|
Nun sind die Firefox Webseiten Einstellungen wie etwas Zoom Faktor der Webseiten geköscht und ich hab plötzlich den Internet Explorer Verknüpfung aufm Desktop ! Was ist noch zu erwarten? Kannst du denn jetzt nach den vielen Logs mal sagen wie der Zwischenstand ist, vor allem, weil ja hier im Forum ein anderes aktuelle Problem seeeeeehr ähnlich klingt?! Hier der LOG: Combofix Logfile: Code: ComboFix 10-09-12.04 - Sharkoon 13.09.2010 21:29:58.1.2 - x86 |
Ok, wir müssten fast durch sein. Bitte nun Logs mit GMER und OSAM erstellen und posten. GMER stürzt häufiger ab, wenn das Tool auch beim 2. Mal nicht will, lass es einfach weg und führ nur OSAM aus Anschließend den bootkit_remover herunterladen. Entpacke das Tool in einen eigenen Ordner auf dem Desktop und führe in diesem Ordner die Datei remove.exe aus. Wenn Du Windows Vista oder Windows 7 verwendest, musst Du die remover.exe über ein Rechtsklick => als Administrator ausführen Ein schwarzes Fenster wird sich öffnen und automatisch nach bösartigen Veränderungen im MBR suchen. Poste dann bitte, ob es Veränderungen gibt und wenn ja in welchem device. Am besten alles posten was die remover.exe ausgibt. |
gmer hat sich komplett aufgehangen - hier osam (das log ist zu lang fürs forum...habs ca in der mitte geteilt <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html lang="en"> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <title>Report of OSAM: Autorun Manager v5.0.11926.0</title> <style type="text/css"> body { margin : 10px 10px 10px 20px; color : #000000; background-color : #fffbf0; font : 10pt Tahoma, Verdana, Arial, Helvetica, sans-serif; scrollbar-3dlight-color : #fffbf0; scrollbar-arrow-color : #000000; scrollbar-darkshadow-color: #000000; scrollbar-face-color : #fffbf0; scrollbar-highlight-color : #000000; scrollbar-shadow-color : #fffbf0; scrollbar-track-color : #fffbf0; } a:link { color: #e15616; } a:visited { color: #e15616; } a:hover { color: #e4743f; } a:active { color: #e4743f; } .header1 { font-size : 115%; font-weight: bold; margin-left: 0px; } table { border-collapse: collapse; border : 1px solid #000000; cellpadding : 0; cellspacing : 0; width : 90%; } td,th { font-size : 12px; color : #000000; background : #fffbf0; border : 1px solid #000000; text-align : left; vertical-align: top; padding : 2px 4px 2px 4px; } .cap { font-weight: bold; font-size : 10pt; padding : 2px 4px 2px 4px; border : 1px solid #000000; } .group { font-weight: bold; font-size : 10pt; padding : 2px 4px 2px 4px; text-align : center; } .reg { font-weight: bold; font-size : 10pt; border : 0px none; padding : 2px 4px 2px 4px; } .notfound { background-color: #B3DDFF; } .blocked { background-color: #FF96EB; } .nodetails { background-color: #FFFF75; } .trusted { background-color: #C8FFC8; } .rootkit { background-color: #FF8696; } td.rs { text-align: center; vertical-align: center; font-family: courier; } td.rs.rm { background: #F90424; title: "Malware"; } td.rs.ri { background: #F90424; title: "Infected"; color: #21F411; } td.rs.rw { background: #F90424; title: "Unwanted"; } td.rs.rs { background: #F90424; title: "Suspicious"; } td.rs.rt { background: #21F411; title: "Trusted"; } td.rs.rc { background: #21F411; title: "Checked"; } td.rs.ry { background: #21F411; title: "Up-to-You"; } td.rs.rr { background: #F6EB13; title: "Riskware"; } td.rs.ru { background: #D4D0C8; title: "Unknown"; } td.rs.rn { background: #FFFFFF; title: "Not checked"; } </style> </head> <body> <p><span class="header1">Report of OSAM: Autorun Manager v5.0.11926.0</span><br> <a href="hxxp://www.online-solutions.ru/en/" target="_blank">hxxp://www.online-solutions.ru/en/</a><br> Saved at 17:52:31 on 14.09.2010</p> <b>OS</b>: Windows XP Home Edition Service Pack 3 (Build 2600)<br> <b>Default Browser</b>: Mozilla Corporation Firefox 3.6.9<br> <br><b>Scanner Settings</b><br> <input type="checkbox" disabled checked>Rootkits detection (hidden registry)<br> <input type="checkbox" disabled checked>Rootkits detection (hidden files)<br> <input type="checkbox" disabled checked>Retrieve files information<br> <input type="checkbox" disabled checked>Check Microsoft signatures<br> <br><b>Filters</b><br> <input type="checkbox" disabled>Trusted entries<br> <input type="checkbox" disabled>Empty entries<br> <input type="checkbox" disabled checked>Hidden registry entries (rootkit activity)<br> <input type="checkbox" disabled checked>Exclusively opened files<br> <input type="checkbox" disabled checked>Not found files<br> <input type="checkbox" disabled checked>Files without detailed information<br> <input type="checkbox" disabled checked>Existing files<br> <input type="checkbox" disabled>Non-startable services<br> <input type="checkbox" disabled>Non-startable drivers<br> <input type="checkbox" disabled checked>Active entries<br> <input type="checkbox" disabled checked>Disabled entries<br> <br> <table border="1" cellpadding="0" cellspacing="0"> <tr> <th class="cap" width="20"> </th> <th class="cap">Risk</th> <th class="cap">Name</th> <th class="cap">Publisher</th> <th class="cap">Full Path</th> <th class="cap">Status</th> </tr> <tr> <td class="group" colspan="6">Boot Execute</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Control\Session Manager</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"BootExecute"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\autochk.exe</td> <td>File exists</td> </tr> <tr> <td class="nodetails"><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td class="nodetails">"BootExecute"</td> <td class="nodetails"></td> <td class="nodetails">C:\WINDOWS\system32\lsdelete.exe</td> <td class="nodetails">File found, but it contains no detailed information</td> </tr> <tr> <td class="group" colspan="6">Common</td> </tr> <tr> <td class="reg" colspan="6">%SystemRoot%\Tasks</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Ad-Aware Update (Weekly).job"</td> <td>"Lavasoft"</td> <td>C:\Programme\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"GoogleUpdateTaskMachineUA.job"</td> <td>"Google Inc."</td> <td>C:\Programme\Google\Update\GoogleUpdate.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"1-Klick-Wartung.job"</td> <td>"TuneUp Software GmbH"</td> <td>D:\Programme\TuneUp Utilities 2009FULL\OneClickStarter.exe</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SOFTWARE\Microsoft\Windows Scripting Host\Locations</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"CScript"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\cscript.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"WScript"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\wscript.exe</td> <td>File exists</td> </tr> <tr> <td class="group" colspan="6">Control Panel Objects</td> </tr> <tr> <td class="reg" colspan="6">%SystemRoot%\system32</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"access.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\access.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"ALSndMgr.cpl"</td> <td>"Realtek Semiconductor Corp."</td> <td>C:\WINDOWS\system32\ALSndMgr.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"appwiz.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\appwiz.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"bthprops.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\bthprops.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"desk.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\desk.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rc">|| </td> <td>"DivXControlPanelApplet.cpl"</td> <td>"DivX, Inc."</td> <td>C:\WINDOWS\system32\DivXControlPanelApplet.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"firewall.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\firewall.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"hdwwiz.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\hdwwiz.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"ImageDrive.cpl"</td> <td>"Ahead Software AG"</td> <td>C:\WINDOWS\system32\ImageDrive.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"inetcpl.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\inetcpl.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"infocardcpl.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\infocardcpl.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"intl.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\intl.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"irprops.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\irprops.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"ISUSPM.cpl"</td> <td>"InstallShield Software Corporation"</td> <td>C:\WINDOWS\system32\ISUSPM.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"javacpl.cpl"</td> <td>"Sun Microsystems, Inc."</td> <td>C:\WINDOWS\system32\javacpl.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"joy.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\joy.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"main.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\main.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"mmsys.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\mmsys.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"ncpa.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\ncpa.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"netsetup.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\netsetup.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"nusrmgr.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\nusrmgr.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"odbccp32.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\odbccp32.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"powercfg.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\powercfg.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"RTSndMgr.cpl"</td> <td>"Realtek Semiconductor Corp."</td> <td>C:\WINDOWS\system32\RTSndMgr.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"sysdm.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\sysdm.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"telephon.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\telephon.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"timedate.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\timedate.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"wscui.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wscui.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"wuaucpl.cpl"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wuaucpl.cpl</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Avira AntiVir Personal - Free Antivirus "</td> <td>"Avira GmbH"</td> <td>D:\PROGRA~1\Avira\ANTIVI~1\avconfig.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Internet Connection Firewall"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\Firewall.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"NetSetupWizard"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\NetSetup.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Speech"</td> <td>"Microsoft Corporation"</td> <td>C:\Programme\Gemeinsame Dateien\Microsoft Shared\Speech\sapi.cpl</td> <td>File exists</td> </tr> <tr> <td class="group" colspan="6">Drivers</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Services</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Asynchroner RAS -Medientreiber" (AsyncMac)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\asyncmac.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"ATI Function Driver for HDMI Service" (AtiHdmiService)</td> <td>"ATI Research Inc."</td> <td>C:\WINDOWS\System32\drivers\AtiHdmi.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"ati2mtag" (ati2mtag)</td> <td>"ATI Technologies Inc."</td> <td>C:\WINDOWS\System32\DRIVERS\ati2mtag.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Audiostubtreiber" (audstub)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\audstub.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"avgio" (avgio)</td> <td>"Avira GmbH"</td> <td>D:\Programme\Avira\AntiVir Desktop\avgio.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"avgntflt" (avgntflt)</td> <td>"Avira GmbH"</td> <td>C:\WINDOWS\System32\DRIVERS\avgntflt.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"avipbb" (avipbb)</td> <td>"Avira GmbH"</td> <td>C:\WINDOWS\System32\DRIVERS\avipbb.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Beep" (Beep)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\Beep.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Bereitstellungspunkt-Manager" (MountMgr)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\MountMgr.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Boot Tasks Driver" (SAVRKBootTasks)</td> <td>"Sophos Plc"</td> <td>C:\WINDOWS\system32\SAVRKBootTasks.sys</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"catchme" (catchme)</td> <td class="notfound"></td> <td class="notfound">C:\DOKUME~1\Sharkoon\LOKALE~1\Temp\catchme.sys</td> <td class="notfound">File not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"CD-ROM-Laufwerktreiber" (Cdrom)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\cdrom.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Cdaudio" (Cdaudio)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\Cdaudio.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Cdfs" (Cdfs)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\Cdfs.sys</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"Changer" (Changer)</td> <td class="notfound"></td> <td class="notfound">C:\WINDOWS\system32\drivers\Changer.sys</td> <td class="notfound">File not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"CyberLink InstantBurn UDF Filesystem" (CLBUDF)</td> <td>"CyberLink Corporation."</td> <td>C:\WINDOWS\system32\drivers\CLBUDF.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Diskettencontrollertreiber" (Fdc)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\fdc.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Diskettenlaufwerktreiber" (Flpydisk)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\flpydisk.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"ET5Drv" (ET5Drv)</td> <td>"Windows (R) 2000 DDK provider"</td> <td>C:\WINDOWS\system32\Drivers\ET5Drv.sys</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"FGUARD32" (FGUARD32)</td> <td class="notfound"></td> <td class="notfound">F:\Folder Guard\FGUARD32.SYS</td> <td class="notfound">File not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Filtertreiber für CD-Brennen" (Imapi)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\imapi.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Filtertreiber für digitale CD-Audiowiedergabe" (redbook)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\redbook.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Filtertreiber für IP-Verkehr" (IpFilterDriver)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\ipfltdrv.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Filtertreiber für IPX-Verkehr" (NwlnkFlt)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\nwlnkflt.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Filtertreiber für Systemwiederherstellung" (sr)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\sr.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Fips" (Fips)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\Fips.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"FltMgr" (FltMgr)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\drivers\fltmgr.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Fs_Rec" (Fs_Rec)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\Fs_Rec.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"gdrv" (gdrv)</td> <td>"Windows (R) 2000 DDK provider"</td> <td>C:\WINDOWS\gdrv.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"HTTP" (HTTP)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\Drivers\HTTP.sys</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"i2omgmt" (i2omgmt)</td> <td class="notfound"></td> <td class="notfound">C:\WINDOWS\system32\drivers\i2omgmt.sys</td> <td class="notfound">File not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"i8042-Tastatur- und PS/2-Mausanschluss-Treiber" (i8042prt)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\i8042prt.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"imagedrv" (imagedrv)</td> <td>"Ahead Software AG"</td> <td>C:\WINDOWS\System32\Drivers\imagedrv.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"imagesrv" (imagesrv)</td> <td>"Ahead Software AG"</td> <td>C:\WINDOWS\System32\DRIVERS\imagesrv.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"InstantBurn Storage Helper Driver" (CLBStor)</td> <td>"Cyberlink Co.,Ltd."</td> <td>C:\WINDOWS\system32\drivers\CLBStor.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Intel-Prozessortreiber" (intelppm)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\intelppm.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"IP/IP-Tunneltreiber" (IpInIp)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\ipinip.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"IPSEC-Treiber" (IPSec)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\ipsec.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"IPv6-Windows-Firewalltreiber" (ip6fw)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\drivers\ip6fw.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"IR-Enumeratordienst" (IRENUM)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\irenum.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"JRAID" (JRAID)</td> <td>"JMicron Technology Corp."</td> <td>C:\WINDOWS\System32\DRIVERS\jraid.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"KSecDD" (KSecDD)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\KSecDD.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Laufwerktreiber" (Disk)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\disk.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Lbd" (Lbd)</td> <td>"Lavasoft AB"</td> <td>C:\WINDOWS\System32\DRIVERS\Lbd.sys</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"lbrtfdc" (lbrtfdc)</td> <td class="notfound"></td> <td class="notfound">C:\WINDOWS\system32\drivers\lbrtfdc.sys</td> <td class="notfound">File not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Logitech SetPoint KMDF HID Filter Driver" (LHidFilt)</td> <td>"Logitech, Inc."</td> <td>C:\WINDOWS\System32\DRIVERS\LHidFilt.Sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Logitech SetPoint KMDF Mouse Filter Driver" (LMouFilt)</td> <td>"Logitech, Inc."</td> <td>C:\WINDOWS\System32\DRIVERS\LMouFilt.Sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Maus-HID-Treiber" (mouhid)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\mouhid.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Mausklassentreiber" (Mouclass)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\mouclass.sys</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"MEMSWEEP2" (MEMSWEEP2)</td> <td class="notfound"></td> <td class="notfound">C:\WINDOWS\system32\26.tmp</td> <td class="notfound">File not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microcode Updatetreiber" (Update)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\update.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft ACPI-Treiber" (ACPI)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\ACPI.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft HID Class-Treiber" (hidusb)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\hidusb.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Microsoft IntelliPoint Filter Driver" (Point32)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\point32.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft Kernel GS Wavetablesynthesizer" (swmidi)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\drivers\swmidi.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft Kernel-Audiosplitter" (splitter)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\drivers\splitter.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft Kernel-DLS-Synthesizer" (DMusic)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\drivers\DMusic.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft Kernel-DRM-Audioentschlüsselung" (drmkaud)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\drivers\drmkaud.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft Kernel-Echounterdrückung" (aec)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\drivers\aec.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft Kernel-Systemaudiogerät" (sysaudio)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\drivers\sysaudio.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft Kernel-Waveaudiomixer" (kmixer)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\drivers\kmixer.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft Proxy für Streaming Clock" (MSPCLOCK)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\drivers\MSPCLOCK.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft Proxy für Streaming Quality Manager" (MSPQM)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\drivers\MSPQM.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft Standard-USB-Haupttreiber" (usbccgp)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\usbccgp.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft Streaming Service Proxy" (MSKSSRV)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\drivers\MSKSSRV.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft UAA-Bustreiber für High Definition Audio" (HDAudBus)</td> <td>"Windows (R) Server 2003 DDK provider"</td> <td>C:\WINDOWS\System32\DRIVERS\HDAudBus.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft USB-Druckerklasse" (usbprint)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\usbprint.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft USB-Standardhubtreiber" (usbhub)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\usbhub.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft-Systemverwaltungs-BIOS-Treiber" (mssmbios)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\mssmbios.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Miniporttreiber für erweiterten Microsoft USB 2.0-Hostcontroller" (usbehci)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\usbehci.