Wondows 10 Pro - PDF Datei mit verdächtigen Namen lässt sich nicht löschen - Bluescreen - nvlddmkm.sys

Ale-xander · 01.09.2022, 21:00

Hallo Zusammen,

Ich habe von Klarna eine Email mit einer PDF Rechnung bekommen und auf den Desktop gespeichert. Nach dem ich die Rechnung bezahlt habe, habe ich die PDF gelöscht, bzw. hatte ich gedacht, dass ich die gelöscht habe. Nach einiger Zeit habe ich festgestellt, dass die Datei immer noch da ist. Sie lässt sich nicht löschen und beim öffnen kommt folgende Meldung(Siehe Anhang).

Dazu ist der PC langsam geworden und geht von Zeit zur Zeit selbständig in abgesicherte Modus mit dem Bluescreen Fehlercode nvlddmkm.sys.

Beste Grüße
Alex

PDF

Addition.txt
Addition.txt

FRST.txt
FRST.txt

cosinus · 01.09.2022, 21:56

Hi,

Logfiles bitte direkt und und CODE-Tags posten.

Ale-xander · 02.09.2022, 13:24

Danke für die schnelle Antwort. Wie ist es gemeint Logfiles direkt zu posten, soll ich sie hier alle reinladen oder reichen die Bilder davon, siehe Anhang. Wie finde ich die Code-tags und kann sie hier posten ?

Logfiles

Ale-xander · 02.09.2022, 18:14

Zitat:

Zitat von cosinus

Hi,

Logfiles bitte direkt und und CODE-Tags posten.

Ich hoffe jetzt ist es richtig

FRST

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 30-08-2022
durchgeführt von AR (Administrator) auf AR-DELL (Dell Inc. Inspiron 17-7779) (02-09-2022 18:43:12)
Gestartet von C:\Users\AR\Downloads
Geladene Profile: AR
Plattform: Microsoft Windows 10 Pro Version 21H1 19043.1889 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Brave
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.133\BraveCrashHandler.exe
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.133\BraveCrashHandler64.exe
(C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.UserSessionAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\DCF\Dell.DCF.UA.Bradbury.API.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\DataManagerSubAgent\Dell.TechHub.DataManager.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\DiagnosticsSubAgent\Dell.TechHub.Diagnostics.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe
(C:\Program Files\Logitech\LogiOptions\LogiOptions.exe ->) (Logitech Inc -> Logitech, Inc.) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe
(C:\Program Files\Rivet Networks\SmartByte\RAPSService.exe ->) (Rivet Networks LLC -> Rivet Networks LLC) C:\Program Files\Rivet Networks\SmartByte\RAPS.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCopyAccelerator.exe
(C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\bin\cloud-drive-ui.exe ->) (Synology Inc. -> Synology Inc.) C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\bin\cloud-drive-connect.exe
(C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\bin\cloud-drive-ui.exe ->) (Synology Inc. -> Synology Inc.) C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\bin\cloud-drive-daemon.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxEM.exe
(explorer.exe ->) (Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe <44>
(explorer.exe ->) (DISPLAYLINK (UK) LIMITED -> DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkTrayApp.exe
(explorer.exe ->) (Henrik Wenz -> Henrik Wenz) C:\Users\AR\AppData\Local\Programs\all-in-one-messenger\All-in-One Messenger.exe <8>
(explorer.exe ->) (HP Inc. -> Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP Officejet Pro 8620\Bin\ScanToPCActivationApp.exe <2>
(explorer.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mstsc.exe
(explorer.exe ->) (milosp) C:\Program Files\WindowsApps\44576milosp.OneCommander_3.10.3.0_neutral__p0rg76fmnrgsm\Rapidrive\OneCommander.exe
(explorer.exe ->) (Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo75de.inf_amd64_5ff36f834a6d461a\WavesSvc64.exe
(explorer.exe ->) (Wistron Corporation -> Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Intel\DPTF\esif_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\dptf_helper.exe
(Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(services.exe ->) (CHENGDU YIWO Tech Development Co., Ltd. -> ) C:\Program Files (x86)\EaseUS\ENS\ensserver.exe
(services.exe ->) (Cisco WebEx LLC -> Cisco WebEx LLC) C:\Windows\SysWOW64\atashost.exe
(services.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe
(services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files (x86)\Dell Customer Connect\DCCService.exe
(services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files\Dell\Dell Help & Support\MDLCSvc.exe
(services.exe ->) (Dell Inc -> Dell INC.) C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe
(services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe
(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe
(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe
(services.exe ->) (Dell Inc -> Dell) C:\Program Files\Dell\TechHub\Dell.TechHub.exe
(services.exe ->) (geek software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe <2>
(services.exe ->) (Glarysoft LTD -> Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\GUBootService.exe
(services.exe ->) (Glarysoft LTD -> Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\GUPMService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_9cf4db1a1fd1b22d\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_4de65d949492707a\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_4de65d949492707a\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_ffd80069472091bc\RstMwService.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvdm.inf_amd64_4793842ae20151f0\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (philandro Software GmbH -> AnyDesk Software GmbH) C:\Program Files (x86)\AnyDesk\AnyDesk.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <3>
(services.exe ->) (Rivet Networks LLC -> Rivet Networks) C:\Program Files\Rivet Networks\SmartByte\SmartByteAnalyticsService.exe
(services.exe ->) (Rivet Networks LLC -> Rivet Networks) C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe
(services.exe ->) (Rivet Networks LLC -> Rivet Networks, LLC.) C:\Program Files\Rivet Networks\SmartByte\RAPSService.exe
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(services.exe ->) (Synology Inc. -> ) C:\Program Files (x86)\Synology\SynologyDrive\bin\vss-service-x64.exe
(services.exe ->) (Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo75de.inf_amd64_5ff36f834a6d461a\WavesSysSvc64.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Cortana.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22062.542.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Speech_OneCore\common\SpeechRuntime.exe
(Synology Inc. -> Synology Inc.) C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\bin\cloud-drive-ui.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [3893296 2016-05-17] (Wistron Corporation -> Dell Inc.)
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [2109064 2019-11-27] (Logitech Inc -> Logitech, Inc.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3951024 2019-10-11] (Microsoft Windows Hardware Compatibility Publisher -> Logitech, Inc.)
HKLM\...\Run: [WavesSvc] => C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo75de.inf_amd64_5ff36f834a6d461a\WavesSvc64.exe [1222536 2018-12-05] (Waves Inc -> Waves Audio Ltd.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [834336 2019-02-26] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [DisplayLinkTrayApp] => C:\Program Files\DisplayLink Core Software\DisplayLinkTrayApp.exe [6342856 2021-05-11] (DISPLAYLINK (UK) LIMITED -> DisplayLink Corp.)
HKLM\...\Run: [WinZip UN] => C:\Program Files\WinZip\WZUpdateNotifier.exe [2814096 2020-02-25] (Corel Corporation -> Corel Corporation)
HKLM\...\Run: [PDF24] => C:\Program Files\PDF24\pdf24.exe [592608 2022-07-13] (geek software GmbH -> geek software GmbH)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Beschränkung <==== ACHTUNG
HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\Run: [HP Officejet Pro 8620 (NET) #2] => C:\Program Files\HP\HP Officejet Pro 8620\Bin\ScanToPCActivationApp.exe [3486368 2021-11-30] (HP Inc. -> Hewlett-Packard Development Company, LP)
HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\Run: [HPECF0D0 (HP Officejet Pro 8620)] => C:\Program Files\HP\HP Officejet Pro 8620\Bin\ScanToPCActivationApp.exe [3486368 2021-11-30] (HP Inc. -> Hewlett-Packard Development Company, LP)
HKU\S-1-5-21-3220973240-3280425687-1539964896-500\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe -os-restarted [666960 2022-08-27] (Mozilla Corporation -> Mozilla Corporation)
HKU\S-1-5-21-3220973240-3280425687-1539964896-500\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2629520 2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\HP 7012 Status Monitor: C:\WINDOWS\system32\hpinksts7012LM.dll [328704 2014-03-03] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Officejet Pro 8620): C:\WINDOWS\system32\HPDiscoPM7012.dll [763040 2021-11-30] (HP Inc. -> Hewlett-Packard Development Company, LP)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\104.0.5112.102\Installer\chrmstp.exe [2022-08-22] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\105.1.43.88\Installer\chrmstp.exe [2022-09-01] (Brave Software, Inc. -> Brave Software, Inc.)
Startup: C:\Users\AR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Synology Drive Client.lnk [2022-09-02]
ShortcutTarget: Synology Drive Client.lnk -> C:\Program Files (x86)\Synology\SynologyDrive\bin\launcher.exe (Synology Inc. -> Synology Inc.)
Startup: C:\Users\AR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet Pro 8620.lnk [2022-09-02]
ShortcutAndArgument: Tintenwarnungen überwachen - HP Officejet Pro 8620.lnk -> C:\WINDOWS\system32\RunDll32.exe => "C:\Program Files\HP\HP Officejet Pro 8620\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN63KFW165;CONNECTION=USB;MONITOR=1;
BootExecute: autocheck autochk *  

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {030CF179-90DF-4C6D-80FB-AC2CC098F6A8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-03-07] (Google Inc -> Google Inc.)
Task: {0318FD73-3EC5-4C3C-85DE-61078738A432} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {06278D0B-8E14-4706-BBBC-0D6C1120AFFE} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [6570472 2022-08-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {084101FA-9324-428B-8CEB-33A5861EC636} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0BED3D25-098B-40B1-BA4A-36909B358BA6} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2021-11-18] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {1251D14E-1773-41CC-BDA7-4A1CA40CD004} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2021-11-18] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {15ACD386-64CA-40AA-827B-2B92A1B671BB} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe do-task "E7CF176E110C211B"
Task: {284A8A5B-7DE5-4781-8021-5688E2E47996} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3220973240-3280425687-1539964896-500 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4154248 2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {2AEA4CBA-9C79-4A09-9741-F7B0D510CABF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2BD5930E-C7AA-48E2-B073-0F99A31FC79B} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\IntelPTTEKRecertification.exe [818008 2021-09-15] (Intel Corporation -> Intel(R) Corporation)
Task: {2EB36D93-9B29-45C4-A94F-DDE44D3659FD} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [116632 2022-08-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {2F1DBA31-F773-484A-9CAA-16BA2DBA367C} - System32\Tasks\WinZip Update Notifier 3 => C:\Program Files\WinZip\WZUpdateNotifier.exe [2814096 2020-02-25] (Corel Corporation -> Corel Corporation)
Task: {3747A056-34EA-453F-8244-530C74798AA0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3DFCEBDC-D553-4767-90C2-328B0E0EAB4D} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3220973240-3280425687-1539964896-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4154248 2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {3F800F2B-8BE0-4F40-840D-2E69E15417D6} - System32\Tasks\WinZip Update Notifier 1 => C:\Program Files\WinZip\WZUpdateNotifier.exe [2814096 2020-02-25] (Corel Corporation -> Corel Corporation)
Task: {44B74B5E-67C2-40A6-A52E-ECC2F7EEA889} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [4475136 2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
Task: {47038120-DBA8-4376-AFDA-DEBD27F6A60B} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {4C8AFA11-D3B8-471E-A1BA-C7DB4131ED3A} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG
Task: {676D9780-E075-4813-8A9E-936E22A115E3} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906752 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {73B66B52-B5E4-4F00-853E-3F01D1C646C4} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646344 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {7C6BE2BB-152A-4DCE-B843-726C99863744} - System32\Tasks\Optimize Push Notification Data File-S-1-5-21-3220973240-3280425687-1539964896-500 => {201600D8-6EFF-48CE-B842-E14D37A0682D} C:\WINDOWS\System32\wpninprc.dll [24064 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {800DC2FE-65BA-4C57-A106-5049111CF4A3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A774CB27-34AF-473B-9DFA-F8BE42528C43} - System32\Tasks\Mozilla\Firefox Background Update E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {A7E162D3-4F21-4122-AA3D-8A2A1ECF5E87} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
Task: {AC6624F1-9C61-4FF4-B0E4-06C68CFA0F20} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {B0A15D36-9523-44A2-B284-E397D5432149} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4154248 2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {BBAA493E-6786-40E7-830F-3EBA1729ACFB} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23713200 2022-08-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {BECFB25C-0985-45E7-AED9-7D85FDD71915} - System32\Tasks\HPCustParticipation HP Officejet Pro 8620 => C:\Program Files\HP\HP Officejet Pro 8620\Bin\HPCustPartic.exe [5744800 2021-11-30] (HP Inc. -> Hewlett-Packard Development Company, LP)
Task: {C8986703-3803-450F-A373-5598AC1F7B0F} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {C9D77B54-A26B-41B6-86A3-02DE329B54D7} - System32\Tasks\WinZip Update Notifier 2 => C:\Program Files\WinZip\WZUpdateNotifier.exe [2814096 2020-02-25] (Corel Corporation -> Corel Corporation)
Task: {C9D994DC-22CE-4497-9548-CD7219C5349B} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3342080 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {CE42D257-B237-4D22-AAE8-A2BE94A5A906} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1003128 2022-03-01] (Nvidia Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {D3563C98-9F23-43EB-B45F-EC9D99842F5B} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\FrameworkAgents\SupportAssistInstaller.exe [663392 2022-08-22] (Dell Inc -> Dell Inc.)
Task: {D71F3985-3312-4D17-93DB-1BB5FAA70069} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23713200 2022-08-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {DA5355A5-6B71-4705-BDF9-96EEA61BAE29} - System32\Tasks\G2MUploadTask-S-1-5-21-3220973240-3280425687-1539964896-1001 => C:\Users\AR\AppData\Local\GoToMeeting\19950\g2mupload.exe [33456 2022-08-07] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {DE550027-F199-4E67-A40E-12A08F93D352} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-03-07] (Google Inc -> Google Inc.)
Task: {E549966C-1E01-4B88-B1A4-56C1186D72A3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [6570472 2022-08-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {E80A164C-1D73-43EC-A336-F6BBD6C16B56} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906752 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {F855D619-26F4-4C58-9204-71A0A28DC400} - System32\Tasks\G2MUpdateTask-S-1-5-21-3220973240-3280425687-1539964896-1001 => C:\Users\AR\AppData\Local\GoToMeeting\19950\g2mupdate.exe [33456 2022-08-07] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {FE365810-C33E-4E71-AB22-4488DC141919} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [116632 2022-08-31] (Microsoft Corporation -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-3220973240-3280425687-1539964896-1001.job => C:\Users\AR\AppData\Local\GoToMeeting\19950\g2mupdate.exe
Task: C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-3220973240-3280425687-1539964896-1001.job => C:\Users\AR\AppData\Local\GoToMeeting\19950\g2mupload.exe
Task: C:\WINDOWS\Tasks\RunDLC.job => cmd c sc start Dell Help SupportWORKGROUP AR DELL
Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe-CheckUpdate(Tracker Software Products (Canada) Ltd.Kee

