| |
| |||||||
Log-Analyse und Auswertung: Windows 10 - Trojan:Win32/Occamy.C61Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
18.01.2022, 18:24
| #1 |
| |  Windows 10 - Trojan:Win32/Occamy.C61 Hallo zusammen, ich habe eben die Meldung bekommen, dass der Trojan:Win32/Occamy.C61 gefunden und in die Quarantäne verschoben wurde. Hintergrund ich wollte eine Software downloaden, dieses aber nicht die Software war sondern ein Patcher KeyGenerator.  Dateien habe ich bereits gelöscht.Anbei die Codes aus den drei Textdateien. Ich danke schon mal Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 15-01-2022
durchgeführt von **** (Administrator) auf DESKTOP-JMT2TI6 (Hewlett-Packard HP Compaq Elite 8300 SFF) (18-01-2022 17:59:40)
Gestartet von C:\Users\Dominic ****\Downloads
Geladene Profile: **** & Dominic ****
Plattform: Microsoft Windows 10 Pro Version 21H2 19044.1288 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Chrome
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Andrea Electronics -> Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe <2>
(Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe <2>
(Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe <2>
(geek software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe <3>
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <74>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe <2>
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.721.12013.0_x64__8wekyb3d8bbwe\GameBar.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.721.12013.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CredentialEnrollmentManager.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LogonUI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.1371_none_7e1bd7147c8285b0\TiWorker.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCopyAccelerator.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe
(NVIDIA Corporation -> ) C:\Windows\System32\nvwmi64.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe <3>
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <4>
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe <2>
(Samsung Electronics CO., LTD. -> ) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe <2>
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8515304 2015-08-07] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1412840 2015-08-07] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [2498368 2015-07-23] (NVIDIA Corporation -> )
HKLM\...\Run: [PDF24] => C:\Program Files\PDF24\pdf24.exe [587000 2022-01-05] (geek software GmbH -> geek software GmbH)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [464608 2014-09-08] (Samsung Electronics CO., LTD. -> )
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-09-06] (Brother Industries, Ltd.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.) [Datei ist nicht signiert]
HKU\S-1-5-21-3613210961-820715295-3972936120-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2593128 2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3613210961-820715295-3972936120-1001\...\Policies\system: [Wallpaper] C:\Windows\Desktophintergrund.jpg
HKU\S-1-5-21-3613210961-820715295-3972936120-1001\...\Policies\system: [WallpaperStyle] 3
HKU\S-1-5-21-3613210961-820715295-3972936120-1002\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2593128 2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3613210961-820715295-3972936120-1002\...\Policies\system: [Wallpaper] C:\Windows\Desktophintergrund.jpg
HKU\S-1-5-21-3613210961-820715295-3972936120-1002\...\Policies\system: [WallpaperStyle] 3
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\97.0.4692.71\Installer\chrmstp.exe [2022-01-12] (Google LLC -> Google LLC)
GroupPolicy: Beschränkung ? <==== ACHTUNG
GroupPolicy\User: Beschränkung ? <==== ACHTUNG
Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0BE0B2D0-EBB0-43E5-8F0A-E3EF3791E857} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4078440 2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {0EDE20BC-F173-4948-9850-8D51538EE08A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2111.5-0\MpCmdRun.exe [901048 2022-01-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {408FB080-4265-47D3-94A1-8E335D6DD755} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2111.5-0\MpCmdRun.exe [901048 2022-01-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4A0CF3B1-CECA-43FA-85A7-3463113DDAFD} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [6332312 2022-01-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {602FAF52-21BE-42FD-A137-329FEE92C326} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22797704 2021-12-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {67E5D0F8-3BF9-4A39-9787-A295774595A6} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [108872 2022-01-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {6F7FEE58-A782-4FBF-9444-554769CE63EB} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [108872 2022-01-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {8289B91B-D1E2-465E-9F56-B6146A758D50} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [6332312 2022-01-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {9832259F-1E88-40F2-87BD-EAEEA4A707A7} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3613210961-820715295-3972936120-1002 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4078440 2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {B1D5C101-58F9-4CFC-A3DC-BE8BA22E6060} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3613210961-820715295-3972936120-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4078440 2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {BB4328AC-8238-4934-BF10-8EFABF081705} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2111.5-0\MpCmdRun.exe [901048 2022-01-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BB8D155A-48ED-4F10-B614-E7076A083104} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-01-12] (Google LLC -> Google LLC)
Task: {E2909798-6A46-42D1-AC03-19D74BA6B7B3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-01-12] (Google LLC -> Google LLC)
Task: {EC64DA69-2E0D-4207-9AC5-85C9436E2400} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2111.5-0\MpCmdRun.exe [901048 2022-01-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FF5502A1-0841-491D-AAC1-997AA72E828C} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22797704 2021-12-10] (Microsoft Corporation -> Microsoft Corporation)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{c2017bf4-8829-48d0-9877-ae4c9eeb0f0c}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{d98b91d6-bedb-4053-a1a8-5cf291b27940}: [DhcpNameServer] 192.168.178.1
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\****\AppData\Local\Microsoft\Edge\User Data\Default [2022-01-12]
FireFox:
========
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2022-01-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-01-12] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR Profile: C:\Users\****\AppData\Local\Google\Chrome\User Data\Default [2022-01-18]
CHR Extension: (Präsentationen) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2022-01-12]
CHR Extension: (Docs) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2022-01-12]
CHR Extension: (Google Drive) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2022-01-12]
CHR Extension: (YouTube) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2022-01-12]
CHR Extension: (Tabellen) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2022-01-12]
