|
Alles rund um Windows: Win 10 PC lässt keine Cloudverbindung, Backups oder Rettungs-Disk-Erstellung zuWindows 7 Hilfe zu allen Windows-Betriebssystemen: Windows XP, Windows Vista, Windows 7, Windows 8(.1) und Windows 10 / Windows 11- als auch zu sämtlicher Windows-Software. Alles zu Windows 10 ist auch gerne willkommen. Bitte benenne etwaige Fehler oder Bluescreens unter Windows mit dem Wortlaut der Fehlermeldung und Fehlercode. Erste Schritte für Hilfe unter Windows. |
22.04.2021, 16:15 | #1 |
| Problem: Win 10 PC lässt keine Cloudverbindung, Backups oder Rettungs-Disk-Erstellung zu Guten Tag, Ich habe ein oder mehrere Probleme mit meinem beruflich und privat genutzten Windows 10-Rechner. Bin freiberuflicher Dozent und mit IT-Problemen auf mich gestellt. Würde mich also über eure Unterstützung sehr freuen. Problem-Beispiele: Die Installation einer App "P-Cloud-Drive", mit der ich meine Inhalte von allen Laptops und Smartphones sichere, lässt sich am PC nicht installieren. Es kommt die Fehlermeldung "Es besteht keine Internetverbindung", was definitiv nicht stimmt. Support von P-Cloud ist ratlos. Ebenso bei der Erstellung einer Rettungs-Disk (oder USB) über Ashampoo kommt Fehlermeldung "Netzwerkverbindung fehlgeschlagen". Support auch hier ratlos. Heute kam dazu, dass ich einen Ordner im WIN-Explorer umbenennen wollte, was einfach nicht möglich war. Nach Eingabe des neuen Namens springt die Anzeige auf den alten Namen "S" zurück. Neustart brachte nichts. Ich habe Kaspersky und Malwarebytes auf dem PC. Zeitweise Abschaltung des Schutzes brachte nichts. Kaspersky-Untersuchung im abgesicherten Modus brachte 3 Schaddateien, die in Quarantäne verschoben wurden. Wie man von dort einen Logfile ausliest, weiß ich nicht. Bitte meine Unwissenheit zu entschuldigen. ich danke schonmal für die Unterstützung! Hier Log FRST (weitere in Extra-Beiträgen) Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 17-04-2021 durchgeführt von ichbi (Administrator) auf DESKTOP-GOISBCG (Acer Predator PO3-600) (22-04-2021 17:04:13) Gestartet von C:\Users\ichbi\Downloads Geladene Profile: ichbi & _ashbackuppb_ Platform: Windows 10 Home Version 20H2 19042.928 (X64) Sprache: Deutsch (Deutschland) Standard-Browser: Chrome Start-Modus: Normal ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) () [Datei ist nicht signiert] C:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\oxHelper.exe <2> (Acer Incorporated) C:\Program Files\WindowsApps\AcerIncorporated.AcerRegistration_2.0.3024.0_x64__48frkmn4z8aw4\DesktopApp\AcerRegistrationBackGroundTask.exe (Ashampoo GmbH & Co. KG -> ) C:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\backupClient-abpb.exe (Ashampoo GmbH & Co. KG -> ) C:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\backupService-abpb.exe (Corel Corporation -> ) C:\Program Files (x86)\Roxio Easy CD & DVD Burning 2\Roxio Burn\RoxioBurnLauncher.exe (Corel Corporation -> ) C:\Program Files (x86)\Roxio\BackOnTrack\App\BService.exe (Corel Corporation -> ) C:\Program Files (x86)\Roxio\BackOnTrack\App\SaibSVC.exe (Creative Technology Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Creative\Connection Service\Creative.AudPosService.exe (Firebird Project) [Datei ist nicht signiert] C:\Program Files (x86)\Deltra\Firebird-Server\bin\fb_inet_server.exe (Flexera Software LLC -> Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\agent.exe (FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe (FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReaderUpdateService.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <43> (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler64.exe (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_ffc75848a6342fdf\jhi_service.exe (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_8559c34713c70ce4\RstMwService.exe (Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.2\avp.exe (Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.2\avpui.exe (Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.2\plugins_nms.exe (Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.3\ksde.exe (Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.3\ksdeui.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\MSPUB.EXE (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe <2> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd) C:\Windows\SysWOW64\Creative.UWPRPCService.exe (Nuance Communication, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe (Nuance Communication, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\loggerservice.exe (Nuance Communication, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\NaturallySpeaking15\dgnuiasvr.exe (Nuance Communication, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\NaturallySpeaking15\dragonbar.exe (Nuance Communication, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\NaturallySpeaking15\x64\dgnuiasvr_x64.exe (Nuance Communication, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\NaturallySpeaking15\Program\dgnria_nmhost.exe (Nuance Communication, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\NaturallySpeaking15\Program\natspeak.exe (Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2> (Opera Software AS -> Opera Software) C:\Users\ichbi\AppData\Local\Programs\Opera\75.0.3969.93\opera_autoupdate.exe <2> (Opera Software AS -> Opera Software) C:\Users\ichbi\AppData\Local\Programs\Opera\launcher.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2> (Softwareentwicklung Patric Remus -> Softwareentwicklung Remus - ArchiCrypt) C:\Program Files\ArchiCrypt\ArchiCrypt Live 8\ACLive8.exe (Spotify AB) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0\Spotify.exe <5> (Star Finanz - Software Entwicklung und Vertriebs GmbH -> Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 12 Basic\app\StarMoney.exe (Star Finanz - Software Entwicklung und Vertriebs GmbH -> Star Finanz-Software Entwicklung und Vertriebs GmbH) C:\Program Files (x86)\StarMoney 12 Basic\ouservice\StarMoneyOnlineUpdate.exe (STRATO AG -> STRATO AG) C:\Program Files (x86)\STRATO\HiDrive\HiDrive.App.exe (STRATO AG -> STRATO AG) C:\Program Files (x86)\STRATO\HiDrive\HiDrive.Sync.exe (STRATO AG -> STRATO AG) C:\Program Files (x86)\STRATO\HiDrive\Updater\HiDriveUpdateService.exe (STRATO AG -> The CefSharp Authors) C:\Program Files (x86)\STRATO\HiDrive\CefSharp.BrowserSubprocess.exe ==================== Registry (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320584 2018-02-13] (Intel(R) Rapid Storage Technology -> Intel Corporation) HKLM\...\Run: [Ashampoo Backup PB] => C:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\backupClient-abpb.exe [327040 2020-11-17] (Ashampoo GmbH & Co. KG -> ) HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [833824 2019-01-31] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM-x32\...\Run: [Creative.CreativeConnectionService] => C:\Program Files (x86)\Creative\Connection Service\Connection Service.exe [161280 2018-04-16] (Creative Technology Ltd.) [Datei ist nicht signiert] HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2075480 2013-06-24] (Flexera Software LLC -> Flexera Software LLC.) HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [35648 2015-01-19] (Nuance Communications, Inc. -> Nuance Communications, Inc.) HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [17600 2015-01-19] (Nuance Communications, Inc. -> Nuance Communications, Inc.) HKLM-x32\...\Run: [PDFProHook] => C:\Program Files (x86)\Nuance\PDF Professional 7\pdfpro7hook.exe [641864 2013-03-20] (Nuance Communications, Inc. -> Nuance Communications, Inc.) HKLM-x32\...\Run: [Nikon Transfer Monitor] => C:\Program Files (x86)\Common Files\Nikon\Monitor\NkMonitor.exe [479232 2008-12-16] (Nikon Corporation) [Datei ist nicht signiert] HKLM-x32\...\Run: [DNS7reminder] => C:\Program Files (x86)\Nuance\NaturallySpeaking15\Ereg\Ereg.exe [3146120 2016-05-06] (Nuance Communications, Inc. -> Nuance Communications, Inc.) HKLM-x32\...\Run: [RoxWatchTray] => C:\Program Files (x86)\Roxio Easy CD & DVD Burning 2\Common\RoxWatchTray15.exe [303968 2019-01-29] (Corel Corporation -> Corel Corporation) HKU\S-1-5-21-2076215291-2816363989-1149395193-1001\...\Run: [Opera Browser Assistant] => C:\Users\ichbi\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [3004440 2020-04-29] (Opera Software AS -> Opera Software) HKU\S-1-5-21-2076215291-2816363989-1149395193-1001\...\Run: [D6E95042255D3B15BDE8D4630AC6D5FDAC89EE24._service_run] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=service /prefetch:8 HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\89.0.4389.128\Installer\chrmstp.exe [2021-04-14] (Google LLC -> Google LLC) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PhraseExpress.lnk [2019-09-18] ShortcutTarget: PhraseExpress.lnk -> C:\Program Files (x86)\PhraseExpress\phraseexpress.exe (Bartels Media GmbH -> Bartels Media GmbH) Startup: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HiDrive.lnk [2021-04-21] ShortcutTarget: HiDrive.lnk -> C:\Program Files (x86)\STRATO\HiDrive\HiDrive.App.exe (STRATO AG -> STRATO AG) BootExecute: autocheck autochk * icarus_rvrt.exe HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============ (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {08E60F0E-D56A-4758-947C-934227897748} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1791712 2021-02-23] (Avast Software s.r.o. -> Avast Software) Task: {0D4B0F39-EE79-497F-B8BF-6C33FE778208} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [660040 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation) Task: {152028A1-D7D9-4009-8C94-E64B33AA6112} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\7.3.0\Scheduler.exe [149776 2020-01-17] (IObit Information Technology -> IObit) Task: {15BA5406-8184-483B-94F7-531E99D83056} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156456 2019-04-30] (Google Inc -> Google LLC) Task: {17DE7A1E-E3E6-4E72-A41F-9D930A6F4D85} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [746056 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation) Task: {1F622FE6-EAD7-47E6-BBB0-0D3F59A7CB5B} - System32\Tasks\Opera scheduled Autoupdate 1556784816 => c:\users\ichbi\appdata\local\programs\opera\launcher.exe [1886872 2021-03-23] (Opera Software AS -> Opera Software) Task: {2781DFD7-E496-40BF-A3A8-413A6C22D191} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23563208 2021-02-27] (Microsoft Corporation -> Microsoft Corporation) Task: {2A64597B-7E6A-4597-90F4-A088814338CE} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [1930312 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation) Task: {2CC9AAA2-087F-4F30-94CB-79C7B889073E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156456 2019-04-30] (Google Inc -> Google LLC) Task: {2ED1F909-60CD-40B0-86DC-8259FA432F09} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\7.3.0\AutoUpdate.exe [2369808 2020-02-17] (IObit Information Technology -> IObit) Task: {340AC159-788A-41B6-8041-219BC566677C} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [746056 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation) Task: {3C17D1F1-03E5-42AF-A571-F05EBCF3F03C} - System32\Tasks\Driver Booster SkipUAC (ichbi) => C:\Program Files (x86)\IObit\Driver Booster\7.3.0\DriverBooster.exe [7892240 2020-02-24] (IObit Information Technology -> IObit) Task: {3DF1ABAD-F850-4486-A7EE-6D954F0F6B43} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [660040 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation) Task: {44664B25-B013-4824-8659-A9665B5B1CE5} - System32\Tasks\UEIPInvitation => C:\Program Files\Acer\User Experience Improvement Program Service\Framework\UEIPOOBECheck.exe [2211120 2018-05-23] (Acer Incorporated -> Acer Incorporated) Task: {46EC995B-9756-4181-859C-0E51C588E392} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [968264 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation) Task: {5291FE18-9EE6-4E6A-B585-161D653527D8} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519240 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log Task: {5A394716-E1B2-462A-9D6D-381F63A0022F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe Task: {5F8C4DB3-9CB0-4A32-90BE-2711CD2A20AC} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2208192 2021-03-17] (Microsoft Corporation -> Microsoft Corporation) Task: {72054020-1C95-4A60-980E-D57E53255BDC} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23563208 2021-02-27] (Microsoft Corporation -> Microsoft Corporation) Task: {74367103-340E-4F83-9587-F8AA5C566AFF} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2208192 2021-03-17] (Microsoft Corporation -> Microsoft Corporation) Task: {7B538EA3-047A-4F8A-ACFE-5EB4A58D295B} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe [64320 2019-07-11] (Acer Incorporated -> Acer) Task: {7EC18574-41D0-4407-B5D5-CEB74FBBBE4D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [3512728 2021-03-17] (Microsoft Corporation -> Microsoft Corporation) Task: {9E11F0CC-0E0C-426E-B90D-8B21338B56E9} - System32\Tasks\NCH Software\ExpressInvoiceSchedBackup => C:\Program Files (x86)\NCH Software\ExpressInvoice\ExpressInvoice.exe [2792040 2019-11-15] (NCH Software, Inc. -> NCH Software) Task: {B1E7C06B-A9E7-4329-ADCB-1DEA32A475A3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [3512728 2021-03-17] (Microsoft Corporation -> Microsoft Corporation) Task: {BC714BEA-94B7-4C87-B175-985EC3B2361A} - System32\Tasks\Opera scheduled assistant Autoupdate 1582721047 => C:\Users\ichbi\AppData\Local\Programs\Opera\launcher.exe [1886872 2021-03-23] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\ichbi\AppData\Local\Programs\Opera\assistant" $(Arg0) Task: {CD817A6D-66D0-43B6-BD12-14E2B3C0B79F} - System32\Tasks\NCH Software\VideoPadCacheDeleteAll => C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe [9368552 2021-03-17] (NCH Software, Inc. -> NCH Software) Task: {D7C61167-B8B6-45FA-979B-66B211489B9F} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [474368 2018-08-03] (Acer Incorporated -> Acer Incorporated) Task: {E2B5613B-62D8-4861-BD69-FC549EA3E263} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe Task: {FA95739E-4EB6-45FB-9C96-AA0FD56CC430} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [524360 2018-01-10] (NVIDIA Corporation -> NVIDIA Corporation) Task: {FBD8D5D1-F989-4388-B3A3-BEE9DC791432} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program Service\Framework\TriggerFramework.exe [268080 2018-05-23] (Acer Incorporated -> Acer Incorporated) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe Task: C:\WINDOWS\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901}.job => C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher.exe ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.188.1 Tcpip\..\Interfaces\{74d72cdd-0d92-4822-a2b4-111acefa0ca9}: [DhcpNameServer] 192.168.188.1 Tcpip\..\Interfaces\{84596183-08cb-4649-a5eb-d51a92ebb61b}: [DhcpNameServer] 192.168.178.1 Edge: ======= DownloadDir: C:\Users\ichbi\Downloads Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden] Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden] Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden] Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden] Edge Profile: C:\Users\ichbi\AppData\Local\Microsoft\Edge\User Data\Default [2021-04-21] Edge DownloadDir: C:\Users\ichbi\Downloads Edge Extension: (Kaspersky Protection) - C:\Users\ichbi\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm [2021-03-16] Edge Extension: (IDM Integration Module) - C:\Users\ichbi\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\llbjbkhnmlidjebalopleeepgdfgcpec [2021-03-16] Edge HKU\S-1-5-21-2076215291-2816363989-1149395193-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] Edge HKU\S-1-5-21-2076215291-2816363989-1149395193-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [llbjbkhnmlidjebalopleeepgdfgcpec] - C:\Program Files (x86)\Internet Download Manager\IDMEdgeExt.crx [2021-02-13] Edge HKU\S-1-5-21-2076215291-2816363989-1149395193-1003\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee] FireFox: ======== FF DefaultProfile: wwif5bki.default FF ProfilePath: C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\wwif5bki.default [2021-04-21] FF Homepage: Mozilla\Firefox\Profiles\wwif5bki.default -> hxxps://links.malwarebytes.com/link/restorebrowser?lic=premium&product=MBAM-C/homepage?hp=1&bitmask=9996&pId=JD180501&iDate=2021-02-22 08:38:59&bName= FF Extension: (Amazon Assistant for Firefox) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\wwif5bki.default\Extensions\abb-acer@amazon.com [2019-05-01] [hxxps://s3-us-west-2.amazonaws.com/ubp-ubpextension-us-prod/vendor-update/firefox/acer1/updates.json] FF Extension: (Deutsch (DE) Language Pack) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\wwif5bki.default\Extensions\langpack-de@firefox.mozilla.org.xpi [2019-10-08] FF Extension: (Malwarebytes Browser Guard) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\wwif5bki.default\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2021-04-20] FF Extension: (LinkSnappy Plugin) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\wwif5bki.default\Extensions\{86fba4df-18df-458a-b95f-59a2bf587bee}.xpi [2019-10-08] [UpdateUrl:hxxps://linksnappy.com/upload/updates.json] FF Extension: (Picture-In-Picture) - C:\Program Files (x86)\Mozilla Firefox\browser\features\pictureinpicture@mozilla.org.xpi [2021-04-20] [ist nicht signiert] FF Extension: (Amazon Assistant for Firefox) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\abb-acer@amazon.com [2019-10-08] [hxxps://s3-us-west-2.amazonaws.com/ubp-ubpextension-us-prod/vendor-update/firefox/acer1/updates.json] FF Extension: (Deutsch (DE) Language Pack) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\langpack-de@firefox.mozilla.org [2019-10-08] FF Extension: (Mozilla Partner Defaults) - C:\Program Files (x86)\Mozilla Firefox\distribution\extensions\partnerdefaults@mozilla.com [2019-10-08] [] FF HKLM\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.2\FFExt\light_plugin_firefox\addon.xpi => nicht gefunden FF HKLM-x32\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.2\FFExt\light_plugin_firefox\addon.xpi => nicht gefunden FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-11-21] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: nuance.com/DgnRia2_x86_64 -> C:\Program Files (x86)\Nuance\NaturallySpeaking15\Program\x64\npDgnRia2_x64.dll [2016-08-23] (Nuance Communication, Inc. -> Nuance Communications, Inc.) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-11-21] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2019-11-21] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: nuance.com/DgnRia2 -> C:\Program Files (x86)\Nuance\NaturallySpeaking15\Program\npDgnRia2.dll [2016-08-23] (Nuance Communication, Inc. -> Nuance Communications, Inc.) FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Professional 7\bin\nppdf.dll [2011-07-15] (Zeon Corporation -> Zeon Corporation) FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2019-10-08] <==== ACHTUNG (Zeigt auf eine *.cfg Datei) FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2019-10-08] <==== ACHTUNG Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default [2021-04-22] CHR Notifications: Default -> hxxps://www.autoscout24.de; hxxps://www.facebook.com; hxxps://www.netflix.com; hxxps://www.save.tv; hxxps://www.youtube.com CHR HomePage: Default -> hxxp://www.google.de/ CHR Session Restore: Default -> ist aktiviert. CHR Extension: (Präsentationen) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-04-30] CHR Extension: (Kaspersky Protection) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm [2021-04-17] CHR Extension: (Docs) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-04-30] CHR Extension: (Google Drive) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-22] CHR Extension: (YouTube) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-04-30] CHR Extension: (Sicherer Passwort Generator) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\dapehldnfebpbfpfknddmlhghjlbjhdb [2021-04-01] CHR Extension: (Dragon Weberweiterung) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddaloccgjfibfpkalenodgehlhkgoahe [2020-07-16] CHR Extension: (Convertio) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppjkefeiehhflmgkhdooajgbkkegpcl [2020-02-03] CHR Extension: (Tabellen) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-04-30] CHR Extension: (Google Docs Offline) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-04-17] CHR Extension: (LastPass: Free Password Manager) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2021-04-17] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-04-20] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-01] CHR Extension: (Amazon Assistant für Chrome) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbjikboenpfhbbejgkoklgkhjpfogcam [2021-04-06] CHR Extension: (Google Mail) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-11-17] CHR Extension: (Chrome Media Router) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-17] CHR Profile: C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Guest Profile [2020-08-16] CHR Profile: C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\System Profile [2020-08-16] CHR HKLM\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] CHR HKLM-x32\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee] CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] Opera: ======= OPR Profile: C:\Users\ichbi\AppData\Roaming\Opera Software\Opera Stable [2021-04-22] OPR DownloadDir: E:\Eigene Dateien OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding} OPR Extension: (Video | GIF Downloader für Twitter) - C:\Users\ichbi\AppData\Roaming\Opera Software\Opera Stable\Extensions\ankbefmkofkgnbmahnofpnagngfhigia [2020-08-24] OPR Extension: (Video Downloader Multiformat) - C:\Users\ichbi\AppData\Roaming\Opera Software\Opera Stable\Extensions\beemgnphifpbdehfmohojkhlklfaddih [2019-05-28] OPR Extension: (Rich Hints Agent) - C:\Users\ichbi\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2021-04-21] OPR Extension: (LastPass: Free Password Manager) - C:\Users\ichbi\AppData\Roaming\Opera Software\Opera Stable\Extensions\hnjalnkldgigidggphhmacmimbdlafdo [2021-04-18] OPR Extension: (Download with JDownloader) - C:\Users\ichbi\AppData\Roaming\Opera Software\Opera Stable\Extensions\jjbbcngfknmgdlekfofhaagmogeifbpc [2021-02-22] OPR Extension: (Download with Internet Download Manager) - C:\Users\ichbi\AppData\Roaming\Opera Software\Opera Stable\Extensions\kajaikkhnmegmfnlifeklklaienhdekb [2021-02-22] ==================== Dienste (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269; C:\Program Files (x86)\Roxio\BackOnTrack\App\SaibSVC.exe [504160 2017-12-14] (Corel Corporation -> ) R2 ashbackuppb; c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\backupService-abpb.exe [34176 2020-11-17] (Ashampoo GmbH & Co. KG -> ) R2 AVP21.2; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.2\avp.exe [381928 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab) R2 BOT4Service; C:\Program Files (x86)\Roxio\BackOnTrack\App\BService.exe [46432 2019-03-30] (Corel Corporation -> ) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9482672 2021-02-27] (Microsoft Corporation -> Microsoft Corporation) R2 Creative.AudPosService; C:\Program Files (x86)\Creative\Connection Service\Creative.AudPosService.exe [14848 2018-04-16] (Creative Technology Ltd) [Datei ist nicht signiert] R2 DragonLoggerService; C:\Program Files (x86)\Common Files\Nuance\loggerservice.exe [166280 2016-08-23] (Nuance Communication, Inc. -> Nuance Communications, Inc.) S3 ExpressInvoiceService; C:\Program Files (x86)\NCH Software\ExpressInvoice\expressinvoice.exe [2792040 2019-11-15] (NCH Software, Inc. -> NCH Software) S2 FirebirdGuardiandeltraOMX; C:\Program Files (x86)\Deltra\Firebird-Server\bin\fbguard.exe [98304 2017-06-16] (Firebird Project) [Datei ist nicht signiert] R3 FirebirdServerdeltraOMX; C:\Program Files (x86)\Deltra\Firebird-Server\bin\fb_inet_server.exe [3817472 2017-06-16] (Firebird Project) [Datei ist nicht signiert] R2 FoxitReaderUpdateService; C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReaderUpdateService.exe [2357936 2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Software Inc.) R2 HiDriveMaintenanceService; C:\Program Files (x86)\STRATO\HiDrive\Updater\HiDriveUpdateService.exe [1029024 2021-02-16] (STRATO AG -> STRATO AG) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert] S3 klvssbridge64_21.2; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.2\x64\vssbridge64.exe [467352 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab) S3 kpm_launch_service; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm_service.exe [354152 2020-04-01] (Kaspersky Lab -> AO Kaspersky Lab) R2 KSDE5.3; C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.3\ksde.exe [646520 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2021-04-20] (Malwarebytes Inc -> Malwarebytes) R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [77336 2015-01-19] (Nuance Communications, Inc. -> Nuance Communications, Inc.) R2 RoxioBurnLauncher; C:\Program Files (x86)\Roxio Easy CD & DVD Burning 2\Roxio Burn\RoxioBurnLauncher.exe [1234272 2019-04-14] (Corel Corporation -> ) S3 RoxMediaDB15; C:\Program Files (x86)\Roxio Easy CD & DVD Burning 2\Common\RoxMediaDB15.exe [1163616 2019-01-29] (Corel Corporation -> Corel Corporation) S2 RoxWatch15; C:\Program Files (x86)\Roxio Easy CD & DVD Burning 2\Common\RoxWatch15.exe [300896 2019-01-29] (Corel Corporation -> Corel Corporation) R2 StarMoney 12 Basic OnlineUpdate; C:\Program Files (x86)\StarMoney 12 Basic\ouservice\StarMoneyOnlineUpdate.exe [762160 2020-10-22] (Star Finanz - Software Entwicklung und Vertriebs GmbH -> Star Finanz-Software Entwicklung und Vertriebs GmbH) S3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program Service\Framework\UBTService.exe [303408 2018-05-23] (Acer Incorporated -> Acer Incorporated) R2 UWPService; C:\WINDOWS\SysWOW64\Creative.UWPRPCService.exe [363968 2019-05-06] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R1 ACLE8Live; C:\WINDOWS\System32\drivers\ACLE1964.sys [136064 2020-01-21] (Softwareentwicklung Patric Remus - ArchiCrypt - (Patric W.Remus) -> Softwareentwicklung Remus - ArchiCrypt -) S3 ampa; C:\Windows\system32\ampa.sys [38320 2017-02-28] (CHENGDU AOMEI Tech Co., Ltd. -> ) S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert] R1 cbfsconnect2017; C:\WINDOWS\system32\drivers\cbfsconnect2017.sys [481296 2020-06-24] (Microsoft Windows Hardware Compatibility Publisher -> Callback Technologies, Inc.) R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [251608 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab) S3 ddmdrv; C:\Windows\system32\ddmdrv.sys [35760 2016-12-27] (CHENGDU AOMEI Tech Co., Ltd. -> ) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159600 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [199128 2021-04-20] (Malwarebytes Inc -> Malwarebytes) R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2019-05-02] (Martin Malik - REALiX -> REALiX(tm)) R1 klbackupdisk; C:\WINDOWS\system32\DRIVERS\klbackupdisk.sys [110392 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab) R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [212280 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab) R1 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [127288 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab) S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [37496 2020-10-22] (Microsoft Windows Early Launch Anti-Malware Publisher -> AO Kaspersky Lab) R1 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [523576 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab) R1 klgse; C:\WINDOWS\System32\DRIVERS\klgse.sys [657696 2021-03-15] (Kaspersky Lab JSC -> AO Kaspersky Lab) R1 klhk; C:\WINDOWS\System32\drivers\klhk.sys [1400600 2021-03-15] (Kaspersky Lab JSC -> AO Kaspersky Lab) R3 klids; C:\ProgramData\Kaspersky Lab\AVP21.2\Bases\klids.sys [245304 2021-04-13] (Kaspersky Lab JSC -> AO Kaspersky Lab) R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1025336 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab) R1 klim6; C:\WINDOWS\system32\DRIVERS\klim6.sys [95544 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab) R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [113464 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab) R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [113464 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab) R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [85288 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab) R1 klpnpflt; C:\WINDOWS\system32\DRIVERS\klpnpflt.sys [97080 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab) R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [55592 2020-10-22] (AnchorFree Inc -> The OpenVPN Project) R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [263888 2021-04-12] (Kaspersky Lab JSC -> AO Kaspersky Lab) S3 klupd_klif_kimul; C:\WINDOWS\System32\Drivers\klupd_klif_kimul.sys [99152 2019-08-13] (Kaspersky Lab -> AO Kaspersky Lab) R3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [309104 2021-04-12] (Kaspersky Lab JSC -> AO Kaspersky Lab) R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [115744 2021-04-12] (Kaspersky Lab JSC -> AO Kaspersky Lab) R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [224880 2021-04-13] (Kaspersky Lab JSC -> AO Kaspersky Lab) R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [153400 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab) R1 klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [250168 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab) R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [300856 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab) S3 KobilCcid; C:\WINDOWS\System32\drivers\KobilCcid_x64.sys [50432 2020-05-04] (KOBIL Systems GmbH -> KOBIL Systems GmbH) R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [220752 2021-04-20] (Malwarebytes Inc -> Malwarebytes) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-09-19] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes) R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [198248 2021-04-21] (Malwarebytes Inc -> Malwarebytes) R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [77496 2021-04-21] (Malwarebytes Inc -> Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-04-21] (Malwarebytes Inc -> Malwarebytes) R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [157944 2021-04-21] (Malwarebytes Inc -> Malwarebytes) R3 MBfilt; C:\WINDOWS\system32\drivers\MBfilt64.sys [43456 2019-05-06] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd.) S3 mmrv-abpb; C:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\mmrv-abpb.sys [59424 2020-10-13] (Ashampoo GmbH & Co. KG -> ) R1 PxHelpFilter; C:\WINDOWS\system32\Drivers\PxHelpFilter.sys [24032 2018-06-08] (Corel Corporation -> Corel Corporation) R0 PxHlpa64; C:\WINDOWS\System32\drivers\PxHlpa64.sys [73464 2019-03-28] (Corel Corporation -> Corel Corporation) R3 RSBCdFilter; C:\WINDOWS\system32\Drivers\RSBCdFilter.sys [25568 2018-06-08] (Corel Corporation -> Corel Corporation) U5 RSBFilter; C:\Windows\System32\Drivers\RSBFilter.sys [27616 2018-06-08] (Corel Corporation -> Corel Corporation) R0 RSBFsFilter; C:\WINDOWS\System32\Drivers\RSBFsFilter.sys [28128 2018-06-08] (Corel Corporation -> Corel Corporation) R0 Sahdad64; C:\WINDOWS\System32\Drivers\Sahdad64.sys [46392 2017-12-14] (Corel Corporation -> Corel Corporation) R0 Saibad64; C:\WINDOWS\System32\Drivers\Saibad64.sys [38200 2017-12-14] (Corel Corporation -> Corel Corporation) R1 SaibVdAd64; C:\WINDOWS\System32\Drivers\SaibVdAd64.sys [45880 2017-12-14] (Corel Corporation -> Corel Corporation) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) R3 vpnpbus; C:\WINDOWS\System32\drivers\vpnpbus.sys [20704 2019-03-01] (Microsoft Windows Hardware Compatibility Publisher -> Callback Technologies, Inc.) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation) U3 avgbdisk; kein ImagePath ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2021-04-22 16:22 - 2021-04-22 16:22 - 000077515 _____ C:\Users\ichbi\Downloads\Shortcut.txt 2021-04-22 16:21 - 2021-04-22 16:22 - 000071143 _____ C:\Users\ichbi\Downloads\Addition.txt 2021-04-22 16:19 - 2021-04-22 17:04 - 000043584 _____ C:\Users\ichbi\Downloads\FRST.txt 2021-04-22 16:17 - 2021-04-22 17:04 - 000000000 ____D C:\FRST 2021-04-22 16:13 - 2021-04-22 16:14 - 002298368 _____ (Farbar) C:\Users\ichbi\Downloads\FRST64.exe 2021-04-22 14:58 - 2021-04-22 14:59 - 557716109 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Spezial_Hinter_den_Kulissen_FolgeS04E08_2021-04-14_1215_757346.mp4 2021-04-22 14:58 - 2021-04-22 14:59 - 544246756 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Der_Nebel_des_Grauens_FolgeS03E08_2021-04-15_2115_757346.mp4 2021-04-22 14:55 - 2021-04-22 14:57 - 562265979 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Grosseinsatz_FolgeS04E06_2021-04-13_1215_757346.mp4 2021-04-22 14:55 - 2021-04-22 14:57 - 561740743 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Vorsicht_Schlange_FolgeS04E05_2021-04-13_1115_757346.mp4 2021-04-22 14:55 - 2021-04-22 14:57 - 535058155 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Tiere_in_Not_FolgeS04E07_2021-04-14_1115_757346.mp4 2021-04-22 14:54 - 2021-04-22 14:57 - 558009358 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Die_Huette_brennt_FolgeS04E02_2021-04-09_1215_757346.mp4 2021-04-22 14:54 - 2021-04-22 14:56 - 562496879 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Moewe_auf_Abwegen_FolgeS04E03_2021-04-12_1115_757346.mp4 2021-04-22 14:54 - 2021-04-22 14:56 - 560804175 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Rettung_in_letzter_Sekunde_FolgeS04E01_2021-04-09_1115_757346.mp4 2021-04-22 14:54 - 2021-04-22 14:56 - 560504102 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Verzwickte_Lage_FolgeS04E04_2021-04-12_1215_757346.mp4 2021-04-22 14:54 - 2021-04-22 14:55 - 567540953 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Der_Tank_brennt_FolgeS03E07_2021-04-09_0018_757346.mp4 2021-04-22 14:54 - 2021-04-22 14:54 - 568711178 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Spezial_Die_besten_Einsaetze_FolgeS03E12_2021-04-08_1215_757346.mp4 2021-04-22 14:54 - 2021-04-22 14:54 - 567655718 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Die_Lokomotive_brennt_FolgeS03E11_2021-04-08_1115_757346.mp4 2021-04-22 14:50 - 2021-04-22 14:52 - 562130076 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Feuer_im_Kaufhaus_FolgeS03E10_2021-04-07_1215_757346.mp4 2021-04-22 14:49 - 2021-04-22 14:51 - 559621293 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Dramatische_Menschenrettung_FolgeS03E09_2021-04-07_1115_757346.mp4 2021-04-22 14:49 - 2021-04-22 14:51 - 557590473 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Grossbrand_in_Delmenhorst_FolgeS02E08_2021-04-04_0205_757346.mp4 2021-04-22 14:49 - 2021-04-22 14:51 - 549716451 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Feuer_in_der_Brandruine_FolgeS02E07_2021-04-04_0115_757346.mp4 2021-04-22 14:49 - 2021-04-22 14:51 - 540977080 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Vorsicht_explosiv_FolgeS03E06_2021-04-03_1120_757346.mp4 2021-04-22 14:49 - 2021-04-22 14:51 - 534579141 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Auf_den_Hund_gekommen_FolgeS03E04_2021-04-03_0925_757346.mp4 2021-04-22 14:49 - 2021-04-22 14:51 - 531942514 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Abgestuerzt_FolgeS03E05_2021-04-03_1020_757346.mp4 2021-04-22 14:47 - 2021-04-22 14:49 - 534439945 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Gefaehrliche_Strassen_FolgeS03E01_2021-04-03_0650_757346.mp4 2021-04-22 14:47 - 2021-04-22 14:49 - 534264940 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Hinter_verschlossenen_Tueren_FolgeS02E06_2021-04-03_0600_757346.mp4 2021-04-22 14:47 - 2021-04-22 14:49 - 532160150 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Schaumparty_FolgeS03E03_2021-04-03_0830_757346.mp4 2021-04-22 14:47 - 2021-04-22 14:48 - 567597346 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Brandstifter_FolgeS02E04_2021-04-03_0415_757346.mp4 2021-04-22 14:47 - 2021-04-22 14:48 - 561663729 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Die_Zerreissprobe_FolgeS02E03_2021-04-03_0325_757346.mp4 2021-04-22 14:47 - 2021-04-22 14:48 - 551141860 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Das_Inferno_FolgeS02E05_2021-04-03_0510_757346.mp4 2021-04-22 14:47 - 2021-04-22 14:48 - 541126379 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Dumm_gelaufen_FolgeS03E02_2021-04-03_0745_757346.mp4 2021-04-22 14:18 - 2021-04-22 14:20 - 569189999 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Feuer_unterm_Dach_FolgeS02E02_2021-04-03_0230_757346.mp4 2021-04-22 14:18 - 2021-04-22 14:20 - 544336768 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Spezial_Best_Of_FolgeS02E10_2021-03-29_1215_757346.mp4 2021-04-22 14:17 - 2021-04-22 14:20 - 533545917 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Hoch_hinaus_FolgeS02E01_2021-03-23_1115_757346.mp4 2021-04-22 14:17 - 2021-04-22 14:20 - 1329301810 _____ C:\Users\ichbi\Downloads\Tatort_Reifezeugnis_2021-03-20_2155_757346.mp4 2021-04-22 14:17 - 2021-04-22 14:19 - 544415110 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Spezial_FolgeS01E10_2021-03-22_1215_757346.mp4 2021-04-22 14:17 - 2021-04-22 14:19 - 542589961 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Schweres_Geraet_FolgeS01E09_2021-03-22_1115_757346.mp4 2021-04-22 14:17 - 2021-04-22 14:18 - 542822385 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Alarm_in_der_Shisha_Bar_FolgeS01E08_2021-03-19_1215_757346.mp4 2021-04-22 14:17 - 2021-04-22 14:18 - 534385932 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Knifflige_Rettung_FolgeS02E09_2021-03-29_1115_757346.mp4 2021-04-22 14:16 - 2021-04-22 14:18 - 535189071 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Doppelter_Einsatz_FolgeS01E07_2021-03-19_1115_757346.mp4 2021-04-22 14:15 - 2021-04-22 14:16 - 544395276 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Die_Belastungsprobe_FolgeS01E05_2021-03-18_1115_757346.mp4 2021-04-22 14:15 - 2021-04-22 14:16 - 543934573 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Das_Kinderzimmer_brennt_FolgeS01E06_2021-03-18_1215_757346.mp4 2021-04-22 14:15 - 2021-04-22 14:16 - 542512009 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Feuer_in_der_Fabrik_FolgeS01E04_2021-03-17_1215_757346.mp4 2021-04-22 14:14 - 2021-04-22 14:15 - 541004023 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Hochhaus_in_Flammen_FolgeS01E03_2021-03-17_1115_757346.mp4 2021-04-22 14:14 - 2021-04-22 14:15 - 535753601 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Der_Feuerteufel_FolgeS01E02_2021-03-16_1215_757346.mp4 2021-04-22 14:14 - 2021-04-22 14:14 - 540845288 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Gasalarm_FolgeS01E01_2021-03-16_1115_757346.mp4 2021-04-22 14:13 - 2021-04-22 14:14 - 569049519 _____ C:\Users\ichbi\Downloads\112_Feuerwehr_im_Einsatz_Der_Nebel_des_Grauens_FolgeS03E08_2021-04-16_0020_757346.mp4 2021-04-21 17:03 - 2021-04-21 17:03 - 000072582 _____ C:\Users\ichbi\AppData\Roaming\PhotoPad.dmp 2021-04-21 08:43 - 2021-04-21 08:43 - 000198248 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys 2021-04-21 08:43 - 2021-04-21 08:43 - 000157944 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys 2021-04-21 08:43 - 2021-04-21 08:43 - 000077496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2021-04-20 20:27 - 2021-04-20 20:27 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job 2021-04-20 20:26 - 2021-04-20 20:26 - 000000000 ____D C:\WINDOWS\pss 2021-04-20 19:54 - 2021-04-20 19:54 - 026635448 _____ (Piriform Software Ltd) C:\Users\ichbi\Downloads\ccsetup578_pro.exe 2021-04-20 18:22 - 2021-04-21 08:43 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2021-04-20 18:22 - 2020-09-19 12:17 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys 2021-04-20 18:21 - 2021-04-20 18:21 - 002078632 _____ (Malwarebytes) C:\Users\ichbi\Downloads\MBSetup-cb.cb.exe 2021-04-20 15:56 - 2021-04-20 15:57 - 000117365 _____ C:\Users\ichbi\Desktop\Globus_Carport B4994666.pdf 2021-04-18 17:04 - 2021-04-18 17:04 - 000001171 _____ C:\Users\Public\Desktop\Kaspersky VPN.lnk 2021-04-18 17:04 - 2021-04-18 17:04 - 000001171 _____ C:\ProgramData\Desktop\Kaspersky VPN.lnk 2021-04-18 17:04 - 2021-04-18 17:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky VPN 2021-04-17 13:25 - 2021-04-17 13:25 - 000526445 _____ C:\Users\ichbi\Downloads\Broschüre+Betriebsrente+für+Hinterbliebene.pdf 2021-04-14 17:21 - 2021-04-14 17:21 - 000246991 _____ C:\Users\ichbi\Desktop\HUK24_Rechnung_661119443B_20_11_12.pdf 2021-04-14 10:36 - 2021-04-14 10:36 - 001855192 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe 2021-04-14 10:36 - 2021-04-14 10:36 - 001855192 _____ C:\WINDOWS\system32\vulkaninfo.exe 2021-04-14 10:36 - 2021-04-14 10:36 - 001730864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6446589.dll 2021-04-14 10:36 - 2021-04-14 10:36 - 001490224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6446589.dll 2021-04-14 10:36 - 2021-04-14 10:36 - 001452312 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2021-04-14 10:36 - 2021-04-14 10:36 - 001435864 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe 2021-04-14 10:36 - 2021-04-14 10:36 - 001435864 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2021-04-14 10:36 - 2021-04-14 10:36 - 001191696 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2021-04-14 10:36 - 2021-04-14 10:36 - 001094864 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll 2021-04-14 10:36 - 2021-04-14 10:36 - 001094864 _____ C:\WINDOWS\system32\vulkan-1.dll 2021-04-14 10:36 - 2021-04-14 10:36 - 000948952 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll 2021-04-14 10:36 - 2021-04-14 10:36 - 000948952 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2021-04-14 10:36 - 2021-04-14 10:36 - 000000000 ____D C:\WINDOWS\system32\lxss 2021-04-14 10:35 - 2021-04-14 10:35 - 008826224 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\Netwtw08.sys 2021-04-14 10:35 - 2021-04-14 10:35 - 008316192 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2021-04-14 10:35 - 2021-04-14 10:35 - 007433496 