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Miniporttreiber für universellen Microsoft USB-Hostcontroller" (usbuhci)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\usbuhci.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"mnmdd" (mnmdd)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\mnmdd.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Modem" (Modem)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\Modem.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"MRXSMB" (MRxSmb)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\mrxsmb.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Msfs" (Msfs)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\Msfs.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Mup" (Mup)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\Mup.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"NDIS-Benutzermodus-E/A-Protokoll" (Ndisuio)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\ndisuio.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"NDIS-Systemtreiber" (NDIS)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\NDIS.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"NDProxy" (NDProxy)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\NDProxy.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"NetBios über TCP/IP" (NetBT)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\netbt.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"NetBIOS-Schnittstelle" (NetBIOS)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\netbios.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rr">||||||</td> <td>"NetGroup Packet Filter Driver (devolo)" (NPF_devolo)</td> <td>"CACE Technologies"</td> <td>C:\WINDOWS\system32\drivers\npf_devolo.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Npfs" (Npfs)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\Npfs.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Ntfs" (Ntfs)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\Ntfs.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Null" (Null)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\Null.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Parallelanschluss (direkt)" (Raspti)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\raspti.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Partitions-Manager" (PartMgr)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\PartMgr.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"ParVdm" (ParVdm)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\ParVdm.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"PCI-Bus-Treiber" (PCI)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\pci.sys</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"PCIDump" (PCIDump)</td> <td class="notfound"></td> <td class="notfound">C:\WINDOWS\system32\drivers\PCIDump.sys</td> <td class="notfound">File not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"PCIIde" (PCIIde)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\pciide.sys</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"PDCOMP" (PDCOMP)</td> <td class="notfound"></td> <td class="notfound">C:\WINDOWS\system32\drivers\PDCOMP.sys</td> <td class="notfound">File not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"PDFRAME" (PDFRAME)</td> <td class="notfound"></td> <td class="notfound">C:\WINDOWS\system32\drivers\PDFRAME.sys</td> <td class="notfound">File not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"PDRELI" (PDRELI)</td> <td class="notfound"></td> <td class="notfound">C:\WINDOWS\system32\drivers\PDRELI.sys</td> <td class="notfound">File not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"PDRFRAME" (PDRFRAME)</td> <td class="notfound"></td> <td class="notfound">C:\WINDOWS\system32\drivers\PDRFRAME.sys</td> <td class="notfound">File not found</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"PLCMPR5 NDIS Protocol Driver" (PLCMPR5)</td> <td class="notfound"></td> <td class="notfound">C:\WINDOWS\system32\PLCMPR5.SYS</td> <td class="notfound">File not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"PnP-ISA/EISA-Bus-Treiber" (isapnp)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\isapnp.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Power Control [2009/08/23 14:55:16]" ({B154377D-700F-42cc-9474-23858FBDF4BD})</td> <td></td> <td>I:\Software\PDVD9Ultra\PowerDVD9\000.fcl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Power Control [2010/04/09 21:26:55]" ({1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC})</td> <td></td> <td>D:\Programme\CyberLink\PowerDVD\PowerDVD10\NavFilter\000.fcl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Protokoll für ATM ARP-Client" (Atmarpc)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\atmarpc.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Prozessortreiber" (Processor)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\processr.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"PxHelp20" (PxHelp20)</td> <td>"Sonic Solutions"</td> <td>C:\WINDOWS\System32\Drivers\PxHelp20.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"QoS-Paketplaner" (PSched)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\psched.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"RAS-IP-ARP-Treiber" (Wanarp)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\wanarp.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"RAS-NDIS-TAPI-Treiber" (NdisTapi)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\ndistapi.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"RAS-NDIS-WAN-Treiber" (NdisWan)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\ndiswan.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Rdbss" (Rdbss)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\rdbss.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"RDPCDD" (RDPCDD)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\RDPCDD.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"RDPWD" (RDPWD)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\RDPWD.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Realtek 10/100/1000 PCI-E NIC Family NDIS XP Driver" (RTLE8023xp)</td> <td>"Realtek Semiconductor Corporation "</td> <td>C:\WINDOWS\System32\DRIVERS\Rtenicxp.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Redirector für WebDav-Client" (MRxDAV)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\mrxdav.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Remotezugriff-PPPOE-Treiber" (RasPppoe)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\raspppoe.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Secdrv" (Secdrv)</td> <td>"Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K."</td> <td>C:\WINDOWS\System32\DRIVERS\secdrv.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"SEMC USB Flash Driver" (ggsemc)</td> <td>"Sony Ericsson Mobile Communications"</td> <td>C:\WINDOWS\System32\DRIVERS\ggsemc.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"SEMC USB Flash Driver Filter" (ggflt)</td> <td>"Sony Ericsson Mobile Communications"</td> <td>C:\WINDOWS\System32\DRIVERS\ggflt.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Serenum-Filtertreiber" (serenum)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\serenum.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Service for Realtek HD Audio (WDM)" (IntcAzAudAddService)</td> <td>"Realtek Semiconductor Corp."</td> <td>C:\WINDOWS\System32\drivers\RtkHDAud.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Sfloppy" (Sfloppy)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\Sfloppy.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Software-Bus-Treiber" (swenum)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\swenum.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Sony Ericsson Device 0016 driver (WDM)" (s0016bus)</td> <td>"MCCI Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\s0016bus.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (NDIS)" (s0016nd5)</td> <td>"MCCI Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\s0016nd5.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Sony Ericsson Device 0016 USB Ethernet Emulation SEMC0016 (WDM)" (s0016unic)</td> <td>"MCCI Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\s0016unic.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Sony Ericsson Device 0016 USB WMC Device Management Drivers (WDM)" (s0016mgmt)</td> <td>"MCCI Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\s0016mgmt.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Sony Ericsson Device 0016 USB WMC Modem Driver" (s0016mdm)</td> <td>"MCCI Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\s0016mdm.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Sony Ericsson Device 0016 USB WMC Modem Filter" (s0016mdfl)</td> <td>"MCCI Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\s0016mdfl.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Sony Ericsson Device 0016 USB WMC OBEX Interface" (s0016obex)</td> <td>"MCCI Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\s0016obex.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Sony Ericsson Device 070 driver (WDM)" (se46bus)</td> <td>"MCCI"</td> <td>C:\WINDOWS\System32\DRIVERS\se46bus.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Sony Ericsson seehcri Device Driver" (seehcri)</td> <td>"Sony Ericsson Mobile Communications"</td> <td>C:\WINDOWS\System32\DRIVERS\seehcri.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Srv" (Srv)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\srv.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"ssmdrv" (ssmdrv)</td> <td>"Avira GmbH"</td> <td>C:\WINDOWS\System32\DRIVERS\ssmdrv.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Standard-IDE/ESDI-Festplattencontroller" (atapi)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\atapi.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Standardpaketklassifizierung" (Gpc)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\msgpc.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"StarForce Protection Environment Driver (version 1.x)" (sfdrv01)</td> <td>"Protection Technology"</td> <td>C:\WINDOWS\System32\drivers\sfdrv01.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"StarForce Protection Helper Driver (version 2.x)" (sfhlp02)</td> <td>"Protection Technology"</td> <td>C:\WINDOWS\System32\drivers\sfhlp02.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"StarForce Protection VFS Driver (version 2.x)" (sfvfs02)</td> <td>"Protection Technology"</td> <td>C:\WINDOWS\System32\drivers\sfvfs02.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Tastatur-HID-Treiber" (kbdhid)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\kbdhid.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Tastaturklassentreiber" (Kbdclass)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\kbdclass.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"TCP/IP-Protokolltreiber" (Tcpip)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\tcpip.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"TDPIPE" (TDPIPE)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\TDPIPE.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"TDTCP" (TDTCP)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\TDTCP.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Terminal-Gerätetreiber" (TermDD)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\termdd.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Treiber für automatische RAS-Verbindung" (RasAcd)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\rasacd.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Treiber für direkte Parallelverbindung" (Ptilink)</td> <td>"Parallel Technologies, Inc."</td> <td>C:\WINDOWS\System32\DRIVERS\ptilink.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Treiber für IPX-Verkehrsweiterleitung" (NwlnkFwd)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\nwlnkfwd.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Treiber für Microsoft WINMM-WDM-Audiokompatibilität" (wdmaud)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\drivers\wdmaud.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Treiber für parallelen Anschluss" (Parport)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\parport.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Treiber für seriellen Anschluss" (Serial)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\serial.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Treiber für Volume-Manager" (Ftdisk)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\ftdisk.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Udfs" (Udfs)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\Udfs.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Umgebung für die AFD-Netzwerkunterstützung" (AFD)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\drivers\afd.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"USB-Massenspeichertreiber" (USBSTOR)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"USB-Scannertreiber" (usbscan)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\usbscan.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"VGA-Anzeigecontroller." (VgaSave)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\drivers\vga.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"VolSnap" (VolSnap)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\drivers\VolSnap.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"WAN-Miniport (L2TP)" (Rasl2tp)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\rasl2tp.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"WAN-Miniport (PPTP)" (PptpMiniport)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\raspptp.sys</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Wdf01000" (Wdf01000)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\Wdf01000.sys</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"WDICA" (WDICA)</td> <td class="notfound"></td> <td class="notfound">C:\WINDOWS\system32\drivers\WDICA.sys</td> <td class="notfound">File not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Xbox 360 Wireless Receiver Driver Service 21" (xusb21)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\xusb21.sys</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"zlportio" (zlportio)</td> <td class="notfound"></td> <td class="notfound">I:\Games\Ultrastar SINGSTAR2 NEU\UltraStar Deluxe\zlportio.sys</td> <td class="notfound">File not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Übersetzer für IP-Netzwerkadressen" (IpNat)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\DRIVERS\ipnat.sys</td> <td>File exists</td> </tr> <tr> <td class="group" colspan="6">Explorer</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{7790769C-0471-11d2-AF11-00C04FA35D02} "Adressbuch 6"</td> <td>"Microsoft Corporation"</td> <td>"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS "Browseranpassungen"</td> <td>"Microsoft Corporation"</td> <td>RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>>{26923b43-4d38-484f-9b9e-de460746276c} "Internet Explorer"</td> <td>"Microsoft Corporation"</td> <td>%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{89820200-ECBD-11cf-8B85-00AA005B4383} "Internet Explorer 6"</td> <td>"Microsoft Corporation"</td> <td>%SystemRoot%\system32\ie4uinit.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{44BBA840-CC51-11CF-AAFA-00AA00B6015C} "Microsoft Outlook Express 6"</td> <td>"Microsoft Corporation"</td> <td>"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{6BF52A52-394A-11d3-B153-00C04F79FAA6} "Microsoft Windows Media Player"</td> <td>"Microsoft Corporation"</td> <td>rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{44BBA842-CC51-11CF-AAFA-00AA00B6015B} "NetMeeting 3.01"</td> <td>"Microsoft Corporation"</td> <td>rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>>{881dd1c5-3dcf-431b-b061-f3f88e8be88a} "Outlook Express"</td> <td>"Microsoft Corporation"</td> <td>%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{89B4C1CD-B018-4511-B0A1-5476DBF70820} "StubPath"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{2C7339CF-2B09-4501-B3F3-F3508C9228ED} "Themes Setup"</td> <td>"Microsoft Corporation"</td> <td>%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{89820200-ECBD-11cf-8B85-00AA005B4340} "Windows Desktop-Update"</td> <td>"Microsoft Corporation"</td> <td>regsvr32.exe /s /n /i:U shell32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>>{22d6f312-b0f6-11d0-94ab-0080c74c7e95} "Windows Media Player"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\inf\unregmp2.exe /ShowWMP</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{5945c046-1e7d-11d1-bc44-00c04fd912be} "Windows Messenger 4.7"</td> <td>"Microsoft Corporation"</td> <td>rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\Software\Classes\Folder\shellex\ColumnHandlers</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension"</td> <td>"Adobe Systems, Inc."</td> <td>C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{0D2E74C4-3C34-11d2-A27E-00C04FC30871} "{0D2E74C4-3C34-11d2-A27E-00C04FC30871}"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\SHELL32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{24F14F01-7B1C-11d1-838f-0000F80461CF} "{24F14F01-7B1C-11d1-838f-0000F80461CF}"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\SHELL32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{24F14F02-7B1C-11d1-838f-0000F80461CF} "{24F14F02-7B1C-11d1-838f-0000F80461CF}"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\SHELL32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{66742402-F9B9-11D1-A202-0000F81FEDEE} "{66742402-F9B9-11D1-A202-0000F81FEDEE}"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\SHELL32.dll</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\Software\Classes\Protocols\Filter</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} "AP Class Install Handler filter"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\urlmon.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{8f6b0360-b80d-11d0-a9b3-006097942311} "AP lzdhtml encoding/decoding Filter"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\urlmon.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{8f6b0360-b80d-11d0-a9b3-006097942311} "AP lzdhtml encoding/decoding Filter"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\urlmon.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{8f6b0360-b80d-11d0-a9b3-006097942311} "AP lzdhtml encoding/decoding Filter"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\urlmon.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\mscoree.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\mscoree.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\mscoree.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{807553E5-5146-11D5-A672-00B0D022E945} "text/xml"</td> <td>"Microsoft Corporation"</td> <td>C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{733AC4CB-F1A4-11d0-B951-00A0C90312E1} "WebView MIME Filter"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\SHELL32.dll</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\Software\Classes\Protocols\Handler</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{3dd53d40-7b8b-11D0-b013-00aa0059ce02} "CDL: Asychronous Pluggable Protocol Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\urlmon.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{32505114-5902-49B2-880A-1F7738E5A384} "Data Page Plugable Protocal mso-offdap11 Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\PROGRA~1\GEMEIN~1\MICROS~1\WEBCOM~1\11\OWC11.DLL</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{12D51199-0DB5-46FE-A120-47A3D7D937CC} "DVD: Pluggable Protocol"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\msvidctl.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{79eac9e7-baf9-11ce-8c82-00aa004ba90b} "file:, local: Asychronous Pluggable Protocol Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\urlmon.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{79eac9e7-baf9-11ce-8c82-00aa004ba90b} "file:, local: Asychronous Pluggable Protocol Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\urlmon.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{79eac9e3-baf9-11ce-8c82-00aa004ba90b} "ftp: Asychronous Pluggable Protocol Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\urlmon.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{79eac9e4-baf9-11ce-8c82-00aa004ba90b} "gopher: Asychronous Pluggable Protocol Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\urlmon.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{79eac9e2-baf9-11ce-8c82-00aa004ba90b} "http: Asychronous Pluggable Protocol Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\urlmon.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{79eac9e5-baf9-11ce-8c82-00aa004ba90b} "https: Asychronous Pluggable Protocol Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\urlmon.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{05300401-BCBC-11d0-85E3-00C04FD85AB4} "MHTML Asychronous Pluggable Protocol Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\inetcomm.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{3050F406-98B5-11CF-BB82-00AA00BDCE0B} "Microsoft HTML About Pluggable Protocol"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\mshtml.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} "Microsoft HTML Javascript Pluggable Protocol"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\mshtml.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} "Microsoft HTML Javascript Pluggable Protocol"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\mshtml.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} "Microsoft HTML Mailto Pluggable Protocol"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\mshtml.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} "Microsoft HTML Resource Pluggable Protocol"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\mshtml.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{76E67A63-06E9-11D2-A840-006008059382} "Microsoft HTML Resource Pluggable Protocol"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\mshtml.