Hallo!
Ich war so blöd und habe einen email-Anhang namens
Assignment-report.vbs
geöffnet. Es ist dabei nichts sichtbares passiert, aber mir war schnell klar, dass das falsch war. Ich habe sofort einen Scan mit Windows defender gemacht, ohne Ergebnis. Dann hab ich auf einem anderen Rechner einen USB-Stick mit dem aktuellen ct- desinfect gebaut und beim scannen unter ubuntu mit drei virenscannern auch nichts gefunden. Nun habe ich das file (immer noch in ubuntu) auf virus-total hochgeladen und bekomme bei
avast Script:SNH-gen [Trj] und bei
Kaspersky HEUR:Trojan-Downloader.Script.Generic angezeigt.
Leider bin ich, was Viren betrifft, ziemlich ahnungslos und normalerweise sehr vorsichtig, diesmal leider nicht. Könnt ihr mir sagen, wie ich weiter vorgehen soll, ich bin jetzt ziemlich unsicher?
Danke im Voraus, liebe Grüsse, Peter

Lass bitte die Finger von desinfect, das kann dein System wenn du was Falsches löscht zerstören.

Lies bitte hier die Hinweise. Ohne FRST-Logs ist keine Hilfe möglich!

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 30-01-2022
durchgeführt von peter (Administrator) auf MASCHINE (ASUS System Product Name) (01-02-2022 15:07:30)
Gestartet von C:\Users\peter\Desktop
Geladene Profile: peter
Plattform: Microsoft Windows 11 Pro Version 21H2 22000.466 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Opera
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\aakore.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\bckp_amgr.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\monitoring-mini.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\task-manager.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis International GmbH -> Acronis International GmbH.) C:\Program Files (x86)\Acronis\Agent\bin\adp-agent.exe
(Acronis International GmbH -> Acronis International GmbH.) C:\Program Files (x86)\Acronis\Agent\bin\adp-rest-util.exe
(Acronis International GmbH -> Acronis International GmbH.) C:\Program Files (x86)\Acronis\Agent\bin\updater.exe
(Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\Adobe Installer.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud Helper.exe <2>
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe <2>
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems Incorporated) C:\Program Files\WindowsApps\AdobeNotificationClient_2.0.1.8_x86__enpm4xejd91yc\AdobeNotificationClient.exe
(Adobe Systems Incorporated) C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_12.5.74.0_x86__nzyj5cx40ttqa\iCloud\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_12.5.74.0_x86__nzyj5cx40ttqa\iCloud\APSDaemon.exe
(Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_12.5.74.0_x86__nzyj5cx40ttqa\iCloud\iCloudDrive.exe
(Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_12.5.74.0_x86__nzyj5cx40ttqa\iCloud\iCloudServices.exe
(Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_12.5.74.0_x86__nzyj5cx40ttqa\iCloud\secd.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(DTS, Inc. -> ) C:\Windows\System32\DTS\PC\APO3x\DTSAPO3Service.exe
(geek software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe
(Gemalto, Inc. -> SafeNet, Inc.) C:\Program Files (x86)\Common Files\Aladdin Shared\HASP\hasplms.exe
(Gemalto, Inc. -> SafeNet, Inc.) C:\Program Files (x86)\Common Files\Aladdin Shared\HASP\hasplmv.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler64.exe
(Heiko Schröder -> Heiko Schröder Softwareentwicklung) C:\Program Files (x86)\BFU Service\BFUService64.exe
(LC Technology International, Inc. -> Corsair) C:\Program Files (x86)\Corsair SSD Toolbox\CSSDTService.exe
(Logitech Inc -> Logitech) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOverlay.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech Inc -> Logitech, Inc.) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_3.60.12001.0_x64__8wekyb3d8bbwe\gamingservices.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_3.60.12001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Scans\MsMpEngCP.exe
(Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b7184c0e1c94c102\Display.NvContainer\NVDisplay.Container.exe <2>
(OpenJS Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(OpenJS Foundation -> Node.js) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\libs\node.exe
(Opera Software AS -> Opera Software) C:\Users\peter\AppData\Local\Programs\Opera\82.0.4227.58\opera_crashreporter.exe
(Opera Software AS -> Opera Software) C:\Users\peter\AppData\Local\Programs\Opera\opera.exe <13>
(Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Users\peter\AppData\Local\Temp\is-AGO4T.tmp\RtHubSSContrl.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(Schneider Electric -> Schneider Electric) [Datei ist nicht signiert] C:\Program Files (x86)\APC\PowerChute Personal Edition\dataserv.exe
(Schneider Electric -> Schneider Electric) [Datei ist nicht signiert] C:\Program Files (x86)\APC\PowerChute Personal Edition\mainserv.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\Epson Software\Download Navigator\EPSDNMON.EXE
(SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSvc.exe
(Signal Messenger, LLC -> Open Whisper Systems) C:\Users\peter\AppData\Local\Programs\signal-desktop\Signal.exe <5>
(Wacom Co., Ltd. -> Wacom Co. Ltd.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(Wacom Co., Ltd. -> Wacom Co. Ltd.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(Wacom Co., Ltd. -> Wacom Co. Ltd.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(Wacom Co., Ltd. -> Wacom Co. Ltd.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(Wacom Technology Corp. -> Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe
(X-Rite Incorporated -> X-Rite Inc.) C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1002272 2019-11-12] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3426560 2021-11-23] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [644000 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3136136 2020-11-20] (Logitech Inc -> Logitech, Inc.)
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [1675680 2021-09-24] (Logitech Inc -> Logitech, Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [PDF24] => C:\Program Files\PDF24\pdf24.exe [587000 2021-10-27] (geek software GmbH -> geek software GmbH)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [612304 2019-11-18] (NIKON CORPORATION -> Nikon Corporation)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6206360 2021-03-23] (Acronis International GmbH -> )
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\tib_mounter_monitor.exe [446392 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [10585376 2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [Display] => C:\Program Files (x86)\APC\PowerChute Personal Edition\DataCollectionLauncher.exe [480176 2019-06-07] (Schneider Electric -> Schneider Electric) [Datei ist nicht signiert]
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [781552 2022-01-31] (Adobe Inc. -> Adobe Inc.)
HKLM\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\Update\OneDriveSetup.exe"
HKLM\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe"
HKU\S-1-5-19\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2617760 2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2617760 2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3592911485-1382985269-1930872061-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2617760 2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3592911485-1382985269-1930872061-1001\...\Run: [EPSON-R3000 (Epson Stylus Photo R3000)] => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIGHE.EXE [224768 2010-01-12] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3592911485-1382985269-1930872061-1001\...\Run: [Opera Browser Assistant] => C:\Users\peter\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [4105424 2021-10-14] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-3592911485-1382985269-1930872061-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3592911485-1382985269-1930872061-1001\...\Run: [EPSDNMON] => C:\Program Files (x86)\Epson Software\Download Navigator\EPSDNMON.EXE [346712 2020-07-27] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-3592911485-1382985269-1930872061-1001\...\Run: [Epson Stylus Photo R3000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIGHE.EXE [224768 2010-01-12] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3592911485-1382985269-1930872061-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4267432 2021-11-22] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-3592911485-1382985269-1930872061-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [7089888 2021-12-24] (Adobe Inc. -> Adobe Systems Incorporated)
HKLM\...\Print\Monitors\Epson Stylus Photo R3000 64MonitorBE: C:\Windows\system32\E_ILMGHE.DLL [118784 2008-11-12] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\HP 7012 Status Monitor: C:\Windows\system32\hpinksts7012LM.dll [328704 2014-03-03] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Co.)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] -> 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\APC UPS Status.lnk [2021-09-17]
ShortcutTarget: APC UPS Status.lnk -> C:\Program Files (x86)\APC\PowerChute Personal Edition\Display.exe (Schneider Electric -> Schneider Electric) [Datei ist nicht signiert]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\i1Profiler Tray.lnk [2021-09-17]
ShortcutTarget: i1Profiler Tray.lnk -> C:\Program Files (x86)\X-Rite\i1Profiler\i1ProfilerTray.exe (X-Rite Incorporated -> )
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\XRGamma.lnk [2021-10-09]
ShortcutTarget: XRGamma.lnk -> C:\Program Files (x86)\Dell\Dell UltraSharp Calibration Solution\XRGamma.exe (LOGO Kommunikations- und Drucktechnik GmbH & Co. KG) [Datei ist nicht signiert]
Startup: C:\Users\peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2021-11-22]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {051FA443-D2AC-4DD2-8BDF-F2B32F1E48D6} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138592 2022-01-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {115442E1-AC40-4DAA-A564-3CD50DE0D556} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138592 2022-01-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {2629689E-EC27-46B2-8EC1-6870231C96F5} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-11] (Dropbox, Inc -> Dropbox, Inc.)
Task: {2BC255B5-7C40-4C52-B05B-0599649AA595} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-09-17] (Google LLC -> Google LLC)
Task: {36F7EE71-336A-4767-98B9-315DBCA42062} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22844272 2022-01-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {3AA90591-038D-4083-9290-D1E482AB54DE} - System32\Tasks\X-Rite Device Services Software Updater => C:\Program Files (x86)\X-Rite\Devices\Services\XRD Software Update.exe [31656 2020-06-01] (X-Rite Incorporated -> X-Rite Inc.)
Task: {3BC0A53F-D9F8-4AC4-96DF-39BDAFB19147} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3426560 2021-11-23] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {57BADAA7-49E3-4C27-B67B-D5C8B46CF327} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22844272 2022-01-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {75D0786F-4A49-40B9-B4CE-3752D3FF0411} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-09-17] (Google LLC -> Google LLC)
Task: {78E3BA6E-E326-462D-B237-D17C5BAE7E61} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {90E826F2-384C-4BA9-94C1-86DE87613F9D} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4079520 2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {9207F62E-2966-4774-9095-E3AA2775FFB5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-17] (Adobe Inc. -> Adobe Inc.)
Task: {9703D37A-9BFA-4EE0-B8D3-34A3D957E5DE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A0CECACD-8481-47AC-B67B-105483A1A2F0} - System32\Tasks\Opera scheduled Autoupdate 1631770691 => C:\Users\peter\AppData\Local\Programs\Opera\launcher.exe [2333904 2022-01-26] (Opera Software AS -> Opera Software)
Task: {AB69BB1C-F927-49AB-8AEE-5D9743298753} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B4F4D69D-CC2B-4A48-AFBD-878B8DED7905} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-11] (Dropbox, Inc -> Dropbox, Inc.)
Task: {B57CF521-E3D8-49DB-9161-B2B1B1F741C3} - System32\Tasks\Opera scheduled assistant Autoupdate 1631770693 => C:\Users\peter\AppData\Local\Programs\Opera\launcher.exe [2333904 2022-01-26] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\peter\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (Keine Datei)
Task: {E2CD45B4-3C53-4133-AA54-52F4465A55E6} - System32\Tasks\MicrosoftEdgeShadowStackRollbackTask => C:\Program Files (x86)\Microsoft\Edge\Application\97.0.1072.76\Installer\setup.exe [3118472 2022-01-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {EAC2942A-6276-4DAF-A6E9-7FF0FCCAEB35} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3592911485-1382985269-1930872061-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4079520 2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {F8B78D45-DD0B-4B18-A3A4-2A7B59971DF0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\X-Rite Device Services Software Updater.job => C:\Program Files (x86)\X-Rite\Devices\Services\XRD Software Update.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\..\Interfaces\{07eb9d8f-82ab-4155-96c7-0de95fec8679}: [NameServer] 10.0.0.138
Tcpip\..\Interfaces\{bdf3fe45-0036-48f0-94c9-22bb96d5a0dd}: [DhcpNameServer] 192.168.1.1