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{1d0ac1ee-0caa-4089-8e82-f0dcd41815dc}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{1daca583-56f2-4e85-8fc4-3c101282df7e}: [DhcpNameServer] 192.168.2.1

Edge: 
=======
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
Edge DefaultProfile: Default
Edge Profile: C:\Users\AR\AppData\Local\Microsoft\Edge\User Data\Default [2022-08-28]

FireFox:
========
FF DefaultProfile: piwot1xb.default-1614160673643
FF ProfilePath: C:\Users\AR\AppData\Roaming\Mozilla\Firefox\Profiles\piwot1xb.default-1614160673643 [2022-08-31]
FF Homepage: Mozilla\Firefox\Profiles\piwot1xb.default-1614160673643 -> hxxps://web.de/
FF Session Restore: Mozilla\Firefox\Profiles\piwot1xb.default-1614160673643 -> ist aktiviert.
FF Notifications: Mozilla\Firefox\Profiles\piwot1xb.default-1614160673643 -> hxxps://mail.protonmail.com; hxxps://web.whatsapp.com
FF Extension: (Cisco Webex Extension) - C:\Users\AR\AppData\Roaming\Mozilla\Firefox\Profiles\piwot1xb.default-1614160673643\Extensions\ciscowebexstart1@cisco.com.xpi [2022-07-22]
FF Extension: (Kee - Password Manager) - C:\Users\AR\AppData\Roaming\Mozilla\Firefox\Profiles\piwot1xb.default-1614160673643\Extensions\keefox@chris.tomlinson.xpi [2021-05-06]
FF Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\AR\AppData\Roaming\Mozilla\Firefox\Profiles\piwot1xb.default-1614160673643\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2022-08-30]
FF Extension: (1Password – Passwort-Manager) - C:\Users\AR\AppData\Roaming\Mozilla\Firefox\Profiles\piwot1xb.default-1614160673643\Extensions\{d634138d-c276-4fc8-924b-40a0ea21d284}.xpi [2022-07-08]
FF ProfilePath: C:\Users\AR\AppData\Roaming\kompozer.net\KompoZer\Profiles\3761y37m.default [2018-02-24]
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2022-08-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-08-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-3220973240-3280425687-1539964896-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin ProgramFiles/Appdata: C:\Users\AR\AppData\Roaming\mozilla\plugins\npatgpc.dll [2018-10-02]

Chrome: 
=======
CHR Profile: C:\Users\AR\AppData\Local\Google\Chrome\User Data\Default [2022-09-01]
CHR Extension: (Google Docs Offline) - C:\Users\AR\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-09-01]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\AR\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-24]

Brave: 
=======
BRA DefaultProfile: Default
BRA Profile: C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2022-09-02]
BRA StartupUrls: Default -> "hxxps://web.de/magazine/panorama/ehemaliges-heimkind-versuchskaninchen-pharmaindustrie-37207212","hxxps://www.ebay-kleinanzeigen.de/p-anzeige-aufgeben-bestaetigung.html?adId=1500132752&uuid=210ac365-1221-49ae-8a84-59929efdd28a&edited=true","hxxps://bulksell.ebay.de/ws/eBayISAPI.dll?SingleList&sellingMode=ReviseItem&&lineID=195295013856&guest=1","hxxps://mesg.ebay.de/mesgweb/ViewMessages/0/All","hxxps://www.dein-heizungsbauer.de/ratgeber/bauen-sanieren/waermepumpe-arten/","hxxps://solar.huawei.com/de/Products/FusionSolar","hxxps://krannich-solar.com/de-de/unternehmen/kontakt","hxxps://pvaustria.at/technische-grundlagen/","hxxps://www.tecalor.de/de/home.html","hxxps://www.pvxchange.com/Wechselrichter/HUAWEI/SUN2000-12KTL-M2-996000051","hxxps://www.pvxchange.com/mediafiles/pvxchange/attachments/Datasheet_SUN2000-12_20KTL-M2.pdf","hxxps://www.pvxchange.com/Wechselrichter/AC-Nennleistung-5-kW-bis-10-kW::HUAWEI#hfilter","hxxps://www.google.com/search?q=SPR-MAX3-400&ei=0IP7YpTCHbeF9u8PsPex-Ac&ved=0ahUKEwiU6s-Apcv5AhW3gv0HHbB7DH8Q4dUDCA4&oq=SPR-MAX3-400&gs_lcp=Cgdnd3Mtd2l6EAwyBQgAEIAEMgUIABCABDIFCAAQgAQyBQgAEIAEMgQIABAeMgQIABAeMgQIABAeMgYIABAeEAVKBAhBGABKBAhGGABQAFgAYOJoaABwAXgAgAGDAYgBgwGSAQMwLjGYAQCgAQKgAQHAAQE&sclient=gws-wiz","hxxps://www.photovoltaik4all.de/komplettanlagen/?p=6","hxxps://www.memodo.de/sunpower-maxeon-3-400-watt","hxxps://www.hte-shop.de/admin/cache.php","hxxps://www.forexbestshop.com/product/ultimate-trend-following-indicator/","hxxp://themeloader.com/","hxxps://www.google.com/search?q=%C3%BCbersetzer&oq=%C3%BCbersetzer&aqs=chrome.0.69i59.3365j0j1&sourceid=chrome&ie=UTF-8","hxxps://fxmt4indicators.com/product/ultimate-trend-following-indicator/","hxxps://www.pvxchange.com/Mein-Konto","hxxps://www.pvxchange.com/Wechselrichter/HUAWEI/SUN2000-8KTL-M1-High-Current-Version-996000257","hxxps://www.pvxchange.com/mediafiles/pvxchange/attachments/Datasheet_SUN2000-12_20KTL-M2.pdf","hxxps://www.maxsel.de/","hxxps://www.photovoltaik4all.de/phoenix-contact-pv-gak-sol-sc-1st-0-dc-2mppt-1000se","hxxps://www.photovoltaik-shop.com/mwdownloads/download/link/id/160/","hxxps://www.shinetech-power.de/solar-module/jinko/","hxxps://www.photovoltaik4all.de/speicher/?p=1","hxxps://www.amazon.de/dp/B00KM3URHG/ref=cm_sw_r_api_i_YKPE5YN27RTHSFNKPZB4_0?_encoding=UTF8&psc=1","hxxps://www.photovoltaik-shop.com/wechselrichter-huawei-sun2000-12ktl-m2.html","hxxps://www.google.com/search?q=NOCT+module+leistung&oq=NOCT+module+leistung&aqs=chrome..69i57.9663j0j1&sourceid=chrome&ie=UTF-8","hxxps://solaranlagen-forum.com/forum/board/2-photovoltaikanlagen-planung/?pageNo=3","hxxps://my.1password.com/signin?landing-page=%2Fvaults%2Faeg7aqj5ba2eq4bq7w6y6xdpgy%2F001%2F4mh6jszqnwrelnwfjc6ir2mqui","hxxps://www.maxsel.de/produkt-kategorie/wechselrichter/hybrid-wechselrichter/hybrid-wechselrichter-von-huawei/","hxxps://www.photovoltaikforum.com/thread/162394-unterschied-huawei-sun2000-15ktl-m0-bzw-sun2000-15ktl-m2/","hxxps://www.rechnerphotovoltaik.de/photovoltaik/kosten-finanzierung/kosten-preise","hxxps://www.pvxchange.com/Energiespeicher","hxxps://www.pvxchange.com/mediafiles/pvxchange/attachments/Datasheet_SUN2000-12_20KTL-M2.pdf","hxxps://www.pvxchange.com/mediafiles/pvxchange/attachments/Datasheet_SUN2000-12_20KTL-M2.pdf","hxxps://www.google.com/search?q=SUN2000-12KTL-M2&oq=SUN2000-12KTL-M2&aqs=chrome..69i57j69i60l3.1555j0j1&sourceid=chrome&ie=UTF-8","hxxps://www.voltus.de/?cl=details&anid=3b700e2210d7deed529db81fc5ab546a&iaid=20220821100846547401060df99a0b","hxxps://www.ske-solar.com/produkt/huawei-sun2000-12ktl-m2-wechselrichter/","hxxps://www.voltus.de/?cl=details&anid=1548031267957e2262455efd58a725ab&iaid=2022082112334243323735bbc9be2d","hxxps://forum.jtl-software.de/threads/artikelmerkmale-sortieren-nicht-konsequent.136983/","hxxps://guide.jtl-software.de/jtl-wawi/jtl-ameise/attribute-merkmale-und-eigene-felder-importieren/","hxxps://forum.jtl-software.de/attachments/bildschirmfoto-2020-09-17-um-12-21-50-png.46593/","hxxps://www.shinetech-power.de/","hxxps://www.memodo.de/jinkosolar-jkm375n-6tl3-v","hxxps://www.google.com/search?q=%C3%BCbersetzer&oq=%C3%BCbersetzer&aqs=chrome.0.69i59.5520j0j1&sourceid=chrome&ie=UTF-8","hxxps://www.sparda-bw.de/","hxxps://www.jtl-software.de/extension-store/wnm-eu-energielabels-jtl-shop-5","hxxp://hte-shop.de/"
BRA DefaultSearchKeyword: Default -> :g
BRA Session Restore: Default -> ist aktiviert.
BRA Extension: (Google Übersetzer) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2022-03-10]
BRA Extension: (lock) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\aeblfdkhhhdcdjpifhhbdiojplfjncoa [2022-07-07]
BRA Extension: (Mate Translate – Übersetzer, Wörterbuch) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\ihmgiclibbndffejedjimfjmfoabpcke [2022-08-30]
BRA Profile: C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\System Profile [2022-08-25]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2022-09-01]
BRA Extension: (Brave NTP background images) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2022-08-11]
BRA Extension: (Brave Ads Resources) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\bbefpembgddgdihpkcidgdgiojjlchji [2021-12-09]
BRA Extension: (Wallet Data Files Updater) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2022-08-17]
BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2022-09-02]
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2022-09-01]
BRA Extension: (Brave Ad Block Updater (EasyList Germany)) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\faknfgalcghekhfggcdikddilkpjbonh [2022-09-02]
BRA Extension: (Brave Ads Resources) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\jcncoheihebhhiemmbmpfhkceomfipbj [2021-12-09]
BRA Extension: (Brave SpeedReader Updater) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\jicbkmdloagakknpihibphagfckhjdih [2022-03-11]
BRA Extension: (Brave NTP sponsored images) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\obbokncgfcbepeipkhpdepjjoncelefj [2022-09-02]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2022-08-31]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [3853384 2022-08-12] (philandro Software GmbH -> AnyDesk Software GmbH)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2021-11-18] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2021-11-18] (Brave Software, Inc. -> BraveSoftware Inc.)
R3 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12102608 2022-08-02] (Microsoft Corporation -> Microsoft Corporation)
R2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [458960 2022-08-16] (Dell Inc -> Dell Technologies Inc.)
R2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [161488 2022-08-16] (Dell Inc -> Dell Technologies Inc.)
R2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [484560 2022-08-16] (Dell Inc -> Dell Technologies Inc.)
R2 Dell Customer Connect; C:\Program Files (x86)\Dell Customer Connect\DCCService.exe [130936 2017-09-19] (Dell Inc -> Dell Inc.)
S4 Dell Foundation Services; C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe [97616 2017-01-11] (Dell Inc -> Dell)
R2 Dell Help & Support; C:\Program Files\Dell\Dell Help & Support\MDLCSvc.exe [41008 2018-01-16] (Dell Inc -> Dell Inc.)
R2 Dell SupportAssist Remediation; C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe [22224 2022-08-11] (Dell Inc -> Dell INC.)
R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [45784 2022-08-17] (Dell Inc -> )
R2 DellTechHub; C:\Program Files\Dell\TechHub\Dell.TechHub.exe [156064 2022-08-15] (Dell Inc -> Dell)
R2 EaseUS UPDATE SERVICE; C:\Program Files (x86)\EaseUS\ENS\ensserver.exe [27784 2021-11-15] (CHENGDU YIWO Tech Development Co., Ltd. -> )
S3 ElfoService; C:\Program Files (x86)\ElsterFormular Update Service\bin\elfoService.exe [1113864 2020-03-18] (Bayerisches Landesamt fuer Steuern -> )
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncHelper.exe [3380624 2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
R2 GUBootService; C:\Program Files (x86)\Glary Utilities 5\GUBootService.exe [875392 2021-12-12] (Glarysoft LTD -> Glarysoft Ltd)
R2 GUPMService; C:\Program Files (x86)\Glary Utilities 5\GUPMService.exe [65408 2021-12-12] (Glarysoft LTD -> Glarysoft Ltd)
S4 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2016-03-02] (Intel Corporation) [Datei ist nicht signiert]
S4 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-02] (Intel Corporation) [Datei ist nicht signiert]
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.166.0807.0002\OneDriveUpdaterService.exe [3800976 2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
R2 PDF24; C:\Program Files\PDF24\pdf24.exe [592608 2022-07-13] (geek software GmbH -> geek software GmbH)
S4 Product Registration; C:\Program Files\Dell\Dell Product Registration\PRSvc.exe [47144 2017-04-06] (Dell Inc -> Dell)
R2 RAPSService; C:\Program Files\Rivet Networks\SmartByte\RAPSService.exe [64848 2020-08-14] (Rivet Networks LLC -> Rivet Networks, LLC.)
S3 RNDBWM; C:\Program Files\Rivet Networks\SmartByte\RNDBWMService.exe [64856 2020-08-14] (Rivet Networks LLC -> Rivet Networks, LLC.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6255896 2022-08-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SmartByte Analytics Service; C:\Program Files\Rivet Networks\SmartByte\SmartByteAnalyticsService.exe [1630576 2020-08-14] (Rivet Networks LLC -> Rivet Networks)
R2 SmartByte Network Service x64; C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe [2385256 2020-08-14] (Rivet Networks LLC -> Rivet Networks)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [160096 2022-08-22] (Dell Inc -> Dell Inc.)
R2 Synology Drive VSS Service x64; C:\Program Files (x86)\Synology\SynologyDrive\bin\vss-service-x64.exe [372208 2022-04-26] (Synology Inc. -> )
S3 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [14621592 2022-07-13] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe [3120992 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe [133544 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvdm.inf_amd64_4793842ae20151f0\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvdm.inf_amd64_4793842ae20151f0\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 DDDriver; C:\WINDOWS\System32\drivers\dddriver64Dcsa.sys [43400 2021-09-09] (Microsoft Windows Hardware Compatibility Publisher -> Dell Technologies)
R3 DellInstrumentation; C:\WINDOWS\System32\drivers\DellInstrumentation.sys [37808 2022-05-20] (Microsoft Windows Hardware Compatibility Publisher -> Dell)
S3 DellProf; C:\WINDOWS\system32\drivers\DellProf.sys [41208 2018-05-08] (Techporch Incorporated -> Dell Computer Corporation)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 dlcdcncm; C:\WINDOWS\System32\drivers\dlcdcncm62_x64.sys [81744 2021-05-28] (DISPLAYLINK (UK) LIMITED -> DisplayLink Corp.)
S3 dlusbaudio; C:\WINDOWS\system32\DRIVERS\dlusbaudio_x64.sys [238352 2017-09-18] (DISPLAYLINK -> DisplayLink Corp.)
R2 DpmLiteDrv; c:\Program Files\Dell\QuickSet\DpmLiteDrv64.sys [15080 2014-10-15] (Wistron Corporation -> Wistron Corp.)
R1 GUBootStartup; C:\WINDOWS\System32\drivers\GUBootStartup.sys [30720 2021-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Glarysoft Ltd)
R3 MpKsl24634efd; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{84C5DA60-4792-4526-9486-B8D2E6FC3DF4}\MpKslDrv.sys [141576 2022-09-02] (Microsoft Windows -> Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48552 2021-11-01] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)
R3 SmbCoSvc; C:\WINDOWS\system32\DRIVERS\SmbCo10X64.sys [164424 2020-08-14] (Rivet Networks LLC -> Rivet Networks, LLC.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167544 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-06-23] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [452856 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [91384 2022-06-23] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