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{9D148291-B9C8-11D0-A4CC-0000F80149F6} "Microsoft InfoTech Protocols for IE 4.0"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\itss.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{9D148291-B9C8-11D0-A4CC-0000F80149F6} "Microsoft InfoTech Protocols for IE 4.0"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\itss.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{0A9007C0-4076-11D3-8789-0000F8105754} "Microsoft Infotech Storage Protocol for IE 4.0"</td> <td>"Microsoft Corporation"</td> <td>C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{79eac9e6-baf9-11ce-8c82-00aa004ba90b} "mk: Asychronous Pluggable Protocol Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\urlmon.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{5C135180-9973-46D9-ABF4-148267CBB8BF} "MS TV ATVEF komptibler LID: Protokollhandler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\msvidctl.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} "TV: Pluggable Protocol"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\msvidctl.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} "WiaProtocol Class"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\wiascr.dll</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{438755C2-A8BA-11D1-B96B-00A0C90312E1} "Browseui preloader"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{8C7461EF-2B13-11d2-BE35-3078302C2030} "Component Categories cache daemon"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{AEB6717E-7E19-11d0-97EE-00C04FD91972} "URL Exec Hook"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shell32.dll</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{01E04581-4EEE-11d0-BFE9-00AA005B4383} "&Adresse"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{32714800-2E5F-11d0-8B85-00AA0044F941} "&Nach Personen..."</td> <td>"Microsoft Corporation"</td> <td>C:\Programme\Outlook Express\wabfind.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{23170F69-40C1-278A-1000-000100020000} "7-Zip Shell Extension"</td> <td>"Igor Pavlov"</td> <td>D:\Programme\7-Zip\7-zip.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{7e653215-fa25-46bd-a339-34a2790f3cb7} "Accessible"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{88C6C381-2E85-11D0-94DE-444553540000} "ActiveX-Cacheordner"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\occache.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{A08C11D2-A228-11d0-825B-00AA005B4383} "Address EditBox"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{85BBD920-42A0-1069-A2E4-08002B30309D} "Aktenkoffer"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\syncui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{875CB1A1-0F29-45de-A1AE-CFB4950D0B78} "Audio Media Properties Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shmedia.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{91EA3F8B-C99B-11d0-9815-00C04FD91972} "Augmented Shell Folder"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{6413BA2C-B461-11d1-A18A-080036B11A03} "Augmented Shell Folder 2"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0} "Ausführen..."</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{5F327514-6C5E-4d60-8F16-D07FA08A78ED} "Auto Update Property Sheet Extension"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wuaucpl.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{00E7B358-F65B-4dcf-83DF-CD026B94BFD4} "Automatische Diashowwiedergabe der Shell"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shimgvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{87D62D94-71B3-4b9a-9489-5FE6850DC73E} "Avi Properties Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shmedia.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{F61FFEC1-754F-11d0-80CA-00AA005B4383} "BandProxy"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{7A9D77BD-5403-11d2-8785-2E0420524153} "Benutzerkonten"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\netplwiz.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{add36aa8-751a-4579-a266-d66f5202ccbb} "Bestellung von Abzügen über das Internet"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\netplwiz.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{67EA19A0-CCEF-11d0-8024-00C04FD75D13} "CDF Extension Copy Hook"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{f39a0dc0-9cc8-11d0-a599-00c04fd64433} "Channel"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\cdfview.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{f3da0dc0-9cc8-11d0-a599-00c04fd64437} "Channel Menu Handler |
Object"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\cdfview.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{f3ea0dc0-9cc8-11d0-a599-00c04fd64438} "Channel Shortcut Property Pages"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\cdfview.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{f3ba0dc0-9cc8-11d0-a599-00c04fd64435} "Channelhandlerobjekt"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\cdfview.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{f3aa0dc0-9cc8-11d0-a599-00c04fd64434} "Channelverknüpfung"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\cdfview.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{7D559C10-9FE9-11d0-93F7-00AA0059CE02} "Code Download Agent"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\webcheck.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{BD472F60-27FA-11cf-B8B4-444553540000} "Compressed (zipped) Folder Right Drag Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\zipfldr.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{888DCA60-FC0A-11CF-8F0F-00C04FD7D062} "Compressed (zipped) Folder SendTo Target"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\zipfldr.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31} "CompressedFolder"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\zipfldr.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{E6CC6978-6B6E-11D0-BECA-00C04FD940BE} "ConnectionAgent"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\webcheck.dll</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{42071714-76d4-11d1-8b24-00a0c9068ff3} "CPL-Erweiterung für Anzeigeverschiebung"</td> <td class="notfound"></td> <td class="notfound">deskpan.dll</td> <td class="notfound">File not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{42071713-76d4-11d1-8b24-00a0c9068ff3} "CPL-Erweiterung für Bildschirme"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\deskmon.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{42071712-76d4-11d1-8b24-00a0c9068ff3} "CPL-Erweiterung für Grafikkarten"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\deskadp.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{7444C717-39BF-11D1-8CD9-00C04FC29D45} "CryptPKO Class"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\cryptext.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{7444C719-39BF-11D1-8CD9-00C04FC29D45} "CryptSig Class"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\cryptext.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{6935DB93-21E8-4ccc-BEB9-9FE3C77A297A} "Custom MRU AutoCompleted List"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{CFCCC7A0-A282-11D1-9082-006008059382} "Darwin App Publisher"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\appwiz.cpl</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{FCF608CF-5716-47C3-A1A8-991D873AF72B} "Delphi Context Menu Shell Extension Example"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{ECCDF543-45CC-11CE-B9BF-0080C87CDBA6} "DfsShell Class"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\dfsshlex.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{62AE1F9A-126A-11D0-A14B-0800361B1103} "Directory Context Menu Verbs"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\dsuiext.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{163FDC20-2ABC-11d0-88F0-00A024AB2DBB} "Directory Object Find"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\dsquery.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{0D45D530-764B-11d0-A1CA-00AA00C16E65} "Directory Property UI"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\dsuiext.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{8A23E65E-31C2-11d0-891C-00A024AB2DBB} "Directory Query UI"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\dsquery.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{F020E586-5264-11d1-A532-0000F8757D7E} "Directory Start/Search Find"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\dsquery.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{f92e8c40-3d33-11d2-b1aa-080036a75b03} "Display TroubleShoot CPL Extension"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\deskperf.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{872A9397-E0D6-4e28-B64D-52B8D0A7EA35} "DisplayCplExt Class"</td> <td>"Advanced Micro Devices, Inc."</td> <td>D:\Programme\ATI Technologies\ATI.ACE\Core-Static\atiamaxx.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{22BF0C20-6DA7-11D0-B373-00A0C9034938} "Download Status"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{60fd46de-f830-4894-a628-6fa81bc0190d} "Drop-Zielobjekt für den Fotodruck-Assistent"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\photowiz.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{2559a1f5-21d7-11d4-bdaf-00c04f60b9f0} "E-Mail"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{00022613-0000-0000-C000-000000000046} "Eigenschaften für Multimediadatei"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\mmsys.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{1F2E5C40-9550-11CE-99D2-00AA006E086C} "Erweiterung der Sicherheitsshell"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\rshx32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{4E40F770-369C-11d0-8922-00A024AB2DBB} "Erweiterung der Sicherheitsshell"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\dssec.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{F37C5810-4D3F-11d0-B4BF-00AA00BBB723} "Erweiterung der Sicherheitsshell"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\rshx32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{59099400-57FF-11CE-BD94-0020AF85B590} "Erweiterung für Datenträgerkopien"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\diskcopy.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{EFA24E64-B078-11d0-89E4-00C04FC9E26E} "Explorer-Band"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{692F0339-CBAA-47e6-B5B5-3B84DB604E87} "Extensions Manager Folder"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\extmgr.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{7A80E4A8-8005-11D2-BCF8-00C04F72C717} "ExtractIcon Class"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\mmcshext.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{EFA24E61-B078-11d0-89E4-00C04FC9E26E} "Favorites Band"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{3F30C968-480A-4C6C-862D-EFC0897BB84B} "GDI+ Dateiminiaturansicht-Extrahierungsprogramm"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shimgvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{D6277990-4C6A-11CF-8D87-00AA0060F5BF} "Geplante Tasks"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\mstask.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{EF8AD2D1-AE36-11D1-B2D2-006097DF8C11} "Global Folder Settings"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{25F156F9-028E-4E95-B02B-9CCB8CC55C5E} "Hide Files and Folders Context Menu Handler"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{2559a1f1-21d7-11d4-bdaf-00c04f60b9f0} "Hilfe und Support"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{EAB841A0-9550-11cf-8C16-00805F1408F3} "HTML-Extrahierungsprogramm"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shimgvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{88895560-9AA2-1069-930E-00AA0030EBC8} "HyperTerminal Icon Ext"</td> <td>"Hilgraeve, Inc."</td> <td>C:\WINDOWS\System32\hticons.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{DBCE2480-C732-101B-BE72-BA78E9AD5B27} "ICC-Profil"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\icmui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{675F097E-4C4D-11D0-B6C1-0800091AA605} "ICM-Druckerverwaltung"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\icmui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{5DB2625A-54DF-11D0-B6C4-0800091AA605} "ICM-Monitorverwaltung"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\icmui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{176d6597-26d3-11d1-b350-080036a75b03} "ICM-Scannerverwaltung"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\icmui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{A2B0DD40-CC59-11d0-A3A5-00C04FD706EC} "IE4 Suite-Begrüßungsbildschirm"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{169A0691-8DF9-11d1-A1C4-00C04FD75D13} "In-pane search"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{0B124F8F-91F0-11D1-B8B5-006008059382} "Installed Apps Enumerator"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\appwiz.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{2559a1f4-21d7-11d4-bdaf-00c04f60b9f0} "Internet"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{3DC7A020-0ACD-11CF-A9BB-00AA004AE837} "Internet"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{871C5380-42A0-1069-A2EA-08002B30309D} "Internet Name Space"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{FBF23B40-E3F0-101B-8488-00AA003E56F8} "Internetverknüpfung"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{131A6951-7F78-11D0-A979-00C04FD705A2} "ISFBand OC"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{0CD7A5C0-9F37-11CE-AE65-08002B2E1262} "Kabinettdatei"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\cabview.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{DC70C4A5-2044-4c59-B806-DEFB9AE0DF7C} "KbLogiExt Class"</td> <td>"Logitech Inc."</td> <td>D:\Programme\Logitech\SetPoint\kbcplext.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8} "Kompatibilitätsseite"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\SlayerXP.dll</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA} "Kontextmenü für die Verschlüsselung"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{B9B9F083-2B04-452A-8691-83694AC1037B} "LogiExt Class"</td> <td>"Logitech Inc."</td> <td>D:\Programme\Logitech\SetPoint\mcplext.dll</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{32683183-48a0-441b-a342-7c2a440a9478} "Media Band"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{143A62C8-C33B-11D1-84FE-00C04FA34A14} "Microsoft Agent Character Property Sheet Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\msagent\agentpsh.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{00BB2763-6A77-11D0-A535-00C04FD7D062} "Microsoft AutoComplete"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{A5E46E3A-8849-11D1-9D8C-00C04FC99D61} "Microsoft Browser Architecture"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{7BA4C742-9E81-11CF-99D3-00AA004AE837} "Microsoft BrowserBand"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{7988B573-EC89-11cf-9C00-00AA00A14F56} "Microsoft Disk Quota UI"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\dskquoui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{6A205B57-2567-4A2C-B881-F787FAB579A3} "Microsoft DocProp Inplace Calendar Control"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\docprop2.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{0EEA25CC-4362-4A12-850B-86EE61B0D3EB} "Microsoft DocProp Inplace Droplist Combo Control"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\docprop2.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{A9CF0EAE-901A-4739-A481-E35B73E47F6D} "Microsoft DocProp Inplace Edit Box Control"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\docprop2.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{8EE97210-FD1F-4B19-91DA-67914005F020} "Microsoft DocProp Inplace ML Edit Box Control"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\docprop2.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{28F8A4AC-BBB3-4D9B-B177-82BFC914FA33} "Microsoft DocProp Inplace Time Control"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\docprop2.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{883373C3-BF89-11D1-BE35-080036B11A03} "Microsoft DocProp Shell Ext"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\docprop2.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{63da6ec0-2e98-11cf-8d82-444553540000} "Microsoft FTP Folder"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\msieftp.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{00BB2764-6A77-11D0-A535-00C04FD7D062} "Microsoft History AutoComplete List"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{5E6AB780-7743-11CF-A12B-00AA004AE837} "Microsoft Internet Toolbar"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{00BB2765-6A77-11D0-A535-00C04FD7D062} "Microsoft Multiple AutoComplete List Container"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{42042206-2D85-11D3-8CFF-005004838597} "Microsoft Office HTML Icon Handler"</td> <td>"Microsoft Corporation"</td> <td>D:\Programme\Microsoft Office\OFFICE11\msohev.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{2206CDB2-19C1-11D1-89E0-00C04FD7A829} "Microsoft OLE DB Service Component Data Links"</td> <td>"Microsoft Corporation"</td> <td>C:\Programme\Gemeinsame Dateien\System\Ole DB\oledb32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{03C036F1-A186-11D0-824A-00AA005B4383} "Microsoft Shell Folder AutoComplete List"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{CFBFAE00-17A6-11D0-99CB-00C04FD64497} "Microsoft Url Sucheingriff"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{3C374A40-BAE4-11CF-BF7D-00AA006946EE} "Microsoft URL-Verlauf-Dienst"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{A6FD9E45-6E44-43f9-8644-08598F5A74D9} "Midi Properties Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shmedia.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{6756A641-DE71-11d0-831B-00AA005B4383} "MRU AutoComplete List"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{ECF03A33-103D-11d2-854D-006008059367} "MyDocs Copy Hook"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\mydocs.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{ECF03A32-103D-11d2-854D-006008059367} "MyDocs Drop Target"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\mydocs.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{4a7ded0a-ad25-11d0-98a8-0800361b1103} "MyDocs menu and properties"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\mydocs.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{7007ACC7-3202-11D1-AAD2-00805FC1270E} "Netzwerkverbindungen"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\NETSHELL.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{992CFFA0-F557-101A-88EC-00DD010CCC48} "Netzwerkverbindungen"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\NETSHELL.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{10CFC467-4392-11d2-8DB4-00C04FA31A66} "Offline Files Folder Options"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\cscui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{750fdf0e-2a26-11d1-a3ea-080036587f03} "Offline Files Menu"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\cscui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{3EA48300-8CF6-101B-84FB-666CCB9BCD32} "OLE-Eigenschaftenseite für Dokumente"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\docprop.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E} "Ordner 'Offlinedateien'"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\cscui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{58f1f272-9240-4f51-b6d4-fd63d1618591} "Passport-Assistent"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\netplwiz.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{41E300E0-78B6-11ce-849B-444553540000} "PlusPack CPL-Erweiterung"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\themeui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{D8BD2030-6FC9-11D0-864F-00AA006809D9} "PostAgent"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\webcheck.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{9DB7A13C-F208-4981-8353-73CC61AE2783} "Previous Versions"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\twext.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{596AB062-B4D2-4215-9F74-E9109B0A8153} "Previous Versions Property Page"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\twext.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{AF4F6510-F982-11d0-8595-00AA004CD6D8} "Registry Tree Options Utility"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{F0152790-D56E-4445-850E-4F3117DB740C} "Remote Sessions CPL Extension"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\remotepg.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{3F953603-1008-4f6e-A73A-04AAC7A992F1} "Scanner und Kameras"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wiashext.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{83bbcbf3-b28a-4919-a5aa-73027445d672} "Scanner und Kameras"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wiashext.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{905667aa-acd6-11d2-8080-00805f6596d2} "Scanner und Kameras"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wiashext.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{E211B736-43FD-11D1-9EFB-0000F8757FCD} "Scanner und Kameras"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wiashext.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD} "Scanner und Kameras"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wiashext.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF} "Scheduling UI icon handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\mstask.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{797F1E90-9EDD-11cf-8D8E-00AA0060F5BF} "Scheduling UI property sheet handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\mstask.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{BD84B380-8CA2-1069-AB1D-08000948F534} "Schriftarten"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\fontext.