Edge: 
=======
Edge Profile: C:\Users\peter\AppData\Local\Microsoft\Edge\User Data\Default [2022-01-22]

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2021-10-06] [ist nicht signiert]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2021-12-24] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2022-01-31] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2022-01-31] (Adobe Inc. -> Adobe Systems)

Opera: 
=======
OPR Profile: C:\Users\peter\AppData\Roaming\Opera Software\Opera Stable [2022-02-01]
OPR Notifications: Opera Stable -> hxxps://home.comcast.net; hxxps://www.tigerhome.de; hxxps://www.tomtom.com; hxxps://www.wienerzeitung.at
OPR StartupUrls: Opera Stable -> "hxxps://www.wienerzeitung.at/"
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\peter\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2022-01-27]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\peter\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2021-09-19]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 aakore; C:\Program Files (x86)\Acronis\Agent\aakore.exe [9022120 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [12952232 2021-03-23] (Acronis International GmbH -> )
S4 AcronisCyberProtectionService; C:\Program Files\Acronis\CyberProtect\cyber-protect-service.exe [1425256 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1052280 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-17] (Adobe Inc. -> Adobe Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [844528 2022-01-31] (Adobe Inc. -> Adobe Inc.)
R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6391536 2021-09-17] (Acronis International GmbH -> )
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3849472 2021-11-23] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3617024 2021-11-23] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 APC Data Service; C:\Program Files (x86)\APC\PowerChute Personal Edition\dataserv.exe [14256 2019-06-07] (Schneider Electric -> Schneider Electric) [Datei ist nicht signiert]
R2 APC UPS Service; C:\Program Files (x86)\APC\PowerChute Personal Edition\mainserv.exe [4261808 2019-06-07] (Schneider Electric -> Schneider Electric) [Datei ist nicht signiert]
S2 AsusUpdateCheck; C:\WINDOWS\System32\AsusUpdateCheck.exe [842128 2022-02-01] (ASUSTeK Computer Inc. -> )
R2 BFUService; C:\Program Files (x86)\BFU Service\BFUService64.exe [7581584 2021-09-07] (Heiko Schröder -> Heiko Schröder Softwareentwicklung)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12119432 2022-01-10] (Microsoft Corporation -> Microsoft Corporation)
R2 CorsairSSDToolBox; C:\Program Files (x86)\Corsair SSD Toolbox\CSSDTService.exe [2509752 2021-06-18] (LC Technology International, Inc. -> Corsair)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-11] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-11] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [44328 2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
R2 DTSAPO3Service; C:\WINDOWS\System32\DTS\PC\APO3x\DTSAPO3Service.exe [222104 2020-03-20] (DTS, Inc. -> )
R2 EpsonBidirectionalService; C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [Datei ist nicht signiert]
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.017.0123.0001\FileSyncHelper.exe [3377008 2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
R2 hasplms; C:\Program Files (x86)\Common Files\Aladdin Shared\HASP\hasplms.exe [5730312 2020-05-29] (Gemalto, Inc. -> SafeNet, Inc.)
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4878840 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [2136488 2021-03-23] (Acronis International GmbH -> )
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.017.0123.0001\OneDriveUpdaterService.exe [3850088 2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
R2 PDF24; C:\Program Files\PDF24\pdf24.exe [587000 2021-10-27] (geek software GmbH -> geek software GmbH)
R2 RealtekHubService; C:\Users\peter\AppData\Local\Temp\is-AGO4T.tmp\RtHubSSContrl.exe [80352 2019-01-25] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) <==== ACHTUNG
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6078536 2021-12-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7398360 2021-03-23] (Acronis International GmbH -> )
S3 Tib Mounter Service; C:\Program Files (x86)\Common Files\Acronis\TibMounter64\tib_mounter_service.exe [5910328 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe [2876152 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe [128360 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 xrdd.exe; C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe [91048 2020-06-01] (X-Rite Incorporated -> X-Rite Inc.)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b7184c0e1c94c102\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b7184c0e1c94c102\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 aksdf; C:\Windows\system32\drivers\aksdf.sys [389560 2020-05-29] (Gemalto, Inc. -> SafeNet, Inc.)
R2 aksfridge; C:\Windows\system32\drivers\aksfridge.sys [510800 2020-05-29] (Gemalto, Inc. -> SafeNet, Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R1 Asusgio2; C:\Windows\system32\drivers\AsIO2.sys [33832 2019-04-09] (ASUSTeK Computer Inc. -> )
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [367096 2021-03-23] (Bitdefender SRL -> Bitdefender)
R2 file_protector; C:\WINDOWS\System32\DRIVERS\file_protector.sys [720392 2021-09-17] (Acronis International GmbH -> Acronis International GmbH)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [392840 2021-09-17] (Acronis International GmbH -> Acronis International GmbH)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [1970104 2020-05-29] (Gemalto, Inc. -> SafeNet, Inc.)
S3 Hsp; C:\WINDOWS\System32\drivers\Hsp.sys [110920 2022-01-15] (Microsoft Windows -> Microsoft Corporation)
S0 ngelam; C:\WINDOWS\System32\drivers\ngelam.sys [15816 2021-03-23] (Microsoft Windows Early Launch Anti-Malware Publisher -> Acronis International GmbH)
R1 ngscan; C:\WINDOWS\System32\DRIVERS\ngscan.sys [179104 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R3 rtcx21; C:\WINDOWS\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_1976941f1bb3e663\rtcx21x64.sys [609816 2022-01-05] (Microsoft Windows Hardware Compatibility Publisher -> Realtek)
R3 RtsUpx; C:\WINDOWS\system32\drivers\RtsUpx.sys [18136 2021-10-09] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)
S3 tib; C:\WINDOWS\system32\DRIVERS\tib.sys [887032 2021-09-17] (Acronis International GmbH -> Acronis International GmbH)
R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [175648 2021-09-17] (Acronis International GmbH -> Acronis International GmbH)
S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [694920 2021-09-17] (Acronis International GmbH -> Acronis International GmbH)
R3 TT4650S2_SRV_64; C:\WINDOWS\system32\drivers\ttConnect4650s2_64.sys [436864 2021-09-17] (City Com Gesellschaft f. Kabel Kommunikations Systeme mbH -> CityCom GmbH)
R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [334984 2021-09-17] (Acronis International GmbH -> Acronis International GmbH)
R0 volume_tracker; C:\WINDOWS\System32\DRIVERS\volume_tracker.sys [251016 2021-09-17] (Acronis International GmbH -> Acronis International GmbH)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2021-12-16] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [435432 2021-12-16] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86248 2021-12-16] (Microsoft Windows -> Microsoft Corporation)
R2 WinI2C-DDC; C:\Windows\system32\drivers\DDCDrv.sys [20832 2020-07-20] (PC Micro Systems Inc. -> Nicomsoft Ltd.)
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2022-02-01 15:07 - 2022-02-01 15:08 - 000033594 _____ C:\Users\peter\Desktop\FRST.txt
2022-02-01 15:06 - 2022-02-01 15:07 - 000000000 ____D C:\FRST
2022-02-01 15:06 - 2022-02-01 15:06 - 002311680 _____ (Farbar) C:\Users\peter\Desktop\FRST64.exe
2022-02-01 09:21 - 2021-05-30 18:53 - 1421828096 _____ C:\Users\peter\Desktop\ct_2021_12.iso
2022-02-01 09:07 - 2022-02-01 09:49 - 000000000 ____D C:\Users\peter\AppData\Local\FSDART
2022-02-01 09:07 - 2022-02-01 09:08 - 000000000 ____D C:\ProgramData\F-Secure
2022-02-01 09:07 - 2022-02-01 09:07 - 000000000 ____D C:\Users\peter\AppData\Local\F-Secure
2022-02-01 09:04 - 2022-02-01 09:04 - 000036481 _____ C:\Users\peter\Downloads\W4Y_Rechnung_94650813.pdf
2022-02-01 08:04 - 2022-02-01 08:04 - 000090797 _____ C:\Users\peter\Desktop\Rechnung_RE2204467.pdf
2022-01-31 19:23 - 2022-01-31 19:23 - 000001392 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2022-01-31 14:56 - 2022-01-31 14:56 - 000072782 _____ C:\Users\peter\Desktop\Assignment-report.vbs
2022-01-27 14:46 - 2022-01-27 14:46 - 000283298 _____ C:\Users\peter\Downloads\foerderungsfaehige_kabel_wallbox_private2021.pdf
2022-01-26 18:15 - 2022-01-07 13:36 - 004955248 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\Netwtw10.sys
2022-01-26 18:15 - 2022-01-07 13:36 - 001622088 _____ (Intel Corporation) C:\WINDOWS\system32\IntelIHVRouter08.dll
2022-01-26 18:15 - 2022-01-07 13:05 - 045101144 _____ C:\WINDOWS\system32\Drivers\Netwfw10.dat
2022-01-20 00:40 - 2022-01-20 00:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2022-01-19 13:07 - 2022-01-19 13:07 - 000001070 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2022.lnk
2022-01-19 01:17 - 2022-01-19 01:17 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2022-01-19 01:17 - 2022-01-19 01:17 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2022-01-19 01:17 - 2022-01-19 01:17 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2022-01-19 01:17 - 2022-01-19 01:17 - 000044328 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2022-01-18 12:57 - 2022-01-21 12:52 - 000000000 ____D C:\Users\peter\AppData\Local\CrashDumps
2022-01-15 11:53 - 2022-01-16 13:49 - 000000000 ____D C:\WINDOWS\system32\Tasks\NCH Software
2022-01-15 11:51 - 2022-01-16 13:49 - 000000000 ____D C:\Users\peter\AppData\Roaming\NCH Software
2022-01-15 11:16 - 2022-01-15 11:16 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2022-01-15 03:34 - 2022-01-15 03:34 - 000339968 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-01-15 03:34 - 2022-01-15 03:34 - 000311296 _____ C:\WINDOWS\system32\EsclScan.dll
2022-01-15 03:34 - 2022-01-15 03:34 - 000188416 _____ C:\WINDOWS\system32\EsclProtocol.dll
2022-01-15 03:34 - 2022-01-15 03:34 - 000077824 _____ C:\WINDOWS\system32\APMonUI.dll
2022-01-15 03:34 - 2022-01-15 03:34 - 000015042 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-01-15 03:32 - 2022-01-15 03:32 - 000000000 ___HD C:\$WinREAgent
2022-01-14 18:52 - 2022-01-18 12:42 - 000001996 _____ C:\Users\peter\Desktop\DaVinci Resolve.lnk
2022-01-14 18:51 - 2022-01-14 18:52 - 000000000 ____D C:\Users\peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blackmagic Design
2022-01-14 18:38 - 2022-01-14 18:38 - 000000000 ____D C:\Users\peter\OneDrive\Dokumente\Blackmagic Design
2022-01-14 18:37 - 2022-01-14 18:37 - 000000000 ____D C:\Users\peter\AppData\Roaming\Blackmagic Design
2022-01-14 18:35 - 2022-01-14 18:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blackmagic Design
2022-01-14 18:35 - 2022-01-14 18:51 - 000000000 ____D C:\Program Files\Blackmagic Design
2022-01-14 18:35 - 2022-01-14 18:35 - 000000000 ____D C:\ProgramData\Blackmagic Design
2022-01-14 18:34 - 2022-01-14 18:51 - 000000000 ____D C:\Program Files (x86)\Blackmagic Design
2022-01-13 09:24 - 2022-01-13 09:24 - 000000758 _____ C:\Users\peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\2022.lnk
2022-01-12 17:38 - 2022-01-12 17:38 - 000001942 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DxO ViewPoint 3.lnk
2022-01-12 17:38 - 2022-01-12 17:38 - 000000000 ____D C:\Program Files\DxO Labs
2022-01-12 17:37 - 2022-01-12 17:37 - 000000000 ____D C:\Users\peter\AppData\Local\DxO Labs
2022-01-12 17:32 - 2022-01-12 17:32 - 000000000 ____D C:\Program Files\DxO
2022-01-12 17:28 - 2022-01-12 17:28 - 000001032 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge 2022.lnk
2022-01-12 13:23 - 2022-01-12 13:23 - 000523776 _____ (curl, hxxps://curl.se/) C:\WINDOWS\system32\curl.exe
2022-01-12 13:23 - 2022-01-12 13:23 - 000464384 _____ (curl, hxxps://curl.se/) C:\WINDOWS\SysWOW64\curl.exe
2022-01-12 13:23 - 2022-01-12 13:23 - 000339968 _____ C:\WINDOWS\system32\pku2u.dll
2022-01-12 13:23 - 2022-01-12 13:23 - 000247808 _____ C:\WINDOWS\SysWOW64\pku2u.dll

