| Herzmann | 11.10.2010 11:57 |
Als ich vom AdministratorBenutzer wieder hierher zurückgekehrt bin, fragte mich meine FRITZ!Protect-Firewall, ob OSAM der Zugriff zum Internet erlaubt werden soll, und das, obwohl ich OSAM unter dem AdministratorBenutzer komplett geschlossen hatte. Es scheint also einen Unterprozess zu geben, welcher noch im eingeschränkten Benutzermodus aktiv zu sein scheint.
Das zum Thema, warum ich diese Firewall und deren Infomationen für nützlich halte. Code:
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>Report of OSAM: Autorun Manager v5.0.11926.0</title>
<style type="text/css">
body
{
margin : 10px 10px 10px 20px;
color : #000000;
background-color : #fffbf0;
font : 10pt Tahoma, Verdana, Arial, Helvetica, sans-serif;
scrollbar-3dlight-color : #fffbf0;
scrollbar-arrow-color : #000000;
scrollbar-darkshadow-color: #000000;
scrollbar-face-color : #fffbf0;
scrollbar-highlight-color : #000000;
scrollbar-shadow-color : #fffbf0;
scrollbar-track-color : #fffbf0;
}
a:link
{
color: #e15616;
}
a:visited
{
color: #e15616;
}
a:hover
{
color: #e4743f;
}
a:active
{
color: #e4743f;
}
.header1
{
font-size : 115%;
font-weight: bold;
margin-left: 0px;
}
table
{
border-collapse: collapse;
border : 1px solid #000000;
cellpadding : 0;
cellspacing : 0;
width : 90%;
}
td,th
{
font-size : 12px;
color : #000000;
background : #fffbf0;
border : 1px solid #000000;
text-align : left;
vertical-align: top;
padding : 2px 4px 2px 4px;
}
.cap
{
font-weight: bold;
font-size : 10pt;
padding : 2px 4px 2px 4px;
border : 1px solid #000000;
}
.group
{
font-weight: bold;
font-size : 10pt;
padding : 2px 4px 2px 4px;
text-align : center;
}
.reg
{
font-weight: bold;
font-size : 10pt;
border : 0px none;
padding : 2px 4px 2px 4px;
}
.notfound
{
background-color: #B3DDFF;
}
.blocked
{
background-color: #FF96EB;
}
.nodetails
{
background-color: #FFFF75;
}
.trusted
{
background-color: #C8FFC8;
}
.rootkit
{
background-color: #FF8696;
}
td.rs { text-align: center; vertical-align: center; font-family: courier; }
td.rs.rm { background: #F90424; title: "Malware"; }
td.rs.ri { background: #F90424; title: "Infected"; color: #21F411; }
td.rs.rw { background: #F90424; title: "Unwanted"; }
td.rs.rs { background: #F90424; title: "Suspicious"; }
td.rs.rt { background: #21F411; title: "Trusted"; }
td.rs.rc { background: #21F411; title: "Checked"; }
td.rs.ry { background: #21F411; title: "Up-to-You"; }
td.rs.rr { background: #F6EB13; title: "Riskware"; }
td.rs.ru { background: #D4D0C8; title: "Unknown"; }
td.rs.rn { background: #FFFFFF; title: "Not checked"; }
</style>
</head>
<body>
<p><span class="header1">Report of OSAM: Autorun Manager v5.0.11926.0</span><br>
<a href="hxxp://www.online-solutions.ru/en/" target="_blank">hxxp://www.online-solutions.ru/en/</a><br>
Saved at 12:38:23 on 11.10.2010</p>
<b>OS</b>: Windows XP Professional Service Pack 3 (Build 2600)<br>
<b>Default Browser</b>: Microsoft Corporation Internet Explorer 6.00.2900.5512<br>
<br><b>Scanner Settings</b><br>
<input type="checkbox" disabled checked>Rootkits detection (hidden registry)<br>
<input type="checkbox" disabled checked>Rootkits detection (hidden files)<br>
<input type="checkbox" disabled checked>Retrieve files information<br>
<input type="checkbox" disabled checked>Check Microsoft signatures<br>
<br><b>Filters</b><br>
<input type="checkbox" disabled>Trusted entries<br>
<input type="checkbox" disabled>Empty entries<br>
<input type="checkbox" disabled checked>Hidden registry entries (rootkit activity)<br>
<input type="checkbox" disabled checked>Exclusively opened files<br>
<input type="checkbox" disabled checked>Not found files<br>
<input type="checkbox" disabled checked>Files without detailed information<br>
<input type="checkbox" disabled checked>Existing files<br>
<input type="checkbox" disabled>Non-startable services<br>
<input type="checkbox" disabled>Non-startable drivers<br>
<input type="checkbox" disabled checked>Active entries<br>
<input type="checkbox" disabled checked>Disabled entries<br>
<br>
<table border="1" cellpadding="0" cellspacing="0">
<tr>
<th class="cap" width="20"> </th>
<th class="cap">Risk</th>
<th class="cap">Name</th>
<th class="cap">Publisher</th>
<th class="cap">Full Path</th>
<th class="cap">Status</th>
</tr>
<tr>
<td class="group" colspan="6">Boot Execute</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Control\Session Manager</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">"BootExecute"</td>
<td class="nodetails"></td>
<td class="nodetails">C:\WINDOWS\system32\lsdelete.exe</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td class="group" colspan="6">Common</td>
</tr>
<tr>
<td class="reg" colspan="6">%SystemRoot%\Tasks</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"AppleSoftwareUpdate.job"</td>
<td>"Apple Inc."</td>
<td>C:\Programme\Apple Software Update\SoftwareUpdate.exe</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"GoogleUpdateTaskMachineUA.job"</td>
<td class="notfound"></td>
<td class="notfound">C:\Programme\Google\Update\GoogleUpdate.exe</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">"PMTask.job"</td>
<td class="nodetails"></td>
<td class="nodetails">C:\PROGRA~1\ThinkPad\UTILIT~1\PWMIDTSK.EXE</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"RealUpgradeLogonTaskS-1-5-21-999901472-3601035388-3065584919-1005.job"</td>
<td>"RealNetworks, Inc."</td>
<td>C:\Programme\Real\RealUpgrade\realupgrade.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"RealUpgradeLogonTaskS-1-5-21-999901472-3601035388-3065584919-1008.job"</td>
<td>"RealNetworks, Inc."</td>
<td>C:\Programme\Real\RealUpgrade\realupgrade.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"RealUpgradeScheduledTaskS-1-5-21-999901472-3601035388-3065584919-1005.job"</td>
<td>"RealNetworks, Inc."</td>
<td>C:\Programme\Real\RealUpgrade\realupgrade.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"RealUpgradeScheduledTaskS-1-5-21-999901472-3601035388-3065584919-1008.job"</td>
<td>"RealNetworks, Inc."</td>
<td>C:\Programme\Real\RealUpgrade\realupgrade.exe</td>
<td>File exists</td>
</tr>
<tr>
<td class="group" colspan="6">Control Panel Objects</td>
</tr>
<tr>
<td class="reg" colspan="6">%SystemRoot%\system32</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"btcpl.cpl"</td>
<td>"Broadcom Corporation."</td>
<td>C:\WINDOWS\system32\btcpl.cpl</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"ecsepm.cpl"</td>
<td>"Teleca Software Solutions AB"</td>
<td>C:\WINDOWS\system32\ecsepm.cpl</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"IBMJavaPlugin142.cpl"</td>
<td>"IBM"</td>
<td>C:\WINDOWS\system32\IBMJavaPlugin142.cpl</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"infocardcpl.cpl"</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\infocardcpl.cpl</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"ISUSPM.cpl"</td>
<td>"InstallShield Software Corporation"</td>
<td>C:\WINDOWS\system32\ISUSPM.cpl</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"javacpl.cpl"</td>
<td>"Sun Microsystems, Inc."</td>