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{D20EA4E1-3957-11d2-A40B-0C5020524152} "Schriftarten"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{9461b922-3c5a-11d2-bf8b-00c04fb93661} "Search Assistant OC"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{30D02401-6A81-11d0-8274-00C04FD5AE38} "Search Band"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{9E56BE60-C50F-11CF-9A2C-00A0C90A90CE} "Sendmail service"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\sendmail.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{9E56BE61-C50F-11CF-9A2C-00A0C90A90CE} "Sendmail service"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\sendmail.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{2559a1f7-21d7-11d4-bdaf-00c04f60b9f0} "Set Program Access and Defaults"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{352EC2B7-8B9A-11D1-B8AE-006008059382} "Shell Application Manager"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\appwiz.cpl</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{0A89A860-D7B1-11CE-8350-444553540000} "Shell Automation Inproc Service"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{ECD4FC4E-521C-11D0-B792-00A0C90312E1} "Shell Band Site Menu"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{ECD4FC4C-521C-11D0-B792-00A0C90312E1} "Shell DeskBar"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{3CCF8A41-5C85-11d0-9796-00AA00B90ADF} "Shell DeskBarApp"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} "Shell DocObject Viewer"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{45AC2688-0253-4ED8-97DE-B5370FA7D48A} "Shell Extension for Malware scanning"</td> <td>"Avira GmbH"</td> <td>D:\Programme\Avira\AntiVir Desktop\shlext.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{60254CA5-953B-11CF-8C96-00AA00B8708C} "Shell Extension For Windows Script Host"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\wshext.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} "Shell Icon Handler for Application References"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\dfshim.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{66e4e4fb-f385-4dd0-8d74-a2efd1bc6178} "Shell Image Data Factory"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shimgvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{eb9b1153-3b57-4e68-959a-a3266bc3d7fe} "Shell Image Property Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shimgvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{e84fda7c-1d6a-45f6-b725-cb260c236066} "Shell Image Verbs"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shimgvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{9E51E0D0-6E0F-11d2-9601-00C04FA31A86} "Shell properties for a DS object"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\dsquery.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{ECD4FC4D-521C-11D0-B792-00A0C90312E1} "Shell Rebar BandSite"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{21569614-B795-46b1-85F4-E737A8DC09AD} "Shell Search Band"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{56117100-C0CD-101B-81E2-00AA004AE837} "Shell-Datenauszughandler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shscrap.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{77597368-7b15-11d0-a0c2-080036af3f03} "Shellerweiterung für Webdrucker"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\printui.dll</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{764BF0E1-F219-11ce-972D-00AA00A14F56} "Shellerweiterungen für die Dateikomprimierung"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{40dd6e20-7c17-11ce-a804-00aa003ca9f6} "Shellerweiterungen für Freigaben"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\ntshrui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} "Shellerweiterungen für Freigaben"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\ntshrui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{59be4990-f85c-11ce-aff7-00aa003ca9f6} "Shellerweiterungen für Microsoft Windows-Netzwerkobjekte"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\ntlanui2.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{e82a2d71-5b2f-43a0-97b8-81be15854de8} "ShellLink for Application References"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\dfshim.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{6b33163c-76a5-4b6c-bf21-45de9cd503a1} "Shellobjekt des Webpublishing-Assistenten"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\netplwiz.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{5E2121EE-0300-11D4-8D3B-444553540000} "SimpleShlExt Class"</td> <td>"Advanced Micro Devices, Inc."</td> <td>D:\Programme\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{F5175861-2688-11d0-9C5E-00AA00A45957} "Subscription Folder"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\webcheck.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{ABBE31D0-6DAE-11D0-BECA-00C04FD940BE} "Subscription Mgr"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\webcheck.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{2559a1f0-21d7-11d4-bdaf-00c04f60b9f0} "Suchen"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{E0E11A09-5CB8-4B6C-8332-E00720A168F2} "Syntaxanalyse der Adressleiste"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{0DF44EAA-FF21-4412-828E-260A8728E7F1} "Taskleiste und Startmenü"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shell32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{7BD29E00-76C1-11CF-9DD0-00A0C9034933} "Temporary Internet Files"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{7BD29E01-76C1-11CF-9DD0-00A0C9034933} "Temporary Internet Files"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{acf35015-526e-4230-9596-becbe19f0ac9} "Track Popup Bar"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7} "TrayAgent"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\webcheck.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{7376D660-C583-11d0-A3A5-00C04FD706EC} "TridentImageExtractor"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{4838CD50-7E5D-4811-9B17-C47A85539F28} "TuneUp Disk Space Explorer Shell Extension"</td> <td>"TuneUp Software"</td> <td>D:\Programme\TuneUp Utilities 2009FULL\DseShExt-x86.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{4858E7D9-8E12-45a3-B6A3-1CD128C9D403} "TuneUp Shredder Shell Extension"</td> <td>"TuneUp Software"</td> <td>D:\Programme\TuneUp Utilities 2009FULL\SDShelEx-win32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{44440D00-FF19-4AFC-B765-9A0970567D97} "TuneUp Theme Extension"</td> <td>"TuneUp Software"</td> <td>C:\WINDOWS\System32\uxtuneup.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{DD313E04-FEFF-11d1-8ECD-0000F87A470C} "User Assist"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{FF393560-C2A7-11CF-BFF4-444553540000} "Verlauf"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{D20EA4E1-3957-11d2-A40B-0C5020524153} "Verwaltung"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{40C3D757-D6E4-4b49-BB41-0E5BBEA28817} "Video Media Properties Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shmedia.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{c5a40261-cd64-4ccf-84cb-c394da41d590} "Video Thumbnail Extractor"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shmedia.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{E4B29F9D-D390-480b-92FD-7DDB47101D71} "Wav Properties Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shmedia.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{07798131-AF23-11d1-9111-00A0C98BA67D} "Web Search"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{E6FB5E20-DE35-11CF-9C87-00AA005127ED} "WebCheck"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\webcheck.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB} "WebCheck SyncMgr Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\webcheck.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB} "WebCheckChannelAgent"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\webcheck.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{08165EA0-E946-11CF-9C87-00AA005127ED} "WebCheckWebCrawler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\webcheck.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{BDEADF00-C265-11D0-BCED-00A0C90AB50F} "Webordner"</td> <td>"Microsoft Corporation"</td> <td>C:\PROGRA~1\GEMEIN~1\MICROS~1\WEBFOL~1\MSONSEXT.DLL</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{CC6EEFFB-43F6-46c5-9619-51D571967F7D} "Webpublishing-Assistent"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\netplwiz.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{45670FA8-ED97-4F44-BC93-305082590BFB} "Windows XPS Document Metadata Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\XPSSHHDR.DLL</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{44121072-A222-48f2-A58A-6D9AD51EBBE9} "Windows XPS Document Thumbnail Handler"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\XPSSHHDR.DLL</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{2559a1f2-21d7-11d4-bdaf-00c04f60b9f0} "Windows-Sicherheit"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{F1B9284F-E9DC-4e68-9D7E-42362A59F0FD} "WMP Add To Playlist Launcher"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wmpshell.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{8DD448E6-C188-4aed-AF92-44956194EB1F} "WMP Burn Audio CD Launcher"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wmpshell.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C} "WMP Play As Playlist Launcher"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wmpshell.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{9DBD2C50-62AD-11d0-B806-00C04FD706EC} "Zusammenfassungs-Miniaturansichthandler (DOCFILES)"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shimgvw.dll</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{7849596a-48ea-486e-8937-a2a3009f31a9} "PostBootReminder object"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shell32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{fbeb8a05-beee-4442-804e-409d6c4515e9} "ShellFolder for CD Burning"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\SHELL32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{35CEC8A3-2BE6-11D2-8773-92E220524153} "SysTray"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\stobject.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{E6FB5E20-DE35-11CF-9C87-00AA005127ED} "WebCheck"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\webcheck.dll</td> <td>File exists</td> </tr> <tr> <td class="group" colspan="6">Internet Explorer</td> </tr> <tr> <td class="reg" colspan="6">HKCU\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{32683183-48a0-441b-a342-7c2a440a9478} "{32683183-48a0-441b-a342-7c2a440a9478}"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="reg" colspan="6">HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td><binary data> "&Adresse"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browseui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td><binary data> "&Links"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\SHELL32.dll</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound"><binary data> "ITBarLayout"</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="reg" colspan="6">HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>{CFBFAE00-17A6-11D0-99CB-00C04FD64497} "Microsoft Url Sucheingriff"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shdocvw.dll</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_21"<br>hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab</td> <td>"Sun Microsystems, Inc."</td> <td>C:\Programme\Java\jre6\bin\npjpi160_21.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} "Java Plug-in 1.6.0_21"<br>hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab</td> <td>"Sun Microsystems, Inc."</td> <td>C:\Programme\Java\jre6\bin\npjpi160_21.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_21"<br>hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab</td> <td>"Sun Microsystems, Inc."</td> <td>C:\Programme\Java\jre6\bin\npjpi160_21.dll</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{D27CDB6E-AE6D-11CF-96B8-444553540000} "{D27CDB6E-AE6D-11CF-96B8-444553540000}"<br>hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab</td> <td class="notfound"></td> <td class="notfound"></td> <td class="notfound">File not found | COM-object registry key not found</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{53707962-6F74-2D53-2644-206D7942484F} "ClsidExtension"</td> <td>"Safer Networking Limited"</td> <td>D:\PROGRA~1\SPYBOT~1\SDHelper.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Exec"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\Network Diagnostic\xpnetdiag.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"ICQ7"</td> <td>"ICQ, Inc."</td> <td>D:\Programme\ICQ7.0\ICQ.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>{FF059E31-CC5A-4E2E-BF3B-96E929D65503} "Recherchieren"</td> <td>"Microsoft Corporation"</td> <td>D:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper"</td> <td>"Adobe Systems Incorporated"</td> <td>C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper"</td> <td>"Sun Microsystems, Inc."</td> <td>C:\Programme\Java\jre6\bin\jp2ssv.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>{E7E6F031-17CE-4C07-BC86-EABFE594F69C} "JQSIEStartDetectorImpl Class"</td> <td>"Sun Microsystems, Inc."</td> <td>C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{53707962-6F74-2D53-2644-206D7942484F} "Spybot-S&D IE Protection"</td> <td>"Safer Networking Limited"</td> <td>D:\PROGRA~1\SPYBOT~1\SDHelper.dll</td> <td>File exists</td> </tr> <tr> <td class="group" colspan="6">Known DLLs</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"advapi32"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\advapi32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"comdlg32"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\comdlg32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"gdi32"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\gdi32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"imagehlp"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\imagehlp.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"kernel32"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\kernel32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"lz32"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\lz32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"ole32"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\ole32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"oleaut32"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\oleaut32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"olecli32"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\olecli32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"olecnv32"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\olecnv32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"olesvr32"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\olesvr32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"olethk32"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\olethk32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"rpcrt4"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\rpcrt4.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"shell32"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\shell32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"url"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\url.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"urlmon"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\urlmon.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"user32"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\user32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"version"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\version.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"wininet"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wininet.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"wldap32"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wldap32.dll</td> <td>File exists</td> </tr> <tr> <td class="group" colspan="6">LSA Providers</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Control\Lsa</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Authentication packages"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\msv1_0.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Notification packages"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\scecli.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Security Packages"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\kerberos.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Security Packages"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\msv1_0.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Security Packages"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\schannel.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Security Packages"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wdigest.dll</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"SecurityProviders"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\msapsspc.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"SecurityProviders"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\schannel.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"SecurityProviders"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\digest.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"SecurityProviders"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\msnsspc.dll</td> <td>File exists</td> </tr> <tr> <td class="group" colspan="6">Logon</td> </tr> <tr> <td class="reg" colspan="6">%AllUsersProfile%\Startmenü\Programme\Autostart</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"desktop.ini"</td> <td></td> <td>C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\desktop.ini</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"Logitech SetPoint.lnk"</td> <td>"Logitech Inc."</td> <td>D:\Programme\Logitech\SetPoint\SetPoint.exe</td> <td>Shortcut exists | File exists</td> </tr> <tr> <td class="reg" colspan="6">%UserProfile%\Startmenü\Programme\Autostart</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"desktop.ini"</td> <td></td> <td>C:\Dokumente und Einstellungen\Sharkoon\Startmenü\Programme\Autostart\desktop.ini</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Shell"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\Explorer.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Userinit"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\userinit.exe</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"StartupPrograms"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\rdpclip.exe</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\Software\Microsoft\Windows\CurrentVersion\Run</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"36X Raid Configurer"</td> <td>"Gigabyte Technology Corp."</td> <td>C:\WINDOWS\system32\xRaidSetup.exe boot</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"avgnt"</td> <td>"Avira GmbH"</td> <td>"D:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"BDRegion"</td> <td>"cyberlink"</td> <td>C:\Programme\Cyberlink\Shared files\brs.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"IMJPMIG8.1"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"ISUSScheduler"</td> <td>"InstallShield Software Corporation"</td> <td>"C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe" -start</td> <td>File exists</td> </tr> <tr> <td class="nodetails"><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td class="nodetails">"JMB36X IDE Setup"</td> <td class="nodetails"></td> <td class="nodetails">C:\WINDOWS\RaidTool\xInsIDE.exe</td> <td class="nodetails">File found, but it contains no detailed information</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"PDVD9LanguageShortcut"</td> <td>"CyberLink Corp."</td> <td>I:\Software\PDVD9Ultra\PowerDVD9\Language\Language.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"PHIME2002ASync"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"RemoteControl10"</td> <td>"CyberLink Corp."</td> <td>D:\Programme\CyberLink\PowerDVD\PowerDVD10\PDVD10Serv.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"RTHDCPL"</td> <td>"Realtek Semiconductor Corp."</td> <td>RTHDCPL.EXE</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"StartCCC"</td> <td>"Advanced Micro Devices, Inc."</td> <td>"D:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"SunJavaUpdateSched"</td> <td>"Sun Microsystems, Inc."</td> <td>"C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe"</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"XboxStat"</td> <td>"Microsoft Corporation"</td> <td>"C:\Programme\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun</td> <td>File exists</td> </tr> <tr> <td class="group" colspan="6">Network Providers</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft Windows-Netzwerk"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\ntlanman.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft-Terminaldienste"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\drprov.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Web Client Network"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\davclnt.dll</td> <td>File exists</td> </tr> <tr> <td class="group" colspan="6">Print Monitors</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"BJ Language Monitor"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\cnbjmon.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"hpzsnt09"</td> <td>"HP"</td> <td>C:\WINDOWS\system32\hpzsnt09.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Local Port"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\localspl.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Microsoft Document Imaging Writer Monitor"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\mdimon.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"PJL Language Monitor"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\pjlmon.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Standard TCP/IP Port"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\tcpmon.