CHR Extension: (Google Docs Offline) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-01-12]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-01-12]
CHR Extension: (Google Mail) - C:\Users\****\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2022-01-12]
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AERTFilters; C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE [117176 2015-08-07] (Andrea Electronics -> Andrea Electronics Corporation)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [Datei ist nicht signiert]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12129128 2021-12-10] (Microsoft Corporation -> Microsoft Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.002.0103.0004\FileSyncHelper.exe [3354520 2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
R2 NVWMI; C:\WINDOWS\system32\nvwmi64.exe [3164816 2015-07-23] (NVIDIA Corporation -> )
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.002.0103.0004\OneDriveUpdaterService.exe [3812248 2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
R2 PDF24; C:\Program Files\PDF24\pdf24.exe [587000 2022-01-05] (geek software GmbH -> geek software GmbH)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5414976 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2111.5-0\NisSrv.exe [2876152 2022-01-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2111.5-0\MsMpEng.exe [128360 2022-01-13] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
R2 SSPORT; C:\WINDOWS\system32\Drivers\SSPORT.sys [14224 2021-04-01] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2022-01-13] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [435432 2022-01-13] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86248 2022-01-13] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2022-01-18 17:59 - 2022-01-18 18:00 - 000016241 _____ C:\Users\Dominic ****\Downloads\FRST.txt
2022-01-18 17:59 - 2022-01-18 18:00 - 000000000 ____D C:\FRST
2022-01-18 17:56 - 2022-01-18 17:56 - 002311680 _____ (Farbar) C:\Users\Dominic ****\Downloads\FRST64.exe
2022-01-18 17:36 - 2022-01-18 17:36 - 000000000 ____D C:\Users\Dominic ****\AppData\Local\OneDrive
2022-01-18 07:05 - 2022-01-18 07:05 - 000000000 ___HD C:\$WinREAgent
2022-01-18 06:57 - 2022-01-18 06:57 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2022-01-18 06:55 - 2022-01-18 06:56 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-01-18 06:55 - 2022-01-18 06:56 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2022-01-13 17:51 - 2022-01-13 17:51 - 000001423 _____ C:\Users\Dominic ****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2022-01-13 17:44 - 2022-01-13 17:44 - 000000000 ____D C:\Users\Dominic ****\AppData\Roaming\Samsung
2022-01-13 17:44 - 2022-01-13 17:44 - 000000000 ____D C:\Users\Dominic ****\AppData\Local\Comms
2022-01-13 17:39 - 2022-01-13 17:39 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers
2022-01-13 17:39 - 2022-01-13 17:39 - 000000000 ____D C:\Users\****\AppData\Roaming\Samsung
2022-01-13 17:39 - 2022-01-13 17:39 - 000000000 ____D C:\ProgramData\Samsung
2022-01-13 17:39 - 2022-01-13 17:39 - 000000000 ____D C:\Program Files\Common Files\Common Desktop Agent
2022-01-13 17:39 - 2022-01-13 17:39 - 000000000 ____D C:\Program Files (x86)\Samsung
2022-01-13 17:38 - 2022-01-13 17:38 - 030849576 _____ (HP Inc.) C:\Users\****\Downloads\WIN_EPM_V2.00.01.34.exe
2022-01-13 17:37 - 2022-01-13 17:37 - 000188488 _____ () C:\Users\****\Downloads\Printer_CVE-2021-3438_update.exe
2022-01-13 17:36 - 2022-01-13 17:36 - 000148031 _____ C:\Users\****\Downloads\Dominic ****.pdf
2022-01-13 17:11 - 2022-01-13 17:12 - 000000000 ____D C:\Users\Dominic ****\AppData\Roaming\ControlCenter4
2022-01-13 16:28 - 2022-01-18 06:56 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3613210961-820715295-3972936120-1002
2022-01-13 16:28 - 2022-01-13 16:28 - 000000000 ____D C:\Users\****\AppData\Roaming\ControlCenter4
2022-01-12 21:07 - 2022-01-18 06:56 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2022-01-12 21:07 - 2022-01-18 06:56 - 000002148 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-01-12 21:07 - 2022-01-18 06:56 - 000000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2022-01-12 21:07 - 2022-01-12 21:07 - 000001000 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24.lnk
2022-01-12 21:07 - 2022-01-12 21:07 - 000000988 _____ C:\Users\Public\Desktop\PDF24.lnk
2022-01-12 21:07 - 2022-01-12 21:07 - 000000000 ___RD C:\Users\Default\OneDrive
2022-01-12 21:06 - 2022-01-12 21:07 - 000000000 ____D C:\Program Files\PDF24
2022-01-12 21:06 - 2022-01-12 21:06 - 000002583 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2022-01-12 21:06 - 2022-01-12 21:06 - 000002579 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2022-01-12 21:06 - 2022-01-12 21:06 - 000002558 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2022-01-12 21:06 - 2022-01-12 21:06 - 000002536 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk
2022-01-12 21:06 - 2022-01-12 21:06 - 000002533 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2022-01-12 21:06 - 2022-01-12 21:06 - 000002500 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2022-01-12 21:06 - 2022-01-12 21:06 - 000002497 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk
2022-01-12 21:06 - 2022-01-12 21:06 - 000002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2022-01-12 21:06 - 2022-01-12 21:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2022-01-12 21:04 - 2022-01-12 21:04 - 158576640 _____ C:\Users\****\Downloads\pdf24-creator-10.7.1.msi
2022-01-12 21:02 - 2022-01-12 21:06 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2022-01-12 21:02 - 2022-01-12 21:02 - 000000000 ____D C:\Program Files\Microsoft Office 15
2022-01-12 20:58 - 2022-01-12 20:58 - 000002128 _____ C:\Users\Public\Desktop\Brother Utilities.lnk
2022-01-12 20:58 - 2022-01-12 20:58 - 000000260 _____ C:\WINDOWS\Brpfx04a.ini
2022-01-12 20:58 - 2022-01-12 20:58 - 000000064 _____ C:\WINDOWS\brpcfx.ini
2022-01-12 20:58 - 2022-01-12 20:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2022-01-12 20:58 - 2022-01-12 20:58 - 000000000 _____ C:\WINDOWS\BRPARAM.INI
2022-01-12 20:57 - 2022-01-12 20:57 - 000000066 _____ C:\WINDOWS\Brfaxrx.ini
2022-01-12 20:57 - 2022-01-12 20:57 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2022-01-12 20:57 - 2022-01-12 20:57 - 000000000 ____D C:\Users\Public\Documents\BrFaxRx
2022-01-12 20:57 - 2022-01-12 20:57 - 000000000 ____D C:\ProgramData\ControlCenter4
2022-01-12 20:57 - 2022-01-12 20:57 - 000000000 ____D C:\Program Files (x86)\ControlCenter4
2022-01-12 20:57 - 2022-01-12 20:57 - 000000000 ____D C:\Program Files (x86)\Browny02
2022-01-12 20:57 - 2022-01-12 20:57 - 000000000 ____D C:\Program Files (x86)\Brother
2022-01-12 20:57 - 2012-09-10 16:31 - 000245760 ____N (brother) C:\WINDOWS\SysWOW64\NSSearch.dll
2022-01-12 20:57 - 2012-07-09 17:19 - 000005120 ____N (Brother Industries Ltd.) C:\WINDOWS\SysWOW64\BrDctF2S.dll
2022-01-12 20:57 - 2012-07-05 12:49 - 001441280 _____ (Brother Industries, Ltd.) C:\WINDOWS\system32\BrWi211a.dll
2022-01-12 20:57 - 2012-07-05 12:32 - 000084480 _____ (Brother Industries, Ltd.) C:\WINDOWS\system32\BrNetSti.dll
2022-01-12 20:57 - 2012-06-05 07:59 - 000025299 _____ (Brother Industries, Ltd) C:\WINDOWS\SysWOW64\BRLM03A.DLL
2022-01-12 20:57 - 2012-03-19 05:09 - 000316928 _____ (brother) C:\WINDOWS\system32\NSSRH64.dll
2022-01-12 20:57 - 2010-09-23 09:14 - 000058880 _____ (Brother Industries,Ltd.) C:\WINDOWS\system32\BrWiaNCp.dll