<td>C:\WINDOWS\system32\javacpl.cpl</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"PWMCPl.cpl"</td>
<td>"Lenovo Group Limited"</td>
<td>C:\WINDOWS\system32\PWMCPl.cpl</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Spcselfb.cpl"</td>
<td>"SEIKO EPSON CORP."</td>
<td>C:\WINDOWS\system32\Spcselfb.cpl</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"tp4ex.cpl"</td>
<td>"IBM Corporation"</td>
<td>C:\WINDOWS\system32\tp4ex.cpl</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"TP98.CPL"</td>
<td>"Lenovo Group Limited"</td>
<td>C:\WINDOWS\system32\TP98.CPL</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"TpShCPL.cpl"</td>
<td>"Lenovo."</td>
<td>C:\WINDOWS\system32\TpShCPL.cpl</td>
<td>File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\Software\Microsoft\Windows\CurrentVersion\Control Panel\Cpls</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"ECSEPM"</td>
<td>"Sony Ericsson Mobile Communications AB"</td>
<td>C:\Programme\Sony Ericsson\Mobile\Mobile Phone Monitor\ecsepm.cpl</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"QuickTime"</td>
<td>"Apple Inc."</td>
<td>C:\Programme\QuickTime\QTSystem\QuickTime.cpl</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"SMAX4CP"</td>
<td>"Analog Devices, Inc."</td>
<td>C:\Programme\Analog Devices\SoundMAX\SMax4.cpl</td>
<td>File exists</td>
</tr>
<tr>
<td class="group" colspan="6">Drivers</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Services</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"ACEDRV05" (ACEDRV05)</td>
<td>"Protect Software GmbH"</td>
<td>C:\WINDOWS\system32\drivers\ACEDRV05.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"ANC" (ANC)</td>
<td>"IBM Corp."</td>
<td>C:\WINDOWS\System32\drivers\ANC.SYS</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"APS Digitizer Activity Monitor" (TPDIGIMN)</td>
<td>"Lenovo."</td>
<td>C:\WINDOWS\System32\DRIVERS\ApsHM86.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Aspi32" (Aspi32)</td>
<td>"Adaptec"</td>
<td>C:\WINDOWS\system32\drivers\Aspi32.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"aswFsBlk" (aswFsBlk)</td>
<td>"AVAST Software"</td>
<td>C:\WINDOWS\system32\drivers\aswFsBlk.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"aswMon2" (aswMon2)</td>
<td>"AVAST Software"</td>
<td>C:\WINDOWS\system32\drivers\aswMon2.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"aswRdr" (aswRdr)</td>
<td>"AVAST Software"</td>
<td>C:\WINDOWS\system32\drivers\aswRdr.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"aswSP" (aswSP)</td>
<td>"AVAST Software"</td>
<td>C:\WINDOWS\system32\drivers\aswSP.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"avast! Asynchronous Virus Monitor" (Aavmker4)</td>
<td>"AVAST Software"</td>
<td>C:\WINDOWS\system32\drivers\Aavmker4.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"avast! Network Shield Support" (aswTdi)</td>
<td>"AVAST Software"</td>
<td>C:\WINDOWS\system32\drivers\aswTdi.sys</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"AVM FRITZ!web DSL PPP" (NETFWDSL)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\System32\DRIVERS\NETFWDSL.SYS</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"AVM USB-Fernanschluss" (avmaura)</td>
<td>"AVM Berlin"</td>
<td>C:\WINDOWS\System32\DRIVERS\avmaura.sys</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"catchme" (catchme)</td>
<td class="notfound"></td>
<td class="notfound">C:\DOKUME~1\+++\LOKALE~1\Temp\catchme.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"Changer" (Changer)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\system32\drivers\Changer.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"Conexant Setup API" (UIUSys)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\System32\drivers\UIUSys.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"DLABOIOM" (DLABOIOM)</td>
<td>"Sonic Solutions"</td>
<td>C:\WINDOWS\System32\DLA\DLABOIOM.SYS</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"DLACDBHM" (DLACDBHM)</td>
<td>"Sonic Solutions"</td>
<td>C:\WINDOWS\System32\Drivers\DLACDBHM.SYS</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"DLADResN" (DLADResN)</td>
<td>"Sonic Solutions"</td>
<td>C:\WINDOWS\System32\DLA\DLADResN.SYS</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"DLAIFS_M" (DLAIFS_M)</td>
<td>"Sonic Solutions"</td>
<td>C:\WINDOWS\System32\DLA\DLAIFS_M.SYS</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"DLAOPIOM" (DLAOPIOM)</td>
<td>"Sonic Solutions"</td>
<td>C:\WINDOWS\System32\DLA\DLAOPIOM.SYS</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"DLAPoolM" (DLAPoolM)</td>
<td>"Sonic Solutions"</td>
<td>C:\WINDOWS\System32\DLA\DLAPoolM.SYS</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"DLARTL_N" (DLARTL_N)</td>
<td>"Sonic Solutions"</td>
<td>C:\WINDOWS\System32\Drivers\DLARTL_N.SYS</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"DLAUDFAM" (DLAUDFAM)</td>
<td>"Sonic Solutions"</td>
<td>C:\WINDOWS\System32\DLA\DLAUDFAM.SYS</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"DLAUDF_M" (DLAUDF_M)</td>
<td>"Sonic Solutions"</td>
<td>C:\WINDOWS\System32\DLA\DLAUDF_M.SYS</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"DozeHDD" (DozeHDD)</td>
<td>"Lenovo."</td>
<td>C:\WINDOWS\System32\DRIVERS\DozeHDD.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"drvmcdb" (drvmcdb)</td>
<td>"Sonic Solutions"</td>
<td>C:\WINDOWS\System32\Drivers\DRVMCDB.SYS</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"drvnddm" (drvnddm)</td>
<td>"Sonic Solutions"</td>
<td>C:\WINDOWS\System32\Drivers\DRVNDDM.SYS</td>
<td>File exists</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">"epmntdrv" (epmntdrv)</td>
<td class="nodetails"></td>
<td class="nodetails">C:\WINDOWS\system32\epmntdrv.sys</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">"EuGdiDrv" (EuGdiDrv)</td>
<td class="nodetails"></td>
<td class="nodetails">C:\WINDOWS\system32\EuGdiDrv.sys</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"GEAR ASPI Filter Driver" (GEARAspiWDM)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">"giveio" (giveio)</td>
<td class="nodetails"></td>
<td class="nodetails">C:\WINDOWS\System32\giveio.sys</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"IBM Access Support" (EGATHDRV)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\SYSTEM32\EGATHDRV.SYS</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">"IBMTPCHK" (IBMTPCHK)</td>
<td class="nodetails"></td>
<td class="nodetails">C:\WINDOWS\system32\Drivers\IBMBLDID.sys</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"Imagedrv" (Imagedrv)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\System32\DRIVERS\imagedrv.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"IVI ASPI Shell" (Iviaspi)</td>
<td>"InterVideo, Inc."</td>
<td>C:\WINDOWS\System32\drivers\iviaspi.sys</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"lbrtfdc" (lbrtfdc)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\system32\drivers\lbrtfdc.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Logitech LVPrcMon Driver" (LVPrcMon)</td>
<td>"Logitech Inc."</td>