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"USB Monitor"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\usbmon.dll</td> <td>File exists</td> </tr> <tr> <td class="group" colspan="6">Services</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Services</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>".NET Runtime Optimization Service v2.0.50727_X86" (clr_optimization_v2.0.50727_32)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Ablagemappe" (ClipSrv)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\clipsrv.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Anmeldedienst" (Netlogon)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\lsass.exe</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"Anwendungsverwaltung" (AppMgmt)</td> <td class="notfound"></td> <td class="notfound">C:\WINDOWS\System32\appmgmts.dll</td> <td class="notfound">File not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Arbeitsstationsdienst" (lanmanworkstation)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\wkssvc.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"ASP.NET State Service" (aspnet_state)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Automatische Konfiguration (verkabelt)" (Dot3svc)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\dot3svc.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Automatische Updates" (wuauserv)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wuauserv.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Avira AntiVir Guard" (AntiVirService)</td> <td>"Avira GmbH"</td> <td>D:\Programme\Avira\AntiVir Desktop\avguard.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Avira AntiVir Planer" (AntiVirSchedulerService)</td> <td>"Avira GmbH"</td> <td>D:\Programme\Avira\AntiVir Desktop\sched.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"COM+-Ereignissystem" (EventSystem)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\es.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"COM+-Systemanwendung" (COMSysApp)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\dllhost.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Computerbrowser" (Browser)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\browser.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"CryptSvc" (CryptSvc)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\cryptsvc.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"DCOM-Server-Prozessstart" (DcomLaunch)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\rpcss.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Designs" (Themes)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shsvcs.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"DHCP-Client" (Dhcp)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\dhcpcsvc.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Dienst für Seriennummern der tragbaren Medien" (WmdmPmSN)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\MsPMSNSv.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Distributed Transaction Coordinator" (MSDTC)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\msdtc.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"DNS-Client" (Dnscache)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\dnsrslvr.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Druckwarteschlange" (Spooler)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\spoolsv.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Ereignisprotokoll" (Eventlog)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\services.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Extensible Authentication-Protokolldienst" (EapHost)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\eapsvc.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Fehlerberichterstattungsdienst" (ERSvc)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\ersvc.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Gatewaydienst auf Anwendungsebene" (ALG)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\alg.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Geschützter Speicher" (ProtectedStorage)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\lsass.exe</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"HID Input Service" (HidServ)</td> <td class="notfound"></td> <td class="notfound"> C:\WINDOWS\System32\hidserv.dll</td> <td class="notfound">File not found</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Hilfe und Support" (helpsvc)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"HTTP-SSL" (HTTPFilter)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\w3ssl.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"IMAPI-CD-Brenn-COM-Dienste" (ImapiService)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\imapi.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Indexdienst" (cisvc)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\cisvc.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ry">|||| </td> <td>"InstallDriver Table Manager" (IDriverT)</td> <td>"Macrovision Corporation"</td> <td>C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1150\Intel 32\IDriverT.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Integritätsschlüssel- und Zertifikatverwaltungsdienst" (hkmsvc)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\kmsvc.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Intelligenter Hintergrundübertragungsdienst" (BITS)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\qmgr.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"IPSEC-Dienste" (PolicyAgent)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\lsass.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Java Quick Starter" (JavaQuickStarterService)</td> <td>"Sun Microsystems, Inc."</td> <td>C:\Programme\Java\jre6\bin\jqs.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Kompatibilität für schnelle Benutzerumschaltung" (FastUserSwitchingCompatibility)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shsvcs.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Konfigurationsfreie drahtlose Verbindung" (WZCSVC)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\wzcsvc.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Lavasoft Ad-Aware Service" (Lavasoft Ad-Aware Service)</td> <td>"Lavasoft"</td> <td>C:\Programme\Lavasoft\Ad-Aware\AAWService.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Leistungsdatenprotokolle und Warnungen" (SysmonLog)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\smlogsvc.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"MS Software Shadow Copy Provider" (SwPrv)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\dllhost.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"NAP-Agent (Network Access Protection)" (napagent)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\qagentrt.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"NetMeeting-Remotedesktop-Freigabe" (mnmsrvc)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\mnmsrvc.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Netzwerkverbindungen" (Netman)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\netman.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Netzwerkversorgungsdienst" (xmlprov)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\xmlprov.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"NLA (Network Location Awareness)" (Nla)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\mswsock.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"NT-LM-Sicherheitsdienst" (NtLmSsp)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\lsass.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Office Source Engine" (ose)</td> <td>"Microsoft Corporation"</td> <td>C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Plug & Play" (PlugPlay)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\services.exe</td> <td>File exists</td> </tr> <tr> <td class="nodetails"><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td class="nodetails">"PnkBstrA" (PnkBstrA)</td> <td class="nodetails"></td> <td class="nodetails">C:\WINDOWS\system32\PnkBstrA.exe</td> <td class="nodetails">File found, but it contains no detailed information</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"QoS-RSVP" (RSVP)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\rsvp.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"RAS-Verbindungsverwaltung" (RasMan)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\rasmans.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Remoteprozeduraufruf (RPC)" (RpcSs)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\rpcss.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"RPC-Locator" (RpcLocator)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\locator.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Secondary Logon" (seclogon)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\seclogon.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Server" (lanmanserver)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\srvsvc.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Shellhardwareerkennung" (ShellHWDetection)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\shsvcs.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Sicherheitscenter" (wscsvc)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wscsvc.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Sicherheitskontenverwaltung" (SamSs)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\lsass.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Sitzungs-Manager für Remotedesktophilfe" (RDSessMgr)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\sessmgr.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Smartcard" (SCardSvr)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\SCardSvr.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"SSDP-Suchdienst" (SSDPSRV)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\ssdpsrv.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Systemereignisbenachrichtigung" (SENS)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\sens.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Systemwiederherstellungsdienst" (srservice)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\srsvc.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Taskplaner" (Schedule)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\schedsvc.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"TCP/IP-NetBIOS-Hilfsprogramm" (LmHosts)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\lmhsvc.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Telefonie" (TapiSrv)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\tapisrv.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Terminaldienste" (TermService)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\termsrv.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"TuneUp Drive Defrag-Dienst" (TuneUp.Defrag)</td> <td>"TuneUp Software"</td> <td>C:\WINDOWS\System32\TuneUpDefragService.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Universeller Plug & Play-Gerätehost" (upnphost)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\upnphost.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Unterbrechungsfreie Stromversorgung" (UPS)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\ups.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Verwaltung für automatische RAS-Verbindung" (RasAuto)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\rasauto.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Verwaltung logischer Datenträger" (dmserver)</td> <td>"Microsoft Corp."</td> <td>C:\WINDOWS\System32\dmserver.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Verwaltungsdienst für die Verwaltung logischer Datenträger" (dmadmin)</td> <td>"Microsoft Corp., Veritas Software"</td> <td>C:\WINDOWS\System32\dmadmin.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Volumeschattenkopie" (VSS)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\vssvc.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Webclient" (WebClient)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\webclnt.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Wechselmedien" (NtmsSvc)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\ntmssvc.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Windows Audio" (AudioSrv)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\audiosrv.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Windows CardSpace" (idsvc)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Windows Installer" (MSIServer)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\msiexec.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Windows Presentation Foundation Font Cache 3.0.0.0" (FontCache3.0.0.0)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Windows User Mode Driver Framework" (UMWdf)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wdfmgr.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Windows-Bilderfassung (WIA)" (stisvc)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wiaservc.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Windows-Firewall/Gemeinsame Nutzung der Internetverbindung" (SharedAccess)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\ipnathlp.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"Windows-Verwaltungsinstrumentation" (winmgmt)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wbem\WMIsvc.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Windows-Zeitgeber" (W32Time)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\w32time.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"WMI-Leistungsadapter" (WmiApSrv)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\wbem\wmiapsrv.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Überwachung verteilter Verknüpfungen (Client)" (TrkWks)</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\trkwks.dll</td> <td>File exists</td> </tr> <tr> <td class="group" colspan="6">Winlogon</td> </tr> <tr> <td class="reg" colspan="6">HKCU\Control Panel\IOProcs</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">"MVB"</td> <td class="notfound"></td> <td class="notfound">mvfs32.dll</td> <td class="notfound">File not found</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"UIHost"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\logonui.exe</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"VmApplet"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\sysdm.cpl</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{B587E2B1-4D59-4e7e-AED9-22B9DF11D053} "802.3 Group Policy"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\dot3gpclnt.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A} "EFS recovery"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\scecli.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B} "Internet Explorer-Branding"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\iedkcs32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{4CFB60C1-FAA6-47f1-89AA-0B18730C9FD3} "Internet Explorer-Zonenzuordnung"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\iedkcs32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{C631DF4C-088F-4156-B058-4375F0853CD8} "Microsoft Offline Files"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\cscui.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{3610eda5-77ef-11d2-8dc5-00c04fa31a66} "Microsoft-Datenträgerkontingent"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\dskquota.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>{827D319E-6EAC-11D2-A4EA-00C04F79F83A} "Security"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\scecli.dll</td> <td>File exists</td> </tr> <tr> <td class="notfound"><input type="checkbox" disabled checked></td> <td class="rs rn"> </td> <td class="notfound">{c6dc5466-785a-11d2-84d0-00c04fb169f7} "Softwareinstallation"</td> <td class="notfound"></td> <td class="notfound">appmgmts.dll</td> <td class="notfound">File not found</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"AtiExtEvent"</td> <td>"ATI Technologies Inc."</td> <td>C:\WINDOWS\system32\Ati2evxx.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"crypt32chain"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\crypt32.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"cryptnet"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\cryptnet.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"cscdll"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\cscdll.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"dimsntfy"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\dimsntfy.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"ScCertProp"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wlnotify.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"Schedule"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wlnotify.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"sclgntfy"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\sclgntfy.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"SensLogn"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\WlNotify.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"termsrv"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wlnotify.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"wlballoon"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\wlnotify.dll</td> <td>File exists</td> </tr> <tr> <td class="group" colspan="6">Winsock Providers</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"NLA-Namespace"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\mswsock.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs ru"> </td> <td>"NTDS"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\winrnr.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"TCP/IP"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\System32\mswsock.dll</td> <td>File exists</td> </tr> <tr> <td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"MSAFD NetBIOS [\Device\NetBT_Tcpip_{09A2B6FA-FF1A-4CA1-8429-DF88CE99C76F}] DATAGRAM 1"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\mswsock.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"MSAFD NetBIOS [\Device\NetBT_Tcpip_{09A2B6FA-FF1A-4CA1-8429-DF88CE99C76F}] SEQPACKET 1"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\mswsock.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"MSAFD NetBIOS [\Device\NetBT_Tcpip_{B29E5562-BFA1-499D-9839-32621FD49654}] DATAGRAM 2"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\mswsock.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"MSAFD NetBIOS [\Device\NetBT_Tcpip_{B29E5562-BFA1-499D-9839-32621FD49654}] SEQPACKET 2"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\mswsock.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"MSAFD NetBIOS [\Device\NetBT_Tcpip_{C1758F2B-A730-4B08-A1F9-B6E9CC10343F}] DATAGRAM 3"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\mswsock.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"MSAFD NetBIOS [\Device\NetBT_Tcpip_{C1758F2B-A730-4B08-A1F9-B6E9CC10343F}] SEQPACKET 3"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\mswsock.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"MSAFD NetBIOS [\Device\NetBT_Tcpip_{C860DB58-D370-48E8-ABAE-DFCBE837FC7A}] DATAGRAM 0"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\mswsock.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"MSAFD NetBIOS [\Device\NetBT_Tcpip_{C860DB58-D370-48E8-ABAE-DFCBE837FC7A}] SEQPACKET 0"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\mswsock.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"MSAFD Tcpip [RAW/IP]"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\mswsock.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"MSAFD Tcpip [TCP/IP]"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\mswsock.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"MSAFD Tcpip [UDP/IP]"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\mswsock.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"RSVP TCP Service Provider"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\rsvpsp.dll</td> <td>File exists</td> </tr> <tr> <td><input type="checkbox" disabled checked></td> <td class="rs rt">||||||</td> <td>"RSVP UDP Service Provider"</td> <td>"Microsoft Corporation"</td> <td>C:\WINDOWS\system32\rsvpsp.dll</td> <td>File exists</td> </tr> </table> <p>If You have questions or want to get some help, You can visit <a href="hxxp://forum.online-solutions.ru" target="_blank">hxxp://forum.online-solutions.ru</a></p> </body></html> |