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2021-04-14 10:35 - 2021-04-14 10:35 - 006154480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2021-04-14 10:35 - 2021-04-14 10:35 - 004795160 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2021-04-14 10:35 - 2021-04-14 10:35 - 002823440 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2021-04-14 10:35 - 2021-04-14 10:35 - 002677944 _____ C:\WINDOWS\system32\Drivers\Netwfw08.dat 2021-04-14 10:35 - 2021-04-14 10:35 - 002105648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2021-04-14 10:35 - 2021-04-14 10:35 - 001590064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2021-04-14 10:35 - 2021-04-14 10:35 - 001514288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2021-04-14 10:35 - 2021-04-14 10:35 - 001422192 _____ (Intel Corporation) C:\WINDOWS\system32\IntelIHVRouter08.dll 2021-04-14 10:35 - 2021-04-14 10:35 - 001166128 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2021-04-14 10:35 - 2021-04-14 10:35 - 000811792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2021-04-14 10:35 - 2021-04-14 10:35 - 000715568 _____ C:\WINDOWS\system32\nvofapi64.dll 2021-04-14 10:35 - 2021-04-14 10:35 - 000675120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2021-04-14 10:35 - 2021-04-14 10:35 - 000656176 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2021-04-14 10:35 - 2021-04-14 10:35 - 000575760 _____ C:\WINDOWS\SysWOW64\nvofapi.dll 2021-04-14 10:35 - 2021-04-14 10:35 - 000563992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2021-04-13 23:24 - 2021-04-13 23:24 - 000011357 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim 2021-04-13 23:23 - 2021-04-13 23:23 - 001823304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2021-04-13 23:23 - 2021-04-13 23:23 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll 2021-04-12 11:58 - 2021-04-12 11:58 - 000312667 _____ C:\Users\ichbi\Desktop\ref=cm_cr_srp_d_rdp_perm.html 2021-04-12 09:58 - 2021-04-12 09:58 - 000309104 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klark.sys 2021-04-12 09:57 - 2021-04-13 08:33 - 000224880 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_mark.sys 2021-04-12 09:57 - 2021-04-12 09:57 - 000263888 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_arkmon.sys 2021-04-12 09:57 - 2021-04-12 09:57 - 000115744 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klbg.sys 2021-04-11 19:42 - 2021-04-11 19:42 - 000000000 ____D C:\WINDOWS\Panther 2021-04-11 19:14 - 2021-04-11 19:14 - 000093479 _____ C:\Users\ichbi\Downloads\arbeitszeitrecht_2013_anlage_32_33_kestermann.pdf 2021-04-09 11:34 - 2021-04-09 11:34 - 039592776 _____ (pCloud AG) C:\Users\ichbi\Downloads\pCloud_Windows_3.10.2_x64.exe 2021-04-08 21:38 - 2021-04-08 21:38 - 000000000 ____D C:\Users\ichbi\Documents\Benutzerdefinierte Office-Vorlagen 2021-04-07 09:10 - 2021-04-07 09:10 - 000000000 ____D C:\Users\ichbi\.instagiffer 2021-04-06 15:02 - 2021-04-06 15:02 - 000001286 _____ C:\Users\ichbi\Desktop\AVS Video Editor.lnk 2021-04-01 22:45 - 2021-04-01 22:45 - 000000020 ___SH C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\ntuser.ini 2021-04-01 22:45 - 2021-04-01 22:45 - 000000000 _SHDL C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\Vorlagen 2021-04-01 22:45 - 2021-04-01 22:45 - 000000000 _SHDL C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\Startmenü 2021-04-01 22:45 - 2021-04-01 22:45 - 000000000 _SHDL C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\Netzwerkumgebung 2021-04-01 22:45 - 2021-04-01 22:45 - 000000000 _SHDL C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\Lokale Einstellungen 2021-04-01 22:45 - 2021-04-01 22:45 - 000000000 _SHDL C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\Eigene Dateien 2021-04-01 22:45 - 2021-04-01 22:45 - 000000000 _SHDL C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\Druckumgebung 2021-04-01 22:45 - 2021-04-01 22:45 - 000000000 _SHDL C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\Documents\Eigene Videos 2021-04-01 22:45 - 2021-04-01 22:45 - 000000000 _SHDL C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\Documents\Eigene Musik 2021-04-01 22:45 - 2021-04-01 22:45 - 000000000 _SHDL C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\Documents\Eigene Bilder 2021-04-01 22:45 - 2021-04-01 22:45 - 000000000 _SHDL C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Roaming\Microsoft\Windows\Start Menu\Programme 2021-04-01 22:45 - 2021-04-01 22:45 - 000000000 _SHDL C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Verlauf 2021-04-01 22:45 - 2021-04-01 22:45 - 000000000 _SHDL C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Anwendungsdaten 2021-04-01 22:45 - 2021-04-01 22:45 - 000000000 _SHDL C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\Anwendungsdaten 2021-04-01 22:45 - 2021-04-01 22:45 - 000000000 ____D C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Ashampoo 2021-04-01 22:45 - 2021-04-01 22:45 - 000000000 ____D C:\Users\_ashbackuppb_.DESKTOP-GOISBCG 2021-04-01 22:45 - 2020-06-25 09:00 - 000000000 ____D C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Kaspersky Lab 2021-04-01 22:45 - 2019-12-07 11:10 - 000001105 _____ C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2021-04-01 15:59 - 2021-04-21 08:46 - 000000000 ___RD C:\Users\ichbi\HiDrive 2021-04-01 15:54 - 2021-04-01 15:58 - 000000000 ____D C:\Users\ichbi\AppData\Local\HiDrive 2021-04-01 15:54 - 2021-04-01 15:54 - 000002126 _____ C:\Users\Public\Desktop\HiDrive.lnk 2021-04-01 15:54 - 2021-04-01 15:54 - 000002126 _____ C:\ProgramData\Desktop\HiDrive.lnk 2021-04-01 15:54 - 2021-04-01 15:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Strato 2021-04-01 15:54 - 2021-04-01 15:54 - 000000000 ____D C:\ProgramData\HiDrive 2021-04-01 15:54 - 2021-04-01 15:54 - 000000000 ____D C:\Program Files (x86)\STRATO 2021-04-01 14:51 - 2021-04-01 15:06 - 000000000 ____D C:\Users\ichbi\AppData\Local\IONOS HiDrive 2021-04-01 14:50 - 2021-04-01 14:50 - 000000000 ____D C:\ProgramData\IONOS HiDrive 2021-03-31 08:53 - 2021-03-31 08:53 - 000000000 ____D C:\Users\ichbi\Desktop\pCloud Drive Problem 2021-03-30 09:25 - 2021-03-30 09:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2021-03-30 09:24 - 2021-03-30 09:24 - 000000000 ____D C:\Program Files\Microsoft Silverlight 2021-03-30 09:24 - 2021-03-30 09:24 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2021-03-30 08:51 - 2021-03-30 08:51 - 000001436 _____ C:\Users\Public\Desktop\Foxit Reader.lnk 2021-03-30 08:51 - 2021-03-30 08:51 - 000001436 _____ C:\ProgramData\Desktop\Foxit Reader.lnk 2021-03-30 08:51 - 2021-03-30 08:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader 2021-03-26 12:36 - 2021-03-26 12:36 - 000000000 ____D C:\Users\ichbi\Documents\VideoPad Projekte 2021-03-26 11:01 - 2021-03-26 11:04 - 000000000 ____D C:\Users\ichbi\Documents\Soundaufnahmen 2021-03-25 14:53 - 2021-04-20 20:00 - 000000000 ____D C:\Users\ichbi\AppData\Roaming\FileZilla 2021-03-25 14:53 - 2021-04-20 19:59 - 000000000 ____D C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client 2021-03-25 14:53 - 2021-04-20 19:59 - 000000000 ____D C:\Program Files\FileZilla FTP Client 2021-03-25 14:53 - 2021-03-25 14:57 - 000000000 ____D C:\Users\ichbi\AppData\Local\FileZilla 2021-03-25 14:37 - 2021-03-25 14:37 - 000000031 _____ C:\Users\ichbi\Downloads\index (1).html 2021-03-25 14:36 - 2021-03-25 14:36 - 000001495 _____ C:\Users\ichbi\Downloads\index.php 2021-03-25 14:36 - 2021-03-25 14:36 - 000000031 _____ C:\Users\ichbi\Downloads\index.html ==================== Ein Monat (geänderte) ================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2021-04-22 17:02 - 2019-05-01 15:31 - 000000000 ____D C:\Users\ichbi\Documents\Outlook-Dateien 2021-04-22 17:01 - 2021-02-22 10:38 - 000000000 ____D C:\Users\ichbi\AppData\Local\JDownloader 2.0 2021-04-22 16:12 - 2021-02-09 15:36 - 000000000 ____D C:\ProgramData\AVG 2021-04-22 16:12 - 2021-01-12 06:37 - 000003430 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d6e506dbea15 2021-04-22 16:12 - 2021-01-07 17:03 - 000004302 _____ C:\WINDOWS\system32\Tasks\Software Update Application 2021-04-22 16:12 - 2021-01-07 17:03 - 000003628 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2021-04-22 16:12 - 2021-01-07 17:03 - 000003404 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2021-04-22 16:12 - 2021-01-07 17:03 - 000003176 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2021-04-22 16:12 - 2021-01-07 17:03 - 000002984 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2021-04-22 16:12 - 2021-01-07 17:03 - 000002744 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2021-04-22 16:12 - 2021-01-07 17:03 - 000002572 _____ C:\WINDOWS\system32\Tasks\Driver Booster Scheduler 2021-04-22 16:12 - 2021-01-07 17:03 - 000002558 _____ C:\WINDOWS\system32\Tasks\Driver Booster Update 2021-04-22 16:12 - 2021-01-07 17:03 - 000002398 _____ C:\WINDOWS\system32\Tasks\Driver Booster SkipUAC (ichbi) 2021-04-22 15:49 - 2021-01-07 16:56 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2021-04-22 15:17 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2021-04-22 14:29 - 2019-05-02 10:56 - 000013389 _____ C:\WINDOWS\BRRBCOM.INI 2021-04-22 13:36 - 2020-04-22 08:49 - 000000000 ____D C:\Users\ichbi\AppData\LocalLow\IGDump 2021-04-22 13:32 - 2018-12-24 16:00 - 000000000 ____D C:\ProgramData\NVIDIA 2021-04-21 13:39 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps 2021-04-21 13:39 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness 2021-04-21 13:22 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF 2021-04-21 11:18 - 2019-11-23 17:53 - 000001635 _____ C:\Users\ichbi\AppData\Roaming\SAS7_000.DAT 2021-04-21 08:49 - 2021-01-07 17:06 - 001722998 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2021-04-21 08:49 - 2021-01-07 17:03 - 000003630 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA 2021-04-21 08:49 - 2021-01-07 17:03 - 000003506 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore 2021-04-21 08:49 - 2019-12-07 16:50 - 000743708 _____ C:\WINDOWS\system32\perfh007.dat 2021-04-21 08:49 - 2019-12-07 16:50 - 000150130 _____ C:\WINDOWS\system32\perfc007.dat 2021-04-21 08:45 - 2020-06-25 00:34 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2021-04-21 08:45 - 2020-06-25 00:34 - 000002282 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk 2021-04-21 08:45 - 2020-06-25 00:34 - 000002282 _____ C:\ProgramData\Desktop\Microsoft Edge.lnk 2021-04-21 08:43 - 2019-08-08 11:56 - 000000000 ____D C:\Program Files (x86)\StarMoney 12 Basic 2021-04-21 08:42 - 2021-02-12 18:20 - 000008192 ___SH C:\DumpStack.log.tmp 2021-04-21 08:42 - 2021-01-07 17:03 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2021-04-21 08:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState 2021-04-21 08:42 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2021-04-20 20:27 - 2021-02-19 15:24 - 000220752 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys 2021-04-20 20:14 - 2019-10-08 12:43 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox 2021-04-20 20:14 - 2019-08-13 13:04 - 000000000 ____D C:\ProgramData\Kaspersky Lab 2021-04-20 20:14 - 2018-12-24 16:33 - 000001244 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2021-04-20 20:12 - 2020-01-21 13:12 - 000000000 ____D C:\Users\ichbi\AppData\Roaming\ACLive5 2021-04-20 20:11 - 2019-05-02 12:37 - 000000000 ____D C:\ProgramData\firebird 2021-04-20 20:11 - 2019-04-30 17:38 - 000000000 ____D C:\Users\ichbi\AppData\Local\Packages 2021-04-20 20:00 - 2019-05-02 10:13 - 000000000 ____D C:\Users\ichbi\AppData\Local\CrashDumps 2021-04-20 19:59 - 2020-10-19 16:36 - 000001100 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk 2021-04-20 19:59 - 2020-10-19 16:36 - 000001088 _____ C:\Users\Public\Desktop\Audacity.lnk 2021-04-20 19:59 - 2020-10-19 16:36 - 000001088 _____ C:\ProgramData\Desktop\Audacity.lnk 2021-04-20 19:59 - 2020-10-19 16:36 - 000000000 ____D C:\Program Files (x86)\Audacity 2021-04-20 19:29 - 2020-06-07 19:12 - 000000000 ____D C:\Users\ichbi\AppData\Local\Ashampoo Backup PB 2021-04-20 18:23 - 2019-05-01 13:55 - 000000000 ____D C:\ProgramData\Mozilla 2021-04-20 18:23 - 2019-05-01 13:28 - 000000000 ____D C:\Users\ichbi\AppData\LocalLow\Mozilla 2021-04-20 18:22 - 2020-09-19 12:17 - 000002029 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2021-04-20 18:22 - 2020-09-19 12:17 - 000002029 _____ C:\ProgramData\Desktop\Malwarebytes.lnk 2021-04-20 18:22 - 2020-08-09 18:42 - 000002041 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk 2021-04-20 18:22 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2021-04-20 18:21 - 2020-09-19 12:17 - 000199128 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys 2021-04-18 17:04 - 2019-08-13 13:04 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab 2021-04-15 22:31 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs 2021-04-15 22:31 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2021-04-15 22:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources 2021-04-15 22:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup 2021-04-15 22:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe 2021-04-15 22:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV 2021-04-15 22:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT 2021-04-15 22:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\et-EE 2021-04-15 22:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\es-MX 2021-04-15 22:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning 2021-04-15 22:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions 2021-04-15 22:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr 2021-04-15 22:30 - 2021-01-07 17:03 - 000000000 ____D C:\WINDOWS\system32\Tasks\NCH Software 2021-04-14 21:31 - 2019-04-30 17:44 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2021-04-14 21:31 - 2019-04-30 17:44 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2021-04-14 21:31 - 2019-04-30 17:44 - 000002260 _____ C:\ProgramData\Desktop\Google Chrome.lnk 2021-04-14 18:56 - 2020-05-28 19:10 - 000000000 ____D C:\Users\ichbi\Documents\Zoom 2021-04-14 12:52 - 2019-12-07 11:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM 2021-04-14 10:36 - 2020-12-03 12:34 - 000063942 _____ C:\WINDOWS\system32\nvinfo.pb 2021-04-14 10:36 - 2020-03-03 17:44 - 000002377 _____ C:\Users\Public\Desktop\Driver Booster 7.lnk 2021-04-14 10:36 - 2020-03-03 17:44 - 000002377 _____ C:\ProgramData\Desktop\Driver Booster 7.lnk 2021-04-14 10:35 - 2020-12-03 12:34 - 007207552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2021-04-14 10:33 - 2019-05-02 14:01 - 000000000 ____D C:\ProgramData\ProductData 2021-04-14 00:49 - 2019-05-02 14:45 - 000000000 ____D C:\ProgramData\AomeiBR 2021-04-13 23:25 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp 2021-04-13 23:23 - 2021-01-07 16:58 - 002877440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2021-04-13 23:19 - 2019-05-01 13:34 - 000000000 ____D C:\WINDOWS\system32\MRT 2021-04-13 23:15 - 2019-05-01 13:34 - 131963968 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2021-04-12 11:28 - 2021-01-07 17:03 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2076215291-2816363989-1149395193-1001 2021-04-12 11:28 - 2021-01-07 16:57 - 000002391 _____ C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2021-04-07 09:10 - 2021-01-07 16:57 - 000000000 ____D C:\Users\ichbi 2021-04-07 08:54 - 2020-10-22 09:38 - 000000000 ____D C:\Users\ichbi\Documents\Camtasia 2021-04-07 08:40 - 2018-12-24 16:32 - 000000000 ____D C:\ProgramData\oem 2021-04-07 08:40 - 2018-12-24 16:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer 2021-04-07 08:40 - 2018-12-24 16:31 - 000000000 ____D C:\Program Files (x86)\Acer 2021-04-07 08:40 - 2018-12-24 16:03 - 000000000 ____D C:\Program Files (x86)\Intel 2021-04-07 08:38 - 2020-05-04 11:58 - 000000000 ____D C:\Program Files (x86)\DATEV 2021-04-07 08:38 - 2018-12-24 15:56 - 000000000 ____D C:\ProgramData\Package Cache 2021-04-07 08:36 - 2019-05-02 14:46 - 000000104 _____ C:\WINDOWS\SysWOW64\AbBakConfig.dat 2021-04-07 08:36 - 2019-05-02 14:45 - 000000150 _____ C:\WINDOWS\SysWOW64\winsevr.dat 2021-04-06 23:34 - 2019-11-22 17:50 - 000000000 ____D C:\Users\ichbi\AppData\Local\D3DSCache 2021-04-06 17:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2021-04-06 15:02 - 2019-05-02 13:21 - 000000000 ____D C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\avs4you 2021-04-06 15:02 - 2019-05-02 13:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU 2021-04-06 15:02 - 2019-05-02 13:19 - 000000000 ____D C:\Program Files (x86)\AVS4YOU 2021-04-02 01:16 - 2020-10-01 14:46 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools 2021-04-01 22:45 - 2021-01-07 16:57 - 000000000 ____D C:\Users\_ashbackuppb_ 2021-04-01 22:45 - 2020-06-07 19:12 - 000000000 ____D C:\ProgramData\Ashampoo 2021-04-01 14:56 - 2021-02-09 15:36 - 000000000 ____D C:\Program Files\Common Files\AVG 2021-03-31 13:40 - 2020-09-19 17:51 - 000000000 ____D C:\Users\ichbi\AppData\Local\pCloud 2021-03-31 09:49 - 2021-01-07 17:03 - 000003858 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1582721047 2021-03-31 09:49 - 2021-01-07 17:03 - 000003626 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1556784816 2021-03-31 09:49 - 2021-01-07 17:03 - 000003398 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2021-03-31 09:49 - 2021-01-07 17:03 - 000002956 _____ C:\WINDOWS\system32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2021-03-31 09:49 - 2021-01-07 17:03 - 000002914 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2021-03-31 09:49 - 2021-01-07 17:03 - 000002838 _____ C:\WINDOWS\system32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2021-03-31 09:49 - 2021-01-07 17:03 - 000002786 _____ C:\WINDOWS\system32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2021-03-31 09:49 - 2021-01-07 17:03 - 000002770 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task v2 2021-03-31 09:49 - 2021-01-07 17:03 - 000002712 _____ C:\WINDOWS\system32\Tasks\UEIPInvitation 2021-03-31 09:49 - 2021-01-07 17:03 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software 2021-03-30 20:10 - 2019-06-30 13:48 - 000799104 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe 2021-03-30 15:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Macromed 2021-03-30 09:20 - 2019-05-04 17:52 - 000000000 ____D C:\Users\ichbi\Documents\PhraseExpress 2021-03-30 09:13 - 2018-12-24 15:59 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2021-03-30 09:12 - 2019-05-02 10:13 - 000001463 _____ C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk 2021-03-30 09:11 - 2020-12-03 12:33 - 001148904 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys 2021-03-30 08:51 - 2020-05-20 12:25 - 000000000 ____D C:\Users\ichbi\AppData\Roaming\Foxit Software 2021-03-30 08:51 - 2020-05-20 12:25 - 000000000 ____D C:\ProgramData\Foxit Software 2021-03-29 11:06 - 2020-10-19 16:37 - 000000000 ____D C:\Users\ichbi\AppData\Roaming\audacity 2021-03-26 12:37 - 2019-07-28 13:00 - 000000000 ____D C:\temp 2021-03-25 21:14 - 2018-12-24 16:00 - 005667184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2021-03-25 21:14 - 2018-12-24 16:00 - 002637168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2021-03-25 21:14 - 2018-12-24 16:00 - 001758064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2021-03-25 21:14 - 2018-12-24 16:00 - 000990064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2021-03-25 21:14 - 2018-12-24 16:00 - 000120176 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2021-03-25 21:14 - 2018-12-24 16:00 - 000082288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2021-03-23 09:48 - 2019-05-02 14:30 - 000000000 ____D C:\Users\ichbi\AppData\Roaming\PhraseExpress 2021-03-23 01:42 - 2020-10-01 14:46 - 000470864 _____ (Microsoft Corporation) C:\WINDOWS\system32\QualityUpdateAssistant.dll 2021-03-23 01:41 - 2020-10-01 14:46 - 000734008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sedplugins.dll ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======== 2019-06-01 18:11 - 2019-06-01 18:11 - 000000268 ____H () C:\Users\ichbi\AppData\Roaming\Bass 2019-06-01 18:32 - 2019-06-01 18:32 - 000000268 ____H () C:\Users\ichbi\AppData\Roaming\Bass Reduction 2021-04-21 17:03 - 2021-04-21 17:03 - 000072582 _____ () C:\Users\ichbi\AppData\Roaming\PhotoPad.dmp 2019-11-23 17:53 - 2021-04-21 11:18 - 000001635 _____ () C:\Users\ichbi\AppData\Roaming\SAS7_000.DAT ==================== SigCheck ============================ (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) ==================== Ende von FRST.txt ======================== |
22.04.2021, 16:15 | #2 |
| Win 10 PC lässt keine Cloudverbindung, Backups oder Rettungs-Disk-Erstellung zu Anleitung / Hilfe Hier die Addition.txt
