\Favorites\Ýùáãúsortierte Lesezeichen\FRITZ!Box.URL -> hxxp://fritz.box/
InternetURL: C:\Users\Klaus\Favorites\Ýùáãúsortierte Lesezeichen\Speedtest  Ihre Auswertung.URL -> hxxp://www.wieistmeineip.de/speedtest/ergebnis.php?806bc1dac0d059dc6428218f27512063ce5b85b7dff92746e93aaecf996a8bdb49c8a2740387d5d6ecd0deb5059fd40c3952cb20db4d0e66f13532a0752760c7c839477f8646f369ec348890d9104c033b108dfddc6fdc061ae80fbdaf885b673574a2a815a52922f548187058b79a05e6f5f553d57aa8e171dc4251028b74de1058940d3592708f822d17a61221fff3
InternetURL: C:\Users\Klaus\Favorites\_Transalp\trans-atlas.de - Startseite Alpenüberquerung.URL -> hxxp://www.trans-atlas.de/alpencross/
InternetURL: C:\Users\Klaus\Favorites\_Harmony\FHZ-Forum - HomeMatic-Forum Index.URL -> hxxp://fhz-forum.de/index.php
InternetURL: C:\Users\Klaus\Favorites\_Harmony\Harmony-Remote-Forum.de ÔÇó Portal.URL -> hxxp://harmony-remote-forum.de/portal.php?sid=1af567559d1913b7ec2192a7d52729fc
InternetURL: C:\Users\Klaus\Favorites\_Harmony\HIFI-FORUM  Hififorum fuer Audio, Hifi, High End, Musik, Stereo, TV, Surround und Heimkino und Car-Hifi.URL -> hxxp://www.hifi-forum.de/
InternetURL: C:\Users\Klaus\Favorites\_Harmony\IP-Symcon - switch control software.URL -> hxxp://www.ipsymcon.de/index.html
InternetURL: C:\Users\Klaus\Favorites\_Harmony\IR Trans - OEM.URL -> hxxp://www.irtrans.de/de/oem/
InternetURL: C:\Users\Klaus\Favorites\_Harmony\Logitech Forums - Logitech Forums.URL -> hxxp://forums.logitech.com/
InternetURL: C:\Users\Klaus\Favorites\_Harmony\Logitech Partnerportal.URL -> hxxp://80.237.203.80/content/index.php?module=pagesetter&tid=4
InternetURL: C:\Users\Klaus\Favorites\_Harmony\Logitech® Harmony® Member Web (members.HarmonyRemote.com).URL -> hxxp://members.harmonyremote.com/EasyZapper/New/Main.asp?WebProcessAction=Start&ClassId=HarmonyProcess%2EProcLogin&RelativePath=ProcLogin%2F&ReturnUrl=%2FEasyZapper%2FUserHome%2Easp&AccountType=Normal&Error=&UserName=&Password=&BrowserType=Mozilla%2F4%2E0%20%28compatible%3B%20MSIE%207%2E0%3B%20Windows%20NT%205%2E1%3B%20InfoPath%2E2%3B%20%2ENET%20CLR%202%2E0%2E50727%29
InternetURL: C:\Users\Klaus\Favorites\_Harmony\LYNGSAT LOGO - Satellite Broadcast Logos.URL -> hxxp://www.lyngsat-logo.com/index.html
InternetURL: C:\Users\Klaus\Favorites\_Harmony\robotikhardware.de - Boards, Bausätze und Bauteile für den Robotik-, Microcontroller-Bereich.URL -> hxxp://www.shop.robotikhardware.de/shop/catalog/impressum.php?osCsid=5fd98963d7c79f34a699ced05a7df051
InternetURL: C:\Users\Klaus\Favorites\_Harmony\speedbomb.de - myHTPC.URL -> hxxp://www.speedbomb.de/hobby/myhtpc/index.php?view=logosradio
InternetURL: C:\Users\Klaus\Favorites\Windows7\Kategorie Windows Client.URL -> hxxp://social.technet.microsoft.com/Forums/de-DE/category/windowsclient?prof=required
InternetURL: C:\Users\Klaus\Favorites\Windows7\UNAWAVE - Startseite.URL -> hxxp://www.unawave.de/
InternetURL: C:\Users\Klaus\Favorites\Windows Live\Windows Live Gallery.url -> hxxp://go.microsoft.com/fwlink/?LinkId=70742
InternetURL: C:\Users\Klaus\Favorites\Windows Live\Windows Live Ideas.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72700
InternetURL: C:\Users\Klaus\Favorites\Windows Live\Windows Live Mail.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72681
InternetURL: C:\Users\Klaus\Favorites\Windows Live\Windows Live Spaces.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72682
InternetURL: C:\Users\Klaus\Favorites\WHS\.  Daniel Melanchthon  .  Robocopy GUI.URL -> hxxp://blogs.technet.com/dmelanchthon/archive/2006/10/30/robocopy-gui.aspx
InternetURL: C:\Users\Klaus\Favorites\WHS\4homepages - 4images Image Gallery Management System.URL -> hxxp://www.4homepages.de/
InternetURL: C:\Users\Klaus\Favorites\WHS\AI TechnoCore CoreBlog - DrashnaÔÇÖs personal blog.URL -> hxxps://technocore.homeserver.com/blog/
InternetURL: C:\Users\Klaus\Favorites\WHS\Bei den wilden Lindemännern zuHause! » WSUS 3.0 auf dem Windows Home Server.URL -> hxxp://www.lindemaenner.de/2008/windows-home-server/wsus-30-auf-dem-windows-home-server-whs-2/
InternetURL: C:\Users\Klaus\Favorites\WHS\Bjoerns Windows Blog.URL -> hxxp://blog.buerstinghaus.net/
InternetURL: C:\Users\Klaus\Favorites\WHS\Documentation « MS Windows Home Server.URL -> hxxp://mswhs.com/documentation/
InternetURL: C:\Users\Klaus\Favorites\WHS\Free Home Edition  Landing Pages  Produktüberblick  Unsere Produkte  Astaro - Astaro.URL -> hxxp://www.astaro.de/our_products/product_overview/landing_pages/free_home_edition
InternetURL: C:\Users\Klaus\Favorites\WHS\Gallery  Your photos on your website.URL -> hxxp://gallery.menalto.com/
InternetURL: C:\Users\Klaus\Favorites\WHS\Gallery -- 4images  Funpic.de.URL -> hxxp://www.funpic.de/forum/webhosting/topic,710,-gallery----4images.html
InternetURL: C:\Users\Klaus\Favorites\WHS\Home - Home Server Land.URL -> hxxp://www.homeserverland.com/default.aspx
InternetURL: C:\Users\Klaus\Favorites\WHS\Home Server Blog » Add-Ins.URL -> hxxp://www.home-server-blog.de/add-ins/
InternetURL: C:\Users\Klaus\Favorites\WHS\Home Server Plus.URL -> hxxp://www.whsplus.com/
InternetURL: C:\Users\Klaus\Favorites\WHS\Home Server Projekt.URL -> hxxp://home-server-projekt.de/index.php?option=com_content&view=frontpage&Itemid=1
InternetURL: C:\Users\Klaus\Favorites\WHS\Homeserver Forum • Foren-Übersicht.URL -> hxxp://forum.home-server-blog.de/index.php
InternetURL: C:\Users\Klaus\Favorites\WHS\How To Configure PassivePortRange In IIS.URL -> hxxp://support.microsoft.com/?scid=kb%3Ben-us%3B555022&x=14&y=12
InternetURL: C:\Users\Klaus\Favorites\WHS\MediaWiki de - MediaWiki.URL -> hxxp://www.mediawiki.org/wiki/MediaWiki/de
InternetURL: C:\Users\Klaus\Favorites\WHS\Multi-Homing mit IIS  TecChannel.de.URL -> hxxp://www.tecchannel.de/webtechnik/webserver/431942/multi_homing_mit_iis/
InternetURL: C:\Users\Klaus\Favorites\WHS\My DynDNS.com Account  My Services.URL -> hxxps://www.dyndns.com/account/services/
InternetURL: C:\Users\Klaus\Favorites\WHS\MySQL  Installation und Integration unter Windows Home Server - Netzwerktotal.de.URL -> hxxp://www.netzwerktotal.de/whsmysql.htm
InternetURL: C:\Users\Klaus\Favorites\WHS\PC-Experience - Das IT-Portal für Tests, Artikel und Problemlösungen -.URL -> hxxp://www.pc-experience.de/wbb2/Artikelarchiv11.php
InternetURL: C:\Users\Klaus\Favorites\WHS\PHP  Integration unter Windows Home Server (IIS 6.0) - Netzwerktotal.de.URL -> hxxp://www.netzwerktotal.de/whsphp.htm
InternetURL: C:\Users\Klaus\Favorites\WHS\Using WebDAV with IIS.URL -> hxxp://www.windowsnetworking.com/articles_tutorials/WebDAV-IIS.html
InternetURL: C:\Users\Klaus\Favorites\WHS\Vista Bootmanager nachträglich installieren - drvista.de.URL -> hxxp://www.drvista.de/windows-vista-allgemein/453-vista-bootmanager-nachtraeglich-installieren.html
InternetURL: C:\Users\Klaus\Favorites\WHS\WHS Add-ins Page Added - We Got Served - The Windows Home Server Site  We Got Served.URL -> hxxp://www.wegotserved.co.uk/2007/05/18/whs-add-ins-page-added/
InternetURL: C:\Users\Klaus\Favorites\WHS\Windows Home Server  Installationsbericht ÔÇô Windows Live.URL -> hxxp://schmidtke-sh.spaces.live.com/blog/cns!966B26A11278266E!331.entry
InternetURL: C:\Users\Klaus\Favorites\WHS\Windows Home Server Add-Ins.URL -> hxxp://forum.wegotserved.co.uk/index.php?autocom=downloads
InternetURL: C:\Users\Klaus\Favorites\WHS\Windows Home Server Cleanup Tool.URL -> hxxp://calvin-au.com/whscleanup/
InternetURL: C:\Users\Klaus\Favorites\WHS\Windows Server How-To Guides  Home - ServerHowTo.de.URL -> hxxp://www.serverhowto.de/Home.64.0.html
InternetURL: C:\Users\Klaus\Favorites\WHS\Wänä´s Hausautomation – Windows Live.URL -> hxxp://aich-ffb.spaces.live.com/
InternetURL: C:\Users\Klaus\Favorites\Web2Date\artmedic Freeware PHP-Scripts.URL -> hxxp://www.artmedic-phpscripts.de/index.php?page=1250064417&f=1&i=734394556&s=1250064417
InternetURL: C:\Users\Klaus\Favorites\Web2Date\chCounter - Der Onlinebesucherzähler  Der Counter mit umfangreicher Statistik.URL -> hxxp://chcounter.org/
InternetURL: C:\Users\Klaus\Favorites\Web2Date\CMS - Ganz einfach.URL -> hxxp://www.cms-ganz-einfach.net/
InternetURL: C:\Users\Klaus\Favorites\Web2Date\Content ein- zweispaltig.URL -> hxxp://www.gewisoft.de/tipps/content/index.php
InternetURL: C:\Users\Klaus\Favorites\Web2Date\Create your Google Sitemap Online - XML Sitemaps.URL -> hxxp://www.xml-sitemaps.com/
InternetURL: C:\Users\Klaus\Favorites\Web2Date\CSS 4 You - The Finest in Stylesheets.URL -> hxxp://www.css4you.de/
InternetURL: C:\Users\Klaus\Favorites\Web2Date\DA-Software - professionelle Software, Freeware, Shareware, PHP-Scripte.URL -> hxxp://www.da-software.de/daform/daform_start.htm
InternetURL: C:\Users\Klaus\Favorites\Web2Date\Download Counter.URL -> hxxp://www.e-consultance.de/services/downloads/downloadcounter.php
InternetURL: C:\Users\Klaus\Favorites\Web2Date\Download.URL -> hxxp://www.naeg-computer.com/download/index.php
InternetURL: C:\Users\Klaus\Favorites\Web2Date\EcomBiz - Startseite.URL -> hxxp://www.ecombiz.de/
InternetURL: C:\Users\Klaus\Favorites\Web2Date\Familie Kohlbrok    Tipps & Tricks.URL -> hxxp://www.kohlbrok.com/michael/web2date/tippstricks/index.php
InternetURL: C:\Users\Klaus\Favorites\Web2Date\Forum Board Shoutbox Newssystem Newsletter Kontaktformular kostenlos - fueralles.de HomepageTools.URL -> hxxp://www.fueralles.de/
InternetURL: C:\Users\Klaus\Favorites\Web2Date\Herzlich Willkommen bei mm cyberdesign.URL -> hxxp://www.mm-cyberdesign.de/
InternetURL: C:\Users\Klaus\Favorites\Web2Date\Hilfsmittel - TYPO3 CMS - Webdesign - TYPO3 Hosting Webhosting Domain Registration Webdesign Webdevelopment by Riccabona eSolutions.URL -> hxxp://www.riccabona.info/webdesign/typo3-enterprise-cms/typo3-werkzeuge-hilfsmittel.html
InternetURL: C:\Users\Klaus\Favorites\Web2Date\http  w2d-designs.de index.php.URL -> hxxp://www.varia.robidesign.de/events/feste/index.html
InternetURL: C:\Users\Klaus\Favorites\Web2Date\JavaScripts bei jswelt.de - die java scripte-sammlung in deutsch - alles kostenlos!.URL -> hxxp://www.jswelt.de/index.php?opencat=JavaScripts
InternetURL: C:\Users\Klaus\Favorites\Web2Date\Krenotiv.URL -> hxxp://www.krenovativ.de/web2date/downloads/sitemap.php
InternetURL: C:\Users\Klaus\Favorites\Web2Date\liveThumb.URL -> hxxp://livethumb.de/
InternetURL: C:\Users\Klaus\Favorites\Web2Date\PHP Script resource - Mysql Scripte Webhosting PHP Code Tutorials Webmaster Jobs Anfänger lernen.URL -> hxxp://www.php-resource.de/
InternetURL: C:\Users\Klaus\Favorites\Web2Date\Popbox.URL -> hxxp://www.gewisoft.de/tipps/popbox/index.php
InternetURL: C:\Users\Klaus\Favorites\Web2Date\RS-ACP.URL -> hxxp://www.rs-studio.at/w2d/rsacp/index.php
InternetURL: C:\Users\Klaus\Favorites\Web2Date\rsacp rs-acp video audio etsdorf fasching dvd cd w2d scripts.URL -> hxxp://www.rs-studio.at/index.php
InternetURL: C:\Users\Klaus\Favorites\Web2Date\Serve-Script.URL -> hxxp://www.hummel1.de/
InternetURL: C:\Users\Klaus\Favorites\Web2Date\Skyline.URL -> hxxp://www.skyline.robidesign.de/
InternetURL: C:\Users\Klaus\Favorites\Web2Date\Verzeichnisse schützen.URL -> hxxp://www.drweb.de/htaccess/zugriffsschutz_1.shtml
InternetURL: C:\Users\Klaus\Favorites\Web2Date\W. K r a w i k ÔÇó Valide Websites mit W2d ÔÇó CCML-Platzhalter.URL -> hxxp://www.webdesignconsult.de/webtodateaufdempruefstand/w2dgenerator/arbeitenmitdentemplates/platzhalter/ccmlplatzhalter.php#titletop
InternetURL: C:\Users\Klaus\Favorites\Web2Date\w2d Schulungsseite    w2d-schulungsseiten.URL -> hxxp://www.svenruelke-berlin.de/schulungsseiten/index.php
InternetURL: C:\Users\Klaus\Favorites\Web2Date\Wacker Art RGB Color Mixer - Farbmixer Colors.URL -> hxxp://www.wackerart.de/mixer.html
InternetURL: C:\Users\Klaus\Favorites\Web2Date\Webtodate - Tipps & Tricks.URL -> hxxp://www.realtime-solutions.de/webdesign/webtodate/