.\debug.cpp(238) : Debug log started at 14.09.2010 - 15:58:45 .\boot_cleaner.cpp(527) : Bootkit Remover .\boot_cleaner.cpp(528) : (c) 2009 eSage Lab .\boot_cleaner.cpp(529) : www.esagelab.com .\boot_cleaner.cpp(533) : Program version: 1.2.0.0 .\boot_cleaner.cpp(540) : OS Version: Microsoft Windows XP Home Edition Service Pack 3 (build 2600) .\debug.cpp(248) : ********************************************** .\debug.cpp(249) : *** [ LOADED MODULES INFORMATION ] *********** .\debug.cpp(250) : ********************************************** .\debug.cpp(256) : 0x804d7000 0x0020e000 "\WINDOWS\system32\ntkrnlpa.exe" .\debug.cpp(256) : 0x806e5000 0x00020d00 "\WINDOWS\system32\hal.dll" .\debug.cpp(256) : 0xba5a8000 0x00002000 "\WINDOWS\system32\KDCOM.DLL" .\debug.cpp(256) : 0xba4b8000 0x00003000 "\WINDOWS\system32\BOOTVID.dll" .\debug.cpp(256) : 0xb9f88000 0x0001f000 "imagesrv.sys" .\debug.cpp(256) : 0xb9f59000 0x0002f000 "ACPI.sys" .\debug.cpp(256) : 0xba5aa000 0x00002000 "\WINDOWS\System32\DRIVERS\WMILIB.SYS" .\debug.cpp(256) : 0xb9f48000 0x00011000 "pci.sys" .\debug.cpp(256) : 0xba0a8000 0x0000a000 "isapnp.sys" .\debug.cpp(256) : 0xba670000 0x00001000 "pciide.sys" .\debug.cpp(256) : 0xba328000 0x00007000 "\WINDOWS\System32\DRIVERS\PCIIDEX.SYS" .\debug.cpp(256) : 0xba0b8000 0x0000b000 "MountMgr.sys" .\debug.cpp(256) : 0xb9f29000 0x0001f000 "ftdisk.sys" .\debug.cpp(256) : 0xba330000 0x00005000 "PartMgr.sys" .\debug.cpp(256) : 0xba0c8000 0x0000e000 "VolSnap.sys" .\debug.cpp(256) : 0xb9f11000 0x00018000 "atapi.sys" .\debug.cpp(256) : 0xba0d8000 0x00010000 "jraid.sys" .\debug.cpp(256) : 0xb9ef9000 0x00018000 "\WINDOWS\system32\DRIVERS\SCSIPORT.SYS" .\debug.cpp(256) : 0xba5ac000 0x00002000 "imagedrv.sys" .\debug.cpp(256) : 0xba0e8000 0x00009000 "disk.sys" .\debug.cpp(256) : 0xba0f8000 0x0000d000 "\WINDOWS\System32\DRIVERS\CLASSPNP.SYS" .\debug.cpp(256) : 0xb9ed9000 0x00020000 "fltmgr.sys" .\debug.cpp(256) : 0xb9ec7000 0x00012000 "sr.sys" .\debug.cpp(256) : 0xba108000 0x0000f000 "Lbd.sys" .\debug.cpp(256) : 0xba118000 0x0000a000 "PxHelp20.sys" .\debug.cpp(256) : 0xb9eb0000 0x00017000 "KSecDD.sys" .\debug.cpp(256) : 0xb9e23000 0x0008d000 "Ntfs.sys" .\debug.cpp(256) : 0xb9df6000 0x0002d000 "NDIS.sys" .\debug.cpp(256) : 0xb9de3000 0x00013000 "sfvfs02.sys" .\debug.cpp(256) : 0xba338000 0x00008000 "sfhlp02.sys" .\debug.cpp(256) : 0xb9dd1000 0x00012000 "sfdrv01.sys" .\debug.cpp(256) : 0xb9db7000 0x0001a000 "Mup.sys" .\debug.cpp(256) : 0xba148000 0x0000a000 "\SystemRoot\System32\DRIVERS\intelppm.sys" .\debug.cpp(256) : 0xb98c0000 0x00487000 "\SystemRoot\system32\DRIVERS\ati2mtag.sys" .\debug.cpp(256) : 0xb98ac000 0x00014000 "\SystemRoot\system32\DRIVERS\VIDEOPRT.SYS" .\debug.cpp(256) : 0xb9884000 0x00028000 "\SystemRoot\system32\DRIVERS\HDAudBus.sys" .\debug.cpp(256) : 0xba398000 0x00006000 "\SystemRoot\System32\DRIVERS\usbuhci.sys" .\debug.cpp(256) : 0xb9860000 0x00024000 "\SystemRoot\System32\DRIVERS\USBPORT.SYS" .\debug.cpp(256) : 0xba3a0000 0x00008000 "\SystemRoot\system32\DRIVERS\usbehci.sys" .\debug.cpp(256) : 0xb9847000 0x00019000 "\SystemRoot\System32\DRIVERS\Rtenicxp.sys" .\debug.cpp(256) : 0xba158000 0x00010000 "\SystemRoot\System32\DRIVERS\serial.sys" .\debug.cpp(256) : 0xba574000 0x00004000 "\SystemRoot\System32\DRIVERS\serenum.sys" .\debug.cpp(256) : 0xb9833000 0x00014000 "\SystemRoot\System32\DRIVERS\parport.sys" .\debug.cpp(256) : 0xba168000 0x0000b000 "\SystemRoot\system32\DRIVERS\imapi.sys" .\debug.cpp(256) : 0xba580000 0x00003000 "\SystemRoot\System32\Drivers\CLBStor.SYS" .\debug.cpp(256) : 0xba178000 0x00010000 "\SystemRoot\System32\DRIVERS\cdrom.sys" .\debug.cpp(256) : 0xba188000 0x0000f000 "\SystemRoot\System32\DRIVERS\redbook.sys" .\debug.cpp(256) : 0xb9810000 0x00023000 "\SystemRoot\System32\DRIVERS\ks.sys" .\debug.cpp(256) : 0xba79c000 0x00001000 "\SystemRoot\System32\DRIVERS\audstub.sys" .\debug.cpp(256) : 0xba198000 0x0000d000 "\SystemRoot\System32\DRIVERS\rasl2tp.sys" .\debug.cpp(256) : 0xba590000 0x00003000 "\SystemRoot\System32\DRIVERS\ndistapi.sys" .\debug.cpp(256) : 0xb97f9000 0x00017000 "\SystemRoot\System32\DRIVERS\ndiswan.sys" .\debug.cpp(256) : 0xba1a8000 0x0000b000 "\SystemRoot\System32\DRIVERS\raspppoe.sys" .\debug.cpp(256) : 0xba1b8000 0x0000c000 "\SystemRoot\System32\DRIVERS\raspptp.sys" .\debug.cpp(256) : 0xba3c8000 0x00005000 "\SystemRoot\System32\DRIVERS\TDI.SYS" .\debug.cpp(256) : 0xb97c0000 0x00011000 "\SystemRoot\System32\DRIVERS\psched.sys" .\debug.cpp(256) : 0xba1c8000 0x00009000 "\SystemRoot\System32\DRIVERS\msgpc.sys" .\debug.cpp(256) : 0xba3d8000 0x00005000 "\SystemRoot\System32\DRIVERS\ptilink.sys" .\debug.cpp(256) : 0xba3e8000 0x00005000 "\SystemRoot\System32\DRIVERS\raspti.sys" .\debug.cpp(256) : 0xba1d8000 0x0000a000 "\SystemRoot\System32\DRIVERS\termdd.sys" .\debug.cpp(256) : 0xba3f8000 0x00007000 "\SystemRoot\System32\DRIVERS\kbdclass.sys" .\debug.cpp(256) : 0xba400000 0x00006000 "\SystemRoot\System32\DRIVERS\mouclass.sys" .\debug.cpp(256) : 0xba410000 0x00006000 "\SystemRoot\system32\DRIVERS\seehcri.sys" .\debug.cpp(256) : 0xba5b8000 0x00002000 "\SystemRoot\System32\DRIVERS\swenum.sys" .\debug.cpp(256) : 0xb9762000 0x0005e000 "\SystemRoot\System32\DRIVERS\update.sys" .\debug.cpp(256) : 0xba5a4000 0x00004000 "\SystemRoot\System32\DRIVERS\mssmbios.sys" .\debug.cpp(256) : 0xba208000 0x0000a000 "\SystemRoot\System32\Drivers\NDProxy.SYS" .\debug.cpp(256) : 0xad684000 0x0001c000 "\SystemRoot\system32\drivers\AtiHdmi.sys" .\debug.cpp(256) : 0xad660000 0x00024000 "\SystemRoot\system32\drivers\portcls.sys" .\debug.cpp(256) : 0xba218000 0x0000f000 "\SystemRoot\system32\drivers\drmk.sys" .\debug.cpp(256) : 0xba228000 0x0000f000 "\SystemRoot\System32\DRIVERS\usbhub.sys" .\debug.cpp(256) : 0xba5c0000 0x00002000 "\SystemRoot\System32\DRIVERS\USBD.SYS" .\debug.cpp(256) : 0xad1d4000 0x0048c000 "\SystemRoot\system32\drivers\RtkHDAud.sys" .\debug.cpp(256) : 0xba448000 0x00005000 "\??\C:\WINDOWS\system32\SAVRKBootTasks.sys" .\debug.cpp(256) : 0xba5c6000 0x00002000 "\SystemRoot\System32\Drivers\Fs_Rec.SYS" .\debug.cpp(256) : 0xba7fa000 0x00001000 "\SystemRoot\System32\Drivers\Null.SYS" .\debug.cpp(256) : 0xba5ca000 0x00002000 "\SystemRoot\System32\Drivers\Beep.SYS" .\debug.cpp(256) : 0xba468000 0x00007000 "\SystemRoot\System32\DRIVERS\HIDPARSE.SYS" .\debug.cpp(256) : 0xba470000 0x00006000 "\SystemRoot\System32\drivers\vga.sys" .\debug.cpp(256) : 0xba5ce000 0x00002000 "\SystemRoot\System32\Drivers\mnmdd.SYS" .\debug.cpp(256) : 0xba5d2000 0x00002000 "\SystemRoot\System32\DRIVERS\RDPCDD.sys" .\debug.cpp(256) : 0xba480000 0x00005000 "\SystemRoot\System32\Drivers\Msfs.SYS" .\debug.cpp(256) : 0xba490000 0x00008000 "\SystemRoot\System32\Drivers\Npfs.SYS" .\debug.cpp(256) : 0xb97e5000 0x00003000 "\SystemRoot\System32\DRIVERS\rasacd.sys" .\debug.cpp(256) : 0xad151000 0x00013000 "\SystemRoot\System32\DRIVERS\ipsec.sys" .\debug.cpp(256) : 0xad0f8000 0x00059000 "\SystemRoot\System32\DRIVERS\tcpip.sys" .\debug.cpp(256) : 0xad0a8000 0x00028000 "\SystemRoot\System32\DRIVERS\netbt.sys" .\debug.cpp(256) : 0xad082000 0x00026000 "\SystemRoot\System32\DRIVERS\ipnat.sys" .\debug.cpp(256) : 0xba248000 0x00009000 "\SystemRoot\System32\DRIVERS\wanarp.sys" .\debug.cpp(256) : 0xad060000 0x00022000 "\SystemRoot\System32\drivers\afd.sys" .\debug.cpp(256) : 0xba258000 0x00009000 "\SystemRoot\System32\DRIVERS\netbios.sys" .\debug.cpp(256) : 0xba4a8000 0x00006000 "\SystemRoot\system32\DRIVERS\ssmdrv.sys" .\debug.cpp(256) : 0xba278000 0x0000e000 "\SystemRoot\system32\DRIVERS\xusb21.sys" .\debug.cpp(256) : 0xba288000 0x0000d000 "\SystemRoot\system32\DRIVERS\WDFLDR.SYS" .\debug.cpp(256) : 0xad035000 0x0002b000 "\SystemRoot\System32\DRIVERS\rdbss.sys" .\debug.cpp(256) : 0xacfb9000 0x0007c000 "\SystemRoot\system32\DRIVERS\Wdf01000.sys" .\debug.cpp(256) : 0xacf49000 0x00070000 "\SystemRoot\System32\DRIVERS\mrxsmb.sys" .\debug.cpp(256) : 0xba298000 0x0000b000 "\SystemRoot\System32\Drivers\Fips.SYS" .\debug.cpp(256) : 0xace8d000 0x0001c000 "\SystemRoot\system32\DRIVERS\avipbb.sys" .\debug.cpp(256) : 0xba5d8000 0x00002000 "\??\D:\Programme\Avira\AntiVir Desktop\avgio.sys" .\debug.cpp(256) : 0xba390000 0x00007000 "\SystemRoot\System32\DRIVERS\usbprint.sys" .\debug.cpp(256) : 0xba2c8000 0x00010000 "\SystemRoot\System32\Drivers\Cdfs.SYS" .\debug.cpp(256) : 0xba3b8000 0x00007000 "\SystemRoot\system32\DRIVERS\USBSTOR.SYS" .\debug.cpp(256) : 0xba3d0000 0x00008000 "\SystemRoot\System32\DRIVERS\usbccgp.sys" .\debug.cpp(256) : 0xad1a4000 0x00003000 "\SystemRoot\System32\DRIVERS\hidusb.sys" .\debug.cpp(256) : 0xba2d8000 0x00009000 "\SystemRoot\System32\DRIVERS\HIDCLASS.SYS" .\debug.cpp(256) : 0xad1a0000 0x00003000 "\SystemRoot\System32\DRIVERS\mouhid.sys" .\debug.cpp(256) : 0xba3f0000 0x00006000 "\SystemRoot\system32\DRIVERS\point32.sys" .\debug.cpp(256) : 0xba418000 0x00007000 "\SystemRoot\system32\DRIVERS\LHidFilt.Sys" .\debug.cpp(256) : 0xad198000 0x00004000 "\SystemRoot\System32\DRIVERS\kbdhid.sys" .\debug.cpp(256) : 0xba420000 0x00008000 "\SystemRoot\system32\DRIVERS\LMouFilt.Sys" .\debug.cpp(256) : 0xacdfd000 0x00018000 "\SystemRoot\System32\Drivers\dump_atapi.sys" .\debug.cpp(256) : 0xba5dc000 0x00002000 "\SystemRoot\System32\Drivers\dump_WMILIB.SYS" .\debug.cpp(256) : 0xbf800000 0x001c5000 "\SystemRoot\System32\win32k.sys" .\debug.cpp(256) : 0xad188000 0x00003000 "\SystemRoot\System32\drivers\Dxapi.sys" .\debug.cpp(256) : 0xba440000 0x00005000 "\SystemRoot\System32\watchdog.sys" .\debug.cpp(256) : 0xbf000000 0x00012000 "\SystemRoot\System32\drivers\dxg.sys" .\debug.cpp(256) : 0xba7c7000 0x00001000 "\SystemRoot\System32\drivers\dxgthk.sys" .\debug.cpp(256) : 0xbf012000 0x0004e000 "\SystemRoot\System32\ati2dvag.dll" .\debug.cpp(256) : 0xbf060000 0x0009c000 "\SystemRoot\System32\ati2cqag.dll" .\debug.cpp(256) : 0xbf0fc000 0x0009a000 "\SystemRoot\System32\atikvmag.dll" .\debug.cpp(256) : 0xbf196000 0x00066000 "\SystemRoot\System32\atiok3x2.dll" .\debug.cpp(256) : 0xbf1fc000 0x0035b000 "\SystemRoot\System32\ati3duag.dll" .\debug.cpp(256) : 0xbf557000 0x0020a000 "\SystemRoot\System32\ativvaxx.dll" .\debug.cpp(256) : 0xbffa0000 0x00046000 "\SystemRoot\System32\ATMFD.DLL" .\debug.cpp(256) : 0xaa298000 0x00014000 "\SystemRoot\system32\DRIVERS\avgntflt.sys" .\debug.cpp(256) : 0xaa271000 0x00027000 "\SystemRoot\System32\Drivers\CLBUDF.SYS" .\debug.cpp(256) : 0xaa260000 0x00011000 "\SystemRoot\System32\Drivers\Udfs.SYS" .\debug.cpp(256) : 0xaa2c8000 0x00004000 "\SystemRoot\System32\DRIVERS\ndisuio.sys" .\debug.cpp(256) : 0xa9ff3000 0x00015000 "\SystemRoot\system32\drivers\wdmaud.sys" .\debug.cpp(256) : 0xb9702000 0x0000f000 "\SystemRoot\system32\drivers\sysaudio.sys" .\debug.cpp(256) : 0xba5d4000 0x00002000 "\SystemRoot\System32\Drivers\ParVdm.SYS" .\debug.cpp(256) : 0xacf09000 0x0000d000 "\SystemRoot\system32\drivers\npf_devolo.sys" .\debug.cpp(256) : 0xa9baf000 0x0002c000 "\??\D:\Programme\CyberLink\PowerDVD\PowerDVD10\NavFilter\000.fcl" .\debug.cpp(256) : 0xa9b58000 0x00057000 "\SystemRoot\System32\DRIVERS\srv.sys" .\debug.cpp(256) : 0xa9b04000 0x0002c000 "\??\I:\Software\PDVD9Ultra\PowerDVD9\000.fcl" .\debug.cpp(256) : 0xa96b3000 0x00041000 "\SystemRoot\System32\Drivers\HTTP.sys" .\debug.cpp(256) : 0xa91a8000 0x0002b000 "\SystemRoot\system32\drivers\kmixer.sys" .\debug.cpp(256) : 0x7c910000 0x000b9000 "\WINDOWS\system32\ntdll.dll" .\debug.cpp(263) : ********************************************** .\debug.cpp(307) : *** [ DEVICE OBJECTS INFORMATION ] *********** .\debug.cpp(308) : ********************************************** .\debug.cpp(369) : SymbolicLink "\GLOBAL??\D:" .\debug.cpp(400) : Destination "\Device\HarddiskVolume3" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HDAUDIO#FUNC_01&VEN_10EC&DEV_0885&SUBSYS_1458A002&REV_1001#4&808a433&0&0201#{6994ad04-93ef-11d0-a3cc-00a0c9223196}" .\debug.cpp(400) : Destination "\Device\00000078" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Scsi3:" .\debug.cpp(400) : Destination "\Device\Ide\IdePort1" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HDAUDIO#FUNC_01&VEN_1002&DEV_AA01&SUBSYS_00AA0100&REV_1001#5&1e0a9156&0&0001#{65e8773e-8f56-11d0-a3b9-00a0c9223196}" .\debug.cpp(400) : Destination "\Device\00000072" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\NDIS" .\debug.cpp(400) : Destination "\Device\Ndis" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\CLBUDF" .\debug.cpp(400) : Destination "\CLBUDF" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\DISPLAY1" .\debug.cpp(400) : Destination "\Device\Video0" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HID#Vid_045e&Pid_008c&Col03#7&3a5ee66f&0&0002#{4d1e55b2-f16f-11cf-88cb-001111000030}" .\debug.cpp(400) : Destination "\Device\00000087" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCL{1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}" .\debug.cpp(400) : Destination "\Device\PCL{1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\NPF_devolo_NdisWanIp" .\debug.cpp(400) : Destination "\Device\NPF_devolo_NdisWanIp" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{ffbb6e3f-ccfe-4d84-90d9-421418b03a8e}" .\debug.cpp(400) : Destination "\Device\0000003d" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HID#Vid_046d&Pid_c517&MI_01&Col01#8&2df7eaf0&0&0000#{378de44c-56ef-11d1-bc8c-00a0c91405dd}" .\debug.cpp(400) : Destination "\Device\00000089" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#MS_PPPOEMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}" .\debug.cpp(400) : Destination "\Device\00000034" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\DISPLAY2" .\debug.cpp(400) : Destination "\Device\Video1" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\ACPI#GenuineIntel_-_x86_Family_6_Model_23#_1#{97fadb10-4e33-40ae-359c-8bef029dbdd0}" .\debug.cpp(400) : Destination "\Device\00000045" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\ACPI#PNP0C0C#2&daba3ff&0#{4afa3d53-74a7-11d0-be5e-00a0c9062857}" .\debug.cpp(400) : Destination "\Device\00000046" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Ip" .\debug.cpp(400) : Destination "\Device\Ip" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\DISPLAY3" .\debug.cpp(400) : Destination "\Device\Video2" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#ROOT_HUB20#4&88ab043&1#{f18a0e88-c30c-11d0-8815-00a0c906bed8}" .\debug.cpp(400) : Destination "\Device\USBPDO-7" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\IDE#CdRomHL-DT-ST_BDDVDRW_GGC-H20L_______________1.03____#354b383252393338343220392020202020202020#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}" .\debug.cpp(400) : Destination "\Device\Ide\IdeDeviceP2T0L0-e" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\E:" .\debug.cpp(400) : Destination "\Device\CdRom0" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\NPF_devolo_{1DB2B73E-AF43-4F06-B0CD-4CC63F7FAC68}" .\debug.cpp(400) : Destination "\Device\NPF_devolo_{1DB2B73E-AF43-4F06-B0CD-4CC63F7FAC68}" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\avgio" .\debug.cpp(400) : Destination "\Device\avgio" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\IPSECDev" .\debug.cpp(400) : Destination "\Device\IPSEC" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\DISPLAY4" .\debug.cpp(400) : Destination "\Device\Video3" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#MS_NDISWANIP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}" .\debug.cpp(400) : Destination "\Device\00000033" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\CLBStor" .\debug.cpp(400) : Destination "\Device\CLBStor" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Volume{c28f431b-457b-11de-af8f-806d6172696f}" .\debug.cpp(400) : Destination "\Device\HarddiskVolume2" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\STORAGE#Volume#1&30a96598&0&Signature15D68DOffset100000Length15D50C00000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}" .\debug.cpp(400) : Destination "\Device\HarddiskVolume4" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\NDPROXY" .\debug.cpp(400) : Destination "\Device\NDProxy" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\{C1FCC185-55B3-4E00-814B-C588A13525E1}#Vid_046d&Pid_c517&Rev_3810&MI_01&Col01&MouFilt#9&2f6b0c89&0&00#{efbbd94f-3314-42ef-a495-4389f3715704}" .\debug.cpp(400) : Destination "\Device\0000008e" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Scsi4:" .\debug.cpp(400) : Destination "\Device\Scsi\JRAID1" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#Vid_045e&Pid_0719#FE1F3E50#{a5dcbf10-6530-11d2-901f-00c04fb951ed}" .\debug.cpp(400) : Destination "\Device\USBPDO-8" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\DISPLAY5" .\debug.cpp(400) : Destination "\Device\Video4" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\CDR4_XP" .\debug.cpp(400) : Destination "\Device\PxHelperDevice0" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\$VDMLPT1" .\debug.cpp(400) : Destination "\Device\ParallelVdm0" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HDAUDIO#FUNC_01&VEN_10EC&DEV_0885&SUBSYS_1458A002&REV_1001#4&808a433&0&0201#{86841137-ed8e-4d97-9975-f2ed56b4430e}" .\debug.cpp(400) : Destination "\Device\00000078" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_8086&DEV_2937&SUBSYS_50041458&REV_02#3&13c0b0c5&0&D0#{3abf6f2d-71c4-462a-8a92-1e6861e6af27}" .\debug.cpp(400) : Destination "\Device\NTPNP_PCI0002" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{3c0d501a-140b-11d1-b40f-00a0c9223196}" .\debug.cpp(400) : Destination "\Device\0000003d" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\NPF_devolo_{D99B01A2-3F28-4A58-9196-0E948A9411DC}" .\debug.cpp(400) : Destination "\Device\NPF_devolo_{D99B01A2-3F28-4A58-9196-0E948A9411DC}" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_8086&DEV_2934&SUBSYS_50041458&REV_02#3&13c0b0c5&0&E8#{3abf6f2d-71c4-462a-8a92-1e6861e6af27}" .\debug.cpp(400) : Destination "\Device\NTPNP_PCI0010" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\WMIDataDevice" .\debug.cpp(400) : Destination "\Device\WMIDataDevice" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Scsi5:" .\debug.cpp(400) : Destination "\Device\Scsi\imagedrv1" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HDAUDIO#FUNC_01&VEN_1002&DEV_AA01&SUBSYS_00AA0100&REV_1001#5&1e0a9156&0&0001#{dda54a40-1e4c-11d1-a050-405705c10000}" .\debug.cpp(400) : Destination "\Device\00000072" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\COM1" .\debug.cpp(400) : Destination "\Device\Serial0" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\avgntflt" .\debug.cpp(400) : Destination "\FileSystem\Filters\avgntflt" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{dff220f3-f70f-11d0-b917-00a0c9223196}" .\debug.cpp(400) : Destination "\Device\0000003d" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HID#Vid_045e&Pid_008c&Col01#7&3a5ee66f&0&0000#{378de44c-56ef-11d1-bc8c-00a0c91405dd}" .\debug.cpp(400) : Destination "\Device\00000085" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_8086&DEV_293A&SUBSYS_50061458&REV_02#3&13c0b0c5&0&EF#{3abf6f2d-71c4-462a-8a92-1e6861e6af27}" .\debug.cpp(400) : Destination "\Device\NTPNP_PCI0013" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_8086&DEV_2936&SUBSYS_50041458&REV_02#3&13c0b0c5&0&EA#{3abf6f2d-71c4-462a-8a92-1e6861e6af27}" .\debug.cpp(400) : Destination "\Device\NTPNP_PCI0012" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_8086&DEV_2935&SUBSYS_50041458&REV_02#3&13c0b0c5&0&E9#{3abf6f2d-71c4-462a-8a92-1e6861e6af27}" .\debug.cpp(400) : Destination "\Device\NTPNP_PCI0011" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\{1DB2B73E-AF43-4F06-B0CD-4CC63F7FAC68}" .\debug.cpp(400) : Destination "\Device\{1DB2B73E-AF43-4F06-B0CD-4CC63F7FAC68}" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\ACPI#GenuineIntel_-_x86_Family_6_Model_23#_0#{97fadb10-4e33-40ae-359c-8bef029dbdd0}" .\debug.cpp(400) : Destination "\Device\00000044" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PIPE" .\debug.cpp(400) : Destination "\Device\NamedPipe" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Lbd" .\debug.cpp(400) : Destination "\Device\Lbd" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c5066e-72c1-11d2-9755-0000f8004788}" .\debug.cpp(400) : Destination "\Device\KSENUM#00000002" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{2eb07ea0-7e70-11d0-a5d6-28db04c10000}" .\debug.cpp(400) : Destination "\Device\0000003d" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\POINT32FILTER" .\debug.cpp(400) : Destination "\Device\Point32Filter" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\sfhlp02i" .\debug.cpp(400) : Destination "\Device\sfhlp02i" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\imagesrv" .\debug.cpp(400) : Destination "\Device\imagesrv" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\G:" .\debug.cpp(400) : Destination "\Device\HarddiskVolume4" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Volume{60b1e48e-76c9-11de-b3b9-806d6172696f}" .\debug.cpp(400) : Destination "\Device\CdRom0" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\UNC" .\debug.cpp(400) : Destination "\Device\Mup" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\IPNAT" .\debug.cpp(400) : Destination "\Device\IPNAT" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PSched" .\debug.cpp(400) : Destination "\Device\PSched" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{6994ad04-93ef-11d0-a3cc-00a0c9223196}" .\debug.cpp(400) : Destination "\Device\0000003d" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\FltMgrMsg" .\debug.cpp(400) : Destination "\FileSystem\Filters\FltMgrMsg" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HCD0" .\debug.cpp(400) : Destination "\Device\USBFDO-0" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCL{B154377D-700F-42cc-9474-23858FBDF4BD}" .\debug.cpp(400) : Destination "\Device\PCL{B154377D-700F-42cc-9474-23858FBDF4BD}" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#Vid_045e&Pid_008c#6&2efad024&0&3#{a5dcbf10-6530-11d2-901f-00c04fb951ed}" .\debug.cpp(400) : Destination "\Device\USBPDO-13" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Tcp" .\debug.cpp(400) : Destination "\Device\Tcp" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#ROOT_HUB#4&30b58b36&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}" .\debug.cpp(400) : Destination "\Device\USBPDO-0" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Volume{5969a4b2-793b-11df-a79e-001d7dd2c2fb}" .\debug.cpp(400) : Destination "\Device\HarddiskVolume4" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\LCD" .\debug.cpp(400) : Destination "\Device\VideoPdo0" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HCD1" .\debug.cpp(400) : Destination "\Device\USBFDO-1" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#MS_PTIMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}" .\debug.cpp(400) : Destination "\Device\00000039" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\IMAGEDRV#NeroImageDrv#0000#{2accfe60-c130-11d2-b082-00a0c91efb8b}" .\debug.cpp(400) : Destination "\Device\00000043" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\sfdrv01" .\debug.cpp(400) : Destination "\Device\sfdrv01" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PhysicalDrive0" .\debug.cpp(400) : Destination "\Device\Harddisk0\DR0" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\CLBUDF.VXD" .\debug.cpp(400) : Destination "\CLBUDF" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PRN" .\debug.cpp(400) : Destination "\DosDevices\LPT1" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#ROOT_HUB#4&bd04752&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}" .\debug.cpp(400) : Destination "\Device\USBPDO-5" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#MS_PSCHEDMP#0001#{ad498944-762f-11d0-8dcb-00c04fc3358c}" .\debug.cpp(400) : Destination "\Device\00000037" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HCD2" .