__________________Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 17-04-2021 durchgeführt von ichbi (22-04-2021 17:05:12) Gestartet von C:\Users\ichbi\Downloads Windows 10 Home Version 20H2 19042.928 (X64) (2021-01-07 15:03:49) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-2076215291-2816363989-1149395193-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-2076215291-2816363989-1149395193-503 - Limited - Disabled) Gast (S-1-5-21-2076215291-2816363989-1149395193-501 - Limited - Disabled) ichbi (S-1-5-21-2076215291-2816363989-1149395193-1001 - Administrator - Enabled) => C:\Users\ichbi WDAGUtilityAccount (S-1-5-21-2076215291-2816363989-1149395193-504 - Limited - Disabled) _ashbackuppb_ (S-1-5-21-2076215291-2816363989-1149395193-1003 - Administrator - Enabled) => C:\Users\_ashbackuppb_.DESKTOP-GOISBCG ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Kaspersky Internet Security (Enabled - Up to date) {4F76F112-43EB-40E8-11D8-F7BD1853EA23} AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AV: Kaspersky Internet Security (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8} AS: Kaspersky Internet Security (Enabled - Up to date) {B1D2E896-6D96-7460-F17A-838B9D00DD65} AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security (Enabled) {774D7037-0984-41B0-3A87-5E88E680AD58} FW: Kaspersky Internet Security (Enabled) {32888857-01C3-7AB6-E095-11CC1854D0A3} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) 7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov) Acer Jumpstart (HKLM-x32\...\{353B4583-ED04-4DF2-A1D6-A5A3EF5C4EBF}) (Version: 3.2.18270.20 - Acer) Amazon Photos (HKU\S-1-5-21-2076215291-2816363989-1149395193-1001\...\Amazon Photos) (Version: 6.4.1 - Amazon.com, Inc.) AnyMP4 DVD Copy 3.1.36 (HKLM-x32\...\{069020F5-973C-4b00-AA76-7246EB45B5A1}_is1) (Version: 3.1.36 - AnyMP4 Studio) AOMEI Partition Assistant Standard Edition 8.1 (HKLM-x32\...\{02F850ED-FD0E-4ED1-BE0B-54981f5BD3D4}_is1) (Version: - AOMEI Technology Co., Ltd.) ArchiCrypt Live Version 8.30.9.17372 (HKLM\...\ArchiCrypt Live 8_is1) (Version: 8.30.9.17372 - Softwareentwicklung Patric Remus - ArchiCrypt) Ashampoo Backup Pro 14 (HKLM\...\{DF972766-6215-609B-2EC7-6E166E30B4C1}_is1) (Version: 14.09 - Ashampoo GmbH & Co. KG) Audacity 3.0.2 (HKLM-x32\...\Audacity_is1) (Version: 3.0.2 - Audacity Team) AVS Audio Converter 9.0.3 (HKLM-x32\...\AVS Audio Converter_is1) (Version: 9.0.3.593 - Online Media Technologies Ltd.) AVS Audio Editor 9.0.3 (HKLM-x32\...\AVS Audio Editor_is1) (Version: 9.0.3.534 - Online Media Technologies Ltd.) AVS Disc Creator 6.1.5 (HKLM-x32\...\AVS Disc Creator_is1) (Version: 6.1.5.555 - Online Media Technologies Ltd.) AVS Document Converter 4.2.2 (HKLM-x32\...\AVS Document Converter_is1) (Version: 4.2.2.267 - Online Media Technologies Ltd.) AVS Image Converter 5.2.2 (HKLM-x32\...\AVS Image Converter_is1) (Version: 5.2.2.301 - Online Media Technologies Ltd.) AVS Media Player 5.0.3 (HKLM-x32\...\AVS Media Player_is1) (Version: 5.0.3.133 - Online Media Technologies Ltd.) AVS Photo Editor 3.2.2 (HKLM-x32\...\AVS Photo Editor_is1) (Version: 3.2.2.166 - Online Media Technologies Ltd.) AVS Registry Cleaner 4.1.3 (HKLM-x32\...\AVS Registry Cleaner_is1) (Version: 4.1.3.289 - Online Media Technologies Ltd.) AVS Video Converter 11.0.3 (HKLM-x32\...\AVS4YOU Video Converter 7_is1) (Version: 11.0.3.639 - Online Media Technologies Ltd.) AVS Video Editor 9.4.5 (HKLM-x32\...\AVS Video Editor_is1) (Version: 9.4.5.377 - Online Media Technologies Ltd.) AVS Video ReMaker 6.2.3 (HKLM-x32\...\AVS Video ReMaker_is1) (Version: 6.2.3.228 - Online Media Technologies Ltd.) Camtasia 2020 (HKLM\...\{B22D61D6-A710-4C52-9CCC-931E02624256}) (Version: 20.0.12.26479 - TechSmith Corporation) Hidden Camtasia 2020 (HKLM-x32\...\{25384ed0-e328-4c04-88d3-cbeb9b325953}) (Version: 20.0.12.26479 - TechSmith Corporation) CDex - Open Source Digital Audio CD Extractor (HKLM-x32\...\CDex) (Version: 1.70.4.2009 - Georgy Berdyshev) CEWE FOTOWELT (HKLM-x32\...\CEWE FOTOWELT) (Version: 7.0.2 - CEWE Stiftung u Co. KGaA) Connection Service Version 1.1.7.0 (HKLM-x32\...\Connection Service_is1) (Version: 1.1.7.0 - Creative Technology Ltd.) Debut Video-Aufnahme-Programm (HKLM-x32\...\Debut) (Version: 6.48 - NCH Software) DirectX 9 Runtime (HKLM-x32\...\{3A9527CF-4E91-4683-A03F-F1AD022126E5}) (Version: 1.00.0000 - Sonic Solutions) Hidden Dragon 15 (HKLM-x32\...\{768AC460-237E-45B6-99B8-1DE6D0F391E8}) (Version: 15.00.000 - Nuance Communications Inc.) Driver Booster 7 (HKLM-x32\...\Driver Booster_is1) (Version: 7.3.0 - IObit) DriverSetupUtility (HKLM\...\{2B51C83A-465D-4EA9-9CDC-1ED95ED09AC6}) (Version: 1.00.3026 - Acer Incorporated) Easy CD & DVD Burning 2 Content (HKLM-x32\...\{246D31A0-7B8A-41EA-8E31-33C2F2F26B53}) (Version: 20.0.024 - Roxio) Hidden Express Invoice Rechnungsprogramm (HKLM-x32\...\ExpressInvoice) (Version: 7.28 - NCH Software) File Uploader (HKLM-x32\...\{237CD223-1B9D-47E8-A76C-E478B83CCEA2}) (Version: 1.2.0 - Nikon) FileZilla Client 3.53.1 (HKU\S-1-5-21-2076215291-2816363989-1149395193-1001\...\FileZilla Client) (Version: 3.53.1 - Tim Kosse) Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 10.1.1.37576 - Foxit Software Inc.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 89.0.4389.128 - Google LLC) HiDrive (HKLM-x32\...\{9F976D94-80D4-43BA-87BF-55F5E5A3119B}) (Version: 5.6.0.50 - STRATO AG) Instagiffer version 1.75 (HKLM-x32\...\{13DEF8F8-5280-4555-95A4-E815C3F9540F}_is1) (Version: 1.75 - Justin Todd) Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 1818.12.0.1130 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 16.0.2.1086 - Intel Corporation) Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.49.166.0 - Intel Corporation) Hidden Intel(R) Trusted Connect Services Client (HKLM-x32\...\{df682aff-4294-4ad1-aaa7-276931d5781f}) (Version: 1.49.166.0 - Intel Corporation) Hidden Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00001050-0200-1031-84C8-B8D95FA3C8C3}) (Version: 20.50.1 - Intel Corporation) Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{55d73ea7-6354-42db-8831-02d048ae57f8}) (Version: 10.1.17541.8066 - Intel(R) Corporation) Hidden Intel® Optane™ Pinning Explorer Extensions (HKLM\...\{2D79E334-B178-45B9-A2A6-7A60A084C268}) (Version: 16.8.0.1000 - Intel Corporation) Intel® PROSet/Wireless Software (HKLM-x32\...\{1e9d8bcf-827c-4e01-a82f-86e201de2a84}) (Version: 20.50.3 - Intel Corporation) JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0 - AppWork GmbH) Kaspersky Internet Security (HKLM-x32\...\{63129F5E-8EC5-41BA-A4CF-47966CE84953}) (Version: 21.2.16.590 - Kaspersky) Hidden Kaspersky Internet Security (HKLM-x32\...\InstallWIX_{63129F5E-8EC5-41BA-A4CF-47966CE84953}) (Version: 21.2.16.590 - Kaspersky) Kaspersky Password Manager (HKLM-x32\...\{B2F7333E-6C8D-4994-AAC4-FEC8EBBF9611}) (Version: 9.0.2.767 - Kaspersky Lab) Hidden Kaspersky Password Manager (HKLM-x32\...\InstallWIX_{B2F7333E-6C8D-4994-AAC4-FEC8EBBF9611}) (Version: 9.0.2.767 - Kaspersky Lab) Kaspersky VPN (HKLM-x32\...\{FF2A12B8-AEB7-48C0-95C8-E2E3D67DFCB2}) (Version: 21.3.10.391 - Kaspersky) Hidden Kaspersky VPN (HKLM-x32\...\InstallWIX_{FF2A12B8-AEB7-48C0-95C8-E2E3D67DFCB2}) (Version: 21.3.10.391 - Kaspersky) LabelCreator (HKLM-x32\...\{B8C23400-237A-40F2-854C-9846DF568075}) (Version: 1.00.0000 - Corel Corporation) Hidden Magic DVD Ripper V8.2.0 (HKLM-x32\...\Magic DVD Ripper_is1) (Version: - Magic DVD Software, Inc.) Malwarebytes version 4.3.0.98 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.3.0.98 - Malwarebytes) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 90.0.818.42 - Microsoft Corporation) Microsoft Office Professional Plus 2019 - de-de (HKLM\...\ProPlus2019Volume - de-de) (Version: 16.0.10372.20060 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-2076215291-2816363989-1149395193-1001\...\OneDriveSetup.exe) (Version: 21.052.0314.0001 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{A0E1B43D-5F4A-46AF-9925-ABA3423325DC}) (Version: 2.77.0.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4048 (HKLM\...\{91415F19-4C22-3609-A105-92ED3522D83C}) (Version: 9.0.30729.4048 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4048 (HKLM-x32\...\{5B1F2843-B379-3FF2-B0D3-64DD143ED53A}) (Version: 9.0.30729.4048 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.22.27821 (HKLM-x32\...\{6361b579-2795-4886-b2a8-53d5239b6452}) (Version: 14.22.27821.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation) Mozilla Firefox 88.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 88.0 (x86 en-US)) (Version: 88.0 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 58.0.2 - Mozilla) Nikon Message Center (HKLM-x32\...\{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}) (Version: 0.92.000 - Nikon) Nikon Transfer (HKLM-x32\...\{E9757890-7EC5-46C8-99AB-B00F07B6525C}) (Version: 1.4.0 - Nikon) Nuance PaperPort 14 (HKLM-x32\...\{6CC9391F-D441-4D2E-9ECC-1F7084C733ED}) (Version: 14.5.0006 - Nuance Communications, Inc.) Nuance PDF Viewer SE (HKLM-x32\...\{7BAC9170-359D-4EAD-B6E4-238A14940C11}) (Version: 7.20.3230 - Nuance Communications, Inc.) NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation) NVIDIA GeForce Experience 3.12.0.84 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.12.0.84 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation) Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.10372.20060 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.10372.20060 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.10372.20060 - Microsoft Corporation) Hidden Opera Stable 75.0.3969.93 (HKU\S-1-5-21-2076215291-2816363989-1149395193-1001\...\Opera 75.0.3969.93) (Version: 75.0.3969.93 - Opera Software) orgaMAX (HKLM-x32\...\{65E0EEF0-D7D1-4320-BB88-7E36AD281692}_is1) (Version: 20.0 - deltra Business Software) PaperPort Image Printer 64-bit (HKLM\...\{715CAACC-579B-4831-A5F4-A83A8DE3EFE2}) (Version: 14.00.0002 - Nuance Communications, Inc.) PDF blätterbare Kataloge 1 (HKLM-x32\...\PDF blätterbare Kataloge 1) (Version: - ) PhotoPad Foto-Editor (HKLM-x32\...\PhotoPad) (Version: 6.78 - NCH Software) PhraseExpress v14.0.157 (HKLM-x32\...\PhraseExpress_is1) (Version: 14.0.157 - Bartels Media GmbH) Picture Control Utility (HKLM-x32\...\{87441A59-5E64-4096-A170-14EFE67200C3}) (Version: 1.1.5 - Nikon) PotPlayer-64 bit (HKLM\...\PotPlayer64) (Version: 191211 - Kakao Corp.) Prism Video-Converter (HKLM-x32\...\Prism) (Version: 6.92 - NCH Software) RBVirtualFolder64Inst (HKLM\...\{9D6DFAD6-09E5-445E-A4B5-A388FEEBD90D}) (Version: 1.00.0000 - Roxio, Inc.) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.26.328.2018 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8425 - Realtek Semiconductor Corp.) Roxio Easy CD and DVD Burning 2 (HKLM-x32\...\{3E670EAA-F20E-4DF6-BFC1-00BABC555498}) (Version: 20.0.54.0 - Roxio) Roxio MyDVD (HKLM\...\{CA9C6DF1-191C-4057-AAB1-34DF0996E58D}) (Version: 3.0.040 - Ihr Firmenname) Hidden Roxio MyDVD (HKLM-x32\...\{2AB256B6-DD96-4982-AD46-5DC7B20BA7EF}) (Version: 3.0 - Roxio) Sonic CinePlayer Decoder Pack (HKLM-x32\...\{09065152-F67B-4044-9773-64AF5C30BDA1}) (Version: 4.3.0 - Sonic Solutions) Hidden StarMoney 12 Basic (HKLM-x32\...\{8AF217FF-AE7B-49C2-BA7C-F78610D80713}) (Version: 12 - Star Finanz GmbH) Sweet Home 3D version 5.2 (HKLM\...\Sweet Home 3D_is1) (Version: 5.2 - eTeks) Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{16AD6161-2E47-4BF1-AA77-0946EFE93E08}) (Version: 2.61.0.0 - Microsoft Corporation) Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{344F3227-F502-4219-9DC4-1967E586FAFA}) (Version: 2.51.0.0 - Microsoft Corporation) User Experience Improvement Program Service (HKLM\...\{E9495FD3-F73D-4D33-A104-047F9E8BE6C7}) (Version: 4.00.3002 - Acer Incorporated) VideoPad Video-Editor (HKLM-x32\...\VideoPad) (Version: 10.22 - NCH Software) ViewNX (HKLM-x32\...\{F007CBCE-D714-4C0B-8CE9-9B0D78116468}) (Version: 1.3.0 - Nikon) Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden WinHTTrack Website Copier 3.49-2 (x64) (HKLM\...\WinHTTrack Website Copier_is1) (Version: 3.49.2 - HTTrack) Zoom (HKU\S-1-5-21-2076215291-2816363989-1149395193-1001\...\ZoomUMX) (Version: 5.3.1 (52879.0927) - Zoom Video Communications, Inc.) Packages: ========= Acer Product Registration -> C:\Program Files\WindowsApps\AcerIncorporated.AcerRegistration_2.0.3024.0_x64__48frkmn4z8aw4 [2021-01-07] (Acer Incorporated) Fotos-Add-On -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2021-03-12] (Microsoft Corporation) Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2019-09-24] (Microsoft Corporation) Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-04-30] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-04-30] (Microsoft Corporation) [MS Ad] PhotoDirector for acer -> C:\Program Files\WindowsApps\CyberLinkCorp.ac.PhotoDirectorforacerDesktop_8.0.5229.0_x64__ypz87dpxkv292 [2019-06-30] (CYBERLINK COM CORP) Pic Collage -> C:\Program Files\WindowsApps\CARDINALBLUE.PICCOLLAGE_2.0.30.0_x64__nyvb5jmhdxy8g [2019-08-12] (Cardinal Blue Software) PowerDirector for acer -> C:\Program Files\WindowsApps\CyberLinkCorp.ac.PowerDirectorforacerDesktop_14.0.4304.0_x64__ypz87dpxkv292 [2018-12-24] (CYBERLINK COM CORP) Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.2.169.0_x64__dt26b99r8h8gj [2019-07-10] (Realtek Semiconductor Corp) Sound Blaster Connect -> C:\Program Files\WindowsApps\CreativeTechnologyLtd.SoundBlasterConnect_2.2.15.0_x86__13fcda18mhdz2 [2020-07-09] (Creative Technology Ltd.) Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0 [2021-04-03] (Spotify AB) [Startup Task] VidCoder -> C:\Program Files\WindowsApps\19358RandomEngy.VidCoder_5.21.0.0_x64__cf0dg7w8q6vfw [2021-02-18] (RandomEngy) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-2076215291-2816363989-1149395193-1001_Classes\CLSID\{ca31933b-b116-4444-9c6d-e5103390fb76}\localserver32 -> C:\Program Files\TechSmith\Camtasia 2020\CamtasiaStudio.exe (TechSmith Corporation -> TechSmith Corporation) SSODL: CallbackTechMountNotificator-cbfsconnect2017 - {CCD3C3E7-B795-4060-A472-B21D5E56424E} - C:\WINDOWS\system32\cbfsconnectMntNtf2017.dll (Callback Technologies, Inc. -> Callback Technologies, Inc.) SSODL-x32: CallbackTechMountNotificator-cbfsconnect2017 - {CCD3C3E7-B795-4060-A472-B21D5E56424E} - C:\WINDOWS\SysWOW64\cbfsconnectMntNtf2017.dll (Callback Technologies, Inc. -> Callback Technologies, Inc.) ShellServiceObjects: Virtual Storage Mount Notification -> {CCD3C3E7-B795-4060-A472-B21D5E56424E} => C:\WINDOWS\system32\cbfsconnectMntNtf2017.dll [2020-06-25] (Callback Technologies, Inc. -> Callback Technologies, Inc.) ShellServiceObjects-x32: Virtual Storage Mount Notification -> {CCD3C3E7-B795-4060-A472-B21D5E56424E} => C:\WINDOWS\SysWOW64\cbfsconnectMntNtf2017.dll [2020-06-25] (Callback Technologies, Inc. -> Callback Technologies, Inc.) ShellIconOverlayIdentifiers: [ HiDriveOverlayIconCheck] -> {1f9fe143-778a-3718-9199-f312d27bda07} => C:\Program Files (x86)\STRATO\HiDrive\ShellExt\HiDriveShellExtensions.DLL [2021-02-22] (STRATO AG -> STRATO AG) ShellIconOverlayIdentifiers: [ HiDriveOverlayIconCheckCrypt] -> {fd1866e6-e517-3881-b79d-fd0f83ba05a0} => C:\Program Files (x86)\STRATO\HiDrive\ShellExt\HiDriveShellExtensions.DLL [2021-02-22] (STRATO AG -> STRATO AG) ShellIconOverlayIdentifiers: [ HiDriveOverlayIconError] -> {54a2c10d-4ef3-3c41-8440-1d4f6c30cb4a} => C:\Program Files (x86)\STRATO\HiDrive\ShellExt\HiDriveShellExtensions.DLL [2021-02-22] (STRATO AG -> STRATO AG) ShellIconOverlayIdentifiers: [ HiDriveOverlayIconErrorCrypt] -> {84201340-936f-301d-9a44-b4700e4919e5} => C:\Program Files (x86)\STRATO\HiDrive\ShellExt\HiDriveShellExtensions.DLL [2021-02-22] (STRATO AG -> STRATO AG) ShellIconOverlayIdentifiers: [ HiDriveOverlayIconSync] -> {f16c0bef-1266-365e-a10d-d779af7b46d7} => C:\Program Files (x86)\STRATO\HiDrive\ShellExt\HiDriveShellExtensions.DLL [2021-02-22] (STRATO AG -> STRATO AG) ShellIconOverlayIdentifiers: [ HiDriveOverlayIconSyncCrypt] -> {62649271-743f-31ba-9d5f-324690dbf4bc} => C:\Program Files (x86)\STRATO\HiDrive\ShellExt\HiDriveShellExtensions.DLL [2021-02-22] (STRATO AG -> STRATO AG) ShellIconOverlayIdentifiers: [ OptaneIconOverlay] -> {A3AF6F6C-8BED-3D93-8B5D-33427B5D38E9} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2018-12-03] () [Datei ist nicht signiert] [Datei wird verwendet] ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Keine Datei ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Datei ist nicht signiert] ContextMenuHandlers1: [HiDriveCopyExtension] -> {3dcf0d11-ac7d-352c-9663-f53e16addbb5} => C:\Program Files (x86)\STRATO\HiDrive\ShellExt\HiDriveShellExtensions.DLL [2021-02-22] (STRATO AG -> STRATO AG) ContextMenuHandlers1: [HiDriveShareFileExtensionCreate] -> {42599f1a-0a6d-36c7-a28c-c22c0f12b411} => C:\Program Files (x86)\STRATO\HiDrive\ShellExt\HiDriveShellExtensions.DLL [2021-02-22] (STRATO AG -> STRATO AG) ContextMenuHandlers1: [HiDriveShareFileExtensionEdit] -> {baa3e807-a9d7-35a9-8e4f-d9d8119f0be2} => C:\Program Files (x86)\STRATO\HiDrive\ShellExt\HiDriveShellExtensions.DLL [2021-02-22] (STRATO AG -> STRATO AG) ContextMenuHandlers1: [Kaspersky Anti-Virus 21.2] -> {9B9F6E01-A5CF-4269-B245-CFF66A7DAEBD} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.2\x64\shellex.dll [2020-12-19] (Kaspersky Lab JSC -> AO Kaspersky Lab) ContextMenuHandlers1: [Roxio Burn] -> {E8CB9D53-A47A-42B5-9F5B-96B037C9DD4C} => C:\Program Files\Roxio\Roxio Burn\RB_ContextMenu64.dll [2019-02-22] (Corel Corporation -> TODO: <Company name>) ContextMenuHandlers1: [ShellConverter] -> {30A4E07E-068A-4d91-8F05-691283A1336B} => C:\Program Files (x86)\Common Files\AVSMedia\ActiveX\AVSShellConverter64.dll [2017-12-18] (Online Media Technologies Ltd. -> Online Media Technologies Ltd.) [Datei ist nicht signiert] ContextMenuHandlers2: [Kaspersky Anti-Virus 21.2] -> {9B9F6E01-A5CF-4269-B245-CFF66A7DAEBD} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.2\x64\shellex.dll [2020-12-19] (Kaspersky Lab JSC -> AO Kaspersky Lab) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-09-19] (Malwarebytes Corporation -> Malwarebytes) ContextMenuHandlers3: [OptaneContextMenu] -> {AD7EBB13-617D-3270-8FA8-46583499C4FB} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2018-12-03] () [Datei ist nicht signiert] [Datei wird verwendet] ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Datei ist nicht signiert] ContextMenuHandlers4: [HiDriveCopyExtension] -> {3dcf0d11-ac7d-352c-9663-f53e16addbb5} => C:\Program Files (x86)\STRATO\HiDrive\ShellExt\HiDriveShellExtensions.DLL [2021-02-22] (STRATO AG -> STRATO AG) ContextMenuHandlers4: [HiDriveShareFileExtensionCreate] -> {42599f1a-0a6d-36c7-a28c-c22c0f12b411} => C:\Program Files (x86)\STRATO\HiDrive\ShellExt\HiDriveShellExtensions.DLL [2021-02-22] (STRATO AG -> STRATO AG) ContextMenuHandlers4: [HiDriveShareFileExtensionEdit] -> {baa3e807-a9d7-35a9-8e4f-d9d8119f0be2} => C:\Program Files (x86)\STRATO\HiDrive\ShellExt\HiDriveShellExtensions.DLL [2021-02-22] (STRATO AG -> STRATO AG) ContextMenuHandlers4: [Kaspersky Anti-Virus 21.2] -> {9B9F6E01-A5CF-4269-B245-CFF66A7DAEBD} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.2\x64\shellex.dll [2020-12-19] (Kaspersky Lab JSC -> AO Kaspersky Lab) ContextMenuHandlers5: [HiDriveCreateCryptContainerExtension] -> {df8a41c4-7cfb-3860-9061-a9b6bec82ad9} => C:\Program Files (x86)\STRATO\HiDrive\ShellExt\HiDriveShellExtensions.DLL [2021-02-22] (STRATO AG -> STRATO AG) ContextMenuHandlers5: [HiDriveOpenSettings] -> {bddf81f9-1692-399e-bd34-17cf1e6cc163} => C:\Program Files (x86)\STRATO\HiDrive\ShellExt\HiDriveShellExtensions.DLL [2021-02-22] (STRATO AG -> STRATO AG) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2021-03-25] (NVIDIA Corporation -> NVIDIA Corporation) ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Datei ist nicht signiert] ContextMenuHandlers6: [Kaspersky Anti-Virus 21.2] -> {9B9F6E01-A5CF-4269-B245-CFF66A7DAEBD} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.2\x64\shellex.dll [2020-12-19] (Kaspersky Lab JSC -> AO Kaspersky Lab) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-09-19] (Malwarebytes Corporation -> Malwarebytes) ==================== Codecs (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Drivers32: [vidc.i420] => C:\Windows\system32\lvcod64.dll [175392 2012-10-26] (Logitech, Inc. -> Logitech Inc.) HKLM\...\Drivers32: [msacm.voxacm160] => C:\Windows\system32\vct3216.acm [82944 2003-05-21] (Voxware, Inc.) [Datei ist nicht signiert] HKLM\...\Drivers32: [msacm.scg726] => C:\Windows\system32\scg726.acm [13239 2000-03-14] (SHARP Corporation) [Datei ist nicht signiert] HKLM\...\Drivers32: [msacm.alf2cd] => C:\Windows\system32\alf2cd.acm [38912 2003-05-21] (NCT Company) [Datei ist nicht signiert] HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\system32\AC3ACM.acm [81920 2004-02-04] (fccHandler) [Datei ist nicht signiert] HKLM\...\Drivers32: [msacm.lame] => C:\Windows\system32\lame.ax [245760 2005-08-01] () [Datei ist nicht signiert] HKLM\...\Drivers32: [vidc.dvsd] => C:\Windows\system32\mcdvd_32.dll [261632 2003-05-21] (MainConcept) [Datei ist nicht signiert] HKLM\...\Drivers32: [vidc.mpg4] => C:\Windows\system32\mpg4c32.dll [413760 2002-08-19] (Microsoft Corporation) [Datei ist nicht signiert] HKLM\...\Drivers32: [vidc.mp42] => C:\Windows\system32\mpg4c32.dll [413760 2002-08-19] (Microsoft Corporation) [Datei ist nicht signiert] HKLM\...\Drivers32: [vidc.mp43] => C:\Windows\system32\mpg4c32.dll [413760 2002-08-19] (Microsoft Corporation) [Datei ist nicht signiert] HKLM\...\Drivers32: [vidc.xvid] => C:\Windows\system32\xvidvfw.dll [139264 2004-07-03] () [Datei ist nicht signiert] HKLM\...\Drivers32: [vidc.DIVX] => C:\Windows\system32\DivX.dll [638976 2003-05-22] (DivXNetworks, Inc.) [Datei ist nicht signiert] HKLM\...