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2022-02-01 15:08 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SystemTemp
2022-02-01 15:08 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-02-01 15:07 - 2021-09-18 08:43 - 000000000 ____D C:\Users\peter\AppData\Roaming\Signal
2022-02-01 15:06 - 2021-12-15 09:10 - 000000000 ___HD C:\adobeTemp
2022-02-01 15:06 - 2021-09-17 14:00 - 000000000 ____D C:\Program Files (x86)\Google
2022-02-01 15:06 - 2021-09-16 09:26 - 000000000 ___RD C:\Users\peter\Creative Cloud Files
2022-02-01 15:05 - 2021-12-11 05:09 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3592911485-1382985269-1930872061-1001
2022-02-01 15:05 - 2021-10-05 16:15 - 000004186 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1631770691
2022-02-01 15:05 - 2021-10-05 16:15 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2022-02-01 15:05 - 2021-09-22 18:09 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2022-02-01 15:05 - 2021-09-19 10:16 - 000000000 ___RD C:\Users\peter\iCloudDrive
2022-02-01 15:05 - 2021-09-18 09:07 - 000000000 ____D C:\Users\peter\AppData\Roaming\WTablet
2022-02-01 15:05 - 2021-09-16 09:00 - 000002154 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-02-01 15:05 - 2021-09-16 06:38 - 000001415 _____ C:\Users\peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2022-02-01 15:05 - 2021-09-15 20:36 - 000000000 ___RD C:\Users\peter\OneDrive
2022-02-01 15:05 - 2021-06-05 13:10 - 000000000 ___HD C:\Program Files\WindowsApps
2022-02-01 15:04 - 2021-10-05 16:15 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-02-01 15:04 - 2021-09-16 08:34 - 000000000 ____D C:\ProgramData\NVIDIA
2022-02-01 15:04 - 2021-09-15 20:30 - 000880672 _____ C:\WINDOWS\system32\wpbbin.exe
2022-02-01 15:04 - 2021-09-15 20:30 - 000842128 _____ C:\WINDOWS\system32\AsusUpdateCheck.exe
2022-02-01 15:04 - 2021-09-15 20:30 - 000012288 ___SH C:\DumpStack.log.tmp
2022-02-01 15:04 - 2021-06-05 13:10 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-02-01 09:50 - 2021-06-05 13:01 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-02-01 09:48 - 2021-09-18 09:06 - 000030959 _____ C:\WINDOWS\SysWOW64\PCPELog.txt
2022-02-01 09:48 - 2021-06-05 13:09 - 000000000 ____D C:\WINDOWS\INF
2022-02-01 09:12 - 2021-10-13 09:30 - 000000000 ____D C:\Outlook-Daten
2022-02-01 08:02 - 2021-10-05 16:12 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-01-31 20:54 - 2021-09-17 17:34 - 000000000 ____D C:\Users\peter\AppData\Roaming\TV-Browser
2022-01-31 19:23 - 2021-09-16 09:24 - 000000000 ____D C:\Program Files\Common Files\Adobe
2022-01-31 19:23 - 2021-09-16 09:24 - 000000000 ____D C:\Program Files\Adobe
2022-01-31 19:23 - 2021-09-16 08:51 - 000000000 ____D C:\Program Files (x86)\Adobe
2022-01-31 19:23 - 2021-09-15 20:35 - 000000000 ____D C:\Users\peter\AppData\Local\D3DSCache
2022-01-31 13:14 - 2021-09-15 20:37 - 000010592 _____ C:\Users\peter\Desktop\Übungen Physio.xlsx
2022-01-30 17:27 - 2021-09-18 09:05 - 000000000 ____D C:\Users\peter\AppData\Roaming\vlc
2022-01-29 07:27 - 2021-11-21 11:11 - 000004782 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeShadowStackRollbackTask
2022-01-29 07:27 - 2021-09-15 20:30 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-01-28 10:14 - 2021-09-15 20:37 - 000011680 _____ C:\Users\peter\OneDrive\Dokumente\Einkaufzettel.xlsx
2022-01-27 20:59 - 2021-10-17 10:01 - 000000000 ____D C:\Users\peter\AppData\Local\Deployment
2022-01-26 18:19 - 2021-10-05 16:20 - 001750916 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-01-26 18:19 - 2021-06-05 18:52 - 000757210 _____ C:\WINDOWS\system32\perfh007.dat
2022-01-26 18:19 - 2021-06-05 18:52 - 000156454 _____ C:\WINDOWS\system32\perfc007.dat
2022-01-26 12:20 - 2021-09-15 20:35 - 000000000 ____D C:\Users\peter\AppData\Local\Packages
2022-01-26 12:20 - 2021-09-15 20:35 - 000000000 ____D C:\ProgramData\Packages
2022-01-24 20:02 - 2021-10-17 09:59 - 000000000 ____D C:\Users\peter\AppData\Local\LogiBolt
2022-01-24 16:32 - 2021-09-17 12:00 - 000000000 ____D C:\Users\peter\AppData\Roaming\Acronis
2022-01-24 16:30 - 2021-09-17 11:56 - 000000000 ____D C:\ProgramData\Acronis
2022-01-22 04:21 - 2021-10-09 07:59 - 000003606 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d7b9fb9428001d
2022-01-22 04:21 - 2021-10-05 16:15 - 000003700 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-01-21 20:36 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2022-01-21 04:37 - 2021-10-05 16:15 - 000003632 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-01-21 04:37 - 2021-10-05 16:15 - 000003508 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2022-01-20 00:40 - 2021-09-17 12:52 - 000000000 ____D C:\Users\peter\AppData\Local\Dropbox
2022-01-20 00:40 - 2021-09-17 12:52 - 000000000 ____D C:\Program Files (x86)\Dropbox
2022-01-18 12:42 - 2021-11-18 11:01 - 000001891 _____ C:\Users\peter\Desktop\CrystalDiskMark 8.lnk
2022-01-18 12:42 - 2021-10-25 16:33 - 000001309 _____ C:\Users\peter\Desktop\Dropbox.lnk
2022-01-18 12:42 - 2021-10-14 11:12 - 000001984 _____ C:\Users\peter\Desktop\sound.lnk
2022-01-18 12:42 - 2021-09-19 10:54 - 000002848 _____ C:\Users\peter\Desktop\einkauf_bar.lnk
2022-01-18 12:42 - 2021-09-19 10:52 - 000001890 _____ C:\Users\peter\Desktop\Shotcut.lnk
2022-01-18 12:42 - 2021-09-18 09:04 - 000001086 _____ C:\Users\peter\Desktop\LibreCAD.lnk
2022-01-18 12:42 - 2021-09-18 08:43 - 000002401 _____ C:\Users\peter\Desktop\Signal.lnk
2022-01-18 12:42 - 2021-09-17 17:12 - 000001053 _____ C:\Users\peter\Desktop\IrfanView 64.lnk
2022-01-18 12:42 - 2021-09-17 06:20 - 000002923 _____ C:\Users\peter\Desktop\Regen.lnk
2022-01-18 12:42 - 2021-09-17 06:20 - 000002897 _____ C:\Users\peter\Desktop\SFD_2022.lnk
2022-01-18 12:42 - 2021-09-16 08:24 - 000001029 _____ C:\Users\peter\Desktop\PerformanceTest.lnk
2022-01-18 12:42 - 2021-09-16 06:38 - 000001413 _____ C:\Users\peter\Desktop\Opera-Browser.lnk
2022-01-16 13:51 - 2021-11-02 18:33 - 000000000 ____D C:\Users\peter\Desktop\Bangkok
2022-01-16 13:49 - 2021-10-05 15:15 - 000000000 ____D C:\Users\peter
2022-01-15 11:16 - 2021-06-05 13:10 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-01-15 11:16 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-01-15 11:16 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SystemResources
2022-01-15 11:16 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-01-15 11:16 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\appraiser
2022-01-15 11:16 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-01-15 11:16 - 2021-06-05 13:01 - 000000000 ____D C:\WINDOWS\servicing
2022-01-15 03:40 - 2021-06-05 13:01 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-01-15 03:34 - 2021-10-05 16:13 - 003087360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-01-14 18:37 - 2021-09-16 07:39 - 000000000 ____D C:\ProgramData\Package Cache
2022-01-14 15:59 - 2021-09-16 09:00 - 000002433 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2022-01-14 15:58 - 2021-09-16 08:58 - 000000000 ____D C:\Program Files\Microsoft Office
2022-01-12 17:54 - 2021-09-16 08:50 - 000000000 ____D C:\Users\peter\AppData\Local\Adobe
2022-01-12 17:42 - 2021-10-05 16:12 - 000471384 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-01-12 17:41 - 2021-06-05 13:10 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2022-01-12 17:41 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2022-01-12 17:41 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\setup
2022-01-12 17:41 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-01-12 17:38 - 2021-09-17 13:31 - 000000000 ____D C:\ProgramData\DxO Labs
2022-01-12 17:38 - 2021-09-17 11:11 - 000000000 ____D C:\Users\peter\AppData\Local\Downloaded Installations
2022-01-12 17:32 - 2021-11-25 12:29 - 000001094 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DxO PhotoLab 5.lnk
2022-01-12 17:32 - 2021-09-17 13:28 - 000000000 ____D C:\ProgramData\DxO
2022-01-12 17:27 - 2021-11-25 12:32 - 000000000 ____D C:\Users\peter\OneDrive\Dokumente\DxO PhotoLab 5 logs
2022-01-12 13:26 - 2021-09-15 20:38 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-01-12 13:24 - 2021-09-15 20:38 - 145765912 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-01-12 12:36 - 2021-11-24 13:53 - 000002079 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2022-01-12 12:36 - 2021-11-24 13:53 - 000002067 _____ C:\Users\Public\Desktop\Adobe Acrobat DC.lnk
2022-01-12 12:36 - 2021-10-05 16:15 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2021-09-16 18:13 - 2021-09-16 18:13 - 000000000 _____ () C:\Users\peter\AppData\Local\oobelibMkey.log

