|
Log-Analyse und Auswertung: Windows 10: Passwort-Trojaner wirklich weg?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
11.03.2023, 12:25 | #1 |
| Windows 10: Passwort-Trojaner wirklich weg? Hallo, der Windows Defender hat einen Wacatac in Quarantäne gestellt. Malwarebytes und eset habe ich danach drüber laufen lassen. Hier dazu die Logfiles von Malwarebytes: Code:
ATTFilter Protokolldatei: ec65ac40-bd46-11ed-9e62-107b44f0e531.json -Softwaredaten- Version: 4.5.23.241 Komponentenversion: 1.0.1927 Version des Aktualisierungspakets: 1.0.66441 Lizenz: Testversion -Systemdaten- Betriebssystem: Windows 10 (Build 19045.2673) CPU: x64 Dateisystem: NTFS Benutzer: DESKTOP-****\**** -Scan-Übersicht- Scan-Typ: Bedrohungs-Scan Scan gestartet von: Manuell Ergebnis: Abgeschlossen Gescannte Objekte: 433023 Erkannte Bedrohungen: 3 In die Quarantäne verschobene Bedrohungen: 3 Abgelaufene Zeit: 3 Min., 20 Sek. -Scan-Optionen- Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Erkennung PUM: Erkennung -Scan-Details- Prozess: 0 (keine bösartigen Elemente erkannt) Modul: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 0 (keine bösartigen Elemente erkannt) Registrierungswert: 1 PUP.Optional.VLCUpdaterDE, HKU\S-1-5-21-341515215-1173906820-3305953664-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\STARTUPAPPROVED\RUN|VLC UPDATER, In Quarantäne, 1638, 750355, 1.0.66441, , ame, , , Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Daten-Stream: 0 (keine bösartigen Elemente erkannt) Ordner: 0 (keine bösartigen Elemente erkannt) Datei: 2 PUP.Optional.QwebDe, C:\USERS\NIKLA\APPDATA\ROAMING\MICROSOFT\INTERNET EXPLORER\QUICK LAUNCH\USER PINNED\TASKBAR\QWEB SYMBOL.LNK, In Quarantäne, 1476, 496142, 1.0.66441, , ame, , 3E9DADC7A69FF007E90069FF81161A96, E207F82B2A0477132651D1B9020035EF9BA2D2FC2ED5236A9CF4728FA3B38933 Spyware.PasswordStealer, C:\PROGRAM FILES (X86)\POST SERVICE & CONSULTING LIMITED\VIDEODOWNLOADER\DOWNLOADER.EXE, In Quarantäne, 511, 786368, 1.0.66441, , ame, , CB61DCCE14C847A9527D4F7A234458F4, A63BB1F4B3AE8717202704CD293F9357914A0DC35A7070A683AED7A756F2984E Physischer Sektor: 0 (keine bösartigen Elemente erkannt) WMI: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter 10.03.2023 21:26:43 Geprüfte Dateien: 2997712 Erkannte Dateien: 2 Gesäuberte Dateien: 2 Prüfdauer gesamt 05:19:22 Prüfstatus: Abgeschlossen C:\$Recycle.Bin\S-1-5-21-341515215-1173906820-3305953664-1001\$RBJO73G\aswOfferTool.exe Win32/Bundled.Toolbar.Google.D potenziell unsichere Anwendung gelöscht C:\$Recycle.Bin\S-1-5-21-341515215-1173906820-3305953664-1001\$RBJO73G\offertool_x64_ais-959.vpx Win32/Bundled.Toolbar.Google.D potenziell unsichere Anwendung gelöscht FRST Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 05-03-2023 durchgeführt von **** (Administrator) auf DESKTOP-**** (11-03-2023 11:22:26) Gestartet von D:\Downloads Geladene Profile: ****** Plattform: Microsoft Windows 10 Pro Version 22H2 19045.2673 (X64) Sprache: Deutsch (Deutschland) Standard-Browser: Chrome Start-Modus: Normal ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Advanced Micro Devices Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\AMD\CNext\CCCSlim\MOM.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe (C:\Program Files (x86)\AMD\CNext\CCCSlim\MOM.exe ->) (Advanced Micro Devices Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\AMD\CNext\CCCSlim\CCC.exe (C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.UserSessionHelper.exe (C:\Program Files\ASUSTeKcomputer.Inc\Sonic Suite 3\Foundation\SS3Svc32.exe ->) (ASUSTeK COMPUTER INC.) [Datei ist nicht signiert] C:\Program Files\ASUSTeKcomputer.Inc\Sonic Suite 3\Foundation\x64\SS3Svc64.exe (C:\Program Files\Tablet\Wacom\WacomHost.exe ->) (Wacom Technology Corporation -> Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe (C:\Program Files\Tablet\Wacom\WTabletServicePro.exe ->) (Wacom Technology Corp. -> Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe (C:\Program Files\Tablet\Wacom\WTabletServicePro.exe ->) (Wacom Technology Corporation -> Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe (C:\Program Files\Tablet\Wacom\WTabletServicePro.exe ->) (Wacom Technology Corporation -> Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe (Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (Cisco Systems, Inc. -> Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco Secure Client\UI\csc_ui.exe (Corsair Components, Inc. -> Corsair Components, Inc.) C:\Program Files (x86)\Corsair\Corsair Utility Engine\CUE.exe (D:\SteamLibrary\steamapps\common\wallpaper_engine\wallpaper32.exe ->) (Kristjan Skutta -> ) D:\SteamLibrary\steamapps\common\wallpaper_engine\bin\webwallpaper32.exe <4> (DriverStore\FileRepository\u0384804.inf_amd64_41ca4ca6939f5e56\B384763\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0384804.inf_amd64_41ca4ca6939f5e56\B384763\atieclxx.exe (explorer.exe ->) (Corsair Components, Inc. -> Corsair Components, Inc.) C:\Program Files (x86)\CorsairLink4\CorsairLink4.exe (explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <23> (explorer.exe ->) (Kristjan Skutta -> ) D:\SteamLibrary\steamapps\common\wallpaper_engine\wallpaper32.exe (explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe <2> (explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe (explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (explorer.exe ->) (WebGear Ltd, New Zealand + Create Software + Stru.be + saller.NET + Big-R + obelix30) [Datei ist nicht signiert] C:\Program Files (x86)\GO Contact Sync Mod\GOContactSync.exe (G. SKILL International Enterprise Co., Ltd. -> G.SKILL Inc.) C:\Program Files (x86)\G.SKILL\Trident Z Lighting Control\hid.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (S:\Programme\MDESIGN\lmgrd.exe ->) (Tedata GmbH) [Datei ist nicht signiert] S:\Programme\MDESIGN\TEDATA64.exe (S:\Programme\SOLIDWORKS Corp\SOLIDWORKS Flow Simulation\binCFW\remotesolverdispatcherservice.exe ->) (Mentor Graphics Corporation -> Mentor Graphics Corporation) S:\Programme\SOLIDWORKS Corp\SOLIDWORKS Flow Simulation\binCFW\dispatcher.exe (services.exe ->) (3Dconnexion SAM -> 3Dconnexion) C:\Program Files\3Dconnexion\3DxWare\3DxWinCore\Mgl3DCtlrRPCService.exe (services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0384804.inf_amd64_41ca4ca6939f5e56\B384763\atiesrxx.exe (services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe (services.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.02.05\atkexComSvc.exe (services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) C:\Program Files (x86)\LightingService\LightingService.exe (services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe (services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe (services.exe ->) (Autodesk, Inc -> Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe (services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (services.exe ->) (Cisco Systems, Inc. -> Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco Secure Client\vpnagent.exe (services.exe ->) (Corsair Components, Inc. -> Corsair Components, Inc.) C:\Program Files (x86)\CorsairLink4\CorsairLink4.Service.exe (services.exe ->) (Dassault Systemes SolidWorks Corp. -> Dassault Systèmes) S:\Programme\SOLIDWORKS Corp\SOLIDWORKS Visualize\SWVisualize.Queue.Server.exe (services.exe ->) (Endor AG -> ) C:\Program Files\Fanatec\Fanatec Wheel\FWPnpService.exe (services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe (services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe (services.exe ->) (Flexera Software LLC -> Flexera) S:\Programme\MDESIGN\lmgrd.exe <2> (services.exe ->) (Geek Software GmbH -> Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe (services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe (services.exe ->) (Leawo Software) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\cdagtsvc\cdagtsvc_v1.0.0_x86.exe (services.exe ->) (Mentor Graphics Corporation -> Mentor Graphics Corporation) S:\Programme\SOLIDWORKS Corp\SOLIDWORKS Flow Simulation\binCFW\remotesolverdispatcherservice.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\SOLIDWORKS Electrical\MSSQL12.TEW_SQLEXPRESS\MSSQL\Binn\sqlservr.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdlogsr.exe (services.exe ->) (nordvpn s.a. -> TEFINCOM S.A.) C:\Program Files\NordVPN\nordvpn-service.exe (services.exe ->) (NortonLifeLock Inc. -> NortonLifelock Inc.) C:\Program Files\Norton Security\Engine\22.23.1.21\NortonSecurity.exe <2> (services.exe ->) (NortonLifeLock Inc. -> NortonLifeLock Inc.) C:\Program Files\Norton Security\Engine\22.23.1.21\nsWscSvc.exe (services.exe ->) (Qualcomm Atheros -> Windows (R) Win 7 DDK provider) C:\Windows\System32\AdminService.exe (services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (services.exe ->) (Wacom Technology Corporation -> Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe (services.exe ->) (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) C:\Program Files (x86)\Common Files\Zoom\Support\CptService.exe (sihost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MSPaint_6.2203.1037.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe (Spotify AB) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\Spotify.exe <6> (svchost.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\AURA\AsRogAuraGpuDllServer.exe (svchost.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files\ASUS\KINGSTON_Aac_DRAM\AacKingstonDramHal_x86.exe (svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Compputer Inc.) C:\Program Files\ASUS\AacMB\Aac3572MbHal_x86.exe (svchost.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) C:\Program Files\ASUS\AacExtCard\extensionCardHal_x86.exe (svchost.exe ->) (ASUSTeK COMPUTER INC.) [Datei ist nicht signiert] C:\Program Files\ASUSTeKcomputer.Inc\Sonic Suite 3\Foundation\SS3Svc32.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.3DBuilder_20.0.3.0_x64__8wekyb3d8bbwe\Builder3D.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.BingWeather_4.53.43112.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Weather.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2210.0.0_x64__8wekyb3d8bbwe\CalculatorApp.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21374.0_x64__8wekyb3d8bbwe\HxOutlook.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21374.0_x64__8wekyb3d8bbwe\HxTsr.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.823.1271.0_x64__8wekyb3d8bbwe\GameBar.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.823.1271.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.23012.167.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2> (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\backgroundTaskHost.exe (svchost.exe ->) (Spotify AB) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\XboxGameBarSpotify.exe (svchost.exe ->) (WhatsApp Inc.) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2307.4.0_x64__cv1g1gvanyjgm\WhatsApp.exe ==================== Registry (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation -> Microsoft Corporation) HKLM\...\Run: [Flight Yoke System] => C:\Program Files\Logitech\Flight Yoke System\Yoke_Profiler.exe [19456 2018-02-14] (Logitech) [Datei ist nicht signiert] HKLM\...\Run: [3DxWare Service] => C:\Program Files\3Dconnexion\3DxWare\3DxWinCore\3DxService.exe [2518584 2020-09-07] (3Dconnexion SAM -> 3Dconnexion, INC) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9235936 2017-10-19] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [Sonic Studio 3] => C:\Program Files\ASUSTeKcomputer.Inc\Sonic Suite 3\Foundation\SS3svc32.exe [1233920 2017-10-18] (ASUSTeK COMPUTER INC.) [Datei ist nicht signiert] HKLM-x32\...\Run: [Corsair Utility Engine] => C:\Program Files (x86)\Corsair\Corsair Utility Engine\CUE.exe [20369616 2017-10-11] (Corsair Components, Inc. -> Corsair Components, Inc.) HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [704424 2017-06-15] (Autodesk, Inc -> Autodesk, Inc.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [235624 2015-01-09] (Canon Inc. -> CANON INC.) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [433800 2018-09-17] (Geek Software GmbH -> Geek Software GmbH) HKLM-x32\...\Run: [Spectrum] => C:\Program Files (x86)\G.SKILL\Trident Z Lighting Control\HID.exe [1747048 2022-05-10] (G. SKILL International Enterprise Co., Ltd. -> G.SKILL Inc.) HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [138214768 2022-11-03] (Microsoft Corporation -> Microsoft Corporation) HKLM-x32\...\Run: [Cisco Secure Client] => C:\Program Files (x86)\Cisco\Cisco Secure Client\UI\csc_ui.exe [2999392 2022-10-17] (Cisco Systems, Inc. -> Cisco Systems, Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [711288 2023-01-09] (Oracle America, Inc. -> Oracle Corporation) HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Beschränkung <==== ACHTUNG HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Beschränkung <==== ACHTUNG HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2628488 2023-03-09] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [CorsairLink4] => C:\Program Files (x86)\CorsairLink4\CorsairLink4.exe [27146448 2018-03-30] (Corsair Components, Inc. -> Corsair Components, Inc.) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [WallpaperEngine] => D:\SteamLibrary\steamapps\common\wallpaper_engine\wallpaper32.exe [2918904 2020-09-16] (Kristjan Skutta -> ) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [1746776 2021-02-15] (Overwolf Ltd -> Overwolf Ltd.) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [Lync] => "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe" /fromrunkey (Keine Datei) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [CiscoMeetingDaemon] => C:\Users\nikla\AppData\Local\WebEx\WebexHost.exe [8040032 2023-02-22] (Cisco WebEx LLC -> Cisco Webex LLC) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [NordVPN] => C:\Program Files\NordVPN\NordVPN.exe [280440 2021-06-06] (nordvpn s.a. -> TEFINCOM S.A.) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [CorsairEffectsEngine] => "C:\Users\nikla\AppData\Local\CorsairEffectsEngine\Update.exe" --processStart CorsairEffectsEngine.exe (Keine Datei) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [SignalRgb] => "C:\Users\nikla\AppData\Local\VortxEngine\SignalRgbLauncher.exe" --silent (Keine Datei) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [MicrosoftEdgeAutoLaunch_ALB] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --launcher=on_logon_windows [4243408 2023-03-02] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [MicrosoftEdgeAutoLaunch_BD744D00B7947BA4CE821E1D00C3AA26] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4243408 2023-03-02] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\nikla\AppData\Local\Microsoft\Teams\Update.exe [2587456 2023-02-16] (Microsoft 3rd Party Application Component -> Microsoft Corporation) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [GoogleContactSync] => C:\Program Files (x86)\GO Contact Sync Mod\GOContactSync.exe [3342848 2022-08-06] (WebGear Ltd, New Zealand + Create Software + Stru.be + saller.NET + Big-R + obelix30) [Datei ist nicht signiert] HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [GoogleChromeAutoLaunch_333DA321688CFEFA9F9D34AB6803D568] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window /prefetch:5 [3221272 2023-03-04] (Google LLC -> Google LLC) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\MountPoints2: {2340272e-be10-11eb-974e-e8d11bfb5684} - "E:\OnePlus_setup.exe" /s HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\MountPoints2: {3e92ea2f-46ca-11ec-9762-e8d11bfb5684} - "J:\OnePlus_setup.exe" /s HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\MountPoints2: {8ee68233-cc50-11e7-9519-107b44f0e531} - "E:\OnePlus_setup.exe" /s HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\MountPoints2: {dbd5ed5b-d2ca-11ec-9784-e8d11bfb5684} - "E:\OnePlus_setup.exe" /s HKLM\...\Windows x64\Print Processors\Canon iP7200 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBA.DLL [30208 2012-04-16] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Windows x64\Print Processors\Canon MG5700 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDCS.DLL [30208 2015-03-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Canon BJ Language Monitor iP7200 series: C:\WINDOWS\system32\CNMLMBA.DLL [389120 2012-04-16] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Canon BJ Language Monitor iP7200 series XPS: C:\WINDOWS\system32\CNMXLMBA.DLL [392192 2012-04-16] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5700 series: C:\WINDOWS\system32\CNMLMCS.DLL [406528 2015-03-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Canon BJNP Port: C:\WINDOWS\system32\CNMN6PPM.DLL [375296 2015-03-17] (CANON INC.) [Datei ist nicht signiert] HKLM\...\Print\Monitors\pdfcmon: C:\WINDOWS\system32\pdfcmon.dll [181248 2023-03-08] (pdfforge GmbH) [Datei ist nicht signiert] HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\111.0.5563.65\Installer\chrmstp.exe [2023-03-08] (Google LLC -> Google LLC) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CADClick® Click2CAD Toolbox.lnk [2019-05-16] ShortcutTarget: CADClick® Click2CAD Toolbox.lnk -> C:\Program Files (x86)\KiM GmbH\CADClick Click2CAD Toolbox\CADClick_Click2CAD.exe (KiM GmbH) [Datei ist nicht signiert] Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Imaging Edge Desktop.lnk [2020-05-11] ShortcutTarget: Imaging Edge Desktop.lnk -> C:\Program Files\Sony\Imaging Edge Desktop\ied.exe (Sony Imaging Products & Solutions Inc. -> Sony) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SOLIDWORKS 2021 Fast Start.lnk [2022-02-17] ShortcutTarget: SOLIDWORKS 2021 Fast Start.lnk -> C:\Windows\Installer\{9C0A2571-4AAE-4FEE-B673-038B38B85EFC}\NewShortcut2_87EDF6C81D0A4B7B84F42FE0C6A9D608.exe (Flexera) [Datei ist nicht signiert] Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SOLIDWORKS Hintergrund-Downloader.lnk [2022-02-16] ShortcutTarget: SOLIDWORKS Hintergrund-Downloader.lnk -> C:\Program Files (x86)\Common Files\SOLIDWORKS Installations-Manager\BackgroundDownloading\sldBgDwld.exe (Dassault Systemes SolidWorks Corp. -> Dassault Systèmes SolidWorks Corporation) Startup: C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2022-06-30] ShortcutTarget: An OneNote senden.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Keine Datei) Startup: C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Corsair Effects Engine.appref-ms [2018-07-26] () [Datei ist nicht signiert] InternetURL: C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Google Kalender.url -> URL: hxxps://calendar.google.com/calendar/ Startup: C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Luminar Neo.lnk [2023-02-06] ShortcutTarget: Luminar Neo.lnk -> C:\Program Files\Skylum\Luminar Neo\Luminar Neo.exe (Skylum Software USA, Inc. -> Skylum) Startup: C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Outlook.lnk [2021-09-20] ShortcutTarget: Outlook.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE (Keine Datei) GroupPolicy: Beschränkung ? <==== ACHTUNG Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============ (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {0B6F4C12-5E96-481D-AE0D-EDCFB7B8E788} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [61624 2020-07-08] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) Task: {1A955452-8B04-4B8F-9B50-2CE76A1D699C} - System32\Tasks\Norton AntiVirus Plus\Norton AntiVirus Error Analyzer => C:\Program Files\Norton Security\Engine\22.23.1.21\SymErr.exe [379024 2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) Task: {260597EE-1EFE-4E62-888B-4E59D0F8DA3F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-02-23] (Google Inc -> Google Inc.) Task: {26EBBFC4-6B4F-422F-A559-2F8D1F1CD458} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\nikla\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [21737944 2023-03-10] (ESET, spol. s r.o. -> ESET) Task: {29E993DC-13A6-42DB-B09F-95541369A879} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1627648 2020-07-09] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert] Task: {2A244E2A-03C3-49DA-91C4-0DC1BA7ED144} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton AntiVirus\Upgrade.exe [2353000 2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) Task: {359EB1CC-3032-4ABD-8F07-010EBD31ED9D} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [3825768 2023-02-11] (Microsoft Corporation -> Microsoft Corporation) Task: {3EE56148-692A-4A39-91D0-6D395FF694EA} - System32\Tasks\SS3svc32Run => C:\Program Files\ASUSTeKcomputer.Inc\Sonic Suite 3\Foundation\SS3svc32.exe [1233920 2017-10-18] (ASUSTeK COMPUTER INC.) [Datei ist nicht signiert] Task: {4A0C5A39-B5CF-4EFF-8083-2A2726851F33} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-341515215-1173906820-3305953664-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4206000 2023-03-09] (Microsoft Corporation -> Microsoft Corporation) Task: {4B289FC6-80A8-4F64-B77D-B30F8E51792F} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [1627648 2020-07-09] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert] Task: {4C443E01-1E76-4567-BA7B-489C2F60C35D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1560056 2023-02-01] (Adobe Inc. -> Adobe Inc.) Task: {4F6AFD6C-C87D-48BF-9DBC-8B8C273F07BA} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\IntelPTTEKRecertification.exe [818008 2021-09-15] (Intel Corporation -> Intel(R) Corporation) Task: {506870FF-3B3C-4567-A207-2258BE7CE6CB} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8519680 2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Task: {683599C2-E99D-4675-9B56-B47441944B6D} - System32\Tasks\Norton AntiVirus Plus\Norton AntiVirus Autofix => C:\Program Files\Norton Security\Engine\22.23.1.21\SymErr.exe [379024 2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) Task: {71F7958C-0126-46C4-ADAC-73789EF1CA48} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [64408 2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Task: {74433CBB-1D30-465D-83EB-22C491A97D72} - System32\Tasks\Norton AntiVirus Plus\Norton AntiVirus Error Processor => C:\Program Files\Norton Security\Engine\22.23.1.21\SymErr.exe [379024 2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) Task: {7A711CB0-82DC-4393-BFC2-B22145958FD5} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [69304 2020-07-08] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) Task: {7B3410FE-A596-4782-963C-FBB9F876ED93} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1627648 2020-07-09] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert] Task: {89E0A7DB-FA1D-4170-96DC-F7AE74A0B560} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [142216 2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Task: {89EF1B3B-71B0-431F-AA2E-B627F4A2EBCB} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26334600 2023-02-11] (Microsoft Corporation -> Microsoft Corporation) Task: {9263973F-C98E-4E95-A086-817F0C1C2751} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-02-23] (Google Inc -> Google Inc.) Task: {974A70E0-A94A-48B7-80EA-1DF4109BB04B} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26334600 2023-02-11] (Microsoft Corporation -> Microsoft Corporation) Task: {9F209321-9225-4158-A4BB-5BB54AA08B35} - System32\Tasks\SS3svc64Run => C:\Program Files\ASUSTeKcomputer.Inc\Sonic Suite 3\Foundation\x64\SS3svc64.exe [811520 2017-10-18] (ASUSTeK COMPUTER INC.) [Datei ist nicht signiert] Task: {A2186A0F-BC52-4AF9-99C2-39848ABA3D3E} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4206000 2023-03-09] (Microsoft Corporation -> Microsoft Corporation) Task: {AB8691ED-C0C1-4B5F-A562-1F25C2FE6E3A} - System32\Tasks\ASUS\AsRogAuraGpuDllServer => C:\Program Files (x86)\ASUS\AURA\AsRogAuraGpuDllServer.exe [247256 2016-12-16] (ASUSTeK Computer Inc. -> ) Task: {B6E6057C-4802-4A57-8875-434945C57CBE} - System32\Tasks\ASUS\ASUSUpdateTaskMachineCore => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [153112 2022-10-31] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) Task: {BF053508-657C-438D-A3EB-75A46F177903} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8519680 2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Task: {BF0FCB18-B0F1-4441-8FF5-30C4484F9369} - System32\Tasks\Driver Booster SkipUAC (***) => C:\Program Files (x86)\IObit\Driver Booster\5.1.0\DriverBooster.exe /skipuac (Keine Datei) Task: {C0EB3C26-4126-49D2-9F28-8EAB094117D9} - System32\Tasks\MATLAB R2021b Startup Accelerator => C:\Program Files\MATLAB\R2021b\bin\win64\MATLABStartupAccelerator.exe (Keine Datei) Task: {C959DDE1-4A51-46DB-90E0-997E20F3677D} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton Security\Engine\22.23.1.21\WSCStub.exe [646520 2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) Task: {D463F2FA-A2DF-49B7-A6EC-64272BBB4CDD} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [142216 2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Task: {D7CE29BA-5920-4045-9E4E-6A832C3F3E8D} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2491736 2021-02-15] (Overwolf Ltd -> Overwolf LTD) Task: {E35B0485-9AFC-403B-93A7-EE830ADBAFE7} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\nikla\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [21737944 2023-03-10] (ESET, spol. s r.o. -> ESET) Task: {E7A48BD2-AD71-4D6F-93CB-C836C20108CE} - System32\Tasks\MATLAB R2022b Startup Accelerator => S:\Programme\MATLAB\R2022b\bin\win64\MATLABStartupAccelerator.exe [98816 2022-06-29] () [Datei ist nicht signiert] Task: {EB0CCE20-D7A7-4D04-81B0-6FADAB93F22D} - System32\Tasks\ASUS\Framework Service => C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe [43797544 2022-09-01] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) Task: {EF243A99-6D8D-47B7-AF56-F5615BF3397A} - System32\Tasks\ASUS\ASUSUpdateTaskMachineUA => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [153112 2022-10-31] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\MATLAB R2021b Startup Accelerator.job => C:\Program Files\MATLAB\R2021b\bin\win64\MATLABStartupAccelerator.exe C:\Program Files\MATLAB\R2021b#DESKTOP-***GFFN\***.Sta Task: C:\WINDOWS\Tasks\MATLAB R2022b Startup Accelerator.job => S:\Programme\MATLAB\R2022b\bin\win64\MATLABStartupAccelerator.exeS:\Programme\MATLAB\R2022b#DESKTOP-***GFFN\***.Sta ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.) Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{9bca827c-244f-4b38-98cd-b5ddd81e8ff6}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{a5c95a1a-f2a2-4aca-89e9-0b441b481868}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{dec42306-addf-4283-be25-2fd81a0d81da}: [DhcpNameServer] 192.168.0.1 Edge: ======= DownloadDir: D:\Downloads Edge Notifications: HKU\S-1-5-21-341515215-1173906820-3305953664-1001 -> hxxps://calendar.google.com Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden] Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden] Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden] Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden] Edge Profile: C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default [2023-03-09] Edge Extension: (Cisco Webex Extension) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cmihkeafcknlomclapaddfljaeegfbdl [2021-02-26] Edge Extension: (Checker Plus for Google Calendar™) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fbongfbliechkeaegkjfehhimpenoani [2023-03-05] Edge Extension: (McAfee® WebAdvisor) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fdhgeoginicibhagdmblfikbgbkahibd [2023-03-05] Edge Extension: (PAYBACK Internet Assistent) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fmgfmfcpbgahfllkogflflfebdbfogga [2022-07-13] Edge Extension: (Return YouTube Dislike) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gebbhagfogifgggkldgodflihgfeippi [2023-02-20] Edge Extension: (In Google Drive speichern) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmbmikajjgmnabiglmofipeabaddhgne [2023-03-05] Edge Extension: (Tampermonkey) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\iikmkjmpaadaobahmlepeloendndfphd [2023-02-03] Edge Extension: (Chrome-Erweiterung für Google Notizen) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\lpcaedmchfhocbbapmcbpinfpgnhiddi [2023-03-08] Edge Extension: (Citavi Picker) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mielbhbkcliienpdicphhecpodcaeefg [2022-06-24] Edge Extension: (AdBlock*– der beste Ad-Blocker) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2023-03-05] Edge Extension: (I don't care about cookies) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\oholpbloipjbbhlhohaebmieiiieioal [2023-02-20] Edge HKLM-x32\...\Edge\Extension: [cmihkeafcknlomclapaddfljaeegfbdl] Edge HKLM-x32\...\Edge\Extension: [mielbhbkcliienpdicphhecpodcaeefg] FireFox: ======== FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi => nicht gefunden FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi => nicht gefunden FF Plugin: 3ds.com/ComposerPlayerWebPlugin_x86_64 -> S:\Programme\SOLIDWORKS Corp\SOLIDWORKS Composer\Bin\npcomposerplayerwebplugin.dll [2021-10-29] (DASSAULT SYSTEMES SE -> Dassault Systemes) FF Plugin: @java.com/DTPlugin,version=11.361.2 -> C:\Program Files\Java\jre1.8.0_361\bin\dtplugin\npDeployJava1.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.361.2 -> C:\Program Files\Java\jre1.8.0_361\bin\plugin2\npjp2.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN) FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [Keine Datei] FF Plugin-x32: 3ds.com/ComposerPlayerWebPlugin -> S:\Programme\SOLIDWORKS Corp\SOLIDWORKS Composer\Bin\x86\npcomposerplayerwebplugin.dll [2021-10-29] (DASSAULT SYSTEMES SE -> Dassault Systemes) FF Plugin-x32: @java.com/DTPlugin,version=11.361.2 -> C:\Program Files (x86)\Java\jre1.8.0_361\bin\dtplugin\npDeployJava1.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.361.2 -> C:\Program Files (x86)\Java\jre1.8.0_361\bin\plugin2\npjp2.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @ptc.com/IsoView -> C:\Program Files (x86)\Common Files\PTC\npisoview.dll [2016-11-29] (PTC Inc. -> PTC Inc.) FF Plugin-x32: @ptc.com/ProductViewLite -> C:\Program Files (x86)\Common Files\PTC\np6_pvapplite9.dll [2016-11-29] (PTC Inc. -> PTC) FF Plugin-x32: @webex.com/npatgpc -> C:\Program Files (x86)\Webex\npatgpc.dll [2021-01-29] (Cisco WebEx LLC -> Cisco WebEx LLC) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2023-03-02] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [Keine Datei] Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default [2023-03-11] CHR Extension: (Just Black) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\aghfnjkcakhmadgdomlmlhhaocbkloab [2023-03-06] CHR Extension: (Tampermonkey) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2023-03-06] CHR Extension: (I don't care about cookies) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\fihnjjcciajhdojfnbdddfaoknhalnja [2023-03-06] CHR Extension: (Norton Safe Web) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnpbeacklnhmkkilekogeiekaglbmmka [2023-03-08] CHR Extension: (Return YouTube Dislike) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\gebbhagfogifgggkldgodflihgfeippi [2023-03-06] CHR Extension: (Google Docs Offline) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-03-06] CHR Extension: (AdBlock*– der beste Ad-Blocker) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2023-03-06] CHR Extension: (In Google Drive speichern) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbmikajjgmnabiglmofipeabaddhgne [2023-03-06] CHR Extension: (Checker Plus for Google Calendar™) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhggnncdpfibdhinjiegagmopldibha [2023-03-06] CHR Extension: (Cisco Webex Extension) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlhmfgmfgeifomenelglieieghnjghma [2023-03-06] CHR Extension: (Chrome-Erweiterung für Google Notizen) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpcaedmchfhocbbapmcbpinfpgnhiddi [2023-03-09] CHR Extension: (Shazam: Finde Songtitel in deinem Browser) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmioliijnhnoblpgimnlajmefafdfilb [2023-03-06] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-06] CHR Extension: (Citavi Picker) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohgndokldibnndfnjnagojmheejlengn [2023-03-06] CHR Extension: (PAYBACK Internet Assistent) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbfjbhoglggakhkngkbfehgghkaadeba [2023-03-06] CHR Profile: C:\Users\nikla\AppData\Local\Google\Chrome\User Data\System Profile [2023-03-09] CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] CHR HKLM-x32\...\Chrome\Extension: [jlhmfgmfgeifomenelglieieghnjghma] CHR HKLM-x32\...