\debug.cpp(400) : Destination "\Device\USBFDO-2" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{53172480-4791-11d0-a5d6-28db04c10000}" .\debug.cpp(400) : Destination "\Device\0000003d" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\{D99B01A2-3F28-4A58-9196-0E948A9411DC}" .\debug.cpp(400) : Destination "\Device\{D99B01A2-3F28-4A58-9196-0E948A9411DC}" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\sfvfs02" .\debug.cpp(400) : Destination "\Device\sfvfs02" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#Vid_045e&Pid_0719#FE1F3E50#{ec87f1e3-c13b-4100-b5f7-8b84d54260cb}" .\debug.cpp(400) : Destination "\Device\USBPDO-8" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PhysicalDrive1" .\debug.cpp(400) : Destination "\Device\Harddisk1\DR1" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HDAUDIO#FUNC_01&VEN_10EC&DEV_0885&SUBSYS_1458A002&REV_1001#4&808a433&0&0201#{dda54a40-1e4c-11d1-a050-405705c10000}" .\debug.cpp(400) : Destination "\Device\00000078" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\sysaudio" .\debug.cpp(400) : Destination "\Device\sysaudio" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\IDE#CdRomHL-DT-ST_BDDVDRW_GGC-H20L_______________1.03____#354b383252393338343220392020202020202020#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}" .\debug.cpp(400) : Destination "\Device\Ide\IdeDeviceP2T0L0-e" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#Vid_03f0&Pid_7204#TH3BT1616V6B#{a5dcbf10-6530-11d2-901f-00c04fb951ed}" .\debug.cpp(400) : Destination "\Device\USBPDO-9" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\fsWrap" .\debug.cpp(400) : Destination "\Device\FsWrap" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HCD3" .\debug.cpp(400) : Destination "\Device\USBFDO-3" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{97ebaacb-95bd-11d0-a3ea-00a0c9223196}" .\debug.cpp(400) : Destination "\Device\0000003d" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#MS_PSCHEDMP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}" .\debug.cpp(400) : Destination "\Device\00000036" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\CdRom0" .\debug.cpp(400) : Destination "\Device\CdRom0" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PhysicalDrive2" .\debug.cpp(400) : Destination "\Device\Harddisk2\DR5" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HCD4" .\debug.cpp(400) : Destination "\Device\USBFDO-4" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#ROOT_HUB#4&70ace42&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}" .\debug.cpp(400) : Destination "\Device\USBPDO-1" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\NPF_devolo_{62605275-60FD-444B-B977-9EDCEB791E75}" .\debug.cpp(400) : Destination "\Device\NPF_devolo_{62605275-60FD-444B-B977-9EDCEB791E75}" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HCD5" .\debug.cpp(400) : Destination "\Device\USBFDO-5" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HDAUDIO#FUNC_01&VEN_1002&DEV_AA01&SUBSYS_00AA0100&REV_1001#5&1e0a9156&0&0001#{dba43692-ad00-48aa-b1a7-ffa99a04ee17}" .\debug.cpp(400) : Destination "\Device\00000072" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\{5D129C5F-06FB-4440-B66E-A2DFC4C9065E}" .\debug.cpp(400) : Destination "\Device\{5D129C5F-06FB-4440-B66E-A2DFC4C9065E}" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\ACPI#FixedButton#2&daba3ff&0#{4afa3d53-74a7-11d0-be5e-00a0c9062857}" .\debug.cpp(400) : Destination "\Device\0000004a" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Global" .\debug.cpp(400) : Destination "\GLOBAL??" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\I:" .\debug.cpp(400) : Destination "\Device\HarddiskVolume1" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HID#Vid_046d&Pid_c517&MI_01&Col05#8&2df7eaf0&0&0004#{4d1e55b2-f16f-11cf-88cb-001111000030}" .\debug.cpp(400) : Destination "\Device\0000008d" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HID#Vid_046d&Pid_c517&MI_01&Col04#8&2df7eaf0&0&0003#{4d1e55b2-f16f-11cf-88cb-001111000030}" .\debug.cpp(400) : Destination "\Device\0000008c" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HID#Vid_046d&Pid_c517&MI_00#8&a20ad2e&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030}" .\debug.cpp(400) : Destination "\Device\00000088" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\NPF_devolo_{54C7D140-09EF-11D1-B25A-F5FE627ED95E}" .\debug.cpp(400) : Destination "\Device\NPF_devolo_{54C7D140-09EF-11D1-B25A-F5FE627ED95E}" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HDAUDIO#FUNC_01&VEN_10EC&DEV_0885&SUBSYS_1458A002&REV_1001#4&808a433&0&0201#{65e8773d-8f56-11d0-a3b9-00a0c9223196}" .\debug.cpp(400) : Destination "\Device\00000078" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\ACPI#PNP0501#1#{86e0d1e0-8089-11d0-9ce4-08003e301f73}" .\debug.cpp(400) : Destination "\Device\00000067" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HCD6" .\debug.cpp(400) : Destination "\Device\USBFDO-6" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PxHelperDevice0" .\debug.cpp(400) : Destination "\Device\PxHelperDevice0" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50671-72c1-11d2-9755-0000f8004788}" .\debug.cpp(400) : Destination "\Device\KSENUM#00000002" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\LPTENUM#MicrosoftRawPort#5&19182b41&0&LPT1#{811fc6a5-f728-11d0-a537-0000f8753ed1}" .\debug.cpp(400) : Destination "\Device\Parallel0" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HCD7" .\debug.cpp(400) : Destination "\Device\USBFDO-7" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#ROOT_HUB#4&2d364fd6&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}" .\debug.cpp(400) : Destination "\Device\USBPDO-2" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{3e227e76-690d-11d2-8161-0000f8775bf1}" .\debug.cpp(400) : Destination "\Device\0000003d" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HID#Vid_045e&Pid_008c&Col01#7&3a5ee66f&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030}" .\debug.cpp(400) : Destination "\Device\00000085" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{ad809c00-7b88-11d0-a5d6-28db04c10000}" .\debug.cpp(400) : Destination "\Device\0000003d" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{9ea331fa-b91b-45f8-9285-bd2bc77afcde}" .\debug.cpp(400) : Destination "\Device\0000003d" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_8086&DEV_2938&SUBSYS_50041458&REV_02#3&13c0b0c5&0&D1#{3abf6f2d-71c4-462a-8a92-1e6861e6af27}" .\debug.cpp(400) : Destination "\Device\NTPNP_PCI0003" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_197B&DEV_2363&SUBSYS_B0001458&REV_02#4&24c54f4f&0&00E3#{2accfe60-c130-11d2-b082-00a0c91efb8b}" .\debug.cpp(400) : Destination "\Device\NTPNP_PCI0021" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\{0118E73E-40DE-48C2-8489-6E47FF588AB0}" .\debug.cpp(400) : Destination "\Device\{0118E73E-40DE-48C2-8489-6E47FF588AB0}" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HDAUDIO#FUNC_01&VEN_1002&DEV_AA01&SUBSYS_00AA0100&REV_1001#5&1e0a9156&0&0001#{65e8773d-8f56-11d0-a3b9-00a0c9223196}" .\debug.cpp(400) : Destination "\Device\00000072" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\ACPI#PNP0501#1#{4d36e978-e325-11ce-bfc1-08002be10318}" .\debug.cpp(400) : Destination "\Device\00000067" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#ROOT_HUB#4&26397ab7&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}" .\debug.cpp(400) : Destination "\Device\USBPDO-6" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Volume{43ac48bc-45ec-11de-ad29-001d7dd2c2fb}" .\debug.cpp(400) : Destination "\Device\HarddiskVolume3" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\sfdrv01i" .\debug.cpp(400) : Destination "\Device\sfdrv01i" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\MountPointManager" .\debug.cpp(400) : Destination "\Device\MountPointManager" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50674-72c1-11d2-9755-0000f8004788}" .\debug.cpp(400) : Destination "\Device\KSENUM#00000002" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HID#Vid_046d&Pid_c517&MI_00#8&a20ad2e&0&0000#{884b96c3-56ef-11d1-bc8c-00a0c91405dd}" .\debug.cpp(400) : Destination "\Device\00000088" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#Vid_1058&Pid_1021#574D41565532343234343138#{a5dcbf10-6530-11d2-901f-00c04fb951ed}" .\debug.cpp(400) : Destination "\Device\USBPDO-11" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\ssmctl" .\debug.cpp(400) : Destination "\Device\ssmctl" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#ROOT_HUB#4&99f0121&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}" .\debug.cpp(400) : Destination "\Device\USBPDO-4" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#ROOT_HUB20#4&269b1df4&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}" .\debug.cpp(400) : Destination "\Device\USBPDO-3" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#MS_L2TPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}" .\debug.cpp(400) : Destination "\Device\00000032" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\MbDlDp32" .\debug.cpp(400) : Destination "\Device\PxHelperDevice0" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\STORAGE#Volume#1&30a96598&0&SignatureD96AE90COffset7E00Length4E22C6E00#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}" .\debug.cpp(400) : Destination "\Device\HarddiskVolume2" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\WanArp" .\debug.cpp(400) : Destination "\Device\WANARP" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HDAUDIO#FUNC_01&VEN_10EC&DEV_0885&SUBSYS_1458A002&REV_1001#4&808a433&0&0201#{65e8773e-8f56-11d0-a3b9-00a0c9223196}" .\debug.cpp(400) : Destination "\Device\00000078" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_8086&DEV_2939&SUBSYS_50041458&REV_02#3&13c0b0c5&0&D2#{3abf6f2d-71c4-462a-8a92-1e6861e6af27}" .\debug.cpp(400) : Destination "\Device\NTPNP_PCI0004" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\RealTekCard" .\debug.cpp(400) : Destination "\Device\RealTekCard" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\sfhlp02" .\debug.cpp(400) : Destination "\Device\sfhlp02" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#ftdisk#0000#{53f5630e-b6bf-11d0-94f2-00a0c91efb8b}" .\debug.cpp(400) : Destination "\Device\00000002" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HID#Vid_046d&Pid_c517&MI_01&Col01#8&2df7eaf0&0&0000#{4d1e55b2-f16f-11cf-88cb-001111000030}" .\debug.cpp(400) : Destination "\Device\00000089" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\{C1FCC185-55B3-4E00-814B-C588A13525E1}#Vid_046d&Pid_c517&Rev_3810&MI_01&Col01&HidFilt#9&2f6b0c89&0&00#{d21a038a-7762-4451-a518-d571b1a7a24a}" .\debug.cpp(400) : Destination "\Device\00000090" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\NPF_devolo_{4D14FFA8-232E-4D09-9DB2-44854B496E0D}" .\debug.cpp(400) : Destination "\Device\NPF_devolo_{4D14FFA8-232E-4D09-9DB2-44854B496E0D}" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\IDE#DiskSAMSUNG_HD322HJ_________________________1AC01113#31534137444a5357303238383835202020202020#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}" .\debug.cpp(400) : Destination "\Device\Ide\IdeDeviceP1T0L0-1b" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_8086&DEV_293C&SUBSYS_50061458&REV_02#3&13c0b0c5&0&D7#{3abf6f2d-71c4-462a-8a92-1e6861e6af27}" .\debug.cpp(400) : Destination "\Device\NTPNP_PCI0005" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_1002&DEV_9442&SUBSYS_05021002&REV_00#4&1a9c9f1a&0&0008#{5b45201d-f2f2-4f3b-85bb-30ff1f953599}" .\debug.cpp(400) : Destination "\Device\NTPNP_PCI0019" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\STORAGE#Volume#1&30a96598&0&SignatureD96AE90COffset4E22CEC00Length45A3809600#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}" .\debug.cpp(400) : Destination "\Device\HarddiskVolume3" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}" .\debug.cpp(400) : Destination "\Device\0000003d" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\NDISWANIP" .\debug.cpp(400) : Destination "\Device\NdisWanIp" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\sfvfs02i" .\debug.cpp(400) : Destination "\Device\sfvfs02i" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Volume{e4e588f8-4648-11de-8cbf-001d7dd2c2fb}" .\debug.cpp(400) : Destination "\Device\HarddiskVolume1" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Scsi0:" .\debug.cpp(400) : Destination "\Device\Ide\IdePort0" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{bf963d80-c559-11d0-8a2b-00a0c9255ac1}" .\debug.cpp(400) : Destination "\Device\0000003d" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{fbf6f530-07b9-11d2-a71e-0000f8004788}" .\debug.cpp(400) : Destination "\Device\KSENUM#00000002" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\{C860DB58-D370-48E8-ABAE-DFCBE837FC7A}" .\debug.cpp(400) : Destination "\Device\{C860DB58-D370-48E8-ABAE-DFCBE837FC7A}" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HID#Vid_046d&Pid_c517&MI_01&Col02#8&2df7eaf0&0&0001#{4d1e55b2-f16f-11cf-88cb-001111000030}" .\debug.cpp(400) : Destination "\Device\0000008a" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#Vid_046d&Pid_c517#6&2efad024&0&1#{a5dcbf10-6530-11d2-901f-00c04fb951ed}" .\debug.cpp(400) : Destination "\Device\USBPDO-12" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{4747b320-62ce-11cf-a5d6-28db04c10000}" .\debug.cpp(400) : Destination "\Device\0000003d" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#MS_PPTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}" .\debug.cpp(400) : Destination "\Device\00000035" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\IDE#CdRomHL-DT-ST_BDDVDRW_GGC-H20L_______________1.03____#354b383252393338343220392020202020202020#{1186654d-47b8-48b9-beb9-7df113ae3c67}" .\debug.cpp(400) : Destination "\Device\Ide\IdeDeviceP2T0L0-e" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PTILINK1" .\debug.cpp(400) : Destination "\Device\ParTechInc0" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{a7c7a5b1-5af3-11d1-9ced-00a024bf0407}" .\debug.cpp(400) : Destination "\Device\0000003d" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\NDISTAPI" .\debug.cpp(400) : Destination "\Device\NdisTapi" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\NdisWan" .\debug.cpp(400) : Destination "\Device\NdisWan" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\{C1FCC185-55B3-4E00-814B-C588A13525E1}#Vid_046d&Pid_c517&Rev_3810&MI_00&HidFilt#9&306beb11&0&00#{a977f711-0c14-45cb-bd65-36da522b189a}" .\debug.cpp(400) : Destination "\Device\0000008f" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Scsi1:" .\debug.cpp(400) : Destination "\Device\Ide\IdePort2" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\IPMULTICAST" .\debug.cpp(400) : Destination "\Device\IPMULTICAST" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\LPT1" .\debug.cpp(400) : Destination "\Device\Parallel0" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#seehcri#0000#{6374bba5-aaff-4809-aa9c-3eab8a52b861}" .\debug.cpp(400) : Destination "\Device\0000003c" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PTILINK2" .\debug.cpp(400) : Destination "\Device\ParTechInc1" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HID#Vid_045e&Pid_008c&Col02#7&3a5ee66f&0&0001#{4d1e55b2-f16f-11cf-88cb-001111000030}" .\debug.cpp(400) : Destination "\Device\00000086" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\NPF_devolo_{C1758F2B-A730-4B08-A1F9-B6E9CC10343F}" .\debug.cpp(400) : Destination "\Device\NPF_devolo_{C1758F2B-A730-4B08-A1F9-B6E9CC10343F}" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Shadow" .\debug.cpp(400) : Destination "\Device\LanmanRedirector" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PTILINK3" .\debug.cpp(400) : Destination "\Device\ParTechInc2" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HID#Vid_046d&Pid_c517&MI_01&Col03#8&2df7eaf0&0&0002#{4d1e55b2-f16f-11cf-88cb-001111000030}" .\debug.cpp(400) : Destination "\Device\0000008b" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\FltMgr" .\debug.cpp(400) : Destination "\FileSystem\Filters\FltMgr" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\NPF_devolo_{0118E73E-40DE-48C2-8489-6E47FF588AB0}" .\debug.cpp(400) : Destination "\Device\NPF_devolo_{0118E73E-40DE-48C2-8489-6E47FF588AB0}" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\NPF_devolo_{A2A1E76E-C5F9-4570-AA24-4FD72EACA2B3}" .\debug.cpp(400) : Destination "\Device\NPF_devolo_{A2A1E76E-C5F9-4570-AA24-4FD72EACA2B3}" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\NPF_devolo_{5D129C5F-06FB-4440-B66E-A2DFC4C9065E}" .\debug.cpp(400) : Destination "\Device\NPF_devolo_{5D129C5F-06FB-4440-B66E-A2DFC4C9065E}" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\FtControl" .\debug.cpp(400) : Destination "\Device\FtControl" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\C:" .\debug.cpp(400) : Destination "\Device\HarddiskVolume2" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\CLBUDF.SYS" .\debug.cpp(400) : Destination "\CLBUDF" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\MAILSLOT" .\debug.cpp(400) : Destination "\Device\MailSlot" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\AUX" .\debug.cpp(400) : Destination "\DosDevices\COM1" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\ACPI#PNP0400#4&12ced765&0#{97f76ef0-f883-11d0-af1f-0000f800845c}" .\debug.cpp(400) : Destination "\Device\00000068" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_10EC&DEV_8168&SUBSYS_E0001458&REV_01#4&345cafaf&0&00E4#{ad498944-762f-11d0-8dcb-00c04fc3358c}" .\debug.cpp(400) : Destination "\Device\NTPNP_PCI0022" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\{A2A1E76E-C5F9-4570-AA24-4FD72EACA2B3}" .\debug.cpp(400) : Destination "\Device\{A2A1E76E-C5F9-4570-AA24-4FD72EACA2B3}" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Scsi2:" .\debug.cpp(400) : Destination "\Device\Ide\IdePort3" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Ndisuio" .\debug.cpp(400) : Destination "\Device\Ndisuio" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#RDP_MOU#0000#{378de44c-56ef-11d1-bc8c-00a0c91405dd}" .\debug.cpp(400) : Destination "\Device\0000003b" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\NUL" .\debug.cpp(400) : Destination "\Device\Null" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\GLOBALROOT" .\debug.cpp(400) : Destination "" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\NPF_devolo_{FAE54BEC-ADEA-4EBC-86BE-E845714D2BE5}" .\debug.cpp(400) : Destination "\Device\NPF_devolo_{FAE54BEC-ADEA-4EBC-86BE-E845714D2BE5}" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\USBSTOR#Disk&Ven_WD&Prod_Ext_HDD_1021&Rev_2002#574D41565532343234343138&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}" .\debug.cpp(400) : Destination "\Device\00000082" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#RDP_KBD#0000#{884b96c3-56ef-11d1-bc8c-00a0c91405dd}" .\debug.cpp(400) : Destination "\Device\0000003a" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#Vid_05e3&Pid_0608#5&20e42e60&0&4#{f18a0e88-c30c-11d0-8815-00a0c906bed8}" .\debug.cpp(400) : Destination "\Device\USBPDO-10" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\{4D14FFA8-232E-4D09-9DB2-44854B496E0D}" .\debug.cpp(400) : Destination "\Device\{4D14FFA8-232E-4D09-9DB2-44854B496E0D}" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\HDAUDIO#FUNC_01&VEN_1002&DEV_AA01&SUBSYS_00AA0100&REV_1001#5&1e0a9156&0&0001#{6994ad04-93ef-11d0-a3cc-00a0c9223196}" .\debug.cpp(400) : Destination "\Device\00000072" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\STORAGE#Volume#1&30a96598&0&Signature457D801BOffset100000Length53D6500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}" .\debug.cpp(400) : Destination "\Device\HarddiskVolume1" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\avipbb" .\debug.cpp(400) : Destination "\Device\avipbb" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\NPF_devolo_{C860DB58-D370-48E8-ABAE-DFCBE837FC7A}" .\debug.cpp(400) : Destination "\Device\NPF_devolo_{C860DB58-D370-48E8-ABAE-DFCBE837FC7A}" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\IDE#DiskST3360320AS_____________________________3.AAM___#5&32772958&0&0.0.0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}" .\debug.cpp(400) : Destination "\Device\Ide\IdeDeviceP0T0L0-3" .\debug.cpp(409) : -- .\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#Vid_03f0&Pid_7204#TH3BT1616V6B#{28d78fad-5a12-11d1-ae5b-0000f803a8c2}" .\debug.cpp(400) : Destination "\Device\USBPDO-9" .\debug.cpp(409) : -- .\debug.cpp(453) : ********************************************** .\boot_cleaner.cpp(565) : System volume is \\.\C: .\boot_cleaner.cpp(600) : \\.\C: -> \\.\PhysicalDrive1 at offset 0x00000000`00007e00 .\boot_cleaner.cpp(276) : Boot sector MD5 is: 5ddc20efcc4d1dab37c348c7db7289cf .\boot_cleaner.cpp(1060) : .\boot_cleaner.cpp(1061) : Size Device Name MBR Status .\boot_cleaner.cpp(1062) : -------------------------------------------- .\boot_cleaner.cpp(1106) : 298 GB \\.\PhysicalDrive1 Unknown boot code .\boot_cleaner.cpp(1112) : .\boot_cleaner.cpp(1118) : Unknown boot code has been found on some of your physical disks. .\boot_cleaner.cpp(1120) : To inspect the boot code manually, dump the master boot sector: .\boot_cleaner.cpp(1121) : remover.exe dump <device_name> [output_file] .\boot_cleaner.cpp(1125) : To disinfect the master boot sector, use the following command: .\boot_cleaner.cpp(1126) : remover.exe fix <device_name> .\boot_cleaner.cpp(1129) : .\boot_cleaner.cpp(1151) : Done; |
Das OSAM Log will ich so nicht haben. Bitte als txt und nicht als html oder so abspeichern und posten. |
was ist denn zu dem rootkit remover log zu sagen..wurde da schädliches entfernt? hab osam noch offen um dann gleich was zu entfernen - so läuft das doch oder? OSAM Logfile: Code: Report of OSAM: Autorun Manager v5.0.11926.0If You have questions or want to get some help, You can visit hxxp://forum.online-solutions.ru |
Zitat:
Das OSAM Log ist so schonmal viel übersichtlicher, sieht auch ok aus. Downloade Dir bitte MBRCheck (by a_d_13) und speichere die Datei auf dem Desktop.