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 30-01-2022
durchgeführt von peter (01-02-2022 15:09:37)
Gestartet von C:\Users\peter\Desktop
Microsoft Windows 11 Pro Version 21H2 22000.466 (X64) (2021-10-05 15:15:35)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-3592911485-1382985269-1930872061-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3592911485-1382985269-1930872061-503 - Limited - Disabled)
Gast (S-1-5-21-3592911485-1382985269-1930872061-501 - Limited - Disabled)
peter (S-1-5-21-3592911485-1382985269-1930872061-1001 - Administrator - Enabled) => C:\Users\peter
WDAGUtilityAccount (S-1-5-21-3592911485-1382985269-1930872061-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov)
Acronis Drivers (HKLM\...\{7C36ADC0-5219-4D31-90D1-4211321481EF}) (Version: 25.8.39216 - Acronis) Hidden
Acronis True Image (HKLM-x32\...\{F0A1A9E1-CD4B-4504-836F-1946F5815ECB}) (Version: 25.8.39216 - Acronis) Hidden
Acronis True Image (HKLM-x32\...\{F0A1A9E1-CD4B-4504-836F-1946F5815ECB}Visible) (Version: 25.8.39216 - Acronis)
Adobe Acrobat DC (64-bit) (HKLM\...\{AC76BA86-1031-1033-7760-BC15014EA700}) (Version: 21.011.20039 - Adobe)
Adobe Bridge 2022 (HKLM-x32\...\KBRG_12_0_1) (Version: 12.0.1 - Adobe Inc.)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 5.6.5.58 - Adobe Inc.)
Adobe Genuine Service (HKLM-x32\...\AdobeGenuineService) (Version: 7.6.0.52 - Adobe Inc.)
Adobe Lightroom Classic (HKLM-x32\...\LTRM_11_1) (Version: 11.1 - Adobe Inc.)
Adobe Photoshop 2022 (HKLM-x32\...\PHSP_23_1_1) (Version: 23.1.1.202 - Adobe Inc.)
AMap Fly basierend auf Geogrid®-Viewer Version 3.1 (HKLM-x32\...\DeInst_d2vexcrd C:/Program Files (x86)/Austrian Map Fly) (Version:  - )
AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 3.09.01.140 - Advanced Micro Devices, Inc.)
AMD_Chipset_Drivers (HKLM-x32\...\{1f00ea4b-bcb4-45fa-a4c8-bbcbfa0304ae}) (Version: 3.09.01.140 - Advanced Micro Devices, Inc.) Hidden
Audacity 3.0.4 (HKLM\...\Audacity_is1) (Version: 3.0.4 - Audacity Team)
Backup File Unlocker Service (HKLM-x32\...\BFUService) (Version: 2.3 - Heiko Schröder)
Blackmagic RAW Common Components (HKLM\...\{94C42023-ECF5-46E6-ACB4-2AED536B205D}) (Version: 2.2 - Blackmagic Design)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
ColorChecker Camera Calibration 2.2.0 (HKLM-x32\...\ColorChecker Camera Calibration_is1) (Version: 2.2.0 - X-Rite)
Corsair SSD Toolbox 1.2.6.1 (HKLM-x32\...\{70DE02E8-FBDD-4892-9B21-117DCA1DD553}_is1) (Version: 1.2.6.1 - Corsair)
CPUID HWMonitor 1.44 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.44 - CPUID, Inc.)
CrystalDiskMark 8.0.1 (HKLM\...\CrystalDiskMark8_is1) (Version: 8.0.1 - Crystal Dew World)
DaVinci Resolve (HKLM\...\{E9983894-990A-4A5A-8DBF-8E4E0D3A058A}) (Version: 17.4.30010 - Blackmagic Design)
DaVinci Resolve Control Panels (HKLM\...\{7667C543-084F-47F7-BC60-175FC25E9D6F}) (Version: 2.0.1.0 - Blackmagic Design)
Dell UltraSharp Calibration Solution (HKLM-x32\...\Dell UltraSharp Calibration Solution_is1) (Version: 1.6.6.8973 - Dell)
DNG ProfileManager 1.0.3 (HKLM-x32\...\DNG ProfileManager_is1) (Version:  - X-Rite)
Dropbox (HKLM-x32\...\Dropbox) (Version: 140.4.1951 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.541.1 - Dropbox, Inc.) Hidden
DVBViewer Pro (HKLM-x32\...\DVBViewer Pro_is1) (Version: 7.1.2.1 - CM&V)
DVBViewer Pro Demo (HKLM-x32\...\DVBViewer Pro Demo_is1) (Version: 7.1.2.1 - CM&V)
DxO PhotoLab 5 (HKLM\...\{957A6648-90D4-490A-85F7-DE16ECE80F61}) (Version: 5.1.2 - DxO)
DxO PhotoLab 5 plug-in for Adobe Lightroom (HKLM-x32\...\{AF40867D-580E-465D-9A51-7986043C13CE}) (Version: 1.0.53 - DxO Labs)
DxO ViewPoint 3 (HKLM\...\DxO ViewPoint 3) (Version: 3.2.0 - DxO Labs)
Epson Print CD (HKLM-x32\...\{D16A31F9-276D-4968-A753-FFEAC56995D0}) (Version: 2.44.00 - Seiko Epson Corporation)
EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)
Epson Software Updater (HKLM-x32\...\{7CC286A8-EEC5-491F-A4B5-02BD4E656BF6}) (Version: 4.6.2 - Seiko Epson Corporation)
Epson Stylus Photo R3000 Printer Uninstall (HKLM\...\Epson Stylus Photo R3000) (Version:  - SEIKO EPSON Corporation)
Exact Audio Copy 1.6 (HKLM-x32\...\Exact Audio Copy) (Version: 1.6 - Andre Wiethoff)
Geogrid® DPV (HKLM-x32\...\Geogrid_DPV) (Version:  - )
Google Earth Pro (HKLM\...\{9BFB06CD-3925-49E2-BAB7-EA695821CE4C}) (Version: 7.3.4.8248 - Google)
High-Definition Video Playback 10 (HKLM-x32\...\{237CCB62-8454-43E3-B158-3ACD0134852E}) (Version: 7.0.11000.25.1 - Nero AG) Hidden
i1Profiler (HKLM-x32\...\i1Profiler_is1) (Version: 3.3.0.13493 - X-Rite)
iCloud Outlook (HKLM\...\{F35C51FC-B854-4106-89D2-50709F12A4B5}) (Version: 12.5.0.74 - Apple Inc.)
IrfanView 4.58 (64-bit) (HKLM\...\IrfanView64) (Version: 4.58 - Irfan Skiljan)
LAV Filters 0.75.1 (HKLM-x32\...\lavfilters_is1) (Version: 0.75.1 - Hendrik Leppkes)
LibreCAD (HKLM-x32\...\LibreCAD) (Version: 2.1.3 - LibreCAD Team)
Logi Bolt (HKLM\...\LogiBolt) (Version: 1.01.415.0 - Logi)
LogiOptionsExcelAddin (HKU\S-1-5-21-3592911485-1382985269-1930872061-1001\...\5B9DBC017A73395321F758581D1CBC19EA9DF4FF) (Version: 9.40.13.0 - Logitech)
LogiOptionsWordAddin (HKU\S-1-5-21-3592911485-1382985269-1930872061-1001\...\77F95DB8F75F35C40BD868B4D39ADCCB966A0FD1) (Version: 9.40.13.0 - Logitech)
Logitech Options (HKLM\...\LogiOptions) (Version: 9.40.86 - Logitech)
Logitech SetPoint 6.70 (HKLM\...\sp6) (Version: 6.70.55 - Logitech)
MediaHuman Audio Converter Version 1.9.8 (HKLM-x32\...\MHAudioConverter_is1) (Version: 1.9.8 - MediaHuman)
MediaHuman Video Converter Version 1.2.1 (HKLM-x32\...\MHVideoConverter_is1) (Version: 1.2.1 - MediaHuman)
Medieval CUE Splitter (HKLM-x32\...\{B96D2269-568B-4CBF-9332-12FAE8B158F7}) (Version: 1.2.0 - Medieval Software)
MFT Bodyteamwork 3_2_1 (HKLM-x32\...\MFT Bodyteamwork) (Version: 3_2_1 - Stefan Hynst | Software + Multimedia)
MFT Volare 1.0.11 (HKLM-x32\...\MFT Volare) (Version: 1.0.11 - Stefan Hynst | Software + Multimedia)
Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.14729.20260 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 97.0.1072.76 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 97.0.1072.76 - Microsoft Corporation)
Microsoft Money 2000 (HKLM-x32\...\MSMONEYV80) (Version:  - )
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 22.017.0123.0001 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{2FA9DAAC-895B-4E99-99D9-DC2965FBE79C}) (Version: 2.87.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29913 (HKLM-x32\...\{855e31d2-9031-46e1-b06d-c9d7777deefb}) (Version: 14.28.29913.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29913 (HKLM-x32\...\{03d1453c-7d5c-479c-afea-8482f406e036}) (Version: 14.28.29913.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.60724 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.60724 - Microsoft Corporation)
MOBackup - Datensicherung für Outlook (Vollversion) (HKLM-x32\...\MOBackup-DatensicherungfürOutlook) (Version: 10.52 - Heiko Schröder)
Mp3tag v3.09 (HKLM-x32\...\Mp3tag) (Version: 3.09 - Florian Heidenreich)
MyHarmony (HKLM-x32\...\{2AD8F8A1-ECE5-4890-BCC2-B4396370A0D4}) (Version: 1.0.308 - Logitech)
Natural Color Expert V4 (HKLM-x32\...\{354EA241-ECF7-4A2E-B77D-8CE74CDE0B95}) (Version: 4.0.4.0 - Samsung)
NEF Codec (HKLM-x32\...\{D6506521-0959-4FA3-875F-E2E28830B0D2}) (Version: 1.31.1 - Nikon Corporation)
Nero Burning ROM 10 (HKLM-x32\...\{7A5D731D-B4B3-490E-B339-75685712BAAB}) (Version: 10.0.10700.7.100 - Nero AG)
Nero DiscSpeed 10 (HKLM-x32\...\{34490F4E-48D0-492E-8249-B48BECF0537C}) (Version: 6.0.10400.4.100 - Nero AG)
Nero InfoTool 10 (HKLM-x32\...\{F412B4AF-388C-4FF5-9B2F-33DB1C536953}) (Version: 7.0.10400.5.100 - Nero AG)
Nero Multimedia Suite 10 (HKLM-x32\...\{277C1559-4CF7-44FF-8D07-98AA9C13AABD}) (Version: 10.0.11200 - Nero AG)
Nero Recode 10 (HKLM-x32\...\{8ECEC853-5C3D-4B10-B5C7-FF11FF724807}) (Version: 4.6.10600.1.100 - Nero AG)
Nik Collection (HKLM-x32\...\Nik Collection) (Version: 1.2.11 - Google)
Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.4.1 - Nikon Corporation)
Nikon Transfer 2 (HKLM-x32\...\{3FC564E4-C8EA-4887-AEF3-268962172514}) (Version: 2.14.1 - Nikon Corporation)
NRW CODEC (HKLM\...\{C73F5325-EE0D-44BE-8B30-6CFAFFC84A68}) (Version: 1.80.0001 - Nikon Corporation)
NVIDIA Grafiktreiber 496.76 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 496.76 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.38.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.94 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
NX Studio (HKLM\...\{F5B8CBD1-AF89-4DDD-857E-AF5D66743A41}) (Version: 1.0.1 - Nikon Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14729.20260 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14729.20260 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.14729.20260 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Opera Stable 83.0.4254.27 (HKU\S-1-5-21-3592911485-1382985269-1930872061-1001\...\Opera 83.0.4254.27) (Version: 83.0.4254.27 - Opera Software)
PDF24 Creator 10.6.3 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 10.6.3 - PDF24.org)
PerformanceTest v10.1 (HKLM\...\PerformanceTest 10_is1) (Version: 10.1.1004.0 - Passmark Software)
PowerChute Personal Edition (HKLM-x32\...\APC) (Version: 3.1.0 - Schneider Electric)
Promontory_GPIO Driver (HKLM-x32\...\{B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9}) (Version: 2.0.1.0 - Advanced Micro Devices, Inc.) Hidden
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9600.30168 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8832.1 - Realtek Semiconductor Corp.)
Samsung_MonSetup (HKLM-x32\...\{8EA79DBF-D637-448A-89D6-410A087A4493}) (Version: 1.00.0000 - Samsung)
SequoiaView (HKLM-x32\...\SequoiaView) (Version:  - )
Shotcut (HKLM\...\Shotcut) (Version: 21.03.21 - Meltytech, LLC)
Sigma Data Center 5.8 (HKLM-x32\...\Sigma Data Center5.8) (Version: 5.8 - Sigma Elektro GmbH)
SIGMA Optimization Pro (HKLM-x32\...\{A75A7BEA-7A33-46FF-A2CD-3B0AF8023903}) (Version: 1.7.0.1 - SIGMA CORPORATION)
Signal 5.29.1 (HKU\S-1-5-21-3592911485-1382985269-1930872061-1001\...\7d96caee-06e6-597c-9f2f-c7bb2e0948b4) (Version: 5.29.1 - Open Whisper Systems)
SilverFast 8.8.0r25 (64bit) (HKLM-x32\...\SilverFast 8 x64) (Version: 8.8.0r25 - LaserSoft Imaging AG)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Technotrend Viewer (HKLM-x32\...\TT-Viewer_is1) (Version:  - CM&V)
TomTom MyDrive Connect 4.2.12.4208 (HKLM-x32\...\MyDriveConnect) (Version: 4.2.12.4208 - TomTom)
TV-Browser 4.2.3 (HKLM\...\tvbrowser) (Version: 4.2.3 - TV-Browser Team)
UXP WebView Support (HKLM-x32\...\UXPW_1_1_0) (Version: 1.1.0 - Adobe Inc.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.16 - VideoLAN)
Wacom Tablett (HKLM\...\Wacom Tablet Driver) (Version: 6.3.44-1 - Wacom Technology Corp.)
Windows*11-Installationsassistent (HKLM-x32\...\{115DF11E-4B4C-4EA9-9A79-00DB0C7EF02D}) (Version: 1.4.19041.1285 - Microsoft Corporation)
Windows-PC-Integritätsprüfung (HKLM\...\{63EFBDB5-01B0-4614-BE9F-7F1908E42275}) (Version: 3.1.2109.29003 - Microsoft Corporation)
Windows-Treiberpaket - SIGMA Elektro GmbH (usbser) Ports  (02/20/2017 1.7.0000.0000) (HKLM\...\F11095F081576CA0F709F279E5FC84AC50628B78) (Version: 02/20/2017 1.7.0000.0000 - SIGMA Elektro GmbH)
X-Rite Device Services Manager (HKLM\...\{55440983-A1BA-4166-885C-076DB9284D38}) (Version: 3.1.119.139 - X-Rite)