2022-01-12 20:57 - 2010-09-23 09:13 - 000051712 _____ (Brother Industries,Ltd) C:\WINDOWS\system32\Brnsplg.dll
2022-01-12 20:57 - 2010-05-20 06:33 - 000103792 _____ (Brother Industries Ltd) C:\WINDOWS\SysWOW64\BRRBI100.EXE
2022-01-12 20:57 - 2010-04-01 11:27 - 000278528 _____ (Brother Industries, Ltd.) C:\WINDOWS\system32\BrJDec.dll
2022-01-12 20:57 - 2010-03-15 19:45 - 000073728 ____N (Brother Industries Ltd.) C:\WINDOWS\SysWOW64\BrDctF2.dll
2022-01-12 20:57 - 2010-03-15 17:20 - 000050176 _____ (Brother Industries Ltd.) C:\WINDOWS\SysWOW64\BRPRTINK.DLL
2022-01-12 20:57 - 2010-02-05 03:42 - 000180224 _____ (Brother Industries, Ltd.) C:\WINDOWS\SysWOW64\BROSNMP.DLL
2022-01-12 20:57 - 2009-12-08 16:19 - 000290304 ____N (Brother Industries, Ltd.) C:\WINDOWS\system32\BrfxDA5c.dll
2022-01-12 20:57 - 2007-12-13 22:16 - 000005632 ____N (Brother Industries Ltd.) C:\WINDOWS\SysWOW64\BrDctF2L.dll
2022-01-12 20:57 - 2005-04-22 05:36 - 000143360 _____ C:\WINDOWS\system32\BrSNMP64.dll
2022-01-12 20:57 - 2005-01-17 08:10 - 000045056 _____ C:\WINDOWS\SysWOW64\BRTCPCON.DLL
2022-01-12 20:57 - 2004-08-09 08:00 - 000000114 _____ C:\WINDOWS\SysWOW64\BRLMW03A.INI
2022-01-12 20:57 - 2004-08-09 07:42 - 000077824 _____ (Brother Industries, Ltd.) C:\WINDOWS\SysWOW64\BRLMW03A.DLL
2022-01-12 20:57 - 2003-11-28 18:57 - 000000000 _____ C:\WINDOWS\brdfxspd.dat
2022-01-12 20:56 - 2022-01-12 20:58 - 000000000 ____D C:\ProgramData\Brother
2022-01-12 20:56 - 2022-01-12 20:56 - 000000000 ____D C:\Users\****\Downloads\install
2022-01-12 20:52 - 2022-01-12 20:52 - 140480296 _____ (A.I.SOFT,INC.) C:\Users\****\Downloads\MFC-J5910DW-inst-C1-eu1.EXE
2022-01-12 20:31 - 2022-01-12 20:31 - 000000000 ____D C:\Users\****\Desktop\**** Pferdewaage
2022-01-12 20:31 - 2022-01-12 20:31 - 000000000 ____D C:\Users\****\Desktop\**** Pferdesole
2022-01-12 20:30 - 2022-01-18 17:36 - 000000000 ____D C:\Users\Dominic ****\Desktop\**** Pferdesole
2022-01-12 20:30 - 2022-01-12 20:30 - 000000000 ____D C:\Users\Dominic ****\Desktop\**** Pferdewaage
2022-01-12 20:14 - 2022-01-18 17:58 - 000000000 ____D C:\WINDOWS\twain_64
2022-01-12 20:14 - 2022-01-12 20:14 - 000000000 ____D C:\Users\****\AppData\Local\PeerDistRepub
2022-01-12 20:10 - 2022-01-13 17:43 - 000000000 ___RD C:\Users\Dominic ****\OneDrive
2022-01-12 20:09 - 2022-01-13 17:50 - 000000000 ____D C:\Users\Dominic ****\AppData\Local\Google
2022-01-12 20:09 - 2022-01-13 17:43 - 000000000 ____D C:\Users\Dominic ****\AppData\Local\PlaceholderTileLogoFolder
2022-01-12 20:09 - 2022-01-12 20:09 - 000000000 ___RD C:\Users\Dominic ****\3D Objects
2022-01-12 20:09 - 2022-01-12 20:09 - 000000000 ____D C:\Users\Dominic ****\AppData\Roaming\Adobe
2022-01-12 20:09 - 2022-01-12 20:09 - 000000000 ____D C:\Users\Dominic ****\AppData\Local\Publishers
2022-01-12 20:08 - 2022-01-18 07:16 - 000000000 ____D C:\Users\Dominic ****\AppData\Local\Packages
2022-01-12 20:08 - 2022-01-13 17:11 - 000000000 ____D C:\Users\Dominic ****\AppData\Local\ConnectedDevicesPlatform
2022-01-12 20:08 - 2022-01-12 20:10 - 000000000 ____D C:\Users\Dominic ****
2022-01-12 20:08 - 2022-01-12 20:08 - 000000020 ___SH C:\Users\Dominic ****\ntuser.ini
2022-01-12 20:08 - 2022-01-12 20:08 - 000000000 _SHDL C:\Users\Dominic ****\Vorlagen
2022-01-12 20:08 - 2022-01-12 20:08 - 000000000 _SHDL C:\Users\Dominic ****\Startmenü
2022-01-12 20:08 - 2022-01-12 20:08 - 000000000 _SHDL C:\Users\Dominic ****\Netzwerkumgebung
2022-01-12 20:08 - 2022-01-12 20:08 - 000000000 _SHDL C:\Users\Dominic ****\Lokale Einstellungen
2022-01-12 20:08 - 2022-01-12 20:08 - 000000000 _SHDL C:\Users\Dominic ****\Eigene Dateien
2022-01-12 20:08 - 2022-01-12 20:08 - 000000000 _SHDL C:\Users\Dominic ****\Druckumgebung
2022-01-12 20:08 - 2022-01-12 20:08 - 000000000 _SHDL C:\Users\Dominic ****\Documents\Eigene Videos
2022-01-12 20:08 - 2022-01-12 20:08 - 000000000 _SHDL C:\Users\Dominic ****\Documents\Eigene Musik
2022-01-12 20:08 - 2022-01-12 20:08 - 000000000 _SHDL C:\Users\Dominic ****\Documents\Eigene Bilder
2022-01-12 20:08 - 2022-01-12 20:08 - 000000000 _SHDL C:\Users\Dominic ****\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2022-01-12 20:08 - 2022-01-12 20:08 - 000000000 _SHDL C:\Users\Dominic ****\AppData\Local\Verlauf
2022-01-12 20:08 - 2022-01-12 20:08 - 000000000 _SHDL C:\Users\Dominic ****\AppData\Local\Anwendungsdaten
2022-01-12 20:08 - 2022-01-12 20:08 - 000000000 _SHDL C:\Users\Dominic ****\Anwendungsdaten
2022-01-12 20:08 - 2022-01-12 20:08 - 000000000 ____D C:\Users\Dominic ****\AppData\Local\VirtualStore
2022-01-12 20:01 - 2022-01-12 20:06 - 000000472 __RSH C:\ProgramData\ntuser.pol
2022-01-12 19:43 - 2022-01-12 19:43 - 000002311 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-01-12 19:43 - 2022-01-12 19:43 - 000002270 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2022-01-12 19:43 - 2022-01-12 19:43 - 000000000 ____D C:\Program Files\Google
2022-01-12 19:42 - 2022-01-18 17:58 - 000000000 ____D C:\Program Files (x86)\Google
2022-01-12 19:42 - 2022-01-12 19:50 - 000000000 ____D C:\Users\****\AppData\Local\Google
2022-01-12 19:42 - 2022-01-12 19:42 - 001341272 _____ (Google LLC) C:\Users\****\Downloads\ChromeSetup.exe
2022-01-12 19:42 - 2022-01-12 19:42 - 000003632 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-01-12 19:42 - 2022-01-12 19:42 - 000003508 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2022-01-12 18:56 - 2022-01-18 06:56 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3613210961-820715295-3972936120-1001
2022-01-12 18:55 - 2022-01-12 18:55 - 000000000 ____D C:\ProgramData\NVIDIA
2022-01-12 18:54 - 2022-01-12 21:07 - 000000000 ___RD C:\Users\****\OneDrive
2022-01-12 18:54 - 2022-01-12 18:54 - 000000000 ____D C:\Users\****\AppData\Local\Comms
2022-01-11 23:03 - 2022-01-13 16:29 - 000000000 ____D C:\Users\****\AppData\Local\PlaceholderTileLogoFolder
2022-01-11 23:03 - 2022-01-11 23:03 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2022-01-11 23:02 - 2022-01-18 17:57 - 000000000 ____D C:\Users\****\AppData\Local\Packages
2022-01-11 23:02 - 2022-01-13 16:35 - 000000000 ____D C:\ProgramData\Packages
2022-01-11 23:02 - 2022-01-12 20:09 - 000000000 __RHD C:\Users\Public\AccountPictures
2022-01-11 23:02 - 2022-01-11 23:02 - 000000000 ___RD C:\Users\****\3D Objects
2022-01-11 23:02 - 2022-01-11 23:02 - 000000000 ____D C:\Users\****\AppData\Roaming\Adobe
2022-01-11 23:02 - 2022-01-11 23:02 - 000000000 ____D C:\Users\****\AppData\Local\VirtualStore
2022-01-11 23:02 - 2022-01-11 23:02 - 000000000 ____D C:\Users\****\AppData\Local\Publishers
2022-01-11 23:02 - 2022-01-11 23:02 - 000000000 ____D C:\Users\****\AppData\Local\D3DSCache
2022-01-11 23:02 - 2022-01-11 23:02 - 000000000 ____D C:\Users\****\AppData\Local\ConnectedDevicesPlatform
2022-01-11 23:01 - 2022-01-12 18:54 - 000000000 ____D C:\Users\****
2022-01-11 23:01 - 2022-01-11 23:01 - 000000020 ___SH C:\Users\****\ntuser.ini
2022-01-11 23:01 - 2022-01-11 23:01 - 000000000 _SHDL C:\Users\****\Vorlagen
2022-01-11 23:01 - 2022-01-11 23:01 - 000000000 _SHDL C:\Users\****\Startmenü
2022-01-11 23:01 - 2022-01-11 23:01 - 000000000 _SHDL C:\Users\****\Netzwerkumgebung
2022-01-11 23:01 - 2022-01-11 23:01 - 000000000 _SHDL C:\Users\****\Lokale Einstellungen
2022-01-11 23:01 - 2022-01-11 23:01 - 000000000 _SHDL C:\Users\****\Eigene Dateien
2022-01-11 23:01 - 2022-01-11 23:01 - 000000000 _SHDL C:\Users\****\Druckumgebung
2022-01-11 23:01 - 2022-01-11 23:01 - 000000000 _SHDL C:\Users\****\Documents\Eigene Videos