InternetURL: C:\Users\Klaus\Favorites\Web2Date\WordPress Deutschland.URL -> hxxp://wordpress-deutschland.org/
InternetURL: C:\Users\Klaus\Favorites\Web2Date\X to date    Home.URL -> hxxp://w2d-forum.de/
InternetURL: C:\Users\Klaus\Favorites\Web2Date\X-Stat.de.URL -> hxxp://www.x-stat.de/
InternetURL: C:\Users\Klaus\Favorites\Vista\Microsoft TechNet Windows Sysinternals.URL -> hxxp://www.microsoft.com/technet/sysinternals/default.mspx
InternetURL: C:\Users\Klaus\Favorites\Vista\Windows Gerätemanager Alle nichtaktiven Geräte anzeigen.URL -> hxxp://www.tippscout.de/windows-ger%E4temanager-alle-nichtaktiven-ger%E4te-anzeigen_tipp_3369.html
InternetURL: C:\Users\Klaus\Favorites\Vista\WinFuture.de - Das Windows Online Magazin.URL -> hxxp://www.winfuture.de/vista
InternetURL: C:\Users\Klaus\Favorites\Video\Arbeitskreis EditionDV Neues aus dem EditionDV-Land RundInfo004-2005 Neues LE-Buch.URL -> hxxp://www.sprungziel.de/wbb/wbboard/hmportal.php
InternetURL: C:\Users\Klaus\Favorites\Video\Arturia, JLCooper und Contour Design Distributor Tomeso - Tomorrows Media Solutions.URL -> hxxp://www.tomeso.de/content.asp?lid=1&sdid=0&did0=1&wpid=19&mgid=48&ptid=0&pid=0
InternetURL: C:\Users\Klaus\Favorites\Video\Avid Community Exchange - Avid Liquid - Avid Liquid Pro.URL -> hxxp://www.avid.com/exchange/forums/54/ShowForum.aspx
InternetURL: C:\Users\Klaus\Favorites\Video\Cool Text Logo and Graphics Generator.URL -> hxxp://cooltext.com/
InternetURL: C:\Users\Klaus\Favorites\Video\DDE Dialog GmbH.URL -> hxxp://www.dde-dialog.de/index.html
InternetURL: C:\Users\Klaus\Favorites\Video\Digital Camera Reviews and News Digital Photography Review Forums, Glossary, FAQ.URL -> hxxp://www.dpreview.com/
InternetURL: C:\Users\Klaus\Favorites\Video\digital Fernsehen digital Tv Technik Forum Startseite.URL -> hxxp://www.dvb-team.biz/index.php
InternetURL: C:\Users\Klaus\Favorites\Video\digitalkamera.de -- Das Online-Magazin zur Digitalfotografie.URL -> hxxp://www.digitalkamera.de/
InternetURL: C:\Users\Klaus\Favorites\Video\digitalschnitt - magic multi media.URL -> hxxp://www.digitalschnitt.de/produkte/software/multicam.htm
InternetURL: C:\Users\Klaus\Favorites\Video\Download CPR.URL -> hxxp://www.avid.com/onlinesupport/downloadcpr.asp
InternetURL: C:\Users\Klaus\Favorites\Video\DVBmagic Forum.URL -> hxxp://forum.dvbmagic.de/
InternetURL: C:\Users\Klaus\Favorites\Video\DVDlab PRO DVD authoring tool for advanced users.URL -> hxxp://www.mediachance.com/dvdlab/dvdlabpro.html
InternetURL: C:\Users\Klaus\Favorites\Video\FindSounds - Sound Types.URL -> hxxp://www.findsounds.com/types.html
InternetURL: C:\Users\Klaus\Favorites\Video\Free HFX  Hollywood FX gratuits  DV FX.URL -> hxxp://declic-video-fx.com/Default.aspx?tabId=56&language=en-US
InternetURL: C:\Users\Klaus\Favorites\Video\Homepage of DVdate.URL -> hxxp://paul.glagla.free.fr/dvdate_en.htm
InternetURL: C:\Users\Klaus\Favorites\Video\http--media-convert.com-konvertieren-.URL -> hxxp://media-convert.com/konvertieren/
InternetURL: C:\Users\Klaus\Favorites\Video\Index VFX-Forum.de - get visually effected!.URL -> hxxp://www.vfx-forum.de/index.php
InternetURL: C:\Users\Klaus\Favorites\Video\jahshaka.org - Powering the New Hollywood - Home.URL -> hxxp://www.jahshaka.org/content/blogcategory/1/46/
InternetURL: C:\Users\Klaus\Favorites\Video\JVC-Rekorder HR-DVS2 an Firewirekarte.URL -> hxxp://www.slashcam.de/info/JVC-Rekorder-HR-DVS2-an-Firewirekarte-6414.html
InternetURL: C:\Users\Klaus\Favorites\Video\Lichtverhältnisse.URL -> hxxp://www.movie-college.de/filmschule/licht/lichtverhaeltnisse.htm
InternetURL: C:\Users\Klaus\Favorites\Video\MainConcept Video Editing, Compositing, Animation and Codecs.URL -> hxxp://www.mainconcept.de/index_flash.shtml
InternetURL: C:\Users\Klaus\Favorites\Video\MP3Gain Downloads.URL -> hxxp://mp3gain.sourceforge.net/download.php
InternetURL: C:\Users\Klaus\Favorites\Video\Musiksoftware, Fotosoftware, Videosoftware vom Marktführer - MAGIX.URL -> hxxp://www.magix.com/de/
InternetURL: C:\Users\Klaus\Favorites\Video\National Anthems.URL -> hxxp://www.national-anthems.net/
InternetURL: C:\Users\Klaus\Favorites\Video\noise101 Eq Guide.URL -> hxxp://noise101.wikidot.com/eq-guide
InternetURL: C:\Users\Klaus\Favorites\Video\Paviko's website.URL -> hxxp://strony.aster.pl/paviko/
InternetURL: C:\Users\Klaus\Favorites\Video\Pinnacle Systems - Forums - What's Next For Liquid - Jan Piros' Keynote Speech at Liquid Immersion.URL -> hxxp://forums.pinnaclesys.com/forums/thread/52251.aspx
InternetURL: C:\Users\Klaus\Favorites\Video\Pinnacle Systems.URL -> hxxp://www.pinnaclesys.com/PublicSite/de/Home/
InternetURL: C:\Users\Klaus\Favorites\Video\SimplytheBest Free Fonts.URL -> hxxp://simplythebest.net/fonts/
InternetURL: C:\Users\Klaus\Favorites\Video\slashCAM Digital Video - DV für Alle.URL -> hxxp://www.slashcam.de/
InternetURL: C:\Users\Klaus\Favorites\Video\Software-Download DVD-lab PRO Pro 2.3.URL -> hxxp://www.netzwelt.de/software-chooser/4800-dvdlab-pro.html
InternetURL: C:\Users\Klaus\Favorites\Video\Sonosound FX . Geräusche, Sound FX, Sound-Effekte.URL -> hxxp://www.sonosoundfx.de/
InternetURL: C:\Users\Klaus\Favorites\Video\Sony HDR HC 1.URL -> hxxp://www.fxsupport.de/hc1/index.html
InternetURL: C:\Users\Klaus\Favorites\Video\TMPG Inc. - Herzlich Willkommen.URL -> hxxp://tmpgenc.pegasys-inc.com/de/index.html
InternetURL: C:\Users\Klaus\Favorites\Video\tonarchiv.de - gemafreie Musik und lizenzfreie Geräusche, 4000 Samples kostenlos online, Klänge.URL -> hxxp://www.tonarchiv.de/
InternetURL: C:\Users\Klaus\Favorites\Video\Vectormedia Software Homepage.URL -> hxxp://www.relaxingsoftware.com/
InternetURL: C:\Users\Klaus\Favorites\Video\VGM21.de.URL -> hxxp://www.vgm21.de/
InternetURL: C:\Users\Klaus\Favorites\Video\Video Filter and Effect List.URL -> hxxp://www.hlinke.de/Vdub-Filterlist/vdub-filterlist.html
InternetURL: C:\Users\Klaus\Favorites\Video\videocommunity - Videos ausstellen und Diskutieren.URL -> hxxp://www.videocommunity.com/
InternetURL: C:\Users\Klaus\Favorites\Video\Videoschnitt mit digitalvideoschnitt.URL -> hxxp://www.digitalvideoschnitt.de/
InternetURL: C:\Users\Klaus\Favorites\Video\ViTec Audio-Video GmbH - Homepage.URL -> hxxp://www.vitec-av.de/
InternetURL: C:\Users\Klaus\Favorites\Video\Willkommen bei K&M Elektronik AG - Computer und Elektronik Gross- und Einzelhandel.URL -> hxxp://www.kmelektronik.de/
InternetURL: C:\Users\Klaus\Favorites\Video\Wolfgang's HD Blog - Aktuell.URL -> hxxp://www.fxsupport.de/aktuell.html
InternetURL: C:\Users\Klaus\Favorites\Unsortierte Lesezeichen\babelfish - Google-Suche.URL -> hxxp://www.google.de/search?q=babelfish&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:de:official&client=firefox-a
InternetURL: C:\Users\Klaus\Favorites\Tom Tom\FullBackup GO910 NC 8.300.xxx - Gsmfreeboard.URL -> hxxp://www.gsmfreeboard.com/showthread.php?t=165147
InternetURL: C:\Users\Klaus\Favorites\Tom Tom\[Tomtom] Aktuelle Karten (momentan 8.35.xxxx) - Seite 6 - Gsmfreeboard.URL -> hxxp://www.gsmfreeboard.com/showthread.php?t=187460&page=6
InternetURL: C:\Users\Klaus\Favorites\Tom Tom\[Tomtom] Linksammlung - alle Navcore, Fullbackups und Tools - Seite 7 - Gsmfreeboard.URL -> hxxp://www.gsmfreeboard.com/showthread.php?t=160387&page=7
InternetURL: C:\Users\Klaus\Favorites\Test\1&1 Control-Center.URL -> hxxps://login.1und1.de/xml/config/ServiceConfig;jsessionid=9BA9CBBD2D6E3DAD54883C1D96FF5E81.TC174b?__frame=_top&__lf=http_edit_account_flow&__sendingdata=1&select.oldtopicpath=technical&select.topicpath=beginner
InternetURL: C:\Users\Klaus\Favorites\Test\1&1 Hilfe-Center.URL -> hxxp://hilfe-center.1und1.de/hosting/technik/htaccess/1.html
InternetURL: C:\Users\Klaus\Favorites\Test\Crypt.URL -> hxxp://ihre-webhosting-domain.de/php/md5enc.php
InternetURL: C:\Users\Klaus\Favorites\SW\Abacho.de - Startseite.URL -> hxxp://www.abacho.de/
InternetURL: C:\Users\Klaus\Favorites\SW\ASTALAVISTA.BOX.SK.URL -> hxxp://astalavista.box.sk/
InternetURL: C:\Users\Klaus\Favorites\SW\Codec-Download.de - Downloads.URL -> hxxp://www.codec-download.de/modules.php?name=Downloads&d_op=viewsdownload&sid=39
InternetURL: C:\Users\Klaus\Favorites\SW\ComputerBase - Downloads.URL -> hxxp://www.computerbase.de/downloads/
InternetURL: C:\Users\Klaus\Favorites\SW\CrackNews.com.URL -> hxxp://www.cracknews.com/
InternetURL: C:\Users\Klaus\Favorites\SW\DDL-Warez v3.0    News.URL -> hxxp://www.ddl-warez.org/index2.php
InternetURL: C:\Users\Klaus\Favorites\SW\Die ultimative Hilfeseite für Windows Vista, Windows 2000 und Windows XP.URL -> hxxp://www.winhelpline.info/
InternetURL: C:\Users\Klaus\Favorites\SW\Downloads - VirtualBox.URL -> hxxp://www.virtualbox.org/wiki/Downloads
InternetURL: C:\Users\Klaus\Favorites\SW\Heroine Virtual.URL -> hxxp://heroinewarrior.com/heroinevirtual.php3
InternetURL: C:\Users\Klaus\Favorites\SW\LitePC LitePC Technologies.URL -> hxxp://www.litepc.com/
InternetURL: C:\Users\Klaus\Favorites\SW\Microsoft Download Center Windows (Security & Updates).URL -> hxxp://www.microsoft.com/downloads/search.aspx?displaylang=en&categoryid=7
InternetURL: C:\Users\Klaus\Favorites\SW\Netzmafia.URL -> hxxp://www.netzmafia.de/
InternetURL: C:\Users\Klaus\Favorites\SW\oXygen - Startseite.URL -> hxxp://oxygen-warez.com/
InternetURL: C:\Users\Klaus\Favorites\SW\PhazeDDL.com.URL -> hxxp://phazeddl.com/page2.html
InternetURL: C:\Users\Klaus\Favorites\SW\S u p p o r t n e t - kostenlose Hilfe aus einer Hand.URL -> hxxp://www.supportnet.de/
InternetURL: C:\Users\Klaus\Favorites\SW\Software by Joseph Cox.URL -> hxxp://www.tnk-bootblock.co.uk/software/index.php?type=supported&id=F8AF8D53
InternetURL: C:\Users\Klaus\Favorites\SW\Techno Trend AG.URL -> hxxp://www.technotrend.de/english/download/download.html
InternetURL: C:\Users\Klaus\Favorites\SW\VirtualBox.URL -> hxxp://www.virtualbox.org/discussion/2
InternetURL: C:\Users\Klaus\Favorites\SW\WinFuture.de - Das Windows Online Magazin.URL -> hxxp://www.winfuture.de/
InternetURL: C:\Users\Klaus\Favorites\Sound Artikel\Deine Lyrics Community.URL -> hxxp://www3.lyrix.at/de/text_show/d4daf9b85e130bcd8ee588e128742814#Weus%C2%B4d+a+herz+hast+wia+a+Bergwerk
InternetURL: C:\Users\Klaus\Favorites\Sound Artikel\goLyrics.de Songtexte - Lyrics - Übersetzungen.URL -> hxxp://www.golyr.de/
InternetURL: C:\Users\Klaus\Favorites\Sound Artikel\MIDI Search Engine Let MIDI Explorer find your files.URL -> hxxp://www.musicrobot.com/
InternetURL: C:\Users\Klaus\Favorites\Sound Artikel\Mpg to MP3 Converter - WMV-ASF-AVI-VCD-MPEG to MP3-WMA-OGG-WAV.URL -> hxxp://www.allformp3.com/mpg-to-mp3.htm
InternetURL: C:\Users\Klaus\Favorites\Sound Artikel\Musiker-Board - Das größte Musiker-Board Deutschlands.URL -> hxxp://www.musiker-board.de/vb/index.php
InternetURL: C:\Users\Klaus\Favorites\Sound Artikel\WaveLab 5 Steinberg Media Technologies GmbH.URL -> hxxp://steinberg.de/441_0.html
InternetURL: C:\Users\Klaus\Favorites\Samsung\sabz.de » Samsung DLNA + Medi@ 2.0 (Media Center).URL -> hxxp://www.sabz.de/blog/?page_id=297
InternetURL: C:\Users\Klaus\Favorites\Pool\Pooldoktor`s Anleitungen zu Schwimmbad und Schwimmbecken Selbstbau, Wasserpflege, Technik uvm.URL -> hxxp://www.pooldoktor.at/link.php?url=technik_mess_dosier.htm
InternetURL: C:\Users\Klaus\Favorites\Pool\Poolpowershop.URL -> hxxp://www.poolpowershop.de/index.php?sid=68f5c0117f923ebea97b259f124f46a6&
InternetURL: C:\Users\Klaus\Favorites\Pool\Schwimmbad & Wellness  Produkte für Pool, Sauna, Wellness und Haustechnik.URL -> hxxp://poolshopping.de/index.php?XTCsid=2c2fcc2e372e45c510fcb609707df2b3
InternetURL: C:\Users\Klaus\Favorites\Pool\Schwimmbad selber bauen.URL -> hxxp://home.rhein-zeitung.de/~fkiesow/