Packages:
=========
Adobe Notification Client -> C:\Program Files\WindowsApps\AdobeNotificationClient_2.0.1.8_x86__enpm4xejd91yc [2021-09-16] (Adobe Systems Incorporated)
Dropbox -> C:\Program Files (x86)\Dropbox\Client\PackageAssets [2022-01-20] (0)
DTS Custom for Asus -> C:\Program Files\WindowsApps\DTSInc.DTSCustomforAsus_2.1.1.0_x64__t5j2fzbtdg37r [2021-09-16] (DTS, Inc.)
HEVC-Videoerweiterungen -> C:\Program Files\WindowsApps\Microsoft.HEVCVideoExtensions_1.0.43422.0_x64__8wekyb3d8bbwe [2022-01-18] (Microsoft Corporation)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_134.1.221.0_x64__v10z8vjag6ke6 [2022-01-28] (HP Inc.)
HP41CV -> C:\Program Files\WindowsApps\8908UserJue.HP41CV_3.0.3.6_neutral__m7d9s8vsbk8kr [2021-10-05] (UserJue)
iCloud -> C:\Program Files\WindowsApps\AppleInc.iCloud_12.5.74.0_x86__nzyj5cx40ttqa [2021-10-22] (Apple Inc.) [Startup Task]
Instagram -> C:\Program Files\WindowsApps\Facebook.InstagramBeta_42.0.19.0_neutral__8xx8rvfyw5nnt [2022-01-29] (Instagram)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-09-16] (Microsoft Corporation)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.1050.0_x64__8wekyb3d8bbwe [2022-01-12] (Microsoft Studios) [MS Ad]
Microsoft To Do -> C:\Program Files\WindowsApps\Microsoft.Todos_2.62.5280.0_x64__8wekyb3d8bbwe [2022-01-30] (Microsoft Corporation) [Startup Task]
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.97.752.0_x64__mcm4njqhnhss8 [2021-09-17] (Netflix, Inc.)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.962.0_x64__56jybvy8sckqj [2022-01-19] (NVIDIA Corp.)
Reader Notification Client -> C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r [2021-11-24] (Adobe Systems Incorporated)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.7.199.0_x64__dt26b99r8h8gj [2021-09-20] (Realtek Semiconductor Corp)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.177.645.0_x86__zpdnekdrzrea0 [2022-01-22] (Spotify AB) [Startup Task]
XING -> C:\Program Files\WindowsApps\XINGAG.XING_4.0.9.0_x86__xpfg3f7e9an52 [2022-01-12] (New Work SE)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3592911485-1382985269-1930872061-1001_Classes\CLSID\{08A9D645-56F2-4550-95FD-67E25276FDD9} -> [iCloud Drive] => C:\Users\peter\iCloudDrive [2021-09-19 10:16]
CustomCLSID: HKU\S-1-5-21-3592911485-1382985269-1930872061-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-513FE7238137} -> [Creative Cloud Files] => C:\Users\peter\Creative Cloud Files [2021-09-16 09:26]
CustomCLSID: HKU\S-1-5-21-3592911485-1382985269-1930872061-1001_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4}\localserver32 -> C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Inc. -> Adobe Inc.)
CustomCLSID: HKU\S-1-5-21-3592911485-1382985269-1930872061-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\peter\Dropbox [2021-09-17 12:53]
CustomCLSID: HKU\S-1-5-21-3592911485-1382985269-1930872061-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems)
ShellIconOverlayIdentifiers: [      OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\22.017.0123.0001\FileSyncShell64.dll [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [      OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\22.017.0123.0001\FileSyncShell64.dll [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [      OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\22.017.0123.0001\FileSyncShell64.dll [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [      OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\22.017.0123.0001\FileSyncShell64.dll [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [      OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\22.017.0123.0001\FileSyncShell64.dll [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [      OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\22.017.0123.0001\FileSyncShell64.dll [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [      OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\22.017.0123.0001\FileSyncShell64.dll [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [     AcronisDrive] -> {5D74FD4B-4EFB-4586-8022-8637BBE40970} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64_25_8_39216.dll [2021-03-23] (Acronis International GmbH -> )
ShellIconOverlayIdentifiers: [     AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64_25_8_39216.dll [2021-03-23] (Acronis International GmbH -> )
ShellIconOverlayIdentifiers: [     AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64_25_8_39216.dll [2021-03-23] (Acronis International GmbH -> )
ShellIconOverlayIdentifiers: [     AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64_25_8_39216.dll [2021-03-23] (Acronis International GmbH -> )
ShellIconOverlayIdentifiers: [   AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2022-01-27] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2022-01-27] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2022-01-27] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [      OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\22.017.0123.0001\FileSyncShell64.dll [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [      OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\22.017.0123.0001\FileSyncShell64.dll [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [      OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\22.017.0123.0001\FileSyncShell64.dll [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [      OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\22.017.0123.0001\FileSyncShell64.dll [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [      OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\22.017.0123.0001\FileSyncShell64.dll [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [      OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\22.017.0123.0001\FileSyncShell64.dll [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [      OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\22.017.0123.0001\FileSyncShell64.dll [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.017.0123.0001\FileSyncShell64.dll [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2022-01-27] (Adobe Inc. -> )
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1-x32: [NeroShellExt] -> {F764812A-132C-4013-9960-5CBBEB408A0E} => C:\Program Files (x86)\Common Files\Nero\NeroShellExt\NeroShellExt.dll [2010-02-22] (Nero AG -> Nero AG)
ContextMenuHandlers2-x32: [NeroShellExt] -> {F764812A-132C-4013-9960-5CBBEB408A0E} => C:\Program Files (x86)\Common Files\Nero\NeroShellExt\NeroShellExt.dll [2010-02-22] (Nero AG -> Nero AG)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.017.0123.0001\FileSyncShell64.dll [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4-x32: [NeroShellExt] -> {F764812A-132C-4013-9960-5CBBEB408A0E} => C:\Program Files (x86)\Common Files\Nero\NeroShellExt\NeroShellExt.dll [2010-02-22] (Nero AG -> Nero AG)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.017.0123.0001\FileSyncShell64.dll [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b7184c0e1c94c102\nvshext.dll [2021-11-11] (Nvidia Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2022-01-27] (Adobe Inc. -> )