\Chrome\Extension: [ohgndokldibnndfnjnagojmheejlengn] ==================== Dienste (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1353208 2017-06-15] (Autodesk, Inc -> Autodesk Inc.) R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-02-01] (Adobe Inc. -> Adobe Inc.) R2 ArmouryCrateService; C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe [394864 2022-09-27] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.02.05\atkexComSvc.exe [456008 2022-10-31] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) S3 AsRogAuraService; C:\Program Files (x86)\ASUS\AURA\AsRogAuraService.exe [753624 2016-12-16] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) S2 asus; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [153112 2022-10-31] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) R2 AsusCertService; C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe [558104 2022-05-19] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) S3 asusm; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [153112 2022-10-31] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) S2 AsusROGLSLService; C:\Program Files (x86)\ASUS\AsusROGLSLService\AsusROGLSLService.exe [678256 2022-10-31] (ASUSTeK COMPUTER INC. -> ASUS) R2 CdRomAccessAgentService; C:\Program Files (x86)\Common Files\cdagtsvc\cdagtsvc_v1.0.0_x86.exe [90112 2023-03-06] (Leawo Software) [Datei ist nicht signiert] R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12554240 2023-02-11] (Microsoft Corporation -> Microsoft Corporation) R3 CLink4Service; C:\Program Files (x86)\CorsairLink4\CorsairLink4.Service.exe [34512 2018-03-30] (Corsair Components, Inc. -> Corsair Components, Inc.) S3 CoordinatorServiceHost; S:\Programme\SOLIDWORKS Corp\SOLIDWORKS\swScheduler\DTSCoordinatorService.exe [79576 2021-10-30] (Dassault Systemes SolidWorks Corp. -> Dassault Systèmes SolidWorks Corporation) R2 csc_vpnagent; C:\Program Files (x86)\Cisco\Cisco Secure Client\vpnagent.exe [1215584 2022-12-13] (Cisco Systems, Inc. -> Cisco Systems, Inc.) S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [818304 2020-09-23] (EasyAntiCheat Oy -> Epic Games, Inc) S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029472 2022-05-19] (Epic Games Inc. -> Epic Games, Inc.) S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncHelper.exe [3486600 2023-03-09] (Microsoft Corporation -> Microsoft Corporation) S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [520416 2014-01-28] (FUTUREMARK INC -> Futuremark) R2 FWPnpService; C:\Program Files\Fanatec\Fanatec Wheel\FWPnpService.exe [250864 2019-01-10] (Endor AG -> ) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [389696 2017-07-10] (Canon Inc. -> ) S3 impi_hydra; S:\Programme\SOLIDWORKS Corp\SOLIDWORKS\hydra_service.exe [924472 2021-10-29] (Intel(R) Software Development Products -> Intel Corporation) R2 LightingService; C:\Program Files (x86)\LightingService\LightingService.exe [3835360 2022-03-10] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) S2 MDESIGN License Manager; C:\Program Files (x86)\FLEXlm\MDESIGN\lmgrd.exe [1396200 2018-06-29] (Flexera Software LLC -> Flexera Software LLC) R2 MDESIGN License Manager 64; S:\Programme\MDESIGN\lmgrd.exe [1203536 2022-10-20] (Flexera Software LLC -> Flexera) R2 Mgl3DCtlrRPCService; C:\Program Files\3Dconnexion\3DxWare\3DxWinCore\Mgl3DCtlrRPCService.exe [166968 2020-09-07] (3Dconnexion SAM -> 3Dconnexion) R2 MSSQL$TEW_SQLEXPRESS; C:\ProgramData\SOLIDWORKS Electrical\MSSQL12.TEW_SQLEXPRESS\MSSQL\Binn\sqlservr.exe [372416 2015-04-20] (Microsoft Corporation -> Microsoft Corporation) R2 nordvpn-service; C:\Program Files\NordVPN\nordvpn-service.exe [280440 2021-06-06] (nordvpn s.a. -> TEFINCOM S.A.) R2 NortonSecurity; C:\Program Files\Norton Security\Engine\22.23.1.21\NortonSecurity.exe [344888 2023-02-02] (NortonLifeLock Inc. -> NortonLifelock Inc.) R2 nsWscSvc; C:\Program Files\Norton Security\Engine\22.23.1.21\nsWscSvc.exe [1059176 2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) S3 OfficeSvcManagerAddons; C:\WINDOWS\system32\dllhost.exe /Processid:{2CA2E202-932F-4BA2-8771-195BB86398F5} [21312 2020-10-16] (Microsoft Windows -> Microsoft Corporation) S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\23.038.0219.0001\OneDriveUpdaterService.exe [3865992 2023-03-09] (Microsoft Corporation -> Microsoft Corporation) S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2491736 2021-02-15] (Overwolf Ltd -> Overwolf LTD) R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [433800 2018-09-17] (Geek Software GmbH -> Geek Software GmbH) R2 RemoteSolverDispatcher; S:\Programme\SOLIDWORKS Corp\SOLIDWORKS Flow Simulation\binCFW\remotesolverdispatcherservice.exe [252936 2021-10-29] (Mentor Graphics Corporation -> Mentor Graphics Corporation) R2 ROG Live Service; C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe [1574512 2023-02-13] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [226976 2023-03-06] (Microsoft Windows Publisher -> Microsoft Corporation) S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2017-11-17] (SolidWorks) [Datei ist nicht signiert] S4 SQLAgent$TEW_SQLEXPRESS; C:\ProgramData\SOLIDWORKS Electrical\MSSQL12.TEW_SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [613056 2015-04-20] (Microsoft Corporation -> Microsoft Corporation) R2 SWVisualize2021.Queue.Server; S:\Programme\SOLIDWORKS Corp\SOLIDWORKS Visualize\SWVisualize.Queue.Server.exe [30424 2021-10-30] (Dassault Systemes SolidWorks Corp. -> Dassault Systèmes) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [15212856 2023-01-18] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\NisSrv.exe [3191256 2023-02-15] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WebexService; C:\Program Files (x86)\Webex\Webex\Applications\WebExService.exe [145096 2021-01-29] (Cisco WebEx LLC -> Cisco WebEx LLC) S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\MsMpEng.exe [133576 2023-02-15] (Microsoft Windows Publisher -> Microsoft Corporation) R2 ZoomCptService; "C:\Program Files (x86)\Common Files\Zoom\Support\CptService.exe" -user_path "C:\Users\nikla\AppData\Roaming\Zoom" ===================== Treiber (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R3 3dxhid; C:\WINDOWS\System32\drivers\3dxhid.sys [49952 2020-09-02] (3Dconnexion SAM -> 3Dconnexion SAM) R3 acsock; C:\WINDOWS\system32\DRIVERS\acsock64.sys [304056 2022-12-13] (Microsoft Windows Hardware Compatibility Publisher -> Cisco Systems, Inc.) R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [54720 2022-10-21] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0384804.inf_amd64_41ca4ca6939f5e56\B384763\amdkmdag.sys [94459216 2022-10-21] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2016-11-18] (ASUSTeK Computer Inc. -> ) R1 Asusgio3; C:\WINDOWS\system32\drivers\AsIO3.sys [49256 2022-08-15] (ASUSTeK COMPUTER INC. -> ) R1 BHDrvx64; C:\Program Files\Norton Security\NortonData\22.23.1.21\Definitions\BASHDefs\20230309.011\BHDrvx64.sys [1696736 2023-03-07] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R1 ccSet_NGC; C:\WINDOWS\System32\drivers\NGCx64\1617010.015\ccSetx64.sys [198280 2023-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [45528 2017-09-14] (Microsoft Windows Hardware Compatibility Publisher -> Corsair) R3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [21968 2017-09-14] (Microsoft Windows Hardware Compatibility Publisher -> Corsair) R3 cpuz146; C:\WINDOWS\temp\cpuz146\cpuz146_x64.sys [52824 2023-03-11] (CPUID -> CPUID) R1 CTIAIO; C:\WINDOWS\system32\drivers\CtiAIo64.sys [32304 2022-10-31] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.) R1 CTIIO; C:\WINDOWS\system32\drivers\CtiIo64.sys [32296 2022-10-31] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.) R3 DroidCam; C:\WINDOWS\System32\drivers\droidcam.sys [32240 2020-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Dev47Apps) R3 DroidCamVideo; C:\WINDOWS\System32\DriverStore\FileRepository\droidcamvideo.inf_amd64_47e18363cbf3dfe0\droidcamvideo.sys [33784 2021-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) S3 e2esoft_ivcamaudio_simple; C:\WINDOWS\system32\drivers\iVCamAud.sys [255464 2020-11-04] (Shanghai Yitu Information Technology Co., Ltd. -> e2eSoft) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [527832 2022-09-19] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [159720 2023-03-08] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) S3 FanatecWheelFilterUsb; C:\WINDOWS\System32\drivers\FWFilterUsb.sys [91872 2019-01-10] (Endor AG -> Endor AG) R3 FWVirtualInputDevice; C:\WINDOWS\System32\drivers\FWVirtualInputDevice.sys [35552 2019-01-10] (Endor AG -> Endor AG) S3 GLCKIO; C:\Program Files (x86)\ASUS\AURA\690b33e1-0462-4e84-9bea-c7552b45432a.sys [14976 2022-10-31] (ASUSTeK Computer Inc. -> ) R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2018-09-15] (Martin Malik - REALiX -> REALiX(tm)) R1 IDSVia64; C:\Program Files\Norton Security\NortonData\22.23.1.21\Definitions\IPSDefs\20230310.061\IDSvia64.sys [1527816 2023-03-07] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R3 IOMap; C:\WINDOWS\system32\drivers\IOMap64.sys [35344 2022-09-21] (ASUSTEK COMPUTER INC. -> ASUSTeK Computer Inc.) S3 iVCam; C:\WINDOWS\system32\DRIVERS\iVCam.sys [1090536 2020-11-02] (Shanghai Yitu Information Technology Co., Ltd. -> e2eSoft) R3 KMJHidMini; C:\WINDOWS\System32\drivers\3dxkmj.sys [18944 2020-09-02] (Microsoft Windows Hardware Compatibility Publisher -> 3Dconnextion Inc.) R3 KMJShim; C:\WINDOWS\System32\drivers\3dxshim.sys [7168 2020-09-02] (Microsoft Windows Hardware Compatibility Publisher -> 3Dconnextion Inc.) R3 LSaiMini; C:\WINDOWS\System32\drivers\LSaiMini.sys [20720 2018-02-14] (WDKTestCert SYSTEM,131245371151827277 -> Logitech) R3 LSaiNtBus; C:\WINDOWS\system32\drivers\LSaiBus.sys [60336 2018-02-14] (WDKTestCert SYSTEM,131245371151827277 -> Logitech) R1 LUMDriver; C:\WINDOWS\system32\drivers\LUMDriver.sys [24848 2008-01-02] (IBM Polska Sp. z o.o. -> IBM) R1 MSIO; C:\WINDOWS\system32\drivers\MsIo64.sys [17424 2020-01-19] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd) R2 NDivert; C:\WINDOWS\System32\drivers\NDivert.sys [105184 2021-06-08] (TEFINCOM S.A. -> ) R3 Neo_VPN; C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys [37824 2019-07-19] (SoftEther Corporation -> SoftEther Corporation) R1 nordlwf; C:\WINDOWS\system32\DRIVERS\nordlwf.sys [42576 2021-06-13] (nordvpn s.a. -> TEFINCOM S.A.) S3 nsvst_NGC; C:\WINDOWS\System32\drivers\NGCx64\1617010.015\nsvst.sys [57120 2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) S4 RsFx0310; C:\WINDOWS\System32\DRIVERS\RsFx0310.sys [249024 2015-04-20] (Microsoft Corporation -> Microsoft Corporation) S3 SaiK0bac; C:\WINDOWS\system32\DRIVERS\SaiK0bac.sys [217408 2018-02-14] (WDKTestCert SYSTEM,131245371151827277 -> Logitech) S3 SaiU0bac; C:\WINDOWS\system32\DRIVERS\SaiU0bac.sys [24816 2018-02-14] (WDKTestCert SYSTEM,131245371151827277 -> Logitech) R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Bruce James -> Scarlet.Crush Productions) R2 SignalRgbDriver; C:\WINDOWS\System32\Drivers\SignalRgbDriver.sys [25832 2022-03-22] (WHIRLWIND VIRTUAL REALITIES INC. -> ) R2 speedfan; C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software) R1 SRTSP; C:\WINDOWS\System32\drivers\NGCx64\1617010.015\SRTSP64.SYS [956048 2023-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R1 SRTSPX; C:\WINDOWS\System32\drivers\NGCx64\1617010.015\SRTSPX64.SYS [52872 2023-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R0 SymEFASI; C:\WINDOWS\System32\drivers\NGCx64\1617010.015\SYMEFASI64.SYS [2180248 2023-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) S0 SymELAM; C:\WINDOWS\System32\drivers\NGCx64\1617010.015\SymELAM.sys [36016 2023-02-02] (Microsoft Windows Early Launch Anti-Malware Publisher -> Broadcom) R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [100344 2023-03-08] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R3 SymEvnt; C:\Program Files\Norton Security\NortonData\22.23.1.21\SymPlatform\SymEvnt.sys [722400 2022-09-21] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R1 SymIRON; C:\WINDOWS\System32\drivers\NGCx64\1617010.015\Ironx64.SYS [306824 2023-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R1 SymNetS; C:\WINDOWS\System32\drivers\NGCx64\1617010.015\symnets.sys [492728 2023-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [44896 2018-07-24] (TEFINCOM S.A. -> The OpenVPN Project) S3 USBTINSP; C:\WINDOWS\System32\drivers\tinspusb.sys [142848 2010-03-29] (Microsoft Windows Hardware Compatibility Publisher -> Texas Instruments) S3 vpnva; C:\WINDOWS\System32\drivers\vpnva64-6.sys [54176 2022-12-13] (Microsoft Windows Hardware Compatibility Publisher -> Cisco Systems, Inc.) S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [49576 2023-02-15] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [473336 2023-02-15] (Microsoft Windows -> Microsoft Corporation) S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [151184 2016-07-15] (NGO -> MBB) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99576 2023-02-15] (Microsoft Windows -> Microsoft Corporation) R2 WinRing0x64; C:\WINDOWS\System32\Drivers\WinRing0x64.sys [14544 2022-03-22] (Noriyuki MIYAZAKI -> OpenLibSys.org) S3 wpCtrlDrv_NGC; C:\WINDOWS\System32\drivers\NGCx64\1617010.015\wpCtrlDrv.sys [1016792 2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) S3 CM_VENDER_CMD; \??\C:\Program Files\Common Files\Logitech\G430Install\CMVC64.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2023-03-11 11:19 - 2023-03-11 11:22 - 000000000 ____D C:\FRST 2023-03-10 22:18 - 2023-03-10 22:18 - 000007628 _____ C:\Users\nikla\AppData\Local\Resmon.ResmonCfg 2023-03-10 22:01 - 2023-03-10 22:01 - 000000000 ____D C:\WINDOWS\system32\Tasks\Remediation 2023-03-10 21:28 - 2023-03-10 21:28 - 000003884 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn 2023-03-10 21:28 - 2023-03-10 21:28 - 000003442 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime 2023-03-10 16:04 - 2023-03-10 16:04 - 000001378 _____ C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk 2023-03-10 16:04 - 2023-03-10 16:04 - 000000000 ____D C:\Users\nikla\AppData\Local\ESET 2023-03-10 13:33 - 2023-03-10 13:33 - 000000746 _____ C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SALOME-9.10.0.lnk 2023-03-10 13:33 - 2023-03-10 13:33 - 000000178 _____ C:\Users\nikla\AppData\Roaming\.omniORB_DESKTOP-***GFFN_12332.cfg 2023-03-10 13:01 - 2023-03-10 13:01 - 000000000 ____D C:\Users\nikla\AppData\Local\MathWorks 2023-03-09 12:29 - 2023-03-09 12:29 - 000000000 ____D C:\Users\nikla\AppData\Local\Norton 2023-03-08 16:31 - 2023-03-08 16:31 - 000000000 ____D C:\Users\nikla\AppData\Local\NPE 2023-03-08 15:41 - 2023-03-08 15:41 - 000001083 _____ C:\Users\Public\Desktop\calibre - E-book management.lnk 2023-03-08 15:41 - 2023-03-08 15:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Git 2023-03-08 15:40 - 2023-03-08 15:40 - 000000946 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.10.34.lnk 2023-03-08 15:36 - 2023-03-08 15:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zoom 2023-03-08 15:36 - 2023-03-08 15:36 - 000000000 ____D C:\Program Files (x86)\Zoom 2023-03-08 15:35 - 2023-03-08 15:35 - 000001076 _____ C:\Users\Public\Desktop\Audacity.lnk 2023-03-08 15:35 - 2023-03-08 15:35 - 000000680 _____ C:\Users\Public\Desktop\PDFCreator.lnk 2023-03-08 15:35 - 2023-03-08 15:35 - 000000000 ____D C:\Users\nikla\AppData\Local\pdfforge 2023-03-08 15:35 - 2023-03-08 15:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator 2023-03-08 15:35 - 2023-03-08 15:35 - 000000000 ____D C:\Program Files\PDFCreator 2023-03-08 13:18 - 2023-03-08 13:18 - 000000000 ____D C:\Program Files\Common Files\AV 2023-03-08 12:30 - 2023-03-10 19:18 - 000000000 ____D C:\WINDOWS\system32\Tasks\Norton AntiVirus Plus 2023-03-08 12:28 - 2023-03-08 12:28 - 000003376 _____ C:\WINDOWS\system32\Tasks\Norton WSC Integration 2023-03-08 12:28 - 2023-03-08 12:28 - 000002297 _____ C:\Users\Public\Desktop\Norton Security.lnk 2023-03-08 12:28 - 2023-03-08 12:28 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security 2023-03-08 12:28 - 2023-03-08 12:28 - 000000000 ____D C:\WINDOWS\system32\Drivers\NGCx64 2023-03-08 12:28 - 2023-03-08 12:28 - 000000000 ____D C:\Program Files\Norton Security 2023-03-08 12:28 - 2023-03-08 12:28 - 000000000 ____D C:\Program Files\Common Files\Symantec Shared 2023-03-08 12:26 - 2023-03-08 12:26 - 000000000 ____D C:\ProgramData\NortonInstaller 2023-03-08 12:26 - 2023-03-08 12:26 - 000000000 ____D C:\Program Files (x86)\NortonInstaller 2023-03-08 12:23 - 2023-03-09 12:29 - 000000000 ____D C:\ProgramData\Norton 2023-03-08 12:23 - 2023-03-08 12:23 - 000000000 ____D C:\Users\Public\Downloads\Norton 2023-03-08 01:19 - 2023-03-08 01:23 - 000000000 ____D C:\Users\nikla\AppData\LocalLow\IGDump 2023-03-08 01:18 - 2023-03-08 01:18 - 000000000 ____D C:\Users\nikla\AppData\Local\mbam 2023-03-07 22:49 - 2023-03-07 22:49 - 000002399 _____ C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Signal.lnk 2023-03-07 22:49 - 2023-03-07 22:49 - 000000000 ____D C:\Users\nikla\AppData\Local\signal-desktop-updater 2023-03-07 11:24 - 2023-03-07 11:24 - 000000000 ____D C:\Users\nikla\AppData\Local\Siemens 2023-03-07 10:54 - 2023-03-07 10:54 - 000000000 ____D C:\Users\nikla\.thumbnails 2023-03-06 22:56 - 2023-03-06 22:56 - 000000000 ___HD C:\$WinREAgent 2023-03-06 22:44 - 2023-03-07 21:01 - 000000000 ____D C:\Users\nikla\AppData\Local\Adobe 2023-03-06 22:27 - 2023-03-07 10:57 - 000000000 ____D C:\Users\nikla\AppData\Local\cache 2023-03-06 22:22 - 2023-03-06 22:22 - 000000000 ____D C:\Users\nikla\AppData\Local\VirtualStore 2023-03-06 22:22 - 2023-03-06 22:22 - 000000000 ____D C:\Users\nikla\AppData\Local\Sentry 2023-03-06 22:22 - 2023-03-06 22:22 - 000000000 ____D C:\Users\nikla\AppData\Local\PeerDistRepub 2023-03-06 22:22 - 2023-03-06 22:22 - 000000000 ____D C:\Users\nikla\AppData\Local\ATI 2023-03-06 21:29 - 2023-03-06 21:29 - 000684984 _____ (Mozilla Foundation) C:\Users\nikla\AppData\LocalLow\freebl3.dll 2023-03-06 21:29 - 2023-03-06 21:29 - 000627128 _____ (Mozilla Foundation) C:\Users\nikla\AppData\LocalLow\mozglue.dll 2023-03-06 21:29 - 2023-03-06 21:29 - 000254392 _____ (Mozilla Foundation) C:\Users\nikla\AppData\LocalLow\softokn3.dll 2023-03-06 21:19 - 2023-03-06 21:19 - 000000000 ____D C:\Users\nikla\AppData\Local\Leawo Blu-ray Ripper 2023-03-06 21:06 - 2023-03-06 21:11 - 000000000 ____D C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VidCoder 2023-03-06 21:06 - 2023-03-06 21:11 - 000000000 ____D C:\Users\nikla\AppData\Local\VidCoder.Stable 2023-03-06 21:06 - 2023-03-06 21:10 - 000000000 ____D C:\Users\nikla\AppData\Roaming\VidCoder 2023-03-06 21:06 - 2023-03-06 21:06 - 000000000 ____D C:\Users\nikla\AppData\Local\ToastNotificationManagerCompat 2023-03-06 21:06 - 2023-03-06 21:06 - 000000000 ____D C:\Users\nikla\AppData\Local\IsolatedStorage 2023-03-06 21:06 - 2023-03-06 21:06 - 000000000 ____D C:\Program Files\dotnet 2023-03-06 21:05 - 2023-03-06 21:06 - 000000000 ____D C:\Users\nikla\AppData\Local\SquirrelClowdTemp 2023-03-06 21:03 - 2023-03-06 21:03 - 000000000 ___HD C:\ProgramData\vid 2023-03-06 21:03 - 2023-03-06 21:03 - 000000000 ___HD C:\ProgramData\tks 2023-03-06 21:01 - 2023-03-06 21:01 - 000000000 ____D C:\Users\nikla\AppData\Local\Blu-ray Master 2023-03-06 20:52 - 2023-03-06 20:52 - 000000000 ____D C:\Users\nikla\AppData\Local\Swiss Academic Software 2023-03-06 18:36 - 2023-03-06 18:36 - 000000000 ____D C:\Users\nikla\AppData\Local\Edraw 2023-03-06 18:36 - 2023-03-06 18:36 - 000000000 ____D C:\Users\nikla\AppData\Local\CEF 2023-03-06 18:32 - 2023-03-06 18:32 - 000000000 ____D C:\Users\nikla\AppData\Local\MicrosoftEdge 2023-03-05 14:23 - 2023-03-09 15:44 - 000000000 ____D C:\Users\nikla\AppData\Roaming\gtk-2.0 2023-03-05 14:18 - 2023-03-05 14:18 - 000001659 _____ C:\Users\Public\Desktop\Z88Aurora V5.lnk 2023-03-05 14:18 - 2023-03-05 14:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Z88Aurora V5 2023-03-05 14:16 - 2023-03-05 14:16 - 000001651 _____ C:\Users\Public\Desktop\Z88ArionV3.lnk 2023-03-05 14:16 - 2023-03-05 14:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Z88ArionV3 2023-03-05 13:53 - 2023-03-05 13:53 - 000000000 ____D C:\Users\nikla\flasheur 2023-03-05 13:34 - 2023-03-05 13:34 - 000000233 _____ C:\Users\nikla\AppData\Roaming\.omniORB_***_DESKTOP-***GFFN_2813.cfg 2023-03-05 13:28 - 2023-03-05 13:28 - 000000233 _____ C:\Users\nikla\AppData\Roaming\.omniORB_***_DESKTOP-***GFFN_2812.cfg 2023-03-04 19:48 - 2023-03-04 19:48 - 000000000 ____D C:\Users\nikla\.config 2023-03-04 19:45 - 2023-03-04 19:45 - 000000000 ____D C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Code_Aster v2021 2023-03-04 19:39 - 2023-03-10 19:27 - 000000233 _____ C:\Users\nikla\AppData\Roaming\.omniORB_***_last.cfg 2023-03-04 19:39 - 2023-03-05 14:09 - 000000104 _____ C:\Users\nikla\AppData\Roaming\.salome_PortManager.cfg 2023-03-04 19:39 - 2023-03-04 19:39 - 000000233 _____ C:\Users\nikla\AppData\Roaming\.omniORB_***_DESKTOP-***GFFN_2810.cfg 2023-02-28 12:11 - 2023-03-11 00:35 - 000000000 ____D C:\Users\nikla\AppData\Roaming\GoContactSyncMOD 2023-02-28 12:11 - 2023-02-28 12:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GO Contact Sync Mod 2023-02-28 12:11 - 2023-02-28 12:11 - 000000000 ____D C:\Program Files (x86)\GO Contact Sync Mod 2023-02-25 13:26 - 2023-02-25 13:26 - 000050715 _____ C:\Users\nikla\AppData\Roaming\Durch Trennzeichen getrennte Werte.ADR 2023-02-22 12:29 - 2023-02-22 12:29 - 000000000 ____D C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LinuxLive USB Creator 2023-02-22 12:29 - 2023-02-22 12:29 - 000000000 ____D C:\Program Files (x86)\LinuxLive USB Creator 2023-02-21 15:14 - 2023-02-21 15:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco 2023-02-21 15:14 - 2023-02-21 15:14 - 000000000 ____D C:\Program Files (x86)\Cisco 2023-02-16 19:08 - 2023-02-16 19:24 - 000002364 _____ C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk 2023-02-16 17:24 - 2023-03-09 17:04 - 000000000 ____D C:\Program Files\Microsoft OneDrive 2023-02-16 17:22 - 2023-03-09 10:44 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task 2023-02-16 17:22 - 2023-03-09 10:44 - 000002148 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2023-02-16 17:22 - 2023-02-16 17:22 - 000000000 ___RD C:\Users\Default\OneDrive 2023-02-16 17:22 - 2023-02-16 17:22 - 000000000 ____D C:\Program Files (x86)\Teams Installer 2023-02-16 17:21 - 2023-02-16 17:21 - 000000000 ____D C:\Program Files\Common Files\DESIGNER 2023-02-16 17:19 - 2023-02-16 19:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools 2023-02-16 17:19 - 2023-02-16 17:19 - 000002541 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk 2023-02-16 17:19 - 2023-02-16 17:19 - 000002537 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk 2023-02-16 17:19 - 2023-02-16 17:19 - 000002516 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk 2023-02-16 17:19 - 2023-02-16 17:19 - 000002494 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk 2023-02-16 17:19 - 2023-02-16 17:19 - 000002491 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk 2023-02-16 17:19 - 2023-02-16 17:19 - 000002458 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk 2023-02-16 17:19 - 2023-02-16 17:19 - 000002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk 2023-02-16 17:19 - 2023-02-16 17:19 - 000002427 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk 2023-02-16 17:12 - 2023-02-16 17:12 - 000000000 ____D C:\Program Files\Microsoft Office 15 2023-02-15 20:57 - 2023-02-15 20:57 - 000001104 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AusweisApp2.lnk 2023-02-15 20:57 - 2023-02-15 20:57 - 000001092 _____ C:\Users\Public\Desktop\AusweisApp2.lnk 2023-02-15 20:57 - 2023-02-15 20:57 - 000000000 ____D C:\Users\nikla\AppData\Local\Governikus GmbH & Co. KG 2023-02-15 20:57 - 2023-02-15 20:57 - 000000000 ____D C:\Program Files\AusweisApp2 2023-02-12 16:50 - 2023-02-12 16:50 - 000000000 ____D C:\ProgramData\mwboost_interprocess 2023-02-12 16:44 - 2023-02-12 16:44 - 000003856 _____ C:\WINDOWS\system32\Tasks\MATLAB R2022b Startup Accelerator 2023-02-12 16:44 - 2023-02-12 16:44 - 000001029 _____ C:\Users\Public\Desktop\MATLAB R2022b.lnk 2023-02-12 16:44 - 2023-02-12 16:44 - 000000586 _____ C:\WINDOWS\Tasks\MATLAB R2022b Startup Accelerator.job 2023-02-12 16:44 - 2023-02-12 16:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MATLAB R2022b 2023-02-10 19:07 - 2023-02-10 19:07 - 000000787 _____ C:\Users\Public\Desktop\Inkscape.lnk 2023-02-10 19:07 - 2023-02-10 19:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inkscape ==================== Ein Monat (geänderte) ================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2023-03-11 11:19 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2023-03-11 11:09 - 2020-09-15 11:36 - 000004170 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{9F977908-B9F0-4B85-955B-C6FD9A658823} 2023-03-11 11:08 - 2017-11-17 16:06 - 000000000 ____D C:\Program Files (x86)\Google 2023-03-11 11:06 - 2017-11-17 15:43 - 000000000 ___RD C:\Users\nikla\OneDrive 2023-03-11 11:05 - 2023-01-25 06:54 - 000003152 _____ C:\WINDOWS\system32\Tasks\AMDInstallLauncher 2023-03-11 11:05 - 2023-01-25 06:54 - 000003138 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate 2023-03-11 11:05 - 2017-11-17 19:29 - 000000000 ____D C:\Users\nikla\AppData\Roaming\WTablet 2023-03-10 20:15 - 2020-09-15 11:30 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2023-03-10 19:17 - 2018-07-19 15:58 - 000000000 ____D C:\Program Files (x86)\CorsairLink4 2023-03-10 17:35 - 2022-10-31 11:46 - 000000000 ____D C:\Program Files\ASUS 2023-03-10 13:01 - 2021-10-22 18:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MATLAB R2021b 2023-03-09 17:11 - 2020-09-15 11:32 - 001722792 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2023-03-09 17:11 - 2019-12-07 15:51 - 000743714 _____ C:\WINDOWS\system32\perfh007.dat 2023-03-09 17:11 - 2019-12-07 15:51 - 000150136 _____ C:\WINDOWS\system32\perfc007.dat 2023-03-09 17:11 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF 2023-03-09 17:04 - 2020-09-15 11:36 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2023-03-09 17:04 - 2020-09-15 11:30 - 000008192 ___SH C:\DumpStack.log.tmp 2023-03-09 17:04 - 2017-12-09 15:14 - 000000000 ____D C:\Program Files (x86)\TeamViewer 2023-03-09 17:03 - 2019-12-07 10:03 - 001310720 _____ C:\WINDOWS\system32\config\BBI 2023-03-09 17:03 - 2017-11-17 15:37 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin 2023-03-09 16:57 - 2017-11-17 16:02 - 000000000 ____D C:\Program Files (x86)\ASUS 2023-03-09 15:10 - 2018-06-02 20:59 - 000000000 ____D C:\Users\nikla\AppData\Local\D3DSCache 2023-03-09 13:41 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness 2023-03-08 22:57 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps 2023-03-08 16:07 - 2020-05-07 20:07 - 000000000 ____D C:\Users\nikla\AppData\Roaming\Zoom 2023-03-08 15:53 - 2019-12-07 10:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM 2023-03-08 15:43 - 2022-10-13 15:40 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader.lnk 2023-03-08 15:43 - 2022-10-13 15:40 - 000002124 _____ C:\Users\Public\Desktop\Acrobat Reader.lnk 2023-03-08 15:43 - 2020-09-15 11:36 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task 2023-03-08 15:42 - 2019-02-23 12:45 - 000002293 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2023-03-08 15:41 - 2020-07-31 14:12 - 000000000 ____D C:\Program Files\Git 2023-03-08 15:41 - 2018-06-26 17:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management 2023-03-08 15:41 - 2018-06-26 17:55 - 000000000 ____D C:\Program Files (x86)\Calibre2 2023-03-08 15:37 - 2018-09-09 09:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2023-03-08 15:37 - 2018-09-09 09:30 - 000000000 ____D C:\Program Files\7-Zip 2023-03-08 15:37 - 2018-07-19 17:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit 2023-03-08 15:37 - 2018-07-19 17:06 - 000000000 ____D C:\Program Files\Java 2023-03-08 15:37 - 2017-11-21 23:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2023-03-08 15:36 - 2017-11-21 23:22 - 000000000 ____D C:\Program Files (x86)\Java 2023-03-08 15:35 - 2018-09-15 16:41 - 000001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk 2023-03-08 15:35 - 2018-09-15 16:41 - 000000000 ____D C:\Program Files (x86)\Audacity 2023-03-08 15:35 - 2018-01-26 15:16 - 000181248 _____ (pdfforge GmbH) C:\WINDOWS\system32\pdfcmon.dll 2023-03-08 12:37 - 2020-05-10 18:14 - 000000000 ____D C:\Users\nikla\AppData\Local\WebEx 2023-03-08 12:28 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2023-03-08 12:17 - 2017-11-17 16:06 - 000000000 ____D C:\Users\nikla\AppData\Local\Google 2023-03-08 01:45 - 2021-09-30 09:58 - 000000000 ____D C:\Users\nikla\AppData\Roaming\Signal 2023-03-07 10:54 - 2020-09-15 00:00 - 000000000 ____D C:\Users\nikla 2023-03-07 00:39 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection 2023-03-07 00:39 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2023-03-07 00:39 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources 2023-03-07 00:39 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe 2023-03-07 00:39 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions 2023-03-07 00:39 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr 2023-03-06 23:05 - 2018-02-27 16:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Leawo 2023-03-06 23:01 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp 2023-03-06 22:21 - 2017-11-17 15:42 - 000000000 ____D C:\Users\nikla\AppData\Local\ConnectedDevicesPlatform 2023-03-06 21:50 - 2017-11-18 12:16 - 000000000 ____D C:\WINDOWS\system32\MRT 2023-03-06 21:19 - 2018-02-13 14:43 - 000000000 ____D C:\Users\nikla\AppData\Roaming\Leawo 2023-03-06 21:19 - 2018-02-13 14:43 - 000000000 ____D C:\ProgramData\Leawo 2023-03-06 21:06 - 2017-11-17 16:39 - 000000000 ____D C:\ProgramData\Package Cache 2023-03-06 21:03 - 2018-02-13 15:10 - 000000000 ____D C:\Users\nikla\AppData\Roaming\vlc 2023-03-06 18:24 - 2020-03-20 21:47 - 000000000 ____D C:\Users\nikla\AppData\Local\Overwolf 2023-03-06 18:06 - 2017-11-17 15:42 - 000000000 ____D C:\Users\nikla\AppData\Local\Packages 2023-03-06 18:00 - 2017-11-17 18:40 - 000000000 ____D C:\Users\nikla\AppData\Local\3Dconnexion 2023-03-06 16:53 - 2019-01-27 13:33 - 000000000 ____D C:\Users\nikla\AppData\Roaming\obs-studio 2023-03-06 16:49 - 2019-12-07 15:52 - 000000000 ____D C:\WINDOWS\system32\FxsTmp 2023-03-05 22:23 - 2022-06-19 19:04 - 000000000 ____D C:\Users\nikla\.mediathek3 2023-03-05 22:00 - 2022-01-28 13:32 - 000000000 ____D C:\Users\nikla\AppData\Local\JM01 2023-03-04 19:59 - 2023-01-17 15:58 - 000002274 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk 2023-03-04 19:59 - 2020-09-07 09:44 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2023-03-04 19:48 - 2017-11-26 10:36 - 000000000 ____D C:\Users\nikla\AppData\Local\CrashDumps 2023-03-04 11:11 - 2022-01-18 21:34 - 000000000 ____D C:\ProgramData\Swiss Academic Software 2023-03-04 11:11 - 2022-01-18 21:32 - 000002108 _____ C:\Users\Public\Desktop\Citavi 6.lnk 2023-03-04 11:11 - 2022-01-18 21:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citavi 6 2023-03-04 11:10 - 2022-01-18 21:32 - 000000000 ____D C:\Users\nikla\AppData\Local\Downloaded Installations 2023-03-02 16:47 - 2022-10-31 11:41 - 000000000 ____D C:\ProgramData\ASUS 2023-03-02 10:33 - 2021-12-11 11:41 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-341515215-1173906820-3305953664-1001 2023-03-01 07:48 - 2021-12-10 19:36 - 000000675 _____ C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Studienarbeit Lenker.lnk 2023-02-28 23:09 - 2017-11-17 16:39 - 000000000 ____D C:\ProgramData\CLink4 2023-02-28 22:52 - 2020-09-15 11:36 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2023-02-28 22:52 - 2020-09-15 11:36 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2023-02-28 12:10 - 2022-06-21 09:11 - 000000000 ____D C:\Program Files (x86)\GContactSync 2023-02-28 12:07 - 2017-11-17 15:43 - 000000000 ____D C:\Users\nikla\AppData\Local\Comms 2023-02-24 19:31 - 2022-04-05 11:52 - 000000000 ____D C:\Users\nikla\AppData\Roaming\inkscape 2023-02-24 19:30 - 2022-04-05 11:52 - 000000000 ____D C:\Users\nikla\.dbus-keyrings 2023-02-22 13:32 - 2017-11-18 13:17 - 000000000 ____D C:\ProgramData\CanonIJPLM 2023-02-21 15:14 - 2017-11-17 17:58 - 000000000 ____D C:\Users\nikla\AppData\Local\Cisco 2023-02-18 10:30 - 2017-11-17 22:16 - 000000000 ____D C:\Program Files\Microsoft Office 2023-02-16 19:08 - 2018-09-06 18:28 - 000000000 ____D C:\Users\nikla\AppData\Local\SquirrelTemp 2023-02-16 19:08 - 2017-11-17 15:42 - 000000000 __RHD C:\Users\Public\AccountPictures 2023-02-16 19:06 - 2020-09-15 11:30 - 001898568 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2023-02-16 19:05 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe 2023-02-16 19:05 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup 2023-02-16 19:05 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\DDFs 2023-02-16 19:04 - 2020-09-15 11:32 - 003015680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2023-02-16 18:58 - 2017-11-18 12:16 - 149955784 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2023-02-16 17:19 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2023-02-16 17:10 - 2018-01-13 12:15 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2023-02-15 14:20 - 2018-03-02 21:54 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2023-02-15 11:59 - 2017-12-09 15:15 - 000000000 ____D C:\Users\nikla\AppData\Local\TeamViewer 2023-02-13 19:09 - 2017-11-17 16:16 - 000000000 ____D C:\Users\nikla\AppData\Local\PlaceholderTileLogoFolder 2023-02-12 16:54 - 2018-11-19 19:15 - 000000000 ____D C:\ProgramData\MDESIGN 2023-02-12 16:44 - 2021-10-22 18:34 - 000000000 ____D C:\ProgramData\MathWorks ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======== 2023-03-10 13:33 - 2023-03-10 13:33 - 000000178 _____ () C:\Users\nikla\AppData\Roaming\.omniORB_DESKTOP-***GFFN_12332.cfg 2023-03-04 19:39 - 2023-03-04 19:39 - 000000233 _____ () C:\Users\nikla\AppData\Roaming\.omniORB_***_DESKTOP-***GFFN_2810.cfg 2023-03-05 13:28 - 2023-03-05 13:28 - 000000233 _____ () C:\Users\nikla\AppData\Roaming\.omniORB_***_DESKTOP-***GFFN_2812.cfg 2023-03-05 13:34 - 2023-03-05 13:34 - 000000233 _____ () C:\Users\nikla\AppData\Roaming\.omniORB_***_DESKTOP-***GFFN_2813.cfg 2023-03-04 19:39 - 2023-03-10 19:27 - 000000233 _____ () C:\Users\nikla\AppData\Roaming\.omniORB_***_last.cfg 2023-03-04 19:39 - 2023-03-05 14:09 - 000000104 _____ () C:\Users\nikla\AppData\Roaming\.salome_PortManager.cfg 2023-02-25 13:26 - 2023-02-25 13:26 - 000050715 _____ () C:\Users\nikla\AppData\Roaming\Durch Trennzeichen getrennte Werte.ADR 2022-03-27 16:59 - 2022-03-27 16:59 - 000012227 _____ () C:\Users\nikla\AppData\Roaming\Durch Trennzeichen getrennte Werte.CAL 2021-12-02 19:53 - 2022-12-16 18:36 - 000000016 _____ () C:\Users\nikla\AppData\Roaming\obs-virtualcam.txt 2023-03-10 22:18 - 2023-03-10 22:18 - 000007628 _____ () C:\Users\nikla\AppData\Local\Resmon.ResmonCfg ==================== SigCheck ============================ (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) ==================== Ende von FRST.txt ======================== |
11.03.2023, 12:27 | #2 |
| Windows 10: Passwort-Trojaner wirklich weg? additional:
__________________Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 05-03-2023 durchgeführt von *** (11-03-2023 11:23:26) Gestartet von D:\Downloads Microsoft Windows 10 Pro Version 22H2 19045.2673 (X64) (2020-09-15 10:36:46) Start-Modus: Normal ========================================================== ==================== Konten: ============================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) Administrator (S-1-5-21-341515215-1173906820-3305953664-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-341515215-1173906820-3305953664-503 - Limited - Disabled) Gast (S-1-5-21-341515215-1173906820-3305953664-501 - Limited - Disabled) *** (S-1-5-21-341515215-1173906820-3305953664-1001 - Administrator - Enabled) => C:\Users\nikla WDAGUtilityAccount (S-1-5-21-341515215-1173906820-3305953664-504 - Limited - Disabled) ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Norton AntiVirus (Enabled - Up to date) {AECE2126-F4E7-6909-11F2-1B69D1FBCBD0} AS: Sophos Home (Enabled - Up to date) {44CC060E-FAA8-498C-EC02-591EA8C240B2} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Norton AntiVirus (Enabled) {96F5A003-BE88-6851-3AAD-B25C2F288CAB} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) 3Dconnexion 3DxSoftware (HKLM\...\{33ED10BD-9487-42AD-B7BD-FF59720BFE8F}) (Version: 10.7.0.3248 - 3Dconnexion) Hidden 3Dconnexion 3DxWare 10 (HKLM-x32\...\{744090d6-c3c2-4e89-be00-cf032cd91b5b}) (Version: 10.7.0.3248 - 3Dconnexion) 3Dconnexion 3DxWinCore (HKLM\...\{B3DD0E90-39FD-469E-A89B-C86E54B210BA}) (Version: 17.7.0.17687 - 3Dconnexion) Hidden 3Dconnexion Add-In for AutoCAD (HKLM\...\{21104677-38A6-4A6E-989C-DB4DA9D3D708}) (Version: 5.7.0.17123 - 3Dconnexion) Hidden 3Dconnexion Add-In for Autodesk Inventor (HKLM\...\{B77BF74F-D283-4B17-A348-1F2328727862}) (Version: 2.3.1.17247 - 3Dconnexion) Hidden 3Dconnexion Add-In for Microsoft Office (HKLM\...\{B7BCB90E-000F-481D-9316-5BC1DF4A2D49}) (Version: 1.0.2.16923 - 3Dconnexion) Hidden 3Dconnexion Add-In for Solid Edge (HKLM\...\{5A69C62A-B2C9-4FDF-87DA-3C4F3B58EFF4}) (Version: 3.6.3 - 3Dconnexion) Hidden 3Dconnexion Add-In for SOLIDWORKS (HKLM\...\{EC33F73B-2982-4C1F-8D7E-A3B18E91352E}) (Version: 3.5.7.17581 - 3Dconnexion) Hidden 3Dconnexion Assembly Demo (HKLM-x32\...\{6AC5E623-5E87-426A-8E6A-353D5DB1D250}) (Version: 0.9.8.0 - 3Dconnexion) Hidden 3Dconnexion Collage (HKLM-x32\...\{F2B60FA6-7872-4FF9-A8C9-97C79B8ED7A0}) (Version: 1.3.2.745 - 3Dconnexion) Hidden 3Dconnexion Extension for SketchUp (HKLM\...\{1F597AA0-762A-4FB4-9DD2-E869FD00B4D6}) (Version: 5.1.1.17222 - 3Dconnexion) Hidden 3Dconnexion LCD Applets for SpacePilot Pro (HKLM\...\{E937DA80-FBD4-4AF9-8080-86CFDCAC9C68}) (Version: 1.5.1 - 3Dconnexion) Hidden 3Dconnexion Navigation Library Server (HKLM-x32\...\{BB9B3F9C-6028-4EBB-88DD-5881D94D7355}) (Version: 1.4.0.17559 - 3Dconnexion) Hidden 3Dconnexion Plug-In for 3ds Max 2014 - 2021 (HKLM\...\{4227B60E-7524-48A0-B445-0E68F86CB766}) (Version: 7.0.5.17655 - 3Dconnexion) Hidden 3Dconnexion Plug-in for Acrobat 3D (HKLM-x32\...\{92EBA652-2941-4D20-8CD8-EC6A0019F7FD}) (Version: 1.4.2 - 3Dconnexion) Hidden 3Dconnexion Plug-In for Creo 2.0 - Creo 7.0 (HKLM\...\{19FBDDC6-A98C-4E6D-9FD6-375192944C03}) (Version: 2.4.3 - 3Dconnexion) Hidden 3Dconnexion Plug-In for Maya 2014 - 2020 (HKLM\...\{84C489F0-C143-4BFD-9D6B-C8FF29F09F9E}) (Version: 6.0.5.17211 - 3Dconnexion) Hidden 3Dconnexion Plug-In for NX 8.0 - 1926 Series (HKLM\...\{E8CF56C0-5E8C-4177-AC7D-07F388133810}) (Version: 3.4.17.17618 - 3Dconnexion) Hidden 3Dconnexion Plug-In for Photoshop (HKLM\...\{2FC9AC41-9A65-44F7-8EA2-BD3A818AFF46}) (Version: 2.9.4.17509 - 3Dconnexion) Hidden 3Dconnexion Trainer (HKLM-x32\...\{5158E770-0862-478B-ADC3-E22B33061A86}) (Version: 3.2.7.17569 - 3Dconnexion) Hidden 3Dconnexion Viewer (HKLM\...\{538BA876-44A3-48B3-BE6C-B2439B824ECC}) (Version: 1.0.0.40 - 3Dconnexion) Hidden 3DEXPERIENCE Marketplace for SOLIDWORKS (HKLM\...\{0060450C-5B44-424B-BD42-559F2A5D820A}) (Version: 6.30.125 - Dassault Systemes SolidWorks Corp) 7-Zip 22.01 (x64 edition) (HKLM\...\{23170F69-40C1-2702-2201-000001000000}) (Version: 22.01.00.0 - Igor Pavlov) Adobe Acrobat Reader - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 23.001.20064 - Adobe Systems Incorporated) Adobe Connect (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Adobe Connect App) (Version: 2020.1.5.32 - Adobe Systems Inc.) Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601042}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden Akamai NetSession Interface (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Akamai) (Version: - Akamai Technologies, Inc) Amazon Kindle (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Amazon Kindle) (Version: 1.26.0.55076 - Amazon) AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 20.Q3 - Advanced Micro Devices, Inc.) ARMOURY CRATE Lite Service (HKLM\...\{EF3944FF-2501-4568-B15C-5701E726719E}) (Version: 5.3.3 - ASUS) ASUS AIOFan HAL (HKLM\...\{EAE80DED-1A39-41C5-9F60-87CC947F6454}) (Version: 1.1.40.0 - ASUSTek COMPUTER INC.) Hidden ASUS AIOFan HAL (HKLM-x32\...\{10f6ee35-55c3-46eb-91a6-816ce9af34c7}) (Version: 1.1.40.0 - ASUSTek COMPUTER INC.) Hidden ASUS AURA Display Component (HKLM\...\{AFD1CF98-FE97-434C-A095-9F27C5BEA53C}) (Version: 1.1.29.0 - ASUSTek COMPUTER INC. ) Hidden ASUS AURA Display Component (HKLM-x32\...\{c5669622-d369-4e19-ae7b-d6b33d469f2d}) (Version: 1.1.29.0 - ASUSTek COMPUTER INC. ) Hidden ASUS AURA Extension Card HAL (HKLM\...\{237E1CAC-1708-4940-AC34-DF15C079AB70}) (Version: 1.1.0.20 - ASUSTeK COMPUTER INC.) Hidden ASUS AURA Extension Card HAL (HKLM-x32\...\{49c4358d-054e-4cf1-9ec1-dca3487f304a}) (Version: 1.1.0.20 - ASUSTeK COMPUTER INC.) Hidden ASUS AURA Headset Component (HKLM\...\{A3C4120D-8096-4307-91A2-FFE37EBD5A3D}) (Version: 1.3.21.0 - ASUSTek COMPUTER INC.) Hidden ASUS AURA Headset Component (HKLM-x32\...\{d9f0b2e5-d90e-4a4e-b48b-71ec72276b78}) (Version: 1.3.21.0 - ASUSTek COMPUTER INC.) Hidden ASUS AURA Motherboard HAL (HKLM\...\{4EBEAC95-76BC-46A8-8644-6E2F1C87CF70}) (Version: 1.2.8.0 - ASUSTeK COMPUTER INC.) Hidden ASUS AURA Motherboard HAL (HKLM-x32\...\{c289ca16-807e-4373-92c3-29ef5dc2119a}) (Version: 1.2.8.0 - ASUSTeK COMPUTER INC.) Hidden ASUS AURA Odd Component (HKLM\...\{B5E322FB-C191-463E-BDDD-4F22290EDFDB}) (Version: 1.0.9.0 - ASUSTeK COMPUTER INC.) Hidden ASUS AURA Odd Component (HKLM-x32\...\{1eb761c4-2177-4d27-9299-5befbbd97df1}) (Version: 1.0.9.0 - ASUSTeK COMPUTER INC.) Hidden ASUS Aura SDK (HKLM\...\{CF8E6E00-9C03-4440-81C0-21FACB921A6B}) (Version: 3.04.11 - ASUSTek COMPUTER INC.) Hidden ASUS AURA VGA Component (HKLM\...\{71BB96A6-EAC4-45AE-A17D-D3ED43FF1D14}) (Version: 0.0.4.6 - ASUSTek COMPUTER INC. ) Hidden ASUS AURA VGA Component (HKLM-x32\...\{412001c7-7535-4454-9531-ea12ec686ba9}) (Version: 0.0.4.6 - ASUSTek COMPUTER INC. ) Hidden ASUS Framework Service (HKLM-x32\...\{339A6383-7862-46DA-8A9D-E84180EF9424}) (Version: 3.1.1.0 - ASUSTeK Computer Inc.) ASUS Keyboard HAL (HKLM\...\{0FA0CDEE-5DC8-421E-A97D-C74FA6E66FC3}) (Version: 1.1.45.0 - ASUSTek COMPUTER INC.) Hidden ASUS Keyboard HAL (HKLM-x32\...\{06ae42a2-6f44-4afa-89a1-4dcc67486773}) (Version: 1.1.45.0 - ASUSTek COMPUTER INC.) Hidden ASUS MB Peripheral Products (HKLM\...\{BFED9861-7D96-4528-89F1-B090ABBF11A7}) (Version: 1.0.35 - ASUSTeK Computer Inc.) Hidden ASUS MB Peripheral Products (HKLM-x32\...\{193a2068-8738-4276-ab1b-9133f9403487}) (Version: 1.0.35 - ASUSTeK Computer Inc.) Hidden ASUS Mouse HAL (HKLM\...\{B8F984F2-7887-4DD2-8D96-F9A4BC5A4AC5}) (Version: 1.1.0.42 - ASUSTek COMPUTER INC.) Hidden ASUS Mouse HAL (HKLM-x32\...\{9b707cef-7f70-4fe9-bd9c-363110a6f538}) (Version: 1.1.0.42 - ASUSTek COMPUTER INC.) Hidden ASUS MousePad HAL (HKLM\...\{723B40A4-5BF2-4DC6-834A-2ADF75F3CF7E}) (Version: 1.0.2.5 - ASUSTek COMPUTER INC.) Hidden ASUS MousePad HAL (HKLM-x32\...\{938b2a3e-f708-467b-bce7-8e6075bbf66d}) (Version: 1.0.2.5 - ASUSTek COMPUTER INC.) Hidden Asus ProductDaemonSetup (HKLM\...\{36606417-B1C4-42C2-B5C1-67972DA63DAB}) (Version: 3.6.2001 - ASUSTeK COMPUTER INC) Hidden Asus Sonic Radar 3 (HKLM-x32\...\{03578a87-5019-45bd-995a-0f27d579a180}) (Version: 3.6.20.45572 - ASUSTeK COMPUTER INC) Asus Sonic Studio 3 (HKLM-x32\...\{31ef8b8e-8686-4b42-a8f9-71206319efdf}) (Version: 3.6.20.45572 - ASUSTeK COMPUTER INC) Asus SonicRadar3Setup (HKLM\...\{E71A86BF-6EA5-42D2-A735-F41C603FB180}) (Version: 3.6.20.45572 - ASUSTeK COMPUTER INC) Hidden Asus SonicStudio3Setup (HKLM\...\{D027E5BB-DDAE-4CD9-A030-B3C0EF5FB602}) (Version: 3.6.20.45572 - ASUSTeK COMPUTER INC) Hidden ASUS Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.107.93 - ASUSTeK Computer Inc.) Hidden Audacity 3.2.5 (HKLM-x32\...\Audacity_is1) (Version: 3.2.5 - Audacity Team) AURA (HKLM-x32\...\{5899CD4F-8764-4303-A0D9-C60A62CFC24F}) (Version: 1.04.17 - ASUSTeK Computer Inc.) AURA DRAM Component (HKLM\...\{9AFE5429-866B-457D-A864-80BCF7672EE8}) (Version: 1.1.07 - ASUS) Hidden AURA DRAM Component (HKLM-x32\...\{5b6f6255-822a-4273-b533-c6273ca7e45e}) (Version: 1.1.07 - ASUS) Hidden AURA Service (HKLM-x32\...\{0E536061-3B55-4D45-BF58-0BDA261C94B0}) (Version: 3.05.40 - ASUSTeK Computer Inc.) Hidden AURA Service (HKLM-x32\...\{a1318319-c95b-48da-beb8-63ed6e4d809a}) (Version: 3.05.40 - ASUSTeK Computer Inc.) AusweisApp2 (HKLM\...\{C76897D9-D067-40B9-AFB7-EEE93286958C}) (Version: 1.26.2 - Governikus GmbH & Co. KG) Autodesk Design Review 2013 (HKLM-x32\...\Autodesk Design Review 2013) (Version: 13.0.0.82 - Autodesk, Inc.) Autodesk Desktop-App (HKLM-x32\...\Autodesk Desktop App) (Version: 7.0.6.378 - Autodesk) Autodesk DWG TrueView 2017 - English (HKLM\...\DWG TrueView 2017 - English) (Version: 21.0.52.0 - Autodesk) Autodesk Fusion 360 (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\73e72ada57b7480280f7a6f4a289729f) (Version: 2.0.12392 - Autodesk, Inc.) Autodesk Inventor Content Center Libraries 2017 (Desktop Content) (HKLM\...\{B46DECD1-2164-4EF1-0000-22D71E81877C}) (Version: 21.0.14200.0000 - Autodesk) Autodesk Material Library Base Resolution Image Library 2017 (HKLM-x32\...\{3FBFBC43-9882-43FA-B979-2D53896747B3}) (Version: 15.11.3.0 - Autodesk) Autodesk Revit Interoperability for Inventor 2017 (HKLM\...\{0BB716E0-1700-0210-0000-097DC2F354DF}) (Version: 17.0.411.0 - Autodesk) Hidden Autodesk Revit Interoperability for Inventor 2017 (HKLM\...\Autodesk Revit Interoperability for Inventor 2017) (Version: 17.0.411.0 - Autodesk) Autodesk Vault Basic 2017 (Client) (HKLM\...\{CF526A26-2264-0000-0000-02E95019B628}) (Version: 22.0.48.0 - Autodesk) Hidden Autodesk Vault Basic 2017 (Client) (HKLM\...\Autodesk Vault Basic 2017 (Client)) (Version: 22.0.48.0 - Autodesk) Autodesk Vault Basic 2017 (Client) German Language Pack (HKLM\...\{266597A9-2264-0000-1031-DCBF2B69166B}) (Version: 22.0.48.0 - Autodesk) Hidden balenaEtcher 1.7.9 (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\d2f3b6c7-6f49-59e2-b8a5-f72e33900c2b) (Version: 1.7.9 - Balena Inc.) Blackmagic RAW Common Components (HKLM\...\{BF73F11D-8A70-438B-A357-38E1F1A62164}) (Version: 2.8 - Blackmagic Design) Blender (HKLM\...\{B1DF3793-1651-4AE5-9CA0-E845DD8B526B}) (Version: 2.79.0 - Blender Foundation) Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) Bridge 2021.0.3 (HKLM\...\{d31b3501-1485-515e-b9cc-ec663e464c2a}) (Version: 2021.0.3 - Quixel) CADClick® Click2CAD Toolbox (HKLM-x32\...\{5492C79F-4AFF-44C8-A5A4-D65F10FF9DDB}) (Version: 2.5.4.0 - KiM GmbH) calibre (HKLM-x32\...\{D3CF17E8-ECE2-4B16-86D3-1C6B2F94BF8C}) (Version: 5.44.0 - Kovid Goyal) Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: 1.5.4.4 - Canon Inc.) Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 5.4.0 - Canon Inc.) Canon iP7200 series On-screen Manual (HKLM-x32\...\Canon iP7200 series On-screen Manual) (Version: 7.5.0 - Canon Inc.) Canon iP7200 series Printer Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP7200_series) (Version: - Canon Inc.) Canon MG5700 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5700_series) (Version: 1.00 - Canon Inc.) ChiTuBox 1.3 (HKLM-x32\...\ChiTuBox 1.3) (Version: - ) Cisco Secure Client - AnyConnect VPN (HKLM-x32\...\Cisco Secure Client - AnyConnect VPN) (Version: 5.0.01242 - Cisco Systems, Inc.) Cisco Secure Client - AnyConnect VPN (HKLM-x32\...\{026EB653-E5BC-42D4-9A3F-C42D89E4B8DE}) (Version: 5.0.01242 - Cisco Systems, Inc.) Hidden Cisco Webex Meetings (HKLM-x32\...\{A9EF0A0A-30E4-3BD3-C572-E83376A796E9}) (Version: 41.2.3.17 - Cisco Webex LLC) Citavi 6 (HKLM-x32\...\{6A331045-8FF4-4BC9-9C56-E593ACAE28C2}) (Version: 6.14.4.0 - Swiss Academic Software) Code_Aster v2021 (HKLM-x32\...\{8183D402-E834-4C08-B8D8-2EDBA7B22518}) (Version: 0.0.2021.0 - Simulease) Corsair LINK 4 (HKLM-x32\...\{40036d0c-634b-4fc0-be89-13343b4bea96}) (Version: 4.9.7.35 - Corsair Components, Inc.) Corsair LINK 4 (HKLM-x32\...\{D97F4B31-5A7D-4A07-AC85-16D64FAB93E1}) (Version: 4.9.7.35 - Corsair Components, Inc.) Hidden Corsair Utility Engine (HKLM-x32\...\{01546DEE-62C6-4881-B97B-99A06A10C4FF}) (Version: 2.19.65 - Corsair) CPUID ROG CPU-Z 1.86 (HKLM\...\CPUID ROG CPU-Z_is1) (Version: 1.86 - CPUID, Inc.) CrystalDiskInfo 8.17.11 (HKLM\...\CrystalDiskInfo_is1) (Version: 8.17.11 - Crystal Dew World) CrystalDiskMark 8.0.4c (HKLM\...\CrystalDiskMark8_is1) (Version: 8.0.4c - Crystal Dew World) Dassault Systemes Software Prerequisites x86-x64 (HKLM\...\{CF1EB598-B424-436A-B15F-B763846BA970}) (Version: 8.1.3 - Dassault Systemes) Dassault Systemes Software VC9 Prerequisites x86-x64 (HKLM\...\{F2F2DEA7-36AB-4E13-907C-D8BDE775EF97}) (Version: 9.1.2 - Dassault Systemes) DaVinci Resolve (HKLM\...\{F3B6228C-4E5C-4ADB-BE3D-0B8684928424}) (Version: 18.1.10007 - Blackmagic Design) DaVinci Resolve Control Panels (HKLM\...\{85AC7A9F-9630-42FD-AA1C-58329AB4B7D3}) (Version: 2.0.5.0 - Blackmagic Design) DELFTship (HKLM\...\{3FA68F61-2E56-46D9-A349-3080CFCE1512}) (Version: 9.30.307 - DELFTship Marine Software) Discord (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Discord) (Version: 0.0.311 - Discord Inc.) DroidCam Client (HKLM-x32\...\DroidCam) (Version: 6.5.2 - DEV47APPS) Eco Materials Adviser for Autodesk Inventor 2017 (64-bit) (HKLM\...\{05D87862-35C9-4CB4-92EC-8A1FC97BFF6C}) (Version: 6.4.9.0 - Granta Design Limited) ENE RGB HAL (HKLM\...\{E050E98C-5524-4AFB-9E53-97700BEF2C02}) (Version: 1.1.39.18 - Ene Tech.) Hidden ENE RGB HAL (HKLM-x32\...\{cf6be873-4fda-41b6-87c1-54f5f726365d}) (Version: 1.1.39.18 - Ene Tech.) Hidden ENE_DRAM_RGB_AIO (HKLM\...\{1745D314-9077-46C9-8562-1C62BAE189B7}) (Version: 1.0.3.37 - Ene Tech.) Hidden ENE_DRAM_RGB_AIO (HKLM-x32\...\{f0dbd606-5cc4-469e-87f1-351c2eb23219}) (Version: 1.0.3.37 - Ene Tech.) Hidden ENE_ESD_ASM_HAL (HKLM\...\{3934CCB9-0204-4763-993F-6189B5F95EDF}) (Version: 1.0.9.5 - ENE TECHNOLOGY INC.) Hidden ENE_ESD_ASM_HAL (HKLM-x32\...\{b877119b-682b-444a-92a5-9ea4a54cfdc3}) (Version: 1.0.9.5 - ENE TECHNOLOGY INC.) Hidden ENE_X-JMI_HAL (HKLM\...\{2B8E611F-0B51-4FAC-87BB-AF50D82E7DDA}) (Version: 1.0.5.1 - ENE Tech) Hidden ENE_X-JMI_HAL (HKLM-x32\...\{50ec3a07-291b-463e-be86-487eb8cbb71c}) (Version: 1.0.5.1 - ENE Tech) Hidden Epic Games Launcher (HKLM-x32\...\{2A27CA16-E158-4B0A-A502-3E6364B1F03E}) (Version: 1.2.17.0 - Epic Games, Inc.) Epic Online Services (HKLM-x32\...\{32C68D93-D32F-4B01-8250-61642BFC22F8}) (Version: 2.0.28.0 - Epic Games, Inc.) E-YOOSO-X11 (HKLM-x32\...\{E3BF2376-C649-4F82-AD70-E3BB38E6F4D4}_is1) (Version: 3.1 - E-YOOSO) FAHClient (HKLM-x32\...\FAHClient) (Version: 7.5.1 - Folding@home.org) FANATEC driver package (HKLM\...\{A59927C9-C18D-4EEE-9EB3-0055D1815052}) (Version: 8.34.6 - Endor AG Fanatec) FARO LS 1.1.505.0 (64bit) (HKLM-x32\...\{8834451B-6209-4E02-9EF4-4EF9E3C1F70F}) (Version: 5.5.0.44203 - FARO Scanner Production) Flight Yoke System (HKLM\...\{A7ED1C9E-7EDC-40DF-A086-6B7A183801EC}) (Version: 8.0.150.0 - Logitech) FlightGear v2018.2.2 (HKLM\...\FlightGear_is1) (Version: - The FlightGear Team) FormIt 360 (HKLM\...\{D37622FA-6A22-47F5-BE90-4A0EE84BA898}) (Version: 15.1.235.0 - Autodesk) Futuremark SystemInfo (HKLM-x32\...\{032DC00A-51D1-4D28-BFB7-1D0E85291E11}) (Version: 4.25.366 - Futuremark) G.SKILL (HKLM-x32\...\{7D0C0C2B-7660-4463-A29A-150C45CAA287}) (Version: 1.00.28 - G.SKILL International Enterprise) Geekbench 4 (HKLM-x32\...\Geekbench 4) (Version: - Primate Labs Inc.) GIMP 2.10.34 (HKLM\...\GIMP-2_is1) (Version: 2.10.34 - The GIMP Team) Git (HKLM\...\Git_is1) (Version: 2.39.2 - The Git Development Community) GO Contact Sync Mod (HKLM-x32\...\{AC227C6F-C7E5-470B-A0E9-7DF8CB3070BD}) (Version: 4.1.32 - WebGear Ltd, New Zealand + Create Software + Stru.be + saller.NET + Big-R + obelix30) Google Chrome (HKLM\...\{4880565C-146E-303F-9477-710497DFB2E2}) (Version: 111.0.5563.65 - Google LLC) Google Keep (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\89b2963a4806c4bf0f69afc861c8759e) (Version: 1.0 - Google\Chrome) Imaging Edge (Remote/Viewer/Edit) (HKLM\...\{362241E2-0592-4BFD-9A56-AE9A95729EC1}) (Version: 2.0.01.09170 - Sony Imaging Products & Solutions, Inc.) Imaging Edge Desktop (HKLM\...\{9AF97938-E455-44AE-8FD2-FB5FFE2F6B54}) (Version: 1.0.00.12110 - Sony Imaging Products & Solutions Inc.) Inkscape (HKLM-x32\...\Inkscape) (Version: 1.2.2- - Inkscape) Inventor Connected Desktop for A360 (HKLM\...\{1FA52755-1FBC-0001-0330-7CEA1F3736D8}) (Version: 3.30.0 - Autodesk) Java 8 Update 181 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180181F0}) (Version: 8.0.1810.13 - Oracle Corporation) Java 8 Update 181 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180181F0}) (Version: 8.0.1810.13 - Oracle Corporation) Java 8 Update 361 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180361F0}) (Version: 8.0.3610.9 - Oracle Corporation) Java 8 Update 361 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180361F0}) (Version: 8.0.3610.9 - Oracle Corporation) Java SE Development Kit 8 Update 181 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180181}) (Version: 8.0.1810.13 - Oracle Corporation) KeyShot 10 (HKLM\...\KeyShot 10) (Version: 10.2.113 - Luxion ApS) Kingston AURA DRAM Component (HKLM\...\{965CDF5F-901C-476F-B3A8-7396701B1129}) (Version: 1.1.5 - KINGSTON COMPONENTS INC.) Hidden Kingston AURA DRAM Component (HKLM-x32\...\{9372ad14-df78-4cf2-86fe-e7a8c1c42107}) (Version: 1.1.5 - KINGSTON COMPONENTS INC.) Hidden Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden Leawo Blu-ray Player Version 1.9.6.2 (HKLM-x32\...\{CF7F52BF-DEE0-44CD-A7E1-AADD5CCECCDD}_is1) (Version: 1.9.6.2 - Leawo Software) LinuxLive USB Creator (HKLM-x32\...\LinuxLive USB Creator) (Version: 2.9 - Thibaut Lauziere) Logitech LCD Manager (HKLM\...\{F469B548-030B-41CD-BD46-D37A7EC9A530}) (Version: 3.06.109 - Logitech Inc.) Hidden Luminar 4 (HKLM\...\Luminar 4) (Version: 4.3.3.7895 - Skylum) Luminar Neo (HKLM\...\Luminar Neo) (Version: 1.6.4.10948 - Skylum) MacroRecorder v2.0.74 (HKLM-x32\...\MacroRecorder_is1) (Version: 2.0.74 - Bartels Media GmbH) MATLAB R2022b (HKLM\...\MATLAB R2022b) (Version: 9.13 - MathWorks) MDESIGN 2018 (HKLM-x32\...\MDESIGN explorer 17) (Version: 17 - TEDATA) MDESIGN 2022 - Second Edition (HKLM\...\MDESIGN explorer 19) (Version: 19 - TEDATA) MediathekView 13.9.1 (HKLM\...\1927-5045-2127-3394) (Version: 13.9.1 - MediathekView Team) Microsoft .NET Host - 6.0.14 (x64) (HKLM\...\{40D4EC44-91F8-4EEE-869E-F4B3E90E6688}) (Version: 48.59.55225 - Microsoft Corporation) Hidden Microsoft .NET Host FX Resolver - 6.0.14 (x64) (HKLM\...\{D1726E78-81F3-40A2-A7AF-6286BAA49B1C}) (Version: 48.59.55225 - Microsoft Corporation) Hidden Microsoft .NET Runtime - 6.0.14 (x64) (HKLM\...\{61202CF9-3B84-4E5A-91A1-2984FAE38259}) (Version: 48.59.55225 - Microsoft Corporation) Hidden Microsoft 365 Apps for Enterprise - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.15601.20538 - Microsoft Corporation) Microsoft Access database engine 2010 (English) (HKLM\...\{90140000-00D1-0409-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 110.0.1587.63 - Microsoft Corporation) Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 110.0.1587.63 - Microsoft Corporation) Microsoft ODBC Driver 11 for SQL Server (HKLM\...\{BF5ABBDB-D3AA-4BCB-8D10-FCD4A4BB7F93}) (Version: 12.1.4100.1 - Microsoft Corporation) Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 23.038.0219.0001 - Microsoft Corporation) Microsoft SQL Server 2008 Native Client (HKLM\...\{C79A7EAB-9D6F-4072-8A6D-F8F54957CD93}) (Version: 10.0.1600.22 - Microsoft Corporation) Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{6292D514-17A4-403F-98F9-E150F10C043D}) (Version: 10.3.5500.0 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2014 (64-bit) (HKLM\...\Microsoft SQL Server SQLServer2014) (Version: - Microsoft Corporation) Microsoft SQL Server 2014 RsFx Driver (HKLM\...\{655A4169-5BB6-44B0-A9BA-4CBE23A412AA}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden Microsoft SQL Server 2014 Setup (English) (HKLM\...\{C7E2483C-10A4-41E3-A2F6-240186FE3E41}) (Version: 12.1.4100.1 - Microsoft Corporation) Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{FF7DDA05-6EA7-4C01-B44A-3E57F8B9B97B}) (Version: 12.1.4100.1 - Microsoft Corporation) Microsoft Teams (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Teams) (Version: 1.6.00.1381 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{89581302-705F-42C5-99B0-E368A845DAD5}) (Version: 3.70.0.0 - Microsoft Corporation) Microsoft Visual Basic for Applications 7.1 (x64) (HKLM\...\{07C0BFE1-3291-409C-B96A-797340719C8F}) (Version: 7.1.10.96 - Microsoft Corporation) Hidden Microsoft Visual Basic for Applications 7.1 (x64) English (HKLM\...\{826216B1-0F04-409B-A33E-C6A004AA1097}) (Version: 7.1.10.96 - Microsoft Corporation) Hidden Microsoft Visual Basic for Applications 7.1 (x64) German (HKLM\...\{3577C582-28BF-47CF-A134-0F4E2C3A6148}) (Version: 7.1.10.96 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 x64 ATL Runtime 9.0.30729 (HKLM-x32\...\{C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4}) (Version: 9.0.30729 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 x64 CRT Runtime 9.0.30729 (HKLM-x32\...\{F6F09DD8-F39B-3A16-ADB9-C9E6B56903F9}) (Version: 9.0.30729 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 x64 MFC Runtime 9.0.30729 (HKLM-x32\...\{6DA2B636-698A-3294-BF4A-B5E11B238CDD}) (Version: 9.0.30729 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 x64 OpenMP Runtime 9.0.30729 (HKLM-x32\...\{8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF}) (Version: 9.0.30729 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 x86 ATL Runtime 9.0.30729 (HKLM-x32\...\{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}) (Version: 9.0.30729 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 x86 CRT Runtime 9.0.30729 (HKLM-x32\...\{14866AAD-1F23-39AC-A62B-7091ED1ADE64}) (Version: 9.0.30729 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 x86 MFC Runtime 9.0.30729 (HKLM-x32\...\{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}) (Version: 9.0.30729 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 x86 OpenMP Runtime 9.0.30729 (HKLM-x32\...\{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}) (Version: 9.0.30729 - Microsoft Corporation) Hidden Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation) Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.34.31931 (HKLM-x32\...\{d4cecf3b-b68f-4995-8840-52ea0fab646e}) (Version: 14.34.31931.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.31.31103 (HKLM-x32\...\{41d7b770-418a-43b7-95a5-f925fff05789}) (Version: 14.31.31103.0 - Microsoft Corporation) Microsoft Visual C++ 2022 X64 Additional Runtime - 14.34.31931 (HKLM\...\{EAE242B1-0A26-485A-BFEB-0292EE9F03CB}) (Version: 14.34.31931 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.34.31931 (HKLM\...\{CF4C347D-954E-4543-88D2-EC17F07F466F}) (Version: 14.34.31931 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Additional Runtime - 14.31.31103 (HKLM-x32\...\{5720EC03-F26F-40B7-980C-50B5D420B5DE}) (Version: 14.31.31103 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.31.31103 (HKLM-x32\...\{799E3FFF-705C-461F-B400-6DE27398B3E5}) (Version: 14.31.31103 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{C3600AE6-93A0-3DB7-B7AA-45BD58F133B5}) (Version: 10.0.31124 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.31119 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2015 (HKLM-x32\...\{ab213ab7-4792-4c6f-a3fa-8485d06c3475}) (Version: 14.0.23829 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2015 Finalizer (HKLM-x32\...\{F93E37BD-4053-37CA-A7BB-A5B74508006C}) (Version: 14.0.23829 - Microsoft Corporation) Hidden Microsoft Visual Studio Tools for Applications 2015 x64 Hosting Support (HKLM\...\{A8C30947-7C1B-3A31-8FD8-CEC6D3357D34}) (Version: 14.0.23829 - Microsoft Corporation) Hidden Microsoft Visual Studio Tools for Applications 2015 x86 Hosting Support (HKLM-x32\...\{11A9EF3E-6616-31B1-82BC-1080366FA34D}) (Version: 14.0.23829 - Microsoft Corporation) Hidden Microsoft VSS Writer for SQL Server 2014 (HKLM\...\{366CD715-2FF4-40B4-A8B4-A05E5D21A945}) (Version: 12.1.4100.1 - Microsoft Corporation) Microsoft Windows Desktop Runtime - 6.0.14 (x64) (HKLM\...\{424D9E0C-14D9-4D4B-9562-845689D972F6}) (Version: 48.59.55235 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 6.0.14 (x64) (HKLM-x32\...\{c4558324-5b32-43fc-9ac2-423fee96dae0}) (Version: 6.0.14.32124 - Microsoft Corporation) Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft) MiKTeX (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\MiKTeX) (Version: 21.6 - MiKTeX.org) MouseRecorder v1.0.52 (HKLM-x32\...\MouseRecorder_is1) (Version: 1.0.52 - Bartels Media GmbH) MovieRescuer version 1.0.0.0 (HKLM-x32\...\{88AA82F3-0570-4d68-A425-0115896479A4}_is1) (Version: - ) MSI Afterburner 4.6.1 (HKLM-x32\...\Afterburner) (Version: 4.6.1 - MSI Co., LTD) Müller Foto (HKLM-x32\...\Müller Foto) (Version: 6.3.6 - CEWE Stiftung u Co. KGaA) NordVPN (HKLM\...\{19465C24-3D5D-4327-B99F-3CC0A1D38151}_is1) (Version: 6.40.5.0 - TEFINCOM S.A.) NordVPN network TAP (HKLM-x32\...\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}) (Version: 1.0.1 - NordVPN) NordVPN network TUN (HKLM\...\{BD0E4F38-D3F6-452D-A32E-B14D721839AC}) (Version: 1.0.1 - NordVPN) Norton AntiVirus (HKLM-x32\...\NGC) (Version: 22.23.1.21 - NortonLifeLock Inc) NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation) OBS Studio (HKLM-x32\...\OBS Studio) (Version: 22.0.2 - OBS Project) Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.15726.20202 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.16026.20200 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.15726.20202 - Microsoft Corporation) Hidden OpenAL (HKLM-x32\...\OpenAL) (Version: - ) Outlook4Gmail 5.1.2 (HKLM-x32\...\{6A53C42D-DCCD-46B7-9143-51071726A6F6}_is1) (Version: - Scand Ltd.) Overwolf (HKLM-x32\...\Overwolf) (Version: 0.166.1.13 - Overwolf Ltd.) P7-S1 (HKLM-x32\...\{5BF95E69-5133-4A4A-8217-58BAF7B3B798}_is1) (Version: 1.00 - AeroCool) Patriot Viper DRAM RGB (HKLM\...\{1F9C282E-CCB4-4D8E-A5CB-7B74DFCD8C95}) (Version: 1.0.8.4 - Patriot Memory) Hidden Patriot Viper DRAM RGB (HKLM-x32\...\{71fce76d-64e1-445d-872c-6870aa23db64}) (Version: 1.0.8.4 - Patriot Memory) Patriot Viper M2 SSD RGB (HKLM\...\{8B4C0A3D-C135-4E1F-98D8-3926494B4D61}) (Version: 1.0.6.3 - Patriot Memory) Hidden Patriot Viper M2 SSD RGB (HKLM-x32\...\{8839fbd5-69f9-41c5-a1cf-cdfbec966d66}) (Version: 1.0.6.3 - Patriot Memory) PDF24 Creator 8.6.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org) PDFCreator (HKLM\...\{8960FCDD-66D4-4180-A172-1AD0DD1A075A}) (Version: 5.0.3 - pdfforge GmbH) PHISON HAL (HKLM\...\{966E33F0-6786-4B38-AA29-C1B3F6C1955D}) (Version: 1.0.6.0 - PHISON Electronics Corp.) Hidden PHISON HAL (HKLM-x32\...\{c8f7044c-7f48-404a-9a5d-9f038f28a789}) (Version: 1.0.6.0 - PHISON Electronics Corp.) Hidden PTC Creo 4 Platform Services (HKLM\...\{3AE3FF54-B5A6-4234-BF96-6E1DA66214DF}) (Version: 1.0.201 - PTC) Hidden PTC Creo 4 Platform Services (HKLM-x32\...\{1a6ea568-5726-4d5b-aa3a-56fd27d711dc}) (Version: 1.0.217 - PTC) PTC Creo Direct Version 4.0 Datecode [M020] (HKLM-x32\...\PTC Creo Direct Version 4.0 Datecode [M020]) (Version: 4.0 - PTC) PTC Creo Layout Version 4.0 Datecode [M020] (HKLM-x32\...\PTC Creo Layout Version 4.0 Datecode [M020]) (Version: 4.0 - PTC) PTC Creo Parametric Version 4.0 Datecode [M020] (HKLM-x32\...\PTC Creo Parametric Version 4.0 Datecode [M020]) (Version: 4.0 - PTC) PTC Creo Platform Agent (HKLM\...\{4222796F-D948-4290-9BF3-263951ACFF20}) (Version: 1.0.105 - PTC) Hidden PTC Creo Simulate Version 4.0 Datecode [M020] (HKLM-x32\...\PTC Creo Simulate Version 4.0 Datecode [M020]) (Version: 4.0 - PTC) PTC Creo Thumbnail Viewer 4.0 (HKLM\...\{BCAAF4D3-F486-4B19-8113-01902B4FBCF1}) (Version: 32.17.110 - PTC) PTC Creo View Express 4.0 (HKLM\...\{C71E9025-8D0D-4AA6-8F55-23D0ED20392E}) (Version: 11.0.0.25 - PTC) PTC Diagnostic Tools (HKLM\...\{D5DF50CC-3FFB-4155-96A0-B3530CB3301B}) (Version: 4.0.0.0 - PTC) Qualcomm Atheros 11ac Wireless LAN Installer (HKLM-x32\...\{20CA507E-24AA-4741-87CF-CC1B250790B7}) (Version: 11.0.10427 - Qualcomm) RaceRoom Racing Experience Launcher (HKLM-x32\...\{1FD9F07F-7BBF-4C91-B3F0-A23714A3A913}_is1) (Version: 1.0 - Sector3 Studios) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8273 - Realtek Semiconductor Corp.) Repetier-Host Version 1.0.5 (HKLM\...\{1143F758-929B-4EEB-8784-46CCB622F037}_is1) (Version: 1.0.5 - repetier) RivaTuner Statistics Server 7.2.2 (HKLM-x32\...\RTSS) (Version: 7.2.2 - Unwinder) ROG Live Service (HKLM\...\{2D87BFB6-C184-4A59-9BBE-3E20CE797631}) (Version: 2.0.6.0 - ASUSTek COMPUTER INC.) SALOME Version 9.10.0 (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\{A868A984-2633-47A8-B3E1-D9B9EC8FB132}_is1) (Version: 9.10.0 - CEA EDF OCCT) Service Pack 1 for SQL Server 2014 (KB3058865) (64-bit) (HKLM\...\KB3058865) (Version: 12.1.4100.1 - Microsoft Corporation) Siemens NX (HKLM\...\{DA3E3F18-6E40-492E-9EDD-49D7C2A0F0BD}) (Version: 19.69.2802.00003 - Siemens) Siemens NX 12.0 (HKLM\...\{3C04623B-A1D4-4390-838B-7A8B58D4221A}) (Version: 12.0.0.27 - Siemens) Siemens NX Launcher (HKLM\...\{1615B762-3993-4F6D-982E-2EE1A8511813}) (Version: 19.53.1700.00000 - Siemens) Siemens Solid Edge 2022 (HKLM\...\{6C0CACD4-043C-44DD-8CB5-F4B7E60BCC97}) (Version: 222.00.00132 - Siemens) Signal 6.8.0 (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\7d96caee-06e6-597c-9f2f-c7bb2e0948b4) (Version: 6.8.0 - Signal Messenger, LLC) Simplify3D Software (HKLM\...\Simplify3D Software 4.1.2) (Version: 4.1.2 - Simplify3D) SOLIDWORKS 2021 German Resources (HKLM\...\{A8E011F9-AB58-4C9C-AB8C-7435C7E04FEB}) (Version: 29.151.0001 - Ihr Firmenname) Hidden SOLIDWORKS 2021 SP05.1 (HKLM\...\{9C0A2571-4AAE-4FEE-B673-038B38B85EFC}) (Version: 29.151.0001 - Dassault Systemes SolidWorks Corp) Hidden SOLIDWORKS 2021 SP05.1 (HKLM-x32\...\SolidWorks Installation Manager 20210-40501-1100-100) (Version: 29.5.1.1 - SolidWorks Corporation) SOLIDWORKS CAM 2021 SP05.1 (HKLM\...\{EFF51C01-6447-44F1-B1C6-567BA8E08A3C}) (Version: 29.51.0001 - Dassault Systèmes SolidWorks Corp) Hidden SOLIDWORKS Composer 2021 SP05.1 (HKLM\...\{670D74D1-A07B-4C70-8E11-18FC4B0BAF7E}) (Version: 29.51.0001 - Ihr Firmenname) Hidden SOLIDWORKS eDrawings 2021 SP05.1 (HKLM\...\{5ADD8EC6-ABFA-498D-8ACC-A678A166A222}) (Version: 29.50.0018 - Dassault Systèmes SolidWorks Corp) Hidden SOLIDWORKS Flow Simulation 2021 SP05.1 (HKLM\...\{BC6FEA11-71C2-4D72-A909-2A94B1179DA3}) (Version: 29.51.0002 - Dassault Systèmes SolidWorks Corp) Hidden SOLIDWORKS Plastics 2021 SP05.1 (HKLM\...\{CE4CA359-906F-4F01-AF89-EB0F83B122F5}) (Version: 29.51.0001 - Ihr Firmenname) Hidden SOLIDWORKS Visualize 2021 SP05.1 (HKLM\...\{C493AED2-A596-43E9-9F47-446B35978A42}) (Version: 29.51.0001 - Ihr Firmenname) Hidden SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - ) SQL Server 2014 Common Files (HKLM\...\{BD1CD96B-FE4B-4EAE-83D4-6EF55AB5779C}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden SQL Server 2014 Common Files (HKLM\...\{F7012F84-80F5-4C25-852E-B1BA03276FE6}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden SQL Server 2014 Database Engine Services (HKLM\...\{17531BCD-C627-46A2-9F1E-7CC920E0E94A}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden SQL Server 2014 Database Engine Services (HKLM\...\{5082A9F3-AEE5-4639-9BA7-C19661BA7331}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden SQL Server 2014 Database Engine Shared (HKLM\...\{ACC530B8-B6B4-40D6-B59B-152468CF47D0}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden SQL Server 2014 Database Engine Shared (HKLM\...\{D1B847A9-B06B-4264-9EF0-78E6E1571E65}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden SQL Server Browser for SQL Server 2014 (HKLM-x32\...\{3204DE95-97D2-4261-A286-98A262E171D4}) (Version: 12.1.4100.1 - Microsoft Corporation) Sql Server Customer Experience Improvement Program (HKLM\...\{6476DB81-F263-4C04-8574-AAD31136C304}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.5.0.30767 - Microsoft Corporation) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.5.0 - TeamSpeak Systems GmbH) TeamSpeak Overlay (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Overwolf_jnabojaampcpfclojlbildognlnebnhfhibiielh) (Version: 1.0.0.2 - Overwolf app) TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.38.3 - TeamViewer) Trident Z Lighting Control (HKLM-x32\...\{97CD7AFC-0ED3-41B8-9CCD-22717E8631D0}_is1) (Version: 1.00.31 - ENG) UE4 Prerequisites (x64) (HKLM\...\{D7B591D8-1091-4A00-A0B3-5301C45E5D51}) (Version: 1.0.14.0 - Epic Games, Inc.) Hidden UE4 Prerequisites (x64) (HKLM-x32\...\{0d995f46-317b-4b5f-bf3e-9f98bae9d339}) (Version: 1.0.14.0 - Epic Games, Inc.) Hidden Ultimaker Cura 5.1.0 (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Ultimaker Cura 5.1.0) (Version: 5.1.0 - Ultimaker B.V.) Universal Adb Driver (HKLM-x32\...\{C0E08D8D-6076-4117-B644-2AF34F35B757}) (Version: 1.0.4 - ClockworkMod) Universal Holtek RGB DRAM (HKLM\...\{826388E4-E31F-4514-948B-3BB954FB3EAF}) (Version: 1.0.0.1 - PD) Hidden Universal Holtek RGB DRAM (HKLM-x32\...\{68fb2ff9-0618-4948-b68f-9f95e5687067}) (Version: 1.0.0.1 - PD) Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{16AD6161-2E47-4BF1-AA77-0946EFE93E08}) (Version: 2.61.0.0 - Microsoft Corporation) Videodownloader (HKLM-x32\...\{9CC896F1-E6B8-44D7-9E2A-92A0467A0349}) (Version: 1.0.9 - POST Service & Consulting Limited) Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{6DA2B636-698A-3294-BF4A-B5E11B238CDD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{F6F09DD8-F39B-3A16-ADB9-C9E6B56903F9}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{14866AAD-1F23-39AC-A62B-7091ED1ADE64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) VLC media player (HKLM\...\VLC media player) (Version: 3.0.18 - VideoLAN) Vulkan Run Time Libraries 1.0.54.0 (HKLM\...\VulkanRT1.0.54.0) (Version: 1.0.54.0 - LunarG, Inc.) Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0) (Version: 1.1.70.0 - LunarG, Inc.) Hidden Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0-2) (Version: 1.1.70.0 - LunarG, Inc.) Hidden Wacom Tablett (HKLM\...\Wacom Tablet Driver) (Version: 6.3.27-2 - Wacom Technology Corp.) WD_BLACK AN1500 (HKLM\...\{085E2365-0A70-4230-B664-02D5E4FE7E9C}) (Version: 1.0.12.0 - ENE TECHNOLOGY INC.) Hidden WD_BLACK AN1500 (HKLM-x32\...\{9c94735f-73fd-4b0f-9ddb-8be7b3cc4681}) (Version: 1.0.12.0 - ENE TECHNOLOGY INC.) Hidden WD_BLACK D50 (HKLM\...\{BDE43F26-5917-44F8-B86A-F1D9A6B80B32}) (Version: 1.0.9.0 - ENE TECHNOLOGY INC.) Hidden WD_BLACK D50 (HKLM-x32\...\{a1d1ba00-92b7-4a99-8ebd-65b25c0e9e44}) (Version: 1.0.9.0 - ENE TECHNOLOGY INC.) Hidden Windows Driver Package - Arduino LLC (www.arduino.cc) Arduino USB Driver (01/04/2013 1.0.0.0) (HKLM\...\1E3EA5624DD04BEFECF3FFF6D3A21CCE9CD70A91) (Version: 01/04/2013 1.0.0.0 - Arduino LLC (www.arduino.cc)) Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation) Windows-Treiberpaket - Adafruit Industries LLC (usbser) Ports (02/25/2016 6.2.2600.0) (HKLM\...\1245A5961AC9D2C18ADF9EEC931D77E059B7F74E) (Version: 02/25/2016 6.2.2600.0 - Adafruit Industries LLC) Windows-Treiberpaket - Arduino LLC (www.arduino.cc) Arduino USB Driver (11/24/2015 1.2.3.0) (HKLM\...\8B585560B248755A6C5A24D5C0F50FA998310883) (Version: 11/24/2015 1.2.3.0 - Arduino LLC (www.arduino.cc)) Windows-Treiberpaket - Arduino LLC (www.arduino.cc) Genuino USB Driver (01/07/2016 1.0.3.0) (HKLM\...\EC414D98E2986DCA1628FAED2163CD1C9A4ED7EC) (Version: 01/07/2016 1.0.3.0 - Arduino LLC (www.arduino.cc)) Windows-Treiberpaket - Arduino Srl (www.arduino.org) Arduino USB Driver (03/19/2015 1.1.1.0) (HKLM\...\69E507459B453D69A453EFC9E461FAE1E073408A) (Version: 03/19/2015 1.1.1.0 - Arduino Srl (www.arduino.org)) Windows-Treiberpaket - Corsair Components, Inc. (SIUSBXP) USB (07/14/2017 3.3) (HKLM\...\A2206C09905C467F30CB24DCBB49F056D7F0A290) (Version: 07/14/2017 3.3 - Corsair Components, Inc.) Windows-Treiberpaket - libusb-win32 (libusb0) libusb-win32 devices (04/21/2015 1.0.0.0) (HKLM\...\28E91B69CA377EB48D6E1B92C37F897036E8A818) (Version: 04/21/2015 1.0.0.0 - libusb-win32) Windows-Treiberpaket - Linino (usbser) Ports (01/13/2014 1.0.0.0) (HKLM\...\A2C084AD4515675961A87E71B10E80E4FDCF7FAA) (Version: 01/13/2014 1.0.0.0 - Linino) Windows-Treiberpaket - Phase One / Mamiya V-Grip USB Driver (12/03/2014 1.2.0.0) (HKLM\...\3F504CC0B024052107934E093CC26DA720256A7A) (Version: 12/03/2014 1.2.0.0 - Phase One / Mamiya) Windows-Treiberpaket - Phase One A/S (WinUSB) USBDevice (12/14/2018 1.15.0.0) (HKLM\...\9398055CF8BEEF1D6FCF147047450F15A1C7AF2A) (Version: 12/14/2018 1.15.0.0 - Phase One A/S) Wondershare EdrawMax(Build 11.5.6.901) (HKLM-x32\...\{037BAB81-3DF7-4381-A72C-A26B57C03548}_is1) (Version: 11.5.6.901 - EdrawSoft Co.,Ltd.) WPTx64 (HKLM-x32\...\{0B2C58EB-67A2-225B-60B2-D1990E55DD33}) (Version: 8.100.26866 - Microsoft) YouTube (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\9992dbfe720bcefaebef08840978fc54) (Version: 1.0 - Google\Chrome) Z88ArionV3 (HKLM\...