InternetURL: C:\Users\Klaus\Favorites\Pool\Schwimmbad selbstgebaut, Poolbau.URL -> hxxp://www.schwimmbad2006.de/
InternetURL: C:\Users\Klaus\Favorites\Pool\Schwimmbecken.URL -> hxxp://www.netmeile.de/schwimmbecken/schwimmbad_89.html
InternetURL: C:\Users\Klaus\Favorites\Pool\WDT - Werner Dosiertechnik. Dosiersysteme, Duftstoffdosierung, Wellness, Mess- und Regeltechnik.URL -> hxxp://www.werner-dosiertechnik.de/deutsch/products/topcontrol.php
InternetURL: C:\Users\Klaus\Favorites\Pool\www.schwimmbadtechnik-fkb.URL -> hxxp://www.schwimmbadtechnik-fkb.de/
InternetURL: C:\Users\Klaus\Favorites\Nokia\Nokia - Telefon-Treff.URL -> hxxp://www.telefon-treff.de/forumdisplay.php?forumid=6
InternetURL: C:\Users\Klaus\Favorites\Musik\Adam Hall Alle Produkte.URL -> hxxp://www.adamhall.com/de/index.php?cccpage=project_2&set_language=de
InternetURL: C:\Users\Klaus\Favorites\Musik\Kantenschutzprofil-Shop bei T+S Audiosystems.URL -> hxxp://www.ts-audio.biz/tsshop2/WGS/624/Kantenschutzprofil.htm
InternetURL: C:\Users\Klaus\Favorites\Musik\MSW Showtechnik.URL -> hxxp://www.msw-showtechnik.com/start.php?case_selbstbau_rackstuff_fittings.php
InternetURL: C:\Users\Klaus\Favorites\Musik\Rackschiene stufenlos, mit Klemm-Keder (CAS6060) bei T+S Audiosystems.URL -> hxxp://www.ts-audio.biz/
InternetURL: C:\Users\Klaus\Favorites\Musik\Selbstbau-Forum für Musik & PA - Lautsprecher und Boxen - Forum anzeigen.URL -> hxxp://www.2sound.de/musiker-forum/selbstbau-forum-fuer-musik-und-pa-lautsprecher-und-boxen-f33.html
InternetURL: C:\Users\Klaus\Favorites\MSN-Websites\MSN Auto.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72680
InternetURL: C:\Users\Klaus\Favorites\MSN-Websites\MSN Fernsehen.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72659
InternetURL: C:\Users\Klaus\Favorites\MSN-Websites\MSN Money.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72640
InternetURL: C:\Users\Klaus\Favorites\MSN-Websites\MSN Nachrichten.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72636
InternetURL: C:\Users\Klaus\Favorites\MSN-Websites\MSN Sport.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72635
InternetURL: C:\Users\Klaus\Favorites\MSN-Websites\MSN.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72630
InternetURL: C:\Users\Klaus\Favorites\Mozilla Firefox\Firefox anpassen.URL -> hxxp://de.www.mozilla.com/de/firefox/customize/
InternetURL: C:\Users\Klaus\Favorites\Mozilla Firefox\Hilfe und Anleitungen.URL -> hxxp://de.www.mozilla.com/de/firefox/help/
InternetURL: C:\Users\Klaus\Favorites\Mozilla Firefox\Machen Sie mit.URL -> hxxp://de.www.mozilla.com/de/firefox/community/
InternetURL: C:\Users\Klaus\Favorites\Mozilla Firefox\Über uns.URL -> hxxp://de.www.mozilla.com/de/firefox/about/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Alois Mit.URL -> hxxp://www.am-modellbau.de/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Andrew's Digitale Modellbahn - Switzerland.URL -> hxxp://www.ad-soft.ch/moba/_main_deu.html
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Andrew's Digitale Modellbahn.URL -> hxxp://www.ad-soft.ch/moba/_main_deu.html?textframe=hxxp://www.ad-soft.ch/_main/moba/elektronik/schaltungen.html
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Bahnhistorie.de.URL -> hxxp://www.bahnhistorie.de/_sgg/f10000.htm
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Boll´s Modellbahn.URL -> hxxp://www.bmbtechnik.de/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Decoder.X-TRAIN.de.URL -> hxxp://decoder.x-train.de/index.php?page=decoder/digi90/6090.php
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\DerModellbahnchecker.URL -> hxxp://www.dermodellbahnchecker.de/default.htm
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Die große und kleine Eisenbahn in H0.URL -> hxxp://www.hpw-modellbahn.de/index.htm
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\DIGIRAIL - Digitale Modellbahnsteuerung.URL -> hxxp://www.muet-digirail.de/modellbahn/public_html/index.php
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Digital-Bahn.de.URL -> hxxp://www.digital-bahn.de/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Digitale Modellbahnelektronik - Kreischer Datentechnik.URL -> hxxp://www.dcc-modellbahnelektronik.com/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Digitalelektronik fuer Modellbahn von D. Ratschmeier.URL -> hxxp://www.railway-lauf.de/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\durchzug - Deine Quelle für Bahnansagen! SBB Ansagen SBB Durchsagen, SBB Stimme, SBB Durchsagen, SBB Ansagen.URL -> hxxp://www.durchzug.info/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Eisenbahnsicherungs- und -signaltechnik - DerMoba.URL -> hxxp://www.der-moba.de/index.php/Eisenbahnsicherungs-_und_-signaltechnik
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Erichs-modellbahn.URL -> hxxp://www.erichs-modellbahn.de/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\ESU.URL -> hxxp://www.loksound.eu/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Fohrmann Werkzeuge - Tools.URL -> hxxp://www.fohrmann.com/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\H0-87 - Wagons.URL -> hxxp://www.h0-87.de/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\H0-Modellbahnforum.URL -> hxxp://www.nexusboard.net/index.php?siteid=2408&nx=87cbb54895eea14363ce19ad40ce8b00
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Helmut Kern.URL -> hxxp://www.hfkern.gmxhome.de/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Homepage von Hans-Günter Heiserholt [HGH].URL -> hxxp://hgh-esn.ath.cx/index.htm
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Hufing Tronic Zubehör für Modellbau und Modelleisenbahn.URL -> hxxp://www.hufing-tronic.de/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Jorns Zugbeleuchtung.URL -> hxxp://www.zugbeleuchtung.de/modell/webshop/index.htm
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Kalles Homepage - Die Page fuer den Bahnfreund.URL -> hxxp://www.kalles-homepage.de/index.htm
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\kc-modellbahntechnik - Modelleisenbahn und mehr .URL -> hxxp://www.kc-modellbahntechnik.de/index.htm
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Littfinski DatenTechnik.URL -> hxxp://www.ldt-infocenter.com/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\LokShop, Modelleisenbahn.URL -> hxxp://www.lokshop.de/default.htm
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Lokwelt.de - Die Seite fuer den Hobbyeisenbahner.URL -> hxxp://www.lokwelt.de/index.htm
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Lokwelt.de - Die Seite mit Tips und Tricks fuer den Modelleisenbahner.URL -> hxxp://www.lokwelt.de/index1.htm
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Luck-Feinmechanik.de.URL -> hxxp://www.luck-feinmechanik.de/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\LUX-Modellbau Melle.URL -> hxxp://www.lux-modellbau.de/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\mbahn.info - Home.URL -> hxxp://www.mbahn.info/index.php
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\MBTronik - Elektronik für die Modellbahn - MBTronik - Elektronik für die Modellbahn.URL -> hxxp://www.mbtronik.de/cmsmadesimple-1.0.2/index.php?page=home
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\MIBA Willkommen zu MIBA Online!.URL -> hxxp://www.miba.de/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Michelstaedter Modellbahntreff.URL -> hxxp://www.michelstaedtermodellbahntreff.de/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Miniatur Wunderland Hamburg GmbH.URL -> hxxp://www.miniatur-wunderland.de/html/framepage.htm
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Modellbahn Datenbank.URL -> hxxp://hoshi.homeunix.net/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Modellbahn Tipps & Tricks - Elektrik.URL -> hxxp://www.moba-tipps.de/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Modelle - Insider.URL -> hxxp://www.df1sd.de/mbmodin.htm
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Modelleisenbahn-claus.URL -> hxxp://www.modelleisenbahn-claus.de/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\modellplan.URL -> hxxp://www.modellplan.de/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\PROXXON.URL -> hxxp://www.proxxon.de/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\rail4you.ch.URL -> hxxp://www.rail4you.ch/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\RW Bremen Umland.URL -> hxxp://zafas.org/rwbremenumland/railware.php
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Stummi.URL -> hxxp://www.stummi.de/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\System Jörger.URL -> hxxp://www.system-joerger.de/html/willkommen.html
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Tams-online Tams Elektronik GmbH.URL -> hxxp://www.tams-online.de/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Themen auf DER MOBA - DerMoba.URL -> hxxp://www.der-moba.de/index.php/Themen_auf_DER_MOBA
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Uhlenbrock Elektronik.URL -> hxxp://www.uhlenbrock.de/3/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\Uwe Blüchers Modelleisenbahn - Elektronik.URL -> hxxp://www.bluecher-elektronik.de/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\VSDM - Willkommen beim VSDM.URL -> hxxp://www.vsdm.ch/
InternetURL: C:\Users\Klaus\Favorites\Modellbahn\X-TRAIN....extended Lok-Tuning!.URL -> hxxp://www.x-train.de/
InternetURL: C:\Users\Klaus\Favorites\Midi\INFINITY CHARTS German Top 20.URL -> hxxp://ki.informatik.uni-wuerzburg.de/~topsi/deutop20.html#backToPast
InternetURL: C:\Users\Klaus\Favorites\Midi\MIDITEMP Professionelles Musik Equipment.URL -> hxxp://www.miditemp.de/
InternetURL: C:\Users\Klaus\Favorites\Midi\MusicStack.URL -> hxxp://www.musicstack.com/search/fleetwood+mac
InternetURL: C:\Users\Klaus\Favorites\Midi\MusikElektronik.URL -> hxxp://www.doepfer.de/home_d.htm
InternetURL: C:\Users\Klaus\Favorites\Midi\Portal alcatec.URL -> hxxp://www.backus-online.de/ibf/index.php
InternetURL: C:\Users\Klaus\Favorites\Midi\Steinberg.URL -> hxxp://www.steinberg.net/
InternetURL: C:\Users\Klaus\Favorites\Midi\Voxengo - Downloads#VoxengoStereoTouchVST.URL -> hxxp://www.voxengo.com/downloads/#VoxengoStereoTouchVST
InternetURL: C:\Users\Klaus\Favorites\Microsoft-Websites\IE-Site auf Microsoft.com.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72186
InternetURL: C:\Users\Klaus\Favorites\Microsoft-Websites\Marketplace.URL -> hxxp://go.microsoft.com/fwlink/?LinkId=72411
InternetURL: C:\Users\Klaus\Favorites\Microsoft-Websites\Microsoft Deutschland GmbH.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72520
InternetURL: C:\Users\Klaus\Favorites\Microsoft-Websites\Microsoft Store.url -> hxxp://go.microsoft.com/fwlink/?linkid=140813
InternetURL: C:\Users\Klaus\Favorites\Microsoft-Websites\Microsoft Windows - Start.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72629
InternetURL: C:\Users\Klaus\Favorites\Microsoft-Websites\Microsoft zu Hause.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72406
InternetURL: C:\Users\Klaus\Favorites\Microsoft-Websites\Microsoft.com durchsuchen.url -> hxxp://go.microsoft.com/fwlink/?LinkId=72893
InternetURL: C:\Users\Klaus\Favorites\Microsoft-Websites\Site für IE Add-Ons.url -> hxxp://go.microsoft.com/fwlink/?LinkId=50893
InternetURL: C:\Users\Klaus\Favorites\Microsoft-Websites\Willkommen zu IE7.URL -> hxxp://go.microsoft.com/fwlink/?linkid=68919
InternetURL: C:\Users\Klaus\Favorites\MediaPortal\comfortainment = comfort + Entertainment - Medienzentrale.URL -> hxxp://www.comfortainment.de/index.php?option=com_content&task=view&id=18&Itemid=26
InternetURL: C:\Users\Klaus\Favorites\MediaPortal\MEDIAPORTAL - free media center - Home.URL -> hxxp://www.team-mediaportal.com/