\Drivers32: [vidc.VP60] => C:\Windows\system32\vp6vfw.dll [438272 2004-12-10] (On2.com) [Datei ist nicht signiert] HKLM\...\Drivers32: [vidc.VP61] => C:\Windows\system32\vp6vfw.dll [438272 2004-12-10] (On2.com) [Datei ist nicht signiert] HKLM\...\Drivers32: [vidc.VP62] => C:\Windows\system32\vp6vfw.dll [438272 2004-12-10] (On2.com) [Datei ist nicht signiert] HKLM\...\Drivers32: [vidc.LAGS] => C:\Windows\system32\lagarith.dll [216064 2011-12-07] () [Datei ist nicht signiert] HKLM\...\Drivers32: [vidc.i420] => C:\Windows\SysWOW64\lvcodec2.dll [305000 2012-10-26] (Logitech, Inc. -> Logitech Inc.) HKLM\...\Drivers32: [msacm.pspgru] => C:\Windows\SysWOW64\pspgru.acm [401920 2010-03-22] (Philips Austria GmbH - Speech Processing) [Datei ist nicht signiert] ==================== Verknüpfungen & WMI ======================== ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============= 2020-01-21 13:08 - 2004-07-02 02:00 - 000023040 _____ () [Datei ist nicht signiert] C:\Program Files\ArchiCrypt\ArchiCrypt Live 8\Idle.dll 2020-01-21 13:08 - 2011-03-28 02:00 - 000559244 _____ () [Datei ist nicht signiert] C:\Program Files\ArchiCrypt\ArchiCrypt Live 8\sqlite3.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 000064512 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\ashinetutil.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 000225792 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\jsoncpp.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 000056320 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\lzma.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 000111616 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\minizip.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 000226816 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\party.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 000678912 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\sqlite.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 001082368 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\webdave.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 000082944 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\zdll.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 000074240 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\ziputil.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 000025088 _____ () [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\zlibutil.dll 2016-08-23 22:17 - 2016-08-23 22:17 - 002049024 _____ (Apache Software Foundation) [Datei ist nicht signiert] C:\Program Files (x86)\Nuance\NaturallySpeaking15\Program\xerces-c_3_1.dll 2012-12-05 12:29 - 2012-12-05 12:29 - 004883456 _____ (BCGSoft Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Nuance\PaperPort\BCGCBPRO1100u100.dll 2019-05-02 12:30 - 2017-06-16 16:54 - 001568768 _____ (IBM Corporation and others) [Datei ist nicht signiert] C:\Program Files (x86)\Deltra\Firebird-Server\bin\icudt30.dll 2019-05-02 12:30 - 2017-06-16 16:54 - 000675840 _____ (IBM Corporation and others) [Datei ist nicht signiert] C:\Program Files (x86)\Deltra\Firebird-Server\bin\icuuc30.dll 2020-09-20 08:54 - 2019-02-21 18:00 - 000078336 _____ (Igor Pavlov) [Datei ist nicht signiert] C:\Program Files\7-Zip\7-zip.dll 2018-12-03 22:19 - 2018-12-03 22:19 - 000126976 _____ (Intel Corporation) [Datei ist nicht signiert] C:\Program Files\Intel\OptaneShellExtensions\iaStorAfsServiceApi.dll 2019-05-01 16:43 - 2019-05-01 16:43 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\AppVIsvSubsystems64.dll 2019-05-01 16:43 - 2019-05-01 16:43 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\c2r64.dll 2016-08-23 22:16 - 2016-08-23 22:16 - 002799344 _____ (Polar Engineering and Consulting) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\Nuance\NaturallySpeaking15\Program\SAS7_000.DLL 2016-08-23 22:16 - 2016-08-23 22:16 - 000486816 _____ (Polar Engineering and Consulting) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\Nuance\NaturallySpeaking15\Program\sas7_ctl.ocx 2020-06-07 19:12 - 2018-06-27 09:58 - 002135040 _____ (The curl library, hxxps://curl.haxx.se/) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\ash_libcurl.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 000431616 _____ (The curl library, hxxps://curl.haxx.se/) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\libcurl.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 003423744 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\libcrypto-1_1-x64.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 000684032 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\libssl-1_1-x64.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 000151552 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\wxbase310u_net_vc_ox.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 002172416 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\wxbase310u_vc_ox.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 000165888 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\wxbase310u_xml_vc_ox.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 001376768 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\wxmsw310u_adv_vc_ox.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 004942336 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\wxmsw310u_core_vc_ox.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 000642048 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\wxmsw310u_html_vc_ox.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 000107520 _____ (wxWidgets development team) [Datei ist nicht signiert] C:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\wxmsw310u_webview_vc_ox.dll 2020-06-07 19:12 - 2020-10-13 12:02 - 000764416 _____ (wxWidgets development team) [Datei ist nicht signiert] c:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\wxmsw310u_xrc_vc_ox.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ======== ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ================= ==================== Internet Explorer (Nicht auf der Ausnahmeliste) ========== HKU\S-1-5-21-2076215291-2816363989-1149395193-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer17win10.msn.com/?pc=ACTE HKU\S-1-5-21-2076215291-2816363989-1149395193-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer17win10.msn.com/?pc=ACTE SearchScopes: HKU\S-1-5-21-2076215291-2816363989-1149395193-1001 -> DefaultScope {C0D82F58-B85D-4B30-854E-3EFFB58DAED8} URL = SearchScopes: HKU\S-1-5-21-2076215291-2816363989-1149395193-1001 -> {C0D82F58-B85D-4B30-854E-3EFFB58DAED8} URL = BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2019-11-21] (Microsoft Corporation -> Microsoft Corporation) BHO: Dragon Web Extension For Internet Explorer -> {609C0837-8DD3-4F9B-AAC5-446F36BC0353} -> C:\Program Files (x86)\Nuance\NaturallySpeaking15\Program\x64\dgnriaie_x64.dll [2016-08-23] (Nuance Communication, Inc. -> Nuance Communications, Inc.) BHO: Kein Name -> {CCD3C3E7-B795-4060-A472-B21D5E56424E}' -> Keine Datei BHO: Kein Name -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> Keine Datei BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2019-11-21] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files (x86)\Nuance\PDF Professional 7\Bin\PlusIEContextMenu.dll [2011-06-30] (Zeon Corporation -> Zeon Corporation) BHO-x32: Dragon Web Extension For Internet Explorer -> {609C0837-8DD3-4F9B-AAC5-446F36BC0353} -> C:\Program Files (x86)\Nuance\NaturallySpeaking15\Program\dgnriaie.dll [2016-08-23] (Nuance Communication, Inc. -> Nuance Communications, Inc.) BHO-x32: Kein Name -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> Keine Datei BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2021-02-16] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-21] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-11-21] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-21] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-11-21] (Microsoft Corporation -> Microsoft Corporation) Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - Keine Datei Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-21] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-11-21] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2019-11-21] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2019-11-21] (Microsoft Corporation -> Microsoft Corporation) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) IE trusted site: HKU\.DEFAULT\...\localhost -> localhost IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com IE trusted site: HKU\S-1-5-21-2076215291-2816363989-1149395193-1001\...\datev.de -> hxxp://download.datev.de IE trusted site: HKU\S-1-5-21-2076215291-2816363989-1149395193-1001\...\datev.de -> hxxps://download.datev.de IE trusted site: HKU\S-1-5-21-2076215291-2816363989-1149395193-1001\...\localhost -> localhost IE trusted site: HKU\S-1-5-21-2076215291-2816363989-1149395193-1001\...\webcompanion.com -> hxxp://webcompanion.com ==================== Hosts Inhalt: ========================= (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2018-04-12 01:38 - 2018-04-12 01:36 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts ==================== Andere Bereiche =========================== (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Business Objects\Common\3.5\bin\NOTES\;C:\Program Files (x86)\Business Objects\Common\3.5\bin\NOTES\DATA\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\Common Files\Roxio Shared\DLLShared\ HKU\S-1-5-21-2076215291-2816363989-1149395193-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\ichbi\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\acer01.jpg HKU\S-1-5-21-2076215291-2816363989-1149395193-1003\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg DNS Servers: 192.168.188.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off) ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) HKLM\...\StartupApproved\Run: => "WinZip UN" HKLM\...\StartupApproved\Run32: => "DVCServ" HKU\S-1-5-21-2076215291-2816363989-1149395193-1001\...\StartupApproved\Run: => "GarminExpress" HKU\S-1-5-21-2076215291-2816363989-1149395193-1001\...\StartupApproved\Run: => "pCloud" HKU\S-1-5-21-2076215291-2816363989-1149395193-1001\...\StartupApproved\Run: => "Zeta Producer 15.4.1" ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================ (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [{C79EAA0C-96A8-41EE-B3D0-C4363A1617B4}] => (Allow) LPort=8321 FirewallRules: [{61E4FBA1-7CE1-494F-83BC-9460862AAA15}] => (Allow) C:\Users\ichbi\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [{B25E5B62-7080-40F6-ACB0-5B71E45DE65C}] => (Allow) C:\Users\ichbi\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [{2F3D96F2-5B3A-48B6-B7B2-4AFC63C19173}] => (Allow) C:\Users\ichbi\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [{4F66045E-9026-43AD-9654-AE2250056449}] => (Allow) C:\Users\ichbi\AppData\Local\Programs\Opera\70.0.3728.106\opera.exe (Opera Software AS -> Opera Software) FirewallRules: [{F741CCBD-8B22-4A56-A63F-D7701E6D0819}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{41F22427-AF66-4577-88F6-3475F720DDC5}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{1120CF5A-6308-4328-B82E-C28BE1D869ED}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{591C3DB4-CAFD-4112-98FA-DA29ED4F369A}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.63.76.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{06E01AE6-55D5-4CF5-A2C9-48F9831D2D16}] => (Allow) C:\Users\ichbi\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [{B1C249CB-B0A8-4E4C-AB0A-998016B8DC8D}] => (Allow) C:\Program Files (x86)\PhraseExpress\PhraseExpress.exe (Bartels Media GmbH -> Bartels Media GmbH) FirewallRules: [{F5B02F0D-744A-465D-ADF5-9D1EC8894370}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{8223D303-A451-423F-A6F1-5A9C1D1C5385}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{F19260EE-65CC-46B6-BB5D-446FDB34745C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{376BA1F4-480B-4520-B697-AD5212FD0E47}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{69CCAD06-9CE9-4CF1-AFCE-03E4023F9E5D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{E5492D12-8EDC-4159-AF49-ACEF87509942}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{E169B057-5436-4BF7-BE6C-960DCEBAFB56}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation -> ) FirewallRules: [TCP Query User{061FB12C-ADA2-4550-A17E-93F27E606B7A}C:\program files (x86)\creative\connection service\connection service.exe] => (Block) C:\program files (x86)\creative\connection service\connection service.exe (Creative Technology Ltd.) [Datei ist nicht signiert] FirewallRules: [UDP Query User{FC52C64D-4451-4E03-9217-3B833D368AB7}C:\program files (x86)\creative\connection service\connection service.exe] => (Block) C:\program files (x86)\creative\connection service\connection service.exe (Creative Technology Ltd.) [Datei ist nicht signiert] FirewallRules: [{B0082EF9-BD64-4CA3-A1DF-F38D7D01600D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{46310EFF-3F2F-496A-8FC8-C40F8EE49757}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{8613DA01-D6B1-4B61-8FFD-9E63E3911568}] => (Allow) C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.11425.20244.0_x86__8wekyb3d8bbwe\Office16\OUTLOOK.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{8BE60B6C-61AD-4ED3-94B5-874FEEC68E54}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{6538A6C4-5ED4-429E-8A55-31A717BF7A9B}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{5365015B-3BCA-4068-98AB-71B812D25633}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{2B54FBA6-287B-4746-95DA-DDEEB95A0D33}] => (Allow) C:\Program Files (x86)\PhraseExpress\PhraseExpress.exe (Bartels Media GmbH -> Bartels Media GmbH) FirewallRules: [{72A9D949-FF0E-4A82-AD45-B48C460BFE8F}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{404FAFF1-7BE8-407C-B4AA-2008C6AA7444}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [TCP Query User{B7DA317B-35C2-4E62-B1B9-90F093C36735}C:\program files (x86)\creative\connection service\connection service.exe] => (Block) C:\program files (x86)\creative\connection service\connection service.exe (Creative Technology Ltd.) [Datei ist nicht signiert] FirewallRules: [UDP Query User{CBF9AF9A-F935-474E-ABB6-6742E8F08E97}C:\program files (x86)\creative\connection service\connection service.exe] => (Block) C:\program files (x86)\creative\connection service\connection service.exe (Creative Technology Ltd.) [Datei ist nicht signiert] FirewallRules: [{8199706C-84E5-4702-8DE9-62A921F1649A}] => (Allow) C:\Program Files (x86)\StarMoney 12 Basic\ouservice\StarMoneyOnlineUpdate.exe (Star Finanz - Software Entwicklung und Vertriebs GmbH -> Star Finanz-Software Entwicklung und Vertriebs GmbH) FirewallRules: [{35C47DE3-D29D-4C85-A990-E2401C60732F}] => (Allow) C:\Program Files (x86)\StarMoney 12 Basic\ouservice\StarMoneyOnlineUpdate.exe (Star Finanz - Software Entwicklung und Vertriebs GmbH -> Star Finanz-Software Entwicklung und Vertriebs GmbH) FirewallRules: [{3372F7E8-C2EB-4878-9639-43B663A7F784}] => (Allow) C:\Program Files (x86)\StarMoney 12 Basic\app\StarMoney.exe (Star Finanz - Software Entwicklung und Vertriebs GmbH -> Star Finanz-Software Entwicklung und Vertriebs GmbH) FirewallRules: [{1EB8AF9F-42F3-4373-A5F0-FFA2D6E0CAA4}] => (Allow) C:\Program Files (x86)\StarMoney 12 Basic\app\StarMoney.exe (Star Finanz - Software Entwicklung und Vertriebs GmbH -> Star Finanz-Software Entwicklung und Vertriebs GmbH) FirewallRules: [{43AA5B5A-84FB-4867-BA60-C19E985EB361}] => (Allow) c:\users\ichbi\appdata\local\programs\opera\75.0.3969.93\opera.exe (Opera Software AS -> Opera Software) FirewallRules: [{396FF61F-C8D4-4121-B546-23EC9AD2F22D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{2FBA9DE8-3BA5-432A-9CD8-08FA8284B9B7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{2BAA2BF2-7373-45D6-A448-6CCFC20AE702}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{33B29B55-32C9-434D-A1F6-60FA1CF34071}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{65732B93-5A09-46FD-9F70-0D7A44624526}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{C4F82CAC-4CF6-47D9-B2CA-DB3DA59AE7B9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{B57C612D-4473-4E00-8D44-8FCA81211CE2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{58938AF2-ACA2-49F3-A8C7-40F04C0D8C2C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.156.595.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{2C279166-140C-4C79-9D49-532FBA0A7DE7}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{F0BBA567-CCD9-44AA-843A-ABAAE7B3E153}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.157.443.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{38055383-6B72-458E-93EF-1A2324989A95}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.157.443.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{54F4BFF4-855C-4551-849D-D8143AC730D6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.157.443.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{534A2166-DD31-48DF-8EE2-1E723868F392}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.157.443.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{54EB2731-1D47-47B2-9F5A-4D95B42CA23E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.157.443.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{461BFBD2-846D-41C6-87BD-CCEE746CA608}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.157.443.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{3E2A410D-64D1-4649-BE74-B1C344702F4E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.157.443.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{64F3A040-763F-45C9-9587-10D61C6D51AA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.157.443.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) ==================== Wiederherstellungspunkte ========================= 21-04-2021 15:23:05 Geplanter Prüfpunkt ==================== Fehlerhafte Geräte im Gerätemanager ============ ==================== Fehlereinträge in der Ereignisanzeige: ======================== Applikationsfehler: ================== Error: (04/21/2021 08:47:38 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT-AUTORITÄT) Description: Die Benutzerstruktur wurde von einem anderen Prozess geladen (Registrierungssperre). Prozessname: C:\Program Files\AVG\TuneUp\TuneupSvc.exe, PID: 5092, ProfSvc PID: 2024. Error: (04/21/2021 08:43:29 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT-AUTORITÄT) Description: Die Benutzerstruktur wurde von einem anderen Prozess geladen (Registrierungssperre). Prozessname: C:\Program Files\AVG\TuneUp\TuneupSvc.exe, PID: 5092, ProfSvc PID: 2024. Error: (04/20/2021 08:13:01 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren. . Error: (04/20/2021 08:13:01 PM) (Source: VSS) (EventID: 13) (User: ) Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren. ] Error: (04/18/2021 06:27:32 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: TwDsUi.exe, Version: 5.8.118.1, Zeitstempel: 0x5a72d024 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0619cd30 ID des fehlerhaften Prozesses: 0x6c08 Startzeit der fehlerhaften Anwendung: 0x01d7346fb3e079d4 Pfad der fehlerhaften Anwendung: C:\WINDOWS\Twain_32\Brimi16a\Common\TwDsUi.exe Pfad des fehlerhaften Moduls: unknown Berichtskennung: 6804808a-ec3d-4f50-9b13-b7e2d618c439 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (04/18/2021 06:27:32 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Anwendung: TwDsUi.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet. Ausnahmeinformationen: System.NullReferenceException bei TwDsUi.Views.MainWindow.window_Closing(System.Object, System.ComponentModel.CancelEventArgs) bei System.Windows.Window.OnClosing(System.ComponentModel.CancelEventArgs) bei System.Windows.Window.InternalClose(Boolean, Boolean) bei System.Windows.Window.Close() bei TwDsUiSample.RecvPipeData+<>c.<CloseMainDialogProcess>b__9_0() bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32) bei System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate) bei System.Windows.Threading.DispatcherOperation.InvokeImpl() bei System.Windows.Threading.DispatcherOperation.InvokeInSecurityContext(System.Object) bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) bei MS.Internal.CulturePreservingExecutionContext.Run(MS.Internal.CulturePreservingExecutionContext, System.Threading.ContextCallback, System.Object) bei System.Windows.Threading.DispatcherOperation.Invoke() bei System.Windows.Threading.Dispatcher.ProcessQueue() bei System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef) bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef) bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object) bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32) bei System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate) bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32) bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr) bei MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef) bei System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame) bei System.Windows.Threading.Dispatcher.PushFrame(System.Windows.Threading.DispatcherFrame) bei System.Windows.Application.RunDispatcher(System.Object) bei System.Windows.Application.RunInternal(System.Windows.Window) bei System.Windows.Application.Run(System.Windows.Window) bei TwDsUi.App.Main() Error: (04/18/2021 06:27:10 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: TwDsUi.exe, Version: 5.8.118.1, Zeitstempel: 0x5a72d024 Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000 Ausnahmecode: 0xc0000005 Fehleroffset: 0x05cacd30 ID des fehlerhaften Prozesses: 0x1c5c Startzeit der fehlerhaften Anwendung: 0x01d7346fa8e0f133 Pfad der fehlerhaften Anwendung: C:\WINDOWS\Twain_32\Brimi16a\Common\TwDsUi.exe Pfad des fehlerhaften Moduls: unknown Berichtskennung: f5e6126e-14c0-4b3c-b4fa-2144721053ec Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (04/18/2021 06:27:10 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Anwendung: TwDsUi.