2022-01-11 23:01 - 2022-01-11 23:01 - 000000000 _SHDL C:\Users\****\Documents\Eigene Musik
2022-01-11 23:01 - 2022-01-11 23:01 - 000000000 _SHDL C:\Users\****\Documents\Eigene Bilder
2022-01-11 23:01 - 2022-01-11 23:01 - 000000000 _SHDL C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2022-01-11 23:01 - 2022-01-11 23:01 - 000000000 _SHDL C:\Users\****\AppData\Local\Verlauf
2022-01-11 23:01 - 2022-01-11 23:01 - 000000000 _SHDL C:\Users\****\AppData\Local\Anwendungsdaten
2022-01-11 23:01 - 2022-01-11 23:01 - 000000000 _SHDL C:\Users\****\Anwendungsdaten
2022-01-11 21:56 - 2022-01-11 21:56 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2022-01-11 21:56 - 2022-01-11 21:56 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2022-01-11 21:56 - 2022-01-11 21:56 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2022-01-11 21:56 - 2015-07-23 04:02 - 003164816 _____ C:\WINDOWS\system32\nvwmi64.exe
2022-01-11 21:56 - 2015-07-23 04:02 - 000112784 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2022-01-11 21:56 - 2015-07-23 04:02 - 000004425 _____ C:\WINDOWS\system32\nvPerfProvider.man
2022-01-11 21:56 - 2015-07-23 02:10 - 006873928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2022-01-11 21:56 - 2015-07-23 02:10 - 003493008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2022-01-11 21:56 - 2015-07-23 02:10 - 002558608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2022-01-11 21:56 - 2015-07-23 02:10 - 000937800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2022-01-11 21:56 - 2015-07-23 02:10 - 000385168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2022-01-11 21:56 - 2015-07-23 02:10 - 000062608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2022-01-11 21:56 - 2015-07-22 05:29 - 005121613 _____ C:\WINDOWS\system32\nvcoproc.bin
2022-01-11 21:55 - 2015-07-23 04:02 - 042730312 _____ C:\WINDOWS\system32\nvcompiler.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 037749064 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 030518928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 022973584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 018376584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 016160440 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 016011680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 015754192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 014511608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 013274904 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 012973680 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 011843384 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 011142984 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2022-01-11 21:55 - 2015-07-23 04:02 - 003351864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 002963208 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 002360976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 002164040 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 001898128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435362.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 001557648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435362.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 001165192 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 001061008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 001053000 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 000991152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 000983368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 000976528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 000176904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 000155280 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 000150832 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 000128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2022-01-11 21:55 - 2015-07-23 04:02 - 000031976 _____ C:\WINDOWS\system32\nvinfo.pb
2022-01-11 21:55 - 2015-04-16 19:03 - 000195912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2022-01-11 21:55 - 2015-04-16 19:03 - 000031552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2022-01-11 21:55 - 2015-04-16 07:19 - 001558848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2022-01-11 21:54 - 2022-01-11 21:54 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2022-01-11 21:54 - 2022-01-11 21:54 - 000000000 ____D C:\WINDOWS\system32\SRSLabs
2022-01-11 21:54 - 2022-01-11 21:54 - 000000000 ____D C:\Program Files\Realtek
2022-01-11 21:53 - 2015-08-07 04:04 - 003310784 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 003269440 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 003000832 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 001624072 _____ (Conexant Systems Inc.) C:\WINDOWS\system32\CX64APO.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 001456472 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 001351688 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000659872 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000588120 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000479992 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000399464 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000393488 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000355496 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000354424 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000354424 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000333288 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000333288 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000244288 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000227024 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000205640 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000202528 _____ (Sonic Focus, Inc.) C:\WINDOWS\system32\SFProc64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000130032 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000120720 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000107248 _____ (Sonic Focus, Inc.) C:\WINDOWS\system32\SFComm64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000103664 _____ (Sonic Focus, Inc.) C:\WINDOWS\system32\SFDAPO64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000103168 _____ (Sonic Focus, Inc.) C:\WINDOWS\system32\SFSAPO64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000102144 _____ (Sonic Focus, Inc.) C:\WINDOWS\system32\SFHAPO64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000102072 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000099432 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000097976 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2022-01-11 21:53 - 2015-08-07 04:04 - 000093152 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2022-01-11 21:53 - 2015-08-07 04:02 - 072132112 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2022-01-11 21:53 - 2015-08-07 04:02 - 004525808 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2022-01-11 21:53 - 2015-08-07 04:02 - 002935552 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2022-01-11 21:53 - 2015-08-07 04:02 - 002721520 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2022-01-11 21:53 - 2015-08-07 04:02 - 001767656 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2022-01-11 21:53 - 2015-08-07 04:02 - 000132544 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2022-01-11 21:53 - 2015-08-07 04:02 - 000033920 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2022-01-11 21:53 - 2015-07-02 11:43 - 002897741 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2022-01-11 21:44 - 2022-01-12 19:00 - 001632020 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\Users\Public\Documents\Eigene Videos