InternetURL: C:\Users\Klaus\Favorites\MediaPortal\TV-Engine_0.3 overview - MediaPortal Manual Documentation.URL -> hxxp://www.team-mediaportal.com/manual/TV-Engine_0.3/overview
InternetURL: C:\Users\Klaus\Favorites\Linvdr\Sat Industry - powered by vBulletin.URL -> hxxp://sat-industry.net/forums/
InternetURL: C:\Users\Klaus\Favorites\Linvdr\Spinnes Board - powered by vBulletin.URL -> hxxp://www.spinnes-board.de/vb/index.php?
InternetURL: C:\Users\Klaus\Favorites\Linvdr\VDR Portal Portal.URL -> hxxp://www.vdrportal.de/board/portal.php
InternetURL: C:\Users\Klaus\Favorites\Links\1&1.URL -> hxxps://webmailer.1und1.de/
InternetURL: C:\Users\Klaus\Favorites\Links\Admin Gästebuch.URL -> hxxp://www.spirit-of-voice.de/intern/admin/index.php
InternetURL: C:\Users\Klaus\Favorites\Links\Google.URL -> hxxp://www.google.com/webhp?hl=de&tab=nw&ned=de&q=
InternetURL: C:\Users\Klaus\Favorites\Links\incca Framework i40.net.url -> hxxp://cms.erzbistum-muenchen.de/Login.aspx?checkStep=1&ReturnUrl=%2f
InternetURL: C:\Users\Klaus\Favorites\Links\OpenCom 45dsl.URL -> hxxp://192.168.115.250/index.htm
InternetURL: C:\Users\Klaus\Favorites\Links\Railware.URL -> hxxp://www.railware.de/doku/tiki-index.php?page=Startseite
InternetURL: C:\Users\Klaus\Favorites\Links\Rainer's.URL -> hxxp://www.spur-n.at/forum/index.php?page=Portal&d33bce46
InternetURL: C:\Users\Klaus\Favorites\Links\T-Home.URL -> hxxp://www.t-home.de/is-bin/INTERSHOP.enfinity/WFS/EKI-PK-Site/-/-/-/ViewCategoryTheme-Start;sid=ftpzIEktYI1zIAMk0ot9lEIoTjAZyFvzWxpw3Rkz6hflmeynJXA=?CatalogCategoryID=
InternetURL: C:\Users\Klaus\Favorites\Links\Tomtom.URL -> hxxp://www.meintomtom.de/forum/
InternetURL: C:\Users\Klaus\Favorites\Links\Vorgeschlagene Sites (2).url -> hxxps://ieonline.microsoft.com/#ieslice
InternetURL: C:\Users\Klaus\Favorites\Links\Vorgeschlagene Sites (3).url -> hxxps://ieonline.microsoft.com/#ieslice
InternetURL: C:\Users\Klaus\Favorites\Links\Vorgeschlagene Sites (4).url -> hxxps://ieonline.microsoft.com/#ieslice
InternetURL: C:\Users\Klaus\Favorites\Links\Vorgeschlagene Sites.url -> 0
InternetURL: C:\Users\Klaus\Favorites\Links\Vorschau.url -> hxxp://vorschau.erzbistum-muenchen.de/Login.aspx?checkStep=1&ReturnUrl=%2fPfarrei%2fPage017188.aspx
InternetURL: C:\Users\Klaus\Favorites\Links\Yahoo.URL -> hxxps://login.yahoo.com/config/login_verify2?.intl=de&.src=ym
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\AgA.URL -> hxxp://www.arbeitsagentur.de/
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\Arbeitskreis.URL -> hxxp://www.liquiduser.de/
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\Bahnhistorie.URL -> hxxp://www.bahnhistorie.de/_sgg/f10000.htm
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\BWp-Direkt.URL -> hxxps://www.bwp-direkt.de/ibis/ibis/start
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\chCounter - Administration.URL -> hxxp://www.spirit-of-voice.de/chCounter/administration/index.php?action=logout
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\Cortal.URL -> hxxps://www.cortalconsors.de/euroWebDe/-?$part=Home.menubar.menubarNavOne&select=Home
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\DB.URL -> hxxps://meine.deutsche-bank.de/mod/WebObjects/dbpbc.woa
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\Digital Home.URL -> hxxp://forum.fujitsu-siemens.com/digitalhome/
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\Erste Schritte.URL -> hxxp://de.www.mozilla.com/de/firefox/central/
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\Harmony.URL -> hxxp://harmony-remote-forum.de/phpbb3/
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\iBOOD.URL -> hxxp://www.ibood.com/de/de
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\MCE-Community.URL -> hxxp://www.mce-community.de/forum/index.php?act=idx
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\NCI-Net.URL -> hxxp://www.nci-net.de/
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\oXygen wArez - Kategorie  Dokumente » E-Books.URL -> hxxp://oxygen-warez.com/?cat=56&start=9
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\Railroad.URL -> hxxp://www.freiwald.com/forum/?language=german
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\Railware Forum.URL -> hxxp://www.railware.de/doku/Startseite
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\Rainer's Forum.URL -> hxxp://www.spur-n.at/forum/index.php?page=Portal&9f68d41e
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\Schwimmbad.URL -> hxxp://hotelbellevue.krenovativ.de/vital/schwimmbad/index.php
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\Softwareload.URL -> hxxp://www.softwareload.de/
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\T-Mobile.URL -> hxxp://www.t-mobile.de/privat
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\TomTom.URL -> hxxp://www.meintomtom.de/forum/index.php?hxxp://www.meintomtom.de/forum/
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\TORRENTS.URL -> hxxp://torrents.to/
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\TwonkyVision Configuration.URL -> hxxp://oem-media:9000/
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\Webmailer.URL -> hxxps://webmailer.1und1.de/
InternetURL: C:\Users\Klaus\Favorites\Lesezeichen-Symbolleiste\WinVistaSide - Everything About Windows Vista.URL -> hxxp://www.winvistaside.de/
InternetURL: C:\Users\Klaus\Favorites\Kueche\alfredissimo! Kochen mit Bio.URL -> hxxp://www.alfredissimo.de/
InternetURL: C:\Users\Klaus\Favorites\Kueche\CHEFKOCH.DE.URL -> hxxp://www.chefkoch.de/
InternetURL: C:\Users\Klaus\Favorites\Kueche\Lafer!Lichter!Lecker!.URL -> hxxp://www.zdf.de/ZDFde/inhalt/20/0,1872,4084468,00.html
InternetURL: C:\Users\Klaus\Favorites\Kueche\Messer schärfen - VIDEO Anleitung zum Schleifen japanischer Küchenmesser, bzw. Messer mit V - Klinge.URL -> hxxp://www.kochmesser.de/video-anleitung-messer-schleifen.html
InternetURL: C:\Users\Klaus\Favorites\Kompass\Amateurfunkpeilen und Orientierungslauf.URL -> hxxp://www.ardf-ol.de/
InternetURL: C:\Users\Klaus\Favorites\Kompass\Karte & Kompass.URL -> hxxp://www.st-andreas.de/herbstschulung/sifue/4k.htm
InternetURL: C:\Users\Klaus\Favorites\Kompass\Kompass und Karte.URL -> hxxp://www.ardf-ol.de/kompass/kompass2.htm
InternetURL: C:\Users\Klaus\Favorites\Kompass\OL_Start.URL -> hxxp://www.ardf-ol.de/ol/OL_Start.htm
InternetURL: C:\Users\Klaus\Favorites\Karaoke\Karaoke software and songs.URL -> hxxp://www.karafun.com/
InternetURL: C:\Users\Klaus\Favorites\Karaoke\Ultra-Star.de    Index.URL -> hxxp://ultra-star.de/phpBB2/
InternetURL: C:\Users\Klaus\Favorites\Karaoke\Ultrastar Deluxe.URL -> hxxp://b4st1atfun.oyla15.de/cgi-bin/hpm_homepage.cgi
InternetURL: C:\Users\Klaus\Favorites\Karaoke\UltraStar Song Datenbank.URL -> hxxp://ssx.ss.funpic.de/index.php?file=All
InternetURL: C:\Users\Klaus\Favorites\IP-Phone\Augusta Versand - Ihr Spezial Versandhaus für Telekommunikation.URL -> hxxp://www.augustaversand.de/
InternetURL: C:\Users\Klaus\Favorites\IP-Phone\Gigaset S685 - Siemens-Gigaset-Shop.URL -> hxxp://www.siemens-gigaset-shop.de/gigaset/gigaset-de/catalog/factsheet1.service?articleid=293215
InternetURL: C:\Users\Klaus\Favorites\IP-Phone\IP-Phone-Forum.URL -> hxxp://www.ip-phone-forum.de/index.php
InternetURL: C:\Users\Klaus\Favorites\IP-Phone\Router-FAQ.de - FAQ zu Routern, FRITZ!Boxen, Windows uvm.URL -> hxxp://www.router-faq.de/index.php?id=anschluss&hw=fbfonwlan7170v2dsl
InternetURL: C:\Users\Klaus\Favorites\IP-Phone\voip avm fbf wlan-wds [IP-Phone-Forum Wiki].URL -> hxxp://wiki.ip-phone-forum.de/voip:avm:fbf:wlan-wds
InternetURL: C:\Users\Klaus\Favorites\Info\wetter + klima news.URL -> hxxp://www.wetterklima.de/
InternetURL: C:\Users\Klaus\Favorites\Info\www.brennholz.cz - Brennholz Info.URL -> hxxp://www.brennholz.cz/holz.html
InternetURL: C:\Users\Klaus\Favorites\HW\3DChip - Leistungsrangliste der Grafikkarten.URL -> hxxp://www.3dchip.de/Grafikchipliste/Leistung_Graka.htm
InternetURL: C:\Users\Klaus\Favorites\HW\Guru3D.com.URL -> hxxp://downloads.guru3d.com/download.php?id=10
InternetURL: C:\Users\Klaus\Favorites\HW\NORACOM - GÜNSTIGER GEHT NICHT.URL -> hxxp://www.noracom.de/?13029&PSE=6
InternetURL: C:\Users\Klaus\Favorites\HW\Pixxass.de der Digitalshop für Digitalkameras, Speicherkarten, Scanner und Zubehör.URL -> hxxp://www.pixxass.de/
InternetURL: C:\Users\Klaus\Favorites\HW\Schwanthaler Computer Vertriebs GmbH - Computer Hardware, Notebook & Multimedia-Shop - Schwanthaler Computer Vertriebs GmbH - Computer Hardware, Notebook & Multimedia-Shop.URL -> hxxp://www.schwanthaler-computer.de/
InternetURL: C:\Users\Klaus\Favorites\HW\shuttlepro-shuttlepro.pdf.URL -> hxxp://63.111.59.172/downloads/shuttlepro/shuttlepro.pdf
InternetURL: C:\Users\Klaus\Favorites\HW\Sony Europe Customer Support Portal.URL -> hxxp://www.sonydigital-link.com/hotnews/vista.asp?l=en&f=netmd
InternetURL: C:\Users\Klaus\Favorites\HW\Willkomen auf unseren online-Shop.URL -> hxxp://www.computerhouse.de/
InternetURL: C:\Users\Klaus\Favorites\HW\www.hoh.de - Home of Hardware (Aus Firefox).URL -> hxxp://web.hoh.de/hoh/(S(ds44wr45mvoiaw45smmghdyq))/default.aspx
InternetURL: C:\Users\Klaus\Favorites\HW\www.hoh.de - Home of Hardware.URL -> hxxp://www.hoh.de/Default.aspx?TY=item&ST=3&CT=0
InternetURL: C:\Users\Klaus\Favorites\HTPC\Barebones und HTPCs - Forum de Luxx.URL -> hxxp://www.hardwareluxx.de/community/forumdisplay.php?f=89
InternetURL: C:\Users\Klaus\Favorites\HTPC\Eco HTPC - Wohnen .URL -> hxxp://www.mce-community.de/forum/index.php?showtopic=39829&st=0
InternetURL: C:\Users\Klaus\Favorites\HTPC\HTPC «Hyperraum-Umgehungsstrasse.URL -> hxxp://www.hyperraumumgehungsstrasse.de/tag/htpc
InternetURL: C:\Users\Klaus\Favorites\HTPC\Increase Available Pause Time Using MCE Live TV Buffer Manager.URL -> hxxp://www.hack7mc.com/2010/03/increase-available-pause-time-using-mce-live-tv-buffer-manager.html
InternetURL: C:\Users\Klaus\Favorites\HTPC\intel drivers pour chipsets.URL -> hxxp://www.station-drivers.com/page/intel%20chipset.htm
InternetURL: C:\Users\Klaus\Favorites\HTPC\Kraut & Rüben Blog  Multituner Support in Windows 7 und Performance Test mit 7 Tunern.URL -> hxxp://blog.this.at/post/2009/05/12/Multituner-Support-in-Windows-7-und-Performance-Test-mit-7-Tunern.aspx
InternetURL: C:\Users\Klaus\Favorites\HTPC\Media Browser BBS ÔÇó Index page.URL -> hxxp://www.mediabrowser.tv/forum/
InternetURL: C:\Users\Klaus\Favorites\HTPC\Mikinho  Start Menu Plus.URL -> hxxp://mikinho.com/wmc/start-menu-plus/#hide-media-center-menu-strips
InternetURL: C:\Users\Klaus\Favorites\HTPC\MoreMce.com.URL -> hxxp://www.moremce.com/
InternetURL: C:\Users\Klaus\Favorites\HTPC\My Movies - Home.URL -> hxxp://www.mymovies.dk/home.aspx
InternetURL: C:\Users\Klaus\Favorites\HTPC\Slick Solutions - Downloads.URL -> hxxp://slicksolutions.eu/downloads.shtml#MST
InternetURL: C:\Users\Klaus\Favorites\HTPC\The Green Button.URL -> hxxp://thegreenbutton.com/
InternetURL: C:\Users\Klaus\Favorites\HTPC\Thomas Lippert.URL -> hxxp://thomas.lippert.it/v4/
InternetURL: C:\Users\Klaus\Favorites\HTPC\[How to]Lüftersteuerung mit Speedfan - ForumBase.URL -> hxxp://www.computerbase.de/forum/showthread.php?p=3925828#post3925828
InternetURL: C:\Users\Klaus\Favorites\Garmin\FAQ zum Garmin Oregon 400t.URL -> hxxp://www.kowoma.de/gps/geraetetests/Oregon400t/Oregon400t_FAQ.htm#Verzeichnisse
InternetURL: C:\Users\Klaus\Favorites\Garmin\Garda-GPS  Home.URL -> hxxp://www.garda-gps.de/index.html
InternetURL: C:\Users\Klaus\Favorites\Garmin\Garmin Forum.URL -> hxxps://forum.garmin.de/index.php
InternetURL: C:\Users\Klaus\Favorites\Garmin\Garmin Oregon 400t Review (GPSmagazine.com).URL -> hxxp://www.gpsmagazine.com/2008/08/garmin_oregon_400t_review.php?page=5