Fehler beim Lesen der Datei: "C:\Users\AR\Desktop\eyJraWQiOiJsbmstc3J2LXYxIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJsbmstc3J2IiwiYXVkIjoibG5rLXJlcyIsImV4cCI6MTY1NDE2MjA2MiwianRpIjoiMzBjMzZlZDQtMWM0NS00ODQxLTgxMzYtMjEyMjYwOWE2NzA1LUlVLWlOdnF4bWZyMmZZOENKQmxFcWciLCJpYXQiOjE2NTQxNjExNjIsInR5cCI6ImtyZWRfaW52b2lj.pdf"
2022-09-02 18:42 - 2022-09-02 18:42 - 002371072 _____ (Farbar) C:\Users\AR\Downloads\FRST64 (3).exe
2022-09-02 11:49 - 2022-09-02 11:49 - 000068202 _____ C:\Users\AR\Downloads\Verkaufsschild--Lieferbar---Jinko-PV-Module-375W-Tiger-All-Black-JKM-M6RL3B (1).pdf
2022-09-02 11:47 - 2022-09-02 11:47 - 000068202 _____ C:\Users\AR\Downloads\Verkaufsschild--Lieferbar---Jinko-PV-Module-375W-Tiger-All-Black-JKM-M6RL3B.pdf
2022-09-01 22:42 - 2022-09-01 22:43 - 000111420 _____ C:\Users\AR\Downloads\Auftragsbestätigung 2022210055.PDF
2022-09-01 22:39 - 2022-09-01 22:39 - 000077870 _____ C:\Users\AR\Downloads\Angebot (1).pdf
2022-09-01 21:25 - 2022-09-01 21:33 - 000074657 _____ C:\Users\AR\Downloads\Addition.txt
2022-09-01 21:15 - 2022-09-02 18:44 - 000046032 _____ C:\Users\AR\Downloads\FRST.txt
2022-09-01 21:14 - 2022-09-01 21:14 - 002371072 _____ (Farbar) C:\Users\AR\Downloads\FRST64 (2).exe
2022-09-01 21:13 - 2022-09-01 21:13 - 002371072 _____ (Farbar) C:\Users\AR\Downloads\FRST64 (1).exe
2022-09-01 21:12 - 2022-09-01 21:13 - 002371072 _____ (Farbar) C:\Users\AR\Downloads\FRST64.exe
2022-09-01 21:04 - 2022-09-01 21:04 - 003373192 _____ (Crystal Rich Ltd ) C:\Users\AR\Downloads\lockhuntersetup_3-4-3 (1).exe
2022-09-01 20:56 - 2022-09-01 20:57 - 000000000 ____D C:\ProgramData\LockHunter
2022-09-01 20:48 - 2022-09-01 20:48 - 000000934 ____C C:\Users\AR\Desktop\LockHunter.lnk
2022-09-01 20:47 - 2022-09-01 20:47 - 000000000 ____D C:\Users\AR\AppData\Roaming\LockHunter
2022-09-01 20:47 - 2022-09-01 20:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LockHunter
2022-09-01 20:47 - 2022-09-01 20:47 - 000000000 ____D C:\Program Files\LockHunter
2022-09-01 20:46 - 2022-09-01 20:46 - 003373192 _____ (Crystal Rich Ltd ) C:\Users\AR\Downloads\lockhuntersetup_3-4-3.exe
2022-09-01 20:39 - 2022-09-01 20:39 - 001078591 _____ C:\Users\AR\Downloads\Unlocker1.9.2 (1).exe
2022-09-01 20:20 - 2022-09-01 20:20 - 001078591 _____ C:\Users\AR\Downloads\Unlocker1.9.2.exe
2022-09-01 19:38 - 2022-09-01 19:39 - 000000000 ___DC C:\Users\AR\Desktop\Neuer Ordner
2022-09-01 18:31 - 2022-09-01 18:31 - 000000000 ____D C:\Users\AR\OneCommander
2022-09-01 17:45 - 2022-09-01 20:57 - 000008192 ___SH C:\DumpStack.log.tmp
2022-09-01 13:22 - 2022-09-01 13:22 - 000466750 _____ C:\Users\AR\Downloads\montageanleitung_its_96.pdf
2022-09-01 13:15 - 2022-09-01 13:15 - 001136626 _____ C:\Users\AR\Downloads\montageanleitung_ts93b.pdf
2022-09-01 09:55 - 2022-09-01 09:55 - 000245546 _____ C:\Users\AR\Downloads\Re Luftdruckwächter 2019_11_18.pdf
2022-09-01 07:54 - 2022-09-01 07:54 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2022-09-01 07:54 - 2022-09-01 07:54 - 000002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-09-01 07:53 - 2022-09-02 10:26 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2022-08-31 14:57 - 2022-08-31 14:57 - 000077870 _____ C:\Users\AR\Downloads\Angebot.pdf
2022-08-31 14:56 - 2022-08-31 14:56 - 001418966 _____ C:\Users\AR\Downloads\Mono_S4_395-410W_HC_MBB_108-Zellen_web_de.pdf
2022-08-31 14:55 - 2022-08-31 14:55 - 000589426 _____ C:\Users\AR\Downloads\Luna2000.pdf
2022-08-31 11:28 - 2022-06-26 21:26 - 006366208 ____C C:\Users\AR\Documents\backup.bak
2022-08-31 11:05 - 2022-08-31 11:59 - 000000000 ___DC C:\Users\AR\Documents\Outlook-Dateien
2022-08-31 00:16 - 2022-08-31 00:16 - 000002626 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2022-08-31 00:16 - 2022-08-31 00:16 - 000002622 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2022-08-31 00:16 - 2022-08-31 00:16 - 000002601 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2022-08-31 00:16 - 2022-08-31 00:16 - 000002579 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk
2022-08-31 00:16 - 2022-08-31 00:16 - 000002576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2022-08-31 00:16 - 2022-08-31 00:16 - 000002543 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2022-08-31 00:16 - 2022-08-31 00:16 - 000002540 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk
2022-08-31 00:16 - 2022-08-31 00:16 - 000002512 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2022-08-31 00:16 - 2022-08-31 00:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2022-08-31 00:12 - 2022-08-31 00:16 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2022-08-31 00:12 - 2022-08-31 00:12 - 000000000 ____D C:\Program Files\Microsoft Office 15
2022-08-31 00:03 - 2022-09-01 07:54 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3220973240-3280425687-1539964896-1001
2022-08-31 00:03 - 2022-09-01 07:54 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3220973240-3280425687-1539964896-500
2022-08-31 00:03 - 2022-08-31 00:03 - 000000000 ___RD C:\Users\defaultuser100001\OneDrive
2022-08-31 00:03 - 2022-08-31 00:03 - 000000000 ___RD C:\Users\defaultuser100000\OneDrive
2022-08-31 00:03 - 2022-08-31 00:03 - 000000000 ___RD C:\Users\Default\OneDrive
2022-08-30 17:48 - 2022-09-01 07:43 - 000469008 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-08-30 00:04 - 2022-08-30 00:04 - 000195848 _____ C:\Users\AR\Downloads\Jahrlicher Uberblick uber Kosten und Gebuhren CFD 2022.pdf
2022-08-30 00:02 - 2022-08-30 00:02 - 000039090 _____ C:\Users\AR\Downloads\Jahrlicher Uberblick uber Kosten und Gebuhren Beschreibung 2022.pdf
2022-08-29 17:38 - 2022-08-29 17:38 - 000017509 ____C C:\Users\AR\Desktop\Retoure_Vlasveld_24376417.pdf
2022-08-28 13:53 - 2022-08-28 13:53 - 000000000 ____D C:\WINDOWS\Panther
2022-08-28 13:53 - 2019-07-05 11:50 - 009899960 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll
2022-08-28 13:53 - 2019-07-05 11:50 - 000443480 _____ (Realsil Semiconductor Corporation) C:\WINDOWS\system32\Drivers\RtsUer.sys
2022-08-28 13:47 - 2022-08-28 13:47 - 000005674 _____ C:\Users\AR\Downloads\6x_Sudoku_Level_Schwer (9).pdf
2022-08-28 13:47 - 2022-08-28 13:47 - 000005674 _____ C:\Users\AR\Downloads\6x_Sudoku_Level_Schwer (6).pdf
2022-08-28 13:47 - 2022-08-28 13:47 - 000005673 _____ C:\Users\AR\Downloads\6x_Sudoku_Level_Schwer (5).pdf
2022-08-28 13:47 - 2022-08-28 13:47 - 000005668 _____ C:\Users\AR\Downloads\6x_Sudoku_Level_Schwer (2).pdf
2022-08-28 13:47 - 2022-08-28 13:47 - 000005659 _____ C:\Users\AR\Downloads\6x_Sudoku_Level_Schwer (3).pdf
2022-08-28 13:47 - 2022-08-28 13:47 - 000005657 _____ C:\Users\AR\Downloads\6x_Sudoku_Level_Schwer (1).pdf
2022-08-28 13:47 - 2022-08-28 13:47 - 000005654 _____ C:\Users\AR\Downloads\6x_Sudoku_Level_Schwer (7).pdf
2022-08-28 13:47 - 2022-08-28 13:47 - 000005649 _____ C:\Users\AR\Downloads\6x_Sudoku_Level_Schwer (8).pdf
2022-08-28 13:47 - 2022-08-28 13:47 - 000005648 _____ C:\Users\AR\Downloads\6x_Sudoku_Level_Schwer (4).pdf
2022-08-28 13:46 - 2022-08-28 13:46 - 000005663 _____ C:\Users\AR\Downloads\6x_Sudoku_Level_Schwer.pdf
2022-08-27 14:47 - 2022-08-27 14:47 - 000056106 _____ C:\Users\AR\Downloads\IG_Steuererklaerung_2019.pdf
2022-08-27 14:46 - 2022-08-27 14:46 - 000055431 _____ C:\Users\AR\Downloads\IG_Steuererklaerung_2020.pdf
2022-08-27 14:45 - 2022-08-27 14:45 - 000054198 _____ C:\Users\AR\Downloads\IG_Steuererklaerung_2021.pdf
2022-08-26 13:50 - 2022-08-26 13:50 - 000000080 _____ C:\Users\AR\Downloads\export_csv.csv
2022-08-26 13:35 - 2022-08-26 13:36 - 000000000 ___DC C:\Users\AR\Desktop\Lieferanten PV
2022-08-26 13:27 - 2022-08-26 13:27 - 000003946 _____ C:\WINDOWS\system32\Tasks\Dell SupportAssistAgent AutoUpdate
2022-08-23 09:18 - 2022-08-23 09:18 - 002855157 _____ C:\Users\AR\Downloads\Datenblatt Jinko 375, full black.pdf
2022-08-19 15:56 - 2022-08-19 15:56 - 000003536 _____ C:\Users\AR\AppData\Local\recently-used.xbel
2022-08-13 20:27 - 2022-08-13 20:27 - 000000000 ____D C:\WINDOWS\{B08702CA-6882-42A8-8C5E-5D4BC82C0E88}
2022-08-12 17:50 - 2022-08-12 17:50 - 000000162 ___HC C:\Users\AR\Desktop\~$cherungskopie von leer.wbk
2022-08-11 09:40 - 2022-08-11 09:40 - 000151329 ____C C:\Users\AR\Desktop\klarna Rechnung (002).jpeg
2022-08-10 09:01 - 2022-08-10 09:01 - 000000000 ___HD C:\$WinREAgent
2022-08-10 00:41 - 2022-08-10 00:41 - 001329416 _____ C:\WINDOWS\system32\FaceTrackerInternal.dll
2022-08-10 00:41 - 2022-08-10 00:41 - 001314304 _____ C:\WINDOWS\system32\FaceProcessor.dll
2022-08-10 00:41 - 2022-08-10 00:41 - 000506136 _____ C:\WINDOWS\system32\FaceProcessorCore.dll
2022-08-10 00:40 - 2022-08-10 00:40 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2022-08-10 00:40 - 2022-08-10 00:40 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2022-08-10 00:40 - 2022-08-10 00:40 - 000011803 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-08-10 00:39 - 2022-08-10 00:39 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2022-08-10 00:38 - 2022-08-10 00:38 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-08-10 00:38 - 2022-08-10 00:38 - 000162304 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2022-08-10 00:38 - 2022-08-10 00:38 - 000089088 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.proxystub.dll
2022-08-10 00:38 - 2022-08-10 00:38 - 000073216 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2022-08-08 14:55 - 2022-08-08 14:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2022-08-08 14:54 - 2022-08-08 14:55 - 000000000 ____D C:\Program Files\PDF24
2022-08-07 14:53 - 2022-08-10 08:54 - 000000632 _____ C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-3220973240-3280425687-1539964896-1001.job
2022-08-07 14:53 - 2022-08-10 08:54 - 000000536 _____ C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-3220973240-3280425687-1539964896-1001.job
2022-08-05 13:05 - 2022-08-07 14:53 - 000003780 _____ C:\WINDOWS\system32\Tasks\G2MUploadTask-S-1-5-21-3220973240-3280425687-1539964896-1001
2022-08-05 13:05 - 2022-08-07 14:53 - 000003684 _____ C:\WINDOWS\system32\Tasks\G2MUpdateTask-S-1-5-21-3220973240-3280425687-1539964896-1001
2022-08-05 13:05 - 2022-08-07 14:53 - 000000000 ____D C:\Users\AR\AppData\Local\GoToMeeting
2022-08-05 13:05 - 2022-08-05 13:05 - 000000000 ____D C:\Users\AR\AppData\Local\GoTo Opener