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\Users\Public\Documents\Eigene Musik
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\Users\Public\Documents\Eigene Bilder
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\Users\Default\Vorlagen
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\Users\Default\Startmenü
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\Users\Default\Netzwerkumgebung
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\Users\Default\Lokale Einstellungen
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\Users\Default\Eigene Dateien
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\Users\Default\Druckumgebung
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\Users\Default\Anwendungsdaten
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\ProgramData\Vorlagen
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\ProgramData\Startmenü
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\ProgramData\Dokumente
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\ProgramData\Anwendungsdaten
2022-01-11 21:38 - 2022-01-11 21:38 - 000000000 _SHDL C:\Program Files\Gemeinsame Dateien
2022-01-11 21:32 - 2022-01-11 21:32 - 000000000 ____D C:\WINDOWS\CSC
2022-01-11 21:30 - 2022-01-18 06:56 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-01-11 21:30 - 2022-01-13 17:12 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-01-11 21:30 - 2022-01-12 18:58 - 000003700 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-01-11 21:30 - 2022-01-12 18:58 - 000003576 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-01-11 21:30 - 2022-01-12 18:55 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-01-11 21:30 - 2022-01-11 21:30 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2022-01-11 21:28 - 2022-01-18 17:24 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-01-11 21:28 - 2022-01-11 21:28 - 000257920 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-01-11 21:28 - 2022-01-11 21:28 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2022-01-11 21:26 - 2022-01-11 21:43 - 000000000 ____D C:\Windows.old
2022-01-11 17:20 - 2022-01-11 17:20 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2022-01-11 17:14 - 2022-01-11 21:43 - 000000000 ___DC C:\WINDOWS\Panther
2022-01-11 16:24 - 2022-01-11 17:12 - 000000000 ____D C:\ESD
2022-01-11 16:23 - 2022-01-11 16:23 - 000000000 ___HD C:\$Windows.~WS
2022-01-11 16:12 - 2022-01-11 16:12 - 000000000 ___HD C:\$SysReset
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2022-01-18 17:59 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2022-01-18 17:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-01-18 17:57 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-01-18 17:57 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-01-18 07:20 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-01-18 07:18 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2022-01-18 07:01 - 2019-12-07 15:51 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2022-01-18 07:01 - 2019-12-07 15:51 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2022-01-18 07:01 - 2019-12-07 15:51 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2022-01-18 07:01 - 2019-12-07 15:51 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2022-01-18 07:01 - 2019-12-07 15:51 - 000000000 ____D C:\WINDOWS\system32\winrm
2022-01-18 07:01 - 2019-12-07 15:51 - 000000000 ____D C:\WINDOWS\system32\WCN
2022-01-18 07:01 - 2019-12-07 15:51 - 000000000 ____D C:\WINDOWS\system32\slmgr
2022-01-18 07:01 - 2019-12-07 15:51 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2022-01-18 07:01 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2022-01-18 07:01 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2022-01-18 07:01 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\F12
2022-01-18 07:01 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\dsc
2022-01-18 07:01 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2022-01-18 07:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2022-01-18 07:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2022-01-18 07:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2022-01-18 07:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-01-18 07:00 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2022-01-18 07:00 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2022-01-18 07:00 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2022-01-18 07:00 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-01-18 07:00 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows Defender
2022-01-18 07:00 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2022-01-13 17:43 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2022-01-13 17:12 - 2021-05-07 16:29 - 000000000 ___HD C:\OneDriveTemp
2022-01-12 21:01 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2022-01-12 19:59 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2022-01-12 19:00 - 2019-12-07 15:51 - 000705970 _____ C:\WINDOWS\system32\perfh007.dat
2022-01-12 19:00 - 2019-12-07 15:51 - 000142264 _____ C:\WINDOWS\system32\perfc007.dat
2022-01-12 18:55 - 2020-11-19 01:00 - 000008192 ___SH C:\DumpStack.log.tmp
2022-01-12 18:55 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\appcompat
2022-01-12 18:55 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-01-12 18:54 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-01-11 22:59 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2022-01-11 21:56 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Help
2022-01-11 21:52 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\USOPrivate
2022-01-11 21:43 - 2019-12-07 15:52 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2022-01-11 21:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\spool
2022-01-11 21:38 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows NT
2022-01-11 21:30 - 2019-12-07 10:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2022-01-11 21:27 - 2019-12-07 10:14 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2022-01-11 17:23 - 2019-12-07 10:18 - 000000000 ____D C:\WINDOWS\Setup
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15-01-2022
durchgeführt von **** (18-01-2022 18:00:58)
Gestartet von C:\Users\Dominic ****\Downloads
Microsoft Windows 10 Pro Version 21H2 19044.1288 (X64) (2022-01-11 20:43:07)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
Administrator (S-1-5-21-3613210961-820715295-3972936120-500 - Administrator - Disabled)
Carina Szlapka (S-1-5-21-3613210961-820715295-3972936120-1003 - Limited - Enabled)
DefaultAccount (S-1-5-21-3613210961-820715295-3972936120-503 - Limited - Disabled)
defaultuser100001 (S-1-5-21-3613210961-820715295-3972936120-1005 - Limited - Enabled)
Dominic **** (S-1-5-21-3613210961-820715295-3972936120-1002 - Limited - Enabled) => C:\Users\Dominic ****
**** (S-1-5-21-3613210961-820715295-3972936120-1001 - Administrator - Enabled) => C:\Users\****
Gast (S-1-5-21-3613210961-820715295-3972936120-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-3613210961-820715295-3972936120-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Brother MFL-Pro Suite MFC-J5910DW (HKLM-x32\...\{830F55B6-4398-4B72-A0D8-66397B902C0E}) (Version: 1.1.1.0 - Brother Industries, Ltd.)