InternetURL: C:\Users\Klaus\Favorites\Garmin\Garmin Oregon Tools.URL -> hxxp://beidou.ch/
InternetURL: C:\Users\Klaus\Favorites\Garmin\Garmin Oregon Wiki - first impressions.URL -> hxxp://garminoregon.wikispaces.com/first+impressions
InternetURL: C:\Users\Klaus\Favorites\Garmin\GPS Seiten von Silvia und Kurt.URL -> hxxp://www.silvia-kurt.de/index_gpsinformation.htm
InternetURL: C:\Users\Klaus\Favorites\Garmin\Gps-freeware.de.URL -> hxxp://www.gps-freeware.de/
InternetURL: C:\Users\Klaus\Favorites\Garmin\Index of  perry (Aus Firefox).URL -> hxxp://gpsinformation.org/perry/
InternetURL: C:\Users\Klaus\Favorites\Garmin\Index of  perry.URL -> hxxp://gpsinformation.net/
InternetURL: C:\Users\Klaus\Favorites\Garmin\MagicMaps GmbH - Digitale Karten und Outdoor Navigation.URL -> hxxp://www.magicmaps.de/
InternetURL: C:\Users\Klaus\Favorites\Garmin\Maps 'n Trails - kostenlose Garmin GPS Karten, Tracks, Tools und vieles mehr.URL -> hxxp://www.mapsntrails.com/de
InternetURL: C:\Users\Klaus\Favorites\Garmin\NaviBoard - Powered by vBulletin.URL -> hxxp://www.naviboard.de/vb/index.php
InternetURL: C:\Users\Klaus\Favorites\Garmin\Navigation-Professionell » Tests, Technik, Tipps & Infos.URL -> hxxp://www.navigation-professionell.de/
InternetURL: C:\Users\Klaus\Favorites\Garmin\Onlinehilfe Typefilemanager.URL -> hxxp://familiehuzzel.spacequadrat.de/GPS/Typefiles/Onlinehilfe/Einstellungen.html
InternetURL: C:\Users\Klaus\Favorites\Garmin\Openmtbmap.org - Mountainbike, Fahrrad, Wander-Karten basierend auf Openstreetmap » Welcome to Openmtbmap.org Wilkommen auf Openmtbmap.org - Open Mountainbike Maps.URL -> hxxp://openmtbmap.org/
InternetURL: C:\Users\Klaus\Favorites\Garmin\Radfahrer Radkarte - OpenStreetMap.URL -> hxxp://wiki.openstreetmap.org/wiki/User:Radfahrer/Radkarte#Download
InternetURL: C:\Users\Klaus\Favorites\Garmin\STS  Home.URL -> hxxp://www.singletrail-skala.de/
InternetURL: C:\Users\Klaus\Favorites\Garmin\User Computerteddy - OSM Deutschland.URL -> hxxp://wiki.openstreetmap.org/wiki/User:Computerteddy
InternetURL: C:\Users\Klaus\Favorites\Garmin\User Popej. - OpenStreetMap.URL -> hxxp://wiki.openstreetmap.org/index.php/User:Popej.
InternetURL: C:\Users\Klaus\Favorites\Garmin\User R kleineisel - Topo Map Deu.URL -> hxxp://wiki.openstreetmap.org/wiki/User:R_kleineisel
InternetURL: C:\Users\Klaus\Favorites\Garmin\wegeundpunkte ... Touren online erstellen ... GPS Kurse.URL -> hxxp://www.wegeundpunkte.de/index.php
InternetURL: C:\Users\Klaus\Favorites\Garmin\WikiProject Germany - OpenStreetMap.URL -> hxxp://wiki.openstreetmap.org/wiki/WikiProject_Germany
InternetURL: C:\Users\Klaus\Favorites\FS20\CESA-COMPUTER - Consulting - Electronic - Service - ASP.URL -> hxxp://www.cesanet.de/e-vendo.php?shop=shop&SessionId=3137x04864d0b73836714737a2802695b8c24&url=http%3A%2F%2Fwww.cesanet.de%2Fe-vendo.php%3Fshop%3Dshop%26SessionId%3D%26a%3Darticle%26ProdNr%3D68-736-23%26t%3D1132%26c%3D1221%26p%3D1221
InternetURL: C:\Users\Klaus\Favorites\FS20\Funk-Haussteuerungs-Forum Index.URL -> hxxp://www.fs20-forum.de/
InternetURL: C:\Users\Klaus\Favorites\FS20\Home - Crazy-Hardware.URL -> hxxp://www.crazy-hardware.de/
InternetURL: C:\Users\Klaus\Favorites\FS20\IP-Symcon Community Forum - Powered by vBulletin.URL -> hxxp://www.ipsymcon.de/forum/index.php
InternetURL: C:\Users\Klaus\Favorites\Foto\Adobe Photoshop Lightroom Killer Tips.URL -> hxxp://www.lightroomkillertips.com/
InternetURL: C:\Users\Klaus\Favorites\Foto\Joerg Esser Fotografie Die Welt der Fotografie und Bildbearbeitung in einem Blog.URL -> hxxp://www.einpraegsam.de/?page=1
InternetURL: C:\Users\Klaus\Favorites\Foren\SGAF VW Sharan, FORD Galaxy S-MAX, SEAT Alhambra.URL -> hxxp://www.sgaf.de/index.php?sid=cff5c085afc598512dc334197305959e
InternetURL: C:\Users\Klaus\Favorites\Ebay\eBay konkurs,, insolvenz,, Großhandel Sonderposten, Bauindustrie, Industriebedarf Elektronik.URL -> hxxp://business.search-desc.ebay.de/_Business-Industrie_W0QQfiwZkonkursQ2cQ20insolvenzQ2cQQflsZ1QQfromZR14QQfrppZ50QQfsooZ2QQfsopZ3QQfswcZ2QQftsZ2QQsaatcZ77QQsacatZ12576QQsalicZ77QQsalisZ77QQsargnZ0
InternetURL: C:\Users\Klaus\Favorites\Ebay\_Ebay Last.URL -> hxxp://listings.ebay.de/_W0QQlotrZ4QQsocmdZListingCategoryListQQsocolumnlayoutZ1QQsocustoverrideZ1
InternetURL: C:\Users\Klaus\Favorites\DSL Router\Firewall Leak Tester.URL -> hxxp://www.firewallleaktester.com/index.html
InternetURL: C:\Users\Klaus\Favorites\DSL Router\Firewall-Info.net.URL -> hxxp://www.bluemerlin-security.de/
InternetURL: C:\Users\Klaus\Favorites\DSL Router\German-Secure IT-Sicherheitsberatung.URL -> hxxp://www.german-secure.de/index.php?option=articles&task=viewarticle&artid=57&Itemid=3
InternetURL: C:\Users\Klaus\Favorites\DSL Router\Top-Themen und Tutorials - Supernature-Forum - das Wohlfühlboard.URL -> hxxp://www.supernature-forum.de/top-themen-und-tutorials/
InternetURL: C:\Users\Klaus\Favorites\DSL Router\Vigor-Users - Die Seite für User der Vigor Router.URL -> hxxp://www.vigor-users.de/
InternetURL: C:\Users\Klaus\Favorites\Dies und Das\BATT-MANN, Klaus Budion, Hobackestraße 25, 45899 Gelsenkirchen, 0209-582202.URL -> hxxp://www.batt-mann.de/
InternetURL: C:\Users\Klaus\Favorites\Dies und Das\Klima sucht Schutz HeizCheck.URL -> hxxp://www.klima-sucht-schutz.de/heizcheck.0.html
InternetURL: C:\Users\Klaus\Favorites\Dies und Das\McFit - Die Fitnesshalle fuer alle.URL -> hxxp://www.mcfit.de/
InternetURL: C:\Users\Klaus\Favorites\Dies und Das\MP3 Downloads, Software, Hardware, Anleitungen, Winamp - [MPeX.net].URL -> hxxp://www.mpex.net/
InternetURL: C:\Users\Klaus\Favorites\Dies und Das\Optische Täuschungen und Illusionen unmögliche Figuren.URL -> hxxp://www.schneider-andre.net/optische-taeuschungen-unmoegliche-figuren.php
InternetURL: C:\Users\Klaus\Favorites\Dies und Das\Reparatur - Video-Geräte Forum und Ersatzteile-Verkauf.URL -> hxxp://forum.electronicwerkstatt.de/phpBB/forum_21.html
InternetURL: C:\Users\Klaus\Favorites\Dies und Das\www.pollin.de - Sonderposten zu Superpreisen.URL -> hxxp://www.pollin.de/shop/shop.php?cf=produkt.php&ts=0&p=OTkxOTk4
InternetURL: C:\Users\Klaus\Favorites\Dies und Das\Yahoo! Babel Fish - Text Übersetzung und Webseiten Übersetzung.URL -> hxxp://de.babelfish.yahoo.com/translate_txt
InternetURL: C:\Users\Klaus\Favorites\Canhost\IPCONF - Kunden Administration - KD 102846.URL -> hxxps://canhost.de/ipconf/kunden/allgemein_start.php
InternetURL: C:\Users\Klaus\Favorites\Canhost\Parallels Confixx.URL -> hxxp://can158.de/loginform.php
InternetURL: C:\Users\Klaus\Favorites\Biking\Bikeboard.at Mountainbike und Rennrad Forum - Ergo-Bike Forum.URL -> hxxp://www.nyx.at/bikeboard/Board/forumdisplay.php?s=&forumid=43
InternetURL: C:\Users\Klaus\Favorites\Biking\Bikendaheim.URL -> hxxp://www.bikendaheim.de/
InternetURL: C:\Users\Klaus\Favorites\Biking\daum electronic.URL -> hxxp://www.daum-electronic.de/
InternetURL: C:\Users\Klaus\Favorites\Biking\Herzfrequenzzonen Fettverbrennungszone, Aerobe Zone, Anaerobe Zone, Herzfrequenz.URL -> hxxp://www.novafeel.de/fitness/herzfrequenzzonen-fettverbrennungszone.htm
InternetURL: C:\Users\Klaus\Favorites\Biking\Liegerad, HPV, Fahrrad technische Informationen.URL -> hxxp://www.kreuzotter.de/index.htm
InternetURL: C:\Users\Klaus\Favorites\Biking\SourceForge.net jErgoTrainer.URL -> hxxp://sourceforge.net/projects/jergotrainer/
InternetURL: C:\Users\Klaus\Favorites\Biking\www.jErgotrainer.de.URL -> hxxp://www.jergotrainer.de/
InternetURL: C:\Users\Klaus\Favorites\Banken\BWp-Direkt.URL -> hxxps://www.bwp-direkt.de/ibis/ibis/start
InternetURL: C:\Users\Klaus\Favorites\Banken\FIMMOS-Homepage.URL -> hxxp://www.fimmos.de/
InternetURL: C:\Users\Klaus\Favorites\Banken\GFP - Kontakt.URL -> hxxp://www.dermedienfonds.de/kontakt.html
InternetURL: C:\Users\Klaus\Favorites\Banken\Onlinerechner und Ratgeber für Finanzen.URL -> hxxp://www.zinsen-berechnen.de/
InternetURL: C:\Users\Klaus\Favorites\Banken\www.steuer-sparbuch.de Das Portal zum Thema Steuern.URL -> hxxp://www.steuer-sparbuch.de/index.cfm?exturl=aHR0cDovL3d3dy5zdGV1ZXItc3BhcmJ1Y2guZGUvZGUvcHViL2FwcHMvbG9naW5fbmV1LmNmbT90cmFuc2Zlcj1ZWEowYVd0bGJHNXlQVkpGUjFOUU1qQXdOaVpxZFcxd1BUSW1abWx5YzNSdVlXMWxQVXRzWVhWekpteGhjM1J1WVcxbFBVcGxjM05sSm5ObGVEMXRKbUZrWkhKbGMz
InternetURL: C:\Users\Klaus\Favorites\AVS\AVS4YOU.URL -> hxxp://www.avs4you.com/de/index.aspx
InternetURL: C:\Users\Klaus\Favorites\Angebote\guut.de - Jeden Tag ein Produkt in begrenzter Stückzahl.URL -> hxxp://www.guut.de/guut/shop/
InternetURL: C:\Users\Klaus\Favorites\AMC\Bart's Pe-Builder - Live Windows von CD-DVD.URL -> hxxp://pcfreaks.big-clan.net/bartpe/pebuilder.shtml
InternetURL: C:\Users\Klaus\Favorites\AMC\Fujitsu Siemens Computers - Digital Home    Index.URL -> hxxp://support.fujitsu-siemens.de/digitalhome/
InternetURL: C:\Users\Klaus\Favorites\AMC\Hiren's BootCD 9.9 - www.hiren.info.URL -> hxxp://www.hiren.info/pages/bootcd
InternetURL: C:\Users\Klaus\Favorites\AMC\InterVideo MediaOne Gallery - The All-In-One Digital Media Solution.URL -> hxxp://www.intervideo.com/jsp/MediaOneGallery_Profile.jsp
InternetURL: C:\Users\Klaus\Favorites\AMC\Mantis.URL -> hxxp://bugs.activymediadevices.eu/login_page.php
InternetURL: C:\Users\Klaus\Favorites\AMC\TwonkyVision Configuration.URL -> hxxp://oem-media:9000/
InternetURL: C:\Users\Klaus\Favorites\AMC\Willkommen auf der Startseite.URL -> hxxp://www.activymediadevices.eu/
InternetURL: C:\Users\Klaus\Favorites\1und1\Puretec Login.URL -> hxxps://login.1und1.de/xml/config;jsessionid=B19CA78D053D3B4ADCCCD567F30CAEF4.TC14
InternetURL: C:\Users\Klaus\Favorites\1und1\Vertrag 1&1.URL -> hxxps://vertrag.1und1.de/sess/ac1704c38ElE0OfjV7tV2BWM7Nrfhe0vmylF1gVaxfVf6S1R/conf_index.php3?page=8000&tid=0
InternetURL: C:\Users\Klaus\Dokuments\_Photovoltaik\Wiso Beispielrechnung\Forum seite.url -> hxxp://www.photovoltaikforum.com/finanzen-steuern-f9/abrechnung-steuer-2012-mit-eigenverbrauch-e%C3%9Cr-t86733-s60.html
InternetURL: C:\Users\Klaus\Dokuments\_Photovoltaik\PV Dokumente\Bedienung Photovoltaikanlage AFA EÜR\Bedienung Photovoltaikanlage AFA EÜR.url -> hxxp://www.wiso-software.de/forum/index.php?page=Thread&threadID=52775&pageNo=1&highlight=Photovoltaikanlage+AFA+E%C3%9CR+%2F+Einnahmen%C3%BCberschussrechnung+2011
InternetURL: C:\Users\Klaus\Dokuments\Railroad & Co 8\Software\Backup\TC Backup.url -> hxxp://www.freiwald.com/forum/viewtopic.php?f=8&t=13617&hilit=+backup
InternetURL: C:\Users\Klaus\Dokuments\Railroad & Co 8\Dokumente\TC Tipps\Bedingung für Operation auf Zug anwenden.url -> hxxp://freiwald.com/forum/viewtopic.php?f=5&t=21871&view=unread#unread
InternetURL: C:\Users\Klaus\Dokuments\Railroad & Co 8\Dokumente\TC Tipps\Mehrere Loks in einem Block.url -> hxxp://www.freiwald.com/forum/viewtopic.php?f=5&t=21107
InternetURL: C:\Users\Klaus\Dokuments\Railroad & Co 8\Dokumente\TC Tipps\Nummerierung in Lok- und Wagenliste.url -> hxxp://freiwald.com/forum/viewtopic.php?f=5&t=21702
InternetURL: C:\Users\Klaus\Dokuments\Railroad & Co 8\Dokumente\TC Tipps\Zug in bestimmtes Gleis lenken.url -> hxxp://freiwald.com/forum/viewtopic.php?f=5&t=21888
InternetURL: C:\Users\Klaus\Dokuments\Railroad & Co\Dokumente\bevorzugter Block, wie ersetzen.url -> hxxp://freiwald.com/forum/viewtopic.php?f=5&t=19779
InternetURL: C:\Users\Klaus\Dokuments\Railroad & Co\Dokumente\Handfahrten mit Zwangshalt - aber viel zu früh.url -> hxxp://freiwald.com/forum/viewtopic.php?f=5&t=22707&view=unread#unread
InternetURL: C:\Users\Klaus\Desktop\DVBLINK zu Lightsout.url -> hxxp://www.mce-community.de/forum/index.php/topic/51562-dvblink-weckt-whs-2011-nicht-zur-aufnahme-auf/page-3?hl=mkarl
InternetURL: C:\Users\Klaus\Desktop\Unicam.url -> hxxp://unicam2.to/index.php
InternetURL: C:\Users\Klaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kodi\Visit Kodi Online.url -> hxxp://kodi.tv