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2022-09-02 18:45 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-09-02 18:44 - 2018-05-25 16:56 - 000000000 ____D C:\FRST
2022-09-02 17:50 - 2021-12-10 16:41 - 000000000 ____D C:\Users\AR\AppData\Roaming\All-in-One Messenger
2022-09-02 17:45 - 2017-03-07 12:23 - 000000000 ____D C:\Program Files (x86)\Google
2022-09-02 17:42 - 2020-10-07 12:08 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-09-02 16:36 - 2017-03-12 19:45 - 000000000 ___DC C:\Users\AR\AppData\LocalLow\Mozilla
2022-09-02 16:14 - 2020-06-14 22:14 - 000000000 ____D C:\Users\AR\AppData\Local\SynologyDrive
2022-09-02 14:08 - 2017-03-07 10:43 - 000000000 ___DC C:\Users\AR\AppData\Local\CrashDumps
2022-09-02 12:25 - 2017-10-05 22:19 - 000000000 ____D C:\ProgramData\NVIDIA
2022-09-02 08:15 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2022-09-02 08:14 - 2016-10-25 17:39 - 000000000 __SHD C:\Users\AR\IntelGraphicsProfiles
2022-09-01 23:47 - 2017-03-07 09:49 - 000002346 ___HC C:\Users\AR\Documents\Default.rdp
2022-09-01 21:05 - 2020-10-07 12:28 - 001632230 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-09-01 21:05 - 2019-12-07 16:51 - 000708722 _____ C:\WINDOWS\system32\perfh007.dat
2022-09-01 21:05 - 2019-12-07 16:51 - 000142964 _____ C:\WINDOWS\system32\perfc007.dat
2022-09-01 21:05 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-09-01 20:57 - 2020-10-07 12:37 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-09-01 20:57 - 2020-10-07 12:15 - 000000000 ____D C:\Users\AR
2022-09-01 20:57 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-09-01 20:57 - 2019-12-07 11:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2022-09-01 20:57 - 2016-10-08 12:46 - 000000000 ___DC C:\Intel
2022-09-01 20:56 - 2017-02-12 21:50 - 000000000 ___DC C:\Users\AR\AppData\Roaming\KeePass
2022-09-01 20:05 - 2018-05-29 08:16 - 000000000 ___DC C:\Users\AR\AppData\Local\D3DSCache
2022-09-01 19:45 - 2021-11-26 07:59 - 000000000 ____D C:\WINDOWS\Minidump
2022-09-01 19:45 - 2017-03-07 11:43 - 000000000 ___DC C:\Users\AR\AppData\Roaming\FileZilla
2022-09-01 19:42 - 2021-12-16 11:28 - 000000000 ____D C:\Program Files (x86)\Glary Utilities 5
2022-09-01 18:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-09-01 18:30 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-09-01 18:30 - 2018-06-14 18:33 - 000000000 ____D C:\ProgramData\Packages
2022-09-01 18:30 - 2018-05-27 11:48 - 000000000 ___DC C:\Users\AR\AppData\Local\PlaceholderTileLogoFolder
2022-09-01 18:30 - 2017-12-13 23:55 - 000000000 ___DC C:\Users\AR\AppData\Local\Packages
2022-09-01 17:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2022-09-01 17:43 - 2021-11-18 14:44 - 000002401 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2022-08-31 23:10 - 2020-10-14 19:50 - 000000000 ____D C:\Users\AR\AppData\Local\Deployment
2022-08-31 20:55 - 2021-12-16 13:06 - 000000000 ____D C:\Program Files (x86)\AnyDesk
2022-08-31 11:33 - 2022-06-26 21:26 - 006620160 ____C C:\Users\AR\Documents\backup.pst
2022-08-31 00:12 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2022-08-31 00:03 - 2022-06-26 16:22 - 000000000 ____D C:\Users\defaultuser100001
2022-08-31 00:03 - 2022-06-26 16:15 - 000000000 ____D C:\Users\defaultuser100000
2022-08-31 00:03 - 2016-10-25 17:40 - 000000000 ___RD C:\Users\AR\OneDrive
2022-08-30 23:29 - 2022-02-09 15:36 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-08-30 17:48 - 2017-03-29 11:47 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2022-08-30 17:48 - 2016-10-25 19:01 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-08-29 22:40 - 2020-10-07 12:37 - 000003632 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-08-29 22:40 - 2020-10-07 12:37 - 000003508 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2022-08-28 13:53 - 2016-10-08 12:45 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2022-08-28 13:53 - 2016-10-08 12:45 - 000000000 ____D C:\ProgramData\Package Cache
2022-08-28 13:53 - 2016-10-08 12:45 - 000000000 ____D C:\Program Files (x86)\Realtek
2022-08-28 10:46 - 2016-10-08 22:22 - 000000000 ____D C:\ProgramData\Dell
2022-08-27 19:50 - 2020-07-05 01:39 - 000002473 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-08-27 17:45 - 2021-10-06 07:16 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-08-27 17:45 - 2016-10-25 19:01 - 000001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-08-26 13:28 - 2016-10-08 12:45 - 000000000 ____D C:\Program Files\Dell
2022-08-26 13:21 - 2022-04-03 19:11 - 000000000 ____D C:\Program Files\dotnet
2022-08-23 07:44 - 2020-10-07 12:37 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-08-23 07:44 - 2020-10-07 12:37 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-08-22 23:39 - 2017-03-07 12:23 - 000002328 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-08-19 16:53 - 2018-05-27 11:59 - 000000000 ___DC C:\Users\AR\AppData\Local\babl-0.1
2022-08-19 13:37 - 2021-04-09 08:27 - 000000000 ____D C:\Users\AR\AppData\Roaming\Telegram Desktop
2022-08-15 13:35 - 2021-11-18 14:42 - 000003654 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineUA
2022-08-15 13:35 - 2021-11-18 14:42 - 000003530 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineCore
2022-08-13 20:29 - 2021-09-01 13:45 - 000000000 ____D C:\ProgramData\Temp
2022-08-13 20:29 - 2016-10-08 12:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
2022-08-13 20:29 - 2016-10-08 12:45 - 000000000 ____D C:\Program Files (x86)\Dell
2022-08-12 19:20 - 2020-10-07 12:15 - 000000000 ____D C:\Users\Administrator
2022-08-12 18:59 - 2022-03-31 08:59 - 000000000 ____D C:\ProgramData\Malwarebytes
2022-08-12 18:59 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-08-12 18:56 - 2019-12-07 11:14 - 000000000 ____D C:\PerfLogs
2022-08-12 18:51 - 2017-03-07 10:57 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2022-08-12 18:28 - 2017-03-07 10:57 - 000000000 ___DC C:\Users\AR\AppData\Roaming\TeamViewer
2022-08-11 00:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2022-08-11 00:42 - 2019-12-07 16:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2022-08-11 00:42 - 2019-12-07 16:54 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2022-08-11 00:42 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-08-11 00:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2022-08-11 00:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-08-11 00:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-08-11 00:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2022-08-11 00:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-08-11 00:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-08-11 00:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-08-11 00:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-08-10 09:20 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-08-10 00:38 - 2020-10-07 12:09 - 003011072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-08-10 00:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2022-08-10 00:05 - 2016-11-06 15:14 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-08-09 23:51 - 2016-11-06 15:14 - 144534560 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2022-06-26 20:43 - 2022-06-26 20:43 - 000052319 _____ () C:\Users\AR\AppData\Roaming\Durch Trennzeichen getrennte Werte.ADR
2022-06-26 21:03 - 2022-06-26 21:03 - 000017063 _____ () C:\Users\AR\AppData\Roaming\Durch Trennzeichen getrennte Werte.CAL
2018-06-06 18:10 - 2018-06-06 18:10 - 000003584 ____C () C:\Users\AR\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2022-08-19 15:56 - 2022-08-19 15:56 - 000003536 _____ () C:\Users\AR\AppData\Local\recently-used.xbel
2021-01-23 12:01 - 2021-01-23 12:57 - 000007601 _____ () C:\Users\AR\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================