\{3AE2382C-7B64-49D0-88F8-707A435631FA}) (Version: 2.0 - Lehrstuhl fuer Konstruktionlehre und CAD, Universitaet Bayreuth) Z88Aurora V5 (HKLM\...\{0A8FD343-3735-4F2F-AAE6-D317D6A208BE}) (Version: 5.0 - Lehrstuhl fuer Konstruktionlehre und CAD, Universitaet Bayreuth) Zoom(32bit) (HKLM-x32\...\{31491969-DBB8-4727-AF8C-D3606F438C56}) (Version: 5.13.13434 - Zoom) Packages: ========= Arduino IDE -> C:\Program Files\WindowsApps\ArduinoLLC.ArduinoIDE_1.8.57.0_x86__mdqgnx93n4wtt [2022-01-12] (Arduino LLC) ARMOURY CRATE -> C:\Program Files\WindowsApps\B9ECED6F.ArmouryCrate_5.4.10.0_x64__qmba6cd70vzyy [2023-03-08] (ASUSTeK COMPUTER INC.) AURA Creator -> C:\Program Files\WindowsApps\B9ECED6F.AURACreator_3.5.7.0_x64__qmba6cd70vzyy [2023-03-08] (ASUSTeK COMPUTER INC.) Blender -> C:\Program Files\WindowsApps\BlenderFoundation.Blender_3.4.1.0_x64__ppwjx1n5r4v9t [2023-01-08] (Blender Foundation) Canon Inkjet Print Utility -> C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_3.1.0.0_neutral__6e5tt8cgb93ep [2021-02-19] (Canon Inc.) Dropbox für S Modus -> C:\Program Files\WindowsApps\C27EB4BA.DROPBOX_23.4.6.0_x64__xbfy0k16fey96 [2023-01-08] (Dropbox Inc.) Facebook -> C:\Program Files\WindowsApps\FACEBOOK.FACEBOOK_2023.301.1.0_neutral__8xx8rvfyw5nnt [2023-03-05] (Meta) Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2019-11-11] (Microsoft Corporation) Messenger -> C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_1790.13.81.0_x64__8xx8rvfyw5nnt [2023-03-02] (Meta) [Startup Task] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1807.9.0_x64__8wekyb3d8bbwe [2018-09-02] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2020-09-15] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-14] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-14] (Microsoft Corporation) [MS Ad] MuseScore 3 -> C:\Program Files\WindowsApps\64051MuseScoreBVBA.MuseScoreNotationSoftware_3.3.4.0_x64__pz631wrhsw9tj [2020-01-06] (MuseScore BVBA) OneDrive -> C:\Program Files\WindowsApps\microsoft.microsoftskydrive_19.23.19.0_x64__8wekyb3d8bbwe [2021-12-10] (Microsoft Corporation) Prime Video for Windows -> C:\Program Files\WindowsApps\AmazonVideo.PrimeVideo_1.0.128.0_x64__pwbj9vvecjh7j [2023-03-08] (Amazon Development Centre (London) Ltd) RAR Opener -> C:\Program Files\WindowsApps\DeviceDoctor.RAROpener_1.3.48.0_x64__mkdtfchztkfbm [2017-11-17] (Tiny Opener) Raw Image Extension -> C:\Program Files\WindowsApps\Microsoft.RawImageExtension_2.0.40041.0_x64__8wekyb3d8bbwe [2023-01-13] (Microsoft Corporation) Search for text in pictures -> C:\Program Files\WindowsApps\34002IvanMakaruskin.Searchfortextinpictures_1.5.27.0_x64__9p1h6v1a1cwyy [2022-12-02] (Ivan Makaruskin) Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.15.12020.0_x64__8wekyb3d8bbwe [2022-12-10] (Microsoft Studios) [MS Ad] SoundCloud - Music & Songs -> C:\Program Files\WindowsApps\SoundcloudLtd.SoundCloudforWindowsBeta_2.0.0.0_neutral__2xc63xn306dnw [2022-06-05] (SoundCloud Global Limited & Co. KG) Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0 [2023-03-05] (Spotify AB) [Startup Task] TeamViewer: Remote Control -> C:\Program Files\WindowsApps\TeamViewer.31414B719FA93_15.0.100.0_x86__89446h4zmeyyt [2019-11-22] (TeamViewer) Twitter -> C:\Program Files\WindowsApps\9E2F88E3.TWITTER_7.0.1.0_neutral__wgeqdkkx372wm [2021-06-10] (Twitter Inc.) VVS Abfahrtsmonitor -> C:\Program Files\WindowsApps\Verkehrs-undTarifverbundS.VVSAbfahrtsmonitor_1.1.7402.0_x64__k1z1c5w35a7dt [2021-11-22] (Verkehrs- und Tarifverbund Stuttgart GmbH (VVS)) WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2307.4.0_x64__cv1g1gvanyjgm [2023-03-02] (WhatsApp Inc.) [Startup Task] WindowsAppRuntime.1.2 -> C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.2_2000.777.2143.0_x64__8wekyb3d8bbwe [2023-03-02] (Microsoft Corporation) WindowsAppRuntime.1.2 -> C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.2_2000.777.2143.0_x86__8wekyb3d8bbwe [2023-03-02] (Microsoft Corporation) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{00F064D8-FEC3-48ac-B07D-39C314D1727B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{04271989-C4D2-C2C0-1514-2CEA932F0E97} -> [OneDrive - bwedu] => D:\OneDrive - bwedu [2018-01-25 19:58] CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\TestServer.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{13009989-EFB5-48C9-8BD2-943E0392BD71}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\RxAppCtrl.Ocx => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{18A21864-E37B-42b9-9612-2C1E8C450A29}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\nikla\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.22349.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{1D625598-C876-4C51-8EF5-F9D8F96F62AA}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{1D6DFD6A-9E16-435A-9327-6FFEC6BA372F}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{1E8A29BA-827D-4031-A4A3-AE7999B402F6}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{1EA072EE-57FD-495E-889C-8243C3BDBDBC}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{1FD7F53F-7ED5-439C-9A77-A3821CD09E98}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{20E47D5B-529A-45BD-8E77-BF1A3064A008}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{2709544A-5B24-4F9F-A5DA-CEC7297D3A4E}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{2BCA857B-A18B-4AFA-B183-CC0E49C12058}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{2C74F89E-7421-46B4-BA54-F86F1BD9F237}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{2C7D1157-7D50-4A88-9777-5EBBA3189AB8}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4}\localserver32 -> "C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" -ToastActivated => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{2F8377FC-50C1-44EF-AB7A-8FF1BB8EA277}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{32CDFF57-8CBA-4960-89B1-EC3FA58FB17A}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{32E26FD9-F435-4A20-A561-35D4B987CFDC}\InprocServer32 -> C:\Users\nikla\AppData\Local\WebEx\WebEx64\Meetings\atucfobj.dll (Cisco WebEx LLC -> Cisco WebEx LLC) CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2017 - English\en-US\dwgviewrficn.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{3FC94EB5-AEBD-4f3f-A2A4-B6CE57113C01}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\RxAppDocView.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{444c3d34-4024-4c6f-a9da-b47eed58ceb6}\localserver32 -> C:\Program Files\Skylum\Luminar Neo\Luminar Neo.exe (Skylum Software USA, Inc. -> Skylum) CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{45122C53-8483-4b62-B15A-EAA9FE5FC3D5}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{4C80573A-9150-11d2-B772-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\RxAppDocView.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{4E6F2E83-E7F0-4333-9772-875EB733C820}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\RxTest.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{611cc957-0f52-4a45-b7dc-6f9de800a63e}\localserver32 -> C:\Program Files\Skylum\Luminar Neo\Luminar Neo.exe (Skylum Software USA, Inc. -> Skylum) CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{622F6193-E4DD-46E6-BC66-2ED88E9FD28D}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{644190AE-BD8F-493F-B63D-C79404AC5E07}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A70-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A71-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A72-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A73-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A74-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A77-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtCp.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{720DB9AF-D62C-4ED0-A377-429C22312852}\localserver32 -> C:\Program Files\Autodesk\DWG TrueView 2017 - English\dwgviewr.exe => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{72EC5CC5-88F3-45B1-A865-0A327DF58CC8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{7BA16B3F-1AB3-4BD7-B959-52C4B8504EE9}\InprocServer32 -> AcInetUI.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{81D07C3D-0350-11D3-B7C2-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\RxAppCtrl.Ocx => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{834CE679-2E47-49DE-9E41-FEC87E9192EB}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{8421A29C-54B8-11D1-9837-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\SolidObject.Dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{846217D0-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\UCxTextBtn.Ocx => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{846217D1-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\UCxTextBtn.Ocx => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{849AFB5B-D6C9-4924-A712-F7118FF9611F}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{85452F88-5071-492E-B850-2E3C586DCBD8}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{87F5CF8F-A06D-498F-A05F-E520E6B570DB}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{89F0FC31-3B1D-494B-A75B-6BD4FA527B8A}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{8AA16DFC-DFC6-4B51-8FA2-A5D812BE33BF}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{8B0E6BD9-610C-11D1-9842-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\SolidObject.Dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\TestServer.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{8ED07FEF-E1B0-4CC3-B2BA-D354828AB952}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{988F4102-E6E3-4282-ACAC-55270827F2A8}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{9906CDFC-DB2C-4126-9422-13139B148495}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{9A21C6C5-27FC-4442-8590-575E7AFD73BB}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{9ECF83FB-23C5-43B6-83DE-93CFBDD74D4A}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{a3d7e084-b0df-4d14-8e0a-27a572a6332c}\localserver32 -> C:\Program Files\Sony\Imaging Edge Desktop\ied.exe (Sony Imaging Products & Solutions Inc. -> Sony) CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{A6A3D586-44CF-44C2-A92C-620BB713B4F2}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{ABBE3F83-D585-4A50-9B69-198B0F566F2E}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{AC5CECFA-F03A-41D2-A89C-704C44935941}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{B1560245-190E-4BBD-81DF-9B642D0E5325}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{B2A579E0-A797-40B1-8AEE-A8F6404719F8}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{B53CEF4B-1A13-49DE-BBC5-A7100FB2F38C}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{B5EE2B68-9A23-4BCD-BB77-FEA6DFB24DD6}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{B6B5DC40-96E3-11d2-B774-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\Inventor.exe /Automation => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{B80687F9-FA4C-4735-9DC4-E5715F2BC698}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{B8E7214B-25CA-4116-84CB-E86FB9625B36}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{BAE5802A-CF21-4F9C-AE04-D98F4036AC31}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{BBF6A206-CB04-479D-96AE-349E1E83319A}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{BC71DEA1-D6FB-48B8-AB06-D151C81BBCDD}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{BE54741D-E02B-4572-93D6-105AF4EDE777}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{BF224DC3-B602-4EEE-BFE9-9E4E0AED6837}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{BF4CC07E-E9BB-40D6-873F-855B211033B9}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C061C82C-D041-4214-BB07-B608107CEFCB}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C2D4ACCC-A3D1-4A0A-AD59-0DD8BA3D5EE1}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C343ED84-A129-11d3-B799-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\RxApprenticeServer.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C4F0910E-E0B4-4E68-8086-452730C7A26A}\InprocServer32 -> C:\Users\nikla\AppData\Local\Autodesk\webdeploy\production\50d1a2b00ac928c7781cbca6551e586a5384d498\NPreview10.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C92F8F8C-8B2C-11d4-B872-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\nikla\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{CFEE2BAF-14F9-4D23-853D-B6E2BCC14263}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DA1F437C-9BD9-11d4-B87C-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DB5D476B-3FF4-4E9D-A606-1E2B473BE571}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\AcInetUI.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DCA7356C-FF94-4b20-AE04-7AA6A8E14117}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DDA9A20F-5B56-49F5-9465-CE82FC199352}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DE6B563C-B074-4BF1-A8A0-B3FED8703E99}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E1C85E9F-60B2-4007-80C3-2C5E09474C3B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\RxInventorUtilities.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\TestServer.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F13E75B9-6AF6-49CB-80B3-6D2FF6E09932}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F2D4F4E5-EEA1-46FF-A83B-A270C92DAE4B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DTInterop.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F4363F9D-3BBA-46AC-ABFE-F27977981DA8}\localserver32 -> "C:\Program Files\Autodesk\Inventor 2020\Bin\ApprenticeServerHost.exe" => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F61064CC-DBFB-47ee-9BC8-CA5A1CBDF0DA}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\InvResc.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{fa5312d1-0b58-428a-bd93-3b87ef89945d}\localserver32 -> C:\Program Files\Skylum\Luminar Neo\Luminar Neo.exe (Skylum Software USA, Inc. -> Skylum) CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FA62F626-EBD5-4dc5-B970-D9E81E0E20E0}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FB469644-3F14-4403-ACCA-6B13486FF7BD}\localserver32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\InvTXTStack.exe /Automation => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{fc2f3575-b316-ac6e-0e71-05c27fa0611c}\localserver32 -> "C:\Users\nikla\AppData\Local\VidCoder.Stable\app-8.25.0\VidCoder.exe" -ToastActivated => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FD703B01-4362-423E-9BDB-91BDCB16C1C9}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DTInterop.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1}\InprocServer32 -> axdb.dll => Keine Datei ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.23.1.21\buShell.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.23.1.21\buShell.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.23.1.21\buShell.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Keine Datei ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2016-02-07] (Autodesk, Inc -> Autodesk, Inc.) ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.23.1.21\buShell.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ShellIconOverlayIdentifiers-x32: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.23.1.21\buShell.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ShellIconOverlayIdentifiers-x32: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.23.1.21\buShell.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert] ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2019-01-30] (Autodesk, Inc. -> Autodesk) ContextMenuHandlers1-x32: [Autodesk.DWF.ContextMenu] -> {6C18531F-CA85-45F7-8278-FF33CF0A5964} => C:\Program Files (x86)\Common Files\Autodesk Shared\DWF Common\DWFShellExtension.dll [2012-01-06] (Autodesk, Inc -> Autodesk, Inc.) ContextMenuHandlers1: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files\Norton Security\Engine\22.23.1.21\buShell.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers1: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.23.1.21\NavShExt.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => C:\Program Files\PDFCreator\PDFCreatorShell.DLL [2022-10-04] (pdfforge GmbH -> pdfforge GmbH) ContextMenuHandlers2: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.23.1.21\NavShExt.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert] ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2020-07-08] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert] ContextMenuHandlers6: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files\Norton Security\Engine\22.23.1.21\buShell.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers6: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.23.1.21\NavShExt.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers6_S-1-5-21-341515215-1173906820-3305953664-1001: [InventorMenu] -> {6FDE7A70-351B-11d6-988B-0010B57A8BB7} => C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll -> Keine Datei ==================== Codecs (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Drivers32: [VIDC.RTV1] => C:\WINDOWS\system32\rtvcvfw64.dll [246272 2012-09-28] () [Datei ist nicht signiert] HKLM\...\Drivers32-x32: [vidc.XVID] => xvidvfw.dll HKLM\...\Drivers32-x32: [VIDC.VP80] => vp8vfw.dll HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\SysWOW64\rtvcvfw32.dll [247296 2012-09-28] () [Datei ist nicht signiert] ==================== Verknüpfungen & WMI ======================== (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) ShortcutWithArgument: C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Snapshots\109.0.1518.78\Default\Web Applications\_crx__eikjhbkpemdappjfcmdeeeamdpkgabmk\SoundCloud.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=eikjhbkpemdappjfcmdeeeamdpkgabmk --app-url=hxxps://soundcloud.com/discover --app-launch-source=4 ShortcutWithArgument: C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Web Applications\_crx__eikjhbkpemdappjfcmdeeeamdpkgabmk\SoundCloud.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=eikjhbkpemdappjfcmdeeeamdpkgabmk --app-url=hxxps://soundcloud.com/discover --app-launch-source=4 ShortcutWithArgument: C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\carus music.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=cgnnddchpghdejcieilejbfebdljhejo ShortcutWithArgument: C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Google Keep.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=eilembjdkfgodjkcjnpgpaenohkicgjd ShortcutWithArgument: C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\YouTube.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=adnlfjpnmidfimlkaohpidplnoimahfh ShortcutWithArgument: C:\Users\nikla\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5803ea45d7990e6f\WhatsChrome Extension.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=kbhfoiaobflocffnclkigpkeoagheimn ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Siemens NX Launcher.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /c "C:\Program Files\Siemens\NXLauncher\NXLauncher.bat" ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============= 2018-02-14 10:22 - 2016-12-13 13:45 - 001746432 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AURA\Vender.dll 2017-10-11 18:13 - 2017-10-11 18:13 - 000151040 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\CorsairAudioDevice.dll 2016-12-01 13:28 - 2016-12-01 13:28 - 000013824 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\libEGL.DLL 2016-12-01 13:28 - 2016-12-01 13:28 - 001983488 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\libGLESv2.dll 2017-10-11 17:47 - 2017-10-11 17:47 - 000044544 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\MacroRecording.dll 2017-10-11 17:55 - 2017-10-11 17:55 - 000199680 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\quazip.dll 2017-10-11 17:47 - 2017-10-11 17:47 - 000097280 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\zlib.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000017920 _____ () [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\libEGL.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 003567616 _____ () [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\libGLESv2.dll 2017-10-18 10:57 - 2017-10-18 10:57 - 000367616 _____ () [Datei ist nicht signiert] C:\Program Files\ASUSTeKcomputer.Inc\Sonic Suite 3\Foundation\NSConfiguratorDaemonModule.dll 2017-10-18 11:14 - 2017-10-18 11:14 - 000230400 _____ () [Datei ist nicht signiert] C:\Program Files\ASUSTeKcomputer.Inc\Sonic Suite 3\Sonic Studio 3\ProfileSwitcherDaemonModule.dll 2023-03-05 18:11 - 2023-03-05 18:12 - 007067136 _____ () [Datei ist nicht signiert] C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\widget_core_interface_dll.dll 2020-07-08 18:24 - 2020-07-08 18:24 - 001562624 _____ (Advanced Micro Devices, Inc.) [Datei ist nicht signiert] C:\Program Files\AMD\WVR\OpenVR\bin\win64\driver_amdwvr.dll 2020-05-26 17:08 - 2020-05-26 17:08 - 002831360 _____ (Apache Software Foundation) [Datei ist nicht signiert] C:\Program Files (x86)\LightingService\log4cxx.dll 2022-10-31 11:52 - 2023-03-09 17:04 - 000044328 _____ (ASUSTeK Computer Inc. -> ) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AXSP\4.02.05\PEbiosinterface32.dll 2018-02-14 10:22 - 2016-12-13 13:45 - 000102400 _____ (ASUSTek Computer Inc.,) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AURA\EIO.DLL 2017-11-18 13:21 - 2015-01-09 08:45 - 000008704 _____ (CANON INC.) [Datei ist nicht signiert] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNSS_DEU.DLL 2017-11-18 13:21 - 2015-01-09 08:44 - 000104960 _____ (CANON INC.) [Datei ist nicht signiert] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNSS_IMG.dll 2017-11-18 13:21 - 2015-03-17 08:51 - 000375296 _____ (CANON INC.) [Datei ist nicht signiert] C:\WINDOWS\System32\CNMN6PPM.DLL 2018-03-29 16:56 - 2018-03-29 16:56 - 001272832 _____ (CPUID) [Datei ist nicht signiert] C:\Program Files (x86)\CorsairLink4\cpuidsdk.dll 2021-12-27 09:04 - 2021-12-27 09:04 - 000047104 _____ (CTI) [Datei ist nicht signiert] C:\Program Files\ENE\Aac_ENE_DRAM_RGB_AIO\x86\MsIo32_ENE.dll 2023-02-17 11:47 - 2023-02-17 11:47 - 003864576 _____ (Newtonsoft) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_64\Newtonsoft.Json\6a77c1624f022ae237d4c03c22bdb9ce\Newtonsoft.Json.ni.dll 2018-01-26 15:16 - 2023-03-08 15:35 - 000181248 _____ (pdfforge GmbH) [Datei ist nicht signiert] C:\WINDOWS\System32\pdfcmon.dll 2018-02-26 12:56 - 2018-02-26 12:56 - 000090112 _____ (Silicon Laboratories, Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\CorsairLink4\SiUSBXp.dll 2017-09-14 13:23 - 2017-09-14 13:23 - 001272320 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\LIBEAY32.dll 2017-09-14 13:23 - 2017-09-14 13:23 - 000278016 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\ssleay32.dll 2016-12-01 17:28 - 2016-12-01 17:28 - 000040960 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\imageformats\qdds.dll 2016-12-01 13:43 - 2016-12-01 13:43 - 000026112 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\imageformats\qgif.dll 2016-12-01 17:28 - 2016-12-01 17:28 - 000033280 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\imageformats\qicns.dll 2016-12-01 13:43 - 2016-12-01 13:43 - 000027648 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\imageformats\qico.dll 2016-12-01 13:43 - 2016-12-01 13:43 - 000245760 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\imageformats\qjpeg.dll 2016-12-01 16:38 - 2016-12-01 16:38 - 000021504 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\imageformats\qsvg.dll 2016-12-01 17:29 - 2016-12-01 17:29 - 000020992 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\imageformats\qtga.dll 2016-12-01 17:29 - 2016-12-01 17:29 - 000316416 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\imageformats\qtiff.dll 2016-12-01 17:29 - 2016-12-01 17:29 - 000019968 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\imageformats\qwbmp.dll 2016-12-01 17:30 - 2016-12-01 17:30 - 000370688 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\imageformats\qwebp.dll 2016-12-01 13:44 - 2016-12-01 13:44 - 001066496 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\platforms\qwindows.dll 2017-10-11 18:13 - 2017-10-11 18:13 - 004633088 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt5Core.dll 2017-04-10 21:07 - 2017-04-10 21:07 - 003618816 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt5Gui.dll 2016-12-01 18:45 - 2016-12-01 18:45 - 000576512 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt5Multimedia.dll 2016-12-01 13:31 - 2016-12-01 13:31 - 000847872 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt5Network.dll 2016-12-01 17:02 - 2016-12-01 17:02 - 002520064 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt5Qml.dll 2017-04-10 21:20 - 2017-04-10 21:20 - 002600960 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt5Quick.dll 2016-12-01 16:38 - 2016-12-01 16:38 - 000255488 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt5Svg.dll 2016-12-01 13:40 - 2016-12-01 13:40 - 004448768 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt5Widgets.dll 2016-12-01 19:24 - 2016-12-01 19:24 - 000236544 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt5WinExtras.dll 2016-12-01 13:29 - 2016-12-01 13:29 - 000151552 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\Qt5Xml.dll 2016-12-01 18:43 - 2016-12-01 18:43 - 000041472 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll 2016-12-01 18:43 - 2016-12-01 18:43 - 000015360 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\QtGraphicalEffects\qtgraphicaleffectsplugin.dll 2016-12-01 17:10 - 2016-12-01 17:10 - 000015872 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\QtQuick.2\qtquick2plugin.dll 2016-12-01 19:17 - 2016-12-01 19:17 - 000710144 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\QtQuick\Controls\qtquickcontrolsplugin.dll 2016-12-01 17:10 - 2016-12-01 17:10 - 000071680 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\QtQuick\Layouts\qquicklayoutsplugin.dll 2016-12-01 17:10 - 2016-12-01 17:10 - 000015872 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Corsair\Corsair Utility Engine\QtQuick\Window.2\windowplugin.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000031744 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qgif.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000039424 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qicns.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000031744 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qico.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000413696 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qjpeg.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000025088 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qsvg.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000025088 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qtga.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000023552 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwbmp.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000519168 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwebp.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 001431040 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\platforms\qwindows.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 001180672 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\sqldrivers\qsqlite.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000135680 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\styles\qwindowsvistastyle.dll 2020-07-08 18:33 - 2020-07-08 18:33 - 006010880 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Core.dll 2019-07-18 10:22 - 2019-07-18 10:22 - 006345216 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Gui.dll 2019-07-18 10:22 - 2019-07-18 10:22 - 001078272 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Network.dll 2019-07-18 10:22 - 2019-07-18 10:22 - 000313856 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Positioning.dll 2019-07-18 10:22 - 2019-07-18 10:22 - 004000256 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Qml.dll 2019-07-18 10:22 - 2019-07-18 10:22 - 003802624 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Quick.dll 2019-07-18 10:22 - 2019-07-18 10:22 - 000171008 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5QuickControls2.dll 2019-07-18 10:22 - 2019-07-18 10:22 - 001083904 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5QuickTemplates2.dll 2019-07-18 10:22 - 2019-07-18 10:22 - 000205312 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Sql.dll 2019-07-18 10:22 - 2019-07-18 10:22 - 000329728 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Svg.dll 2019-07-18 10:22 - 2019-07-18 10:22 - 000113152 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5WebChannel.dll 2019-07-18 10:22 - 2019-07-18 10:22 - 000376320 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5WebEngine.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 092323328 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5WebEngineCore.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 005560832 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Widgets.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000463360 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5WinExtras.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000188416 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Xml.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 002888704 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5XmlPatterns.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000053760 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000059392 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\qtgraphicaleffectsplugin.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000017408 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000287232 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls.2\qtquickcontrols2plugin.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000329216 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000136192 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtQuick\Dialogs\dialogplugin.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000089088 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000312320 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtQuick\Templates.2\qtquicktemplates2plugin.dll 2019-07-18 10:23 - 2019-07-18 10:23 - 000017920 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll 2020-07-08 18:33 - 2020-07-08 18:33 - 000085504 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtWebEngine\qtwebengineplugin.dll 2018-02-14 10:22 - 2016-12-13 13:45 - 001623552 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AURA\LED_DLL_forMB.dll 2018-02-14 10:22 - 2016-12-13 13:45 - 001624576 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AURA\VGA_Extra.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [490] ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ================== |
11.03.2023, 12:31 | #3 |
| Windows 10: Passwort-Trojaner wirklich weg?Code:
ATTFilter ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ================= ==================== Internet Explorer (Nicht auf der Ausnahmeliste) ========== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-d9d0d61b BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) BHO: Norton Password Manager -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security\Engine\22.23.1.21\coIEPlg.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) BHO: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Program Files (x86)\Internet Explorer\Citavi Picker\x64\SwissAcademic.Citavi.IEPicker.DLL [2023-02-15] (Swiss Academic Software -> Swiss Academic Software) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_361\bin\ssv.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation) BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll => Keine Datei BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_361\bin\jp2ssv.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Norton Password Manager -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security\Engine32\22.23.1.21\coIEPlg.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) BHO-x32: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Program Files (x86)\Internet Explorer\Citavi Picker\SwissAcademic.Citavi.IEPicker.DLL [2023-02-15] (Swiss Academic Software -> Swiss Academic Software) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_361\bin\ssv.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll => Keine Datei BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_361\bin\jp2ssv.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine\22.23.1.21\coIEPlg.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine32\22.23.1.21\coIEPlg.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) IE trusted site: HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\sharepoint.com -> hxxps://bwedu-files.sharepoint.com ==================== Hosts Inhalt: ========================= (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2017-11-17 15:33 - 2019-08-09 23:54 - 000000822 _____ C:\WINDOWS\system32\drivers\etc\hosts ==================== Andere Bereiche =========================== (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\110\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\120\DTS\Binn\;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\Calibre2\;C:\Program Files\MATLAB\R2021b\bin;S:\Programme\Siemens\NX1953\CAPITALINTEGRATION\capitalnxremote\;S:\Programme\Inkscape\bin;S:\Programme\MATLAB\R2022b\runtime\win64;S:\Programme\MATLAB\R2022b\bin;C:\Program Files\dotnet\;C:\Program Files\Git\cmd HKU\S-1-5-21-341515215-1173906820-3305953664-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\nikla\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img13.jpg DNS Servers: 192.168.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) ist aktiviert. Network Binding: ============= VPN - VPN Client: NordVPN LightWeight Firewall -> NordLwf (enabled) Ethernet 3: NordVPN LightWeight Firewall -> NordLwf (enabled) Ethernet: NordVPN LightWeight Firewall -> NordLwf (enabled) WLAN: NordVPN LightWeight Firewall -> NordLwf (enabled) Ethernet 2: NordVPN LightWeight Firewall -> NordLwf (enabled) ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) HKLM\...\StartupApproved\StartupFolder: => "Imaging Edge Desktop.lnk" HKLM\...\StartupApproved\StartupFolder: => "CADClick® Click2CAD Toolbox.lnk" HKLM\...\StartupApproved\StartupFolder: => "SOLIDWORKS Hintergrund-Downloader.lnk" HKLM\...\StartupApproved\StartupFolder: => "SOLIDWORKS 2021 Fast Start.lnk" HKLM\...\StartupApproved\Run: => "3DxWare Service" HKLM\...\StartupApproved\Run: => "XboxStat" HKLM\...\StartupApproved\Run: => "Flight Yoke System" HKLM\...\StartupApproved\Run32: => "Autodesk Desktop App" HKLM\...\StartupApproved\Run32: => "PDFPrint" HKLM\...\StartupApproved\Run32: => "TeamsMachineInstaller" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\StartupFolder: => "Corsair Effects Engine.appref-ms" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\StartupFolder: => "An OneNote senden.lnk" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\StartupFolder: => "Luminar Neo.lnk" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\StartupFolder: => "Outlook.lnk" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\Run: => "NordVPN" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\Run: => "Overwolf" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\Run: => "Lync" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\Run: => "EpicGamesLauncher" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\Run: => "CiscoMeetingDaemon" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_BD744D00B7947BA4CE821E1D00C3AA26" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_ALB" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams" ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================ (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [UDP Query User{65AB9DAE-9EC3-40F3-A2B9-8867446E76C5}C:\program files\windowsapps\arduinollc.arduinoide_1.8.42.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe] => (Allow) C:\program files\windowsapps\arduinollc.arduinoide_1.8.42.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe => Keine Datei FirewallRules: [TCP Query User{759DB5C8-204F-4391-8413-2A58E2E4E4C4}C:\program files\windowsapps\arduinollc.arduinoide_1.8.42.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe] => (Allow) C:\program files\windowsapps\arduinollc.arduinoide_1.8.42.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe => Keine Datei FirewallRules: [{34C1A81C-69D5-40D8-85A8-3156EF367352}] => (Block) C:\program files\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe => Keine Datei FirewallRules: [{41975822-195E-442F-B443-1E4C84E73547}] => (Block) C:\program files\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe => Keine Datei FirewallRules: [UDP Query User{C89DF027-4EE6-41C3-A364-3A0CC25F5695}C:\program files\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe] => (Allow) C:\program files\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe => Keine Datei FirewallRules: [TCP Query User{484027FD-E5FD-4FAF-AE13-0C7EBDE6E625}C:\program files\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe] => (Allow) C:\program files\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe => Keine Datei FirewallRules: [{672AD932-5B7A-4EE1-BB8F-D87021A42762}] => (Allow) C:\Users\nikla\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei FirewallRules: [{1731C34F-E5BE-467B-85CF-2EFF2D9B2722}] => (Allow) C:\Users\nikla\AppData\Roaming\Zoom\bin\Zoom.exe => Keine Datei FirewallRules: [UDP Query User{C9E313A0-7F08-4E67-B6B5-F2681FFBA180}C:\program files\windowsapps\arduinollc.arduinoide_1.8.33.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe] => (Block) C:\program files\windowsapps\arduinollc.arduinoide_1.8.33.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe => Keine Datei FirewallRules: [TCP Query User{1AD96664-7B4B-45EA-A2F4-9824F940AA09}C:\program files\windowsapps\arduinollc.arduinoide_1.8.33.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe] => (Block) C:\program files\windowsapps\arduinollc.arduinoide_1.8.33.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe => Keine Datei FirewallRules: [UDP Query User{0CAF6849-64DB-4050-988E-1950CBE3C1AC}C:\program files (x86)\fahclient\fahclient.exe] => (Allow) C:\program files (x86)\fahclient\fahclient.exe () [Datei ist nicht signiert] FirewallRules: [TCP Query User{E4FFF248-EC23-40EA-A1E2-26CEFE10563D}C:\program files (x86)\fahclient\fahclient.exe] => (Allow) C:\program files (x86)\fahclient\fahclient.exe () [Datei ist nicht signiert] FirewallRules: [{CDB48549-5463-44EC-B8A3-A801DA392C45}] => (Allow) D:\SteamLibrary\steamapps\common\rocketleague\Binaries\RocketLeague.exe => Keine Datei FirewallRules: [{689097E9-EABF-46E3-BDEC-E2EBE8762B63}] => (Allow) D:\SteamLibrary\steamapps\common\rocketleague\Binaries\RocketLeague.exe => Keine Datei FirewallRules: [UDP Query User{FFBB0B2B-C538-465F-9972-678CD7164843}C:\program files\ultimaker cura 4.4\cura.exe] => (Allow) C:\program files\ultimaker cura 4.4\cura.exe => Keine Datei FirewallRules: [TCP Query User{4834D664-B8C1-4062-A2C4-526CB98BA499}C:\program files\ultimaker cura 4.4\cura.exe] => (Allow) C:\program files\ultimaker cura 4.4\cura.exe => Keine Datei FirewallRules: [{D80AD8A4-9EF0-4007-AC3C-43D881C079C7}] => (Allow) D:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe => Keine Datei FirewallRules: [{C239A893-E24F-42B6-9796-207D0FB0C985}] => (Allow) D:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe => Keine Datei FirewallRules: [{8A678F11-C77B-4F66-9356-D70167C7F32A}] => (Allow) D:\SteamLibrary\steamapps\common\wallpaper_engine\launcher.exe (Kristjan Skutta -> ) FirewallRules: [{1DEC1E73-090F-4397-8C74-AF885E0FD540}] => (Allow) D:\SteamLibrary\steamapps\common\wallpaper_engine\launcher.exe (Kristjan Skutta -> ) FirewallRules: [{60AB5C9E-A359-4108-879E-626A9B89837F}] => (Allow) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe => Keine Datei FirewallRules: [{50BB6B7F-DD0E-4FB6-A6A9-11CE9D2CD062}] => (Allow) D:\Program Files\Nox\bin\Nox.exe => Keine Datei FirewallRules: [{E71AF923-19D9-4FA8-BC5B-B53CBA19A930}] => (Block) C:\program files\siemens\nx 11.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [{8A0C25F2-D6D5-4D59-873A-D93360AC2710}] => (Block) C:\program files\siemens\nx 11.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [UDP Query User{51B33274-993E-4E6E-A629-FF68BE3E8369}C:\program files\siemens\nx 11.0\nxbin\ugraf.exe] => (Allow) C:\program files\siemens\nx 11.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [TCP Query User{1733F7D9-4D60-4788-B9D7-E95D9CBB954D}C:\program files\siemens\nx 11.0\nxbin\ugraf.exe] => (Allow) C:\program files\siemens\nx 11.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [UDP Query User{27909000-102E-4640-B10B-A2D1731DA369}C:\program files\solidworks corp\solidworks\photoview\photoview360.exe] => (Block) C:\program files\solidworks corp\solidworks\photoview\photoview360.exe => Keine Datei FirewallRules: [TCP Query User{D2E9C932-5C76-42DD-BE84-AAF4CF1EE1C1}C:\program files\solidworks corp\solidworks\photoview\photoview360.exe] => (Block) C:\program files\solidworks corp\solidworks\photoview\photoview360.exe => Keine Datei FirewallRules: [UDP Query User{DD8F474A-8810-42B7-9B22-5E9A718EF1B2}D:\steamlibrary\steamapps\common\assettocorsa\acs.exe] => (Allow) D:\steamlibrary\steamapps\common\assettocorsa\acs.exe () [Datei ist nicht signiert] FirewallRules: [TCP Query User{8F0E9605-A78E-41A4-9447-E78264EAB6FD}D:\steamlibrary\steamapps\common\assettocorsa\acs.exe] => (Allow) D:\steamlibrary\steamapps\common\assettocorsa\acs.exe () [Datei ist nicht signiert] FirewallRules: [{D67211F6-D7ED-401B-885C-C2C3CFD821A4}] => (Allow) D:\SteamLibrary\steamapps\common\assettocorsa\AssettoCorsa.exe (Kunos Simulazioni) [Datei ist nicht signiert] FirewallRules: [{8579FA19-3E2D-4AB9-9949-4FDCBC6739AD}] => (Allow) D:\SteamLibrary\steamapps\common\assettocorsa\AssettoCorsa.exe (Kunos Simulazioni) [Datei ist nicht signiert] FirewallRules: [{A9B4237B-F7CB-46ED-A67E-4002CA3F05CB}] => (Allow) D:\SteamLibrary\steamapps\common\Project CARS 2\pCARS2.exe (Slightly Mad Studios Ltd) [Datei ist nicht signiert] FirewallRules: [{EE802DCD-956A-4123-9A4F-B9F79FC5E5E4}] => (Allow) D:\SteamLibrary\steamapps\common\Project CARS 2\pCARS2.exe (Slightly Mad Studios Ltd) [Datei ist nicht signiert] FirewallRules: [{8B995574-73EA-4B5B-A0F7-F5A861B53122}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe => Keine Datei FirewallRules: [{68CACCDF-4E39-43BD-B123-44790E6E353A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe => Keine Datei FirewallRules: [{056AA0A3-5FD1-4F6B-AF79-A5E8473BA328}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Project CARS 2\pCARS2.exe => Keine Datei FirewallRules: [{B914E77D-4720-4A96-8F7F-0D0462C81F60}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Project CARS 2\pCARS2.exe => Keine Datei FirewallRules: [{5C0D8EC0-6AD2-42F6-967E-AA5C862F2063}] => (Allow) LPort=5000 FirewallRules: [{53059A3E-06DE-48DF-A8B6-A21AA2022F41}] => (Allow) LPort=51783 FirewallRules: [UDP Query User{8DFFF996-171F-4BA1-89B5-E979C8B92823}C:\users\nikla\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\nikla\appdata\local\akamai\netsession_win.exe => Keine Datei FirewallRules: [TCP Query User{33F34B7E-069C-4731-B913-4B131A3A036B}C:\users\nikla\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\nikla\appdata\local\akamai\netsession_win.exe => Keine Datei FirewallRules: [{01B518F4-5B2F-4737-B0FE-B940925E5012}] => (Block) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\pro_comm_msg.exe => Keine Datei FirewallRules: [{150C0707-B71E-4D83-B399-50ADDCFAEC4B}] => (Block) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\pro_comm_msg.exe => Keine Datei FirewallRules: [UDP Query User{507083F8-248A-46F8-84D2-13A1DC5F6560}C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\pro_comm_msg.exe] => (Allow) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\pro_comm_msg.exe => Keine Datei FirewallRules: [TCP Query User{6040F311-1D59-428B-BF2F-BDA50BC73333}C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\pro_comm_msg.exe] => (Allow) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\pro_comm_msg.exe => Keine Datei FirewallRules: [UDP Query User{F4736F99-6932-4AA8-8004-F4F7D61DA904}C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\xtop.exe] => (Block) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\xtop.exe => Keine Datei FirewallRules: [TCP Query User{0A5804D8-23BC-45E3-80E6-C712A7B5BF6C}C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\xtop.exe] => (Block) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\xtop.exe => Keine Datei FirewallRules: [UDP Query User{5B1C8087-62EF-4854-BA9E-B5922A847593}C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\nms\nmsd.exe] => (Block) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\nms\nmsd.exe => Keine Datei FirewallRules: [TCP Query User{D0F8E151-7252-4A6A-95D7-81244AF61E71}C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\nms\nmsd.exe] => (Block) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\nms\nmsd.exe => Keine Datei FirewallRules: [{95A5BF17-F713-4E1A-B1C8-A1D54E1C9110}] => (Allow) C:\Program Files\PTC\Creo 4.0\View Express\i486_nt\obj\productview.exe => Keine Datei FirewallRules: [{35C4AEC8-278E-448A-A108-E7C61CB89DF3}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Keine Datei FirewallRules: [{8391F01B-14B6-4023-9B65-C228A20CC87B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Keine Datei FirewallRules: [{2F7FB196-453C-4ED9-9D72-12E2488765A0}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{DE214E2C-6C6F-485C-876A-A49FC7BC74D7}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [TCP Query User{8902E667-F1E6-43F2-983C-8D154089C526}C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\ugodxtopro.exe] => (Allow) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\ugodxtopro.exe => Keine Datei FirewallRules: [UDP Query User{BE818C3F-A33C-45F2-AD6E-4D6C04ECFD88}C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\ugodxtopro.exe] => (Allow) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\ugodxtopro.exe => Keine Datei FirewallRules: [{7A52930F-1BA2-4431-A1D4-B4A3A78EEA0B}] => (Block) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\ugodxtopro.exe => Keine Datei FirewallRules: [{F81A1F50-D054-4EE2-9FFE-7EBFD6A9E070}] => (Block) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\ugodxtopro.exe => Keine Datei FirewallRules: [{6CFD9D29-B49B-4CC2-BB09-F1D7E8FA38B4}] => (Allow) D:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe => Keine Datei FirewallRules: [{D236B7A9-F3F5-4445-9040-99CDBDD20A12}] => (Allow) D:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe => Keine Datei FirewallRules: [TCP Query User{7A302E00-3330-425E-8CCB-C7D018D75580}D:\x-plane 11\x-plane.exe] => (Allow) D:\x-plane 11\x-plane.exe (Laminar Research, LLC -> Laminar Research) FirewallRules: [UDP Query User{4A65A39D-A7B3-47A2-A70C-8B585B2EE070}D:\x-plane 11\x-plane.exe] => (Allow) D:\x-plane 11\x-plane.exe (Laminar Research, LLC -> Laminar Research) FirewallRules: [TCP Query User{6B77A115-7AD4-458B-BEE0-56DACA1B9338}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe => Keine Datei FirewallRules: [UDP Query User{880F1C2A-4332-4BB3-A562-FBCA61A46211}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe => Keine Datei FirewallRules: [{AB5E1959-0D3C-4C07-9944-9320F08048D2}] => (Allow) D:\FlightGear 2018.2.2\bin\fgfs.exe => Keine Datei FirewallRules: [{220FECEE-8EF1-4057-9D64-1896AFC06A91}] => (Allow) D:\FlightGear 2018.2.2\bin\fgfs.exe => Keine Datei FirewallRules: [{15922939-1A07-4A39-8DF0-F446FF2571CA}] => (Allow) D:\FlightGear 2018.2.2\bin\fgcom.exe => Keine Datei FirewallRules: [{D219C6F3-3948-4CCA-BB29-368D7540BF70}] => (Allow) D:\FlightGear 2018.2.2\bin\fgcom.exe => Keine Datei FirewallRules: [{DB07C7EF-85A8-45E4-9D6B-628D881D1EA3}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{AB296513-03DF-4996-A359-07D97404CCA8}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{C096C13F-C184-40BA-B230-2A0546CA7A48}] => (Allow) D:\SteamLibrary\steamapps\common\Assetto Corsa Competizione\acc.exe (Epic Games, Inc.) [Datei ist nicht signiert] FirewallRules: [{1B018928-E63D-4EE2-AE2A-F980F7D0F8CF}] => (Allow) D:\SteamLibrary\steamapps\common\Assetto Corsa Competizione\acc.exe (Epic Games, Inc.) [Datei ist nicht signiert] FirewallRules: [TCP Query User{C0BE47B6-F859-4CF2-8579-2DAF21324293}D:\steamlibrary\steamapps\common\assetto corsa competizione\ac2\binaries\win64\ac2-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\assetto corsa competizione\ac2\binaries\win64\ac2-win64-shipping.exe (Kunos Simulazioni) [Datei ist nicht signiert] FirewallRules: [UDP Query User{A9B71CB9-266F-4766-BD90-0D0CDEAC84D4}D:\steamlibrary\steamapps\common\assetto corsa competizione\ac2\binaries\win64\ac2-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\assetto corsa competizione\ac2\binaries\win64\ac2-win64-shipping.exe (Kunos Simulazioni) [Datei ist nicht signiert] FirewallRules: [TCP Query User{11AF203B-24BF-412E-852B-16FC9D248B97}C:\program files\ultimaker cura 3.2\cura.exe] => (Allow) C:\program files\ultimaker cura 3.2\cura.exe => Keine Datei FirewallRules: [UDP Query User{CD63C664-9679-479C-8FD6-DD485567B214}C:\program files\ultimaker cura 3.2\cura.exe] => (Allow) C:\program files\ultimaker cura 3.2\cura.exe => Keine Datei FirewallRules: [TCP Query User{23FF45D5-E21B-4138-9E6A-26A093231F49}C:\program files\windowsapps\arduinollc.arduinoide_1.8.15.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe] => (Allow) C:\program files\windowsapps\arduinollc.arduinoide_1.8.15.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe => Keine Datei FirewallRules: [UDP Query User{BE34C00B-4210-4311-9929-CB40764B838C}C:\program files\windowsapps\arduinollc.arduinoide_1.8.15.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe] => (Allow) C:\program files\windowsapps\arduinollc.arduinoide_1.8.15.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe => Keine Datei FirewallRules: [TCP Query User{FFD93AF9-1A99-48F2-AE83-A2A1A53551B1}D:\downloads\arduino-nightly-windows\arduino-nightly\java\bin\javaw.exe] => (Allow) D:\downloads\arduino-nightly-windows\arduino-nightly\java\bin\javaw.exe => Keine Datei FirewallRules: [UDP Query User{42DE1C3B-C810-4D56-8F5D-DF4742ED206A}D:\downloads\arduino-nightly-windows\arduino-nightly\java\bin\javaw.exe] => (Allow) D:\downloads\arduino-nightly-windows\arduino-nightly\java\bin\javaw.exe => Keine Datei FirewallRules: [TCP Query User{4BFA4B57-FE92-4FE9-851C-7243BE944849}C:\program files\siemens\nx 12.0\nxbin\ugraf.exe] => (Allow) C:\program files\siemens\nx 12.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [UDP Query User{4D66185B-8BB9-4A9B-B638-18DDF87B27B8}C:\program files\siemens\nx 12.0\nxbin\ugraf.exe] => (Allow) C:\program files\siemens\nx 12.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [{B6CEF1BF-C733-49A6-B9E7-9193FBE6D5D2}] => (Block) C:\program files\siemens\nx 12.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [{E1872525-59B3-428C-948C-4DD3E58950DE}] => (Block) C:\program files\siemens\nx 12.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [{01EDF16C-090F-49F0-A3F6-E49B2A3575C6}] => (Allow) C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe => Keine Datei FirewallRules: [{F24E8927-DB9F-4460-A1EB-3CBA2A14146B}] => (Allow) C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe => Keine Datei FirewallRules: [TCP Query User{EA3F8049-CF81-4691-AD81-0D862915B163}C:\program files\windowsapps\arduinollc.arduinoide_1.8.21.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe] => (Allow) C:\program files\windowsapps\arduinollc.arduinoide_1.8.21.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe => Keine Datei FirewallRules: [UDP Query User{E29BA4A4-FF77-4800-BF2E-2EB64BE0DB1C}C:\program files\windowsapps\arduinollc.arduinoide_1.8.21.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe] => (Allow) C:\program files\windowsapps\arduinollc.arduinoide_1.8.21.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe => Keine Datei FirewallRules: [{27F526F8-FC23-4215-B70E-6075BBC9D266}] => (Allow) D:\SteamLibrary\steamapps\common\raceroom racing experience\Game\x64\RRRE64.exe => Keine Datei FirewallRules: [{34970F23-04A4-422F-9739-604A77063385}] => (Allow) D:\SteamLibrary\steamapps\common\raceroom racing experience\Game\x64\RRRE64.exe => Keine Datei FirewallRules: [{D166E197-2575-48EA-840D-8502F43D4E86}] => (Allow) D:\SteamLibrary\steamapps\common\raceroom racing experience\Game\RRRE.exe => Keine Datei FirewallRules: [{CB9528DC-A026-4C17-B2F3-3C20A250944A}] => (Allow) D:\SteamLibrary\steamapps\common\raceroom racing experience\Game\RRRE.exe => Keine Datei FirewallRules: [{D4352BE6-F72C-4D0D-AB1A-80960695841D}] => (Allow) C:\Program Files (x86)\hide.me VPN\SoftEtherVPN\vpnclient_x64.exe => Keine Datei FirewallRules: [{95CF3A05-572B-4A0C-9F55-1B454F5AF36D}] => (Allow) C:\Program Files (x86)\hide.me VPN\SoftEtherVPN\vpncmd.exe => Keine Datei FirewallRules: [{4AAEC142-4C6D-4A1B-8960-4D41CF9A301C}] => (Allow) D:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win64\RocketLeague.exe (Psyonix, LLC) [Datei ist nicht signiert] FirewallRules: [{DB926E50-CCD1-4310-B68E-24EFD4E9BDFE}] => (Allow) D:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win64\RocketLeague.exe (Psyonix, LLC) [Datei ist nicht signiert] FirewallRules: [{1877CE7B-C65E-472E-84D0-CD0426EF63BA}] => (Allow) D:\SteamLibrary\steamapps\common\wallpaper_engine\bin\diagnostics32.exe (Kristjan Skutta -> ) FirewallRules: [{BBDDFCB3-76E1-4CE7-8B3E-C4CAD20B8F5B}] => (Allow) D:\SteamLibrary\steamapps\common\wallpaper_engine\bin\diagnostics32.exe (Kristjan Skutta -> ) FirewallRules: [TCP Query User{3CC8445E-71C7-49D0-9A78-306B747C7CDF}D:\catia\win_b64\code\bin\orbixd.exe] => (Allow) D:\catia\win_b64\code\bin\orbixd.exe => Keine Datei FirewallRules: [UDP Query User{CF97D8D0-CF58-4227-95C4-C4C7FB69B5E6}D:\catia\win_b64\code\bin\orbixd.exe] => (Allow) D:\catia\win_b64\code\bin\orbixd.exe => Keine Datei FirewallRules: [TCP Query User{89DC1002-0132-4164-B3C8-9BF1D465D787}D:\catia\win_b64\code\bin\cnext.exe] => (Allow) D:\catia\win_b64\code\bin\cnext.exe => Keine Datei FirewallRules: [UDP Query User{1181E074-BD56-4235-A25D-F3EFFB405DCB}D:\catia\win_b64\code\bin\cnext.exe] => (Allow) D:\catia\win_b64\code\bin\cnext.exe => Keine Datei FirewallRules: [TCP Query User{EBE9FB6C-6678-4DEB-879D-80D3CC8677E8}C:\program files\dassault systemes\b21\win_b64\code\bin\orbixd.exe] => (Allow) C:\program files\dassault systemes\b21\win_b64\code\bin\orbixd.exe => Keine Datei FirewallRules: [UDP Query User{4CCF665D-2AC3-4440-836A-61A92BFEC42C}C:\program files\dassault systemes\b21\win_b64\code\bin\orbixd.exe] => (Allow) C:\program files\dassault systemes\b21\win_b64\code\bin\orbixd.exe => Keine Datei FirewallRules: [{B90FFDD5-A689-44A8-983B-E28B261ECC0B}] => (Block) C:\program files\dassault systemes\b21\win_b64\code\bin\orbixd.exe => Keine Datei FirewallRules: [{E16CF9B5-2DA7-4FB4-A737-14DB6EC9EF2D}] => (Block) C:\program files\dassault systemes\b21\win_b64\code\bin\orbixd.exe => Keine Datei FirewallRules: [TCP Query User{BE803C36-128F-49FA-A8DA-D9151F43936B}C:\program files\dassault systemes\b21\win_b64\code\bin\cnext.exe] => (Allow) C:\program files\dassault systemes\b21\win_b64\code\bin\cnext.exe => Keine Datei FirewallRules: [UDP Query User{CF6A11E8-97D1-4CF7-9DB4-C43D6628DD01}C:\program files\dassault systemes\b21\win_b64\code\bin\cnext.exe] => (Allow) C:\program files\dassault systemes\b21\win_b64\code\bin\cnext.exe => Keine Datei FirewallRules: [{B79937C6-06C5-4544-9C92-78FCB08E168F}] => (Block) C:\program files\dassault systemes\b21\win_b64\code\bin\cnext.exe => Keine Datei FirewallRules: [{C3162B10-BF83-4EEA-9DFC-0843C3B0F52F}] => (Block) C:\program files\dassault systemes\b21\win_b64\code\bin\cnext.exe => Keine Datei FirewallRules: [TCP Query User{ED921B5C-4D02-440B-A8FE-7CF95A910DD5}C:\users\nikla\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\nikla\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [UDP Query User{7F563BFC-B2ED-4982-A00E-A889960C8631}C:\users\nikla\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\nikla\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [TCP Query User{AD3AECE6-9347-4DAD-8FE4-0131711E6C90}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\mayamonitor.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\mayamonitor.exe => Keine Datei FirewallRules: [UDP Query User{5EF693D8-AE83-4954-AD9F-11A6FCD78325}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\mayamonitor.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\mayamonitor.exe => Keine Datei FirewallRules: [{287AA140-796B-4659-90BC-256A9CBB55DF}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\mayamonitor.exe => Keine Datei FirewallRules: [{1473DBCE-91D9-49BD-B358-410B395A6678}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\mayamonitor.exe => Keine Datei FirewallRules: [TCP Query User{D23567D1-81D2-4761-BD7F-F16665C65640}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\vufac.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\vufac.exe => Keine Datei FirewallRules: [UDP Query User{9E51E0A7-3088-4226-82C4-0BD535F9AC8C}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\vufac.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\vufac.exe => Keine Datei FirewallRules: [{35812641-7EDB-4986-AF33-929D1916F444}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\vufac.exe => Keine Datei FirewallRules: [{53625852-4B13-4D0C-8FC2-055C3434DCF4}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\vufac.exe => Keine Datei FirewallRules: [TCP Query User{6B39EAB0-48C4-4E87-BCC9-20469A758240}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\grayb.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\grayb.exe => Keine Datei FirewallRules: [UDP Query User{B38833AF-E2B3-4AB4-B715-F4DE09FEA3D0}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\grayb.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\grayb.exe => Keine Datei FirewallRules: [TCP Query User{F26C7109-6AC2-40F2-AFCC-283B966A5188}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\power.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\power.exe => Keine Datei FirewallRules: [UDP Query User{418CFED0-EC5E-4CCB-911C-436A355C7D0C}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\power.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\power.exe => Keine Datei FirewallRules: [TCP Query User{1043AACF-D8E8-4D88-A47C-577D14F46EAD}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\merel.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\merel.exe => Keine Datei FirewallRules: [UDP Query User{ABAF575E-3AA0-4AF2-AE84-8B4C45D61CA2}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\merel.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\merel.exe => Keine Datei FirewallRules: [{07936CFC-41DE-4693-B864-4DA6DBC69F8A}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\power.exe => Keine Datei FirewallRules: [{C64D79C4-BEA0-4C58-8F69-1F92EF0F339F}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\power.exe => Keine Datei FirewallRules: [TCP Query User{83DACC57-C7DD-4BD0-A8E1-D71890F2CBC9}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\analyz.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\analyz.exe => Keine Datei FirewallRules: [UDP Query User{81BEF5DD-871B-4E17-A11A-C9B5FF390D8A}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\analyz.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\analyz.exe => Keine Datei FirewallRules: [{895F5255-350C-4107-91CB-E98C19181369}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\analyz.exe => Keine Datei FirewallRules: [{F123DFF4-D478-4978-8C83-E50F10BFEE55}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\analyz.exe => Keine Datei FirewallRules: [{60E0AC67-EB86-478D-B668-2D0814C5073B}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\merel.exe => Keine Datei FirewallRules: [{E2047B0A-0EF9-4F39-9636-4D8B28080284}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\merel.exe => Keine Datei FirewallRules: [{FB16069A-199F-455B-B486-EFE876B8F733}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\grayb.exe => Keine Datei FirewallRules: [{7CAB3E5C-83DF-4422-A176-45B3D49D586C}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\grayb.exe => Keine Datei FirewallRules: [TCP Query User{0A4BE601-DC5B-4287-BBB9-713B0B15915A}C:\program files\ultimaker cura 4.8.0\cura.exe] => (Allow) C:\program files\ultimaker cura 4.8.0\cura.exe => Keine Datei FirewallRules: [UDP Query User{6231E34C-4487-4425-8066-90B798348E20}C:\program files\ultimaker cura 4.8.0\cura.exe] => (Allow) C:\program files\ultimaker cura 4.8.0\cura.exe => Keine Datei FirewallRules: [{47BB7A8C-64CC-478E-B83D-17B49EBD8653}] => (Allow) C:\Program Files (x86)\Overwolf\0.165.0.28\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD) FirewallRules: [{A9D8BF20-A335-4F27-B7F1-E1EAEAB57FEF}] => (Allow) C:\Program Files (x86)\Overwolf\0.165.0.28\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD) FirewallRules: [{97CB6800-F551-4255-B834-0ECC711DB336}] => (Block) C:\Program Files (x86)\Overwolf\0.165.0.28\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD) FirewallRules: [{FBB43B40-46D7-423B-B375-DF92E418C4B8}] => (Block) C:\Program Files (x86)\Overwolf\0.165.0.28\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD) FirewallRules: [TCP Query User{97C1F93F-454C-45A6-92E4-53F2FF9A5FD5}D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{146D0936-BADE-4A58-867F-7914D4B0722E}D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [TCP Query User{76EE3992-9D65-483C-8C2C-C391AD752B12}D:\epic games\ue_4.26\engine\binaries\win64\ue4editor.exe] => (Allow) D:\epic games\ue_4.26\engine\binaries\win64\ue4editor.exe => Keine Datei FirewallRules: [UDP Query User{9C92385F-DEDC-417D-841E-45E0EB0FAC73}D:\epic games\ue_4.26\engine\binaries\win64\ue4editor.exe] => (Allow) D:\epic games\ue_4.26\engine\binaries\win64\ue4editor.exe => Keine Datei FirewallRules: [{67A84AFF-D5D1-4ADA-B47E-87B401702612}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe => Keine Datei FirewallRules: [{37C66A4A-3C28-42F2-9779-1BD6C0DF274A}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe => Keine Datei FirewallRules: [{0519F4EF-FCAF-4D31-ADD3-521FC74C137B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.168.632.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{764E89D8-9093-4197-9360-A470B866D284}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.168.632.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{C8DA94C2-0B3A-4573-80C6-5C518764F2E0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.168.632.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{A212C80D-0711-458A-A4D6-BC892AA8C318}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.168.632.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{2E317B0A-570F-4A54-BB16-E1B51D235D69}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.168.632.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{BCA2E7ED-12FE-45BE-9842-D2B444D04118}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.168.632.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{548D787F-6B22-4AB9-9327-EC49CC317D14}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.168.632.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{16CA0211-C777-48BD-A844-5F251777E9E8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.168.632.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [TCP Query User{EE7090DE-8FAA-4628-81AF-CC535E31B573}C:\program files\ultimaker cura 4.11.0\cura.exe] => (Allow) C:\program files\ultimaker cura 4.11.0\cura.exe => Keine Datei FirewallRules: [UDP Query User{3BA78666-8A5B-4D40-B975-21C67297D8C3}C:\program files\ultimaker cura 4.11.0\cura.exe] => (Allow) C:\program files\ultimaker cura 4.11.0\cura.exe => Keine Datei FirewallRules: [TCP Query User{8A1A8CB4-E4AB-4580-8544-3ABBDF113440}D:\epic games\twinmotion2021.1edu\twinmotion\binaries\win64\twinmotion-win64-shipping.exe] => (Allow) D:\epic games\twinmotion2021.1edu\twinmotion\binaries\win64\twinmotion-win64-shipping.exe (Epic Games, Inc. -> Epic Games) FirewallRules: [UDP Query User{5B9DBDE4-D437-42B0-B032-588CAB5BD896}D:\epic games\twinmotion2021.1edu\twinmotion\binaries\win64\twinmotion-win64-shipping.exe] => (Allow) D:\epic games\twinmotion2021.1edu\twinmotion\binaries\win64\twinmotion-win64-shipping.exe (Epic Games, Inc. -> Epic Games) FirewallRules: [TCP Query User{0A8052EE-555A-4808-8687-BEB79F03E8C6}D:\epic games\ue_4.27\engine\binaries\win64\ue4editor.exe] => (Allow) D:\epic games\ue_4.27\engine\binaries\win64\ue4editor.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{58B33AF3-3982-4F3C-ABA6-00C4D2EDCE6F}D:\epic games\ue_4.27\engine\binaries\win64\ue4editor.exe] => (Allow) D:\epic games\ue_4.27\engine\binaries\win64\ue4editor.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [TCP Query User{BEB44742-087C-4305-B868-1E90EB731505}D:\epic games\ue_4.27\engine\binaries\dotnet\swarmagent.exe] => (Allow) D:\epic games\ue_4.27\engine\binaries\dotnet\swarmagent.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{E64D8B57-41D2-4AD2-A980-78EB41ACA328}D:\epic games\ue_4.27\engine\binaries\dotnet\swarmagent.exe] => (Allow) D:\epic games\ue_4.27\engine\binaries\dotnet\swarmagent.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [TCP Query User{7C69A699-F5A9-4668-B757-EBD0AF40F3B2}C:\program files\bridge\bridge.exe] => (Allow) C:\program files\bridge\bridge.exe (Epic Games, Inc -> Quixel) FirewallRules: [UDP Query User{5D9608B9-392C-4AAA-80C7-FCE9EB87F576}C:\program files\bridge\bridge.exe] => (Allow) C:\program files\bridge\bridge.exe (Epic Games, Inc -> Quixel) FirewallRules: [TCP Query User{46510009-311E-453F-AD91-F06AD7C9E4A8}D:\epic games\ue_5.0ea\engine\binaries\win64\unrealeditor.exe] => (Allow) D:\epic games\ue_5.0ea\engine\binaries\win64\unrealeditor.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{53881352-4A5D-4E03-A1E9-C6791C7E7DBB}D:\epic games\ue_5.0ea\engine\binaries\win64\unrealeditor.exe] => (Allow) D:\epic games\ue_5.0ea\engine\binaries\win64\unrealeditor.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [TCP Query User{352F03E2-BD2E-4A66-9611-6266DEA024A0}C:\program files\blackmagic design\davinci resolve\resolve.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.) FirewallRules: [UDP Query User{67E717F1-F18A-4CBE-81C6-9831A0F7548E}C:\program files\blackmagic design\davinci resolve\resolve.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.) FirewallRules: [TCP Query User{E4B16196-DF9B-4BAD-88FF-72164FE1CCA0}C:\program files\blackmagic design\davinci resolve\fuscript.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\fuscript.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.) FirewallRules: [UDP Query User{F5EEC4AA-F5EB-4555-ADD8-FC51F0DDB18B}C:\program files\blackmagic design\davinci resolve\fuscript.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\fuscript.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.) FirewallRules: [{E552023A-F412-463A-859E-3D0D2D3AE513}] => (Allow) C:\Program Files (x86)\DroidCam\DroidCamApp.exe (DEV47 APPS LTD. -> ) FirewallRules: [{65554809-D7EF-4385-8F3B-F8A8DC0EFAAE}] => (Allow) C:\Program Files (x86)\DroidCam\DroidCamApp.exe (DEV47 APPS LTD. -> ) FirewallRules: [{143F4FC2-6CA5-427A-ABFA-7067CC7E7719}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{27CB252C-0B77-4CDC-B9F5-65E4DC1EDF47}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{C697B75D-83F7-44AB-92B6-C5E0A5598094}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{F6D37BC2-D5B2-45F9-88A7-4049188A8BAC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [TCP Query User{676EF435-F116-4BE3-9444-02E4EE98820A}C:\program files\e2esoft\ivcam\ivcam.exe] => (Allow) C:\program files\e2esoft\ivcam\ivcam.exe => Keine Datei FirewallRules: [UDP Query User{11C8FE5A-38F5-4ECE-975A-C22AB5B344FE}C:\program files\e2esoft\ivcam\ivcam.exe] => (Allow) C:\program files\e2esoft\ivcam\ivcam.exe => Keine Datei FirewallRules: [{432543CC-CC30-4FA1-A646-BC9A65A6AE79}] => (Allow) C:\Program Files\e2eSoft\iVCam\iVCam.exe => Keine Datei FirewallRules: [{73B8B96A-394E-44AA-B341-EC1E00BD81B4}] => (Allow) C:\Program Files\e2eSoft\iVCam\iVCam.exe => Keine Datei FirewallRules: [TCP Query User{58CE5726-2F3A-4A6C-B28E-055800D8D172}C:\program files\ultimaker cura 4.12.1\cura.exe] => (Allow) C:\program files\ultimaker cura 4.12.1\cura.exe => Keine Datei FirewallRules: [UDP Query User{562DF3A4-765A-49D1-9BEB-702AFB55BE71}C:\program files\ultimaker cura 4.12.1\cura.exe] => (Allow) C:\program files\ultimaker cura 4.12.1\cura.exe => Keine Datei FirewallRules: [TCP Query User{2DF7A996-C132-4508-BAAA-B318E743E452}S:\programme\siemens\nx 12.0\nxbin\ugraf.exe] => (Allow) S:\programme\siemens\nx 12.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [UDP Query User{52C4F09C-0525-4970-AEA1-E379334BBAFB}S:\programme\siemens\nx 12.0\nxbin\ugraf.exe] => (Allow) S:\programme\siemens\nx 12.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [{51B53005-5F1A-42C7-89B2-95592AFB393C}] => (Block) S:\programme\siemens\nx 12.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [{E3FFA845-B394-4ED7-8FE2-5E3269401150}] => (Block) S:\programme\siemens\nx 12.