==================== Ende von Shortcut.txt =============================

Pauli#01 07.12.2015 22:48
Das letzte Log

Matthias, noch einmal vielen Dank für Deinen Einsatz.
Ich hoffe, das ich alles Richtig gemacht habe.

Gruß
Klaus

Addition

Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-12-2015
durchgeführt von Klaus (2015-12-07 22:32:24)
Gestartet von C:\Users\Klaus\Desktop
Windows 8.1 (X64) (2013-11-20 22:16:46)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2032405694-3072891623-2312475013-500 - Administrator - Disabled)
Gast (S-1-5-21-2032405694-3072891623-2312475013-501 - Limited - Disabled)
Klaus (S-1-5-21-2032405694-3072891623-2312475013-1005 - Administrator - Enabled) => C:\Users\Klaus
Sonos (S-1-5-21-2032405694-3072891623-2312475013-1006 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

4500_G510nz_Help (x32 Version: 1.00.0000 - Hewlett-Packard) Hidden
4500G510nz (x32 Version: 140.0.001.000 - Hewlett-Packard) Hidden
4500G510nz_Software_Min (x32 Version: 140.0.001.000 - Hewlett-Packard) Hidden
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
7-Zip 15.12 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1512-000001000000}) (Version: 15.12.00.0 - Igor Pavlov)
Acronis True Image 2015 (HKLM-x32\...\{2F70A6E6-2F71-4907-8441-BDC5D300310B}Visible) (Version: 18.0.6613 - Acronis)
Acronis True Image 2015 (x32 Version: 18.0.6613 - Acronis) Hidden
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.009.20079 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.245 - Adobe Systems Incorporated)
Adobe Lightroom (HKLM-x32\...\{8048A5DF-8A70-5BE1-954B-E0FDE1BD0D0D}) (Version: 6.2.1 - Adobe Systems Incorporated)
Airport Amsterdam (HKLM-x32\...\Airport Amsterdam) (Version: 1.0.0.0 - Aerosoft GmbH)
ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Anytime USB Charge Utility (HKLM-x32\...\InstallShield_{A794229E-401E-44D4-A8B5-B21E975676DE}) (Version: 2.01.00.001 - FUJITSU LIMITED)
Anytime USB Charge Utility (Version: 2.01.00.001 - FUJITSU LIMITED) Hidden
Apple Application Support (32-Bit) (HKLM-x32\...\{649A1FD9-5892-46AD-8DF0-C4A43FF61CB7}) (Version: 4.1 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{0DE0A178-AC7B-4650-806C-CF226DE03766}) (Version: 4.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2245 - AVAST Software)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
Canon Utilities Digital Photo Professional (HKLM-x32\...\Digital Photo Professional) (Version: 3.14.0.0 - Canon Inc.)
Canon Utilities EOS Utility 2 (HKLM-x32\...\EOS Utility 2) (Version: 2.14.0.0 - Canon Inc.)
Canon Utilities ImageBrowser EX (HKLM-x32\...\ImageBrowser EX) (Version: 1.4.0.5 - Canon Inc.)
Canon Utilities PhotoStitch (HKLM-x32\...\PhotoStitch) (Version: 3.1.23.47 - Canon Inc.)
Canon Utilities Picture Style Editor (HKLM-x32\...\Picture Style Editor) (Version: 1.14.0.0 - Canon Inc.)
Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)
CyberLink YouCam 5 (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.2931.0 - CyberLink Corp.)
DDBAC (HKLM-x32\...\{40B12E76-C97D-45D8-BD85-008FE8C860EF}) (Version: 5.3.37.0 - DataDesign)
DeskUpdate (HKLM-x32\...\DeskUpdate_is1) (Version: 4.15.0144 - Fujitsu Technology Solutions)
Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
doPDF 7.3 printer (HKLM\...\doPDF 7 printer_is1) (Version: 7.3.393 - Softland)
Drive Bender Client (HKLM\...\{1963E50F-7C00-4BF8-A68C-DF4AB67B07AB}) (Version: 2.3.9.0 - Division-M)
Elevated Installer (x32 Version: 4.1.10.0 - Garmin Ltd or its subsidiaries) Hidden
ELO Pdf Drucker (HKLM-x32\...\{C7ACA1FD-E1A7-42D1-93C2-6EBD868584E9}) (Version: 6.0 - ELO Digital Office GmbH)
ELOoffice (HKLM-x32\...\{C08EF2EB-27C6-4E99-B5C3-15AE8210B614}) (Version: 9.0 - ELO Digital Office GmbH)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 16.3.17800 - Landesfinanzdirektion Thüringen)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Family Tree Maker World Express (HKLM-x32\...\Family Tree Maker World Express) (Version: 21.1.865 - Ancestry.com, Inc.)
Family Tree Maker World Express (x32 Version: 21.1.865 - Ancestry.com, Inc.) Hidden
Fax (x32 Version: 140.0.307.000 - Hewlett-Packard) Hidden
F-Editor Version 1.10 (HKLM-x32\...\{2A8AEFF7-E7DA-4440-979A-2AB137BE185C}_is1) (Version: 1.10 - Technische Alternative GmbH)
Finanzmanager 2016 (x32 Version: 23.36.00.0179 - Haufe-Lexware GmbH & Co.KG) Hidden
Finanzmanager Import Export Server 2016 (x32 Version: 23.33.00.0106 - Haufe-Lexware GmbH & Co.KG) Hidden
FJ Camera (HKLM-x32\...\Sunplus SPUVCb) (Version: 3.4.9.19 - SunplusIT)
FreeFileSync 7.6 (HKLM-x32\...\FreeFileSync_is1) (Version: 7.6 - www.FreeFileSync.org)
Fujitsu BIOS Driver (HKLM-x32\...\InstallShield_{7292FFCF-FA9A-4585-AB80-A71961F931AF}) (Version: 1.1.0.0 - FUJITSU LIMITED)
Fujitsu BIOS Driver (Version: 1.1.0.0 - FUJITSU LIMITED) Hidden
Fujitsu MobilityCenter Extension Utility (HKLM-x32\...\InstallShield_{EC314CDF-3521-482B-A21C-65AC95664814}) (Version: 4.01.00.000 - FUJITSU LIMITED)
Fujitsu MobilityCenter Extension Utility (Version: 4.01.00.000 - FUJITSU LIMITED) Hidden
Fujitsu System Extension Utility (HKLM-x32\...\InstallShield_{E8A5B78F-4456-4511-AB3D-E7BFFB974A7A}) (Version: 3.5.0.0 - FUJITSU LIMITED)
Fujitsu System Extension Utility (Version: 3.5.0.0 - FUJITSU LIMITED) Hidden
Garmin BaseCamp (HKLM-x32\...\{36A0D446-B8E9-4753-BDFE-335F6F4DE59C}) (Version: 4.5.2 - Garmin Ltd or its subsidiaries)
Garmin City Navigator Europe NTU 2016.20 (HKLM-x32\...\{7F485A74-C557-4EF4-B934-97DA9A74E74B}) (Version: 2.0.0.0 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{b292f4e5-60ca-4bb8-8810-e5f908c3c1ff}) (Version: 4.1.10.0 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 4.1.10.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 4.1.10.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin MapSource (HKLM-x32\...\{AFBAB9A0-DDE8-49AE-8C17-A01B61BEE64B}) (Version: 6.16.3 - Garmin Ltd or its subsidiaries)
Garmin POI Loader (HKLM-x32\...\{3213ED5E-7BBE-4613-BE69-8B1E4FE520DD}) (Version: 2.7.3 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (HKLM-x32\...\{3D5D6CFC-3097-425A-8D8F-7EAF5D57641D}) (Version: 2.3.1.0 - Garmin Ltd or its subsidiaries)
GeoSetter 3.4.16 (HKLM-x32\...\GeoSetter_is1) (Version:  - Friedemann Schmidt)
GIMP 2.8.10 (HKLM\...\GIMP-2_is1) (Version: 2.8.10 - The GIMP Team)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version:  - )
Harmony Desktop 2.0.14 (HKLM-x32\...\{44A829C9-EC11-4612-A977-37D19114D739}) (Version: 2.0.1400 - Fallbrook Technologies)
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Officejet 4500 G510n-z 14.0 Rel. 6 (HKLM\...\{6B9B2E57-D988-4258-8A2C-6F3657A600BD}) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Update (HKLM-x32\...\{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}) (Version: 5.002.006.003 - Hewlett-Packard)
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Intel(R) Driver Update Utility 2.0 (x32 Version: 2.0.0.29 - Intel) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.9.0.1001 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Driver Update Utility (HKLM-x32\...\{8409c4f7-2340-4933-a304-5d37db4fb48b}) (Version: 2.0.0.29 - Intel)
Intel® PROSet/Wireless Software (HKLM-x32\...\{eddf4201-b72e-4e94-9e7b-ac1ba97c029f}) (Version: 16.11.0 - Intel Corporation)
IrfanView (remove only) (HKLM-x32\...\IrfanView) (Version: 4.40 - Irfan Skiljan)
iTunes (HKLM\...\{E690A491-702F-4DEC-9977-C015D1DBB57C}) (Version: 12.3.1.23 - Apple Inc.)
Java 8 Update 66 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Kodi (HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\Kodi) (Version:  - XBMC-Foundation)
LAV Filters 0.62.0 (HKLM-x32\...\lavfilters_is1) (Version: 0.62.0 - Hendrik Leppkes)
Lexware Finanzmanager 2016 (HKLM-x32\...\{f8af6484-cb0b-426f-b8de-dd70753f69fc}) (Version: 23.33.0.114 - Haufe-Lexware GmbH & Co.KG)
Lexware Info Service (x32 Version: 5.00.00.0044 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware Installations Dienst (x32 Version: 4.01.00.0009 - Haufe-Lexware GmbH & Co.KG) Hidden
Lexware online banking (HKLM-x32\...\{BDED7C2D-BAC0-40CA-90AA-E3D23FDAC87D}) (Version: 22.02.00.0040 - Haufe-Lexware GmbH & Co.KG)
LIFEBOOK Application Panel (HKLM-x32\...\InstallShield_{6226477E-444F-4DFE-BA19-9F4F7D4565BC}) (Version: 8.5.0.0 - FUJITSU LIMITED)
LIFEBOOK Application Panel (Version: 8.5.0.0 - FUJITSU LIMITED) Hidden
Lights-Out Client x64 (HKLM\...\{DA0D6B4B-EED6-4EE8-9ECF-0F7D83F5E0CE}) (Version: 1.6.1.2408 - AxoNet Software GmbH)
Logitech Harmony Remote Software 7 (HKLM-x32\...\{5C6F884D-680C-448B-B4C9-22296EE1B206}) (Version: 7.7.0.0 - Logitech)
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
MarketResearch (x32 Version: 140.0.212.000 - Hewlett-Packard) Hidden
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40728.0 - Microsoft Corporation)
Microsoft Visio Premium 2010 (HKLM-x32\...\Office14.VISIOR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
MOBackup - Datensicherung für Outlook (Vollversion) (HKLM-x32\...\MOBackup-DatensicherungfürOutlook) (Version: 8.0 - Heiko Schröder)
Mozilla Firefox 42.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 de)) (Version: 42.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 42.0 - Mozilla)
Mp3tag v2.70 (HKLM-x32\...\Mp3tag) (Version: v2.70 - Florian Heidenreich)
MPTagThat (HKLM-x32\...\MPTagThat) (Version: 3.0.0 - Helmut Wahrmann)
MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.6 - F.J. Wechselberger)
Network64 (Version: 140.0.306.000 - Hewlett-Packard) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.6 - Notepad++ Team)
NVIDIA 3D Vision Treiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 350.12 - NVIDIA Corporation)
NVIDIA Grafiktreiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Oracle VM VirtualBox 4.3.26 (HKLM\...\{5771F59A-BFC9-4FAF-A883-7642EF4BA3C3}) (Version: 4.3.26 - Oracle Corporation)
Plugfree NETWORK (HKLM\...\{7BA64D21-EE46-4a9a-8145-52B0175C3F86}) (Version: 7.0.0.1 - FUJITSU LIMITED)
Plugfree NETWORK (Version: 7.0.001 - FUJITSU LIMITED) Hidden
Pointing Device Utility (HKLM-x32\...\InstallShield_{DDC49774-40B9-47AE-9C63-5569C08C4082}) (Version: 2.0.0.0 - FUJITSU LIMITED)
Pointing Device Utility (Version: 2.0.0.0 - FUJITSU LIMITED) Hidden
Power Saving Utility (Version: 33.01.00.000 - FUJITSU LIMITED) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6714 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.2.8400.30137 - Realtek Semiconductor Corp.)
Remote Control USB Driver (HKLM-x32\...\{8471021C-F529-43DE-84DF-3612E10F58C4}) (Version: 2.3.2.317 - )
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
RoboForm 7-9-16-7 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 7-9-16-7 - Siber Systems)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.29.0 - SAMSUNG Electronics Co., Ltd.)
Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0057-0000-0000-0000000FF1CE}_Office14.VISIOR_{359ADBEC-068A-4CC9-9174-77AB8EDB867A}) (Version:  - Microsoft)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype™ 7.15 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.15.103 - Skype Technologies S.A.)
SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Sonos Controller (HKLM-x32\...\{7BBA9BF8-05DF-47D8-8880-82A9B99505B9}) (Version: 31.3.22220 - Sonos, Inc.)
Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 16.2.10.12 - Synaptics Incorporated)
System Requirements Lab for Intel (HKLM-x32\...\{04C4B49D-45D9-4A28-9ED1-B45CBD99B8C7}) (Version: 4.5.24.0 - Husdawg, LLC)
TA-Designer 1.13 (HKLM-x32\...\TA-Designer_is1) (Version: 1.13 - Technische Alternative GmbH)
Tapps2 1.04 (HKLM-x32\...\Tapps2_is1) (Version: 1.04 - Technische Alternative GmbH)
Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.51 beta 2 - Ghisler Software GmbH)
TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
TV Movie ClickFinder (HKLM-x32\...\{A1A2ACDC-0C22-4EB1-B958-1898A93DAF28}) (Version: 1.00.0000 - TV Movie)
UltraISO Premium V9.36 (HKLM-x32\...\UltraISO_is1) (Version:  - )
Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
WIDCOMM Bluetooth Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.8030 - Broadcom Corporation)
Windows Driver Package - FUJITSU LIMITED (FUJ02B1) System  (06/09/2012 1.23) (HKLM\...\7D737DCFBBA92B6A4335FA93E0B846D9D2DE908E) (Version: 06/09/2012 1.23 - FUJITSU LIMITED)
Windows Driver Package - FUJITSU LIMITED (FUJ02E3) System  (06/22/2012 1.30.0.0) (HKLM\...\3DCA6835C7741E181396F76FD94C05C19F4124A9) (Version: 06/22/2012 1.30.0.0 - FUJITSU LIMITED)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Home Server 2011 Connector (HKLM\...\{C1E4D639-4A33-4314-809E-89BD0EF48522}) (Version: 6.1.8800.16402 - Microsoft Corporation)
Windows Media Encoder 9 Series (HKLM-x32\...\Windows Media Encoder 9) (Version:  - )
Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
WinMerge 2.14.0 (HKLM-x32\...\WinMerge_is1) (Version: 2.14.0 - Thingamahoochie Software)
WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
Winsol 2.05 (HKLM-x32\...\Winsol_is1) (Version: 2.05 - Technische Alternative GmbH)
Wireless Radio Switch Driver (HKLM-x32\...\InstallShield_{13031CDF-00D2-4FCE-AB13-8430D8733574}) (Version: 1.0.0.0 - FUJITSU LIMITED)
Wireless Radio Switch Driver (Version: 1.0.0.0 - FUJITSU LIMITED) Hidden
WISO Hausverwalter 2016 (HKLM-x32\...\{FF698809-CD68-4A77-BAD9-C1D5DD9AEF5B}) (Version: 10.00.8837 - Buhl Data Service GmbH)
WISO steuer:Sparbuch 2016 (HKLM-x32\...\{C14E44A8-325E-4E95-84A4-C4EC43BF0325}) (Version: 23.00.1146 - Buhl Data Service GmbH)
X2-Simulator 1.10 (HKLM-x32\...\X2-Simulator_is1) (Version: 1.10 - Technische Alternative GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2032405694-3072891623-2312475013-1005_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)