Ale-xander · 02.09.2022, 18:14

Addition

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 30-08-2022
durchgeführt von AR (02-09-2022 18:46:37)
Gestartet von C:\Users\AR\Downloads
Microsoft Windows 10 Pro Version 21H1 19043.1889 (X64) (2020-10-07 10:38:11)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-3220973240-3280425687-1539964896-500 - Administrator - Disabled) => C:\Users\Administrator
AR (S-1-5-21-3220973240-3280425687-1539964896-1001 - Administrator - Enabled) => C:\Users\AR
DefaultAccount (S-1-5-21-3220973240-3280425687-1539964896-503 - Limited - Disabled)
Gast (S-1-5-21-3220973240-3280425687-1539964896-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-3220973240-3280425687-1539964896-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 21.07 (x64) (HKLM\...\7-Zip) (Version: 21.07 - Igor Pavlov)
Admiral Markets MT4 (HKLM-x32\...\Admiral Markets MT4) (Version: 4.00 - MetaQuotes Software Corp.)
AllDup 4.5.10 (HKLM-x32\...\AllDup_is1) (Version: 4.5.10 - MTSD)
All-in-One Messenger 2.5.0 (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\b6dcb923-775d-56f6-b8cb-dbde86aa378b) (Version: 2.5.0 - Henrik Wenz)
AnyDesk (HKLM-x32\...\AnyDesk) (Version: ad 7.0.14 - AnyDesk Software GmbH)
Azure Data Studio (HKLM\...\{6591F69E-6588-4980-81ED-C8FCBD7EC4B8}_is1) (Version: 1.37.0 - Microsoft Corporation)
Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 105.1.43.88 - Die Brave-Autoren)
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1187.1 - Piriform Software) Hidden
Cisco Webex Meetings (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\ActiveTouchMeetingClient) (Version:  - Cisco Webex LLC)
Dell Customer Connect (HKLM-x32\...\{04A41EBC-AB30-4574-A14D-E0CDFE31AB70}) (Version: 1.5.1.0 - Dell Inc.)
Dell Digital Delivery (HKLM-x32\...\{A9758B6E-19FC-4DB4-A031-AFE6C2327A35}) (Version: 3.5.1004.0 - Dell Products, LP)
Dell Foundation Services (HKLM\...\{BDB50421-E961-42F3-B803-6DAC6F173834}) (Version: 3.4.16100.0 - Dell Inc.)
Dell Hilfe und Support (HKLM\...\{8917AEA5-01A5-476F-AA27-A52EA6C94212}) (Version: 2.6.1.0 - Dell Inc.) Hidden
Dell Hilfe und Support (HKLM-x32\...\InstallShield_{8917AEA5-01A5-476F-AA27-A52EA6C94212}) (Version: 2.6.1.0 - Dell Inc.)
Dell SupportAssist (HKLM\...\{22D635F9-FB28-453B-9A12-4CE47C6BBC05}) (Version: 3.12.1.180 - Dell Inc.)
Dell SupportAssist OS Recovery Plugin for Dell Update (HKLM\...\{08E7C8D5-F2B5-4F09-B0EA-F28913BEFDB0}) (Version: 5.5.1.16143 - Dell Inc.) Hidden
Dell SupportAssist OS Recovery Plugin for Dell Update (HKLM-x32\...\{2a8bafd6-22ae-4d0e-87a4-686b2a4a2ab0}) (Version: 5.5.1.16143 - Dell Inc.)
Dell SupportAssist Remediation (HKLM\...\{D5DA219C-155F-45A8-9736-B9350978F2BE}) (Version: 5.5.4.16189 - Dell Inc.) Hidden
Dell SupportAssist Remediation (HKLM-x32\...\{619cf756-16ec-42a3-9b4a-d99ad99fd636}) (Version: 5.5.4.16189 - Dell Inc.)
Dell Update (HKLM-x32\...\{051401F9-2A83-4E2B-9454-9ED39AA60491}) (Version: 4.6.0 - Dell Inc.)
DisplayLink Graphics (HKLM\...\{A973BFE8-87CE-406B-9B33-C4C4895D1DA9}) (Version: 10.1.2762.0 - DisplayLink Corp.)
EaseUS Data Recovery Wizard (HKLM\...\EaseUS Data Recovery Wizard_is1) (Version:  - EaseUS)
ElsterFormular (HKLM-x32\...\{870D4BDF-96FD-4A68-ACF4-A35CB31E0B3A}) (Version: 21.2.0 - Thüringer Landesamt für Finanzen)
FileZilla 3.60.2 (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\FileZilla Client) (Version: 3.60.2 - Tim Kosse)
GIMP 2.10.30 (HKLM\...\GIMP-2_is1) (Version: 2.10.30 - The GIMP Team)
Glary Utilities 5.178 (HKLM-x32\...\Glary Utilities 5) (Version: 5.178.0.206 - Glarysoft Ltd)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 104.0.5112.102 - Google LLC)
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.101.0 - Google LLC) Hidden
GoTo Opener (HKLM-x32\...\{E69269DB-A77B-4BC1-8F39-241107B09F26}) (Version: 1.0.539 - LogMeIn, Inc.)
GoToMeeting 10.19.0.19950 (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\GoToMeeting) (Version: 10.19.0.19950 - LogMeIn, Inc.)
HP Officejet Pro 8620 - Grundlegende Software für das Gerät (HKLM\...\{E603B1C0-46D3-41C8-BFB4-BA4E50732701}) (Version: 32.4.116.94128 - Hewlett-Packard Co.)
HP Officejet Pro 8620 Hilfe (HKLM-x32\...\{F8E43C63-DFF2-4134-A46C-2A6F00517A35}) (Version: 32.0.0 - Hewlett Packard)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
IG MetaTrader 4 Terminal (HKLM-x32\...\IG MetaTrader 4 Terminal) (Version: 4.00 - MetaQuotes Software Corp.)
Integration Services (HKLM-x32\...\{95D3D528-8F5B-436E-ADC6-6F184B13F1B0}) (Version: 15.0.2000.229 - Microsoft Corporation) Hidden
Intel(R) Chipset Device Software (HKLM\...\{81520FC5-3518-40E9-9803-70CE8A801D07}) (Version: 10.1.1.38 - Intel Corporation) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.3.10209.6897 - Intel Corporation)
Intel(R) HID Event Filter (HKLM-x32\...\3FB06EEC-013D-4366-9918-71B97DFB84EB) (Version: 1.1.0.313 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{18ECCB13-1AAB-4366-B8CD-D78EDDDCB37E}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 2014.14.0.1540 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{5F3D379F-069B-4BBB-B7AA-CBDFA1877343}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{8FFDA2DD-9B70-4A8A-8ACD-CBF774D1885B}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) ME UninstallLegacy (HKLM\...\{E9B9A1A5-6398-4C99-8FDE-10794F6505C5}) (Version: 1.0.1.0 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{75000D29-0D43-467B-84AC-12EB33DA1F14}) (Version: 30.100.1943.2 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1943.2 - Intel Corporation)
Intel(R) Trusted Connect Service Client x64 (HKLM\...\{C9552825-7BF2-4344-BA91-D3CD46F4C442}) (Version: 1.60.155.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.60.155.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{047f2156-ee7f-4a24-b3c2-c0c5c2c81557}) (Version: 1.60.155.0 - Intel Corporation) Hidden
Intel(R) Virtual Buttons (HKLM-x32\...\1992736F-C90A-481C-B21B-EE34CAD07387) (Version: 1.1.0.21 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000110-0210-1031-84C8-B8D95FA3C8C3}) (Version: 21.110.0.3 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden
Intel® Integrated Sensor Solution (HKLM-x32\...\{b3782b53-1b6c-436a-b0f0-f65d83ae74d9}) (Version: 3.0.30.1119 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{5a64c890-83f9-4399-b0c9-5e9a80890fdd}) (Version: 21.40.1 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (HKLM\...\{68A981A0-ED59-41E0-B45E-7A78F643120D}) (Version: 21.40.1.3406 - Intel Corporation) Hidden
Intel® Security Assist (HKLM-x32\...\{8B08DDA1-FDE7-4897-8EB6-E0B048A6D88B}) (Version: 1.0.1.618 - Intel Corporation)
Intel® Software Installer (HKLM-x32\...\{7b25185f-5362-49ee-b5e7-b5f4732bc748}) (Version: 22.70.0.6 - Intel Corporation) Hidden
ISS_Drivers_x64 (HKLM\...\{6F91DCD1-30DB-449C-AE79-6948BEB15825}) (Version: 3.0.30.1119 - Intel Corporation) Hidden
JFD MetaTrader 4 (HKLM-x32\...\JFD MetaTrader 4) (Version: 4.00 - MetaQuotes Ltd.)
JPEGmini (HKLM-x32\...\{5E92D6F9-47A0-40D9-B555-B7EB7A8A910F}) (Version: 1.9.5.0 - Beamr Imaging LTD)
JTL-Wawi (HKLM-x32\...\JTL-Wawi_is1) (Version: 1.3.16.0 - JTL-Software-GmbH)
KeePass Password Safe 2.47 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.47 - Dominik Reichl)
LockHunter 3.4, 32/64 bit (HKLM\...\LockHunter_is1) (Version: 3.4.3.146 - Crystal Rich Ltd)
LogiOptionsExcelAddin (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\5B9DBC017A73395321F758581D1CBC19EA9DF4FF) (Version: 8.10.33.0 - Logitech)
LogiOptionsPowerPointAddin (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\2C15990041C0A40782166403A24D0F52DFC41095) (Version: 8.10.33.0 - Logitech)
LogiOptionsWordAddin (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\77F95DB8F75F35C40BD868B4D39ADCCB966A0FD1) (Version: 8.10.33.0 - Logitech)
Logitech Options (HKLM\...\LogiOptions) (Version: 8.10.84 - Logitech)
Maxx Audio Installer (x64) (HKLM\...\{307032B2-6AF2-46D7-B933-62438DEB2B9A}) (Version: 2.7.8942.2 - Waves Audio Ltd.) Hidden
MetaTrader 4 Terminal (HKLM-x32\...\MetaTrader 4 Terminal) (Version: 4.00 - MetaQuotes Software Corp.)
Microsoft .NET Host - 5.0.17 (x64) (HKLM\...\{E663ED1E-899C-40E8-91D0-8D37B95E3C69}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft .NET Host - 6.0.8 (x64) (HKLM\...\{6950FA03-8B88-4675-B685-FB21CA1762CC}) (Version: 48.35.45462 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 5.0.17 (x64) (HKLM\...\{8BA25391-0BE6-443A-8EBF-86A29BAFC479}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.8 (x64) (HKLM\...\{3C3CA326-3F1D-43B7-B0AD-CBC06B2DED5A}) (Version: 48.35.45462 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 5.0.17 (x64) (HKLM\...\{5A66E598-37BD-4C8A-A7CB-A71C32ABCD78}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 5.0.17 (x64) (HKLM-x32\...\{a699b48e-5748-4980-ad92-0b61b1d9d718}) (Version: 5.0.17.31213 - Microsoft Corporation)
Microsoft .NET Runtime - 6.0.8 (x64) (HKLM\...\{7CEA3ABF-FE24-42AF-ADE6-B4A3EE346743}) (Version: 48.35.45462 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.8 (x64) (HKLM-x32\...\{df65a075-27e0-4afc-baea-ecaadef7b85c}) (Version: 6.0.8.31513 - Microsoft Corporation)
Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.15427.20210 - Microsoft Corporation)
Microsoft Analysis Services OLE DB Provider (HKLM\...\{7EA2A3F7-A6D2-4D28-B3C4-4C32BCF4A0A2}) (Version: 15.0.2000.832 - Microsoft Corporation) Hidden
Microsoft Analysis Services OLE DB Provider (HKLM-x32\...\{8CE89D3D-FBC5-4964-B6AD-2F52060304C3}) (Version: 15.0.2000.832 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 104.0.1293.70 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 105.0.1343.25 - Microsoft Corporation)
Microsoft Help Viewer 2.3 (HKLM-x32\...\{99DC6816-30B2-32EB-9E12-AF8944C4FA4E}) (Version: 2.3.28307 - Microsoft Corporation) Hidden
Microsoft Help Viewer 2.3 (HKLM-x32\...\Microsoft Help Viewer 2.3) (Version: 2.3.28307 - Microsoft Corporation)
Microsoft HEVC Media Extension Installation for Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe (x64) (HKLM\...\{B0169E83-757B-EF66-E2F0-391944D785BC}) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft ODBC Driver 17 for SQL Server (HKLM\...\{853997DA-6FCB-4FB9-918E-E0FF881FAF65}) (Version: 17.7.2.1 - Microsoft Corporation)
Microsoft Office Professional Plus 2016 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 16.0.15427.20210 - Microsoft Corporation)
Microsoft OLE DB Driver for SQL Server (HKLM\...\{9D6F8754-28E9-4940-B319-3FC8588CF18F}) (Version: 18.5.0.0 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 22.166.0807.0002 - Microsoft Corporation)
Microsoft SQL Server 2012 Native Client  (HKLM\...\{9D93D367-A2CC-4378-BD63-79EF3FE76C78}) (Version: 11.4.7462.6 - Microsoft Corporation)
Microsoft SQL Server Management Studio - 18.12.1 (HKLM-x32\...\{09a17706-821c-4c52-8fcd-ace4783362bb}) (Version: 15.0.18424.0 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{7B1FCD52-8F6B-4F12-A143-361EA39F5E7C}) (Version: 3.67.0.0 - Microsoft Corporation)
Microsoft VC++ redistributables repacked. (HKLM\...\{7F09DF2D-9B17-4E4D-B247-9AE0E918C32B}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft VC++ redistributables repacked. (HKLM-x32\...\{5213821B-E78E-4346-9CEC-8F6BA7D6F115}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.22.27821 (HKLM-x32\...\{6361b579-2795-4886-b2a8-53d5239b6452}) (Version: 14.22.27821.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.22.27821 (HKLM-x32\...\{5bfc1380-fd35-4b85-9715-7351535d077e}) (Version: 14.22.27821.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X64 Additional Runtime - 14.22.27821 (HKLM\...\{6E2C7A8E-B17A-4637-9CE9-F0B1157CF378}) (Version: 14.22.27821 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.22.27821 (HKLM\...\{0093C20C-273D-4397-B623-515CB8616CB9}) (Version: 14.22.27821 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.22.27821 (HKLM-x32\...\{3BDE80F7-7EC9-448E-8160-4ADA0CDA8879}) (Version: 14.22.27821 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.22.27821 (HKLM-x32\...\{1E6FC929-567E-4D22-9206-C5B83F0A21B9}) (Version: 14.22.27821 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{7C0242A3-8B66-35D1-9FE0-13B426ACB609}) (Version: 10.0.60729 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.60724 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.60724 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2017 (HKLM-x32\...\{f895a2f1-ae3f-4212-8af1-7fa1f8c212ea}) (Version: 15.0.27520 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2017 x64 Hosting Support (HKLM\...\{AFFB9D8D-6E58-38A0-A7DD-F6F1F4247B36}) (Version: 15.0.27520 - Microsoft Corporation) Hidden
Microsoft Visual Studio Tools for Applications 2017 x86 Hosting Support (HKLM-x32\...\{9594C97E-6A20-38B3-81BB-2778C4780BE1}) (Version: 15.0.27520 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 104.0 (x64 de)) (Version: 104.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 104.0.0.8265 - Mozilla)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.1.9.3 - Notepad++ Team)
NVIDIA FrameView SDK 1.2.7521.31103277 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.2.7521.31103277 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.25.1.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.25.1.27 - NVIDIA Corporation)
NVIDIA Grafiktreiber 511.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 511.69 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.15427.20178 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.15427.20178 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.15427.20148 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.15427.20178 - Microsoft Corporation) Hidden
OpenOffice 4.1.3 (HKLM-x32\...\{8D5FCC56-BB9F-4122-923C-71753F50F6F5}) (Version: 4.13.9783 - Apache Software Foundation)
OptaneDowngradeGuard (HKLM\...\{86B0E6C1-32E0-42CC-BC4F-BF3C0730CECB}) (Version: 18.0.0.0 - Intel Corporation) Hidden
PDF24 Creator 11.3.0 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.3.0 - PDF24.org)
PDF24 Tools (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\5e56983f8f6eaa0650401cca749f0834) (Version: 1.0 - BraveSoftware\Brave-Browser)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.322.10 - Tracker Software Products Ltd)
PowerArchiver 2017 (HKLM\...\PowerArchiver_is1) (Version: 17.01.04 - ConeXware, Inc.)
ProRealTime (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\ProRealTime_is1) (Version: 1.19 - IT-Finance)
QuickSet64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.1.37 - Dell Inc.)
QuickSteuer 2018 (HKLM-x32\...\{464D2DB3-1837-498A-80E9-EBFA247E2267}) (Version: 23.39.56 - Haufe-Lexware GmbH & Co.KG)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.18362.31252 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8642 - Realtek Semiconductor Corp.)
Realtek PC Camera (HKLM-x32\...\{E399A5B3-ED53-4DEA-AF04-8011E1EB1EAC}) (Version: 10.0.10586.11224 - Realtek Semiconductor Corp.)
Realtek USB Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{04201224-2B34-4EE7-862B-B7BBF89DB3AB}) (Version: 10.24.326.2018 - Realtek)
Registrierung eines Dell Produkts (HKLM-x32\...\InstallShield_{48114909-3C3B-43E6-BF98-AE9C396500A3}) (Version: 3.0.127.0 - Dell Inc.)
Registrierung eines Produkts (HKLM\...\{48114909-3C3B-43E6-BF98-AE9C396500A3}) (Version: 3.0.127.0 - Dell Inc.) Hidden
RstDowngradeGuard (HKLM\...\{13C2A26E-7AD4-4D82-BB4F-DEA6E871B958}) (Version: 18.0.0.0 - Intel Corporation) Hidden
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.)
Smart Switch (HKLM-x32\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.21075.3 - Samsung Electronics Co., Ltd.) Hidden
Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.21075.3 - Samsung Electronics Co., Ltd.)
SmartByte Drivers and Services (HKLM\...\{9668B1BB-D0FE-4C0C-800C-B1555E069A62}) (Version: 3.1.940 - Rivet Networks)
SQL Server Management Studio (HKLM\...\{83C9183A-A0F9-4E57-ACEC-4282F1028D25}) (Version: 15.0.18424.0 - Microsoft Corporation) Hidden
SQL Server Management Studio (HKLM\...\{ECC23FD6-535B-43CB-894B-F47FA605EBB3}) (Version: 15.0.18424.0 - Microsoft Corporation) Hidden
SQL Server Management Studio for Analysis Services (HKLM\...\{2635EEB8-0BDC-43F4-8477-3F3A17485D9A}) (Version: 15.0.18424.0 - Microsoft Corporation) Hidden
SQL Server Management Studio for Reporting Services (HKLM\...\{EC766230-FA07-4462-95EC-589FE19A6B19}) (Version: 15.0.18424.0 - Microsoft Corporation) Hidden
SSMS Post Install Tasks (HKLM\...\{BCE4DAEE-4995-4E80-9222-86C950DDD940}) (Version: 15.0.18424.0 - Microsoft Corporation) Hidden
Studie zur Verbesserung von HP Officejet Pro 8620 (HKLM\...\{C8049994-7BD4-4C9A-8508-F6ADDD6ABB62}) (Version: 32.4.116.94128 - Hewlett-Packard Co.)
Synology Drive Client (remove only) (HKLM\...\Synology Drive) (Version: 7.1.0.12923 - Synology, Inc.)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.32.3 - TeamViewer)
Telegram Desktop version 3.3 (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 3.3 - Telegram FZ-LLC)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{16AD6161-2E47-4BF1-AA77-0946EFE93E08}) (Version: 2.61.0.0 - Microsoft Corporation)
Visual Studio 2017 Isolated Shell for SSMS (HKLM-x32\...\{AAA9F15B-AF45-4562-9991-93A848D3A902}) (Version: 15.0.28307.421 - Microsoft Corporation) Hidden
Vulkan Run Time Libraries 1.0.33.0 (HKLM\...\VulkanRT1.0.33.0) (Version: 1.0.33.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1) (Version: 1.0.54.1 - Intel Corporation Inc.) Hidden
Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1-4) (Version: 1.0.54.1 - Intel Corporation Inc.)
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
WhatsApp (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\WhatsApp) (Version: 0.3.4482 - WhatsApp)
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
WinZip 24.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C24127}) (Version: 24.0.14033 - Corel Corporation)
Zoom (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\ZoomUMX) (Version: 5.6.5 (823) - Zoom Video Communications, Inc.)