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet. Ausnahmeinformationen: System.NullReferenceException bei TwDsUi.Views.MainWindow.window_Closing(System.Object, System.ComponentModel.CancelEventArgs) bei System.Windows.Window.OnClosing(System.ComponentModel.CancelEventArgs) bei System.Windows.Window.InternalClose(Boolean, Boolean) bei System.Windows.Window.Close() bei TwDsUiSample.RecvPipeData+<>c.<CloseMainDialogProcess>b__9_0() bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32) bei System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate) bei System.Windows.Threading.DispatcherOperation.InvokeImpl() bei System.Windows.Threading.DispatcherOperation.InvokeInSecurityContext(System.Object) bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) bei MS.Internal.CulturePreservingExecutionContext.Run(MS.Internal.CulturePreservingExecutionContext, System.Threading.ContextCallback, System.Object) bei System.Windows.Threading.DispatcherOperation.Invoke() bei System.Windows.Threading.Dispatcher.ProcessQueue() bei System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef) bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef) bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object) bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32) bei System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate) bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32) bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr) bei MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef) bei System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame) bei System.Windows.Threading.Dispatcher.PushFrame(System.Windows.Threading.DispatcherFrame) bei System.Windows.Application.RunDispatcher(System.Object) bei System.Windows.Application.RunInternal(System.Windows.Window) bei System.Windows.Application.Run(System.Windows.Window) bei TwDsUi.App.Main() Systemfehler: ============= Error: (04/22/2021 05:05:43 PM) (Source: Schannel) (EventID: 4108) (User: DESKTOP-GOISBCG) Description: Das vom Remoteserver empfangene Zertifikat wurde nicht ordnungsgemäß bestätigt. Fehlercode: 0x80092012. Fehler bei der TLS-Verbindungsanforderung. Die angefügten Daten enthalten das Serverzertifikat. Error: (04/22/2021 05:04:07 PM) (Source: Schannel) (EventID: 4108) (User: DESKTOP-GOISBCG) Description: Das vom Remoteserver empfangene Zertifikat wurde nicht ordnungsgemäß bestätigt. Fehlercode: 0x80092012. Fehler bei der TLS-Verbindungsanforderung. Die angefügten Daten enthalten das Serverzertifikat. Error: (04/22/2021 05:03:18 PM) (Source: Schannel) (EventID: 4108) (User: DESKTOP-GOISBCG) Description: Das vom Remoteserver empfangene Zertifikat wurde nicht ordnungsgemäß bestätigt. Fehlercode: 0x80092012. Fehler bei der TLS-Verbindungsanforderung. Die angefügten Daten enthalten das Serverzertifikat. Error: (04/22/2021 05:02:53 PM) (Source: Schannel) (EventID: 4108) (User: DESKTOP-GOISBCG) Description: Das vom Remoteserver empfangene Zertifikat wurde nicht ordnungsgemäß bestätigt. Fehlercode: 0x80092012. Fehler bei der TLS-Verbindungsanforderung. Die angefügten Daten enthalten das Serverzertifikat. Error: (04/22/2021 05:02:41 PM) (Source: Schannel) (EventID: 4108) (User: DESKTOP-GOISBCG) Description: Das vom Remoteserver empfangene Zertifikat wurde nicht ordnungsgemäß bestätigt. Fehlercode: 0x80092012. Fehler bei der TLS-Verbindungsanforderung. Die angefügten Daten enthalten das Serverzertifikat. Error: (04/22/2021 05:02:34 PM) (Source: Schannel) (EventID: 4108) (User: DESKTOP-GOISBCG) Description: Das vom Remoteserver empfangene Zertifikat wurde nicht ordnungsgemäß bestätigt. Fehlercode: 0x80092012. Fehler bei der TLS-Verbindungsanforderung. Die angefügten Daten enthalten das Serverzertifikat. Error: (04/22/2021 01:33:54 PM) (Source: Schannel) (EventID: 4108) (User: DESKTOP-GOISBCG) Description: Das vom Remoteserver empfangene Zertifikat wurde nicht ordnungsgemäß bestätigt. Fehlercode: 0x80092012. Fehler bei der TLS-Verbindungsanforderung. Die angefügten Daten enthalten das Serverzertifikat. Error: (04/22/2021 01:32:16 PM) (Source: Schannel) (EventID: 4108) (User: DESKTOP-GOISBCG) Description: Das vom Remoteserver empfangene Zertifikat wurde nicht ordnungsgemäß bestätigt. Fehlercode: 0x80092012. Fehler bei der TLS-Verbindungsanforderung. Die angefügten Daten enthalten das Serverzertifikat. Windows Defender: ================ Date: 2021-03-30 20:31:20 Description: Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet. Überprüfungs-ID: {72D7E7C9-C064-40F7-B47C-EC9A7D60DA28} Überprüfungstyp: Antimalware Überprüfungsparameter: Schnellüberprüfung Benutzer: NT-AUTORITÄT\SYSTEM Date: 2021-04-20 20:21:31 Description: Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten. Neue Version der Sicherheitsinformationen: 1.335.1263.0 %Vorherige Version der Sicherheitsinformationen: 1.333.1634.0 Update Source: Benutzer Sicherheitstyp: AntiSpyware Updatetyp: Voll Benutzer: NT-AUTORITÄT\Netzwerkdienst Aktuelle Modulversion: 1.1.18000.5 %Vorherige Modulversion: 1.1.17900.7 Fehlercode: 0x80004004 Fehlerbeschreibung: Vorgang abgebrochen Date: 2021-04-20 20:21:31 Description: Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten. Neue Version der Sicherheitsinformationen: 1.335.1263.0 %Vorherige Version der Sicherheitsinformationen: 1.333.1634.0 Update Source: Benutzer Sicherheitstyp: AntiVirus Updatetyp: Voll Benutzer: NT-AUTORITÄT\Netzwerkdienst Aktuelle Modulversion: 1.1.18000.5 %Vorherige Modulversion: 1.1.17900.7 Fehlercode: 0x80004004 Fehlerbeschreibung: Vorgang abgebrochen Date: 2021-04-20 20:21:31 Description: Fehler von Microsoft Defender Antivirus beim Aktualisieren des Moduls. Neue Modulversion: 1.1.18000.5 Vorherige Modulversion: 1.1.17900.7 Benutzer: NT-AUTORITÄT\Netzwerkdienst Fehlercode: 0x80004004 Fehlerbeschreibung: Vorgang abgebrochen Date: 2021-04-20 20:21:30 Description: Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten. Neue Version der Sicherheitsinformationen: 1.335.1263.0 %Vorherige Version der Sicherheitsinformationen: 1.333.1634.0 Update Source: Benutzer Sicherheitstyp: AntiSpyware Updatetyp: Voll Benutzer: NT-AUTORITÄT\Netzwerkdienst Aktuelle Modulversion: 1.1.18000.5 %Vorherige Modulversion: 1.1.17900.7 Fehlercode: 0x80004004 Fehlerbeschreibung: Vorgang abgebrochen Date: 2021-04-20 20:21:30 Description: Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten. Neue Version der Sicherheitsinformationen: 1.335.1263.0 %Vorherige Version der Sicherheitsinformationen: 1.333.1634.0 Update Source: Benutzer Sicherheitstyp: AntiVirus Updatetyp: Voll Benutzer: NT-AUTORITÄT\Netzwerkdienst Aktuelle Modulversion: 1.1.18000.5 %Vorherige Modulversion: 1.1.17900.7 Fehlercode: 0x80004004 Fehlerbeschreibung: Vorgang abgebrochen CodeIntegrity: =============== Date: 2021-04-22 17:02:18 Description: Code Integrity determined that a process (\Device\HarddiskVolume8\Users\ichbi\AppData\Local\Programs\Opera\75.0.3969.93\opera.exe) attempted to load \Device\HarddiskVolume8\Program Files (x86)\Nuance\NaturallySpeaking15\Program\x64\dd10axa_x64.dll that did not meet the Microsoft signing level requirements. Date: 2021-04-22 17:02:18 Description: Code Integrity determined that a process (\Device\HarddiskVolume8\Users\ichbi\AppData\Local\Programs\Opera\75.0.3969.93\opera.exe) attempted to load \Device\HarddiskVolume8\Program Files (x86)\Nuance\NaturallySpeaking15\Program\x64\dd10hook_x64.dll that did not meet the Microsoft signing level requirements. Date: 2021-04-22 17:02:18 Description: Code Integrity determined that a process (\Device\HarddiskVolume8\Users\ichbi\AppData\Local\Programs\Opera\75.0.3969.93\opera.exe) attempted to load \Device\HarddiskVolume8\Program Files (x86)\Nuance\NaturallySpeaking15\Program\x64\nlutmgrhook_x64.dll that did not meet the Microsoft signing level requirements. Date: 2021-04-22 16:16:15 Description: Code Integrity determined that a process (\Device\HarddiskVolume8\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume8\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.2\x64\antimalware_provider.dll that did not meet the Windows signing level requirements. Date: 2021-04-22 16:10:52 Description: Code Integrity determined that a process (\Device\HarddiskVolume8\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume8\Program Files (x86)\Nuance\NaturallySpeaking15\Program\x64\dd10hook_x64.dll that did not meet the Microsoft signing level requirements. Date: 2021-04-22 16:10:52 Description: Code Integrity determined that a process (\Device\HarddiskVolume8\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume8\Program Files (x86)\Nuance\NaturallySpeaking15\Program\x64\dgniedct_x64.dll that did not meet the Microsoft signing level requirements. Date: 2021-04-22 16:10:52 Description: Code Integrity determined that a process (\Device\HarddiskVolume8\Windows\System32\dllhost.exe) attempted to load \Device\HarddiskVolume8\Program Files (x86)\Nuance\NaturallySpeaking15\Program\x64\nlutmgrhook_x64.dll that did not meet the Microsoft signing level requirements. ==================== Speicherinformationen =========================== BIOS: American Megatrends Inc R01-A0 05/16/2018 Hauptplatine: Acer Predator PO3-600 Prozessor: Intel(R) Core(TM) i7-8700 CPU @ 3.20GHz Prozentuale Nutzung des RAM: 55% Installierter physikalischer RAM: 16310.43 MB Verfügbarer physikalischer RAM: 7245.32 MB Summe virtueller Speicher: 23734.43 MB Verfügbarer virtueller Speicher: 8328.51 MB ==================== Laufwerke ================================ Drive c: (Loc_Acer) (Fixed) (Total:237.35 GB) (Free:57.61 GB) NTFS Drive e: (Loc_Eigene Dateien) (Fixed) (Total:299.47 GB) (Free:56.71 GB) NTFS Drive f: (Loc_Transfer-Ablage) (Fixed) (Total:100.31 GB) (Free:83.33 GB) NTFS Drive g: () (Removable) (Total:14.58 GB) (Free:14.58 GB) FAT32 Drive h: (Loc_Download-Anwendungen) (Fixed) (Total:102.53 GB) (Free:102.29 GB) NTFS Drive j: (Ext_Spielfilme, Filme) (Fixed) (Total:931.51 GB) (Free:405.33 GB) NTFS Drive m: (EXTERNHD) (Fixed) (Total:1863.02 GB) (Free:0 GB) NTFS Drive z: (Loc_Dokumente) (Fixed) (Total:429.19 GB) (Free:416.33 GB) NTFS \\?\Volume{d857c912-602f-461d-aefa-4e9731658fac}\ (Recovery) (Fixed) (Total:1 GB) (Free:0.52 GB) NTFS \\?\Volume{e266749f-0879-4ae5-9efa-20ba13236a1d}\ (ESP) (Fixed) (Total:0.09 GB) (Free:0.04 GB) FAT32 \\?\Volume{e5f544dc-5be8-11ea-a2cc-1c1bb5d688bd}\ () () (Total:0 GB) (Free:0 GB) ==================== MBR & Partitionstabelle ==================== ========================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 98F43CD0) Partition 1: (Not Active) - (Size=299.5 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=100.3 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=102.5 GB) - (Type=07 NTFS) Partition 4: (Not Active) - (Size=429.2 GB) - (Type=0F Extended) ========================================================== Disk: 1 (Size: 238.5 GB) (Disk ID: AF2FFF32) Partition: GPT. ========================================================== Disk: 2 (Size: 1863 GB) (Disk ID: 6ADD1247) Partition 1: (Active) - (Size=1863 GB) - (Type=07 NTFS) ========================================================== Disk: 4 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: E55BC55D) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ========================================================== Disk: 5 (Protective MBR) (Size: 14.6 GB) (Disk ID: 00000000) Partition: GPT. ==================== Ende von Addition.txt ======================= |
22.04.2021, 16:16 | #3 |
| Win 10 PC lässt keine Cloudverbindung, Backups oder Rettungs-Disk-Erstellung zu Details Und noch die Shortcut.txt
__________________Code:
ATTFilter Untersuchungsergebnis der Verknüpfungen des Benutzers (x64) Version: 17-04-2021 durchgeführt von ichbi (22-04-2021 17:06:08) Gestartet von C:\Users\ichbi\Downloads Start-Modus: Normal ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) Shortcut: C:\Users\ichbi\Favorites\Downloadseite von NCH Software.lnk -> [LFthSBi+00^ahttps://www.nchsoftware.com/de/index.htmlVideoPad Video-Editor starten] Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Software Updates.lnk -> C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe (Flexera Software LLC.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk -> C:\Program Files\Microsoft Office\root\Office16\MSACCESS.EXE (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk -> C:\Program Files (x86)\Audacity\audacity.exe (Audacity Team) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debut Video-Aufnahme-Programm.lnk -> C:\Program Files (x86)\NCH Software\Debut\debut.exe (NCH Software) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk -> C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Invoice Rechnungsprogramm.lnk -> C:\Program Files (x86)\NCH Software\ExpressInvoice\expressinvoice.exe (NCH Software) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk -> C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe (Malwarebytes) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk -> C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoPad Foto-Editor.lnk -> C:\Program Files (x86)\NCH Software\PhotoPad\photopad.exe (NCH Software) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhraseExpress.lnk -> C:\Program Files (x86)\PhraseExpress\phraseexpress.exe (Bartels Media GmbH) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk -> C:\Program Files\Microsoft Office\root\Office16\POWERPNT.EXE (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prism Video-Converter.lnk -> C:\Program Files (x86)\NCH Software\Prism\prism.exe (NCH Software) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk -> C:\Program Files\Microsoft Office\root\Office16\MSPUB.EXE (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk -> C:\Program Files\Microsoft Office\root\Office16\lync.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoPad Video-Editor.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk -> C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinHTTrack\Documentation.lnk -> C:\Program Files\WinHTTrack\httrack-doc.html () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinHTTrack\WinHTTrack Website Copier.lnk -> C:\Program Files\WinHTTrack\WinHTTrack.exe (HTTrack) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ViewNX\eueste Info zu ViewNX.lnk -> C:\Program Files (x86)\Nikon\ViewNX\Readme.rtf () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ViewNX\ViewNX-Hilfe.lnk -> C:\Program Files (x86)\Nikon\ViewNX\ViewNX.chm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ViewNX\ViewNX.lnk -> C:\Program Files (x86)\Nikon\ViewNX\ViewNX.exe (Nikon Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith\Camtasia 2020.lnk -> C:\Windows\Installer\{B22D61D6-A710-4C52-9CCC-931E02624256}\CamtasiaIcons.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith\Camtasia Recorder 2020.lnk -> C:\Windows\Installer\{B22D61D6-A710-4C52-9CCC-931E02624256}\CamtasiaIcons.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Strato\HiDrive\HiDrive für den Desktop.lnk -> C:\Program Files (x86)\STRATO\HiDrive\HiDrive.App.exe (STRATO AG) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp\PhraseExpress.lnk -> C:\Program Files (x86)\PhraseExpress\phraseexpress.exe (Bartels Media GmbH) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarMoney 12 Basic\Aktuelle Informationen.lnk -> C:\Program Files (x86)\StarMoney 12 Basic\Readme.txt () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarMoney 12 Basic\Chipkartenleser Setup.lnk -> C:\Program Files (x86)\StarMoney 12 Basic\app\SCRConfig.exe (Star Finanz-Software Entwicklung und Vertriebs GmbH) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarMoney 12 Basic\fastviewer.lnk -> C:\Program Files (x86)\StarMoney 12 Basic\tools\FastClient.exe (Fastviewer.com) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarMoney 12 Basic\Konverter für Fremddaten.lnk -> C:\Program Files (x86)\StarMoney 12 Basic\app\smkonv.exe (Star Finanz-Software Entwicklung und Vertriebs GmbH) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarMoney 12 Basic\StarMoney 12 Basic.lnk -> C:\Program Files (x86)\StarMoney 12 Basic\app\StartStarMoney.exe (Star Finanz-Software Entwicklung und Vertriebs GmbH) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarMoney 12 Basic\TeamViewer.lnk -> C:\Program Files (x86)\StarMoney 12 Basic\tools\TeamViewerQS_de-idcfsnhckt.exe (TeamViewer) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarMoney 12 Basic\Zu Ihren StarMoney-Daten.lnk -> C:\ProgramData\StarMoney 12 Basic\profil () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roxio Easy CD & DVD Burning 2\Roxio Easy CD & DVD Burning 2.lnk -> C:\Program Files (x86)\Roxio Easy CD & DVD Burning 2\Roxio Central\RoxioCentralFx.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roxio Easy CD & DVD Burning 2\Anwendungen\Music Disc Creator.lnk -> C:\Program Files (x86)\Roxio Easy CD & DVD Burning 2\AudioCore\MusicDiscCreator15.exe (Corel Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roxio Easy CD & DVD Burning 2\Anwendungen\PhotoSuite.lnk -> C:\Program Files (x86)\Roxio Easy CD & DVD Burning 2\PhotoSuite\PhotoSuite15.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roxio Easy CD & DVD Burning 2\Anwendungen\Sound Editor.lnk -> C:\Program Files (x86)\Roxio Easy CD & DVD Burning 2\AudioCore\SoundEdit15.exe (Corel Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roxio Easy CD & DVD Burning 2\Anwendungen\Video Copy & Convert.lnk -> C:\Program Files (x86)\Roxio Easy CD & DVD Burning 2\Video Convert\VideoConvert15.exe (Corel Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roxio\Label Creator.lnk -> C:\Program Files (x86)\Roxio Easy CD & DVD Burning 2\Label Creator\RxLabelCreator15.exe (Corel Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roxio\Roxio Creator MyDVD.lnk -> C:\Program Files\Roxio MyDVD\MyDVDApp.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roxio\Roxio BackOnTrack\BackOnTrack.lnk -> C:\Program Files (x86)\Roxio\BackOnTrack\App\BackOnTrack.exe (Corel Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhraseExpress\PhraseExpress starten.lnk -> C:\Program Files (x86)\PhraseExpress\phraseexpress.exe (Bartels Media GmbH) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\orgaMAX Business Software\Daten sichern....lnk -> C:\Program Files (x86)\Deltra\orgaMAX 1\mfBCK.exe (deltra Software GmbH) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\orgaMAX Business Software\Daten wiederherstellen....lnk -> C:\Program Files (x86)\Deltra\orgaMAX 1\mfRST.exe (deltra Business Software GmbH & Co. KG) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\orgaMAX Business Software\orgaMAX deinstallieren.lnk -> C:\Program Files (x86)\Deltra\orgaMAX 1\unins000.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\orgaMAX Business Software\orgaMAX Handbuch.lnk -> C:\Program Files (x86)\Deltra\orgaMAX 1\Handbuch\Handbuch.pdf () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\orgaMAX Business Software\orgaMAX starten.lnk -> C:\Program Files (x86)\Deltra\orgaMAX 1\orgaMAX.exe (deltra Business Software GmbH & Co KG) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\GeForce Experience.lnk -> C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe (NVIDIA Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nuance PaperPort 14\ImageViewer.lnk -> C:\Program Files (x86)\Nuance\PaperPort\pppagevw.exe (Nuance Communications, Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nuance PaperPort 14\MAX-in-PDF-Konverter.lnk -> C:\Program Files (x86)\Nuance\PaperPort\cvmaxpdf.exe (Nuance Communications, Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nuance PaperPort 14\PaperPort 14 deinstallieren.lnk -> C:\Program Files (x86)\Nuance\PaperPort\PPUninstall.exe (Nuance Communications, Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nuance PaperPort 14\PaperPort.lnk -> C:\Program Files (x86)\Nuance\PaperPort\PaprPort.exe (Nuance Communications, Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nuance PaperPort 14\PDF Viewer SE.lnk -> C:\Program Files (x86)\Nuance\PDF Professional 7\bin\PDFPlus.exe (Nuance Communications, Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nikon Transfer\Neueste Info zu Nikon Transfer.lnk -> C:\Program Files (x86)\Nikon\Nikon Transfer\Readme.rtf () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nikon Transfer\Nikon Transfer-Hilfe.lnk -> C:\Program Files (x86)\Nikon\Nikon Transfer\NikonTransfer.chm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nikon Transfer\Nikon Transfer.lnk -> C:\Program Files (x86)\Nikon\Nikon Transfer\NktTransfer.exe (Nikon Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight\Microsoft Silverlight.lnk -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\Silverlight.Configuration.