==================== Wiederherstellungspunkte =========================

05-12-2015 22:52:16 JRT Pre-Junkware Removal

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____N C:\WINDOWS\system32\Drivers\etc\hosts


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0CA7350B-C3D1-4116-BBD3-7C3D4033C160} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {0D5337D3-6619-4ABE-A3D5-0FA28ABC6EFF} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN2S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {118A429D-03C2-42F7-A498-7935091AE125} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN4S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {12850010-BCC3-4405-A8C2-94D82B6CF46D} - System32\Tasks\Launch HTC Sync Loader => C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe
Task: {129FED17-8CC6-4729-8573-74B0D779D406} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndOnABN3S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {1594F58A-7C43-4A0C-BA56-5C5F742384A0} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndSetWakeupSetting => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {1BF9C2BD-5511-4BBC-9A63-ED2B17348BC2} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN1S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {25680AE4-43AA-4EEA-8E9D-52FDCD7803A4} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndCheckOnWakeupBySwitch => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {299C396D-FFE9-42BE-82E6-572B5032A378} - System32\Tasks\Synaptics TouchPad Enhancements => Program Files\Synaptics\SynTP\SynTPEnh.exe
Task: {2B0A6054-69F0-43DF-B15F-3153C1263EBF} - System32\Tasks\Microsoft\Windows\Windows Server\UploadCEIPData => C:\Program Files\Windows Server\Bin\RunTask.exe [2012-11-02] (Microsoft Corporation)
Task: {2F890F2B-8AD9-44E9-A845-1775C67B9BD1} - System32\Tasks\Fujitsu\PointingDeviceUtility\SetDriverIfFuj02b1DisableOnLogon => C:\Program Files\Fujitsu\PointingDeviceUtility\FJPDAutoSet.exe [2012-08-04] (FUJITSU LIMITED)
Task: {38AB1C2E-BC82-4619-B82F-D8B13564434D} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndOnABN2S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {4D71A68C-9EAE-4267-94B6-E922A6B2465B} - System32\Tasks\Microsoft\Windows\Windows Server\SaveCEIPData => C:\Program Files\Windows Server\Bin\RunTask.exe [2012-11-02] (Microsoft Corporation)
Task: {4F4EA827-004D-4616-864B-5F1A09FF38C6} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN5S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {55272939-E147-41ED-98A6-E93CC5181E00} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2015-10-01] (Siber Systems)
Task: {69F2794C-A710-41F0-AF35-95A5B95448D7} - System32\Tasks\Open URL by RoboForm => Rundll32.exe url.dll,FileProtocolHandler "hxxp://www.roboform.com/test-pass.html?aaa=KICMJJMJMJLMJJNJPMPMCNPMKJIMOJCNLMKMOMNMCNNJGMHMOJCNOMNMKMLJKJMMMMPMJJJMKJMMJNJICMIMCNGMCNOMJMFMOMOMCNPMCNGMJMPMPMFMJMCNMMCNGMJMPMPMCNNMJNPICMOMFMEKMICNJJCKFMOMIMLMLMJNHICMMJBJKJLIMJJNBJCMELDJOJKIMIJNKJCMJNNICMJNDJCMLJKJJNMJCMOMFMNMLMOMFMMMHMJNFICMGJLJKJBJLIGJLIGJKJMIBNKJHIKJ"
Task: {6D1F98FD-8A2C-4751-9EA2-2921E75EBF5E} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndCheckOnWakeup => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {7007E703-1CA8-431F-97FB-64F49CE9CE42} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-26] (Apple Inc.)
Task: {74480064-61E1-4C1A-9116-CE965B7EC27C} - System32\Tasks\Microsoft\Windows\Windows Server\InstallAddIns => C:\Program Files\Windows Server\Bin\RunTask.exe [2012-11-02] (Microsoft Corporation)
Task: {7BA9DF59-5443-4F34-8022-3EC8B6D456C2} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-12-03] (AVAST Software)
Task: {816385D1-8A26-42F1-96A3-AC23FBDDC31D} - System32\Tasks\Microsoft\Windows\Windows Server\Alert Evaluations => C:\Program Files\Windows Server\Bin\RunTask.exe [2012-11-02] (Microsoft Corporation)
Task: {8E8E4554-C13A-4190-92F8-A3AE75FF4470} - System32\Tasks\Microsoft\Windows\Windows Server\RenewClientCertificate => C:\Program Files\Windows Server\Bin\RunTask.exe [2012-11-02] (Microsoft Corporation)
Task: {914CBA6E-9C73-4339-AD83-BCBCC6B81D54} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnWakeupNow => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {94B7CB14-E9C0-4C15-AE22-CE1743582718} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2015-10-29] ()
Task: {9EAD94C4-20AE-4605-BB3C-8CDAC9D41982} - System32\Tasks\Microsoft\Windows\Windows Server\Health Definition Updates => C:\Program Files\Windows Server\Bin\RunTask.exe [2012-11-02] (Microsoft Corporation)
Task: {AB42AB79-9402-45DD-BA90-ACB993436CBC} - System32\Tasks\Fujitsu\PointingDeviceUtility\ToggleIPD => C:\Program Files\Fujitsu\PointingDeviceUtility\FJPDAutoSet.exe [2012-08-04] (FUJITSU LIMITED)
Task: {B51B808B-E894-4E03-A63E-9E980723CFCD} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartBtnHndHKB => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {BC7B808C-4F96-4E26-B46D-7C32556E49F9} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnWakeupAtLogon => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {C21774D0-2255-4A7E-8BAB-C77239A00EE0} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndOnABN5S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {C9D4E068-773E-45E5-9539-732CE066125C} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN6S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {CF43D3B7-35DC-4BAC-A7FF-BD8CC6493435} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-12-04] (AVAST Software)
Task: {D4128710-27B7-4B37-84C8-2077ABA3BD94} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndOnABN6S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {D48F23C5-98BC-4FB9-86A8-6764C9504846} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.)
Task: {D5704809-1587-4E2A-BB2B-24582EC27A63} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndOnABN4S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {D5BB8465-B5AF-4E1D-977F-B842B6D4862E} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-02] (Adobe Systems Incorporated)
Task: {D5BBB570-C823-4F0D-8D43-B49B2049ED38} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndStartQuickTouchOnABN3S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {DCE64EF3-04F5-4F10-91AD-866F351C4E2F} - System32\Tasks\Fujitsu\ApplicationPanel\BtnHndOnABN1S0 => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {E1259FD2-35FA-47BF-8ADA-B08BFC912A95} - System32\Tasks\Outlook Sicherung => C:\Program Files (x86)\MOBackup\mobackup.exe [2015-07-22] (Heiko Schröder)
Task: {EEEC24C8-8CEF-4198-B04E-7EE527BC98EE} - System32\Tasks\Fujitsu\ApplicationPanel\DisableBtnHndStartQuickTouchOnWakeupAtLogon => C:\Program Files\Fujitsu\Application Panel\BtnHnd.exe [2012-08-01] (FUJITSU LIMITED)
Task: {FC3CEF65-4ED6-4BAD-BC95-CD8E98A12346} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {FCCF636B-01A4-46E9-AE7D-83ACF596EFD5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\Klaus\Desktop\Kodi Start.lnk -> D:\Kodi Dateien\Kodi Startup Skript\Kodi.bat () <==== ACHTUNG
Shortcut: C:\Users\Klaus\Desktop\Kodineu.lnk -> D:\Kodi Dateien\Kodi Startup Skript\Kodineu.bat () <==== ACHTUNG