Packages:
=========
Dell SupportAssist for Home PCs -> C:\Program Files\WindowsApps\DellInc.DellSupportAssistforPCs_3.12.5.0_x64__htrsf667h5kn2 [2022-08-26] (Dell Inc)
Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.14.67.0_x64__rz1tebttyb220 [2022-07-09] (Dolby Laboratories)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_138.2.412.0_x64__v10z8vjag6ke6 [2022-08-25] (HP Inc.)
Intel® Grafik-Kontrollraum -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3408.0_x64__8j3eq9eme6ctt [2022-08-14] (INTEL CORP) [Startup Task]
Intel® Optane™ Memory and Storage Management -> C:\Program Files\WindowsApps\AppUp.IntelOptaneMemoryandStorageManagement_18.1.1032.0_x64__8j3eq9eme6ctt [2022-08-15] (INTEL CORP)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-09-28] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-09-03] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-09-03] (Microsoft Corporation) [MS Ad]
Microsoft To Do -> C:\Program Files\WindowsApps\Microsoft.Todos_2.77.52361.0_x64__8wekyb3d8bbwe [2022-08-25] (Microsoft Corporation) [Startup Task]
My Photos -> C:\Program Files\WindowsApps\4846UtilitiesTools.MyPhotos_1.1.3.0_x64__b17t1j31etq18 [2022-08-12] (Utilities Tools) [MS Ad]
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.98.1805.0_x64__mcm4njqhnhss8 [2022-02-16] (Netflix, Inc.)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.962.0_x64__56jybvy8sckqj [2022-01-18] (NVIDIA Corp.)
One Commander -> C:\Program Files\WindowsApps\44576milosp.OneCommander_3.10.3.0_neutral__p0rg76fmnrgsm [2022-09-01] (milosp)
Waves MaxxAudio Pro for Dell -> C:\Program Files\WindowsApps\WavesAudio.WavesMaxxAudioProforDell_1.1.131.0_x64__fh4rh281wavaa [2020-12-13] (Waves Audio)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{2C4A5D61-009C-4561-9A33-6AFD542FD237}\InprocServer32 -> C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\ContextMenu.dll (Synology Inc. -> )
CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{472CE1AD-5D53-4BCF-A1FB-3982A5F55138}\InprocServer32 -> C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\iconOverlay.dll (Synology Inc. -> TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{48AB5ADA-36B1-4137-99C9-2BD97F8788AB}\InprocServer32 -> C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\iconOverlay.dll (Synology Inc. -> TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\AR\AppData\Local\GoToMeeting\14172\G2MOutlookAddin64.dll (LogMeIn, Inc. -> LogMeIn, Inc.)
CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{A433C3E0-8B24-40EB-93C3-4B10D9959F58}\InprocServer32 -> C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\iconOverlay.dll (Synology Inc. -> TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{a9872fee-5a55-4ecb-9b0f-b06fedcf14d1}\localserver32 -> C:\Program Files\Waves\MaxxAudio\MaxxAudioPro.exe (Waves Inc -> Waves Audio Ltd)
CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{AEB16659-2125-4ADA-A4AB-45EE21E86469}\InprocServer32 -> C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\iconOverlay.dll (Synology Inc. -> TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{C701AD67-3DF0-47C9-89CB-DFA6207BE229}\InprocServer32 -> C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\iconOverlay.dll (Synology Inc. -> TODO: <Company name>)
CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{CB2B673F-D441-4CD4-AFBE-DC4037CA4220}\InprocServer32 -> C:\Program Files\WinZip\adxloader64.WinZipExpressForOffice.dll (Corel Corporation -> )
ShellIconOverlayIdentifiers: [    OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [    OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [    OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [    OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [    OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [    OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [    OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [   01UnsuppModule] -> {AEB16659-2125-4ADA-A4AB-45EE21E86469} => C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\iconOverlay.dll [2022-06-29] (Synology Inc. -> TODO: <Company name>)
ShellIconOverlayIdentifiers: [   02SyncingModule] -> {48AB5ADA-36B1-4137-99C9-2BD97F8788AB} => C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\iconOverlay.dll [2022-06-29] (Synology Inc. -> TODO: <Company name>)
ShellIconOverlayIdentifiers: [   03SyncedModule] -> {472CE1AD-5D53-4BCF-A1FB-3982A5F55138} => C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\iconOverlay.dll [2022-06-29] (Synology Inc. -> TODO: <Company name>)
ShellIconOverlayIdentifiers: [   04ReadOnlyModule] -> {A433C3E0-8B24-40EB-93C3-4B10D9959F58} => C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\iconOverlay.dll [2022-06-29] (Synology Inc. -> TODO: <Company name>)
ShellIconOverlayIdentifiers: [   05NoPermModule] -> {C701AD67-3DF0-47C9-89CB-DFA6207BE229} => C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\iconOverlay.dll [2022-06-29] (Synology Inc. -> TODO: <Company name>)
ShellIconOverlayIdentifiers-x32: [    OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [    OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [    OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [    OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [    OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [    OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [    OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-12-26] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2019-06-17] (Notepad++ -> )
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2021-12-12] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers1: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => C:\Program Files\LockHunter\LHShellExt64.dll [2021-06-24] (Crystal Rich Ltd -> Crystal Rich Ltd)
ContextMenuHandlers1: [PowerArchiver] -> {d03d3e68-0c44-3d45-b15f-bcfd8a8b4c7e} => C:\Program Files\PowerArchiver\PASHLEXT.DLL [2017-08-08] (ConeXware, Inc. -> ConeXware, Inc.)
ContextMenuHandlers1: [PowerArchiver64] -> {d03d3e78-0c44-3d45-b15f-bcfd8a8b4c7e} => C:\Program Files\PowerArchiver\pashlext64.dll [2017-08-08] (ConeXware, Inc. -> ConeXware, Inc.)
ContextMenuHandlers1: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2020-02-25] (Corel Corporation -> WinZip Computing)
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2021-12-12] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers2: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => C:\Program Files\LockHunter\LHShellExt64.dll [2021-06-24] (Crystal Rich Ltd -> Crystal Rich Ltd)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-12-26] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers4: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => C:\Program Files\LockHunter\LHShellExt64.dll [2021-06-24] (Crystal Rich Ltd -> Crystal Rich Ltd)
ContextMenuHandlers4: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2020-02-25] (Corel Corporation -> WinZip Computing)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvdm.inf_amd64_4793842ae20151f0\nvshext.dll [2022-03-14] (Nvidia Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-12-26] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Keine Datei
ContextMenuHandlers6: [Fast Explorer] -> {693BE9C0-BEC3-11D2-B4C1-C33BBD3AD64B} => C:\ProgramData\AllDup\FEShlExt.dll [2008-08-21] (Alex Yakovlev) [Datei ist nicht signiert]
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2021-12-12] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers6: [PowerArchiver] -> {d03d3e68-0c44-3d45-b15f-bcfd8a8b4c7e} => C:\Program Files\PowerArchiver\PASHLEXT.DLL [2017-08-08] (ConeXware, Inc. -> ConeXware, Inc.)
ContextMenuHandlers6: [PowerArchiver64] -> {d03d3e78-0c44-3d45-b15f-bcfd8a8b4c7e} => C:\Program Files\PowerArchiver\pashlext64.dll [2017-08-08] (ConeXware, Inc. -> ConeXware, Inc.)
ContextMenuHandlers6: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2020-02-25] (Corel Corporation -> WinZip Computing)
ContextMenuHandlers1_S-1-5-21-3220973240-3280425687-1539964896-1001: [CloudStation.SyncFolderContextMenu] -> {2C4A5D61-009C-4561-9A33-6AFD542FD237} => C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\ContextMenu.dll [2022-06-29] (Synology Inc. -> )
ContextMenuHandlers6_S-1-5-21-3220973240-3280425687-1539964896-1001: [CloudStation.SyncFolderContextMenu] -> {2C4A5D61-009C-4561-9A33-6AFD542FD237} => C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\ContextMenu.dll [2022-06-29] (Synology Inc. -> )

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\Users\AR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Brave-Apps\PDF24 Tools.lnk -> C:\Program Files\BraveSoftware\Brave-Browser\Application\chrome_proxy.exe (Brave Software, Inc.) ->  --profile-directory=Default --app-id=olgkfmmpjkmmgmjlnginclnfgmildjlo

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2021-12-10 16:41 - 2020-10-04 23:02 - 002812416 ____C () [Datei ist nicht signiert] C:\Users\AR\AppData\Local\Programs\all-in-one-messenger\ffmpeg.dll
2021-12-10 16:41 - 2020-10-04 23:02 - 000465408 ____C () [Datei ist nicht signiert] C:\Users\AR\AppData\Local\Programs\all-in-one-messenger\swiftshader\libegl.dll
2021-12-10 16:41 - 2020-10-04 23:02 - 003177984 ____C () [Datei ist nicht signiert] C:\Users\AR\AppData\Local\Programs\all-in-one-messenger\swiftshader\libglesv2.dll
2021-12-30 12:40 - 2008-08-21 01:08 - 001107520 _____ (Alex Yakovlev) [Datei ist nicht signiert] C:\ProgramData\AllDup\FEShlExt.dll
2022-08-31 20:55 - 2022-09-01 23:19 - 000394240 _____ (Google Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\AnyDesk\gcapi.dll
2022-09-01 18:30 - 2022-09-01 18:30 - 004563456 _____ (Google Inc.) [Datei ist nicht signiert] C:\Program Files\WindowsApps\44576milosp.OneCommander_3.10.3.0_neutral__p0rg76fmnrgsm\Rapidrive\x64\Pdfium.dll
2021-12-30 12:38 - 2021-12-26 16:00 - 000093696 _____ (Igor Pavlov) [Datei ist nicht signiert] C:\Program Files\7-Zip\7-zip.dll
2022-08-31 00:15 - 2022-08-31 00:15 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems32.dll] C:\Program Files (x86)\Microsoft Office\Root\Office16\AppVIsvSubsystems32.dll
2022-08-31 00:15 - 2022-08-31 00:15 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R32.dll] C:\Program Files (x86)\Microsoft Office\Root\Office16\c2r32.dll
2018-03-08 07:18 - 2018-03-08 07:18 - 000015360 _____ (NHibernate community) [Datei ist nicht signiert] C:\Program Files\Dell\SupportAssistAgent\bin\Iesi.Collections.dll
2020-11-11 20:57 - 2020-11-11 20:57 - 000537088 _____ (NHibernate.info) [Datei ist nicht signiert] C:\Program Files\Dell\SupportAssistAgent\bin\FluentNHibernate.dll
2018-02-06 17:25 - 2018-02-06 17:25 - 000176640 _____ (rubicon IT GmbH) [Datei ist nicht signiert] C:\Program Files\Dell\SupportAssistAgent\bin\Remotion.Linq.dll
2018-03-23 12:10 - 2018-03-23 12:10 - 000028160 _____ (rubicon IT GmbH) [Datei ist nicht signiert] C:\Program Files\Dell\SupportAssistAgent\bin\Remotion.Linq.EagerFetching.dll
2021-02-17 04:19 - 2021-02-17 04:19 - 000124928 _____ (Stateless Contributors) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\Dell\SupportAssistAgent\bin\stateless.dll
2021-12-17 05:45 - 2021-12-17 05:45 - 000258048 _____ (The Apache Software Foundation) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\Dell\SupportAssistAgent\bin\log4net.dll
2016-12-18 08:55 - 2016-12-18 08:55 - 000097280 _____ (Tunnel Vision Laboratories, LLC) [Datei ist nicht signiert] C:\Program Files\Dell\SupportAssistAgent\bin\Antlr3.Runtime.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========

HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus15.msn.com/?pc=ASTE
HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell17win10.msn.com/?pc=DCTE
HKU\S-1-5-21-3220973240-3280425687-1539964896-500\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dell17win10.msn.com/?pc=DCTE
HKU\S-1-5-21-3220973240-3280425687-1539964896-500\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell17win10.msn.com/?pc=DCTE
SearchScopes: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001 -> DefaultScope {4233574B-46D8-4120-BF6C-C8D593F10E7C} URL = 
SearchScopes: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001 -> {4233574B-46D8-4120-BF6C-C8D593F10E7C} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2022-08-31] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2022-08-31] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-08-31] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-08-31] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-08-31] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-08-31] (Microsoft Corporation -> Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} -  Keine Datei

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2018-06-05 14:57 - 2018-06-05 14:57 - 000000855 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1       localhost

2019-04-17 07:40 - 2019-04-17 07:40 - 000000375 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg
HKU\S-1-5-21-3220973240-3280425687-1539964896-500\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
 ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

MSCONFIG\Services: Cloud Station Backup VSS Service x64 => 2
MSCONFIG\Services: Cloud Station Drive VSS Service x64 => 2
MSCONFIG\Services: cphs => 3
MSCONFIG\Services: cplspcon => 2
MSCONFIG\Services: DDVCollectorSvcApi => 2
MSCONFIG\Services: DDVDataCollector => 2
MSCONFIG\Services: DDVRulesProcessor => 2
MSCONFIG\Services: Dell Customer Connect => 2
MSCONFIG\Services: Dell Foundation Services => 2
MSCONFIG\Services: Dell Hardware Support => 2
MSCONFIG\Services: Dell Help & Support => 2
MSCONFIG\Services: Dell SupportAssist Remediation => 2
MSCONFIG\Services: DellDigitalDelivery => 2
MSCONFIG\Services: DellUpdate => 2
MSCONFIG\Services: ElfoService => 3
MSCONFIG\Services: esifsvc => 2
MSCONFIG\Services: EvtEng => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: IAStorDataMgrSvc => 2
MSCONFIG\Services: ibtsiva => 2
MSCONFIG\Services: igfxCUIService2.0.0.0 => 2
MSCONFIG\Services: Intel(R) Capability Licensing Service TCP IP Interface => 3
MSCONFIG\Services: Intel(R) Security Assist => 3
MSCONFIG\Services: Intel(R) TPM Provisioning Service => 2
MSCONFIG\Services: isaHelperSvc => 2
MSCONFIG\Services: jhi_service => 2
MSCONFIG\Services: LMS => 2
MSCONFIG\Services: MBAMService => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: MyWiFiDHCPDNS => 3
MSCONFIG\Services: NvContainerLocalSystem => 2
MSCONFIG\Services: NvContainerNetworkService => 3
MSCONFIG\Services: NVDisplay.ContainerLocalSystem => 2
MSCONFIG\Services: NvTelemetryContainer => 2
MSCONFIG\Services: PDF24 => 2
MSCONFIG\Services: Product Registration => 2
MSCONFIG\Services: RegSrvc => 2
MSCONFIG\Services: RtkAudioService => 2
MSCONFIG\Services: SupportAssistAgent => 2
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\Services: WavesSysSvc => 2
MSCONFIG\Services: ZeroConfigService => 2
HKLM\...\StartupApproved\Run: => "NvBackend"
HKLM\...\StartupApproved\Run: => "ShadowPlay"
HKLM\...\StartupApproved\Run: => "WinZip UN"
HKLM\...\StartupApproved\Run32: => "Dropbox"
HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\StartupApproved\Run: => "Lync"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [UDP Query User{507FEABC-ABCE-4104-AA62-D86F0AD23E9D}C:\users\ar\appdata\local\synologydrive\synologydrive.app\bin\cloud-drive-ui.exe] => (Allow) C:\users\ar\appdata\local\synologydrive\synologydrive.app\bin\cloud-drive-ui.exe (Synology Inc. -> Synology Inc.)
FirewallRules: [TCP Query User{3B05D6D4-BAB3-4E29-80CB-B1888CBD441A}C:\users\ar\appdata\local\synologydrive\synologydrive.app\bin\cloud-drive-ui.exe] => (Allow) C:\users\ar\appdata\local\synologydrive\synologydrive.app\bin\cloud-drive-ui.exe (Synology Inc. -> Synology Inc.)
FirewallRules: [{4C1B851E-5DE3-49D7-B655-2C07543FDD0A}] => (Allow) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.EXE (Logitech Inc -> Logitech, Inc.)
FirewallRules: [UDP Query User{5DD3E04D-967D-4F5B-8475-1C9713F18311}C:\program files (x86)\keepass password safe 2\keepass.exe] => (Allow) C:\program files (x86)\keepass password safe 2\keepass.exe (Open Source Developer, Dominik Reichl -> Dominik Reichl)
FirewallRules: [TCP Query User{A04F85DB-FC74-40E7-9D71-9B8EC50E6468}C:\program files (x86)\keepass password safe 2\keepass.exe] => (Allow) C:\program files (x86)\keepass password safe 2\keepass.exe (Open Source Developer, Dominik Reichl -> Dominik Reichl)
FirewallRules: [TCP Query User{52A6D9BF-21CD-47A8-A8F8-16A400357D5A}C:\program files\hp\hp officejet pro 8620\bin\hpnetworkcommunicatorcom.exe] => (Allow) C:\program files\hp\hp officejet pro 8620\bin\hpnetworkcommunicatorcom.exe (HP Inc. -> Hewlett-Packard Development Company, LP)
FirewallRules: [UDP Query User{FBD34E5C-D780-4660-B766-33CEAB944C48}C:\program files\hp\hp officejet pro 8620\bin\hpnetworkcommunicatorcom.exe] => (Allow) C:\program files\hp\hp officejet pro 8620\bin\hpnetworkcommunicatorcom.exe (HP Inc. -> Hewlett-Packard Development Company, LP)
FirewallRules: [{2E6CDE12-1541-4622-8A9A-0A657CAE3213}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{8E9C8411-8404-40CD-BB78-79F04E37266F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{0B5C1EF7-3E8C-468E-AC36-5D8714E230F7}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5278AF98-95E4-4257-9348-88ECBB04FFB5}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3DC1BB45-4A74-4DAD-84BC-9963EB74BD0D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{72CDE0D9-78F6-4EAF-80EB-96D0BB614D40}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{1199CC01-36FB-4921-9EF0-FEB4568DFFEF}] => (Allow) C:\Users\AR\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{FE0503F0-B8C5-44CD-ADF0-90C83C8948AC}] => (Allow) C:\Program Files (x86)\HP\Diagnostics\PSDR\SoftPaq\Binaries\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{BB92C25A-C16F-4D05-BA1A-40A1095B820C}] => (Allow) C:\Program Files (x86)\HP\Diagnostics\PSDR\SoftPaq\Binaries\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{FBC5F8BC-38BA-437C-989D-98544D410BEC}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\FaxApplications.exe (HP Inc. -> Hewlett-Packard Development Company, LP)
FirewallRules: [{52495381-9614-48CC-8684-43E01C4E0244}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\DigitalWizards.exe (HP Inc. -> Hewlett-Packard Development Company, LP)
FirewallRules: [{0A92B1FE-4040-413C-B8FA-1BF69053C0AC}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\SendAFax.exe (HP Inc. -> Hewlett-Packard Development Company, LP)
FirewallRules: [{873307EC-DF7B-4F19-8A35-837A2E230078}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\Bin\DeviceSetup.exe (HP Inc. -> Hewlett-Packard Development Company, LP)
FirewallRules: [{AD7C241C-BB33-46F0-873C-33C59FAE0834}] => (Allow) LPort=5357
FirewallRules: [{22E25DF5-084B-48F9-B885-5C6F440129CB}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\Bin\HPNetworkCommunicatorCom.exe (HP Inc. -> Hewlett-Packard Development Company, LP)
FirewallRules: [{4873DF41-D838-495D-842F-847E8B6C4BCB}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{5411CCCD-5BB4-44DA-B258-A34212B6562F}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{A30225E4-5B15-4B8D-9581-3AA93A92601A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{AC577C34-127D-4B3C-B414-1F39D12E320E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{985928B6-C1F8-4548-9640-D88E6D21D865}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{6635EB00-56B6-4311-8EF0-F4D94259336D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{F532175D-C87F-493B-8FC2-B311FAF32980}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{02E62318-33D6-4AB5-AFCC-7ABDC68FC635}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{9E11DEDA-AC25-4175-BF42-751D41DC5B0F}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{71E338D2-A69D-40F7-85E4-3F00110D6683}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [TCP Query User{636F0419-ED0B-427E-8DDD-43FF04B46409}C:\users\ar\appdata\local\synologydrive\synologydrive.app\bin\cloud-drive-connect.exe] => (Block) C:\users\ar\appdata\local\synologydrive\synologydrive.app\bin\cloud-drive-connect.exe (Synology Inc. -> Synology Inc.)
FirewallRules: [UDP Query User{73C9CBA6-A69A-478D-9EDC-D0F6A1A7D648}C:\users\ar\appdata\local\synologydrive\synologydrive.app\bin\cloud-drive-connect.exe] => (Block) C:\users\ar\appdata\local\synologydrive\synologydrive.app\bin\cloud-drive-connect.exe (Synology Inc. -> Synology Inc.)
FirewallRules: [{466BABB7-03C2-4ED6-9D9A-E15EE71A11A9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{F75243F2-9A10-4BD3-B752-FD8391421143}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{98AB0051-5C85-40E3-A6AB-610DBE507614}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{8E221186-6815-4571-9862-34AB656CC978}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{B3774AD3-218F-4688-AD91-C1259381E403}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{B72EB8A2-5828-4D9E-8BD0-BE8C06DEEB61}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{10841FED-C663-4A33-9D61-69FC42EA2CB9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.87.3406.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B46D28FE-0E20-48B8-8F6E-D6177CB88F3C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.87.3406.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{CDC23CB3-0AA7-4437-8B21-1B301E8F184D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.87.3406.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3ED742F7-4AE9-463A-88B9-FC7C41FAC4B6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.87.3406.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{9C022B27-337C-487E-B2BC-ADBFA80FCCBC}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{D87DA0A7-FD91-4110-8131-027E4CD3CE2D}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A2D85D26-E1AF-43E6-BDEF-600C6A59BAA2}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2140320B-2419-4B56-BDBA-40757A3E8B00}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6F3B0234-73E0-4490-9E46-C10C5C02482E}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
FirewallRules: [{6DE687CF-90F5-40BE-95DB-E64E87791CF9}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{F074CEEF-BD9F-4A32-BE94-4CEB0F9DE53E}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{81BB2003-36CE-4343-AED5-5CC149932E57}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{7459EF54-55DD-4E07-B1EF-15464D7D3036}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)
FirewallRules: [{65960BCD-C73E-4810-96FF-9C39EBC7C62C}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\105.0.1343.25\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Wiederherstellungspunkte =========================

ACHTUNG: Systemwiederherstellung ist deaktiviert (Total:103.84 GB) (Free:17.18 GB) (17%)

==================== Fehlerhafte Geräte im Gerätemanager ============


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (09/02/2022 06:49:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvcontainer.exe, Version: 1.37.3103.4323, Zeitstempel: 0x621dbda6
Name des fehlerhaften Moduls: NvBackend64.dll, Version: 39.3.0.0, Zeitstempel: 0x6244904c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000080031
ID des fehlerhaften Prozesses: 0x4404
Startzeit der fehlerhaften Anwendung: 0x01d8beebe30a7544
Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
Pfad des fehlerhaften Moduls: C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User\NvBackend\NvBackend64.dll
Berichtskennung: c4469c14-db70-4d04-b716-7b83397fb8f9
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (09/02/2022 06:48:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvcontainer.exe, Version: 1.37.3103.4323, Zeitstempel: 0x621dbda6
Name des fehlerhaften Moduls: NvBackend64.dll, Version: 39.3.0.0, Zeitstempel: 0x6244904c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000080031
ID des fehlerhaften Prozesses: 0x65c
Startzeit der fehlerhaften Anwendung: 0x01d8beebbc7174eb
Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
Pfad des fehlerhaften Moduls: C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User\NvBackend\NvBackend64.dll
Berichtskennung: b447470f-0ab6-41a7-8277-c7158f11aafc
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (09/02/2022 06:47:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvcontainer.exe, Version: 1.37.3103.4323, Zeitstempel: 0x621dbda6
Name des fehlerhaften Moduls: NvBackend64.dll, Version: 39.3.0.0, Zeitstempel: 0x6244904c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000080031
ID des fehlerhaften Prozesses: 0x2cd4
Startzeit der fehlerhaften Anwendung: 0x01d8beeb95e2dee5
Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
Pfad des fehlerhaften Moduls: C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User\NvBackend\NvBackend64.dll
Berichtskennung: e57d6ad8-174a-4a55-979a-4748526afb69
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (09/02/2022 06:46:43 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvcontainer.exe, Version: 1.37.3103.4323, Zeitstempel: 0x621dbda6
Name des fehlerhaften Moduls: NvBackend64.dll, Version: 39.3.0.0, Zeitstempel: 0x6244904c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000080031
ID des fehlerhaften Prozesses: 0x49e4
Startzeit der fehlerhaften Anwendung: 0x01d8beeb6f4ba97c
Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
Pfad des fehlerhaften Moduls: C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User\NvBackend\NvBackend64.dll
Berichtskennung: ef88e15f-2c26-4b74-9230-cf2e8c8c555f
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (09/02/2022 06:45:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvcontainer.exe, Version: 1.37.3103.4323, Zeitstempel: 0x621dbda6
Name des fehlerhaften Moduls: NvBackend64.dll, Version: 39.3.0.0, Zeitstempel: 0x6244904c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000080031
ID des fehlerhaften Prozesses: 0x37c
Startzeit der fehlerhaften Anwendung: 0x01d8beeb48a87169
Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
Pfad des fehlerhaften Moduls: C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User\NvBackend\NvBackend64.dll
Berichtskennung: e49baa72-888e-4e2b-8797-921e5c3f0aa0
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (09/02/2022 06:44:34 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvcontainer.exe, Version: 1.37.3103.4323, Zeitstempel: 0x621dbda6
Name des fehlerhaften Moduls: NvBackend64.dll, Version: 39.3.0.0, Zeitstempel: 0x6244904c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000080031
ID des fehlerhaften Prozesses: 0x3f44
Startzeit der fehlerhaften Anwendung: 0x01d8beeb2220fc72
Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
Pfad des fehlerhaften Moduls: C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User\NvBackend\NvBackend64.dll
Berichtskennung: e6dad75d-7c0b-4195-babe-21644fa28a4a
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (09/02/2022 06:43:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvcontainer.exe, Version: 1.37.3103.4323, Zeitstempel: 0x621dbda6
Name des fehlerhaften Moduls: NvBackend64.dll, Version: 39.3.0.0, Zeitstempel: 0x6244904c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000080031
ID des fehlerhaften Prozesses: 0x291c
Startzeit der fehlerhaften Anwendung: 0x01d8beeafb30e500
Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
Pfad des fehlerhaften Moduls: C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User\NvBackend\NvBackend64.dll
Berichtskennung: fcee0836-4097-4314-87d5-7dc5e21820af
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (09/02/2022 06:42:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: nvcontainer.exe, Version: 1.37.3103.4323, Zeitstempel: 0x621dbda6
Name des fehlerhaften Moduls: NvBackend64.dll, Version: 39.3.0.0, Zeitstempel: 0x6244904c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000080031
ID des fehlerhaften Prozesses: 0x13ac
Startzeit der fehlerhaften Anwendung: 0x01d8beead3211a21
Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
Pfad des fehlerhaften Moduls: C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User\NvBackend\NvBackend64.dll
Berichtskennung: 4059fcfa-fc58-4d76-b6fd-ad286b931f5a
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:


Systemfehler:
=============
Error: (09/02/2022 06:18:04 PM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)
Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.