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [TCP Query User{B56E331C-EA39-4CE5-AD40-15D51B8E7F5F}S:\programme\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe] => (Allow) S:\programme\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe => Keine Datei FirewallRules: [UDP Query User{456D0FD4-5AC5-4231-B5A5-34945E654A77}S:\programme\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe] => (Allow) S:\programme\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe => Keine Datei FirewallRules: [{231642E3-5385-43BF-9DCF-FABADE62726A}] => (Block) S:\programme\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe => Keine Datei FirewallRules: [{85234A53-03BD-4212-BEDA-CE702D223924}] => (Block) S:\programme\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe => Keine Datei FirewallRules: [TCP Query User{3F15D4E0-3362-4887-8A1D-188FC9C86E2A}C:\program files\matlab\r2021b\bin\win64\addonproductinstaller.exe] => (Allow) C:\program files\matlab\r2021b\bin\win64\addonproductinstaller.exe => Keine Datei FirewallRules: [UDP Query User{8E698587-A05F-413B-95A8-A6E5594F7C37}C:\program files\matlab\r2021b\bin\win64\addonproductinstaller.exe] => (Allow) C:\program files\matlab\r2021b\bin\win64\addonproductinstaller.exe => Keine Datei FirewallRules: [TCP Query User{6E0A9FD8-BF57-4DE3-856F-FC4AE51B8E02}C:\program files\matlab\r2021b\bin\win64\matlab.exe] => (Allow) C:\program files\matlab\r2021b\bin\win64\matlab.exe => Keine Datei FirewallRules: [UDP Query User{718DD24B-A368-4F9F-80C5-BFB2E09B1CF8}C:\program files\matlab\r2021b\bin\win64\matlab.exe] => (Allow) C:\program files\matlab\r2021b\bin\win64\matlab.exe => Keine Datei FirewallRules: [TCP Query User{4A944FBB-C989-4637-96B9-64955EE0908C}S:\programme\matlab\r2021b\bin\win64\addonproductinstaller.exe] => (Allow) S:\programme\matlab\r2021b\bin\win64\addonproductinstaller.exe => Keine Datei FirewallRules: [UDP Query User{DFDC8C9D-6C09-4401-88E5-6347F16392DC}S:\programme\matlab\r2021b\bin\win64\addonproductinstaller.exe] => (Allow) S:\programme\matlab\r2021b\bin\win64\addonproductinstaller.exe => Keine Datei FirewallRules: [{44736CBC-8370-481F-98A4-5BADE1478CE2}] => (Allow) C:\Program Files\KeyShot10\bin\keyshot.exe (Luxion, Inc. -> Luxion) FirewallRules: [{E2A79634-D2B2-46B3-877A-254EB81537A3}] => (Allow) C:\Program Files\KeyShot10\bin\lux_upd.exe (Luxion, Inc. -> Luxion) FirewallRules: [{C7F0EFBE-2FDD-4FEB-853D-D1C223BDF1C0}] => (Allow) C:\Program Files\KeyShot10\bin\QtWebEngineProcess.exe (Luxion, Inc. -> The Qt Company Ltd.) FirewallRules: [TCP Query User{2EC212AC-986A-4322-A1C0-B80B48B76CA8}S:\programme\siemens\nx 12\nxbin\ugraf.exe] => (Allow) S:\programme\siemens\nx 12\nxbin\ugraf.exe (Siemens Product Lifecycle Management Software Inc.) [Datei ist nicht signiert] FirewallRules: [UDP Query User{DE996C61-F366-41F9-9D52-E4D33A104BB4}S:\programme\siemens\nx 12\nxbin\ugraf.exe] => (Allow) S:\programme\siemens\nx 12\nxbin\ugraf.exe (Siemens Product Lifecycle Management Software Inc.) [Datei ist nicht signiert] FirewallRules: [{0ED3C01B-8ACC-4E1A-99AB-D44C421A14BC}] => (Block) S:\programme\siemens\nx 12\nxbin\ugraf.exe (Siemens Product Lifecycle Management Software Inc.) [Datei ist nicht signiert] FirewallRules: [{321E4CD3-4B96-481E-A2F0-FB88F9396190}] => (Block) S:\programme\siemens\nx 12\nxbin\ugraf.exe (Siemens Product Lifecycle Management Software Inc.) [Datei ist nicht signiert] FirewallRules: [{4628BE7A-06B5-4E50-AECB-3870CCE0C8F7}] => (Allow) S:\Programme\Siemens\NX1953\AUTOMATION_DESIGNER\adagent\Siemens.AutomationDesigner.ADAgentUI.exe (Siemens AG) [Datei ist nicht signiert] FirewallRules: [{30C4E18D-A591-4375-8495-AD26B8D6EF6A}] => (Allow) S:\Programme\Siemens\NX1953\NXBIN\ugraf.exe (Siemens Industry Software Inc. -> Siemens Industry Software Inc.) FirewallRules: [{ADA6689E-6860-42A4-B979-8ED164E50ADB}] => (Allow) S:\Programme\Siemens\NX1953\NXBIN\simcenter3d.exe (Siemens Industry Software Inc. -> Siemens Industry Software Inc.) FirewallRules: [TCP Query User{C592B678-58A2-4811-9E00-89746324E488}C:\program files\ultimaker cura 4.13.1\cura.exe] => (Allow) C:\program files\ultimaker cura 4.13.1\cura.exe => Keine Datei FirewallRules: [UDP Query User{334F23E7-B3F7-4B30-85A7-3BAA2234E178}C:\program files\ultimaker cura 4.13.1\cura.exe] => (Allow) C:\program files\ultimaker cura 4.13.1\cura.exe => Keine Datei FirewallRules: [{505D6CB3-0DA5-4822-A2FD-9D27F8AA7333}] => (Allow) LPort=8029 FirewallRules: [TCP Query User{667B8403-B2C7-4ED8-9532-BA3FC1EBE357}S:\programme\siemens\nx 12\nxnastran\nxn12\em64tntl\analysis.exe] => (Allow) S:\programme\siemens\nx 12\nxnastran\nxn12\em64tntl\analysis.exe () [Datei ist nicht signiert] FirewallRules: [UDP Query User{31255EAA-58DC-4851-99CC-2902221E4794}S:\programme\siemens\nx 12\nxnastran\nxn12\em64tntl\analysis.exe] => (Allow) S:\programme\siemens\nx 12\nxnastran\nxn12\em64tntl\analysis.exe () [Datei ist nicht signiert] FirewallRules: [{A345FF1C-E14F-460C-8B37-DDA1639971D8}] => (Block) S:\programme\siemens\nx 12\nxnastran\nxn12\em64tntl\analysis.exe () [Datei ist nicht signiert] FirewallRules: [{080DF85D-FA07-4169-8E67-232466F744BF}] => (Block) S:\programme\siemens\nx 12\nxnastran\nxn12\em64tntl\analysis.exe () [Datei ist nicht signiert] FirewallRules: [{70230A0F-3167-4325-87C5-46BD7796BEAC}] => (Allow) LPort=8029 FirewallRules: [{C9E1643A-7F4A-449B-B900-FA920B262B2D}] => (Allow) LPort=8029 FirewallRules: [TCP Query User{6486027A-34CC-40B7-AA20-ED07A2C8192E}C:\program files\skylum\luminar neo\luminar neo.exe] => (Allow) C:\program files\skylum\luminar neo\luminar neo.exe (Skylum Software USA, Inc. -> Skylum) FirewallRules: [UDP Query User{D8187F6B-820E-4D6D-B6CE-8138D1DF7AB8}C:\program files\skylum\luminar neo\luminar neo.exe] => (Allow) C:\program files\skylum\luminar neo\luminar neo.exe (Skylum Software USA, Inc. -> Skylum) FirewallRules: [{83DD7A0C-BAE3-4D34-B13E-34448D7D2FEA}] => (Allow) LPort=8029 FirewallRules: [{340C45C5-5AEF-48DE-89FD-FF643CD1EBB3}] => (Allow) LPort=8029 FirewallRules: [{D5915E74-B191-484E-AA3F-69CE64F1C62F}] => (Allow) LPort=8029 FirewallRules: [TCP Query User{E64C9E56-292A-4B21-A27A-6A3DEEA1506A}C:\users\nikla\appdata\local\vortxengine\app-2.2.20\signal-x64\signalrgb.exe] => (Allow) C:\users\nikla\appdata\local\vortxengine\app-2.2.20\signal-x64\signalrgb.exe => Keine Datei FirewallRules: [UDP Query User{76441F1C-912E-4803-9FC1-850CE6CB1F87}C:\users\nikla\appdata\local\vortxengine\app-2.2.20\signal-x64\signalrgb.exe] => (Allow) C:\users\nikla\appdata\local\vortxengine\app-2.2.20\signal-x64\signalrgb.exe => Keine Datei FirewallRules: [{7CC44A30-B8C5-464B-957B-1CABB90726EC}] => (Block) C:\users\nikla\appdata\local\vortxengine\app-2.2.20\signal-x64\signalrgb.exe => Keine Datei FirewallRules: [{88383EDD-5E41-4919-B26E-CD05E12456AE}] => (Block) C:\users\nikla\appdata\local\vortxengine\app-2.2.20\signal-x64\signalrgb.exe => Keine Datei FirewallRules: [{19FAF5F5-977C-477D-9777-62D1E285FBBC}] => (Allow) C:\Program Files (x86)\MouseRecorder\MouseRecorder.exe (Bartels Media GmbH) [Datei ist nicht signiert] FirewallRules: [{6DC4CCBE-78BA-44A8-9A92-618A26E9222F}] => (Allow) C:\Program Files (x86)\MacroRecorder\MacroRecorder.exe (Bartels Media GmbH -> ) FirewallRules: [{C96C59C9-D3FF-44CA-A878-45AC6A588977}] => (Allow) LPort=8029 FirewallRules: [{5A7955DA-9FFD-494F-8F76-09A29BE51830}] => (Allow) LPort=8029 FirewallRules: [{6ABEDCA6-CA8B-48A2-88AD-2975B5CDED61}] => (Allow) LPort=8029 FirewallRules: [{08CBBF9E-4051-4156-B22A-FAA8C9B7E6F8}] => (Allow) LPort=8029 FirewallRules: [{8CD839CA-C2DC-499A-BC70-66A07A4B670B}] => (Allow) LPort=8029 FirewallRules: [{4F893B4B-B1C0-4E32-B839-93EDF6DEBCA1}] => (Allow) LPort=8029 FirewallRules: [{F035234F-1DD1-4A99-891A-4FD54A61DD83}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{BFE3B19D-5CF7-49AA-AF1C-26584EAF2DBD}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{77986E38-C690-45F2-897A-AC261A1CB493}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{AE7BE2F9-EB7D-420C-9190-FD8CE66A41B9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{D09921A6-B4C2-47B1-9EFB-305338AEC13C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{DCE678A4-B087-464C-BC55-2438B4DDE857}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{25E0E862-2DDC-4554-A2D6-ED5F48AF872F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{23C0E494-C7D8-4A8A-B0A9-1DBA3C39434C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{C70E0070-EED6-4743-8F23-24F0D5E4F44E}] => (Allow) LPort=8029 FirewallRules: [{2D8EFA46-F917-434A-9FE0-55944717F719}] => (Allow) LPort=8029 FirewallRules: [{9F1F9C5D-82BC-4AF8-9AAB-BA32DFEB0A4C}] => (Allow) LPort=8029 FirewallRules: [{EA07AE34-42C0-4225-8E89-6E8C11706780}] => (Allow) LPort=8029 FirewallRules: [{84B7094F-DF0A-4762-8BA2-4347FCB7B0D2}] => (Allow) LPort=8029 FirewallRules: [{F8E92263-E320-4B70-9914-58784B1B67EF}] => (Allow) LPort=8029 FirewallRules: [{1BEE7E83-6A9E-4786-876B-9039B0089418}] => (Allow) LPort=8029 FirewallRules: [{C62E67CB-664A-44D7-8FD5-9D36F3C7BB23}] => (Allow) LPort=8029 FirewallRules: [{5A56EE7F-6A35-427E-BA25-9C03D8ECA65A}] => (Allow) LPort=8029 FirewallRules: [{E80A4692-0126-422A-A075-46E1CC99472B}] => (Allow) LPort=8029 FirewallRules: [{01F13636-65BD-4394-80CF-E7B9C2D59148}] => (Allow) LPort=8029 FirewallRules: [{13687E3E-BA51-4819-9D38-CFD7BE21FF64}] => (Allow) LPort=8029 FirewallRules: [TCP Query User{F0D5D6CF-480B-42D8-B585-0117D757CA94}C:\program files\ultimaker cura 5.1.0\ultimaker-cura.exe] => (Allow) C:\program files\ultimaker cura 5.1.0\ultimaker-cura.exe () [Datei ist nicht signiert] FirewallRules: [UDP Query User{92D75EFB-8AA0-4407-A095-E4570EA732A0}C:\program files\ultimaker cura 5.1.0\ultimaker-cura.exe] => (Allow) C:\program files\ultimaker cura 5.1.0\ultimaker-cura.exe () [Datei ist nicht signiert] FirewallRules: [{E5A72416-4AA2-470B-915D-5D114057EA11}] => (Block) C:\program files\ultimaker cura 5.1.0\ultimaker-cura.exe () [Datei ist nicht signiert] FirewallRules: [{35CE294E-15B0-4179-BD93-AAD9544AC33E}] => (Block) C:\program files\ultimaker cura 5.1.0\ultimaker-cura.exe () [Datei ist nicht signiert] FirewallRules: [{BDDC26F3-5174-437F-A925-A7BE74921760}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.193.898.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{2843070A-3B1B-41C1-A2CD-C638E544C60F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.193.898.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{A044263D-ED7C-4EA4-A652-CBE9C62AD9E2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.193.898.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{365A306E-929A-4A82-A811-23D3F490D697}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.193.898.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{F6173E01-D9C8-46D8-B2E7-DD1ED1D23ADB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.193.898.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{99A27CB8-B3B0-4363-AF35-042B7D31AA68}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.193.898.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{92507196-BFC9-4FF0-966E-F761C1D5A7F4}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.193.898.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{CB73BBF1-DA42-42E8-8994-17412A799DA7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.193.898.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{8BE3812E-1EBC-419A-947B-EEA787C4263C}] => (Allow) LPort=8029 FirewallRules: [{88D9E43F-08A0-491D-BB5C-3EC83D199EF7}] => (Allow) LPort=8029 FirewallRules: [{B3C55018-D9C0-4097-BE07-320FFFADA71F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.874.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{CA953AD3-F092-4EC7-BDAF-3FFBE76B8C6A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.874.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{87DF17B9-3B01-47A2-A0F9-8C0AF03618E6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.874.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{DBE64E68-CBB6-4671-99AB-3B7CE72FD779}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.874.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{B0C6C661-0D7E-4B62-8836-EC90F2072B99}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.874.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{11639486-1118-4668-BDA4-2EB32EDBC5FF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.874.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{3A9D311C-41A8-4AE0-9F42-0D42D66F1BFF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.874.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{75D09D76-4283-4B0C-B226-2DBA7D61EEA1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.874.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{745A51DB-39C9-455D-B630-4CA1CBFFEA46}] => (Allow) LPort=8029 FirewallRules: [{FB0B1871-5607-4148-80E0-F2C8421FDBE1}] => (Allow) LPort=8029 FirewallRules: [{FD766BD5-3801-4FB5-897B-8133D8DE5BFA}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) FirewallRules: [{A40078E4-BEA9-4602-927A-74880D1C4C34}] => (Allow) LPort=8029 FirewallRules: [{F2EE4A28-A0CB-487E-A1B9-D27841B93554}] => (Allow) LPort=8029 FirewallRules: [{C22E9D76-74B0-4A7A-A252-DD5A383F5D4F}] => (Allow) LPort=8029 FirewallRules: [{4243D40C-E29B-4958-A504-9E1FC9068E30}] => (Allow) LPort=8029 FirewallRules: [{A08E214B-29B8-456F-96B3-BA84BFE608C1}] => (Allow) LPort=8029 FirewallRules: [{767B54A7-76E9-46C2-94CB-ACDABBC014A0}] => (Allow) LPort=8029 FirewallRules: [{582E9BAC-C1A9-4CAD-81E9-C8D29871C709}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.) FirewallRules: [{1AC72469-09EE-4A64-9D5B-91DEA7902B6B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe (Blackmagic Design Pty Ltd -> ) FirewallRules: [{AC8B3668-257F-4AB6-B97C-9CFE081D0C06}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DaVinciPanelDaemon.exe (Blackmagic Design Pty Ltd -> ) FirewallRules: [{849E15CE-EC40-4CD6-B069-9FA2FD915F62}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe (Blackmagic Design Pty Ltd -> ) FirewallRules: [{B2528A95-C3ED-426F-9FF9-DFBC13D1D44C}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe (Blackmagic Design Pty Ltd -> ) FirewallRules: [{7C6B5737-ED57-4903-88B9-F5D7265E4F1A}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe (Blackmagic Design Pty Ltd -> ) FirewallRules: [{9CD80997-8385-4BB3-8327-D9752FB43350}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe => Keine Datei FirewallRules: [{E4F2AFB0-75CD-4C38-BF31-8B6273231F77}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\fuscript.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.) FirewallRules: [{140E6179-9144-4A05-9887-2B737A2AABA4}] => (Allow) LPort=8029 FirewallRules: [{A78A5FE2-E981-4E61-BDF7-791A239F7EBD}] => (Allow) LPort=8029 FirewallRules: [{CEA9DABD-59BD-42D3-A043-9C7D9185C865}] => (Allow) LPort=8029 FirewallRules: [{EAC25083-32BB-4373-9350-EB44C3A49570}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) FirewallRules: [{5830B0AB-2C75-4B1C-B093-1F716AEC5997}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) FirewallRules: [{16DBED86-571A-4A7F-8EDC-EA8BD1E7CE6C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) FirewallRules: [{2F2491A0-7E71-422E-A53F-3F78C8EB4F5C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) FirewallRules: [{5E827B65-5F58-4E0D-ABA3-3B887E7BF3AF}] => (Allow) C:\Program Files\AusweisApp2\AusweisApp2.exe (Governikus GmbH & Co. KG -> Governikus GmbH & Co. KG) FirewallRules: [AusweisApp2-Firewall-Rule] => (Allow) C:\Program Files\AusweisApp2\AusweisApp2.exe (Governikus GmbH & Co. KG -> Governikus GmbH & Co. KG) FirewallRules: [{F59337E9-230D-4552-BAA3-852887B97690}] => (Allow) LPort=8029 FirewallRules: [{2AB9FB9F-7672-4A71-81DF-36D4168098DF}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{29D22AD5-4A4B-4076-9CA7-9E4D6B06EE20}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{0C705E16-866A-42C8-B4CD-31453DF12C74}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{C566A1A2-D2B3-4210-8727-0F187A0835DC}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{635FB920-D4CB-48ED-B05B-E9229C553542}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{5926AF3F-719B-4A94-A33D-2F653E2CAA82}] => (Allow) LPort=8029 FirewallRules: [{A9C5F967-42BB-4318-A95A-07E169766E72}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{C358D50D-423B-47EA-BF7B-C92094F7A308}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{391A81FB-988F-4AD4-ACCC-0042084B0F54}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{C92E9B09-0437-43F8-9D1A-1D154DC79DC1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{0E2006D7-06AB-4E92-8D2F-A34F54DAE50C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{CFBCBD15-C97A-4251-8E70-58014FD4BEF3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{F0103891-DE8C-4675-BAE8-989CE1629CE5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{F318CC54-ED99-47E3-8DBC-85D87238AB97}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{FB15FCEF-0334-4C7E-9135-2667BFA766A1}] => (Allow) LPort=8029 FirewallRules: [{B5756D3E-81C7-4147-8BA9-A85E99E20ED0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.94.3428.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{CC4B8823-BC72-4A31-B489-3778FC46F36F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.94.3428.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{FC4DD87D-3D2E-4DC4-80C6-16FB3AACA226}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.94.3428.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{2B3BFA61-572C-4BCD-B367-78806A5C5B32}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.94.3428.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{420A2189-EDEB-4913-B384-6C5F2C49DEF1}] => (Allow) LPort=8029 FirewallRules: [TCP Query User{03730C52-D1B4-4F3B-A6BB-30C3E5C64C08}S:\programme\salome_meca\w64\omniorb\bin\x86_win32\omninames.exe] => (Allow) S:\programme\salome_meca\w64\omniorb\bin\x86_win32\omninames.exe => Keine Datei FirewallRules: [UDP Query User{71A7789B-1C90-422A-B3B6-35AE07E625BA}S:\programme\salome_meca\w64\omniorb\bin\x86_win32\omninames.exe] => (Allow) S:\programme\salome_meca\w64\omniorb\bin\x86_win32\omninames.exe => Keine Datei FirewallRules: [TCP Query User{50612FEC-B701-4BBE-ACDE-0A8197C655B8}S:\programme\salome_meca\w64\ext\bin\salome_connectionmanagerserver.exe] => (Allow) S:\programme\salome_meca\w64\ext\bin\salome_connectionmanagerserver.exe => Keine Datei FirewallRules: [UDP Query User{961E0C8D-C418-4E18-8145-AEF328C76663}S:\programme\salome_meca\w64\ext\bin\salome_connectionmanagerserver.exe] => (Allow) S:\programme\salome_meca\w64\ext\bin\salome_connectionmanagerserver.exe => Keine Datei FirewallRules: [TCP Query User{1C20122B-D5B9-4DBB-9704-BBB67519016E}S:\programme\salome_meca\w64\ext\bin\salome_launcherserver.exe] => (Allow) S:\programme\salome_meca\w64\ext\bin\salome_launcherserver.exe => Keine Datei FirewallRules: [UDP Query User{B56931C8-FAE8-4D7C-8577-C23A276E4E7F}S:\programme\salome_meca\w64\ext\bin\salome_launcherserver.exe] => (Allow) S:\programme\salome_meca\w64\ext\bin\salome_launcherserver.exe => Keine Datei FirewallRules: [TCP Query User{AF5FCC6D-21D3-4000-848C-827E472D5C48}S:\programme\salome_meca\w64\ext\bin\salome_session_server.exe] => (Allow) S:\programme\salome_meca\w64\ext\bin\salome_session_server.exe => Keine Datei FirewallRules: [UDP Query User{F42DCCFE-E0E4-4704-8768-CF4BAED954BC}S:\programme\salome_meca\w64\ext\bin\salome_session_server.exe] => (Allow) S:\programme\salome_meca\w64\ext\bin\salome_session_server.exe => Keine Datei FirewallRules: [{ADCC93D0-B222-4176-9FD5-BE8A4D583408}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\110.0.1587.63\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{0D2D25C1-0304-4B21-83BA-F8FCF15B709E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{9FFE4112-CFE2-4544-B81E-7E57517C931D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{D92AEFE7-67F5-4CA1-AA4F-7DCAC82D07E1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{D2F887A4-608A-4C4A-A8B3-7B9A3D3F8B3E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{6A8EECC2-6B02-48F8-BC87-C74D24B1E103}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{BFD3DD13-4D80-4A95-8CF9-F8747B94B4CA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{2C3F8301-A82C-4ADD-8C17-2A9C50B0A7D1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{D18D583C-F896-4CA6-A218-BF9DEF41F01E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{A2FFA6A9-5BC2-4D48-8CBE-4E8FB725DC75}] => (Allow) LPort=8029 FirewallRules: [{84DBE6C6-BEAD-411B-832D-D8A8AD5AFA5D}] => (Allow) LPort=8029 FirewallRules: [{ACC6A380-8CA2-42AF-9A29-46DEBDBA48CE}] => (Allow) LPort=8029 FirewallRules: [{AA0EA586-DF2E-443A-983E-0C0121C20ACB}] => (Allow) LPort=8029 FirewallRules: [{6B7B86E1-A1BE-49D5-8763-F16DED866BBA}] => (Allow) LPort=8029 FirewallRules: [{A293B013-D456-4628-946A-2078944CA5F4}] => (Allow) LPort=8029 FirewallRules: [{EED0E56A-5EB9-4B33-8933-42CDF5BC2C03}] => (Allow) C:\Program Files (x86)\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [{C116202A-288C-43C4-B9A5-1A16F84536E2}] => (Allow) C:\Program Files (x86)\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [{973DF13F-7DD2-471E-B4E2-FB0A72761654}] => (Allow) C:\Program Files (x86)\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [{B1B7E5C7-2EB2-428D-AF6D-04FA1C80AE7F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{58D57D73-87B1-4993-A038-DE501322DB3D}] => (Allow) LPort=8029 FirewallRules: [{E9B078DC-A68B-415E-9F17-D0ACC5A9FFA3}] => (Allow) LPort=8029 FirewallRules: [{7888AADD-760C-48F2-8C3B-87210232582C}] => (Allow) C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) FirewallRules: [{04A3F213-9B14-44AD-BE23-C3C9F556C78D}] => (Allow) C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) FirewallRules: [{8407BBAF-D50B-44F1-9136-1B96C8E16EA4}] => (Allow) LPort=8029 ==================== Wiederherstellungspunkte ========================= 08-03-2023 18:34:16 Geplanter Prüfpunkt ==================== Fehlerhafte Geräte im Gerätemanager ============ Name: High Definition Audio Bus Description: High Definition Audio Bus Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318} Manufacturer: AMD Service: HDAudBus Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19) Resolution: A registry problem was detected. This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options: On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver. Name: Cisco AnyConnect Virtual Miniport Adapter for Windows x64 Description: Cisco AnyConnect Virtual Miniport Adapter for Windows x64 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: vpnva Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Fehlereinträge in der Ereignisanzeige: ======================== Applikationsfehler: ================== Error: (03/10/2023 10:30:34 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: Aac3572MbHal_x86.exe, Version: 1.2.8.0, Zeitstempel: 0x61c29640 Name des fehlerhaften Moduls: combase.dll, Version: 10.0.19041.2673, Zeitstempel: 0xb3862aeb Ausnahmecode: 0xc0000005 Fehleroffset: 0x000dabd9 ID des fehlerhaften Prozesses: 0x3468 Startzeit der fehlerhaften Anwendung: 0x01d952a0d9efadef Pfad der fehlerhaften Anwendung: C:\Program Files\ASUS\AacMB\Aac3572MbHal_x86.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\combase.dll Berichtskennung: 414f62e0-db3b-4bb0-84a0-56dfccd348e0 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (03/10/2023 10:03:02 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: OverwolfUpdater.exe, Version: 0.166.1.13, Zeitstempel: 0x602a3be7 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.19041.2546, Zeitstempel: 0xe8e9ac9b Ausnahmecode: 0xe0434352 Fehleroffset: 0x000000000002cd29 ID des fehlerhaften Prozesses: 0x47f4 Startzeit der fehlerhaften Anwendung: 0x01d95393b3c1faf7 Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll Berichtskennung: fd344a76-42f4-4f85-9b86-8112d179c60b Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (03/10/2023 10:03:02 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Anwendung: OverwolfUpdater.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet. Ausnahmeinformationen: System.Security.Principal.IdentityNotMappedException bei System.Security.Principal.NTAccount.Translate(System.Security.Principal.IdentityReferenceCollection, System.Type, Boolean) bei System.Security.Principal.NTAccount.Translate(System.Type) bei System.Security.AccessControl.CommonObjectSecurity.ModifyAccess(System.Security.AccessControl.AccessControlModification, System.Security.AccessControl.AccessRule, Boolean ByRef) bei System.Security.AccessControl.CommonObjectSecurity.AddAccessRule(System.Security.AccessControl.AccessRule) bei OverwolfUpdater.Program.SetFolderPermissions() bei OverwolfUpdater.Program.Main(System.String[]) Error: (03/10/2023 06:03:02 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: OverwolfUpdater.exe, Version: 0.166.1.13, Zeitstempel: 0x602a3be7 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.19041.2546, Zeitstempel: 0xe8e9ac9b Ausnahmecode: 0xe0434352 Fehleroffset: 0x000000000002cd29 ID des fehlerhaften Prozesses: 0x3310 Startzeit der fehlerhaften Anwendung: 0x01d953722cb0cc54 Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll Berichtskennung: 7965746f-2c31-45b3-a920-049bfac4edce Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (03/10/2023 06:03:02 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Anwendung: OverwolfUpdater.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet. Ausnahmeinformationen: System.Security.Principal.IdentityNotMappedException bei System.Security.Principal.NTAccount.Translate(System.Security.Principal.IdentityReferenceCollection, System.Type, Boolean) bei System.Security.Principal.NTAccount.Translate(System.Type) bei System.Security.AccessControl.CommonObjectSecurity.ModifyAccess(System.Security.AccessControl.AccessControlModification, System.Security.AccessControl.AccessRule, Boolean ByRef) bei System.Security.AccessControl.CommonObjectSecurity.AddAccessRule(System.Security.AccessControl.AccessRule) bei OverwolfUpdater.Program.SetFolderPermissions() bei OverwolfUpdater.Program.Main(System.String[]) Error: (03/10/2023 02:03:02 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: OverwolfUpdater.exe, Version: 0.166.1.13, Zeitstempel: 0x602a3be7 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.19041.2546, Zeitstempel: 0xe8e9ac9b Ausnahmecode: 0xe0434352 Fehleroffset: 0x000000000002cd29 ID des fehlerhaften Prozesses: 0x1ae4 Startzeit der fehlerhaften Anwendung: 0x01d95350a59d498e Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll Berichtskennung: f6f1881d-377b-4459-b818-2c04b8775945 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (03/10/2023 02:03:02 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Anwendung: OverwolfUpdater.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet. Ausnahmeinformationen: System.Security.Principal.IdentityNotMappedException bei System.Security.Principal.NTAccount.Translate(System.Security.Principal.IdentityReferenceCollection, System.Type, Boolean) bei System.Security.Principal.NTAccount.Translate(System.Type) bei System.Security.AccessControl.CommonObjectSecurity.ModifyAccess(System.Security.AccessControl.AccessControlModification, System.Security.AccessControl.AccessRule, Boolean ByRef) bei System.Security.AccessControl.CommonObjectSecurity.AddAccessRule(System.Security.AccessControl.AccessRule) bei OverwolfUpdater.Program.SetFolderPermissions() bei OverwolfUpdater.Program.Main(System.String[]) Error: (03/09/2023 05:04:27 PM) (Source: MSSQL$TEW_SQLEXPRESS) (EventID: 8317) (User: ) Description: Cannot query value 'First Counter' associated with registry key 'HKLM\SYSTEM\CurrentControlSet\Services\MSSQL$TEW_SQLEXPRESS\Performance'. SQL Server performance counters are disabled. Systemfehler: ============= Error: (03/11/2023 01:32:08 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-***GFFN) Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (03/11/2023 01:32:08 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-***GFFN) Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (03/11/2023 01:32:08 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-***GFFN) Description: Der Server "{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (03/11/2023 01:32:07 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-***GFFN) Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (03/11/2023 01:32:07 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-***GFFN) Description: Der Server "{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (03/11/2023 01:32:07 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-***GFFN) Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (03/11/2023 01:32:07 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-***GFFN) Description: Der Server "{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (03/11/2023 01:32:07 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-***GFFN) Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Windows Defender: ================ Date: 2023-03-08 12:29:24 Description: Der überwachte Ordnerzugriff hat C:\Program Files\Norton Security\Engine\22.23.1.21\cltLMH.exe daran gehindert, Änderungen am Speicher durchzuführen. Erkennungszeit: 2023-03-08T11:29:24.986Z Benutzer: NT-AUTORITÄT\SYSTEM Pfad: \Device\Harddisk1\DR1 Name des Prozesses: C:\Program Files\Norton Security\Engine\22.23.1.21\cltLMH.exe Sicherheitsversion: 1.383.1161.0 Modulversion: 1.1.20000.2 Produktversion: 4.18.2301.6 Date: 2023-03-08 00:56:10 Description: Der überwachte Ordnerzugriff hat C:\Program Files (x86)\LightingService\LightingService.exe daran gehindert, Änderungen am Speicher durchzuführen. Erkennungszeit: 2023-03-07T23:56:10.573Z Benutzer: NT-AUTORITÄT\SYSTEM Pfad: \Device\Harddisk0\DR0 Name des Prozesses: C:\Program Files (x86)\LightingService\LightingService.exe Sicherheitsversion: 1.383.1161.0 Modulversion: 1.1.20000.2 Produktversion: 4.18.2301.6 Date: 2023-03-07 20:49:06 Description: Der überwachte Ordnerzugriff hat C:\Program Files (x86)\LightingService\LightingService.exe daran gehindert, Änderungen am Speicher durchzuführen. Erkennungszeit: 2023-03-07T19:49:06.627Z Benutzer: NT-AUTORITÄT\SYSTEM Pfad: \Device\Harddisk0\DR0 Name des Prozesses: C:\Program Files (x86)\LightingService\LightingService.exe Sicherheitsversion: 1.383.1161.0 Modulversion: 1.1.20000.2 Produktversion: 4.18.2301.6 Date: 2023-03-07 09:59:35 Description: Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet. Überprüfungs-ID: {307B58EF-359D-4A33-81DA-EBCD9F16FF4E} Überprüfungstyp: Antimalware Überprüfungsparameter: Vollständige Überprüfung Benutzer: DESKTOP-***GFFN\*** Date: 2023-03-07 09:52:15 Description: C:\Windows\System32\svchost.exe wurde durch den überwachten Ordnerzugriff daran gehindert, S:\Videos zu ändern. Erkennungszeit: 2023-03-07T08:52:15.366Z Benutzer: DESKTOP-***GFFN\*** Pfad: S:\Videos Prozessname: C:\Windows\System32\svchost.exe Sicherheitsversion: 1.383.1124.0 Modulversion: 1.1.20000.2 Produktversion: 4.18.2301.6 CodeIntegrity: =============== Date: 2023-03-11 11:22:24 Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume6\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2023-03-11 11:20:40 Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume6\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements. ==================== Speicherinformationen =========================== BIOS: American Megatrends Inc. 0906 03/22/2017 Hauptplatine: ASUSTeK COMPUTER INC. STRIX Z270E GAMING Prozessor: Intel(R) Core(TM) i7-7700K CPU @ 4.20GHz Prozentuale Nutzung des RAM: 32% Installierter physikalischer RAM: 32692.97 MB Verfügbarer physikalischer RAM: 22046.8 MB Summe virtueller Speicher: 37556.97 MB Verfügbarer virtueller Speicher: 23021.7 MB ==================== Laufwerke ================================ Drive c: () (Fixed) (Total:232.29 GB) (Free:76.18 GB) (Model: Samsung SSD 850 EVO 250GB) NTFS Drive d: (Volume) (Fixed) (Total:931.39 GB) (Free:576.12 GB) (Model: WDC WD10EZEX-22MFCA0) NTFS Drive s: (Volume) (Fixed) (Total:1863 GB) (Free:908.67 GB) (Model: ST2000DM008-2FR102) NTFS \\?\Volume{ec611612-131e-410f-808f-564f669b62a8}\ () (Fixed) (Total:0.49 GB) (Free:0.04 GB) NTFS \\?\Volume{701cc1a9-03ad-4eca-a9bf-a127c10ae69a}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32 ==================== MBR & Partitionstabelle ==================== ========================================================== Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000) Partition: GPT. ========================================================== Disk: 1 (Protective MBR) (Size: 232.9 GB) (Disk ID: 00000000) Partition: GPT. ========================================================== Disk: 2 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000) Partition: GPT. ==================== Ende von Addition.txt ======================= |
12.03.2023, 15:01 | #4 |
/// TB-Ausbilder | Windows 10: Passwort-Trojaner wirklich weg?Mein Name ist Matthias und ich werde dir bei der Analyse und Bereinigung deines Systems helfen. Schritt 1 Führe AdwCleaner gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei. Schritt 2
Bitte poste mit deiner nächsten Antwort:
|
13.03.2023, 13:10 | #5 |
| Windows 10: Passwort-Trojaner wirklich weg?Code:
ATTFilter # ------------------------------- # Malwarebytes AdwCleaner 8.4.0.0 # ------------------------------- # Build: 08-30-2022 # Database: 2022-10-10.1 (Cloud) # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Clean # ------------------------------- # Start: 03-13-2023 # Duration: 00:00:01 # OS: Windows 10 (Build 19045.2673) # Cleaned: 8 # Failed: 0 ***** [ Services ] ***** No malicious services cleaned. ***** [ Folders ] ***** No malicious folders cleaned. ***** [ Files ] ***** No malicious files cleaned. ***** [ DLL ] ***** No malicious DLLs cleaned. ***** [ WMI ] ***** No malicious WMI cleaned. ***** [ Shortcuts ] ***** Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Siemens NX Launcher.lnk ***** [ Tasks ] ***** No malicious tasks cleaned. ***** [ Registry ] ***** Deleted HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Deleted HKCU\Software\csastats Deleted HKLM\Software\Classes\TypeLib\{A520B992-6390-4231-9C89-F06B3587AB80} Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|ProductUpdater Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{A520B992-6390-4231-9C89-F06B3587AB80} ***** [ Chromium (and derivatives) ] ***** Deleted kbhfoiaobflocffnclkigpkeoagheimn ***** [ Chromium URLs ] ***** Deleted Websuche ***** [ Firefox (and derivatives) ] ***** No malicious Firefox entries cleaned. ***** [ Firefox URLs ] ***** No malicious Firefox URLs cleaned. ***** [ Hosts File Entries ] ***** No malicious hosts file entries cleaned. ***** [ Preinstalled Software ] ***** No Preinstalled Software cleaned. ************************* [+] Delete Tracing Keys [+] Reset Winsock ************************* AdwCleaner[S00].txt - [2022 octets] - [13/03/2023 13:02:03] ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ########## Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-03-2023 durchgeführt von *** (Administrator) auf DESKTOP-***GFFN (13-03-2023 13:07:15) Gestartet von D:\Downloads Geladene Profile: *** Plattform: Microsoft Windows 10 Pro Version 22H2 19045.2673 (X64) Sprache: Deutsch (Deutschland) Standard-Browser: Chrome Start-Modus: Normal ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.UserSessionHelper.exe (explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <20> (explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe (services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe (services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe (services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (services.exe ->) (Cisco Systems, Inc. -> Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco Secure Client\vpnagent.exe (services.exe ->) (Corsair Components, Inc. -> Corsair Components, Inc.) C:\Program Files (x86)\CorsairLink4\CorsairLink4.Service.exe (services.exe ->) (Geek Software GmbH -> Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\SOLIDWORKS Electrical\MSSQL12.TEW_SQLEXPRESS\MSSQL\Binn\sqlservr.exe (services.exe ->) (NortonLifeLock Inc. -> NortonLifelock Inc.) C:\Program Files\Norton Security\Engine\22.23.1.21\NortonSecurity.exe <2> (services.exe ->) (NortonLifeLock Inc. -> NortonLifeLock Inc.) C:\Program Files\Norton Security\Engine\22.23.1.21\nsWscSvc.exe (services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (svchost.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files\ASUS\KINGSTON_Aac_DRAM\AacKingstonDramHal_x86.exe (svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Compputer Inc.) C:\Program Files\ASUS\AacMB\Aac3572MbHal_x86.exe (svchost.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) C:\Program Files\ASUS\AacExtCard\extensionCardHal_x86.exe (svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files\ASUS\ASUS_Aac_DRAM\Aac3572DramHal_x86.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.823.1271.0_x64__8wekyb3d8bbwe\GameBar.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.823.1271.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2> (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\backgroundTaskHost.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe (svchost.exe ->) (Spotify AB) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\XboxGameBarSpotify.exe ==================== Registry (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation -> Microsoft Corporation) HKLM\...\Run: [Flight Yoke System] => C:\Program Files\Logitech\Flight Yoke System\Yoke_Profiler.exe [19456 2018-02-14] (Logitech) [Datei ist nicht signiert] HKLM\...\Run: [3DxWare Service] => C:\Program Files\3Dconnexion\3DxWare\3DxWinCore\3DxService.exe [2518584 2020-09-07] (3Dconnexion SAM -> 3Dconnexion, INC) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9235936 2017-10-19] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [Sonic Studio 3] => C:\Program Files\ASUSTeKcomputer.Inc\Sonic Suite 3\Foundation\SS3svc32.exe [1233920 2017-10-18] (ASUSTeK COMPUTER INC.) [Datei ist nicht signiert] HKLM-x32\...\Run: [Corsair Utility Engine] => C:\Program Files (x86)\Corsair\Corsair Utility Engine\CUE.exe [20369616 2017-10-11] (Corsair Components, Inc. -> Corsair Components, Inc.) HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [704424 2017-06-15] (Autodesk, Inc -> Autodesk, Inc.) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [235624 2015-01-09] (Canon Inc. -> CANON INC.) HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [433800 2018-09-17] (Geek Software GmbH -> Geek Software GmbH) HKLM-x32\...\Run: [Spectrum] => C:\Program Files (x86)\G.SKILL\Trident Z Lighting Control\HID.exe [1747048 2022-05-10] (G. SKILL International Enterprise Co., Ltd. -> G.SKILL Inc.) HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [138214768 2022-11-03] (Microsoft Corporation -> Microsoft Corporation) HKLM-x32\...\Run: [Cisco Secure Client] => C:\Program Files (x86)\Cisco\Cisco Secure Client\UI\csc_ui.exe [2999392 2022-10-17] (Cisco Systems, Inc. -> Cisco Systems, Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [711288 2023-01-09] (Oracle America, Inc. -> Oracle Corporation) HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Beschränkung <==== ACHTUNG HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Beschränkung <==== ACHTUNG HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2628488 2023-03-09] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [CorsairLink4] => C:\Program Files (x86)\CorsairLink4\CorsairLink4.exe [27146448 2018-03-30] (Corsair Components, Inc. -> Corsair Components, Inc.) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [WallpaperEngine] => D:\SteamLibrary\steamapps\common\wallpaper_engine\wallpaper32.exe [2918904 2020-09-16] (Kristjan Skutta -> ) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [1746776 2021-02-15] (Overwolf Ltd -> Overwolf Ltd.) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [Lync] => "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe" /fromrunkey (Keine Datei) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [CiscoMeetingDaemon] => C:\Users\nikla\AppData\Local\WebEx\WebexHost.exe [8040032 2023-02-22] (Cisco WebEx LLC -> Cisco Webex LLC) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [NordVPN] => C:\Program Files\NordVPN\NordVPN.exe [280440 2021-06-06] (nordvpn s.a. -> TEFINCOM S.A.) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [CorsairEffectsEngine] => "C:\Users\nikla\AppData\Local\CorsairEffectsEngine\Update.exe" --processStart CorsairEffectsEngine.exe (Keine Datei) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [SignalRgb] => "C:\Users\nikla\AppData\Local\VortxEngine\SignalRgbLauncher.exe" --silent (Keine Datei) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [MicrosoftEdgeAutoLaunch_ALB] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --launcher=on_logon_windows [4242384 2023-03-09] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [MicrosoftEdgeAutoLaunch_BD744D00B7947BA4CE821E1D00C3AA26] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4242384 2023-03-09] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\nikla\AppData\Local\Microsoft\Teams\Update.exe [2587456 2023-02-16] (Microsoft 3rd Party Application Component -> Microsoft Corporation) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [GoogleContactSync] => C:\Program Files (x86)\GO Contact Sync Mod\GOContactSync.exe [3342848 2022-08-06] (WebGear Ltd, New Zealand + Create Software + Stru.be + saller.NET + Big-R + obelix30) [Datei ist nicht signiert] HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [GoogleChromeAutoLaunch_333DA321688CFEFA9F9D34AB6803D568] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window /prefetch:5 [3221272 2023-03-04] (Google LLC -> Google LLC) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\MountPoints2: {2340272e-be10-11eb-974e-e8d11bfb5684} - "E:\OnePlus_setup.exe" /s HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\MountPoints2: {3e92ea2f-46ca-11ec-9762-e8d11bfb5684} - "J:\OnePlus_setup.exe" /s HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\MountPoints2: {8ee68233-cc50-11e7-9519-107b44f0e531} - "E:\OnePlus_setup.exe" /s HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\MountPoints2: {dbd5ed5b-d2ca-11ec-9784-e8d11bfb5684} - "E:\OnePlus_setup.exe" /s HKLM\...\Windows x64\Print Processors\Canon iP7200 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBA.DLL [30208 2012-04-16] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Windows x64\Print Processors\Canon MG5700 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDCS.DLL [30208 2015-03-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Canon BJ Language Monitor iP7200 series: C:\WINDOWS\system32\CNMLMBA.DLL [389120 2012-04-16] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Canon BJ Language Monitor iP7200 series XPS: C:\WINDOWS\system32\CNMXLMBA.DLL [392192 2012-04-16] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5700 series: C:\WINDOWS\system32\CNMLMCS.DLL [406528 2015-03-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Canon BJNP Port: C:\WINDOWS\system32\CNMN6PPM.DLL [375296 2015-03-17] (CANON INC.) [Datei ist nicht signiert] HKLM\...\Print\Monitors\pdfcmon: C:\WINDOWS\system32\pdfcmon.dll [181248 2023-03-08] (pdfforge GmbH) [Datei ist nicht signiert] HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\111.0.5563.65\Installer\chrmstp.exe [2023-03-08] (Google LLC -> Google LLC) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CADClick® Click2CAD Toolbox.lnk [2019-05-16] ShortcutTarget: CADClick® Click2CAD Toolbox.lnk -> C:\Program Files (x86)\KiM GmbH\CADClick Click2CAD Toolbox\CADClick_Click2CAD.exe (KiM GmbH) [Datei ist nicht signiert] Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Imaging Edge Desktop.lnk [2020-05-11] ShortcutTarget: Imaging Edge Desktop.lnk -> C:\Program Files\Sony\Imaging Edge Desktop\ied.exe (Sony Imaging Products & Solutions Inc. -> Sony) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SOLIDWORKS 2021 Fast Start.lnk [2022-02-17] ShortcutTarget: SOLIDWORKS 2021 Fast Start.lnk -> C:\Windows\Installer\{9C0A2571-4AAE-4FEE-B673-038B38B85EFC}\NewShortcut2_87EDF6C81D0A4B7B84F42FE0C6A9D608.exe (Flexera) [Datei ist nicht signiert] Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SOLIDWORKS Hintergrund-Downloader.lnk [2022-02-16] ShortcutTarget: SOLIDWORKS Hintergrund-Downloader.lnk -> C:\Program Files (x86)\Common Files\SOLIDWORKS Installations-Manager\BackgroundDownloading\sldBgDwld.exe (Dassault Systemes SolidWorks Corp. -> Dassault Systèmes SolidWorks Corporation) Startup: C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2022-06-30] ShortcutTarget: An OneNote senden.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Keine Datei) Startup: C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Corsair Effects Engine.appref-ms [2018-07-26] () [Datei ist nicht signiert] InternetURL: C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Google Kalender.url -> URL: hxxps://calendar.google.com/calendar/ Startup: C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Luminar Neo.lnk [2023-02-06] ShortcutTarget: Luminar Neo.lnk -> C:\Program Files\Skylum\Luminar Neo\Luminar Neo.exe (Skylum Software USA, Inc. -> Skylum) Startup: C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Outlook.lnk [2021-09-20] ShortcutTarget: Outlook.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE (Keine Datei) GroupPolicy: Beschränkung ? <==== ACHTUNG Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============ (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {0B6F4C12-5E96-481D-AE0D-EDCFB7B8E788} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [61624 2020-07-08] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) Task: {1A955452-8B04-4B8F-9B50-2CE76A1D699C} - System32\Tasks\Norton AntiVirus Plus\Norton AntiVirus Error Analyzer => C:\Program Files\Norton Security\Engine\22.23.1.21\SymErr.exe [379024 2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) Task: {260597EE-1EFE-4E62-888B-4E59D0F8DA3F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-02-23] (Google Inc -> Google Inc.) Task: {26EBBFC4-6B4F-422F-A559-2F8D1F1CD458} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\nikla\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [21737944 2023-03-10] (ESET, spol. s r.o. -> ESET) Task: {359EB1CC-3032-4ABD-8F07-010EBD31ED9D} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [3825768 2023-02-11] (Microsoft Corporation -> Microsoft Corporation) Task: {3EE56148-692A-4A39-91D0-6D395FF694EA} - System32\Tasks\SS3svc32Run => C:\Program Files\ASUSTeKcomputer.Inc\Sonic Suite 3\Foundation\SS3svc32.exe [1233920 2017-10-18] (ASUSTeK COMPUTER INC.) [Datei ist nicht signiert] Task: {4A0C5A39-B5CF-4EFF-8083-2A2726851F33} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-341515215-1173906820-3305953664-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4206000 2023-03-09] (Microsoft Corporation -> Microsoft Corporation) Task: {4C443E01-1E76-4567-BA7B-489C2F60C35D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1560056 2023-02-01] (Adobe Inc. -> Adobe Inc.) Task: {4F6AFD6C-C87D-48BF-9DBC-8B8C273F07BA} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\IntelPTTEKRecertification.exe [818008 2021-09-15] (Intel Corporation -> Intel(R) Corporation) Task: {506870FF-3B3C-4567-A207-2258BE7CE6CB} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8519680 2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Task: {6DB1BA17-3081-49C1-9CE0-9D9BF165BEE4} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [1627648 2020-07-09] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert] Task: {6F46D660-26A9-4158-86A8-33D675682E08} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton AntiVirus\Upgrade.exe [2353000 2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) Task: {71F7958C-0126-46C4-ADAC-73789EF1CA48} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [64408 2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Task: {74433CBB-1D30-465D-83EB-22C491A97D72} - System32\Tasks\Norton AntiVirus Plus\Norton AntiVirus Error Processor => C:\Program Files\Norton Security\Engine\22.23.1.21\SymErr.exe [379024 2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) Task: {7A711CB0-82DC-4393-BFC2-B22145958FD5} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [69304 2020-07-08] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) Task: {7B3410FE-A596-4782-963C-FBB9F876ED93} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1627648 2020-07-09] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert] Task: {89E0A7DB-FA1D-4170-96DC-F7AE74A0B560} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [142216 2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Task: {89EF1B3B-71B0-431F-AA2E-B627F4A2EBCB} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26334600 2023-02-11] (Microsoft Corporation -> Microsoft Corporation) Task: {9263973F-C98E-4E95-A086-817F0C1C2751} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156968 2019-02-23] (Google Inc -> Google Inc.) Task: {974A70E0-A94A-48B7-80EA-1DF4109BB04B} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26334600 2023-02-11] (Microsoft Corporation -> Microsoft Corporation) Task: {9F209321-9225-4158-A4BB-5BB54AA08B35} - System32\Tasks\SS3svc64Run => C:\Program Files\ASUSTeKcomputer.Inc\Sonic Suite 3\Foundation\x64\SS3svc64.exe [811520 2017-10-18] (ASUSTeK COMPUTER INC.) [Datei ist nicht signiert] Task: {A2186A0F-BC52-4AF9-99C2-39848ABA3D3E} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4206000 2023-03-09] (Microsoft Corporation -> Microsoft Corporation) Task: {AB8691ED-C0C1-4B5F-A562-1F25C2FE6E3A} - System32\Tasks\ASUS\AsRogAuraGpuDllServer => C:\Program Files (x86)\ASUS\AURA\AsRogAuraGpuDllServer.exe [247256 2016-12-16] (ASUSTeK Computer Inc. -> ) Task: {B6E6057C-4802-4A57-8875-434945C57CBE} - System32\Tasks\ASUS\ASUSUpdateTaskMachineCore => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [153112 2022-10-31] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) Task: {BCDDB0B5-9ED1-48F7-A595-9D3875ADF37F} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1627648 2020-07-09] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert] Task: {BF053508-657C-438D-A3EB-75A46F177903} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8519680 2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Task: {BF0FCB18-B0F1-4441-8FF5-30C4484F9369} - System32\Tasks\Driver Booster SkipUAC (***) => C:\Program Files (x86)\IObit\Driver Booster\5.1.0\DriverBooster.exe /skipuac (Keine Datei) Task: {C0EB3C26-4126-49D2-9F28-8EAB094117D9} - System32\Tasks\MATLAB R2021b Startup Accelerator => C:\Program Files\MATLAB\R2021b\bin\win64\MATLABStartupAccelerator.exe (Keine Datei) Task: {C959DDE1-4A51-46DB-90E0-997E20F3677D} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton Security\Engine\22.23.1.21\WSCStub.exe [646520 2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) Task: {D463F2FA-A2DF-49B7-A6EC-64272BBB4CDD} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [142216 2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Task: {D7CE29BA-5920-4045-9E4E-6A832C3F3E8D} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2491736 2021-02-15] (Overwolf Ltd -> Overwolf LTD) Task: {DB4D2634-EAB0-4270-AC9D-5D675F01F901} - System32\Tasks\Norton AntiVirus Plus\Norton AntiVirus Autofix => C:\Program Files\Norton Security\Engine\22.23.1.21\SymErr.exe [379024 2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) Task: {E35B0485-9AFC-403B-93A7-EE830ADBAFE7} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\nikla\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [21737944 2023-03-10] (ESET, spol. s r.o. -> ESET) Task: {E7A48BD2-AD71-4D6F-93CB-C836C20108CE} - System32\Tasks\MATLAB R2022b Startup Accelerator => S:\Programme\MATLAB\R2022b\bin\win64\MATLABStartupAccelerator.exe [98816 2022-06-29] () [Datei ist nicht signiert] Task: {EB0CCE20-D7A7-4D04-81B0-6FADAB93F22D} - System32\Tasks\ASUS\Framework Service => C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe [43797544 2022-09-01] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) Task: {EF243A99-6D8D-47B7-AF56-F5615BF3397A} - System32\Tasks\ASUS\ASUSUpdateTaskMachineUA => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [153112 2022-10-31] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\MATLAB R2021b Startup Accelerator.job => C:\Program Files\MATLAB\R2021b\bin\win64\MATLABStartupAccelerator.exe C:\Program Files\MATLAB\R2021b#DESKTOP-***GFFN\***.Sta Task: C:\WINDOWS\Tasks\MATLAB R2022b Startup Accelerator.job => S:\Programme\MATLAB\R2022b\bin\win64\MATLABStartupAccelerator.exeS:\Programme\MATLAB\R2022b#DESKTOP-***GFFN\***.Sta ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.) Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{9bca827c-244f-4b38-98cd-b5ddd81e8ff6}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{a5c95a1a-f2a2-4aca-89e9-0b441b481868}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{dec42306-addf-4283-be25-2fd81a0d81da}: [DhcpNameServer] 192.168.0.1 Edge: ======= DownloadDir: D:\Downloads Edge Notifications: HKU\S-1-5-21-341515215-1173906820-3305953664-1001 -> hxxps://calendar.google.com Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden] Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden] Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden] Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden] Edge Profile: C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default [2023-03-09] Edge Extension: (Cisco Webex Extension) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cmihkeafcknlomclapaddfljaeegfbdl [2021-02-26] Edge Extension: (Checker Plus for Google Calendar™) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fbongfbliechkeaegkjfehhimpenoani [2023-03-05] Edge Extension: (McAfee® WebAdvisor) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fdhgeoginicibhagdmblfikbgbkahibd [2023-03-05] Edge Extension: (PAYBACK Internet Assistent) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fmgfmfcpbgahfllkogflflfebdbfogga [2022-07-13] Edge Extension: (Return YouTube Dislike) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gebbhagfogifgggkldgodflihgfeippi [2023-02-20] Edge Extension: (In Google Drive speichern) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmbmikajjgmnabiglmofipeabaddhgne [2023-03-05] Edge Extension: (Tampermonkey) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\iikmkjmpaadaobahmlepeloendndfphd [2023-02-03] Edge Extension: (Chrome-Erweiterung für Google Notizen) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\lpcaedmchfhocbbapmcbpinfpgnhiddi [2023-03-08] Edge Extension: (Citavi Picker) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mielbhbkcliienpdicphhecpodcaeefg [2022-06-24] Edge Extension: (AdBlock*– der beste Ad-Blocker) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2023-03-05] Edge Extension: (I don't care about cookies) - C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\oholpbloipjbbhlhohaebmieiiieioal [2023-02-20] Edge HKLM-x32\...\Edge\Extension: [cmihkeafcknlomclapaddfljaeegfbdl] Edge HKLM-x32\...\Edge\Extension: [mielbhbkcliienpdicphhecpodcaeefg] FireFox: ======== FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi => nicht gefunden FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi => nicht gefunden FF Plugin: 3ds.com/ComposerPlayerWebPlugin_x86_64 -> S:\Programme\SOLIDWORKS Corp\SOLIDWORKS Composer\Bin\npcomposerplayerwebplugin.dll [2021-10-29] (DASSAULT SYSTEMES SE -> Dassault Systemes) FF Plugin: @java.com/DTPlugin,version=11.361.2 -> C:\Program Files\Java\jre1.8.0_361\bin\dtplugin\npDeployJava1.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.361.2 -> C:\Program Files\Java\jre1.8.0_361\bin\plugin2\npjp2.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN) FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [Keine Datei] FF Plugin-x32: 3ds.com/ComposerPlayerWebPlugin -> S:\Programme\SOLIDWORKS Corp\SOLIDWORKS Composer\Bin\x86\npcomposerplayerwebplugin.dll [2021-10-29] (DASSAULT SYSTEMES SE -> Dassault Systemes) FF Plugin-x32: @java.com/DTPlugin,version=11.361.2 -> C:\Program Files (x86)\Java\jre1.8.0_361\bin\dtplugin\npDeployJava1.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.361.2 -> C:\Program Files (x86)\Java\jre1.8.0_361\bin\plugin2\npjp2.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @ptc.com/IsoView -> C:\Program Files (x86)\Common Files\PTC\npisoview.dll [2016-11-29] (PTC Inc. -> PTC Inc.) FF Plugin-x32: @ptc.com/ProductViewLite -> C:\Program Files (x86)\Common Files\PTC\np6_pvapplite9.dll [2016-11-29] (PTC Inc. -> PTC) FF Plugin-x32: @webex.com/npatgpc -> C:\Program Files (x86)\Webex\npatgpc.dll [2021-01-29] (Cisco WebEx LLC -> Cisco WebEx LLC) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2023-03-02] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [Keine Datei] Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default [2023-03-13] CHR Extension: (Just Black) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\aghfnjkcakhmadgdomlmlhhaocbkloab [2023-03-06] CHR Extension: (Tampermonkey) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2023-03-06] CHR Extension: (I don't care about cookies) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\fihnjjcciajhdojfnbdddfaoknhalnja [2023-03-06] CHR Extension: (Norton Safe Web) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnpbeacklnhmkkilekogeiekaglbmmka [2023-03-08] CHR Extension: (Return YouTube Dislike) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\gebbhagfogifgggkldgodflihgfeippi [2023-03-06] CHR Extension: (Google Docs Offline) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-03-06] CHR Extension: (AdBlock*– der beste Ad-Blocker) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2023-03-06] CHR Extension: (In Google Drive speichern) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbmikajjgmnabiglmofipeabaddhgne [2023-03-06] CHR Extension: (Checker Plus for Google Calendar™) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkhggnncdpfibdhinjiegagmopldibha [2023-03-06] CHR Extension: (Cisco Webex Extension) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlhmfgmfgeifomenelglieieghnjghma [2023-03-06] CHR Extension: (Chrome-Erweiterung für Google Notizen) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpcaedmchfhocbbapmcbpinfpgnhiddi [2023-03-09] CHR Extension: (Shazam: Finde Songtitel in deinem Browser) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmioliijnhnoblpgimnlajmefafdfilb [2023-03-06] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-06] CHR Extension: (Citavi Picker) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohgndokldibnndfnjnagojmheejlengn [2023-03-06] CHR Extension: (PAYBACK Internet Assistent) - C:\Users\nikla\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbfjbhoglggakhkngkbfehgghkaadeba [2023-03-06] CHR Profile: C:\Users\nikla\AppData\Local\Google\Chrome\User Data\System Profile [2023-03-09] CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] CHR HKLM-x32\...\Chrome\Extension: [jlhmfgmfgeifomenelglieieghnjghma] CHR HKLM-x32\...\Chrome\Extension: [ohgndokldibnndfnjnagojmheejlengn] ==================== Dienste (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1353208 2017-06-15] (Autodesk, Inc -> Autodesk Inc.) S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-02-01] (Adobe Inc. -> Adobe Inc.) R2 ArmouryCrateService; C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe [394864 2022-09-27] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) S2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.02.05\atkexComSvc.exe [456008 2022-10-31] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) S3 AsRogAuraService; C:\Program Files (x86)\ASUS\AURA\AsRogAuraService.exe [753624 2016-12-16] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) S2 asus; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [153112 2022-10-31] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) S2 AsusCertService; C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe [558104 2022-05-19] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) S3 asusm; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [153112 2022-10-31] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) S2 AsusROGLSLService; C:\Program Files (x86)\ASUS\AsusROGLSLService\AsusROGLSLService.exe [678256 2022-10-31] (ASUSTeK COMPUTER INC. -> ASUS) S2 CdRomAccessAgentService; C:\Program Files (x86)\Common Files\cdagtsvc\cdagtsvc_v1.0.0_x86.exe [90112 2023-03-06] (Leawo Software) [Datei ist nicht signiert] R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12554240 2023-02-11] (Microsoft Corporation -> Microsoft Corporation) R3 CLink4Service; C:\Program Files (x86)\CorsairLink4\CorsairLink4.Service.exe [34512 2018-03-30] (Corsair Components, Inc. -> Corsair Components, Inc.) S3 CoordinatorServiceHost; S:\Programme\SOLIDWORKS Corp\SOLIDWORKS\swScheduler\DTSCoordinatorService.exe [79576 2021-10-30] (Dassault Systemes SolidWorks Corp. -> Dassault Systèmes SolidWorks Corporation) R2 csc_vpnagent; C:\Program Files (x86)\Cisco\Cisco Secure Client\vpnagent.exe [1215584 2022-12-13] (Cisco Systems, Inc. -> Cisco Systems, Inc.) S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [818304 2020-09-23] (EasyAntiCheat Oy -> Epic Games, Inc) S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029472 2022-05-19] (Epic Games Inc. -> Epic Games, Inc.) S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncHelper.exe [3486600 2023-03-09] (Microsoft Corporation -> Microsoft Corporation) S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [520416 2014-01-28] (FUTUREMARK INC -> Futuremark) S2 FWPnpService; C:\Program Files\Fanatec\Fanatec Wheel\FWPnpService.exe [250864 2019-01-10] (Endor AG -> ) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [389696 2017-07-10] (Canon Inc. -> ) S3 impi_hydra; S:\Programme\SOLIDWORKS Corp\SOLIDWORKS\hydra_service.exe [924472 2021-10-29] (Intel(R) Software Development Products -> Intel Corporation) R2 LightingService; C:\Program Files (x86)\LightingService\LightingService.exe [3835360 2022-03-10] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) S2 MDESIGN License Manager; C:\Program Files (x86)\FLEXlm\MDESIGN\lmgrd.exe [1396200 2018-06-29] (Flexera Software LLC -> Flexera Software LLC) S2 MDESIGN License Manager 64; S:\Programme\MDESIGN\lmgrd.exe [1203536 2022-10-20] (Flexera Software LLC -> Flexera) S2 Mgl3DCtlrRPCService; C:\Program Files\3Dconnexion\3DxWare\3DxWinCore\Mgl3DCtlrRPCService.exe [166968 2020-09-07] (3Dconnexion SAM -> 3Dconnexion) R2 MSSQL$TEW_SQLEXPRESS; C:\ProgramData\SOLIDWORKS Electrical\MSSQL12.TEW_SQLEXPRESS\MSSQL\Binn\sqlservr.exe [372416 2015-04-20] (Microsoft Corporation -> Microsoft Corporation) S2 nordvpn-service; C:\Program Files\NordVPN\nordvpn-service.exe [280440 2021-06-06] (nordvpn s.a. -> TEFINCOM S.A.) R2 NortonSecurity; C:\Program Files\Norton Security\Engine\22.23.1.21\NortonSecurity.exe [344888 2023-02-02] (NortonLifeLock Inc. -> NortonLifelock Inc.) R2 nsWscSvc; C:\Program Files\Norton Security\Engine\22.23.1.21\nsWscSvc.exe [1059176 2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) S3 OfficeSvcManagerAddons; C:\WINDOWS\system32\dllhost.exe /Processid:{2CA2E202-932F-4BA2-8771-195BB86398F5} [21312 2020-10-16] (Microsoft Windows -> Microsoft Corporation) S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\23.038.0219.0001\OneDriveUpdaterService.exe [3865992 2023-03-09] (Microsoft Corporation -> Microsoft Corporation) S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2491736 2021-02-15] (Overwolf Ltd -> Overwolf LTD) R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [433800 2018-09-17] (Geek Software GmbH -> Geek Software GmbH) S2 RemoteSolverDispatcher; S:\Programme\SOLIDWORKS Corp\SOLIDWORKS Flow Simulation\binCFW\remotesolverdispatcherservice.exe [252936 2021-10-29] (Mentor Graphics Corporation -> Mentor Graphics Corporation) R2 ROG Live Service; C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe [1574512 2023-02-13] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [226976 2023-03-06] (Microsoft Windows Publisher -> Microsoft Corporation) S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2017-11-17] (SolidWorks) [Datei ist nicht signiert] S4 SQLAgent$TEW_SQLEXPRESS; C:\ProgramData\SOLIDWORKS Electrical\MSSQL12.TEW_SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [613056 2015-04-20] (Microsoft Corporation -> Microsoft Corporation) S2 SWVisualize2021.Queue.Server; S:\Programme\SOLIDWORKS Corp\SOLIDWORKS Visualize\SWVisualize.Queue.Server.exe [30424 2021-10-30] (Dassault Systemes SolidWorks Corp. -> Dassault Systèmes) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [15508280 2023-03-09] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\NisSrv.exe [3191256 2023-02-15] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WebexService; C:\Program Files (x86)\Webex\Webex\Applications\WebExService.exe [145096 2021-01-29] (Cisco WebEx LLC -> Cisco WebEx LLC) S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\MsMpEng.exe [133576 2023-02-15] (Microsoft Windows Publisher -> Microsoft Corporation) S2 ZoomCptService; "C:\Program Files (x86)\Common Files\Zoom\Support\CptService.exe" -user_path "C:\Users\nikla\AppData\Roaming\Zoom" ===================== Treiber (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R3 3dxhid; C:\WINDOWS\System32\drivers\3dxhid.sys [49952 2020-09-02] (3Dconnexion SAM -> 3Dconnexion SAM) R3 acsock; C:\WINDOWS\system32\DRIVERS\acsock64.sys [304056 2022-12-13] (Microsoft Windows Hardware Compatibility Publisher -> Cisco Systems, Inc.) R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [54720 2022-10-21] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0384804.inf_amd64_41ca4ca6939f5e56\B384763\amdkmdag.sys [94459216 2022-10-21] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2016-11-18] (ASUSTeK Computer Inc. -> ) R1 Asusgio3; C:\WINDOWS\system32\drivers\AsIO3.sys [49256 2022-08-15] (ASUSTeK COMPUTER INC. -> ) R1 BHDrvx64; C:\Program Files\Norton Security\NortonData\22.23.1.21\Definitions\BASHDefs\20230309.011\BHDrvx64.sys [1696736 2023-03-07] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R1 ccSet_NGC; C:\WINDOWS\System32\drivers\NGCx64\1617010.015\ccSetx64.sys [198280 2023-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [45528 2017-09-14] (Microsoft Windows Hardware Compatibility Publisher -> Corsair) R3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [21968 2017-09-14] (Microsoft Windows Hardware Compatibility Publisher -> Corsair) R3 cpuz146; C:\WINDOWS\temp\cpuz146\cpuz146_x64.sys [52824 2023-03-13] (CPUID -> CPUID) R1 CTIAIO; C:\WINDOWS\system32\drivers\CtiAIo64.sys [32304 2022-10-31] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.) R1 CTIIO; C:\WINDOWS\system32\drivers\CtiIo64.sys [32296 2022-10-31] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.) R3 DroidCam; C:\WINDOWS\System32\drivers\droidcam.sys [32240 2020-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Dev47Apps) R3 DroidCamVideo; C:\WINDOWS\System32\DriverStore\FileRepository\droidcamvideo.inf_amd64_47e18363cbf3dfe0\droidcamvideo.sys [33784 2021-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) S3 e2esoft_ivcamaudio_simple; C:\WINDOWS\system32\drivers\iVCamAud.sys [255464 2020-11-04] (Shanghai Yitu Information Technology Co., Ltd. -> e2eSoft) R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [527832 2022-09-19] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [159720 2023-03-08] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) S3 FanatecWheelFilterUsb; C:\WINDOWS\System32\drivers\FWFilterUsb.sys [91872 2019-01-10] (Endor AG -> Endor AG) R3 FWVirtualInputDevice; C:\WINDOWS\System32\drivers\FWVirtualInputDevice.sys [35552 2019-01-10] (Endor AG -> Endor AG) S3 GLCKIO; C:\Program Files (x86)\ASUS\AURA\690b33e1-0462-4e84-9bea-c7552b45432a.sys [14976 2022-10-31] (ASUSTeK Computer Inc. -> ) R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2018-09-15] (Martin Malik - REALiX -> REALiX(tm)) R1 IDSVia64; C:\Program Files\Norton Security\NortonData\22.23.1.21\Definitions\IPSDefs\20230310.061\IDSvia64.sys [1527816 2023-03-07] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R3 IOMap; C:\WINDOWS\system32\drivers\IOMap64.sys [35344 2022-09-21] (ASUSTEK COMPUTER INC. -> ASUSTeK Computer Inc.) S3 iVCam; C:\WINDOWS\system32\DRIVERS\iVCam.sys [1090536 2020-11-02] (Shanghai Yitu Information Technology Co., Ltd. -> e2eSoft) R3 KMJHidMini; C:\WINDOWS\System32\drivers\3dxkmj.sys [18944 2020-09-02] (Microsoft Windows Hardware Compatibility Publisher -> 3Dconnextion Inc.) R3 KMJShim; C:\WINDOWS\System32\drivers\3dxshim.sys [7168 2020-09-02] (Microsoft Windows Hardware Compatibility Publisher -> 3Dconnextion Inc.) R3 LSaiMini; C:\WINDOWS\System32\drivers\LSaiMini.sys [20720 2018-02-14] (WDKTestCert SYSTEM,131245371151827277 -> Logitech) R3 LSaiNtBus; C:\WINDOWS\system32\drivers\LSaiBus.sys [60336 2018-02-14] (WDKTestCert SYSTEM,131245371151827277 -> Logitech) R1 LUMDriver; C:\WINDOWS\system32\drivers\LUMDriver.sys [24848 2008-01-02] (IBM Polska Sp. z o.o. -> IBM) R1 MSIO; C:\WINDOWS\system32\drivers\MsIo64.sys [17424 2020-01-19] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd) R2 NDivert; C:\WINDOWS\System32\drivers\NDivert.sys [105184 2021-06-08] (TEFINCOM S.A. -> ) R3 Neo_VPN; C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys [37824 2019-07-19] (SoftEther Corporation -> SoftEther Corporation) R1 nordlwf; C:\WINDOWS\system32\DRIVERS\nordlwf.sys [42576 2021-06-13] (nordvpn s.a. -> TEFINCOM S.A.) S3 nsvst_NGC; C:\WINDOWS\System32\drivers\NGCx64\1617010.015\nsvst.sys [57120 2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) S4 RsFx0310; C:\WINDOWS\System32\DRIVERS\RsFx0310.sys [249024 2015-04-20] (Microsoft Corporation -> Microsoft Corporation) S3 SaiK0bac; C:\WINDOWS\system32\DRIVERS\SaiK0bac.sys [217408 2018-02-14] (WDKTestCert SYSTEM,131245371151827277 -> Logitech) S3 SaiU0bac; C:\WINDOWS\system32\DRIVERS\SaiU0bac.sys [24816 2018-02-14] (WDKTestCert SYSTEM,131245371151827277 -> Logitech) R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Bruce James -> Scarlet.Crush Productions) R2 SignalRgbDriver; C:\WINDOWS\System32\Drivers\SignalRgbDriver.sys [25832 2022-03-22] (WHIRLWIND VIRTUAL REALITIES INC. -> ) R2 speedfan; C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software) R1 SRTSP; C:\WINDOWS\System32\drivers\NGCx64\1617010.015\SRTSP64.SYS [956048 2023-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R1 SRTSPX; C:\WINDOWS\System32\drivers\NGCx64\1617010.015\SRTSPX64.SYS [52872 2023-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R0 SymEFASI; C:\WINDOWS\System32\drivers\NGCx64\1617010.015\SYMEFASI64.SYS [2180248 2023-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) S0 SymELAM; C:\WINDOWS\System32\drivers\NGCx64\1617010.015\SymELAM.sys [36016 2023-02-02] (Microsoft Windows Early Launch Anti-Malware Publisher -> Broadcom) R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [100344 2023-03-08] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R3 SymEvnt; C:\Program Files\Norton Security\NortonData\22.23.1.21\SymPlatform\SymEvnt.sys [722400 2022-09-21] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R1 SymIRON; C:\WINDOWS\System32\drivers\NGCx64\1617010.015\Ironx64.SYS [306824 2023-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R1 SymNetS; C:\WINDOWS\System32\drivers\NGCx64\1617010.015\symnets.sys [492728 2023-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom) R3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [44896 2018-07-24] (TEFINCOM S.A. -> The OpenVPN Project) S3 USBTINSP; C:\WINDOWS\System32\drivers\tinspusb.sys [142848 2010-03-29] (Microsoft Windows Hardware Compatibility Publisher -> Texas Instruments) S3 vpnva; C:\WINDOWS\System32\drivers\vpnva64-6.sys [54176 2022-12-13] (Microsoft Windows Hardware Compatibility Publisher -> Cisco Systems, Inc.) S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [49576 2023-02-15] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [473336 2023-02-15] (Microsoft Windows -> Microsoft Corporation) S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [151184 2016-07-15] (NGO -> MBB) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99576 2023-02-15] (Microsoft Windows -> Microsoft Corporation) R2 WinRing0x64; C:\WINDOWS\System32\Drivers\WinRing0x64.sys [14544 2022-03-22] (Noriyuki MIYAZAKI -> OpenLibSys.org) S3 wpCtrlDrv_NGC; C:\WINDOWS\System32\drivers\NGCx64\1617010.015\wpCtrlDrv.sys [1016792 2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) S3 CM_VENDER_CMD; \??