<td>C:\WINDOWS\system32\drivers\LVPrcMon.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Padus ASPI Shell" (Pfc)</td>
<td>"Padus, Inc."</td>
<td>C:\WINDOWS\System32\drivers\pfc.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"PalmUSBD" (PalmUSBD)</td>
<td>"Palm, Inc."</td>
<td>C:\WINDOWS\System32\drivers\PalmUSBD.sys</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"PCDRNDISUIO Usermode I/O Protocol" (PcdrNdisuio)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\System32\DRIVERS\pcdrndisuio.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"PCIDump" (PCIDump)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\system32\drivers\PCIDump.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"PDCOMP" (PDCOMP)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\system32\drivers\PDCOMP.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"PDFRAME" (PDFRAME)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\system32\drivers\PDFRAME.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"PDRELI" (PDRELI)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\system32\drivers\PDRELI.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"PDRFRAME" (PDRFRAME)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\system32\drivers\PDRFRAME.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"PMEM" (PMEM)</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\SYSTEM32\Drivers\PMEMNT.SYS</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"PORTMON" (PORTMON)</td>
<td class="notfound"></td>
<td class="notfound">C:\Programme\sysinternals\PortMon\PORTMSYS.SYS</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">"PQNTDrv" (PQNTDrv)</td>
<td class="nodetails"></td>
<td class="nodetails">C:\WINDOWS\system32\drivers\PQNTDrv.sys</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"PSI" (PSI)</td>
<td>"Secunia"</td>
<td>C:\WINDOWS\System32\DRIVERS\psi_mf.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"PxHelp20" (PxHelp20)</td>
<td>"Sonic Solutions"</td>
<td>C:\WINDOWS\System32\Drivers\PxHelp20.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Shockprf" (Shockprf)</td>
<td>"Lenovo."</td>
<td>C:\WINDOWS\System32\DRIVERS\Apsx86.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Smapint" (Smapint)</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\System32\drivers\Smapint.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Sony Ericsson Device 039 Driver driver (WDM)" (SE27bus)</td>
<td>"MCCI"</td>
<td>C:\WINDOWS\System32\DRIVERS\SE27bus.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Sony Ericsson Device 039 USB Ethernet Emulation SEMC39 (NDIS)" (se27nd5)</td>
<td>"MCCI"</td>
<td>C:\WINDOWS\System32\DRIVERS\se27nd5.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Sony Ericsson Device 039 USB Ethernet Emulation SEMC39 (WDM)" (se27unic)</td>
<td>"MCCI"</td>
<td>C:\WINDOWS\System32\DRIVERS\se27unic.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Sony Ericsson Device 039 USB WMC Device Management Drivers (WDM)" (SE27mgmt)</td>
<td>"MCCI"</td>
<td>C:\WINDOWS\System32\DRIVERS\SE27mgmt.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Sony Ericsson Device 039 USB WMC Modem Driver" (SE27mdm)</td>
<td>"MCCI"</td>
<td>C:\WINDOWS\System32\DRIVERS\SE27mdm.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Sony Ericsson Device 039 USB WMC Modem Filter" (SE27mdfl)</td>
<td>"MCCI"</td>
<td>C:\WINDOWS\System32\DRIVERS\SE27mdfl.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Sony Ericsson Device 039 USB WMC OBEX Interface" (SE27obex)</td>
<td>"MCCI"</td>
<td>C:\WINDOWS\System32\DRIVERS\SE27obex.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"speedfan" (speedfan)</td>
<td>"Windows (R) 2000 DDK provider"</td>
<td>C:\WINDOWS\System32\speedfan.sys</td>
<td>File exists</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">"StarOpen" (StarOpen)</td>
<td class="nodetails"></td>
<td class="nodetails">C:\WINDOWS\system32\drivers\StarOpen.sys</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"SyGate for NT, wg3n" (wg3n)</td>
<td>"Sygate Technologies, Inc."</td>
<td>C:\WINDOWS\SYSTEM32\Drivers\wg3n.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"SyGate for NT, wg4n" (wg4n)</td>
<td>"Sygate Technologies, Inc."</td>
<td>C:\WINDOWS\SYSTEM32\Drivers\wg4n.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"SyGate for NT, wg5n" (wg5n)</td>
<td>"Sygate Technologies, Inc."</td>
<td>C:\WINDOWS\SYSTEM32\Drivers\wg5n.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"SyGate for NT, wg6n" (wg6n)</td>
<td>"Sygate Technologies, Inc."</td>
<td>C:\WINDOWS\SYSTEM32\Drivers\wg6n.sys</td>
<td>File exists</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">"TDSMAPI" (TDSMAPI)</td>
<td class="nodetails"></td>
<td class="nodetails">C:\WINDOWS\System32\drivers\TDSMAPI.SYS</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Teefer for NT" (Teefer)</td>
<td>"Sygate Technologies, Inc."</td>
<td>C:\WINDOWS\System32\Drivers\Teefer.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"TPDiskPM" (TPDiskPM)</td>
<td>"Lenovo, Ltd. and IBM Corporation"</td>
<td>C:\WINDOWS\system32\drivers\TPDiskPM.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"TPHKDRV" (TPHKDRV)</td>
<td>"IBM Corporation"</td>
<td>C:\WINDOWS\System32\DRIVERS\TPHKDRV.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"TPInput" (TPInput)</td>
<td>"Lenovo, Ltd. and IBM Corporation."</td>
<td>C:\WINDOWS\System32\DRIVERS\TPInput.sys</td>
<td>File exists</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">"TPPWRIF" (TPPWRIF)</td>
<td class="nodetails"></td>
<td class="nodetails">C:\WINDOWS\System32\drivers\Tppwrif.sys</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">"TSMAPIP" (TSMAPIP)</td>
<td class="nodetails"></td>
<td class="nodetails">C:\WINDOWS\System32\drivers\TSMAPIP.SYS</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"ui11rdr" (ui11rdr)</td>
<td>"1&1 Internet AG"</td>
<td>C:\WINDOWS\System32\DRIVERS\ui11rdr.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"uigxrdr" (uigxrdr)</td>
<td>"GMX GmbH"</td>
<td>C:\WINDOWS\System32\DRIVERS\uigxrdr.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"ultradfg" (ultradfg)</td>
<td>"UltraDefrag Development Team"</td>
<td>C:\WINDOWS\System32\DRIVERS\ultradfg.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"USB 2.0 10/100Base Ethernet Adapter" (GWUSB2E)</td>
<td>"Generic "</td>
<td>C:\WINDOWS\System32\DRIVERS\GWUSB2E.sys</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"USB Storage Adapter V2 (TPP)" (TPP200)</td>
<td>"In-System Design, Inc."</td>
<td>C:\WINDOWS\System32\DRIVERS\TPP200.SYS</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"WDICA" (WDICA)</td>
<td class="notfound"></td>
<td class="notfound">C:\WINDOWS\system32\drivers\WDICA.sys</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"wpsdrvnt" (wpsdrvnt)</td>
<td>"Sygate Technologies, Inc."</td>
<td>C:\WINDOWS\system32\drivers\wpsdrvnt.sys</td>
<td>File exists</td>
</tr>
<tr>
<td class="group" colspan="6">Explorer</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{89B4C1CD-B018-4511-B0A1-5476DBF70820} "StubPath"</td>