Common Desktop Agent (HKLM\...\{031A0E14-0413-4C97-9772-2639B782F46F}) (Version: 1.62.0 - OEM) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 97.0.4692.71 - Google LLC)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 97.0.1072.62 - Microsoft Corporation)
Microsoft Office Professional Plus 2019 - de-de (HKLM\...\ProPlus2019Retail - de-de) (Version: 16.0.14701.20262 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 22.002.0103.0004 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{E876418F-BE59-4D8C-B9A5-74B056B676FA}) (Version: 2.93.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
NVIDIA Grafiktreiber 353.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.62 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA nView 146.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView) (Version: 146.33 - NVIDIA Corporation)
NVIDIA WMI 2.22.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVWMI) (Version: 2.22.0 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.14701.20262 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.14701.20248 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.14701.20262 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.14701.20248 - Microsoft Corporation) Hidden
PDF24 Creator (HKLM\...\{B9361826-E6B2-4147-9736-5A2FB0852615}) (Version: 10.7.1 - geek software GmbH)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7548 - Realtek Semiconductor Corp.)
Samsung Easy Printer Manager (HKLM-x32\...\Samsung Easy Printer Manager) (Version: 2.00.01.34 - HP Inc.)
Samsung Scan Process Machine (HKLM-x32\...\Samsung Scan Process Machine) (Version: 1.03.05.28 - Samsung Electronics Co., Ltd.) Hidden
Packages:
=========
Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_1.22.3.0_x64__6rarf9sa4v8jt [2022-01-12] (Disney)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.1050.0_x64__8wekyb3d8bbwe [2022-01-18] (Microsoft Studios) [MS Ad]
Samsung Printer Experience -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungPrinterExperience_1.3.15.0_x64__3c1yjt4zspk6g [2022-01-12] (Samsung Electronics Co. Ltd.)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0 [2022-01-12] (Spotify AB) [Startup Task]
XING -> C:\Program Files\WindowsApps\XINGAG.XING_4.0.9.0_x86__xpfg3f7e9an52 [2022-01-12] (New Work SE)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\22.002.0103.0004\FileSyncShell64.dll [2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\22.002.0103.0004\FileSyncShell64.dll [2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\22.002.0103.0004\FileSyncShell64.dll [2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\22.002.0103.0004\FileSyncShell64.dll [2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\22.002.0103.0004\FileSyncShell64.dll [2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\22.002.0103.0004\FileSyncShell64.dll [2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\22.002.0103.0004\FileSyncShell64.dll [2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\22.002.0103.0004\FileSyncShell64.dll [2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\22.002.0103.0004\FileSyncShell64.dll [2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\22.002.0103.0004\FileSyncShell64.dll [2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\22.002.0103.0004\FileSyncShell64.dll [2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\22.002.0103.0004\FileSyncShell64.dll [2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\22.002.0103.0004\FileSyncShell64.dll [2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\22.002.0103.0004\FileSyncShell64.dll [2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.002.0103.0004\FileSyncShell64.dll [2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.002.0103.0004\FileSyncShell64.dll [2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.002.0103.0004\FileSyncShell64.dll [2022-01-18] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [00nView] -> {1E9B04FB-F9E5-4718-997B-B8DA88302A48} => C:\Program Files\NVIDIA Corporation\nview\nvshell.dll [2015-07-23] (NVIDIA Corporation -> )
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2015-07-23] (NVIDIA Corporation -> NVIDIA Corporation)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
==================== Verknüpfungen & WMI ========================
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
2022-01-12 20:57 - 2009-02-27 16:38 - 000139264 ____R () [Datei ist nicht signiert] C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2014-09-08 13:38 - 2014-09-08 13:38 - 000051200 _____ () [Datei ist nicht signiert] C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2022-01-12 20:57 - 2005-04-22 05:36 - 000143360 _____ () [Datei ist nicht signiert] C:\WINDOWS\system32\BrSNMP64.dll
2022-01-12 20:57 - 2012-04-23 15:03 - 000380928 ____N (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Browny02\BrMonitor.dll
2022-01-12 20:57 - 2010-09-29 17:07 - 000180224 ____N (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Browny02\BroSNMP.dll
2022-01-12 20:57 - 2011-02-28 11:32 - 000208896 ____N (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Browny02\Brother\BrFirmUpdateCheck.dll
2022-01-12 20:57 - 2012-01-11 14:39 - 000626688 ____N (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Browny02\Brother\BrStMonWRes.dll
2022-01-12 20:57 - 2012-09-06 21:02 - 000155648 ____N (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ControlCenter4\BrCcAssoc.dll
2022-01-12 20:57 - 2012-07-06 13:33 - 000098304 ____N (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ControlCenter4\BrCcDlgRc.dll
2022-01-12 20:57 - 2012-07-06 13:33 - 017694720 ____N (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ControlCenter4\BrCcGrImg.dll
2022-01-12 20:57 - 2012-07-17 13:36 - 000098304 ____N (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ControlCenter4\BrCcLGer.dll
2022-01-12 20:57 - 2012-07-05 12:32 - 000084480 _____ (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\WINDOWS\system32\BrNetSti.dll
2022-01-12 20:58 - 2022-01-12 20:58 - 000065536 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\WINDOWS\WinSxS\x86_microsoft.vc80.openmp_1fc8b3b9a1e18e3b_8.0.50727.6195_none_3b1209fdc9ac7774\vcomp.dll
2022-01-12 21:06 - 2022-01-12 21:06 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems32.dll] C:\Program Files (x86)\Microsoft Office\root\Office16\AppVIsvSubsystems32.dll
2022-01-12 21:06 - 2022-01-12 21:06 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R32.dll] C:\Program Files (x86)\Microsoft Office\root\Office16\c2r32.dll
2018-06-14 09:49 - 2018-06-14 09:49 - 000123904 _____ (Samsung Electronics Co., Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2022-01-12] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2022-01-12] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-01-12] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-01-12] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-01-12] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-01-12] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3613210961-820715295-3972936120-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
HKU\S-1-5-21-3613210961-820715295-3972936120-1002\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{EE687B23-56F5-4921-AB8A-F15F8D9D84F3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{0ABE09B1-125A-42C2-8C09-08D7EC1541EB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{CC45ECAE-6F56-47A4-8F80-E482F5B7E9BC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{6395E22D-101A-4F94-805C-A13B30169BCF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{681756D6-5F04-4D7F-AD0E-AD3FAFBFF3CE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{969C55F1-6340-42F6-8EF1-5C9D9917AF3F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B999A8F5-B0EC-475F-9690-EB2D9A0EE23A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{3415A450-5FE0-4FE2-AA23-63BD7405F683}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BE0ADB30-B21D-4F0F-A0AD-6969CA8E975E}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{D08FEFBD-DD58-437C-B171-D56B3FCBCD46}] => (Allow) C:\Program Files (x86)\Brother\Brmfl11b\FAXRX.exe (Brother Industries, Ltd.) [Datei ist nicht signiert]
FirewallRules: [{826FF8A4-095C-4180-A546-3DD96575E0CF}] => (Allow) C:\Program Files (x86)\Brother\Brmfl11b\FAXRX.exe (Brother Industries, Ltd.) [Datei ist nicht signiert]
FirewallRules: [{37104F15-FAC6-41D3-A011-C0F5630447C8}] => (Allow) LPort=54925
FirewallRules: [{AF6DE64E-A909-4B86-AC6B-32EEDE927244}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FA3D828B-5613-42D3-B8AF-F0FF218184BF}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{044040B6-C951-42B4-A277-715E29BBD61D}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7EBE0770-6A83-43E9-A248-30FA95AB3729}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FE6D2754-1B54-45EC-AFEA-6B8C36C4CDE0}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3108ACBF-7725-4CCE-B427-FAFBA69878C2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{4A20E063-DB51-4755-A983-2C7D36CD9966}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{EE2CB498-A124-4104-B317-AC9BB635B906}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{C379196C-AC0E-464C-98B9-0FC8A479620F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{0B840739-7530-4D68-BD89-A66360197598}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{B32EE0D8-5347-4A23-972B-4AB14AB919DD}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{71EEB54A-A42B-4752-BD8E-ADF263869058}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\EasyPrinterManagerV2.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{CF5DF3B1-CA43-4815-B8E6-FDC0E6377B0E}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\OrderSupplies.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{14B59A26-F722-431D-9D6F-288BE6EBD134}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2AlertList.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{9B08FC0B-50CD-40A3-B07B-948D1A1C2F4C}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2Migrator.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{2CE95D36-3CD1-4A97-8DA1-B538C8031F8C}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
==================== Wiederherstellungspunkte =========================
18-01-2022 06:56:57 Windows Modules Installer
==================== Fehlerhafte Geräte im Gerätemanager ============
Name: PS/2-Standardtastatur
Description: PS/2-Standardtastatur
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (01/13/2022 05:34:02 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0xC004C008
SKU-ID=5f472f1e-eb0a-4170-98e2-fb9e7f6ff535
Error: (01/13/2022 05:34:02 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: Lizenzerwerb-Fehlerdetails.