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\Aufzeichnungs-Manager von Skype for Business.lnk -> C:\Program Files\Microsoft Office\root\Office16\OcPubMgr.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\Office-Spracheinstellungen.lnk -> C:\Program Files\Microsoft Office\root\Office16\SETLANG.EXE (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\Telemetriedashboard für Office.lnk -> C:\Program Files\Microsoft Office\root\Office16\msotd.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\Telemetrieprotokoll für Office.lnk -> C:\Program Files\Microsoft Office\root\Office16\msoev.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Magic DVD Ripper\Magic DVD Ripper Help.lnk -> C:\Program Files (x86)\MagicDVDRipper\MagicDVDRipper.chm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Magic DVD Ripper\Magic DVD Ripper on the Web.lnk -> C:\Program Files (x86)\MagicDVDRipper\MagicDVDRipper.url () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Magic DVD Ripper\Magic DVD Ripper.lnk -> C:\Program Files (x86)\MagicDVDRipper\MagicDVDRipper.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Magic DVD Ripper\Uninstall Magic DVD Ripper.lnk -> C:\Program Files (x86)\MagicDVDRipper\unins000.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky VPN\Endbenutzer-Lizenzvertrag.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.3\Doc\KSDE\de-DE\consumer_gdpr_kaspersky_secure_connection_for_windows_4_0_eula__eula.txt () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky VPN\Kaspersky VPN.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.3\ksdeui.exe (AO Kaspersky Lab) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky VPN\My Kaspersky.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.3\kl.url () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Password Manager\Kaspersky Password Manager Hilfe.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\help.url () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Password Manager\Kaspersky Password Manager.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm.exe (AO Kaspersky Lab) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Password Manager\Weiter zu My Kaspersky.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpc.url () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security\Kaspersky im Internet besuchen.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.2\kl.url () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security\Kaspersky Internet Security.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.2\avpui.exe (AO Kaspersky Lab) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel\Intel(R) Rapid Storage Technology.lnk -> C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorUI.exe (Intel Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Instagiffer\Instagiffer.lnk -> C:\Program Files (x86)\Instagiffer\instagiffer.exe (Justin Todd) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Instagiffer\Uninstall Instagiffer.lnk -> C:\Program Files (x86)\Instagiffer\unins000.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader\Foxit Reader entfernen.lnk -> C:\Program Files (x86)\Foxit Software\Foxit Reader\unins000.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader\Foxit Reader.lnk -> C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe (Foxit Software Inc.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eTeks Sweet Home 3D\Sweet Home 3D entfernen.lnk -> C:\Program Files\Sweet Home 3D\unins000.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eTeks Sweet Home 3D\Sweet Home 3D.lnk -> C:\Program Files\Sweet Home 3D\SweetHome3D.exe (eTeks) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 7\Driver Booster 7 entfernen.lnk -> C:\Program Files (x86)\IObit\Driver Booster\7.3.0\unins000.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 7\Driver Booster 7.lnk -> C:\Program Files (x86)\IObit\Driver Booster\7.3.0\DriverBooster.exe (IObit) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dragon\Dragon.lnk -> C:\Windows\Installer\{768AC460-237E-45B6-99B8-1DE6D0F391E8}\NatSpeak_Shortcut_768AC460237E45B699B81DE6D0F391E8.exe (Flexera Software LLC) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dragon\Installationsprotokoll anzeigen.lnk -> C:\ProgramData\Nuance\NaturallySpeaking15\logs\dgnsetup20191122165556.log () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dragon\Dragon-Werkzeuge\Autoumsetzung.lnk -> C:\Windows\Installer\{768AC460-237E-45B6-99B8-1DE6D0F391E8}\TAgent_Shortcut_768AC460237E45B699B81DE6D0F391E8.exe (Flexera Software LLC) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dragon\Dragon-Werkzeuge\Benutzerprofile aktualisieren.lnk -> C:\Windows\Installer\{768AC460-237E-45B6-99B8-1DE6D0F391E8}\Upgrade_Shortcut_768AC460237E45B699B81DE6D0F391E8.exe (Flexera Software LLC) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dragon\Dragon-Werkzeuge\Dateien für Support sammeln.lnk -> C:\Windows\Installer\{768AC460-237E-45B6-99B8-1DE6D0F391E8}\SuppPack_Shortcut_768AC460237E45B699B81DE6D0F391E8.exe (Flexera Software LLC) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Daum\PotPlayer 64 bit\PotPlayer 64 bit.lnk -> C:\Program Files\DAUM\PotPlayer\PotPlayerMini64.exe (Kakao) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Daum\PotPlayer 64 bit\Uninstall PotPlayer-64 bit.lnk -> C:\Program Files\DAUM\PotPlayer\uninstall.exe (Kakao) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CEWE FOTOWELT\CEWE FOTOIMPORTER.lnk -> C:\Program Files\CEWE\CEWE FOTOWELT\CEWE FOTOIMPORTER.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CEWE FOTOWELT\CEWE FOTOSCHAU.lnk -> C:\Program Files\CEWE\CEWE FOTOWELT\CEWE FOTOSCHAU.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CEWE FOTOWELT\CEWE FOTOWELT deinstallieren.lnk -> C:\Program Files\CEWE\CEWE FOTOWELT\uninstall.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CEWE FOTOWELT\CEWE FOTOWELT.lnk -> C:\Program Files\CEWE\CEWE FOTOWELT\CEWE FOTOWELT.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDex\CDex.lnk -> C:\Program Files (x86)\CDex\CDex.exe (The CDex Project - hxxp://cdexos.sourceforge.net/) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDex\Remove CDex.lnk -> C:\Program Files (x86)\CDex\uninstall.exe (Georgy Berdyshev) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\Aktivierung.lnk -> C:\Program Files (x86)\AVS4YOU\Registration.exe (Online Media Technologies Ltd.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\AVS Media Player.lnk -> C:\Program Files (x86)\AVS4YOU\AVSMediaPlayer\AVSMediaPlayer.exe (Online Media Technologies Ltd.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\Hilfe.lnk -> C:\Program Files (x86)\AVS4YOU\AVS4YOUHelp.chm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\Lizenzvereinbarung.lnk -> C:\Program Files (x86)\AVS4YOU\License Agreement.rtf () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\Video\AVS Disc Creator.lnk -> C:\Program Files (x86)\AVS4YOU\AVSDiscCreator\AVSDiscCreator.exe (Online Media Technologies Ltd.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\Video\AVS Video Converter.lnk -> C:\Program Files (x86)\AVS4YOU\AVSVideoConverter\AVSVideoConverter.exe (Online Media Technologies Ltd.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\Video\AVS Video Editor.lnk -> C:\Program Files (x86)\AVS4YOU\AVSVideoEditor\AVSVideoEditor.exe (Online Media Technologies Ltd.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\Video\AVS Video ReMaker.lnk -> C:\Program Files (x86)\AVS4YOU\AVSVideoRemaker\AVSVideoReMaker.exe (Online Media Technologies Ltd.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\System Utilities\AVS Registry Cleaner.lnk -> C:\Program Files (x86)\AVS4YOU\AVSRegistryCleaner\AVSRegistryCleaner.exe (Online Media Technologies Ltd.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\Image\AVS Image Converter.lnk -> C:\Program Files (x86)\AVS4YOU\AVSImageConverter\AVSImageConverter.exe (Online Media Technologies Ltd.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\Image\AVS Photo Editor.lnk -> C:\Program Files (x86)\AVS4YOU\AVSPhotoEditor\AVSPhotoEditor.exe (Online Media Technologies Ltd. UK) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\Documents\AVS Document Converter.lnk -> C:\Program Files (x86)\AVS4YOU\AVSDocumentConverter\AVSDocumentConverter.exe (Online Media Technologies Ltd.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\Burning\AVS Disc Creator.lnk -> C:\Program Files (x86)\AVS4YOU\AVSDiscCreator\AVSDiscCreator.exe (Online Media Technologies Ltd.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\Audio\AVS Audio Converter.lnk -> C:\Program Files (x86)\AVS4YOU\AVSAudioConverter\AVSAudioConverter.exe (Online Media Technologies Ltd.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVS4YOU\Audio\AVS Audio Editor.lnk -> C:\Program Files (x86)\AVS4YOU\AVSAudioEditor\AVSAudioEditor.exe (Online Media Technologies Ltd.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo\Ashampoo Backup Pro 14\Ashampoo Backup Pro 14 .lnk -> C:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\backupClient-abpb.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArchiCrypt\ArchiCrypt Live 8\ArchiCrypt Live 8.lnk -> C:\Program Files\ArchiCrypt\ArchiCrypt Live 8\ACLive8.exe (Softwareentwicklung Remus - ArchiCrypt) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArchiCrypt\ArchiCrypt Live 8\Dokumentation.lnk -> C:\Program Files\ArchiCrypt\ArchiCrypt Live 8\Hilfe\ACLive.chm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Partition Assistant Standard Edition 8.1\AOMEI Partition Assistant Standard Edition 8.1.lnk -> C:\Program Files (x86)\AOMEI Partition Assistant\PartAssist.exe (AOMEI Technology Co., Ltd.) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Partition Assistant Standard Edition 8.1\Uninstall AOMEI Partition Assistant.lnk -> C:\Program Files (x86)\AOMEI Partition Assistant\unins000.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyMP4\AnyMP4 DVD Copy\AnyMP4 DVD Copy.lnk -> C:\Program Files (x86)\AnyMP4 Studio\AnyMP4 DVD Copy\AnyMP4 DVD Copy.exe (AnyMP4) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyMP4\AnyMP4 DVD Copy\Benutzer Hilfe.lnk -> C:\Program Files (x86)\AnyMP4 Studio\AnyMP4 DVD Copy\help_de.CHM () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyMP4\AnyMP4 DVD Copy\Deinstallieren.lnk -> C:\Program Files (x86)\AnyMP4 Studio\AnyMP4 DVD Copy\unins000.exe () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (32-bit).lnk -> C:\Windows\SysWOW64\odbcad32.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (64-bit).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\RecoveryDrive.lnk -> C:\Windows\System32\RecoveryDrive.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Registry Editor.lnk -> C:\Windows\regedit.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Defender Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer\Acer documents.lnk -> C:\OEM\Preload\Autorun\GUI\Acer User's Manual\00 () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Quick Assist.lnk -> C:\Windows\System32\quickassist.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Steps Recorder.lnk -> C:\Windows\System32\psr.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip File Manager.lnk -> C:\Program Files\7-Zip\7zFM.exe (Igor Pavlov) Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip Help.lnk -> C:\Program Files\7-Zip\7-zip.chm () Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Acer\Acer Jumpstart.lnk -> C:\Program Files (x86)\Acer\Acer Jumpstart\wall.exe (Acer) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk -> C:\Users\ichbi\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30 Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc () Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation) Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\Links\Desktop.lnk -> C:\Users\ichbi\Desktop () Shortcut: C:\Users\ichbi\Links\Downloads.lnk -> C:\Users\ichbi\Downloads () Shortcut: C:\Users\ichbi\Desktop\ArchiCrypt Live 8.lnk -> C:\Program Files\ArchiCrypt\ArchiCrypt Live 8\ACLive8.exe (Softwareentwicklung Remus - ArchiCrypt) Shortcut: C:\Users\ichbi\Desktop\AVS Video Editor.lnk -> C:\Program Files (x86)\AVS4YOU\AVSVideoEditor\AVSVideoEditor.exe (Online Media Technologies Ltd.) Shortcut: C:\Users\ichbi\Desktop\HTTrack Website Copier.lnk -> C:\Program Files\WinHTTrack\WinHTTrack.exe (HTTrack) Shortcut: C:\Users\ichbi\Desktop\JDownloader 2.lnk -> C:\Users\ichbi\AppData\Local\JDownloader 2.0\JDownloader2.exe (AppWork GmbH) Shortcut: C:\Users\ichbi\Desktop\Opera-Browser.lnk -> C:\Users\ichbi\AppData\Local\Programs\Opera\launcher.exe (Opera Software) Shortcut: C:\Users\ichbi\Desktop\orgaMAX starten....lnk -> C:\Program Files (x86)\Deltra\orgaMAX 1\orgaMAX.exe (deltra Business Software GmbH & Co KG) Shortcut: C:\Users\ichbi\Desktop\PDF blätterbare Kataloge 1.0.lnk -> C:\Program Files (x86)\PDF blätterbare Kataloge 1\flippages.exe () Shortcut: C:\Users\ichbi\Desktop\Sweet Home 3D.lnk -> C:\Program Files\Sweet Home 3D\SweetHome3D.exe (eTeks) Shortcut: C:\Users\ichbi\Desktop\ViewPlayCap.lnk -> C:\Program Files (x86)\ViewPlayCap\ViewPlayCap.exe ( ) Shortcut: C:\Users\ichbi\Desktop\Zoom.lnk -> C:\Users\ichbi\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc.) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk -> C:\Users\ichbi\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk -> C:\Users\ichbi\AppData\Local\Programs\Opera\launcher.exe (Opera Software) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\phraseexpress.lnk -> C:\Program Files (x86)\PhraseExpress\phraseexpress.exe (Bartels Media GmbH) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ViewPlayCap.lnk -> C:\Program Files (x86)\ViewPlayCap\ViewPlayCap.exe ( ) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom\Zoom.lnk -> C:\Users\ichbi\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc.) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30 Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF blätterkare Kataloge 1.0\Handbuch.lnk -> C:\Program Files (x86)\PDF blätterbare Kataloge 1\handbuch.txt () Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF blätterkare Kataloge 1.0\Hilfe.lnk -> C:\Program Files (x86)\PDF blätterbare Kataloge 1\pdfeditor.chm () Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF blätterkare Kataloge 1.0\PDF blätterbare Kataloge 1.0.lnk -> C:\Program Files (x86)\PDF blätterbare Kataloge 1\flippages.exe () Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF blätterkare Kataloge 1.0\Vollversion bestellen.lnk -> C:\Program Files (x86)\PDF blätterbare Kataloge 1\bestell.txt () Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader\JDownloader 2 Deinstallationsprogramm.lnk -> C:\Users\ichbi\AppData\Local\JDownloader 2.0\Uninstall JDownloader.exe (AppWork GmbH) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader\JDownloader 2 Update & Rescue.lnk -> C:\Users\ichbi\AppData\Local\JDownloader 2.0\JDownloader2Update.exe (AppWork GmbH) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader\JDownloader 2.lnk -> C:\Users\ichbi\AppData\Local\JDownloader 2.0\JDownloader2.exe (AppWork GmbH) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client\FileZilla.lnk -> C:\Program Files\FileZilla FTP Client\filezilla.exe (FileZilla Project) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client\Uninstall.lnk -> C:\Program Files\FileZilla FTP Client\uninstall.exe (Tim Kosse) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\avs4you\Deinstallieren.lnk -> C:\Program Files (x86)\AVS4YOU\Uninstall.exe (Online Media Technologies Ltd.) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\SendTo\AVS Mobile Uploader.lnk -> C:\Program Files (x86)\Common Files\AVSMedia\MobileUploader\AVSMobileUploader.exe (Online Media Technologies Ltd.) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\SendTo\AVS Video Burner.lnk -> C:\Program Files (x86)\Common Files\AVSMedia\BurnerService\AVSVideoBurner.exe (Online Media Technologies Ltd.) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\SendTo\Bluetooth-Dateiübertragung.LNK -> C:\Windows\System32\fsquirt.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Foxit Reader.lnk -> C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe (Foxit Software Inc.) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Opera-Browser.lnk -> C:\Users\ichbi\AppData\Local\Programs\Opera\launcher.exe (Opera Software) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\orgaMAX starten....lnk -> C:\Program Files (x86)\Deltra\orgaMAX 1\orgaMAX.exe (deltra Business Software GmbH & Co KG) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\PotPlayer 64 bit.lnk -> C:\Program Files\DAUM\PotPlayer\PotPlayerMini64.exe (Kakao) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\AVS Video Editor.lnk -> C:\Program Files (x86)\AVS4YOU\AVSVideoEditor\AVSVideoEditor.exe (Online Media Technologies Ltd.) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Debut Video-Aufnahme-Programm.lnk -> C:\Program Files (x86)\NCH Software\Debut\debut.exe (NCH Software) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Driver Booster.lnk -> C:\Program Files (x86)\IObit\Driver Booster\7.3.0\DriverBooster.exe (IObit) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Excel.lnk -> C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Express Invoice Rechnungsprogramm.lnk -> C:\Program Files (x86)\NCH Software\ExpressInvoice\expressinvoice.exe (NCH Software) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera-Browser.lnk -> C:\Users\ichbi\AppData\Local\Programs\Opera\launcher.exe (Opera Software) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\orgaMAX starten.lnk -> C:\Program Files (x86)\Deltra\orgaMAX 1\orgaMAX.exe (deltra Business Software GmbH & Co KG) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Outlook.lnk -> C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PaperPort.lnk -> C:\Program Files (x86)\Nuance\PaperPort\PaprPort.exe (Nuance Communications, Inc.) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\PowerPoint.lnk -> C:\Program Files\Microsoft Office\root\Office16\POWERPNT.EXE (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Publisher.lnk -> C:\Program Files\Microsoft Office\root\Office16\MSPUB.EXE (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\StarMoney 12 Basic.lnk -> C:\Program Files (x86)\StarMoney 12 Basic\app\StartStarMoney.exe (Star Finanz-Software Entwicklung und Vertriebs GmbH) Shortcut: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Word.lnk -> C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () Shortcut: C:\Users\ichbi\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc () Shortcut: C:\Users\ichbi\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation) Shortcut: C:\Users\ichbi\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) Shortcut: C:\Users\Public\Desktop\AnyMP4 DVD Copy.lnk -> C:\Program Files (x86)\AnyMP4 Studio\AnyMP4 DVD Copy\AnyMP4 DVD Copy.exe (AnyMP4) Shortcut: C:\Users\Public\Desktop\AOMEI Partition Assistant Standard Edition (Deutsch) 8.1.lnk -> C:\Program Files (x86)\AOMEI Partition Assistant\PartAssist.exe (AOMEI Technology Co., Ltd.) Shortcut: C:\Users\Public\Desktop\Ashampoo Backup Pro 14.lnk -> C:\Program Files\Ashampoo\Ashampoo Backup Pro 14\bin\backupClient-abpb.exe () Shortcut: C:\Users\Public\Desktop\Audacity.lnk -> C:\Program Files (x86)\Audacity\audacity.exe (Audacity Team) Shortcut: C:\Users\Public\Desktop\Camtasia 2020.lnk -> C:\Program Files\TechSmith\Camtasia 2020\CamtasiaStudio.exe (TechSmith Corporation) Shortcut: C:\Users\Public\Desktop\CEWE FOTOIMPORTER.lnk -> C:\Program Files\CEWE\CEWE FOTOWELT\CEWE FOTOIMPORTER.exe () Shortcut: C:\Users\Public\Desktop\CEWE FOTOSCHAU.lnk -> C:\Program Files\CEWE\CEWE FOTOWELT\CEWE FOTOSCHAU.exe () Shortcut: C:\Users\Public\Desktop\CEWE FOTOWELT.lnk -> C:\Program Files\CEWE\CEWE FOTOWELT\CEWE FOTOWELT.exe () Shortcut: C:\Users\Public\Desktop\Debut Video-Aufnahme-Programm.lnk -> C:\Program Files (x86)\NCH Software\Debut\debut.exe (NCH Software) Shortcut: C:\Users\Public\Desktop\Dragon.lnk -> C:\Windows\Installer\{768AC460-237E-45B6-99B8-1DE6D0F391E8}\NatSpeakD_Shortcut_768AC460237E45B699B81DE6D0F391E8.exe (Flexera Software LLC) Shortcut: C:\Users\Public\Desktop\Driver Booster 7.lnk -> C:\Program Files (x86)\IObit\Driver Booster\7.3.0\DriverBooster.exe (IObit) Shortcut: C:\Users\Public\Desktop\Express Invoice Rechnungsprogramm.lnk -> C:\Program Files (x86)\NCH Software\ExpressInvoice\expressinvoice.exe (NCH Software) Shortcut: C:\Users\Public\Desktop\Foxit Reader.lnk -> C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReader.exe (Foxit Software Inc.) Shortcut: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) Shortcut: C:\Users\Public\Desktop\HiDrive.lnk -> C:\Program Files (x86)\STRATO\HiDrive\HiDrive.App.exe (STRATO AG) Shortcut: C:\Users\Public\Desktop\Kaspersky Internet Security.