<td>"Microsoft Corporation"</td>
<td>c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install</td>
<td>File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\Software\Classes\Folder\shellex\ColumnHandlers</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{F9DB5320-233E-11D1-9F84-707F02C10627} "PDF Shell Extension"</td>
<td>"Adobe Systems, Inc."</td>
<td>C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{30351349-7B7D-4FCC-81B4-1E394CA267EB} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\TortoiseSVN\bin\TortoiseStub.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}"</td>
<td></td>
<td>C:\Programme\OpenOffice\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll</td>
<td>File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\Software\Classes\Protocols\Filter</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1"</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\mscoree.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1"</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\mscoree.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{1E66F26B-79EE-11D2-8710-00C04F79ED0D} "Cor MIME Filter, CorFltr, CorFltr 1"</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\mscoree.dll</td>
<td>File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\Software\Classes\Protocols\Handler</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} "IEProtocolHandler Class"</td>
<td>"Skype Technologies"</td>
<td>C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{0A9007C0-4076-11D3-8789-0000F8105754} "Microsoft Infotech Storage Protocol for IE 4.0"</td>
<td>"Microsoft Corporation"</td>
<td>C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll</td>
<td>File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{23170F69-40C1-278A-1000-000100020000} "7-Zip Shell Extension"</td>
<td>"Igor Pavlov"</td>
<td>C:\Programme\7-Zip\7-zip.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{472083B0-C522-11CF-8763-00608CC02F24} "avast"</td>
<td>"AVAST Software"</td>
<td>C:\Programme\Alwil Software\Avast5\ashShell.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{6af09ec9-b429-11d4-a1fb-0090960218cb} "Bluetooth-Umgebung"</td>
<td>"Broadcom Corporation."</td>
<td>C:\WINDOWS\system32\BTNEIG~1.DLL</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">{42071714-76d4-11d1-8b24-00a0c9068ff3} "CPL-Erweiterung für Anzeigeverschiebung"</td>
<td class="notfound"></td>
<td class="notfound">deskpan.dll</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">{FCF608CF-5716-47C3-A1A8-991D873AF72B} "Delphi Context Menu Shell Extension Example"</td>
<td class="nodetails"></td>
<td class="nodetails">C:\Programme\Exifer\exifershellext.dll</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{5CA3D70E-1895-11CF-8E15-001234567890} "DriveLetterAccess"</td>
<td>"Sonic Solutions"</td>
<td>C:\WINDOWS\System32\DLA\DLASHX_W.DLL</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">{56160A70-D083-4856-9998-F565ABC03F86} "FolderSizes Shell Extension"</td>
<td class="notfound"></td>
<td class="notfound"></td>
<td class="notfound">File not found | COM-object registry key not found</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{1D2680C9-0E2A-469d-B787-065558BC7D43} "Fusion Cache"</td>
<td>"Microsoft Corporation"</td>
<td>c:\WINDOWS\system32\mscoree.dll</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">{853FE2B1-B769-11d0-9C4E-00C04FB6C6FA} "Kontextmenü für die Verschlüsselung"</td>
<td class="notfound"></td>
<td class="notfound"></td>
<td class="notfound">File not found | COM-object registry key not found</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{fc181130-05a0-11d6-8140-000102e745a6} "Mein P910i"</td>
<td>"Teleca Software Solutions AB"</td>
<td>C:\Programme\Sony Ericsson\Mobile\auexpext.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{7842554E-6BED-11D2-8CDB-B05550C10000} "Monitor Class"</td>
<td>"Broadcom Corporation."</td>
<td>C:\WINDOWS\system32\btncopy.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396} "OpenOffice.org Column Handler"</td>
<td></td>
<td>C:\Programme\OpenOffice\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{087B3AE3-E237-4467-B8DB-5A38AB959AC9} "OpenOffice.org Infotip Handler"</td>
<td></td>
<td>C:\Programme\OpenOffice\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{63542C48-9552-494A-84F7-73AA6A7C99C1} "OpenOffice.org Property Sheet Handler"</td>
<td></td>
<td>C:\Programme\OpenOffice\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{3B092F0C-7696-40E3-A80F-68D74DA84210} "OpenOffice.org Thumbnail Viewer"</td>
<td></td>
<td>C:\Programme\OpenOffice\OpenOffice.org 3\Basis\program\shlxthdl\shlxthdl.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{0006F045-0000-0000-C000-000000000046} "Outlook-Dateisymbolerweiterung"</td>
<td>"Microsoft Corporation"</td>
<td>C:\PROGRA~1\MICROS~3\Office\OLKFSTUB.DLL</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{F0CB00CD-5A07-4D91-97F5-A8C92CDA93E4} "RealOne Player Context Menu Class"</td>
<td>"RealNetworks, Inc."</td>
<td>c:\program files\real\realplayer\rpshell.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{E91B2703-013E-4A99-AD33-2B6FB00AA356} "RecordNow! ContextMenuExt"</td>
<td></td>
<td>C:\Programme\Sonic\RecordNow!\RecordNow!\shlext.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{DEE12703-6333-4D4E-8F34-738C4DCC2E04} "RecordNow! SendToExt"</td>
<td></td>
<td>C:\Programme\Sonic\RecordNow!\RecordNow!\shlext.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{E37E2028-CE1A-4f42-AF05-6CEABC4E5D75} "Shell Icon Handler for Application References"</td>
<td>"Microsoft Corporation"</td>
<td>c:\WINDOWS\system32\dfshim.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{62DF97A2-3635-4412-AE30-80B164BC88AD} "ShellContextMenuHandler Class"</td>
<td>"1&1 Internet AG"</td>
<td>C:\Programme\1&1\1&1 Upload-Manager\SHNDLERS.DLL</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{D6613619-EDAA-451e-AA0C-671737CF6022} "ShellContextMenuHandler Class"</td>
<td>"GMX GmbH"</td>
<td>C:\Programme\GMX\GMX Upload-Manager\SHNDLERS.DLL</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">{764BF0E1-F219-11ce-972D-00AA00A14F56} "Shellerweiterungen für die Dateikomprimierung"</td>
<td class="notfound"></td>
<td class="notfound"></td>
<td class="notfound">File not found | COM-object registry key not found</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{e82a2d71-5b2f-43a0-97b8-81be15854de8} "ShellLink for Application References"</td>
<td>"Microsoft Corporation"</td>
<td>c:\WINDOWS\system32\dfshim.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{5E2121EE-0300-11D4-8D3B-444553540000} "SimpleShlExt Class"</td>
<td>"Advanced Micro Devices, Inc."</td>
<td>C:\Programme\ATI Technologies\ATI.ACE\Core-Static\atiacmxx.dll</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">{01D8AD1E-46C9-4882-925C-CC29D9A99858} "SKTimeStamp"</td>
<td class="notfound"></td>
<td class="notfound"></td>
<td class="notfound">File not found | COM-object registry key not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">{738D66C6-0149-4D40-84E4-A7BB2D0CE949} "Sony Ericsson File Manager"</td>