hr=0xC004C008
Error: (01/13/2022 05:33:55 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0xC004C008
SKU-ID=5f472f1e-eb0a-4170-98e2-fb9e7f6ff535
Error: (01/13/2022 05:33:55 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: Lizenzerwerb-Fehlerdetails.
hr=0xC004C008
Error: (01/13/2022 05:20:21 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0xC004C060
SKU-ID=5f472f1e-eb0a-4170-98e2-fb9e7f6ff535
Error: (01/13/2022 05:20:21 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: Lizenzerwerb-Fehlerdetails.
hr=0xC004C060
Error: (01/13/2022 05:11:54 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL" in Zeile 1.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
Error: (01/12/2022 09:24:35 PM) (Source: Software Protection Platform Service) (EventID: 1014) (User: )
Description: Fehler beim Erwerb der Endbenutzerlizenz. hr=0xC004C060
SKU-ID=5f472f1e-eb0a-4170-98e2-fb9e7f6ff535
Systemfehler:
=============
Error: (01/18/2022 07:01:40 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x8024200d fehlgeschlagen: 2022-01 Kumulatives Update für Windows 10 Version 21H2 für x64-basierte Systeme (KB5009543)
Error: (01/18/2022 06:55:34 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80240017 fehlgeschlagen: Update für Windows Defender Antivirus-Antischadsoftwareplattform – KB4052623 (Version 4.18.2001.10)
Error: (01/13/2022 05:12:26 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-JMT2TI6)
Description: Der Server "{FD06603A-2BDF-4BB1-B7DF-5DC68F353601}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (01/13/2022 04:34:13 PM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)
Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.
Error: (01/13/2022 04:33:22 PM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)
Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.
Error: (01/12/2022 08:09:00 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (01/12/2022 08:09:00 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (01/12/2022 08:09:00 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Windows Defender:
================
Date: 2022-01-18 17:41:09
Description:
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/Keygen&threatid=2147593794&enterprise=0
Name: HackTool:Win32/Keygen
Schweregrad: Hoch
Kategorie: Tool
Pfad: file:_C:\Users\Dominic ****\Desktop\VueScan x64 v9.7.50+ Patcher v1.2.exe
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: DESKTOP-JMT2TI6\Dominic ****
Prozessname: C:\Windows\explorer.exe
Sicherheitsversion: AV: 1.355.2104.0, AS: 1.355.2104.0, NIS: 1.355.2104.0
Modulversion: AM: 1.1.18800.4, NIS: 1.1.18800.4
Date: 2022-01-18 17:40:56
Description:
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/Keygen&threatid=2147593794&enterprise=0
Name: HackTool:Win32/Keygen
Schweregrad: Hoch
Kategorie: Tool
Pfad: file:_C:\Users\Dominic ****\Desktop\VueScan x64 v9.7.50+ Patcher v1.2.exe
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: DESKTOP-JMT2TI6\Dominic ****
Prozessname: C:\Windows\explorer.exe
Sicherheitsversion: AV: 1.355.2104.0, AS: 1.355.2104.0, NIS: 1.355.2104.0
Modulversion: AM: 1.1.18800.4, NIS: 1.1.18800.4
Date: 2022-01-18 17:40:52
Description:
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Occamy.C61&threatid=2147756054&enterprise=0
Name: Trojan:Win32/Occamy.C61
Schweregrad: Schwerwiegend
Kategorie: Trojaner
Pfad: file:_C:\Users\Dominic ****\Desktop\VueScan KeyGen v1.1.exe
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: DESKTOP-JMT2TI6\Dominic ****
Prozessname: C:\Windows\explorer.exe
Sicherheitsversion: AV: 1.355.2104.0, AS: 1.355.2104.0, NIS: 1.355.2104.0
Modulversion: AM: 1.1.18800.4, NIS: 1.1.18800.4
Date: 2022-01-18 17:40:42
Description:
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/Keygen&threatid=2147593794&enterprise=0
Name: HackTool:Win32/Keygen
Schweregrad: Hoch
Kategorie: Tool
Pfad: file:_C:\Users\Dominic ****\Desktop\VueScan x32 v9.7.50+ Patcher v1.2.exe; file:_C:\Users\Dominic ****\Desktop\VueScan x64 v9.7.50+ Patcher v1.2.exe
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: DESKTOP-JMT2TI6\Dominic ****
Prozessname: C:\Windows\explorer.exe
Sicherheitsversion: AV: 1.355.2104.0, AS: 1.355.2104.0, NIS: 1.355.2104.0
Modulversion: AM: 1.1.18800.4, NIS: 1.1.18800.4
Date: 2022-01-18 17:40:38
Description:
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/Keygen&threatid=2147593794&enterprise=0
Name: HackTool:Win32/Keygen
Schweregrad: Hoch
Kategorie: Tool
Pfad: file:_C:\Users\Dominic ****\Desktop\VueScan x64 v9.7.50+ Patcher v1.2.exe
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: DESKTOP-JMT2TI6\Dominic ****
Prozessname: C:\Windows\explorer.exe
Sicherheitsversion: AV: 1.355.2104.0, AS: 1.355.2104.0, NIS: 1.355.2104.0
Modulversion: AM: 1.1.18800.4, NIS: 1.1.18800.4
==================== Speicherinformationen ===========================
BIOS: Hewlett-Packard K01 v02.57 11/16/2012
Hauptplatine: Hewlett-Packard 3397
Prozessor: Intel(R) Core(TM) i3-3220 CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 80%
Installierter physikalischer RAM: 8139.04 MB
Verfügbarer physikalischer RAM: 1555.58 MB
Summe virtueller Speicher: 14272.09 MB
Verfügbarer virtueller Speicher: 2196.06 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:237.86 GB) (Free:176.91 GB) NTFS
Drive e: () (Removable) (Total:3.73 GB) (Free:2.87 GB) FAT32
\\?\Volume{20fce6ec-ff0a-4511-ba88-f2b4b7489d28}\ () (Fixed) (Total:0.5 GB) (Free:0.06 GB) NTFS
\\?\Volume{709f8ae8-ac44-403d-96b0-9a70831e7e74}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partitionstabelle ====================
==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: F096FAED)
Partition: GPT.