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.2\avpui.exe (AO Kaspersky Lab) Shortcut: C:\Users\Public\Desktop\Kaspersky Password Manager.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm.exe (AO Kaspersky Lab) Shortcut: C:\Users\Public\Desktop\Kaspersky VPN.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.3\ksdeui.exe (AO Kaspersky Lab) Shortcut: C:\Users\Public\Desktop\Malwarebytes.lnk -> C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe (Malwarebytes) Shortcut: C:\Users\Public\Desktop\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) Shortcut: C:\Users\Public\Desktop\Nikon Transfer.lnk -> C:\Program Files (x86)\Nikon\Nikon Transfer\NktTransfer.exe (Nikon Corporation) Shortcut: C:\Users\Public\Desktop\PhotoPad Foto-Editor.lnk -> C:\Program Files (x86)\NCH Software\PhotoPad\photopad.exe (NCH Software) Shortcut: C:\Users\Public\Desktop\PotPlayer 64 bit.lnk -> C:\Program Files\DAUM\PotPlayer\PotPlayerMini64.exe (Kakao) Shortcut: C:\Users\Public\Desktop\Prism Video-Converter.lnk -> C:\Program Files (x86)\NCH Software\Prism\prism.exe (NCH Software) Shortcut: C:\Users\Public\Desktop\Roxio Easy CD & DVD Burning 2.lnk -> C:\Program Files (x86)\Roxio Easy CD & DVD Burning 2\Roxio Central\RoxioCentralFx.exe () Shortcut: C:\Users\Public\Desktop\StarMoney 12 Basic.lnk -> C:\Program Files (x86)\StarMoney 12 Basic\app\StartStarMoney.exe (Star Finanz-Software Entwicklung und Vertriebs GmbH) Shortcut: C:\Users\Public\Desktop\VideoPad Video-Editor.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) Shortcut: C:\Users\Public\Desktop\ViewNX.lnk -> C:\Program Files (x86)\Nikon\ViewNX\ViewNX.exe (Nikon Corporation) Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk -> C:\Users\ichbi\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation) Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30 Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation) Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation) Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation) Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation) Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation) Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation) Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation) Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc () Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation) Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation) Shortcut: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Produktpalette.lnk -> C:\Program Files (x86)\NCH Software\ExpressInvoice\expressinvoice.exe (NCH Software) -> -extsuite ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ViewNX\ViewNX deinstallieren.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /x {F007CBCE-D714-4C0B-8CE9-9B0D78116468} ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /7 ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roxio\Roxio Burn.lnk -> C:\Program Files (x86)\Roxio Easy CD & DVD Burning 2\Roxio Burn\Roxio Burn.exe () -> /STARTMENU ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\orgaMAX Business Software\Datenbank Server starten....lnk -> C:\Program Files (x86)\Deltra\Firebird-Server\bin\instsvc.exe (Firebird Project) -> start -n deltraOMX ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\orgaMAX Business Software\Fernsteuerung starten....lnk -> C:\Program Files (x86)\Deltra\orgaMAX 1\mfRemote.exe (TeamViewer) -> DT ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nuance PaperPort 14\Scanner Setup-Assistent.lnk -> C:\Program Files (x86)\Nuance\PaperPort\ScannerWizardU.exe (Nuance Communications, Inc.) -> /A [PaperPort 14.5] /L [ger] ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nikon Transfer\Nikon Transfer deinstallieren.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /x {E9757890-7EC5-46C8-99AB-B00F07B6525C} ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\Database Compare.lnk -> C:\Program Files\Microsoft Office\root\Client\AppVLP.exe (Microsoft Corporation) -> "C:\Program Files (x86)\Microsoft Office\Office16\DCF\DATABASECOMPARE.EXE" ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\Office Upload Center.lnk -> C:\Program Files\Microsoft Office\root\Client\AppVLP.exe (Microsoft Corporation) -> "C:\Program Files\Microsoft Office\Root\Office16\MSOUC.EXE" ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\Spreadsheet Compare.lnk -> C:\Program Files\Microsoft Office\root\Client\AppVLP.exe (Microsoft Corporation) -> "C:\Program Files (x86)\Microsoft Office\Office16\DCF\SPREADSHEETCOMPARE.EXE" ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Magic DVD Ripper\Export Log.lnk -> C:\Program Files (x86)\MagicDVDRipper\FileManager.exe () -> -LOG error.log -INI MagicDVDRipper.ini -OUT RipperLog -EXT gz -APP MagicDVDRipper -PRO MagicSoftware ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Magic DVD Ripper\Export SLF.lnk -> C:\Program Files (x86)\MagicDVDRipper\FileManager.exe () -> -EXPORTPT -PTNAME SLF -OUT SLF.ifz -EXT ifz -APP MagicDVDRipper -PRO MagicSoftware ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Magic DVD Ripper\Import Ini.lnk -> C:\Program Files (x86)\MagicDVDRipper\FileManager.exe () -> -IMPORT -INI MagicDVDRipper.ini -APP MagicDVDRipper -PRO MagicSoftware ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky VPN\Kaspersky VPN entfernen.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /i{FF2A12B8-AEB7-48C0-95C8-E2E3D67DFCB2} REMOVE=ALL ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Password Manager\Löschen Kaspersky Password Manager.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /i{B2F7333E-6C8D-4994-AAC4-FEC8EBBF9611} REMOVE=ALL ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security\Kaspersky Internet Security entfernen.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /i{63129F5E-8EC5-41BA-A4CF-47966CE84953} REMOVE=ALL ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dragon\Dragon.log anzeigen.lnk -> C:\Windows\Installer\{768AC460-237E-45B6-99B8-1DE6D0F391E8}\Dragonlog_Shortcut_768AC460237E45B699B81DE6D0F391E8.exe (Flexera Software LLC) -> /finddragonlog ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dragon\Info über Dragon.lnk -> C:\Program Files (x86)\Nuance\NaturallySpeaking15\Program\natspeak.exe (Nuance Communications, Inc.) -> /About ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dragon\Dragon-Werkzeuge\Dragon service.lnk -> C:\Windows\SysWOW64\cmd.exe (Microsoft Corporation) -> /k "C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe" ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dragon\Dragon-Werkzeuge\Konvertierung von XML zu DAT.lnk -> C:\Windows\SysWOW64\cmd.exe (Microsoft Corporation) -> /k "C:\Program Files (x86)\Nuance\NaturallySpeaking15\Program\mycmdsxml2dat.exe" ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dragon\Dragon-Werkzeuge\MyCommands Protection Utility.lnk -> C:\Windows\SysWOW64\cmd.exe (Microsoft Corporation) -> /k "C:\Program Files (x86)\Nuance\NaturallySpeaking15\Program\protectcmds.exe" ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dragon\Dragon-Werkzeuge\NSAdmin.lnk -> C:\Windows\SysWOW64\cmd.exe (Microsoft Corporation) -> /k "C: && cd "C:\Program Files (x86)\Nuance\NaturallySpeaking15\Program" && "C:\Program Files (x86)\Nuance\NaturallySpeaking15\Program\nsadmin.exe"" ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyMP4\AnyMP4 DVD Copy\Produkt besuchen.lnk -> C:\Program Files (x86)\AnyMP4 Studio\AnyMP4 DVD Copy\AnyMP4 DVD Copy.exe (AnyMP4) -> --pop_product_url ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1 ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.AdministrativeTools ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageNetworkStatus ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPagePCSystemInfo ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageScreenPowerAndSleep ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAppsSizes ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0} ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0} ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{52205fd8-5dfb-447d-801a-d0b52f2e83e1} ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0 ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257} ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Anrufrecorder.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind VRS ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Audio-Converter.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind Switch ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Audio-Editor.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind WavePad ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Bestandssoftware.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind Inventoria ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Bildkonverter.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind Pixillion ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Brennprogramm.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind ExpressBurn ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Buchhaltungssoftware.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind ExpressAccounts ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\CD-Ripper.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind Rip ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Classic FTP Software.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind ClassicFTP ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Diashow-Programm.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind PhotoStage ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Diktiersoftware.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind Express ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Disc-Beschriftungssoftware.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind Disketch ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Doxillion Dokumentkonverter.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind Doxillion ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Flussdiagramm-Software.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind ClickCharts ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Foto-Editor.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind PhotoPad ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Hausplaner.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind DreamPlan ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Musikstudio-Software.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind MixPad ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Point-of-Sale-Software.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind Copper ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Private Finanzsoftware.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind MoneyLine ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Rechnungsprogramm.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind ExpressInvoice ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Streaming-Audio-Recorder.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind SoundTap ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Textbaustein-Programm.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind FastFox ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Tipptrainer.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind KeyBlaze ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Transkriptionssoftware.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind Scribe ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\VHS-Konverter.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind GoldenVideos ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Video-Converter.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind Prism ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\Videoaufnahme-Software.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind Debut ShortcutWithArgument: C:\Users\ichbi\NCH Software Produktpalette\ZIP-Programm.lnk -> C:\Program Files (x86)\NCH Software\VideoPad\videopad.exe (NCH Software) -> -extfind ExpressZip ShortcutWithArgument: C:\Users\ichbi\Desktop\Amazon Backup.lnk -> C:\Users\ichbi\AppData\Local\Amazon Drive\AmazonPhotos.exe (Amazon.com Inc.) -> --source-desktop --show-status-window ShortcutWithArgument: C:\Users\ichbi\AppData\Roaming\Microsoft\Word\PayPal-Kontofreigabe_210420308812602385018772\PayPal-Kontofreigabe_210420.docx.lnk -> E:\Eigene Dateien\Privates\Briefvorlagen\PayPal-Kontofreigabe_210420.docx () -> 0 ShortcutWithArgument: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon Photos.lnk -> C:\Users\ichbi\AppData\Local\Amazon Drive\AmazonPhotos.exe (Amazon.com Inc.) -> --source-startmenu ShortcutWithArgument: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom\Uninstall Zoom.lnk -> C:\Users\ichbi\AppData\Roaming\Zoom\uninstall\Installer.exe (Zoom Video Communications, Inc.) -> /uninstall ShortcutWithArgument: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.AdministrativeTools ShortcutWithArgument: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HiDrive.lnk -> C:\Program Files (x86)\STRATO\HiDrive\HiDrive.App.exe (STRATO AG) -> /hideexp ShortcutWithArgument: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo ShortcutWithArgument: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\SendTo\Faxempfänger.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo ShortcutWithArgument: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk -> C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE (Microsoft Corporation) -> /recycle ShortcutWithArgument: C:\Users\ichbi\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory=Default ShortcutWithArgument: C:\Users\ichbi\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageNetworkStatus ShortcutWithArgument: C:\Users\ichbi\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager ShortcutWithArgument: C:\Users\ichbi\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPagePCSystemInfo ShortcutWithArgument: C:\Users\ichbi\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageScreenPowerAndSleep ShortcutWithArgument: C:\Users\ichbi\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAppsSizes ShortcutWithArgument: C:\Users\ichbi\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0} ShortcutWithArgument: C:\Users\ichbi\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0} ShortcutWithArgument: C:\Users\ichbi\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{52205fd8-5dfb-447d-801a-d0b52f2e83e1} ShortcutWithArgument: C:\Users\ichbi\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0 ShortcutWithArgument: C:\Users\ichbi\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257} ShortcutWithArgument: C:\Users\ichbi\AppData\Local\Microsoft\Edge\User Data\Default\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory=Default ShortcutWithArgument: C:\Users\Public\Desktop\Produktpalette.lnk -> C:\Program Files (x86)\NCH Software\PhotoPad\photopad.exe (NCH Software) -> -suite ShortcutWithArgument: C:\Users\Public\Desktop\Roxio Burn.lnk -> C:\Program Files (x86)\Roxio Easy CD & DVD Burning 2\Roxio Burn\Roxio Burn.exe () -> /STARTMENU ShortcutWithArgument: C:\Users\Public\Desktop\Sicherer Zahlungsverkehr.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.2\avpui.exe (AO Kaspersky Lab) -> -safebanking ShortcutWithArgument: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.AdministrativeTools ShortcutWithArgument: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo ShortcutWithArgument: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageNetworkStatus ShortcutWithArgument: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager ShortcutWithArgument: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPagePCSystemInfo ShortcutWithArgument: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageScreenPowerAndSleep ShortcutWithArgument: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAppsSizes ShortcutWithArgument: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0} ShortcutWithArgument: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0} ShortcutWithArgument: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{52205fd8-5dfb-447d-801a-d0b52f2e83e1} ShortcutWithArgument: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0 ShortcutWithArgument: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257} InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarMoney 12 Basic\StarMoney-Homepage.url -> URL: hxxps://www.starmoney.de InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Link to Nikon\Camera Control Pro-Download - kostenlose Testversion.url -> URL: hxxp://9k3x1jrq3kwx.nikonimaging.com/crosspoint/jump.cgi?R=eur&L=de&O=w&P=CCPTRI InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Link to Nikon\Capture NX-Download - kostenlose Testversion.url -> URL: hxxp://9k3x1jrq3kwx.nikonimaging.com/crosspoint/jump.cgi?R=eur&L=de&O=w&P=NCAPTURE InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Link to Nikon\Kundensupportseite.url -> URL: hxxp://www.europe-nikon.com/support InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Link to Nikon\Nikon Imaging-Homepage.url -> URL: hxxp://www.nikon.de/ InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Link to Nikon\Nikon RAW Codec - NEF Codec-Download.url -> URL: hxxp://9k3x1jrq3kwx.nikonimaging.com/crosspoint/jump.cgi?R=eur&L=de&O=w&P=WINRCODE InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Instagiffer\Visit www.instagiffer.com.url -> URL: hxxp://www.instagiffer.com InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Partition Assistant Standard Edition 8.1\User Help - German.url -> URL: hxxp://www.disk-partition.com/de/manual.html InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Partition Assistant Standard Edition 8.1\Visit our website - German.url -> URL: hxxp://www.disk-partition.com/de InternetURL: C:\Users\Default\Favorites\Acer\Acer.url -> URL: hxxp://www.acer.com InternetURL: C:\Users\ichbi\Favorites\Bing.url -> URL: hxxp://go.microsoft.com/fwlink/p/?LinkId=255142 InternetURL: C:\Users\ichbi\Favorites\Acer\Acer.url -> URL: hxxp://www.acer.com InternetURL: C:\Users\_ashbackuppb_.DESKTOP-GOISBCG\Favorites\Acer\Acer.url -> URL: hxxp://www.acer.com ==================== Ende vom Shortcut.txt ============================= |
22.04.2021, 19:29 | #4 | |
/// Winkelfunktion /// TB-Süch-Tiger™ | Lösung: Win 10 PC lässt keine Cloudverbindung, Backups oder Rettungs-Disk-Erstellung zu Das liegt bestimmt an diesem Oberschwachsinn: Zitat:
nennt man auch Kasperle-Theater. Umgehend deinstallieren. Danach ist der Windows Defender (auch bekannt als Microsoft Defender) aktiv.
__________________ Logfiles bitte immer in CODE-Tags posten |
22.04.2021, 20:05 | #5 |
| Wie Win 10 PC lässt keine Cloudverbindung, Backups oder Rettungs-Disk-Erstellung zu Vielen Dank für die überaus freundliche Begrüßung und die kompetente Antwort. Ich werde ihn deinstallieren. Wenn es danach trotzdem nicht geht werde ich ihre kollegiale Art noch einmal zu schätzen wissen. Sie hören von mir... |
23.04.2021, 01:08 | #6 |
/// Winkelfunktion /// TB-Süch-Tiger™ | Wo Win 10 PC lässt keine Cloudverbindung, Backups oder Rettungs-Disk-Erstellung zu Lösung! Vielen Dank zurück für ihre noch freundlichere Reaktion. Ist ja nicht so, dass Ironie aus Ihrem Beitrag trieft. Fü den Fall dass sie hinter dem Mond leben: seit vielen Jahren für von diesem Schwachsinn wie Kaspersky, Avira, Avast aber auch Norton oder GDATA abgeraten. Das ist einfach nur dumme Geldmacherei durch das Schüren von Angst bei irgendwelchen Laien. Aber seien Sie nicht traurig, Sie sind leider immer noch einer von vielen, die Unsinn wie Kaspersky installiert hatten oder haben.
__________________ --> Win 10 PC lässt keine Cloudverbindung, Backups oder Rettungs-Disk-Erstellung zu |
23.04.2021, 09:17 | #7 |
/// TB-Ausbilder | Win 10 PC lässt keine Cloudverbindung, Backups oder Rettungs-Disk-Erstellung zu Da das Ganze nichts mit Malware zu tun hat, verschiebe ich das Thema in den Windowsbereich. |
23.04.2021, 12:05 | #8 | ||||||||
| Win 10 PC lässt keine Cloudverbindung, Backups oder Rettungs-Disk-Erstellung zu Neben Kaspersky wurde das System allerdings in der Vergangenheit auch ziemlich stark mit verschiedener Software beladen, die für Fehler und Konflikte bekannt bis prädestiniert ist, und die auf einem System besser nicht eingesetzt werden sollte: Zitat:
Zitat:
-> https://www.trojaner-board.de/184172...ml#post1637555 Zitat:
Zitat:
Obendrein bist Du mit Deinem Standard-Browser auch noch mit einer veralteten, sicherheitsanfälligen Version unterwegs: Zitat:
Zitat:
Auch das hier ist, neben einiger weiterer Software, veraltet und sicherheitsanfällig: Zitat:
Fazit: Hier stimmt es hinten und vorne nicht! Mich überrascht eher, dass das System in diesem Zustand überhaupt so lange "gehalten" hat. Zitat:
Geändert von mmk (23.04.2021 um 12:21 Uhr) |
Themen zu Win 10 PC lässt keine Cloudverbindung, Backups oder Rettungs-Disk-Erstellung zu |
administrator, avast, defender, downloader, fehlermeldung, firefox, ftp, google, home, homepage, installation, kaspersky, kaspersky und malwarebytes, logfile, monitor, mozilla, neustart, nvcontainer.exe, nvidia, prozesse, realtek, registry, scan, security, software, usb, windows |