Error: (09/02/2022 06:15:03 PM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)
Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.

Error: (09/02/2022 08:19:20 AM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)
Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.

Error: (09/01/2022 08:58:02 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Intel(R) PROSet/Wireless Zero Configuration Service" wurde mit folgendem Fehler beendet: 
%%2147770990

Error: (09/01/2022 08:57:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "LMS" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (09/01/2022 08:56:33 PM) (Source: DCOM) (EventID: 10010) (User: AR-DELL)
Description: Der Server "{5F7F3F7B-1177-4D4B-B1DB-BC6F671B8F25}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (09/01/2022 06:27:18 PM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)
Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.

Error: (09/01/2022 05:53:43 PM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)
Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.


Windows Defender:
================
Date: 2022-09-02 18:46:23
Description: 
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=PUA:Win32/Presenoker&threatid=242420&enterprise=0
Name: PUA:Win32/Presenoker
Schweregrad: Niedrig
Kategorie: Potenziell unerwünschte Software
Pfad: file:_C:\Users\AR\Downloads\unlocker-1-9-2.zip; file:_C:\Users\AR\Downloads\Unlocker1.9.2 (1).exe; file:_C:\Users\AR\Downloads\Unlocker1.9.2.exe; webfile:_C:\Users\AR\Downloads\unlocker-1-9-2.zip|about:internet|pid:20104,ProcessStart:133065299382781126; webfile:_C:\Users\AR\Downloads\Unlocker1.9.2 (1).exe|about:internet|pid:3196,ProcessStart:133065311675114742; webfile:_C:\Users\AR\Downloads\Unlocker1.9.2.exe|about:internet|pid:16956,ProcessStart:133065300279314068
Erkennungsursprung: Internet
Erkennungstype: Konkret
Erkennungsquelle: Downloads und Anlagen
Benutzer: 
Prozessname: C:\Users\AR\Downloads\FRST64.exe
Sicherheitsversion: AV: 1.373.1394.0, AS: 1.373.1394.0, NIS: 1.373.1394.0
Modulversion: AM: 1.1.19500.2, NIS: 1.1.19500.2

Date: 2022-09-01 22:30:22
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {0D9F7E54-CEC2-4BA8-88FD-BA2053B93A7F}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2022-09-01 21:25:20
Description: 
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=PUA:Win32/Presenoker&threatid=242420&enterprise=0
Name: PUA:Win32/Presenoker
Schweregrad: Niedrig
Kategorie: Potenziell unerwünschte Software
Pfad: file:_C:\Users\AR\Downloads\unlocker-1-9-2.zip; file:_C:\Users\AR\Downloads\Unlocker1.9.2 (1).exe; file:_C:\Users\AR\Downloads\Unlocker1.9.2.exe; webfile:_C:\Users\AR\Downloads\unlocker-1-9-2.zip|about:internet|pid:20104,ProcessStart:133065299382781126; webfile:_C:\Users\AR\Downloads\Unlocker1.9.2 (1).exe|about:internet|pid:3196,ProcessStart:133065311675114742; webfile:_C:\Users\AR\Downloads\Unlocker1.9.2.exe|about:internet|pid:16956,ProcessStart:133065300279314068
Erkennungsursprung: Internet
Erkennungstype: Konkret
Erkennungsquelle: Downloads und Anlagen
Benutzer: 
Prozessname: C:\Users\AR\Downloads\FRST64.exe
Sicherheitsversion: AV: 1.373.1365.0, AS: 1.373.1365.0, NIS: 1.373.1365.0
Modulversion: AM: 1.1.19500.2, NIS: 1.1.19500.2

Date: 2022-09-01 21:03:20
Description: 
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=PUA:Win32/Presenoker&threatid=242420&enterprise=0
Name: PUA:Win32/Presenoker
Schweregrad: Niedrig
Kategorie: Potenziell unerwünschte Software
Pfad: file:_C:\Users\AR\Downloads\unlocker-1-9-2.zip; file:_C:\Users\AR\Downloads\Unlocker1.9.2 (1).exe; file:_C:\Users\AR\Downloads\Unlocker1.9.2.exe; webfile:_C:\Users\AR\Downloads\unlocker-1-9-2.zip|about:internet|pid:20104,ProcessStart:133065299382781126; webfile:_C:\Users\AR\Downloads\Unlocker1.9.2 (1).exe|about:internet|pid:3196,ProcessStart:133065311675114742; webfile:_C:\Users\AR\Downloads\Unlocker1.9.2.exe|about:internet|pid:16956,ProcessStart:133065300279314068
Erkennungsursprung: Internet
Erkennungstype: Konkret
Erkennungsquelle: Downloads und Anlagen
Benutzer: 
Prozessname: C:\Windows\explorer.exe
Sicherheitsversion: AV: 1.373.1336.0, AS: 1.373.1336.0, NIS: 1.373.1336.0
Modulversion: AM: 1.1.19500.2, NIS: 1.1.19500.2

Date: 2022-09-01 20:39:44
Description: 
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=PUA:Win32/Presenoker&threatid=242420&enterprise=0
Name: PUA:Win32/Presenoker
Schweregrad: Niedrig
Kategorie: Potenziell unerwünschte Software
Pfad: file:_C:\Users\AR\Downloads\unlocker-1-9-2.zip; file:_C:\Users\AR\Downloads\Unlocker1.9.2 (1).exe; file:_C:\Users\AR\Downloads\Unlocker1.9.2.exe; webfile:_C:\Users\AR\Downloads\unlocker-1-9-2.zip|about:internet|pid:20104,ProcessStart:133065299382781126; webfile:_C:\Users\AR\Downloads\Unlocker1.9.2 (1).exe|about:internet|pid:3196,ProcessStart:133065311675114742; webfile:_C:\Users\AR\Downloads\Unlocker1.9.2.exe|about:internet|pid:16956,ProcessStart:133065300279314068
Erkennungsursprung: Internet
Erkennungstype: Konkret
Erkennungsquelle: Downloads und Anlagen
Benutzer: AR-DELL\AR
Prozessname: C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe
Sicherheitsversion: AV: 1.373.1336.0, AS: 1.373.1336.0, NIS: 1.373.1336.0
Modulversion: AM: 1.1.19500.2, NIS: 1.1.19500.2

CodeIntegrity:
===============
Date: 2022-09-02 16:33:21
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_4de65d949492707a\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2022-09-01 22:27:42
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

BIOS: Dell Inc. 1.36.0 12/15/2021
Hauptplatine: Dell Inc. 04PYT3
Prozessor: Intel(R) Core(TM) i7-7500U CPU @ 2.70GHz
Prozentuale Nutzung des RAM: 54%
Installierter physikalischer RAM: 16249.91 MB
Verfügbarer physikalischer RAM: 7460.38 MB
Summe virtueller Speicher: 18681.91 MB
Verfügbarer virtueller Speicher: 6555.53 MB

==================== Laufwerke ================================

Drive c: (OS) (Fixed) (Total:103.84 GB) (Free:17.18 GB) (Model: TOSHIBA THNSNK128GVN8 M.2 2280 128GB) NTFS
Drive d: (Volume) (Fixed) (Total:931.5 GB) (Free:796.29 GB) (Model: WDC WD10SPZX-75Z10T1) NTFS

\\?\Volume{c857a228-8bd0-494d-9592-3085a87c346d}\ () (Fixed) (Total:0.87 GB) (Free:0.42 GB) NTFS
\\?\Volume{f89eda33-8d38-47a9-93c2-f71612f15477}\ (Image) (Fixed) (Total:12.42 GB) (Free:0.64 GB) NTFS
\\?\Volume{452007c5-4b23-4268-8a1f-3c3b1470ca77}\ (DELLSUPPORT) (Fixed) (Total:1.05 GB) (Free:0.22 GB) NTFS
\\?\Volume{16990b29-32c7-4f38-95ab-2a8aa8e4d9a5}\ (ESP) (Fixed) (Total:0.48 GB) (Free:0.43 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 1 (Size: 119.2 GB) (Disk ID: 125E2515)

Partition: GPT.

==================== Ende von Addition.txt =======================

cosinus · 03.09.2022, 12:15

Also zuerstmal: die PDF-Datei und der Bluescreen haben überbaupt nichts mit Schädlingen zu tun. Aber dein Rechner ist gut zugemüllt, da muss aufgeräumt werden:

Störende, veraltete oder unnötige Programme deinstallieren

Bitte über Programme und Features (appwiz.cpl) deinstallieren:

Brave
CCleaner Update Helper
Dell Customer Connect
Dell Digital Delivery
Dell Foundation Services
Dell Hilfe und Support
Dell SupportAssist
Dell SupportAssist OS Recovery Plugin for Dell Update
Dell SupportAssist Remediation
Dell Update
Glary Utilities 5.178
Google Chrome (durch Mozilla Firefox ersetzen)
HP Update
OpenOffice (durch LibreOffice ersetzen)
PDF-Viewer
PowerArchiver 2017
WinZip 24.0

Ale-xander · 04.09.2022, 16:47

Verstehe ich das richtig, bis auf die angezeigten Programme zum deinstallieren ist alles sauber?

cosinus · 04.09.2022, 22:51

Nein, das ist die Vorbereitung. Spreu vom Weizen trennen und so.

Ale-xander · 07.09.2022, 14:15

Ich habe Jetzt ein Paar Sachen bis auf alle Dell (ich denke, ich brauche die für die Fernwartung von Dell), Brave (brauche ich mehrere Browser), PDF-Viewer und CCleaner Update Helper deinstalliert. CCleaner Update Helper finde ich nirgends. Brauche ich kein PDF-Viewer um die PDF Dateien zum Öffnen? Installiert ist ein PDF24. Werden die PDF Dateien mit PDF24 geöffnet oder mit PDF-Viewer?

Leider klappt nicht mehr mit dem Bild einfügen

cosinus · 07.09.2022, 14:22

PDF-Viewer ist PDF-Viewer. Es wurde nicht geschrieben, dass du PDF24 wegkloppen sollst.

Ale-xander · 07.09.2022, 19:46

Ok. Was kann man noch bei mir machen? Und die Frage zu diesem einzigartigen PDF Datei, was sich nicht löschen lässt.

cosinus · 07.09.2022, 19:53

Hast du jetzt alles von mir aufgelistete deinstalliert?

Ale-xander · 07.09.2022, 20:09

Alles bis auf Brave, alle Dell Sachen. Ich brauche die. Warum kann ich keine Bilder anhängen? Klickt man auf den Bild Butten, poppt Fenster mit "Bitte geben Sie die URL zu Ihrer Grafik ein: hxxp:// "

cosinus · 07.09.2022, 20:12

Bilder musst du über das Anhangsymbol (Büroklammer) hochladen. Oder bei einem Bilderhoster wie abload.de und dann hier verlinken.

adwCleaner

Führe AdwCleaner gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei in CODE-Tags.

adwcleaner zwecks Kontrolle bitte wiederholen, falls es Funde gab.

Dann jetzt bitte mit Malwarebytes weitermachen.

Ale-xander · 07.09.2022, 20:17

irgendwas stimmt da nicht. ich habe hxxp:// und da steht hXXp://!?

???

04.09.2022, 22:51	#8
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Wondows 10 Pro - PDF Datei mit verdächtigen Namen lässt sich nicht löschen - Bluescreen - nvlddmkm.sys Nein, das ist die Vorbereitung. Spreu vom Weizen trennen und so. __________________ Logfiles bitte immer in CODE-Tags posten

07.09.2022, 14:22	#10
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Wondows 10 Pro - PDF Datei mit verdächtigen Namen lässt sich nicht löschen - Bluescreen - nvlddmkm.sys PDF-Viewer ist PDF-Viewer. Es wurde nicht geschrieben, dass du PDF24 wegkloppen sollst. __________________ Logfiles bitte immer in CODE-Tags posten

07.09.2022, 19:53	#12
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Wondows 10 Pro - PDF Datei mit verdächtigen Namen lässt sich nicht löschen - Bluescreen - nvlddmkm.sys Hast du jetzt alles von mir aufgelistete deinstalliert? __________________ Logfiles bitte immer in CODE-Tags posten

Wondows 10 Pro - PDF Datei mit verdächtigen Namen lässt sich nicht löschen - Bluescreen - nvlddmkm.sys

Plagegeister aller Art und deren Bekämpfung: Wondows 10 Pro - PDF Datei mit verdächtigen Namen lässt sich nicht löschen - Bluescreen - nvlddmkm.sys