<td class="notfound"></td>
<td class="notfound"></td>
<td class="notfound">File not found | COM-object registry key not found</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{46605027-5B8C-4DCE-BFE0-051B7972D64C} "TortoiseHg"</td>
<td>"TortoiseHg Project"</td>
<td>C:\Programme\TortoiseHg\ThgShellx86.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{869C8877-2C3C-438D-844B-31B86BFE5E8A} "TortoiseHg"</td>
<td>"TortoiseHg Project"</td>
<td>C:\Programme\TortoiseHg\ThgShellx86.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{9E3D4EC9-0624-4393-8B48-204C217ED1FF} "TortoiseHg"</td>
<td>"TortoiseHg Project"</td>
<td>C:\Programme\TortoiseHg\ThgShellx86.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{AF42ADAB-8C2E-4285-B746-99B31094708E} "TortoiseHg"</td>
<td>"TortoiseHg Project"</td>
<td>C:\Programme\TortoiseHg\ThgShellx86.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{CDA1C89D-E9B5-4981-A857-82DD932EA2FD} "TortoiseHg"</td>
<td>"TortoiseHg Project"</td>
<td>C:\Programme\TortoiseHg\ThgShellx86.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{30351346-7B7D-4FCC-81B4-1E394CA267EB} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\TortoiseSVN\bin\TortoiseStub.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{30351347-7B7D-4FCC-81B4-1E394CA267EB} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\TortoiseSVN\bin\TortoiseStub.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{30351348-7B7D-4FCC-81B4-1E394CA267EB} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\TortoiseSVN\bin\TortoiseStub.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{30351349-7B7D-4FCC-81B4-1E394CA267EB} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\TortoiseSVN\bin\TortoiseStub.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{3035134A-7B7D-4FCC-81B4-1E394CA267EB} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\TortoiseSVN\bin\TortoiseStub.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{3035134B-7B7D-4FCC-81B4-1E394CA267EB} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\TortoiseSVN\bin\TortoiseStub.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{3035134C-7B7D-4FCC-81B4-1E394CA267EB} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\TortoiseSVN\bin\TortoiseStub.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{3035134D-7B7D-4FCC-81B4-1E394CA267EB} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\TortoiseSVN\bin\TortoiseStub.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{3035134E-7B7D-4FCC-81B4-1E394CA267EB} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\TortoiseSVN\bin\TortoiseStub.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{3035134F-7B7D-4FCC-81B4-1E394CA267EB} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\TortoiseSVN\bin\TortoiseStub.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{30351350-7B7D-4FCC-81B4-1E394CA267EB} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\TortoiseSVN\bin\TortoiseStub.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{C5994560-53D9-4125-87C9-F193FC689CB2} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{C5994561-53D9-4125-87C9-F193FC689CB2} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{C5994562-53D9-4125-87C9-F193FC689CB2} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{C5994563-53D9-4125-87C9-F193FC689CB2} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{C5994564-53D9-4125-87C9-F193FC689CB2} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{C5994565-53D9-4125-87C9-F193FC689CB2} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{C5994566-53D9-4125-87C9-F193FC689CB2} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{C5994567-53D9-4125-87C9-F193FC689CB2} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{C5994568-53D9-4125-87C9-F193FC689CB2} "TortoiseSVN"</td>
<td>"hxxp://tortoisesvn.net"</td>
<td>C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll</td>
<td>File exists</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">{DDE4BEEB-DDE6-48fd-8EB5-035C09923F83} "UnlockerShellExtension"</td>
<td class="nodetails"></td>
<td class="nodetails">C:\Programme\Unlocker\UnlockerCOM.dll</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">{B41DB860-8EE4-11D2-9906-E49FADC173CA} "WinRAR"</td>
<td class="nodetails"></td>
<td class="nodetails">C:\Programme\WinRAR\rarext.dll</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{E0D79304-84BE-11CE-9641-444553540000} "WinZip"</td>
<td>"WinZip Computing, Inc."</td>
<td>C:\PROGRA~1\WINZIP\WZSHLSTB.DLL</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{E0D79305-84BE-11CE-9641-444553540000} "WinZip"</td>
<td>"WinZip Computing, Inc."</td>
<td>C:\PROGRA~1\WINZIP\WZSHLSTB.DLL</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{E0D79306-84BE-11CE-9641-444553540000} "WinZip"</td>
<td>"WinZip Computing, Inc."</td>
<td>C:\PROGRA~1\WINZIP\WZSHLSTB.DLL</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{E0D79307-84BE-11CE-9641-444553540000} "WinZip"</td>
<td>"WinZip Computing, Inc."</td>
<td>C:\PROGRA~1\WINZIP\WZSHLSTB.DLL</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">Rename-It! extension "{A64BBF5F-1250-4083"</td>
<td class="notfound"></td>
<td class="notfound"></td>
<td class="notfound">File not found | COM-object registry key not found</td>
</tr>
<tr>
<td class="group" colspan="6">Internet Explorer</td>
</tr>
<tr>
<td class="reg" colspan="6">HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound"><binary data> "ITBarLayout"</td>
<td class="notfound"></td>
<td class="notfound"></td>
<td class="notfound">File not found | COM-object registry key not found</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{106E49CF-797A-11D2-81A2-00E02C015623} "AlternaTIFF ActiveX"<br>hxxp://www.alternatiff.com/install-ie/alttiff.cab</td>
<td>"Medical Informatics Engineering, Inc."</td>
<td>C:\WINDOWS\Downloaded Program Files\alttiff.ocx</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{2DAD3559-2923-4935-AD49-B673D2539944} "IASRunner Class"<br>hxxp://www-307.ibm.com/pc/support/acpir.cab</td>
<td></td>
<td>C:\WINDOWS\Downloaded Program Files\acpir2.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{8AD9C840-044E-11D1-B3E9-00805F499D93} "Java Plug-in 1.6.0_21"<br>hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab</td>
<td>"Sun Microsystems, Inc."</td>
<td>C:\Programme\Java\jre6\bin\npjpi160_21.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} "Java Plug-in 1.6.0_21"<br>hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab</td>
<td>"Sun Microsystems, Inc."</td>
<td>C:\Programme\Java\jre6\bin\npjpi160_21.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} "Java Plug-in 1.6.0_21"<br>hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab</td>
<td>"Sun Microsystems, Inc."</td>
<td>C:\Programme\Java\jre6\bin\npjpi160_21.dll</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">Microsoft XML Parser for Java "Microsoft XML Parser for Java"<br>file://C:\WINDOWS\Java\classes\xmldso.cab</td>
<td class="notfound"></td>
<td class="notfound"></td>