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2022-01-27 09:28 - 2022-01-25 20:45 - 002649088 _____ () [Datei ist nicht signiert] \\?\C:\Users\peter\AppData\Local\Programs\signal-desktop\resources\app.asar.unpacked\node_modules\@signalapp\signal-client\prebuilds\win32-x64\node.napi.node
2022-01-27 09:28 - 2022-01-25 20:45 - 003107840 _____ () [Datei ist nicht signiert] \\?\C:\Users\peter\AppData\Local\Programs\signal-desktop\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\better_sqlite3.node
2022-01-27 09:28 - 2022-01-25 20:45 - 010654720 _____ () [Datei ist nicht signiert] \\?\C:\Users\peter\AppData\Local\Programs\signal-desktop\resources\app.asar.unpacked\node_modules\ringrtc\build\win32\libringrtc-x64.node
2020-06-01 17:13 - 2020-06-01 17:13 - 001664512 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\X-Rite\Devices\rm200\GoldenEye.dll
2021-09-18 08:43 - 2022-01-25 20:45 - 002690560 _____ () [Datei ist nicht signiert] C:\Users\peter\AppData\Local\Programs\signal-desktop\ffmpeg.dll
2021-09-18 08:43 - 2022-01-25 20:45 - 000441344 _____ () [Datei ist nicht signiert] C:\Users\peter\AppData\Local\Programs\signal-desktop\libegl.dll
2021-09-18 08:43 - 2022-01-25 20:45 - 008018432 _____ () [Datei ist nicht signiert] C:\Users\peter\AppData\Local\Programs\signal-desktop\libglesv2.dll
2021-09-16 09:00 - 2021-09-16 09:00 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\root\Office16\AppVIsvSubsystems64.dll
2021-09-16 09:00 - 2021-09-16 09:00 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\root\Office16\c2r64.dll
2019-06-07 22:26 - 2019-06-07 22:26 - 000136112 _____ (Schneider Electric -> Schneider Electric) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\APC\PowerChute Personal Edition\UIControl.dll
2019-06-07 22:25 - 2019-06-07 22:25 - 000479152 _____ (Schneider Electric -> Schneider Electric) [Datei ist nicht signiert] C:\Program Files (x86)\APC\PowerChute Personal Edition\drvutil.dll
2019-06-07 22:26 - 2019-06-07 22:26 - 000915376 _____ (Schneider Electric -> Schneider Electric) [Datei ist nicht signiert] C:\Program Files (x86)\APC\PowerChute Personal Edition\pdcdll.dll
2019-06-07 22:26 - 2019-06-07 22:26 - 000016816 _____ (Schneider Electric -> Schneider Electric) [Datei ist nicht signiert] C:\Program Files (x86)\APC\PowerChute Personal Edition\rdp.dll
2019-06-07 22:26 - 2019-06-07 22:26 - 000574896 _____ (Schneider Electric -> Schneider Electric) [Datei ist nicht signiert] C:\Program Files (x86)\APC\PowerChute Personal Edition\UpsControl.dll
2019-06-07 22:26 - 2019-06-07 22:26 - 000534960 _____ (Schneider Electric -> Schneider Electric) [Datei ist nicht signiert] C:\Program Files (x86)\APC\PowerChute Personal Edition\UpsDevice.dll
2019-06-07 17:01 - 2019-06-07 17:01 - 002764288 _____ (Schneider Electric) [Datei ist nicht signiert] C:\Program Files (x86)\APC\PowerChute Personal Edition\res.dll
2021-09-17 13:41 - 2007-09-18 15:44 - 000421888 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBIPDev.dll
2021-09-17 13:41 - 2007-09-10 14:03 - 000110592 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBLPBidiDev.dll
2021-09-17 13:41 - 2006-12-26 13:58 - 000233544 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBMSDev.dll
2021-09-17 13:41 - 2004-11-17 15:56 - 000286720 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBNWDev.dll
2021-09-17 13:41 - 2007-09-10 14:32 - 000135168 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBRSVC.dll
2021-09-17 13:41 - 2006-08-30 00:02 - 000106496 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\EPSON\EBAPI\epLocalBidi.dll
2020-06-01 17:14 - 2020-06-01 17:14 - 001502208 _____ (X-Rite Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\X-Rite\Devices\i1pro\i1iO.dll
2020-06-01 17:14 - 2020-06-01 17:14 - 003962368 _____ (X-Rite Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\X-Rite\Devices\i1pro\i1Pro.dll
2020-06-01 17:14 - 2020-06-01 17:14 - 001529344 _____ (X-Rite Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\X-Rite\Devices\i1pro3\i1iO3.dll
2020-06-01 17:14 - 2020-06-01 17:14 - 003986432 _____ (X-Rite Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\X-Rite\Devices\i1pro3\i1Pro3.dll
2020-06-01 17:15 - 2020-06-01 17:15 - 000151040 _____ (X-Rite Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\X-Rite\Devices\i1pro3\i1pro3.xrdevice
2020-06-01 17:13 - 2020-06-01 17:13 - 002359296 _____ (X-Rite) [Datei ist nicht signiert] C:\Program Files (x86)\X-Rite\Devices\i1isis\EyeOne_iSis.dll
2020-06-01 17:14 - 2020-06-01 17:14 - 001019392 _____ (X-Rite) [Datei ist nicht signiert] C:\Program Files (x86)\X-Rite\Devices\i1pro\i1Fun.dll
2020-06-01 17:14 - 2020-06-01 17:14 - 001162752 _____ (X-Rite) [Datei ist nicht signiert] C:\Program Files (x86)\X-Rite\Devices\i1pro3\i1Pro3Fun.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========

BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2020-11-21] (Logitech Inc -> Logitech, Inc.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2020-11-21] (Logitech Inc -> Logitech, Inc.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-01-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-01-14] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-01-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-01-14] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-01-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-01-14] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-01-14] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-01-14] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3592911485-1382985269-1930872061-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\peter\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 10.0.0.138
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
 ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKLM\...\StartupApproved\StartupFolder: => "APC UPS Status.lnk"
HKLM\...\StartupApproved\StartupFolder: => "i1Profiler Tray.lnk"
HKLM\...\StartupApproved\Run: => "Acronis Scheduler2 Service"
HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run: => "PDF24"
HKLM\...\StartupApproved\Run32: => "Dropbox"
HKLM\...\StartupApproved\Run32: => "Nikon Message Center 2"
HKLM\...\StartupApproved\Run32: => "AcronisTibMounterMonitor"
HKLM\...\StartupApproved\Run32: => "TrueImageMonitor.exe"
HKU\S-1-5-21-3592911485-1382985269-1930872061-1001\...\StartupApproved\Run: => "EPSON-R3000 (Epson Stylus Photo R3000)"
HKU\S-1-5-21-3592911485-1382985269-1930872061-1001\...\StartupApproved\Run: => "Epson Stylus Photo R3000"
HKU\S-1-5-21-3592911485-1382985269-1930872061-1001\...\StartupApproved\Run: => "Steam"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [UDP Query User{2EB275BD-974B-4787-9A3E-019ABC85A45E}C:\exe_software\qdslrdashboard_v3.6.4_windows_x64\qdslrdashboard.exe] => (Allow) C:\exe_software\qdslrdashboard_v3.6.4_windows_x64\qdslrdashboard.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{D8BA73BB-EDB4-4C8A-8C06-1E16C46CA40C}C:\exe_software\qdslrdashboard_v3.6.4_windows_x64\qdslrdashboard.exe] => (Allow) C:\exe_software\qdslrdashboard_v3.6.4_windows_x64\qdslrdashboard.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{75A9AFBD-9A43-4B11-8DC5-575F9E10275F}C:\users\peter\desktop\qdslrdashboard_v3.6.4_windows_x64\qdslrdashboard_v3.6.4_windows_x64\qdslrdashboard.exe] => (Allow) C:\users\peter\desktop\qdslrdashboard_v3.6.4_windows_x64\qdslrdashboard_v3.6.4_windows_x64\qdslrdashboard.exe => Keine Datei
FirewallRules: [TCP Query User{241C982D-112F-4594-A808-DA2E3EC674C1}C:\users\peter\desktop\qdslrdashboard_v3.6.4_windows_x64\qdslrdashboard_v3.6.4_windows_x64\qdslrdashboard.exe] => (Allow) C:\users\peter\desktop\qdslrdashboard_v3.6.4_windows_x64\qdslrdashboard_v3.6.4_windows_x64\qdslrdashboard.exe => Keine Datei
FirewallRules: [UDP Query User{9D5DB2D2-127E-4865-9B8D-61DBCF1A2C75}C:\users\peter\downloads\qdslrdashboard_v3.6.4_windows_x64\qdslrdashboard_v3.6.4_windows_x64\qdslrdashboard.exe] => (Allow) C:\users\peter\downloads\qdslrdashboard_v3.6.4_windows_x64\qdslrdashboard_v3.6.4_windows_x64\qdslrdashboard.exe => Keine Datei
FirewallRules: [TCP Query User{CC0EC676-78A4-4A43-B34D-58914D7EDB5A}C:\users\peter\downloads\qdslrdashboard_v3.6.4_windows_x64\qdslrdashboard_v3.6.4_windows_x64\qdslrdashboard.exe] => (Allow) C:\users\peter\downloads\qdslrdashboard_v3.6.4_windows_x64\qdslrdashboard_v3.6.4_windows_x64\qdslrdashboard.exe => Keine Datei
FirewallRules: [UDP Query User{1B5BC8B4-04C6-46F4-97E2-48D5C68DC825}C:\program files (x86)\bfu service\bfuservice64.exe] => (Allow) C:\program files (x86)\bfu service\bfuservice64.exe (Heiko Schröder -> Heiko Schröder Softwareentwicklung)
FirewallRules: [TCP Query User{2C11273F-204A-4035-9B4D-BD8F4FD4AC74}C:\program files (x86)\bfu service\bfuservice64.exe] => (Allow) C:\program files (x86)\bfu service\bfuservice64.exe (Heiko Schröder -> Heiko Schröder Softwareentwicklung)
FirewallRules: [{AD0898F9-C515-4667-871B-FE4FE020C39B}] => (Allow) C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe (TomTom International B.V. -> TomTom)
FirewallRules: [{0F38F123-95CD-4144-BB96-86B2C013A17E}] => (Allow) C:\Program Files\TV-Browser\tvbrowser_noDD.exe () [Datei ist nicht signiert]
FirewallRules: [{9DC39148-9FEB-4996-B807-55FF03742313}] => (Allow) C:\Program Files\TV-Browser\tvbrowser_noDD.exe () [Datei ist nicht signiert]
FirewallRules: [{537CA35E-44A0-4BCB-BEDE-1C39778A2C02}] => (Allow) C:\Program Files\TV-Browser\tvbrowser.exe () [Datei ist nicht signiert]
FirewallRules: [{593BA6B5-F442-4FA2-844E-05F4F3E212B4}] => (Allow) C:\Program Files\TV-Browser\tvbrowser.exe () [Datei ist nicht signiert]
FirewallRules: [{F4314AFA-DC41-49E6-9644-06DB52ABAE27}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{79B65AE5-CD8F-4434-A78E-F6D3B4163D73}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{3FB6EFA3-2F46-4A56-A7BC-22554F04D2C6}] => (Allow) C:\Program Files (x86)\Common Files\Aladdin Shared\HASP\hasplms.exe (Gemalto, Inc. -> SafeNet, Inc.)
FirewallRules: [{01CC8CC9-5E15-41AC-957C-FF85A97A08DC}] => (Allow) LPort=5454
FirewallRules: [UDP Query User{2B906E91-EED9-4166-BF5A-8CF7D5387F9D}C:\users\peter\appdata\local\programs\opera\opera.exe] => (Block) C:\users\peter\appdata\local\programs\opera\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [TCP Query User{B72DC1B4-BB66-42F0-94F3-46F24D4EFCC0}C:\users\peter\appdata\local\programs\opera\opera.exe] => (Block) C:\users\peter\appdata\local\programs\opera\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{58288D6B-66A6-45D4-AB56-E578257202BB}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{CEE686BC-80B9-41F1-A793-B361FC0F29CA}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4CCF5170-24A7-40F6-B181-1DC2C6CF9268}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{84AC5DD6-0B9A-4D48-B07A-34B2B3455002}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{1A84E094-91DD-4120-8FEB-9FC2951EF3DA}] => (Allow) C:\Program Files\Acronis\CyberProtect\cyber-protect-service.exe (Acronis International GmbH -> Acronis International GmbH)
FirewallRules: [{CAC0E121-3DA4-471E-9B11-55C76BECA26F}] => (Allow) C:\Program Files (x86)\Acronis\Agent\aakore.exe (Acronis International GmbH -> Acronis International GmbH)
FirewallRules: [{FC36EB49-9E3E-492B-A921-62E9E4635298}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe (Acronis International GmbH -> )
FirewallRules: [{67374B5C-A003-4808-BADF-2C081B1F00DC}] => (Allow) C:\Program Files (x86)\Acronis\Agent\bin\task-manager.exe (Acronis International GmbH -> Acronis International GmbH)
FirewallRules: [{8EDAC4AB-9993-499B-85C1-B2BB309081F0}] => (Allow) C:\Program Files (x86)\Acronis\Agent\bin\bckp_amgr.exe (Acronis International GmbH -> Acronis International GmbH)
FirewallRules: [{EAC2C278-F3BE-451F-8C54-72206E51FAAF}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\Home\report_sender.exe (Acronis International GmbH -> )
FirewallRules: [{3903F032-94C4-463E-B47F-B53EE7DAF2D9}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\LicenseActivator.exe (Acronis International GmbH -> )
FirewallRules: [{6B77F079-AD2E-4824-A80C-D26C468D1507}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\ga_service.exe (Acronis International GmbH -> )
FirewallRules: [{C6727170-FD89-425D-B4CA-EE5133B429D1}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe (Acronis International GmbH -> )
FirewallRules: [{89F6D571-B2C6-4674-A77C-043AF89560CC}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe (Acronis International GmbH -> Acronis International GmbH)
FirewallRules: [{F435BEF4-A387-434E-8B64-0390A22BF699}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\acronis_drive.exe (Acronis International GmbH -> )
FirewallRules: [{63D83F13-5345-4B4E-998B-A57FC5883712}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\SystemReport.exe (Acronis International GmbH -> )
FirewallRules: [{4465FD2B-A6C2-43F2-89CF-D06688B370A0}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\MediaBuilder.exe (Acronis International GmbH -> )
FirewallRules: [{85BB2B16-1676-4134-9E39-51CF45E84F8B}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\TrueImageHome\TrueImageHomeService.exe (Acronis International GmbH -> )
FirewallRules: [{B2EAA130-0A27-4BA7-A796-D944624788DE}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageTools.exe (Acronis International GmbH -> )
FirewallRules: [{D213197D-91B6-47FB-AA5D-934B062968EF}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis International GmbH -> )
FirewallRules: [{8EF13E33-4521-4E20-8460-B7E8AEA8EB79}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImage.exe (Acronis International GmbH -> )
FirewallRules: [{2541A049-2341-4E7C-9878-0E01EDF21FB8}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe (Acronis International GmbH -> Acronis International GmbH)
FirewallRules: [{E7B8488B-C9BE-4488-8C19-34DAFBFAE605}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (Acronis International GmbH -> )
FirewallRules: [{B4614F78-1313-40EF-9BCF-9C0DB92359EB}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{626702AA-A18A-4BB7-9923-5348C89483B5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{F048C38E-6C18-4DA5-ACD0-5F7784C10946}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{3C5AA26E-B34A-4E2E-946B-41832FC564C2}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [UDP Query User{696151BF-A876-4433-9648-2B43303353F8}C:\users\peter\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\peter\appdata\local\programs\opera\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [TCP Query User{1C4028DE-5267-4C42-8F3A-ECDF72915E73}C:\users\peter\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\peter\appdata\local\programs\opera\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{A3176337-0DE0-49EF-9854-4799E33685CC}] => (Allow) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.EXE (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{D44768F3-038B-464B-8E2C-657546A455AD}] => (Allow) C:\Program Files\TV-Browser\java\bin\java.exe
FirewallRules: [{8D442E6B-6920-484B-B0BB-908507271F9C}] => (Allow) C:\Program Files\TV-Browser\java\bin\java.exe
FirewallRules: [{F61301FF-F598-4394-BD1E-7BB7FF3A1FE7}] => (Allow) C:\Program Files\TV-Browser\java\bin\javaw.exe
FirewallRules: [{C066BAC7-EFD8-4D8F-95D3-F3774391A416}] => (Allow) C:\Program Files\TV-Browser\java\bin\javaw.exe
FirewallRules: [{EC1910E9-F333-4151-B335-77D375946CBF}] => (Allow) C:\Users\peter\AppData\Local\Temp\WZSE0.TMP\EPFWUPD.exe => Keine Datei
FirewallRules: [{813B596C-355A-448D-AA83-164F12B7BF06}] => (Allow) C:\Users\peter\AppData\Local\Temp\WZSE0.TMP\EPFWUPD.exe => Keine Datei
FirewallRules: [{F4B8BBF1-D9C4-4F69-954E-9559FB2F6312}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MicrosoftFlightSimulator\FlightSimulator.exe (Asobo Studio) [Datei ist nicht signiert]
FirewallRules: [{20BCD9D1-481D-438E-91BF-9BCE2DB31878}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MicrosoftFlightSimulator\FlightSimulator.exe (Asobo Studio) [Datei ist nicht signiert]
FirewallRules: [{549A935F-02F0-451C-8900-EFC0D93475CC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{C834AB3C-3491-4B4A-A2AD-16710A5F4759}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{A05ED03C-C467-489D-B373-392D112D6CE8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{168465CB-A51F-4E40-AE79-07C2077C6031}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{38698DAC-F62F-4578-AD34-4EBAB0C9C268}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B772C2D4-EF85-4116-9B7C-99B1804F54EB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{51B36D00-A325-46B4-9CAB-972FDC26B68F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{4A5C43FD-334A-426E-8199-552925697680}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{F9ED9B8C-3BEF-4EF4-BAC8-258F4598BB60}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{19D74601-A102-4F0F-BFAF-5D235F7022A8}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [{9E9B1A8D-EADE-4723-8227-70298ED67416}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{B1C183E6-8D2D-4372-9267-249A015943D8}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DaVinciPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{F4FE0BA7-A2AA-4ACB-831D-8F5B97333A94}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{36309D1D-E51F-472C-9B73-3674514CDB0B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{F6999368-032A-4DB2-8ECA-E0D7A822EAAF}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{5274B4AF-2433-44A1-8B6E-7DED3345E456}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe => Keine Datei
FirewallRules: [{BB1552EC-4D38-4CC0-A2C6-B32D83B7BFD6}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\fuscript.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [{08B7E09E-FC56-4E39-9D3A-3A955D043C06}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{1B9132A8-2EBC-48F3-9CB7-E4E05253BEAC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.177.645.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{7D5EA8C4-0B47-49CC-A9AD-39A63424BD94}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.177.645.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B55FD541-8F4A-4B96-9209-52FC1A82105B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.177.645.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{36216434-C2A1-43B0-B6F8-25086A29B796}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.177.645.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{3E896DD7-9402-40C2-AB29-064ECA320030}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.177.645.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E76DD4C5-B5AA-40DB-9774-0884ACE5DB9F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.177.645.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{3EF6A535-9092-4CE7-8E5B-CE9343F28FFA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.177.645.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5D4B79B7-26C8-4CD7-AC07-F1ED92F1C4E6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.177.645.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{37A2863E-DF2D-48D1-A2F8-E0DA205FCD6D}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22006.600.1133.7409_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E4E02AFE-43F9-40E5-ACCE-A690475F1907}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22006.600.1133.7409_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D9D4A51B-F5AB-4A1B-8193-AD6CA33449B3}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\97.0.1072.76\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Wiederherstellungspunkte =========================


==================== Fehlerhafte Geräte im Gerätemanager ============


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (02/01/2022 03:04:47 PM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für CAVE\MASCHINE$ über https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Tue, 01 Feb 2022 14:04:46 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 4f18bcf9-4ffe-45ae-aa8c-dbb63f1deffe

Methode: GET(219ms)
Phase: GetCACaps
Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Error: (02/01/2022 03:04:46 PM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für Lokales System über https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Tue, 01 Feb 2022 14:04:45 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: bc404ef2-b1dd-44e8-be31-f98566edef0a

Methode: GET(313ms)
Phase: GetCACaps
Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Error: (02/01/2022 09:50:02 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.