|
was ist denn mit osam? muss ich da noch gleich was markieren & entfernen oder kann ich das schließen? was sind das für Codes am Ende des Logs bei den Festplatten? MBRCheck, version 1.2.3 (c) 2010, AD Command-line: Windows Version: Windows XP Home Edition Windows Information: Service Pack 3 (build 2600) Logical Drives Mask: 0x0000015c Kernel Drivers (total 139): 0x804D7000 \WINDOWS\system32\ntkrnlpa.exe 0x806E5000 \WINDOWS\system32\hal.dll 0xBA5A8000 \WINDOWS\system32\KDCOM.DLL 0xBA4B8000 \WINDOWS\system32\BOOTVID.dll 0xB9F88000 imagesrv.sys 0xB9F59000 ACPI.sys 0xBA5AA000 \WINDOWS\System32\DRIVERS\WMILIB.SYS 0xB9F48000 pci.sys 0xBA0A8000 isapnp.sys 0xBA670000 pciide.sys 0xBA328000 \WINDOWS\System32\DRIVERS\PCIIDEX.SYS 0xBA0B8000 MountMgr.sys 0xB9F29000 ftdisk.sys 0xBA330000 PartMgr.sys 0xBA0C8000 VolSnap.sys 0xB9F11000 atapi.sys 0xBA0D8000 jraid.sys 0xB9EF9000 \WINDOWS\system32\DRIVERS\SCSIPORT.SYS 0xBA5AC000 imagedrv.sys 0xBA0E8000 disk.sys 0xBA0F8000 \WINDOWS\System32\DRIVERS\CLASSPNP.SYS 0xB9ED9000 fltmgr.sys 0xB9EC7000 sr.sys 0xBA108000 Lbd.sys 0xBA118000 PxHelp20.sys 0xB9EB0000 KSecDD.sys 0xB9E23000 Ntfs.sys 0xB9DF6000 NDIS.sys 0xB9DE3000 sfvfs02.sys 0xBA338000 sfhlp02.sys 0xB9DD1000 sfdrv01.sys 0xB9DB7000 Mup.sys 0xBA148000 \SystemRoot\System32\DRIVERS\intelppm.sys 0xB98C0000 \SystemRoot\system32\DRIVERS\ati2mtag.sys 0xB98AC000 \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS 0xB9884000 \SystemRoot\system32\DRIVERS\HDAudBus.sys 0xBA398000 \SystemRoot\System32\DRIVERS\usbuhci.sys 0xB9860000 \SystemRoot\System32\DRIVERS\USBPORT.SYS 0xBA3A0000 \SystemRoot\system32\DRIVERS\usbehci.sys 0xB9847000 \SystemRoot\System32\DRIVERS\Rtenicxp.sys 0xBA158000 \SystemRoot\System32\DRIVERS\serial.sys 0xBA574000 \SystemRoot\System32\DRIVERS\serenum.sys 0xB9833000 \SystemRoot\System32\DRIVERS\parport.sys 0xBA168000 \SystemRoot\system32\DRIVERS\imapi.sys 0xBA580000 \SystemRoot\System32\Drivers\CLBStor.SYS 0xBA178000 \SystemRoot\System32\DRIVERS\cdrom.sys 0xBA188000 \SystemRoot\System32\DRIVERS\redbook.sys 0xB9810000 \SystemRoot\System32\DRIVERS\ks.sys 0xBA79C000 \SystemRoot\System32\DRIVERS\audstub.sys 0xBA198000 \SystemRoot\System32\DRIVERS\rasl2tp.sys 0xBA590000 \SystemRoot\System32\DRIVERS\ndistapi.sys 0xB97F9000 \SystemRoot\System32\DRIVERS\ndiswan.sys 0xBA1A8000 \SystemRoot\System32\DRIVERS\raspppoe.sys 0xBA1B8000 \SystemRoot\System32\DRIVERS\raspptp.sys 0xBA3C8000 \SystemRoot\System32\DRIVERS\TDI.SYS 0xB97C0000 \SystemRoot\System32\DRIVERS\psched.sys 0xBA1C8000 \SystemRoot\System32\DRIVERS\msgpc.sys 0xBA3D8000 \SystemRoot\System32\DRIVERS\ptilink.sys 0xBA3E8000 \SystemRoot\System32\DRIVERS\raspti.sys 0xBA1D8000 \SystemRoot\System32\DRIVERS\termdd.sys 0xBA3F8000 \SystemRoot\System32\DRIVERS\kbdclass.sys 0xBA400000 \SystemRoot\System32\DRIVERS\mouclass.sys 0xBA410000 \SystemRoot\system32\DRIVERS\seehcri.sys 0xBA5B8000 \SystemRoot\System32\DRIVERS\swenum.sys 0xB9762000 \SystemRoot\System32\DRIVERS\update.sys 0xBA5A4000 \SystemRoot\System32\DRIVERS\mssmbios.sys 0xBA208000 \SystemRoot\System32\Drivers\NDProxy.SYS 0xAD684000 \SystemRoot\system32\drivers\AtiHdmi.sys 0xAD660000 \SystemRoot\system32\drivers\portcls.sys 0xBA218000 \SystemRoot\system32\drivers\drmk.sys 0xBA228000 \SystemRoot\System32\DRIVERS\usbhub.sys 0xBA5C0000 \SystemRoot\System32\DRIVERS\USBD.SYS 0xAD1D4000 \SystemRoot\system32\drivers\RtkHDAud.sys 0xBA448000 \??\C:\WINDOWS\system32\SAVRKBootTasks.sys 0xBA5C6000 \SystemRoot\System32\Drivers\Fs_Rec.SYS 0xBA7FA000 \SystemRoot\System32\Drivers\Null.SYS 0xBA5CA000 \SystemRoot\System32\Drivers\Beep.SYS 0xBA468000 \SystemRoot\System32\DRIVERS\HIDPARSE.SYS 0xBA470000 \SystemRoot\System32\drivers\vga.sys 0xBA5CE000 \SystemRoot\System32\Drivers\mnmdd.SYS 0xBA5D2000 \SystemRoot\System32\DRIVERS\RDPCDD.sys 0xBA480000 \SystemRoot\System32\Drivers\Msfs.SYS 0xBA490000 \SystemRoot\System32\Drivers\Npfs.SYS 0xB97E5000 \SystemRoot\System32\DRIVERS\rasacd.sys 0xAD151000 \SystemRoot\System32\DRIVERS\ipsec.sys 0xAD0F8000 \SystemRoot\System32\DRIVERS\tcpip.sys 0xAD0A8000 \SystemRoot\System32\DRIVERS\netbt.sys 0xAD082000 \SystemRoot\System32\DRIVERS\ipnat.sys 0xBA248000 \SystemRoot\System32\DRIVERS\wanarp.sys 0xAD060000 \SystemRoot\System32\drivers\afd.sys 0xBA258000 \SystemRoot\System32\DRIVERS\netbios.sys 0xBA4A8000 \SystemRoot\system32\DRIVERS\ssmdrv.sys 0xBA278000 \SystemRoot\system32\DRIVERS\xusb21.sys 0xBA288000 \SystemRoot\system32\DRIVERS\WDFLDR.SYS 0xAD035000 \SystemRoot\System32\DRIVERS\rdbss.sys 0xACFB9000 \SystemRoot\system32\DRIVERS\Wdf01000.sys 0xACF49000 \SystemRoot\System32\DRIVERS\mrxsmb.sys 0xBA298000 \SystemRoot\System32\Drivers\Fips.SYS 0xACE8D000 \SystemRoot\system32\DRIVERS\avipbb.sys 0xBA5D8000 \??\D:\Programme\Avira\AntiVir Desktop\avgio.sys 0xBA390000 \SystemRoot\System32\DRIVERS\usbprint.sys 0xBA2C8000 \SystemRoot\System32\Drivers\Cdfs.SYS 0xBA3B8000 \SystemRoot\system32\DRIVERS\USBSTOR.SYS 0xBA3D0000 \SystemRoot\System32\DRIVERS\usbccgp.sys 0xAD1A4000 \SystemRoot\System32\DRIVERS\hidusb.sys 0xBA2D8000 \SystemRoot\System32\DRIVERS\HIDCLASS.SYS 0xAD1A0000 \SystemRoot\System32\DRIVERS\mouhid.sys 0xBA3F0000 \SystemRoot\system32\DRIVERS\point32.sys 0xBA418000 \SystemRoot\system32\DRIVERS\LHidFilt.Sys 0xAD198000 \SystemRoot\System32\DRIVERS\kbdhid.sys 0xBA420000 \SystemRoot\system32\DRIVERS\LMouFilt.Sys 0xACDFD000 \SystemRoot\System32\Drivers\dump_atapi.sys 0xBA5DC000 \SystemRoot\System32\Drivers\dump_WMILIB.SYS 0xBF800000 \SystemRoot\System32\win32k.sys 0xAD188000 \SystemRoot\System32\drivers\Dxapi.sys 0xBA440000 \SystemRoot\System32\watchdog.sys 0xBF000000 \SystemRoot\System32\drivers\dxg.sys 0xBA7C7000 \SystemRoot\System32\drivers\dxgthk.sys 0xBF012000 \SystemRoot\System32\ati2dvag.dll 0xBF060000 \SystemRoot\System32\ati2cqag.dll 0xBF0FC000 \SystemRoot\System32\atikvmag.dll 0xBF196000 \SystemRoot\System32\atiok3x2.dll 0xBF1FC000 \SystemRoot\System32\ati3duag.dll 0xBF557000 \SystemRoot\System32\ativvaxx.dll 0xBFFA0000 \SystemRoot\System32\ATMFD.DLL 0xAA298000 \SystemRoot\system32\DRIVERS\avgntflt.sys 0xAA271000 \SystemRoot\System32\Drivers\CLBUDF.SYS 0xAA260000 \SystemRoot\System32\Drivers\Udfs.SYS 0xAA2C8000 \SystemRoot\System32\DRIVERS\ndisuio.sys 0xA9FF3000 \SystemRoot\system32\drivers\wdmaud.sys 0xB9702000 \SystemRoot\system32\drivers\sysaudio.sys 0xBA5D4000 \SystemRoot\System32\Drivers\ParVdm.SYS 0xACF09000 \SystemRoot\system32\drivers\npf_devolo.sys 0xA9BAF000 \??\D:\Programme\CyberLink\PowerDVD\PowerDVD10\NavFilter\000.fcl 0xA9B58000 \SystemRoot\System32\DRIVERS\srv.sys 0xA9B04000 \??\I:\Software\PDVD9Ultra\PowerDVD9\000.fcl 0xA96B3000 \SystemRoot\System32\Drivers\HTTP.sys 0xA91A8000 \SystemRoot\system32\drivers\kmixer.sys 0x7C910000 \WINDOWS\system32\ntdll.dll Processes (total 41): 0 System Idle Process 4 System 688 C:\WINDOWS\system32\smss.exe 1276 csrss.exe 1436 C:\WINDOWS\system32\winlogon.exe 1544 C:\WINDOWS\system32\services.exe 1556 C:\WINDOWS\system32\lsass.exe 1792 C:\WINDOWS\system32\svchost.exe 2016 svchost.exe 256 C:\WINDOWS\system32\svchost.exe 412 svchost.exe 444 svchost.exe 760 C:\Programme\Lavasoft\Ad-Aware\AAWService.exe 916 C:\WINDOWS\system32\spoolsv.exe 960 D:\Programme\Avira\AntiVir Desktop\sched.exe 1348 C:\WINDOWS\explorer.exe 644 C:\WINDOWS\RTHDCPL.exe 720 D:\Programme\Avira\AntiVir Desktop\avgnt.exe 792 C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe 816 D:\Programme\Avira\AntiVir Desktop\avguard.exe 824 C:\Programme\CyberLink\Shared Files\brs.exe 988 C:\Programme\Java\jre6\bin\jqs.exe 1012 D:\Programme\CyberLink\PowerDVD\PowerDVD10\PDVD10Serv.exe 1092 C:\Programme\Microsoft Xbox 360 Accessories\XBoxStat.exe 1116 C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe 1224 C:\WINDOWS\system32\PnkBstrA.exe 1336 C:\WINDOWS\system32\svchost.exe 1388 wdfmgr.exe 1836 D:\Programme\Logitech\SetPoint\SetPoint.exe 976 C:\Programme\Gemeinsame Dateien\Logitech\KhalShared\KHALMNPR.exe 3004 C:\WINDOWS\system32\wbem\wmiapsrv.exe 3096 unsecapp.exe 3372 wmiprvse.exe 3420 alg.exe 3664 D:\Programme\ATI Technologies\ATI.ACE\Core-Static\MOM.exe 208 D:\Programme\ATI Technologies\ATI.ACE\Core-Static\CCC.exe 1420 C:\Programme\Lavasoft\Ad-Aware\AAWTray.exe 3616 D:\Downloads\osam.exe 2240 D:\Programme\ICQ7.0\ICQ.exe 3368 D:\Programme\Mozilla\firefox.exe 1884 D:\Downloads\MBRCheck.exe \\.\C: --> \\.\PhysicalDrive1 at offset 0x00000000`00007e00 (NTFS) \\.\D: --> \\.\PhysicalDrive1 at offset 0x00000004`e22cec00 (NTFS) \\.\G: --> \\.\PhysicalDrive2 at offset 0x00000000`00100000 (NTFS) \\.\I: --> \\.\PhysicalDrive0 at offset 0x00000000`00100000 (NTFS) PhysicalDrive1 Model Number: SAMSUNGHD322HJ, Rev: 1AC01113 PhysicalDrive2 Model Number: WDExt HDD 1021, Rev: 2002 PhysicalDrive0 Model Number: ST3360320AS, Rev: 3.AAM Size Device Name MBR Status -------------------------------------------- 298 GB \\.\PhysicalDrive1 Windows XP MBR code detected SHA1: ADFE55CD0C6ED2E00B22375835E4C2736CE9AD11 1397 GB \\.\PhysicalDrive2 RE: Windows XP MBR code detected SHA1: DA38B874B7713D1B51CBC449F4EF809B0DEC644A 335 GB \\.\PhysicalDrive0 Windows XP MBR code detected SHA1: ADFE55CD0C6ED2E00B22375835E4C2736CE9AD11 Done! |
Zitat:
Deine MBRs sehen auch ok aus. Mach bitte zur Kontrolle Vollscans mit Malwarebytes und SASW und poste die Logs. Denk dran beide Tools zu updaten vor dem Scan!! |
wurde nichts gefunden das müsste reichen gestern & heute hat sich nichts mehr geöffnet :taenzer: juhu :singsing: lasse sophos anti rootkit,antivir,adaware,spybot & malewarebytes installiert..welche von deinen vorgeschlagenen programmen sollte ich ab und zu ausführen/behalten? ist das problem jetzt durch adblock plus und die manuelle sperrung von werbe-seiten gelöst worden. Oder durch eins der Log-Programme, kannst du da auf was schließen falls es nochmal bei irgendwem auftaucht? Soll ich zum Schluss noch was machen? Aber ich bin jetzt erstmal guter Dinge :Boogie: danke Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Datenbank Version: 4621 Windows 5.1.2600 Service Pack 3 Internet Explorer 6.0.2900.5512 15.09.2010 17:13:39 mbam-log-2010-09-15 (17-13-39).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|G:\|I:\|) Durchsuchte Objekte: 258255 Laufzeit: 44 Minute(n), 48 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 0 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden) |
Zitat:
Noch Probleme oder weitere Funde in der Zwischenzeit? |
Zitat:
|
Dann wären wir durch! :abklatsch: Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern. Microsoftupdate Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren. Windows Vista/7: Anleitung Windows-Update PDF-Reader aktualisieren Dein Adobe Reader ist nicht aktuell, was ein großes Sicherheitsrisiko darstellt. Du solltest daher besser die alte Version über Systemsteuerung => Software deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. Ich empfehle einen alternativen PDF-Reader wie SumatraPDF oder Foxit PDF Reader, beide sind sehr viel schlanker und flotter als der AdobeReader. Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers, hier der direkte Downloadlink => http://filepony.de/?q=Flash+Player Java-Update Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es. |
so das wärs dann gewesen bzl der pdf Reader : zeigen die auch Online-Werbe Flyer an wie sie die großen ElektroMärkte haben? |
| Alle Zeitangaben in WEZ +1. Es ist jetzt 20:43 Uhr. |
Copyright ©2000-2025, Trojaner-Board