<td class="notfound">File not found | COM-object registry key not found</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{17492023-C23A-453E-A040-C7C580BBF700} "Windows Genuine Advantage Validation Tool"<br>hxxp://go.microsoft.com/fwlink/?linkid=39204</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\legitcheckcontrol.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{15A7CF10-CB3E-4265-8779-9FD22619E8ED} "XPanel Class"<br>hxxp://192.168.1.205/XPanel.cab</td>
<td>"Crestron Electronics, Inc."</td>
<td>C:\WINDOWS\Downloaded Program Files\cmxpanel.dll</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">{8FFBE65D-2C9C-4669-84BD-5829DC0B603C} "{8FFBE65D-2C9C-4669-84BD-5829DC0B603C}"<br>hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab</td>
<td class="notfound"></td>
<td class="notfound"></td>
<td class="notfound">File not found | COM-object registry key not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA} "{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}"<br>hxxp://java.sun.com/products/plugin/1.4.2/jinstall-142-win.cab</td>
<td class="notfound"></td>
<td class="notfound"></td>
<td class="notfound">File not found | COM-object registry key not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} "{CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA}"<br>hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab</td>
<td class="notfound"></td>
<td class="notfound"></td>
<td class="notfound">File not found | COM-object registry key not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} "{CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA}"<br>hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab</td>
<td class="notfound"></td>
<td class="notfound"></td>
<td class="notfound">File not found | COM-object registry key not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">{F74959B0-1779-472E-BE6E-3023E1DBEC73} "{F74959B0-1779-472E-BE6E-3023E1DBEC73}"<br>hxxp://192.168.1.205/XInit.cab</td>
<td class="notfound"></td>
<td class="notfound"></td>
<td class="notfound">File not found | COM-object registry key not found</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"@btrez.dll,-4015"</td>
<td></td>
<td>C:\Programme\ThinkPad\Bluetooth Software\btsendto_ie.htm</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{86529161-034E-4F8A-88D2-3C625E612E04} "Run WinHTTrack"</td>
<td></td>
<td>C:\Programme\WinHTTrack\WinHTTrackIEBar.dll</td>
<td>File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{18DF081C-E8AD-4283-A596-FA578C2EBDC3} "Adobe PDF Link Helper"</td>
<td>"Adobe Systems Incorporated"</td>
<td>C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{5CA3D70E-1895-11CF-8E15-001234567890} "DriveLetterAccess"</td>
<td>"Sonic Solutions"</td>
<td>C:\WINDOWS\System32\DLA\DLASHX_W.DLL</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{DBC80044-A445-435b-BC74-9C25C1C588A9} "Java(tm) Plug-In 2 SSV Helper"</td>
<td>"Sun Microsystems, Inc."</td>
<td>C:\Programme\Java\jre6\bin\jp2ssv.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{E7E6F031-17CE-4C07-BC86-EABFE594F69C} "JQSIEStartDetectorImpl Class"</td>
<td>"Sun Microsystems, Inc."</td>
<td>C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>{3049C3E9-B461-4BC5-8870-4C09146192CA} "RealPlayer Download and Record Plugin for Internet Explorer"</td>
<td>"RealPlayer"</td>
<td>C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll</td>
<td>File exists</td>
</tr>
<tr>
<td class="group" colspan="6">Logon</td>
</tr>
<tr>
<td class="reg" colspan="6">%AllUsersProfile%\Startmenü\Programme\Autostart</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"desktop.ini"</td>
<td></td>
<td>C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\desktop.ini</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Digital Line Detect.lnk"</td>
<td>"BVRP Software"</td>
<td>C:\Program Files\Digital Line Detect\DLG.exe</td>
<td>Shortcut exists | File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"EPSON SMART PANEL.lnk"</td>
<td>"NewSoft"</td>
<td>C:\Programme\EPSON\SMART PANEL\SmaPanel.exe</td>
<td>Shortcut exists | File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"EPSON Status Monitor 3 Environment Check.lnk"</td>
<td>"SEIKO EPSON CORPORATION"</td>
<td>C:\WINDOWS\system32\spool\drivers\w32x86\3\E_SRCV03.EXE</td>
<td>Shortcut exists | File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Fax-Controller.lnk"</td>
<td>"NewSoft Technology Corporation"</td>
<td>C:\Programme\EPSON\SMART PANEL\faxicore.exe</td>
<td>Shortcut exists | File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"FRITZ!DSL Startcenter.lnk"</td>
<td>"AVM Berlin"</td>
<td>C:\Programme\FRITZ!DSL\StCenter.exe</td>
<td>Shortcut exists | File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Telefonverbindungsmonitor.lnk"</td>
<td>"Teleca Software Solutions AB"</td>
<td>C:\Programme\Sony Ericsson\Mobile\audevicemgr.exe</td>
<td>Shortcut exists | File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Erinnerungen in Microsoft Works-Kalender.lnk"</td>
<td>"Microsoft® Corporation"</td>
<td>C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkCalRem.exe</td>
<td>Shortcut exists | File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"BTTray.lnk"</td>
<td>"Broadcom Corporation."</td>
<td>C:\Programme\ThinkPad\Bluetooth Software\BTTray.exe</td>
<td>Shortcut exists | File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">%UserProfile%\Startmenü\Programme\Autostart</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"desktop.ini"</td>
<td></td>
<td>C:\Dokumente und Einstellungen\+++\Startmenü\Programme\Autostart\desktop.ini</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"FRITZ!DSL Protect.lnk"</td>
<td>"AVM Berlin"</td>
<td>C:\Programme\FRITZ!DSL\FwebProt.exe</td>
<td>Shortcut exists | File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"AVMUSBFernanschluss"</td>
<td>"AVM Berlin"</td>
<td>C:\Dokumente und Einstellungen\+++\Lokale Einstellungen\Apps\2.0\P2PN3W8Y.MX4\860T49LP.4CK\frit..tion_8488884cfbcefd60_0002.0001_383382c5c60b72bd\AVMAutoStart.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"ibmmessages"</td>
<td>"IBM"</td>
<td>C:\Programme\IBM\Messages By IBM\ibmmessages.exe</td>
<td>File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\Software\Microsoft\Windows\CurrentVersion\Run</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"ACTray"</td>
<td>"Lenovo "</td>
<td>C:\Programme\ThinkPad\ConnectUtilities\ACTray.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"ACWLIcon"</td>
<td>"Lenovo "</td>
<td>C:\Programme\ThinkPad\ConnectUtilities\ACWLIcon.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Adobe ARM"</td>
<td>"Adobe Systems Incorporated"</td>
<td>"C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe"</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Adobe Reader Speed Launcher"</td>
<td>"Adobe Systems Incorporated"</td>
<td>"C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe"</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"AppleSyncNotifier"</td>
<td>"Apple Inc."</td>
<td>C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"ATIPTA"</td>