==========================================================
Disk: 1 (Protective MBR) (Size: 3.7 GB) (Disk ID: 00000000)
Partition: GPT.
==================== Ende von Addition.txt =======================
Code:
ATTFilter Untersuchungsergebnis der Verknüpfungen des Benutzers (x64) Version: 15-01-2022
durchgeführt von ***** (18-01-2022 18:02:03)
Gestartet von C:\Users\Dominic ****\Downloads
Start-Modus: Normal
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\MSACCESS.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk -> C:\Program Files\Microsoft OneDrive\OneDrive.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTE.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24.lnk -> C:\Program Files\PDF24\pdf24-Toolbox.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\MSPUB.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\Aufzeichnungs-Manager von Skype for Business.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\OcPubMgr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\Office-Spracheinstellungen.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\SETLANG.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\Telemetriedashboard für Office.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\msotd.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\Telemetrieprotokoll für Office.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\msoev.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother\Brother Utilities.lnk -> C:\Program Files (x86)\Brother\BrLauncher\BrLauncher.exe (Brother Industories, Ltd.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (32-bit).lnk -> C:\Windows\SysWOW64\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (64-bit).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Print Management.lnk -> C:\Windows\System32\printmanagement.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\RecoveryDrive.lnk -> C:\Windows\System32\RecoveryDrive.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Registry Editor.lnk -> C:\Windows\regedit.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Defender Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Quick Assist.lnk -> C:\Windows\System32\quickassist.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Steps Recorder.lnk -> C:\Windows\System32\psr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\Links\Desktop.lnk -> C:\Users\Dominic ****\Desktop ()
Shortcut: C:\Users\Dominic ****\Links\Downloads.lnk -> C:\Users\Dominic ****\Downloads ()
Shortcut: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outlook.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30
Shortcut: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Windows\SendTo\Bluetooth-Dateiübertragung.LNK -> C:\Windows\System32\fsquirt.exe (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC)
Shortcut: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC)
Shortcut: C:\Users\Dominic ****\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()
Shortcut: C:\Users\Dominic ****\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()
Shortcut: C:\Users\Dominic ****\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)
Shortcut: C:\Users\Dominic ****\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation)
Shortcut: C:\Users\*****\Links\Desktop.lnk -> C:\Users\*****\Desktop ()
Shortcut: C:\Users\*****\Links\Downloads.lnk -> C:\Users\*****\Downloads ()
Shortcut: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30
Shortcut: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Roaming\Microsoft\Windows\SendTo\Bluetooth-Dateiübertragung.LNK -> C:\Windows\System32\fsquirt.exe (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC)
Shortcut: C:\Users\*****\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC)
Shortcut: C:\Users\*****\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()
Shortcut: C:\Users\*****\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()
Shortcut: C:\Users\*****\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)
Shortcut: C:\Users\*****\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation)
Shortcut: C:\Users\Public\Desktop\Brother Utilities.lnk -> C:\Program Files (x86)\Brother\BrLauncher\BrLauncher.exe (Brother Industories, Ltd.)
Shortcut: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC)
Shortcut: C:\Users\Public\Desktop\PDF24.lnk -> C:\Program Files\PDF24\pdf24-Toolbox.exe ()
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /7
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers\Order Supplies.lnk -> C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2DotNetHandler.exe () -> /ordersupplies
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers\Samsung Easy Printer Manager.lnk -> C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2DotNetHandler.exe () -> /epm
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\Database Compare.lnk -> C:\Program Files (x86)\Microsoft Office\root\Client\AppVLP.exe (Microsoft Corporation) -> "C:\Program Files (x86)\Microsoft Office\Root\Office16\DCF\DATABASECOMPARE.EXE"
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\Spreadsheet Compare.lnk -> C:\Program Files (x86)\Microsoft Office\root\Client\AppVLP.exe (Microsoft Corporation) -> "C:\Program Files (x86)\Microsoft Office\Root\Office16\DCF\SPREADSHEETCOMPARE.EXE"
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Security Configuration Management.lnk -> C:\Windows\System32\secpol.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.AdministrativeTools
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageNetworkStatus
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPagePCSystemInfo
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageScreenPowerAndSleep
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAppsSizes
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{52205fd8-5dfb-447d-801a-d0b52f2e83e1}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}
ShortcutWithArgument: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.AdministrativeTools
ShortcutWithArgument: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Dominic ****\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE (Microsoft Corporation) -> /recycle
ShortcutWithArgument: C:\Users\Dominic ****\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageNetworkStatus
ShortcutWithArgument: C:\Users\Dominic ****\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager
ShortcutWithArgument: C:\Users\Dominic ****\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPagePCSystemInfo
ShortcutWithArgument: C:\Users\Dominic ****\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageScreenPowerAndSleep
ShortcutWithArgument: C:\Users\Dominic ****\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAppsSizes
ShortcutWithArgument: C:\Users\Dominic ****\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Dominic ****\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Dominic ****\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{52205fd8-5dfb-447d-801a-d0b52f2e83e1}
ShortcutWithArgument: C:\Users\Dominic ****\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0
ShortcutWithArgument: C:\Users\Dominic ****\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}
ShortcutWithArgument: C:\Users\Dominic ****\AppData\Local\Microsoft\Edge\User Data\Default\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory=Default
ShortcutWithArgument: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.AdministrativeTools
ShortcutWithArgument: C:\Users\*****\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\*****\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageNetworkStatus
ShortcutWithArgument: C:\Users\*****\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager
ShortcutWithArgument: C:\Users\*****\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPagePCSystemInfo
ShortcutWithArgument: C:\Users\*****\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageScreenPowerAndSleep
ShortcutWithArgument: C:\Users\*****\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAppsSizes
ShortcutWithArgument: C:\Users\*****\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\*****\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\*****\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{52205fd8-5dfb-447d-801a-d0b52f2e83e1}
ShortcutWithArgument: C:\Users\*****\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0
ShortcutWithArgument: C:\Users\*****\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}
InternetURL: C:\Users\Dominic ****\Favorites\Bing.url -> URL: hxxp://go.microsoft.com/fwlink/p/?LinkId=255142
InternetURL: C:\Users\*****\Favorites\Bing.url -> URL: hxxp://go.microsoft.com/fwlink/p/?LinkId=255142
==================== Ende vom Shortcut.txt =============================
|
| Themen zu Windows 10 - Trojan:Win32/Occamy.C61 |
| administrator, cpu, defender, error, explorer, firewall, google, iexplore.exe, installation, internet, internet explorer, monitor, mozilla, nvidia, ordner, pdf, performance, prozesse, realtek, registry, scan, software, trojan, updates, windows |
Baum-Darstellung