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2013-10-27 09:03 - 2015-04-09 01:58 - 00012104 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2013-11-21 00:14 - 2015-04-08 22:30 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-02-13 04:20 - 2015-02-13 04:20 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-10-13 05:45 - 2015-10-13 05:45 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-09-25 14:20 - 2013-09-25 14:20 - 00049368 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btwleapi.dll
2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2010-07-15 05:44 - 2010-07-15 05:44 - 00020032 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
2015-04-15 21:13 - 2015-04-15 21:13 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2015-12-04 17:38 - 2015-12-04 17:38 - 00103888 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-12-04 17:38 - 2015-12-04 17:38 - 00125512 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-12-07 17:26 - 2015-12-07 17:26 - 02803200 _____ () C:\Program Files\AVAST Software\Avast\defs\15120701\algo.dll
2015-12-04 17:38 - 2015-12-04 17:38 - 00469008 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2015-05-16 18:33 - 2015-04-09 01:58 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-12-04 17:38 - 2015-12-04 17:38 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-07-20 08:08 - 2015-07-20 08:08 - 00034624 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\thread_pool.dll
2015-07-20 08:15 - 2015-07-20 08:15 - 00420160 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\ulxmlrpcpp.dll
2014-11-27 09:44 - 2014-11-27 09:44 - 00129344 _____ () C:\Program Files (x86)\Common Files\Acronis\Home\EXPAT.dll
2013-03-29 17:47 - 2012-06-25 02:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.115.254 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\StartupFolder: => "Bluetooth.lnk"
HKLM\...\StartupApproved\StartupFolder: => "HP Digital Imaging Monitor.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Quicken 2014 Zahlungserinnerung.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Winsol_Autostart.lnk"
HKLM\...\StartupApproved\StartupFolder: => "ImageBrowser EX Agent.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Quicken 2015 Zahlungserinnerung.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Finanzmanager 2016 Zahlungserinnerung.lnk"
HKLM\...\StartupApproved\Run: => "Launchpad"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "Acronis Scheduler2 Service"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "DeskUpdateNotifier"
HKLM\...\StartupApproved\Run32: => "FJ Camera_Monitor"
HKLM\...\StartupApproved\Run32: => "YouCam Service"
HKLM\...\StartupApproved\Run32: => "BCSSync"
HKLM\...\StartupApproved\Run32: => "HP Software Update"
HKLM\...\StartupApproved\Run32: => "LexwareInfoService"
HKLM\...\StartupApproved\Run32: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "New Value"
HKLM\...\StartupApproved\Run32: => "AcronisTibMounterMonitor"
HKLM\...\StartupApproved\Run32: => "TrueImageMonitor.exe"
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\StartupApproved\StartupFolder: => "EOS Utility.lnk"
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\StartupApproved\Run: => "GarminExpressTrayApp"
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\StartupApproved\Run: => "iDevice Manager Launcher"
HKU\S-1-5-21-2032405694-3072891623-2312475013-1005\...\StartupApproved\Run: => "CCleaner Monitoring"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{F4A9D810-C459-4358-88CA-8A63720597B7}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{D5B647B3-C146-4CF4-8871-877E79415E4D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{69346E45-C28B-4790-AAB0-D60CE7FA6E1E}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{6CAE0CBE-15C6-4323-8FCB-949D852F127D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{DC5CE5AE-2441-4ABD-87BF-542B7A412D40}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{9F8DBE80-86BB-49D1-BC91-5D321EFEA8AF}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{4B307344-DD0B-4D52-8354-E6D06DF5D303}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{5BB1E69A-E4A3-4ABD-B750-CC67BD2F1C29}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{D6BCDCA8-70EF-4891-AE73-235C964422E3}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{4F6D4854-2A79-42B1-9A3C-759D8E6EA5B1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{0823F6A0-5F62-4C2B-A1CA-E602485F3348}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{4E507199-0E83-4C5B-AA12-6FE4A2491809}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{B408FDA0-D8B1-4CE3-9CBC-E7DEBBFE41CE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{D6BEB72C-11BF-41A2-9BF5-9852C6D88889}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{F7B07158-4431-44DF-AEA2-1D5622907BA0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{6CC74370-41C0-4F46-BFE3-E6EECF9B3710}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{B42F2DC0-6339-4417-B714-CE9BAAB9B918}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [TCP Query User{71AF4574-C332-465B-9257-2706D0723950}C:\programdata\elo digital office\volltext\bin\eloocr_fr.exe] => (Allow) C:\programdata\elo digital office\volltext\bin\eloocr_fr.exe
FirewallRules: [UDP Query User{C1C1C993-923E-41C1-BAB5-89C45A3A4043}C:\programdata\elo digital office\volltext\bin\eloocr_fr.exe] => (Allow) C:\programdata\elo digital office\volltext\bin\eloocr_fr.exe
FirewallRules: [TCP Query User{B05E7C62-10D8-4DC5-9DBD-754A366538FF}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{70808B14-050F-4AD3-940E-805A2A5B5E19}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{EE30F330-EA6E-4607-AEA9-FB0859CA607D}] => (Allow) C:\Program Files (x86)\Sonos\Sonos.exe
FirewallRules: [{4BA447A4-3DBA-44DA-827B-936DB31327C9}] => (Allow) C:\Program Files (x86)\Sonos\Sonos.exe
FirewallRules: [{98EE9E56-C170-4FA7-9556-13007A87C3AD}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{8C38F049-C376-4CA1-AE66-34BB99EA91C4}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{13966F86-5F95-4FFB-98A4-16266121BB68}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{F90BE7AC-521B-46E4-9F60-348E412124FA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{F6A6C742-566D-4F50-8D14-B9D85220BBBD}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{BD4C3C56-E396-4438-853F-FAEB7968CA3F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{5CE20C4F-2645-40CD-9364-1CC28A696E44}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{C996CFF0-F36A-4086-A589-26994BB01AA5}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{5E666F93-32AC-4F0D-89CA-C6BD0DD3B412}] => (Allow) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
FirewallRules: [{C488373F-2C06-459C-86ED-8DFDB6FDEF08}] => (Allow) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
FirewallRules: [{32993ACF-E887-4F36-8C07-35513A132768}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [TCP Query User{7CEB7CDF-C42D-4ED1-B125-88D2AE5AEFAA}C:\program files (x86)\xbmc\wake.exe] => (Allow) C:\program files (x86)\xbmc\wake.exe
FirewallRules: [UDP Query User{7E71E0E6-59CF-46FA-9C1D-6142F8D758CA}C:\program files (x86)\xbmc\wake.exe] => (Allow) C:\program files (x86)\xbmc\wake.exe
FirewallRules: [{D1EB2436-E81C-44B9-9878-E85363D88374}] => (Block) C:\program files (x86)\xbmc\wake.exe
FirewallRules: [{5967A1FD-6942-4CF5-A04A-F30F6E35BD4E}] => (Block) C:\program files (x86)\xbmc\wake.exe
FirewallRules: [TCP Query User{89597B40-4BC0-4842-B4AD-A19D2BD18DED}D:\x-plane 10\x-plane.exe] => (Allow) D:\x-plane 10\x-plane.exe
FirewallRules: [UDP Query User{189E8A20-2EB0-4887-9EE5-2A4E59433320}D:\x-plane 10\x-plane.exe] => (Allow) D:\x-plane 10\x-plane.exe
FirewallRules: [{0BEF704C-EF9E-4AF4-A761-4BF90398F21B}] => (Block) D:\x-plane 10\x-plane.exe
FirewallRules: [{594CB74C-CB4B-4A51-8E2E-B0AE60209F09}] => (Block) D:\x-plane 10\x-plane.exe
FirewallRules: [TCP Query User{AA5959E7-C5EE-4DB6-9113-65850382F693}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe
FirewallRules: [UDP Query User{DFBDDE3D-B1B0-4815-9A1B-18399E3BB5C9}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe
FirewallRules: [{14997928-6522-4DC3-AFC8-CE83486583C5}] => (Block) C:\program files (x86)\kodi\kodi.exe
FirewallRules: [{C05930D8-7A52-4311-B1D4-3107D10D136D}] => (Block) C:\program files (x86)\kodi\kodi.exe
FirewallRules: [TCP Query User{367DBBCA-0D21-4E02-ABB4-A3D77C330951}D:\kodi dateien\kodi startup skript\wake.exe] => (Allow) D:\kodi dateien\kodi startup skript\wake.exe
FirewallRules: [UDP Query User{0FA04778-563A-4496-8104-96E489161E0B}D:\kodi dateien\kodi startup skript\wake.exe] => (Allow) D:\kodi dateien\kodi startup skript\wake.exe
FirewallRules: [{61478CCD-4C11-4B07-A5F4-7DDD821CA87E}] => (Block) D:\kodi dateien\kodi startup skript\wake.exe
FirewallRules: [{DAD70CAD-6490-4268-84D8-CF5CFDF87593}] => (Block) D:\kodi dateien\kodi startup skript\wake.exe
FirewallRules: [{CB9B33B2-0FFA-41D1-A0B3-F8934A9F30B8}] => (Allow) C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe
FirewallRules: [{A8119655-F1B9-42B9-8783-E39F51927836}] => (Allow) C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe
FirewallRules: [{A768239C-AC66-47BD-8E7E-D958DE10C832}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{95E3D279-EBC6-40D8-8854-E2B7B92B0CC4}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{6BF698D1-F228-4465-B027-2C9CAFBDB558}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{15E0FEA9-69D5-42F4-9AC3-A4ADEFC59A98}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
FirewallRules: [{ADF98F16-2F31-4819-A8BF-084F5FBEEF8F}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{211330CD-AF03-4BA7-A8FF-A6411E42E957}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{3FC131AB-CA9B-442F-89C1-B3987686878C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{B3F23426-AAEC-4355-83B2-ACBD914B0E36}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{94CCE881-6BFF-46BE-8269-BD756B50EB9C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{12835AF7-DB49-433A-AFB8-EAED640436CD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{17316687-6E0C-431E-AF5B-CAFC6DF67CB1}] => (Allow) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
FirewallRules: [{9591D6BB-8852-4FD0-BE1A-DD0A38472E86}] => (Allow) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
FirewallRules: [TCP Query User{5F7699DA-4672-48B7-9F70-E570D1E95F5F}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{9975F651-A28D-4894-8080-88F1B3368C18}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe
FirewallRules: [{284B7C92-1AFC-4EE4-B002-472E03F967E3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2FF862E2-84F4-4651-9B14-2BACF281A5CC}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{51C68FA0-2E8F-4B1E-BFF6-58C7BCD86B26}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{7EECBABA-F89F-4E56-A9A4-F63BDBCEC5A8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C12DE224-510D-4862-92F4-EFAA4D0531DB}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [TCP Query User{22E71012-F3ED-4281-8B09-629F97520B92}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [UDP Query User{6CDD5378-96E9-4FCB-B3A8-8D427BCFF81C}C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe] => (Allow) C:\program files (x86)\myphoneexplorer\myphoneexplorer.exe
FirewallRules: [{3A515EDF-8EDF-4924-A311-A05F7D980722}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7468C166-0E10-47E9-A95A-EE1E707F70A8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
DomainProfile\AuthorizedApplications: [C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe] => Enabled:Logitech Harmony Remote Software 7
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe] => Enabled:Logitech Harmony Remote Software 7

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Officejet 4500 G510n-z
Description: Officejet 4500 G510n-z
Class Guid: {4d36e971-e325-11ce-bfc1-08002be10318}
Manufacturer: HP
Service:
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Controller der Familie Realtek PCIe GBE
Description: Controller der Familie Realtek PCIe GBE
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: RTL8168
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (12/07/2015 10:27:03 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (12/07/2015 08:15:36 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (12/07/2015 08:15:34 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (12/07/2015 08:12:20 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (12/07/2015 08:12:20 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (12/07/2015 08:12:20 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (12/07/2015 08:12:18 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (12/07/2015 08:12:02 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (12/07/2015 08:11:24 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.

Error: (12/07/2015 07:38:11 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_623f33d3ecbe86e8.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.9600.18006_none_a9ec6aab013aafee.manifest.


Systemfehler:
=============
Error: (12/07/2015 08:13:56 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (12/07/2015 08:13:56 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Klaus\AppData\Local\Temp\ehdrv.sys

Error: (12/07/2015 08:13:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (12/07/2015 08:13:55 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Klaus\AppData\Local\Temp\ehdrv.sys

Error: (12/07/2015 08:13:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1275

Error: (12/07/2015 08:13:55 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Klaus\AppData\Local\Temp\ehdrv.sys

Error: (12/07/2015 07:39:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1069

Error: (12/07/2015 07:39:29 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WSearch" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
%%50

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).

Error: (12/07/2015 07:39:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Windows Server-Anbieterdienst für die Clientcomputersicherung" ist vom Dienst "Dienstanbieterregistrierung von Windows Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1068

Error: (12/07/2015 07:39:29 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Dienstanbieterregistrierung von Windows Server" ist vom Dienst "Net.Tcp-Portfreigabedienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1069


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i5-3230M CPU @ 2.60GHz
Prozentuale Nutzung des RAM: 33%
Installierter physikalischer RAM: 8074.79 MB
Verfügbarer physikalischer RAM: 5363.49 MB
Summe virtueller Speicher: 9354.79 MB
Verfügbarer virtueller Speicher: 6504.93 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:133.34 GB) (Free:62.87 GB) NTFS
Drive d: (Volume) (Fixed) (Total:781.05 GB) (Free:589.12 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 5895590F)

Partition: GPT.

==================== Ende von Addition.txt ============================

M-K-D-B 08.12.2015 13:54
Servus,


poste mir doch bitte mal die Logdatei von MBAM mit den Funden:


Lesestoff
http://filepony.de/icon/malwarebytes_anti_malware.pngMBAM-Funde posten: So gehts...
Manchmal ist es wichtig zu wissen, welche Schadprogramme im Vorfeld ohne Anweisung der Helfer schon gelöscht wurden.
Daher benötige ich den Inhalt der Logdatei, in welcher der Suchlauf protokolliert wurde.
  • Starte MBAM.
  • Klicke auf Verlauf.
  • Klicke auf Anwendungsprotokolle.
  • Klicke auf das letzte Suchlaufprotokoll mit Funden.
  • Klicke auf "In Zwischenablage kopieren".
  • Poste den Inhalt in Code-Tags [CODE] [/CODE] durch Einfügen mit Strg+V als Antwort in Deinen Thread.
http://deeprybka.trojaner-board.de/b...mbamposten.gif







Ist Skype an, wenn du dieses Problem hast?

Pauli#01 08.12.2015 17:26
Hallo Matthias,
leider hatte ich Mbam schon wieder Deinstalliert.

Es sieht so aus als wenn Du mein Problem gelöst hast.
Heute ist nichts mehr passiert.
Vielen Dank für Deinen Einsatz.

Was kann ich Dir/Euch Gutes tun?

Gruß
Klaus

M-K-D-B 08.12.2015 20:55
Mit einer ganz kleinen Spende für das Forum hier wäre ich überglücklich (einen Link findest du in meiner Signatur). Dein Dank genügt mir aber schon. ;)


Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber. :daumenhoc
Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.



http://deeprybka.trojaner-board.de/b...cleanupneu.png
Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
http://deeprybka.trojaner-board.de/b.../combofix2.pngCombofix deinstallieren
  • Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
  • Drücke bitte die http://deeprybka.trojaner-board.de/b...ne/revo/w7.png + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
  • Klicke auf OK.
    Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
  • Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte http://filepony.de/icon/tiny/delfix.pngDelFix herunter.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.
Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner anschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...:dankeschoen:und/oder das Forum mit einer kleinen Spende http://www.trojaner-board.de/extra/spende.png unterstützen. :applaus:




http://deeprybka.trojaner-board.de/b...ast/schild.png
Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
 Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.


Sofern du noch unentschieden bist, verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:

   
   



Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
http://filepony.de/icon/adblock_firefox.pngAdblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren.
http://filepony.de/icon/noscript.png NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
http://filepony.de/icon/malwarebytes_anti_exploit.pngMalwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.



Lade Software von einem sauberen Portal wie http://filepony.de/images/microbanner.gif.
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .



Abschließend noch ein paar grundsätzliche Bemerkungen:
  • Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
  • Lade keine Software von Chip, Softonic oder SourceForge. Die dort angebotene Software wird häufig mit einem sog. "Installer" verteilt, mit dem man sich nur unerwünschte Software oder Adware installiert.
  • Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Selbst Microsoft unterstützt sog. Registry-Cleaner nicht. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.



Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

Pauli#01 08.12.2015 21:24
Hallo Matthias,

jetzt ist soweit alles OK.
Danke für Deinen / Euren Einsatz.
Du hast mir einen Haufen Arbeit erspart.
Spende ist getätigt. Ich hoffe es ist angemessen.

Mit freundlichem Gruß
Klaus


Alle Zeitangaben in WEZ +1. Es ist jetzt 16:42 Uhr.
Seite 1 von 2 1 2
100 Beiträge dieses Themas auf einer Seite anzeigen

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131