<td>"ATI Technologies, Inc."</td>
<td>"C:\Programme\ATI Technologies\ATI Control Panel\atiptaxx.exe"</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"avast5"</td>
<td>"AVAST Software"</td>
<td>"C:\Programme\Alwil Software\Avast5\avastUI.exe" /nogui</td>
<td>File exists</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">"BLOG"</td>
<td class="nodetails"></td>
<td class="nodetails">rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">"CoolSwitch"</td>
<td class="nodetails"></td>
<td class="nodetails">C:\WINDOWS\system32\taskswitch.exe</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"DLA"</td>
<td>"Sonic Solutions"</td>
<td>C:\WINDOWS\System32\DLA\DLACTRLW.EXE</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"EZEJMNAP"</td>
<td>"Lenovo Group Ltd."</td>
<td>C:\PROGRA~1\ThinkPad\UTILIT~1\EzEjMnAp.Exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"FinePrint Dispatcher v4"</td>
<td>"FinePrint Software, LLC"</td>
<td>C:\WINDOWS\System32\spool\DRIVERS\W32X86\2\fpdisp4.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"ibmmessages"</td>
<td>"IBM"</td>
<td>C:\Programme\IBM\Messages By IBM\ibmmessages.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"IBMPRC"</td>
<td>"IBM Corp."</td>
<td>C:\IBMTOOLS\UTILS\ibmprc.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"ISUSPM Startup"</td>
<td>"InstallShield Software Corporation"</td>
<td>C:\PROGRA~1\GEMEIN~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"ISUSScheduler"</td>
<td>"InstallShield Software Corporation"</td>
<td>"C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\issch.exe" -start</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"LogitechCommunicationsManager"</td>
<td>"Logitech Inc."</td>
<td>"C:\Programme\Gemeinsame Dateien\LogiShrd\LComMgr\Communications_Helper.exe"</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"LogitechQuickCamRibbon"</td>
<td>"Logitech Inc."</td>
<td>"C:\Programme\Logitech\QuickCam10\QuickCam10.exe" /hide</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Message Center Plus"</td>
<td></td>
<td>C:\Programme\LENOVO\Message Center Plus\MCPLaunch.exe /start</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Microsoft Works Portfolio"</td>
<td>"Microsoft® Corporation"</td>
<td>C:\Programme\Microsoft Works\WksSb.exe /AllUsers</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Microsoft Works Update Detection"</td>
<td>"Microsoft® Corporation"</td>
<td>C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkUFind.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"PWRMGRTR"</td>
<td>"Lenovo Group Limited"</td>
<td>rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"QuickTime Task"</td>
<td>"Apple Inc."</td>
<td>"C:\Programme\QuickTime\QTTask.exe" -atboottime</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"RemoteControl"</td>
<td>"Cyberlink Corp."</td>
<td>"C:\Programme\Home Cinema\PowerDVD\PDVDServ.exe"</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"SmcService"</td>
<td>"Sygate Technologies, Inc."</td>
<td>C:\PROGRA~1\Sygate\SPF\smc.exe -startgui</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"SoundMAXPnP"</td>
<td>"Analog Devices, Inc."</td>
<td>C:\Programme\Analog Devices\SoundMAX\SMax4PNP.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"StartCCC"</td>
<td>"Advanced Micro Devices, Inc."</td>
<td>"C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"SunJavaUpdateSched"</td>
<td>"Sun Microsystems, Inc."</td>
<td>"C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe"</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"TkBellExe"</td>
<td>"RealNetworks, Inc."</td>
<td>"C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"TortoiseHgOverlayIconServer"</td>
<td></td>
<td>C:\Programme\TortoiseHg\TortoiseHgOverlayServer.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"TP4EX"</td>
<td>"Lenovo Group Limited"</td>
<td>tp4ex.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"TPHOTKEY"</td>
<td>"Lenovo Group Limited"</td>
<td>C:\Programme\Lenovo\HOTKEY\TPOSDSVC.exe</td>
<td>File exists</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">"TPKBDLED"</td>
<td class="nodetails"></td>
<td class="nodetails">C:\WINDOWS\system32\TpScrLk.exe</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"TPKMAPHELPER"</td>
<td>"IBM Corp."</td>
<td>C:\Programme\ThinkPad\Utilities\TpKmapAp.exe -helper</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"TPP Auto Loader"</td>
<td>"In-System Design, Inc."</td>
<td>C:\WINDOWS\TPPALDR.EXE</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"TpShocks"</td>
<td>"Lenovo."</td>
<td>TpShocks.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"tsnp2std"</td>
<td>"SONIX"</td>
<td>C:\WINDOWS\tsnp2std.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"TVT Scheduler Proxy"</td>
<td>"Lenovo Group Limited"</td>
<td>C:\Programme\Gemeinsame Dateien\Lenovo\Scheduler\scheduler_proxy.exe</td>
<td>File exists</td>
</tr>
<tr>
<td class="group" colspan="6">Network Providers</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"1&1 SmartDrive"</td>
<td>"1&1 Internet AG"</td>
<td>C:\WINDOWS\System32\ui11np.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"GMX MediaCenter"</td>
<td>"GMX GmbH"</td>
<td>C:\WINDOWS\System32\uigxnp.dll</td>
<td>File exists</td>
</tr>
<tr>
<td class="group" colspan="6">Print Monitors</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"avm:"</td>
<td>"AVM Berlin GmbH"</td>
<td>C:\WINDOWS\system32\avmprmon.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Bluetooth-Druckeranschluss"</td>
<td>"Broadcom Corporation."</td>
<td>C:\WINDOWS\system32\bthcrp.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"doPDF 7 Monitor"</td>
<td>"Softland"</td>
<td>C:\WINDOWS\system32\dopdfmn7.dll</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"EPSON STM3 2KMonitor9"</td>
<td>"SEIKO EPSON CORPORATION"</td>
<td>C:\WINDOWS\system32\E_SL2009.DLL</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"FPR4:"</td>
<td>"FinePrint Software, LLC"</td>
<td>C:\WINDOWS\system32\fpmon4.dll</td>
<td>File exists</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">"PDF995 Monitor"</td>
<td class="nodetails"></td>
<td class="nodetails">C:\WINDOWS\system32\pdfmon.dll</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td class="group" colspan="6">Services</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Services</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>".NET Runtime Optimization Service v2.0.50727_X86" (clr_optimization_v2.0.50727_32)</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Ac Profile Manager Service" (AcPrfMgrSvc)</td>
<td>"Lenovo "</td>
<td>C:\Programme\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Access Connections Main Service" (AcSvc)</td>
<td>"Lenovo "</td>
<td>C:\Programme\ThinkPad\ConnectUtilities\AcSvc.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"ASP.NET-Zustandsdienst" (aspnet_state)</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"avast! Antivirus" (avast! Antivirus)</td>
<td>"AVAST Software"</td>