Error: (02/01/2022 09:50:02 AM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.
]

Error: (02/01/2022 09:49:38 AM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für CAVE\MASCHINE$ über https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Tue, 01 Feb 2022 08:49:36 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 76b5d153-d18a-496e-82cf-b0714e4e7e60

Methode: GET(188ms)
Phase: GetCACaps
Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Error: (02/01/2022 09:49:38 AM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für Lokales System über https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Tue, 01 Feb 2022 08:49:37 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 6b76ee4c-fcf7-480e-b550-2761aa46260a

Methode: GET(1797ms)
Phase: GetCACaps
Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Error: (01/31/2022 07:23:56 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Das Programm AdobeNotificationClient.exe Version 5.2.0.121 hat die Interaktion mit Windows beendet und wurde geschlossen. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 4cc4

Startzeit: 01d811522f6ff275

Beendigungszeit: 4294967295

Anwendungspfad: C:\Program Files\WindowsApps\AdobeNotificationClient_2.0.1.8_x86__enpm4xejd91yc\AdobeNotificationClient.exe

Bericht-ID: 14c24aa2-56b4-444b-89e2-3f68df85df6e

Vollständiger Name des fehlerhaften Pakets: AdobeNotificationClient_2.0.1.8_x86__enpm4xejd91yc

Relative Anwendungs-ID des fehlerhaften Pakets: App

Absturztyp: Quiesce

Error: (01/28/2022 06:01:17 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Das Programm dllhost.exe Version 10.0.22000.1 hat die Interaktion mit Windows beendet und wurde geschlossen. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 6df8

Startzeit: 01d814244bcd2834

Beendigungszeit: 4294967295

Anwendungspfad: C:\Windows\SysWOW64\dllhost.exe

Bericht-ID: c5ecb0e7-d76d-457b-8e54-6ddaf3902a8b

Vollständiger Name des fehlerhaften Pakets: Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c

Relative Anwendungs-ID des fehlerhaften Pakets: App

Absturztyp: Quiesce


Systemfehler:
=============
Error: (02/01/2022 09:49:58 AM) (Source: DCOM) (EventID: 10010) (User: MASCHINE)
Description: Der Server "{A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (02/01/2022 09:49:57 AM) (Source: DCOM) (EventID: 10010) (User: MASCHINE)
Description: Der Server "{A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (02/01/2022 09:49:57 AM) (Source: DCOM) (EventID: 10010) (User: MASCHINE)
Description: Der Server "{5250E46F-BB09-D602-5891-F476DC89B700}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (02/01/2022 09:49:57 AM) (Source: DCOM) (EventID: 10010) (User: MASCHINE)
Description: Der Server "{A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (02/01/2022 09:49:57 AM) (Source: DCOM) (EventID: 10010) (User: MASCHINE)
Description: Der Server "{A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (02/01/2022 09:49:57 AM) (Source: DCOM) (EventID: 10010) (User: MASCHINE)
Description: Der Server "{5250E46F-BB09-D602-5891-F476DC89B700}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (02/01/2022 09:49:56 AM) (Source: DCOM) (EventID: 10010) (User: MASCHINE)
Description: Der Server "{A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (02/01/2022 09:49:56 AM) (Source: DCOM) (EventID: 10010) (User: MASCHINE)
Description: Der Server "{A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.


Windows Defender:
================
Date: 2022-01-31 10:55:01
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {84ED4202-99DC-4940-9BF9-E1D86D76B624}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2022-01-30 12:10:22
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {12098AAC-0765-4AA9-87DE-9199ADC23291}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2022-01-29 10:58:47
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {0868A37D-73B0-4513-BABE-D80AAD88888E}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2022-01-28 11:42:17
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {D8180067-37D7-4642-945A-42A25DA6CA46}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2022-01-27 11:27:09
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {8AFD1933-AF8A-48F2-A946-9CFBBC7C810C}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

CodeIntegrity:
===============
Date: 2021-12-15 08:43:20
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.


==================== Speicherinformationen =========================== 

BIOS: American Megatrends Inc. 2423 08/10/2021
Hauptplatine: ASUSTeK COMPUTER INC. TUF GAMING B550M-PLUS (WI-FI)
Prozessor: AMD Ryzen 5 5600X 6-Core Processor 
Prozentuale Nutzung des RAM: 10%
Installierter physikalischer RAM: 65451.29 MB
Verfügbarer physikalischer RAM: 58458.89 MB
Summe virtueller Speicher: 75179.29 MB
Verfügbarer virtueller Speicher: 67252.3 MB

==================== Laufwerke ================================

Drive c: (SYSTEM) (Fixed) (Total:930.78 GB) (Free:476.66 GB) NTFS
Drive e: (FOTO) (Fixed) (Total:931.5 GB) (Free:819.71 GB) NTFS
Drive r: (DATEN) (Fixed) (Total:931.55 GB) (Free:681.41 GB) NTFS
Drive s: (SCAN) (Fixed) (Total:447.13 GB) (Free:292.93 GB) NTFS
Drive t: (MEDIEN) (Fixed) (Total:931.46 GB) (Free:243.8 GB) NTFS

\\?\Volume{1f1a2587-7070-4aed-8bfb-19bb1101d058}\ () (Fixed) (Total:0.62 GB) (Free:0.08 GB) NTFS
\\?\Volume{cfee9485-ab32-456c-a817-9e8686ae820a}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 1 (Size: 1863 GB) (Disk ID: 3BEE6777)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=42)

==========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 447.1 GB) (Disk ID: 2AA61CFF)
Partition 1: (Not Active) - (Size=447.1 GB) - (Type=07 NTFS)

==========================================================
Disk: 3 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt =======================
         

Danke Cosinus, ich hab die FRST und die Addition auf zwei Beiträge aufgeteilt, ist übersichtlicher. Brauchst du sonst noch Informationen?

adwCleaner

Führe AdwCleaner gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei in CODE-Tags.

adwcleaner bitte wiederholen falls es Funde gab.

# -------------------------------
# Malwarebytes AdwCleaner 8.3.1.0
# -------------------------------
# Build:    11-18-2021
# Database: 2021-12-02.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    02-01-2022
# Duration: 00:00:00
# OS:       Windows 10 Pro
# Cleaned:  1
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted       C:\ProgramData\54F3DE4E-B7BA-4EBD-8B3B-385D272CC583

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1461 octets] - [01/02/2022 16:07:44]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
         

Beim zweiten Durchlauf wurde nichts mehr gefunden

DIe Logs sind allesamt ziemlich unaufällig.

Kontrollscans mit MBAM und RK

• Malwarebytes
• RogueKiller

Poste nach Abschluss der beiden Scans die Logs in CODE-Tags.

Program            : RogueKiller Anti-Malware
Version            : 15.2.0.0
x64                : Yes
Program Date       : Jan 20 2022
Location           : C:\Users\peter\Desktop\RogueKiller_portable64.exe
Premium            : No
Company            : Adlice Software
Website            : https://www.adlice.com/
Contact            : https://adlice.com/contact/
Website            : https://adlice.com/download/roguekiller/
Operating System   : Windows 10 (10.0.22000) 64-bit
64-bit OS          : Yes
Startup            : 0
WindowsPE          : No
User               : peter
User is Admin      : Yes
Date               : 2022/02/02 07:05:56
Type               : Removal
Aborted            : No
Scan Mode          : Standard
Duration           : 240
Found items        : 2
Total scanned      : 97266
Signatures Version : 20220201_192318
Truesight Driver   : Yes
Updates Count      : 5

************************* Warnings *************************

************************* Removal *************************
[Suspicious.Path (Potenziell bösartig)] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{EC1910E9-F333-4151-B335-77D375946CBF} -- [%localappdata%\Temp\WZSE0.TMP\EPFWUPD.exe] -> Gelöscht
  [+] scan_what       : 1
  [+] vendors         : Suspicious.Path
  [+] Name            : HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{EC1910E9-F333-4151-B335-77D375946CBF}
  [+] value           : [%localappdata%\Temp\WZSE0.TMP\EPFWUPD.exe]
  [+] Type            : Registry
  [+] file_vtscore    : 0
  [+] file_vttotal    : 0
  [+] is_malicious    : Yes
  [+] detection_level : 3
  [+] id              : 0
  [+] status          : 3
  [+] status_str      : Gelöscht
  [+] removed         : Yes
  [+] status_choice   : 2
  [+] malpe_score     : -1

[Suspicious.Path (Potenziell bösartig)] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{813B596C-355A-448D-AA83-164F12B7BF06} -- [%localappdata%\Temp\WZSE0.TMP\EPFWUPD.exe] -> Gelöscht
  [+] scan_what       : 1
  [+] vendors         : Suspicious.Path
  [+] Name            : HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{813B596C-355A-448D-AA83-164F12B7BF06}
  [+] value           : [%localappdata%\Temp\WZSE0.TMP\EPFWUPD.exe]
  [+] Type            : Registry
  [+] file_vtscore    : 0
  [+] file_vttotal    : 0
  [+] is_malicious    : Yes
  [+] detection_level : 3
  [+] id              : 1
  [+] status          : 3
  [+] status_str      : Gelöscht
  [+] removed         : Yes
  [+] status_choice   : 2
  [+] malpe_score     : -1
         

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 02.02.22
Scan-Zeit: 07:51
Protokolldatei: 8441301c-83f4-11ec-9808-3c7c3fda4a65.json

-Softwaredaten-
Version: 4.5.2.157
Komponentenversion: 1.0.1562
Version des Aktualisierungspakets: 1.0.50591
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 11 (Build 22000.466)
CPU: x64
Dateisystem: NTFS
Benutzer: MASCHINE\peter

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 322667
Erkannte Bedrohungen: 2
In die Quarantäne verschobene Bedrohungen: 2
Abgelaufene Zeit: 2 Min., 39 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 2
Malware.Heuristic.1003, C:\USERS\PETER\DESKTOP\Repair_Manuals.lnk, In Quarantäne, 1000001, 0, , , , , 92E49646492434E9B7374D798FD7B6E7, 35E1A2E7463D09FA825F279AAC8F928AB1D271049091C4316AB0FB31CDD704F2
Malware.Heuristic.1003, C:\BMW R\REPAIR_MANUALS.EXE, In Quarantäne, 1000001, 0, 1.0.50591, 0000000000000000000003EB, dds, 01624517, 760B82A0FD8E08FE32A1C7CFFEC82A34, 9C2829169D2C1BCDD91E505039883BBA12DEA55232CD51525BE95415D3A57BEF

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)

WMI: 0
(keine bösartigen Elemente erkannt)


(end)
         

Guten Morgen!
Danke für deine tolle Hilfe. Hier die reports, wobei die BMW repair manuals, die malwarebyte entdeckt, ist eine gekaufte Originalsoftware von BMW. Vielleicht ist aber bei den updates dazu mal was schiefgegangen.

Das ist ein Fehlalarm, die Dateien kannst du wiederherstellen.

Meinst du das wars dann und die Kiste ist sauber?

Ja, du hast keine weiteren Probleme?

Nein, alles ok. Danke nochmal für deine Hilfe, wenn man nicht so den Durchblick bei Schadsoftwre hat, ist man alleine aufgeschmissen und das Gefühl, da könnte irgendwas verborgen am Werk sein ist nicht lustig. Nächstes mal werd ich mich hüten, blöd auf irgendwas draufzuklicken. Liebe Grüße und bleib gesund, danke
Peter

Dann wären wir durch!

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...und/oder das Forum mit einer kleinen Spende unterstützen.

Abschließend unbedingt folgende Sicherheitsmaßnahmen lesen und umsetzen:

Anleitung: Cleanup & Maßnahmen zur Absicherung des Rechners

Wir sind froh, dass wir helfen konnten

Dieses Thema scheint erledigt und wird aus unseren Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke uns bitte eine Erinnerung inklusive Link zum Thema.

Jeder andere bitte hier klicken und ein eigenes Thema erstellen.