<td>C:\Programme\Alwil Software\Avast5\AvastSvc.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"avast! Mail Scanner" (avast! Mail Scanner)</td>
<td>"AVAST Software"</td>
<td>C:\Programme\Alwil Software\Avast5\AvastSvc.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"avast! Web Scanner" (avast! Web Scanner)</td>
<td>"AVAST Software"</td>
<td>C:\Programme\Alwil Software\Avast5\AvastSvc.exe</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"AVM FRITZ!web Routing Service" (de_serv)</td>
<td class="notfound"></td>
<td class="notfound">C:\Programme\Gemeinsame Dateien\AVM\de_serv.exe</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"AVM IGD CTRL Service" (IGDCTRL)</td>
<td>"AVM Berlin"</td>
<td>C:\Programme\FRITZ!DSL\IGDCTRL.EXE</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Bluetooth Service" (btwdins)</td>
<td>"Broadcom Corporation."</td>
<td>C:\Programme\ThinkPad\Bluetooth Software\bin\btwdins.exe</td>
<td>File exists</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"Google Update Service (gupdate)" (gupdate)</td>
<td class="notfound"></td>
<td class="notfound">"C:\Programme\Google\Update\GoogleUpdate.exe" /svc</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"HID Input Service" (HidServ)</td>
<td class="notfound"></td>
<td class="notfound"> C:\WINDOWS\System32\hidserv.dll</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">"IBM KCU Service" (TpKmpSVC)</td>
<td class="nodetails"></td>
<td class="nodetails">C:\WINDOWS\system32\TpKmpSVC.exe</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"InstallDriver Table Manager" (IDriverT)</td>
<td>"Macrovision Corporation"</td>
<td>C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Intel(R) PROSet/Wireless Event Log" (EvtEng)</td>
<td>"Intel(R) Corporation"</td>
<td>C:\Programme\Intel\WiFi\bin\EvtEng.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Intel(R) PROSet/Wireless Registry Service" (RegSrvc)</td>
<td>"Intel(R) Corporation"</td>
<td>C:\Programme\Gemeinsame Dateien\Intel\WirelessCommon\RegSrvc.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Intel(R) PROSet/Wireless WiFi Service" (S24EventMonitor)</td>
<td>"Intel(R) Corporation"</td>
<td>C:\Programme\Intel\WiFi\bin\S24EvMon.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Java Quick Starter" (JavaQuickStarterService)</td>
<td>"Sun Microsystems, Inc."</td>
<td>C:\Programme\Java\jre6\bin\jqs.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Lavasoft Ad-Aware Service" (aawservice)</td>
<td>"Lavasoft"</td>
<td>C:\Programme\Lavasoft\Ad-Aware\aawservice.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Lenovo Doze Mode Service" (DozeSvc)</td>
<td>"Lenovo."</td>
<td>C:\Programme\ThinkPad\Utilities\DOZESVC.EXE</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Logitech Process Monitor" (LVPrcSrv)</td>
<td>"Logitech Inc."</td>
<td>c:\programme\gemeinsame dateien\logishrd\lvmvfm\LVPrcSrv.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"LVSrvLauncher" (LVSrvLauncher)</td>
<td>"Logitech Inc."</td>
<td>C:\Programme\Gemeinsame Dateien\LogiShrd\SrvLnch\SrvLnch.exe</td>
<td>File exists</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">"NMSAccessU" (NMSAccessU)</td>
<td class="nodetails"></td>
<td class="nodetails">C:\WINDOWS\system32\NMSAccessU.exe</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Power Manager DBC Service" (Power Manager DBC Service)</td>
<td></td>
<td>C:\Programme\ThinkPad\Utilities\PWMDBSVC.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"SoundMAX Agent Service" (SoundMAX Agent Service (default))</td>
<td>"Analog Devices, Inc."</td>
<td>C:\Programme\Analog Devices\SoundMAX\SMAgent.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Sygate Personal Firewall" (SmcService)</td>
<td>"Sygate Technologies, Inc."</td>
<td>C:\Programme\Sygate\SPF\smc.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"System Update" (SUService)</td>
<td>"Lenovo Group Limited"</td>
<td>c:\programme\lenovo\system update\suservice.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"ThinkPad HDD APS Logging Service" (TPHDEXLGSVC)</td>
<td>"Lenovo."</td>
<td>C:\WINDOWS\System32\TPHDEXLG.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"ThinkVantage Registry Monitor Service" (ThinkVantage Registry Monitor Service)</td>
<td>"Lenovo Group Limited"</td>
<td>C:\Programme\Gemeinsame Dateien\Lenovo\tvt_reg_monitor_svc.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"TVT Scheduler" (TVT Scheduler)</td>
<td>"Lenovo Group Limited"</td>
<td>C:\Programme\Gemeinsame Dateien\Lenovo\Scheduler\tvtsched.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Ulead Burning Helper" (UleadBurningHelper)</td>
<td>"Ulead Systems, Inc."</td>
<td>C:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Windows CardSpace" (idsvc)</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Windows Presentation Foundation Font Cache 3.0.0.0" (FontCache3.0.0.0)</td>
<td>"Microsoft Corporation"</td>
<td>c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe</td>
<td>File exists</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"X10 Device Network Service" (x10nets)</td>
<td>"X10"</td>
<td>C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe</td>
<td>File exists</td>
</tr>
<tr>
<td class="group" colspan="6">Winlogon</td>
</tr>
<tr>
<td class="reg" colspan="6">HKCU\Control Panel\IOProcs</td>
</tr>
<tr>
<td class="notfound"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="notfound">"MVB"</td>
<td class="notfound"></td>
<td class="notfound">mvfs32.dll</td>
<td class="notfound">File not found</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">"tpfnf2"</td>
<td class="nodetails"></td>
<td class="nodetails">C:\Programme\Lenovo\HOTKEY\notifyf2.dll</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td class="nodetails"><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td class="nodetails">"tphotkey"</td>
<td class="nodetails"></td>
<td class="nodetails">C:\Programme\Lenovo\HOTKEY\tphklock.dll</td>
<td class="nodetails">File found, but it contains no detailed information</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"WgaLogon"</td>
<td>"Microsoft Corporation"</td>
<td>C:\WINDOWS\system32\WgaLogon.dll</td>
<td>File exists</td>
</tr>
<tr>
<td class="group" colspan="6">Winsock Providers</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"Sarah NSP"</td>
<td>"AVM Berlin"</td>
<td>C:\Programme\FRITZ!DSL\sarah.dll</td>
<td>File exists</td>
</tr>
<tr>
<td class="reg" colspan="6">HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries</td>
</tr>
<tr>
<td><input type="checkbox" disabled checked></td>
<td class="rs rn"> </td>
<td>"SARAH LSP"</td>
<td>"AVM Berlin"</td>
<td>C:\Programme\FRITZ!DSL\sarah.dll</td>
<td>File exists</td>
</tr>
</table>
<p>If You have questions or want to get some help, You can visit <a href="hxxp://forum.online-solutions.ru" target="_blank">hxxp://forum.online-solutions.ru</a></p>
</body></html>
Code:
für MBRCheck.....txt ist leider der Zugriff von hier nicht erlaubt, obwohl in den All Users Ordner verschoben.
Also wieder zurück zum Administrator, um zu sehen, was da los ist.
|