\C:\Program Files\Common Files\Logitech\G430Install\CMVC64.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2023-03-13 13:01 - 2023-03-13 13:02 - 000000000 ____D C:\AdwCleaner 2023-03-13 12:27 - 2023-03-13 12:27 - 000000000 ____D C:\WINDOWS\system32\Tasks\Remediation 2023-03-13 12:27 - 2023-03-13 12:27 - 000000000 ____D C:\Users\nikla\AppData\LocalLow\Norton 2023-03-12 11:39 - 2023-03-13 12:14 - 000003152 _____ C:\WINDOWS\system32\Tasks\AMDInstallLauncher 2023-03-11 15:53 - 2023-03-11 15:53 - 000000000 ____D C:\Users\nikla\.asterstudy 2023-03-11 15:16 - 2023-03-11 15:16 - 000000000 ____D C:\Users\nikla\.matplotlib 2023-03-11 14:54 - 2023-03-11 14:54 - 000000000 ____D C:\Users\nikla\.astkrc 2023-03-11 11:19 - 2023-03-13 13:07 - 000000000 ____D C:\FRST 2023-03-10 22:18 - 2023-03-10 22:18 - 000007628 _____ C:\Users\nikla\AppData\Local\Resmon.ResmonCfg 2023-03-10 21:28 - 2023-03-10 21:28 - 000003884 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn 2023-03-10 21:28 - 2023-03-10 21:28 - 000003442 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime 2023-03-10 16:04 - 2023-03-10 16:04 - 000001378 _____ C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk 2023-03-10 16:04 - 2023-03-10 16:04 - 000000000 ____D C:\Users\nikla\AppData\Local\ESET 2023-03-10 13:33 - 2023-03-10 13:33 - 000000178 _____ C:\Users\nikla\AppData\Roaming\.omniORB_DESKTOP-***GFFN_12332.cfg 2023-03-10 13:01 - 2023-03-10 13:01 - 000000000 ____D C:\Users\nikla\AppData\Local\MathWorks 2023-03-09 12:29 - 2023-03-09 12:29 - 000000000 ____D C:\Users\nikla\AppData\Local\Norton 2023-03-08 16:31 - 2023-03-08 16:31 - 000000000 ____D C:\Users\nikla\AppData\Local\NPE 2023-03-08 15:41 - 2023-03-08 15:41 - 000001083 _____ C:\Users\Public\Desktop\calibre - E-book management.lnk 2023-03-08 15:41 - 2023-03-08 15:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Git 2023-03-08 15:40 - 2023-03-08 15:40 - 000000946 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.10.34.lnk 2023-03-08 15:36 - 2023-03-08 15:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zoom 2023-03-08 15:36 - 2023-03-08 15:36 - 000000000 ____D C:\Program Files (x86)\Zoom 2023-03-08 15:35 - 2023-03-08 15:35 - 000001076 _____ C:\Users\Public\Desktop\Audacity.lnk 2023-03-08 15:35 - 2023-03-08 15:35 - 000000680 _____ C:\Users\Public\Desktop\PDFCreator.lnk 2023-03-08 15:35 - 2023-03-08 15:35 - 000000000 ____D C:\Users\nikla\AppData\Local\pdfforge 2023-03-08 15:35 - 2023-03-08 15:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator 2023-03-08 15:35 - 2023-03-08 15:35 - 000000000 ____D C:\Program Files\PDFCreator 2023-03-08 13:18 - 2023-03-08 13:18 - 000000000 ____D C:\Program Files\Common Files\AV 2023-03-08 12:30 - 2023-03-12 12:00 - 000000000 ____D C:\WINDOWS\system32\Tasks\Norton AntiVirus Plus 2023-03-08 12:28 - 2023-03-08 12:28 - 000003376 _____ C:\WINDOWS\system32\Tasks\Norton WSC Integration 2023-03-08 12:28 - 2023-03-08 12:28 - 000002297 _____ C:\Users\Public\Desktop\Norton Security.lnk 2023-03-08 12:28 - 2023-03-08 12:28 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security 2023-03-08 12:28 - 2023-03-08 12:28 - 000000000 ____D C:\WINDOWS\system32\Drivers\NGCx64 2023-03-08 12:28 - 2023-03-08 12:28 - 000000000 ____D C:\Program Files\Norton Security 2023-03-08 12:28 - 2023-03-08 12:28 - 000000000 ____D C:\Program Files\Common Files\Symantec Shared 2023-03-08 12:26 - 2023-03-08 12:26 - 000000000 ____D C:\ProgramData\NortonInstaller 2023-03-08 12:26 - 2023-03-08 12:26 - 000000000 ____D C:\Program Files (x86)\NortonInstaller 2023-03-08 12:23 - 2023-03-09 12:29 - 000000000 ____D C:\ProgramData\Norton 2023-03-08 12:23 - 2023-03-08 12:23 - 000000000 ____D C:\Users\Public\Downloads\Norton 2023-03-08 01:19 - 2023-03-08 01:23 - 000000000 ____D C:\Users\nikla\AppData\LocalLow\IGDump 2023-03-08 01:18 - 2023-03-08 01:18 - 000000000 ____D C:\Users\nikla\AppData\Local\mbam 2023-03-07 22:49 - 2023-03-07 22:49 - 000002399 _____ C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Signal.lnk 2023-03-07 22:49 - 2023-03-07 22:49 - 000000000 ____D C:\Users\nikla\AppData\Local\signal-desktop-updater 2023-03-07 11:24 - 2023-03-07 11:24 - 000000000 ____D C:\Users\nikla\AppData\Local\Siemens 2023-03-07 10:54 - 2023-03-07 10:54 - 000000000 ____D C:\Users\nikla\.thumbnails 2023-03-06 22:56 - 2023-03-06 22:56 - 000000000 ___HD C:\$WinREAgent 2023-03-06 22:44 - 2023-03-07 21:01 - 000000000 ____D C:\Users\nikla\AppData\Local\Adobe 2023-03-06 22:27 - 2023-03-07 10:57 - 000000000 ____D C:\Users\nikla\AppData\Local\cache 2023-03-06 22:22 - 2023-03-06 22:22 - 000000000 ____D C:\Users\nikla\AppData\Local\VirtualStore 2023-03-06 22:22 - 2023-03-06 22:22 - 000000000 ____D C:\Users\nikla\AppData\Local\Sentry 2023-03-06 22:22 - 2023-03-06 22:22 - 000000000 ____D C:\Users\nikla\AppData\Local\PeerDistRepub 2023-03-06 22:22 - 2023-03-06 22:22 - 000000000 ____D C:\Users\nikla\AppData\Local\ATI 2023-03-06 21:29 - 2023-03-06 21:29 - 000684984 _____ (Mozilla Foundation) C:\Users\nikla\AppData\LocalLow\freebl3.dll 2023-03-06 21:29 - 2023-03-06 21:29 - 000627128 _____ (Mozilla Foundation) C:\Users\nikla\AppData\LocalLow\mozglue.dll 2023-03-06 21:29 - 2023-03-06 21:29 - 000254392 _____ (Mozilla Foundation) C:\Users\nikla\AppData\LocalLow\softokn3.dll 2023-03-06 21:19 - 2023-03-06 21:19 - 000000000 ____D C:\Users\nikla\AppData\Local\Leawo Blu-ray Ripper 2023-03-06 21:06 - 2023-03-06 21:11 - 000000000 ____D C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VidCoder 2023-03-06 21:06 - 2023-03-06 21:11 - 000000000 ____D C:\Users\nikla\AppData\Local\VidCoder.Stable 2023-03-06 21:06 - 2023-03-06 21:10 - 000000000 ____D C:\Users\nikla\AppData\Roaming\VidCoder 2023-03-06 21:06 - 2023-03-06 21:06 - 000000000 ____D C:\Users\nikla\AppData\Local\ToastNotificationManagerCompat 2023-03-06 21:06 - 2023-03-06 21:06 - 000000000 ____D C:\Users\nikla\AppData\Local\IsolatedStorage 2023-03-06 21:06 - 2023-03-06 21:06 - 000000000 ____D C:\Program Files\dotnet 2023-03-06 21:05 - 2023-03-06 21:06 - 000000000 ____D C:\Users\nikla\AppData\Local\SquirrelClowdTemp 2023-03-06 21:03 - 2023-03-06 21:03 - 000000000 ___HD C:\ProgramData\vid 2023-03-06 21:03 - 2023-03-06 21:03 - 000000000 ___HD C:\ProgramData\tks 2023-03-06 21:01 - 2023-03-06 21:01 - 000000000 ____D C:\Users\nikla\AppData\Local\Blu-ray Master 2023-03-06 20:52 - 2023-03-06 20:52 - 000000000 ____D C:\Users\nikla\AppData\Local\Swiss Academic Software 2023-03-06 18:36 - 2023-03-06 18:36 - 000000000 ____D C:\Users\nikla\AppData\Local\Edraw 2023-03-06 18:36 - 2023-03-06 18:36 - 000000000 ____D C:\Users\nikla\AppData\Local\CEF 2023-03-06 18:32 - 2023-03-06 18:32 - 000000000 ____D C:\Users\nikla\AppData\Local\MicrosoftEdge 2023-03-05 14:23 - 2023-03-09 15:44 - 000000000 ____D C:\Users\nikla\AppData\Roaming\gtk-2.0 2023-03-05 14:18 - 2023-03-05 14:18 - 000001659 _____ C:\Users\Public\Desktop\Z88Aurora V5.lnk 2023-03-05 14:18 - 2023-03-05 14:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Z88Aurora V5 2023-03-05 14:16 - 2023-03-05 14:16 - 000001651 _____ C:\Users\Public\Desktop\Z88ArionV3.lnk 2023-03-05 14:16 - 2023-03-05 14:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Z88ArionV3 2023-03-05 13:53 - 2023-03-05 13:53 - 000000000 ____D C:\Users\nikla\flasheur 2023-03-05 13:34 - 2023-03-05 13:34 - 000000233 _____ C:\Users\nikla\AppData\Roaming\.omniORB_***_DESKTOP-***GFFN_2813.cfg 2023-03-05 13:28 - 2023-03-05 13:28 - 000000233 _____ C:\Users\nikla\AppData\Roaming\.omniORB_***_DESKTOP-***GFFN_2812.cfg 2023-03-04 19:48 - 2023-03-04 19:48 - 000000000 ____D C:\Users\nikla\.config 2023-03-04 19:45 - 2023-03-04 19:45 - 000000000 ____D C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Code_Aster v2021 2023-03-04 19:39 - 2023-03-11 15:08 - 000000233 _____ C:\Users\nikla\AppData\Roaming\.omniORB_***_last.cfg 2023-03-04 19:39 - 2023-03-11 14:54 - 000000182 _____ C:\Users\nikla\AppData\Roaming\.salome_PortManager.cfg 2023-03-04 19:39 - 2023-03-04 19:39 - 000000233 _____ C:\Users\nikla\AppData\Roaming\.omniORB_***_DESKTOP-***GFFN_2810.cfg 2023-02-28 12:11 - 2023-03-13 12:14 - 000000000 ____D C:\Users\nikla\AppData\Roaming\GoContactSyncMOD 2023-02-28 12:11 - 2023-02-28 12:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GO Contact Sync Mod 2023-02-28 12:11 - 2023-02-28 12:11 - 000000000 ____D C:\Program Files (x86)\GO Contact Sync Mod 2023-02-25 13:26 - 2023-02-25 13:26 - 000050715 _____ C:\Users\nikla\AppData\Roaming\Durch Trennzeichen getrennte Werte.ADR 2023-02-22 12:29 - 2023-02-22 12:29 - 000000000 ____D C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LinuxLive USB Creator 2023-02-22 12:29 - 2023-02-22 12:29 - 000000000 ____D C:\Program Files (x86)\LinuxLive USB Creator 2023-02-21 15:14 - 2023-02-21 15:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco 2023-02-21 15:14 - 2023-02-21 15:14 - 000000000 ____D C:\Program Files (x86)\Cisco 2023-02-16 19:08 - 2023-02-16 19:24 - 000002364 _____ C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk 2023-02-16 17:24 - 2023-03-09 17:04 - 000000000 ____D C:\Program Files\Microsoft OneDrive 2023-02-16 17:22 - 2023-03-09 10:44 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task 2023-02-16 17:22 - 2023-03-09 10:44 - 000002148 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2023-02-16 17:22 - 2023-02-16 17:22 - 000000000 ___RD C:\Users\Default\OneDrive 2023-02-16 17:22 - 2023-02-16 17:22 - 000000000 ____D C:\Program Files (x86)\Teams Installer 2023-02-16 17:21 - 2023-02-16 17:21 - 000000000 ____D C:\Program Files\Common Files\DESIGNER 2023-02-16 17:19 - 2023-02-16 19:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools 2023-02-16 17:19 - 2023-02-16 17:19 - 000002541 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk 2023-02-16 17:19 - 2023-02-16 17:19 - 000002537 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk 2023-02-16 17:19 - 2023-02-16 17:19 - 000002516 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk 2023-02-16 17:19 - 2023-02-16 17:19 - 000002494 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk 2023-02-16 17:19 - 2023-02-16 17:19 - 000002491 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk 2023-02-16 17:19 - 2023-02-16 17:19 - 000002458 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk 2023-02-16 17:19 - 2023-02-16 17:19 - 000002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk 2023-02-16 17:19 - 2023-02-16 17:19 - 000002427 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk 2023-02-16 17:12 - 2023-02-16 17:12 - 000000000 ____D C:\Program Files\Microsoft Office 15 2023-02-15 20:57 - 2023-02-15 20:57 - 000001104 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AusweisApp2.lnk 2023-02-15 20:57 - 2023-02-15 20:57 - 000001092 _____ C:\Users\Public\Desktop\AusweisApp2.lnk 2023-02-15 20:57 - 2023-02-15 20:57 - 000000000 ____D C:\Users\nikla\AppData\Local\Governikus GmbH & Co. KG 2023-02-15 20:57 - 2023-02-15 20:57 - 000000000 ____D C:\Program Files\AusweisApp2 2023-02-12 16:50 - 2023-02-12 16:50 - 000000000 ____D C:\ProgramData\mwboost_interprocess 2023-02-12 16:44 - 2023-02-12 16:44 - 000003856 _____ C:\WINDOWS\system32\Tasks\MATLAB R2022b Startup Accelerator 2023-02-12 16:44 - 2023-02-12 16:44 - 000001029 _____ C:\Users\Public\Desktop\MATLAB R2022b.lnk 2023-02-12 16:44 - 2023-02-12 16:44 - 000000586 _____ C:\WINDOWS\Tasks\MATLAB R2022b Startup Accelerator.job 2023-02-12 16:44 - 2023-02-12 16:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MATLAB R2022b ==================== Ein Monat (geänderte) ================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2023-03-13 13:02 - 2021-12-06 12:37 - 000001903 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Siemens NX Launcher.lnk 2023-03-13 12:57 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2023-03-13 12:52 - 2022-10-31 11:46 - 000000000 ____D C:\Program Files\ASUS 2023-03-13 12:46 - 2018-06-02 20:59 - 000000000 ____D C:\Users\nikla\AppData\Local\D3DSCache 2023-03-13 12:42 - 2017-11-17 16:06 - 000000000 ____D C:\Program Files (x86)\Google 2023-03-13 12:18 - 2020-09-15 11:36 - 000004170 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{9F977908-B9F0-4B85-955B-C6FD9A658823} 2023-03-13 12:17 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness 2023-03-13 12:14 - 2023-01-25 06:54 - 000003138 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate 2023-03-13 12:14 - 2017-11-17 19:29 - 000000000 ____D C:\Users\nikla\AppData\Roaming\WTablet 2023-03-12 13:17 - 2020-09-15 11:30 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2023-03-12 11:39 - 2017-11-17 15:43 - 000000000 ___RD C:\Users\nikla\OneDrive 2023-03-11 23:09 - 2023-01-17 15:58 - 000002274 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk 2023-03-11 23:09 - 2020-09-07 09:44 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2023-03-11 23:09 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps 2023-03-11 17:35 - 2018-07-19 15:58 - 000000000 ____D C:\Program Files (x86)\CorsairLink4 2023-03-11 15:53 - 2020-09-15 00:00 - 000000000 ____D C:\Users\nikla 2023-03-11 12:52 - 2017-12-09 15:14 - 000000000 ____D C:\Program Files (x86)\TeamViewer 2023-03-11 11:24 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF 2023-03-10 13:01 - 2021-10-22 18:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MATLAB R2021b 2023-03-09 17:11 - 2020-09-15 11:32 - 001722792 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2023-03-09 17:11 - 2019-12-07 15:51 - 000743714 _____ C:\WINDOWS\system32\perfh007.dat 2023-03-09 17:11 - 2019-12-07 15:51 - 000150136 _____ C:\WINDOWS\system32\perfc007.dat 2023-03-09 17:04 - 2020-09-15 11:36 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2023-03-09 17:04 - 2020-09-15 11:30 - 000008192 ___SH C:\DumpStack.log.tmp 2023-03-09 17:03 - 2019-12-07 10:03 - 001310720 _____ C:\WINDOWS\system32\config\BBI 2023-03-09 17:03 - 2017-11-17 15:37 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin 2023-03-09 16:57 - 2017-11-17 16:02 - 000000000 ____D C:\Program Files (x86)\ASUS 2023-03-08 16:07 - 2020-05-07 20:07 - 000000000 ____D C:\Users\nikla\AppData\Roaming\Zoom 2023-03-08 15:53 - 2019-12-07 10:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM 2023-03-08 15:43 - 2022-10-13 15:40 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader.lnk 2023-03-08 15:43 - 2022-10-13 15:40 - 000002124 _____ C:\Users\Public\Desktop\Acrobat Reader.lnk 2023-03-08 15:43 - 2020-09-15 11:36 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task 2023-03-08 15:42 - 2019-02-23 12:45 - 000002293 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2023-03-08 15:41 - 2020-07-31 14:12 - 000000000 ____D C:\Program Files\Git 2023-03-08 15:41 - 2018-06-26 17:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management 2023-03-08 15:41 - 2018-06-26 17:55 - 000000000 ____D C:\Program Files (x86)\Calibre2 2023-03-08 15:37 - 2018-09-09 09:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2023-03-08 15:37 - 2018-09-09 09:30 - 000000000 ____D C:\Program Files\7-Zip 2023-03-08 15:37 - 2018-07-19 17:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit 2023-03-08 15:37 - 2018-07-19 17:06 - 000000000 ____D C:\Program Files\Java 2023-03-08 15:37 - 2017-11-21 23:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2023-03-08 15:36 - 2017-11-21 23:22 - 000000000 ____D C:\Program Files (x86)\Java 2023-03-08 15:35 - 2018-09-15 16:41 - 000001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk 2023-03-08 15:35 - 2018-09-15 16:41 - 000000000 ____D C:\Program Files (x86)\Audacity 2023-03-08 15:35 - 2018-01-26 15:16 - 000181248 _____ (pdfforge GmbH) C:\WINDOWS\system32\pdfcmon.dll 2023-03-08 12:37 - 2020-05-10 18:14 - 000000000 ____D C:\Users\nikla\AppData\Local\WebEx 2023-03-08 12:28 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2023-03-08 12:17 - 2017-11-17 16:06 - 000000000 ____D C:\Users\nikla\AppData\Local\Google 2023-03-08 01:45 - 2021-09-30 09:58 - 000000000 ____D C:\Users\nikla\AppData\Roaming\Signal 2023-03-07 00:39 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection 2023-03-07 00:39 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2023-03-07 00:39 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources 2023-03-07 00:39 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe 2023-03-07 00:39 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions 2023-03-07 00:39 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr 2023-03-06 23:05 - 2018-02-27 16:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Leawo 2023-03-06 23:01 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp 2023-03-06 22:21 - 2017-11-17 15:42 - 000000000 ____D C:\Users\nikla\AppData\Local\ConnectedDevicesPlatform 2023-03-06 21:50 - 2017-11-18 12:16 - 000000000 ____D C:\WINDOWS\system32\MRT 2023-03-06 21:19 - 2018-02-13 14:43 - 000000000 ____D C:\Users\nikla\AppData\Roaming\Leawo 2023-03-06 21:19 - 2018-02-13 14:43 - 000000000 ____D C:\ProgramData\Leawo 2023-03-06 21:06 - 2017-11-17 16:39 - 000000000 ____D C:\ProgramData\Package Cache 2023-03-06 21:03 - 2018-02-13 15:10 - 000000000 ____D C:\Users\nikla\AppData\Roaming\vlc 2023-03-06 18:24 - 2020-03-20 21:47 - 000000000 ____D C:\Users\nikla\AppData\Local\Overwolf 2023-03-06 18:06 - 2017-11-17 15:42 - 000000000 ____D C:\Users\nikla\AppData\Local\Packages 2023-03-06 18:00 - 2017-11-17 18:40 - 000000000 ____D C:\Users\nikla\AppData\Local\3Dconnexion 2023-03-06 16:53 - 2019-01-27 13:33 - 000000000 ____D C:\Users\nikla\AppData\Roaming\obs-studio 2023-03-06 16:49 - 2019-12-07 15:52 - 000000000 ____D C:\WINDOWS\system32\FxsTmp 2023-03-05 22:23 - 2022-06-19 19:04 - 000000000 ____D C:\Users\nikla\.mediathek3 2023-03-05 22:00 - 2022-01-28 13:32 - 000000000 ____D C:\Users\nikla\AppData\Local\JM01 2023-03-04 19:48 - 2017-11-26 10:36 - 000000000 ____D C:\Users\nikla\AppData\Local\CrashDumps 2023-03-04 11:11 - 2022-01-18 21:34 - 000000000 ____D C:\ProgramData\Swiss Academic Software 2023-03-04 11:11 - 2022-01-18 21:32 - 000002108 _____ C:\Users\Public\Desktop\Citavi 6.lnk 2023-03-04 11:11 - 2022-01-18 21:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citavi 6 2023-03-04 11:10 - 2022-01-18 21:32 - 000000000 ____D C:\Users\nikla\AppData\Local\Downloaded Installations 2023-03-02 16:47 - 2022-10-31 11:41 - 000000000 ____D C:\ProgramData\ASUS 2023-03-02 10:33 - 2021-12-11 11:41 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-341515215-1173906820-3305953664-1001 2023-03-01 07:48 - 2021-12-10 19:36 - 000000675 _____ C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Studienarbeit Lenker.lnk 2023-02-28 23:09 - 2017-11-17 16:39 - 000000000 ____D C:\ProgramData\CLink4 2023-02-28 22:52 - 2020-09-15 11:36 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2023-02-28 22:52 - 2020-09-15 11:36 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2023-02-28 12:10 - 2022-06-21 09:11 - 000000000 ____D C:\Program Files (x86)\GContactSync 2023-02-28 12:07 - 2017-11-17 15:43 - 000000000 ____D C:\Users\nikla\AppData\Local\Comms 2023-02-24 19:31 - 2022-04-05 11:52 - 000000000 ____D C:\Users\nikla\AppData\Roaming\inkscape 2023-02-24 19:30 - 2022-04-05 11:52 - 000000000 ____D C:\Users\nikla\.dbus-keyrings 2023-02-22 13:32 - 2017-11-18 13:17 - 000000000 ____D C:\ProgramData\CanonIJPLM 2023-02-21 15:14 - 2017-11-17 17:58 - 000000000 ____D C:\Users\nikla\AppData\Local\Cisco 2023-02-18 10:30 - 2017-11-17 22:16 - 000000000 ____D C:\Program Files\Microsoft Office 2023-02-16 19:08 - 2018-09-06 18:28 - 000000000 ____D C:\Users\nikla\AppData\Local\SquirrelTemp 2023-02-16 19:08 - 2017-11-17 15:42 - 000000000 __RHD C:\Users\Public\AccountPictures 2023-02-16 19:06 - 2020-09-15 11:30 - 001898568 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2023-02-16 19:05 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe 2023-02-16 19:05 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup 2023-02-16 19:05 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\DDFs 2023-02-16 19:04 - 2020-09-15 11:32 - 003015680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2023-02-16 18:58 - 2017-11-18 12:16 - 149955784 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2023-02-16 17:19 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2023-02-16 17:10 - 2018-01-13 12:15 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2023-02-15 14:20 - 2018-03-02 21:54 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2023-02-15 11:59 - 2017-12-09 15:15 - 000000000 ____D C:\Users\nikla\AppData\Local\TeamViewer 2023-02-13 19:09 - 2017-11-17 16:16 - 000000000 ____D C:\Users\nikla\AppData\Local\PlaceholderTileLogoFolder 2023-02-12 16:54 - 2018-11-19 19:15 - 000000000 ____D C:\ProgramData\MDESIGN 2023-02-12 16:44 - 2021-10-22 18:34 - 000000000 ____D C:\ProgramData\MathWorks ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======== 2023-03-10 13:33 - 2023-03-10 13:33 - 000000178 _____ () C:\Users\nikla\AppData\Roaming\.omniORB_DESKTOP-***GFFN_12332.cfg 2023-03-04 19:39 - 2023-03-04 19:39 - 000000233 _____ () C:\Users\nikla\AppData\Roaming\.omniORB_***_DESKTOP-***GFFN_2810.cfg 2023-03-05 13:28 - 2023-03-05 13:28 - 000000233 _____ () C:\Users\nikla\AppData\Roaming\.omniORB_***_DESKTOP-***GFFN_2812.cfg 2023-03-05 13:34 - 2023-03-05 13:34 - 000000233 _____ () C:\Users\nikla\AppData\Roaming\.omniORB_***_DESKTOP-***GFFN_2813.cfg 2023-03-04 19:39 - 2023-03-11 15:08 - 000000233 _____ () C:\Users\nikla\AppData\Roaming\.omniORB_***_last.cfg 2023-03-04 19:39 - 2023-03-11 14:54 - 000000182 _____ () C:\Users\nikla\AppData\Roaming\.salome_PortManager.cfg 2023-02-25 13:26 - 2023-02-25 13:26 - 000050715 _____ () C:\Users\nikla\AppData\Roaming\Durch Trennzeichen getrennte Werte.ADR 2022-03-27 16:59 - 2022-03-27 16:59 - 000012227 _____ () C:\Users\nikla\AppData\Roaming\Durch Trennzeichen getrennte Werte.CAL 2021-12-02 19:53 - 2022-12-16 18:36 - 000000016 _____ () C:\Users\nikla\AppData\Roaming\obs-virtualcam.txt 2023-03-10 22:18 - 2023-03-10 22:18 - 000007628 _____ () C:\Users\nikla\AppData\Local\Resmon.ResmonCfg ==================== SigCheck ============================ (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) ==================== Ende von FRST.txt ======================== |
13.03.2023, 13:12 | #6 |
| Windows 10: Passwort-Trojaner wirklich weg?Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-03-2023 durchgeführt von *** (13-03-2023 13:08:08) Gestartet von D:\Downloads Microsoft Windows 10 Pro Version 22H2 19045.2673 (X64) (2020-09-15 10:36:46) Start-Modus: Normal ========================================================== ==================== Konten: ============================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) Administrator (S-1-5-21-341515215-1173906820-3305953664-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-341515215-1173906820-3305953664-503 - Limited - Disabled) Gast (S-1-5-21-341515215-1173906820-3305953664-501 - Limited - Disabled) *** (S-1-5-21-341515215-1173906820-3305953664-1001 - Administrator - Enabled) => C:\Users\nikla WDAGUtilityAccount (S-1-5-21-341515215-1173906820-3305953664-504 - Limited - Disabled) ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Norton AntiVirus (Enabled - Up to date) {AECE2126-F4E7-6909-11F2-1B69D1FBCBD0} AS: Sophos Home (Enabled - Up to date) {44CC060E-FAA8-498C-EC02-591EA8C240B2} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Norton AntiVirus (Enabled) {96F5A003-BE88-6851-3AAD-B25C2F288CAB} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) 3Dconnexion 3DxSoftware (HKLM\...\{33ED10BD-9487-42AD-B7BD-FF59720BFE8F}) (Version: 10.7.0.3248 - 3Dconnexion) Hidden 3Dconnexion 3DxWare 10 (HKLM-x32\...\{744090d6-c3c2-4e89-be00-cf032cd91b5b}) (Version: 10.7.0.3248 - 3Dconnexion) 3Dconnexion 3DxWinCore (HKLM\...\{B3DD0E90-39FD-469E-A89B-C86E54B210BA}) (Version: 17.7.0.17687 - 3Dconnexion) Hidden 3Dconnexion Add-In for AutoCAD (HKLM\...\{21104677-38A6-4A6E-989C-DB4DA9D3D708}) (Version: 5.7.0.17123 - 3Dconnexion) Hidden 3Dconnexion Add-In for Autodesk Inventor (HKLM\...\{B77BF74F-D283-4B17-A348-1F2328727862}) (Version: 2.3.1.17247 - 3Dconnexion) Hidden 3Dconnexion Add-In for Microsoft Office (HKLM\...\{B7BCB90E-000F-481D-9316-5BC1DF4A2D49}) (Version: 1.0.2.16923 - 3Dconnexion) Hidden 3Dconnexion Add-In for Solid Edge (HKLM\...\{5A69C62A-B2C9-4FDF-87DA-3C4F3B58EFF4}) (Version: 3.6.3 - 3Dconnexion) Hidden 3Dconnexion Add-In for SOLIDWORKS (HKLM\...\{EC33F73B-2982-4C1F-8D7E-A3B18E91352E}) (Version: 3.5.7.17581 - 3Dconnexion) Hidden 3Dconnexion Assembly Demo (HKLM-x32\...\{6AC5E623-5E87-426A-8E6A-353D5DB1D250}) (Version: 0.9.8.0 - 3Dconnexion) Hidden 3Dconnexion Collage (HKLM-x32\...\{F2B60FA6-7872-4FF9-A8C9-97C79B8ED7A0}) (Version: 1.3.2.745 - 3Dconnexion) Hidden 3Dconnexion Extension for SketchUp (HKLM\...\{1F597AA0-762A-4FB4-9DD2-E869FD00B4D6}) (Version: 5.1.1.17222 - 3Dconnexion) Hidden 3Dconnexion LCD Applets for SpacePilot Pro (HKLM\...\{E937DA80-FBD4-4AF9-8080-86CFDCAC9C68}) (Version: 1.5.1 - 3Dconnexion) Hidden 3Dconnexion Navigation Library Server (HKLM-x32\...\{BB9B3F9C-6028-4EBB-88DD-5881D94D7355}) (Version: 1.4.0.17559 - 3Dconnexion) Hidden 3Dconnexion Plug-In for 3ds Max 2014 - 2021 (HKLM\...\{4227B60E-7524-48A0-B445-0E68F86CB766}) (Version: 7.0.5.17655 - 3Dconnexion) Hidden 3Dconnexion Plug-in for Acrobat 3D (HKLM-x32\...\{92EBA652-2941-4D20-8CD8-EC6A0019F7FD}) (Version: 1.4.2 - 3Dconnexion) Hidden 3Dconnexion Plug-In for Creo 2.0 - Creo 7.0 (HKLM\...\{19FBDDC6-A98C-4E6D-9FD6-375192944C03}) (Version: 2.4.3 - 3Dconnexion) Hidden 3Dconnexion Plug-In for Maya 2014 - 2020 (HKLM\...\{84C489F0-C143-4BFD-9D6B-C8FF29F09F9E}) (Version: 6.0.5.17211 - 3Dconnexion) Hidden 3Dconnexion Plug-In for NX 8.0 - 1926 Series (HKLM\...\{E8CF56C0-5E8C-4177-AC7D-07F388133810}) (Version: 3.4.17.17618 - 3Dconnexion) Hidden 3Dconnexion Plug-In for Photoshop (HKLM\...\{2FC9AC41-9A65-44F7-8EA2-BD3A818AFF46}) (Version: 2.9.4.17509 - 3Dconnexion) Hidden 3Dconnexion Trainer (HKLM-x32\...\{5158E770-0862-478B-ADC3-E22B33061A86}) (Version: 3.2.7.17569 - 3Dconnexion) Hidden 3Dconnexion Viewer (HKLM\...\{538BA876-44A3-48B3-BE6C-B2439B824ECC}) (Version: 1.0.0.40 - 3Dconnexion) Hidden 3DEXPERIENCE Marketplace for SOLIDWORKS (HKLM\...\{0060450C-5B44-424B-BD42-559F2A5D820A}) (Version: 6.30.125 - Dassault Systemes SolidWorks Corp) 7-Zip 22.01 (x64 edition) (HKLM\...\{23170F69-40C1-2702-2201-000001000000}) (Version: 22.01.00.0 - Igor Pavlov) Adobe Acrobat Reader - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 23.001.20064 - Adobe Systems Incorporated) Adobe Connect (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Adobe Connect App) (Version: 2020.1.5.32 - Adobe Systems Inc.) Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601042}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden Akamai NetSession Interface (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Akamai) (Version: - Akamai Technologies, Inc) Amazon Kindle (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Amazon Kindle) (Version: 1.26.0.55076 - Amazon) AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 20.Q3 - Advanced Micro Devices, Inc.) ARMOURY CRATE Lite Service (HKLM\...\{EF3944FF-2501-4568-B15C-5701E726719E}) (Version: 5.3.3 - ASUS) ASUS AIOFan HAL (HKLM\...\{EAE80DED-1A39-41C5-9F60-87CC947F6454}) (Version: 1.1.40.0 - ASUSTek COMPUTER INC.) Hidden ASUS AIOFan HAL (HKLM-x32\...\{10f6ee35-55c3-46eb-91a6-816ce9af34c7}) (Version: 1.1.40.0 - ASUSTek COMPUTER INC.) Hidden ASUS AURA Display Component (HKLM\...\{AFD1CF98-FE97-434C-A095-9F27C5BEA53C}) (Version: 1.1.29.0 - ASUSTek COMPUTER INC. ) Hidden ASUS AURA Display Component (HKLM-x32\...\{c5669622-d369-4e19-ae7b-d6b33d469f2d}) (Version: 1.1.29.0 - ASUSTek COMPUTER INC. ) Hidden ASUS AURA Extension Card HAL (HKLM\...\{237E1CAC-1708-4940-AC34-DF15C079AB70}) (Version: 1.1.0.20 - ASUSTeK COMPUTER INC.) Hidden ASUS AURA Extension Card HAL (HKLM-x32\...\{49c4358d-054e-4cf1-9ec1-dca3487f304a}) (Version: 1.1.0.20 - ASUSTeK COMPUTER INC.) Hidden ASUS AURA Headset Component (HKLM\...\{A3C4120D-8096-4307-91A2-FFE37EBD5A3D}) (Version: 1.3.21.0 - ASUSTek COMPUTER INC.) Hidden ASUS AURA Headset Component (HKLM-x32\...\{d9f0b2e5-d90e-4a4e-b48b-71ec72276b78}) (Version: 1.3.21.0 - ASUSTek COMPUTER INC.) Hidden ASUS AURA Motherboard HAL (HKLM\...\{4EBEAC95-76BC-46A8-8644-6E2F1C87CF70}) (Version: 1.2.8.0 - ASUSTeK COMPUTER INC.) Hidden ASUS AURA Motherboard HAL (HKLM-x32\...\{c289ca16-807e-4373-92c3-29ef5dc2119a}) (Version: 1.2.8.0 - ASUSTeK COMPUTER INC.) Hidden ASUS AURA Odd Component (HKLM\...\{B5E322FB-C191-463E-BDDD-4F22290EDFDB}) (Version: 1.0.9.0 - ASUSTeK COMPUTER INC.) Hidden ASUS AURA Odd Component (HKLM-x32\...\{1eb761c4-2177-4d27-9299-5befbbd97df1}) (Version: 1.0.9.0 - ASUSTeK COMPUTER INC.) Hidden ASUS Aura SDK (HKLM\...\{CF8E6E00-9C03-4440-81C0-21FACB921A6B}) (Version: 3.04.11 - ASUSTek COMPUTER INC.) Hidden ASUS AURA VGA Component (HKLM\...\{71BB96A6-EAC4-45AE-A17D-D3ED43FF1D14}) (Version: 0.0.4.6 - ASUSTek COMPUTER INC. ) Hidden ASUS AURA VGA Component (HKLM-x32\...\{412001c7-7535-4454-9531-ea12ec686ba9}) (Version: 0.0.4.6 - ASUSTek COMPUTER INC. ) Hidden ASUS Framework Service (HKLM-x32\...\{339A6383-7862-46DA-8A9D-E84180EF9424}) (Version: 3.1.1.0 - ASUSTeK Computer Inc.) ASUS Keyboard HAL (HKLM\...\{0FA0CDEE-5DC8-421E-A97D-C74FA6E66FC3}) (Version: 1.1.45.0 - ASUSTek COMPUTER INC.) Hidden ASUS Keyboard HAL (HKLM-x32\...\{06ae42a2-6f44-4afa-89a1-4dcc67486773}) (Version: 1.1.45.0 - ASUSTek COMPUTER INC.) Hidden ASUS MB Peripheral Products (HKLM\...\{BFED9861-7D96-4528-89F1-B090ABBF11A7}) (Version: 1.0.35 - ASUSTeK Computer Inc.) Hidden ASUS MB Peripheral Products (HKLM-x32\...\{193a2068-8738-4276-ab1b-9133f9403487}) (Version: 1.0.35 - ASUSTeK Computer Inc.) Hidden ASUS Mouse HAL (HKLM\...\{B8F984F2-7887-4DD2-8D96-F9A4BC5A4AC5}) (Version: 1.1.0.42 - ASUSTek COMPUTER INC.) Hidden ASUS Mouse HAL (HKLM-x32\...\{9b707cef-7f70-4fe9-bd9c-363110a6f538}) (Version: 1.1.0.42 - ASUSTek COMPUTER INC.) Hidden ASUS MousePad HAL (HKLM\...\{723B40A4-5BF2-4DC6-834A-2ADF75F3CF7E}) (Version: 1.0.2.5 - ASUSTek COMPUTER INC.) Hidden ASUS MousePad HAL (HKLM-x32\...\{938b2a3e-f708-467b-bce7-8e6075bbf66d}) (Version: 1.0.2.5 - ASUSTek COMPUTER INC.) Hidden Asus ProductDaemonSetup (HKLM\...\{36606417-B1C4-42C2-B5C1-67972DA63DAB}) (Version: 3.6.2001 - ASUSTeK COMPUTER INC) Hidden Asus Sonic Radar 3 (HKLM-x32\...\{03578a87-5019-45bd-995a-0f27d579a180}) (Version: 3.6.20.45572 - ASUSTeK COMPUTER INC) Asus Sonic Studio 3 (HKLM-x32\...\{31ef8b8e-8686-4b42-a8f9-71206319efdf}) (Version: 3.6.20.45572 - ASUSTeK COMPUTER INC) Asus SonicRadar3Setup (HKLM\...\{E71A86BF-6EA5-42D2-A735-F41C603FB180}) (Version: 3.6.20.45572 - ASUSTeK COMPUTER INC) Hidden Asus SonicStudio3Setup (HKLM\...\{D027E5BB-DDAE-4CD9-A030-B3C0EF5FB602}) (Version: 3.6.20.45572 - ASUSTeK COMPUTER INC) Hidden ASUS Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.107.93 - ASUSTeK Computer Inc.) Hidden Audacity 3.2.5 (HKLM-x32\...\Audacity_is1) (Version: 3.2.5 - Audacity Team) AURA (HKLM-x32\...\{5899CD4F-8764-4303-A0D9-C60A62CFC24F}) (Version: 1.04.17 - ASUSTeK Computer Inc.) AURA DRAM Component (HKLM\...\{9AFE5429-866B-457D-A864-80BCF7672EE8}) (Version: 1.1.07 - ASUS) Hidden AURA DRAM Component (HKLM-x32\...\{5b6f6255-822a-4273-b533-c6273ca7e45e}) (Version: 1.1.07 - ASUS) Hidden AURA Service (HKLM-x32\...\{0E536061-3B55-4D45-BF58-0BDA261C94B0}) (Version: 3.05.40 - ASUSTeK Computer Inc.) Hidden AURA Service (HKLM-x32\...\{a1318319-c95b-48da-beb8-63ed6e4d809a}) (Version: 3.05.40 - ASUSTeK Computer Inc.) AusweisApp2 (HKLM\...\{C76897D9-D067-40B9-AFB7-EEE93286958C}) (Version: 1.26.2 - Governikus GmbH & Co. KG) Autodesk Design Review 2013 (HKLM-x32\...\Autodesk Design Review 2013) (Version: 13.0.0.82 - Autodesk, Inc.) Autodesk Desktop-App (HKLM-x32\...\Autodesk Desktop App) (Version: 7.0.6.378 - Autodesk) Autodesk DWG TrueView 2017 - English (HKLM\...\DWG TrueView 2017 - English) (Version: 21.0.52.0 - Autodesk) Autodesk Fusion 360 (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\73e72ada57b7480280f7a6f4a289729f) (Version: 2.0.12392 - Autodesk, Inc.) Autodesk Inventor Content Center Libraries 2017 (Desktop Content) (HKLM\...\{B46DECD1-2164-4EF1-0000-22D71E81877C}) (Version: 21.0.14200.0000 - Autodesk) Autodesk Material Library Base Resolution Image Library 2017 (HKLM-x32\...\{3FBFBC43-9882-43FA-B979-2D53896747B3}) (Version: 15.11.3.0 - Autodesk) Autodesk Revit Interoperability for Inventor 2017 (HKLM\...\{0BB716E0-1700-0210-0000-097DC2F354DF}) (Version: 17.0.411.0 - Autodesk) Hidden Autodesk Revit Interoperability for Inventor 2017 (HKLM\...\Autodesk Revit Interoperability for Inventor 2017) (Version: 17.0.411.0 - Autodesk) Autodesk Vault Basic 2017 (Client) (HKLM\...\{CF526A26-2264-0000-0000-02E95019B628}) (Version: 22.0.48.0 - Autodesk) Hidden Autodesk Vault Basic 2017 (Client) (HKLM\...\Autodesk Vault Basic 2017 (Client)) (Version: 22.0.48.0 - Autodesk) Autodesk Vault Basic 2017 (Client) German Language Pack (HKLM\...\{266597A9-2264-0000-1031-DCBF2B69166B}) (Version: 22.0.48.0 - Autodesk) Hidden balenaEtcher 1.7.9 (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\d2f3b6c7-6f49-59e2-b8a5-f72e33900c2b) (Version: 1.7.9 - Balena Inc.) Blackmagic RAW Common Components (HKLM\...\{BF73F11D-8A70-438B-A357-38E1F1A62164}) (Version: 2.8 - Blackmagic Design) Blender (HKLM\...\{B1DF3793-1651-4AE5-9CA0-E845DD8B526B}) (Version: 2.79.0 - Blender Foundation) Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) Bridge 2021.0.3 (HKLM\...\{d31b3501-1485-515e-b9cc-ec663e464c2a}) (Version: 2021.0.3 - Quixel) CADClick® Click2CAD Toolbox (HKLM-x32\...\{5492C79F-4AFF-44C8-A5A4-D65F10FF9DDB}) (Version: 2.5.4.0 - KiM GmbH) calibre (HKLM-x32\...\{D3CF17E8-ECE2-4B16-86D3-1C6B2F94BF8C}) (Version: 5.44.0 - Kovid Goyal) Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version: 1.5.4.4 - Canon Inc.) Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 5.4.0 - Canon Inc.) Canon iP7200 series On-screen Manual (HKLM-x32\...\Canon iP7200 series On-screen Manual) (Version: 7.5.0 - Canon Inc.) Canon iP7200 series Printer Driver (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP7200_series) (Version: - Canon Inc.) Canon MG5700 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5700_series) (Version: 1.00 - Canon Inc.) ChiTuBox 1.3 (HKLM-x32\...\ChiTuBox 1.3) (Version: - ) Cisco Secure Client - AnyConnect VPN (HKLM-x32\...\Cisco Secure Client - AnyConnect VPN) (Version: 5.0.01242 - Cisco Systems, Inc.) Cisco Secure Client - AnyConnect VPN (HKLM-x32\...\{026EB653-E5BC-42D4-9A3F-C42D89E4B8DE}) (Version: 5.0.01242 - Cisco Systems, Inc.) Hidden Cisco Webex Meetings (HKLM-x32\...\{A9EF0A0A-30E4-3BD3-C572-E83376A796E9}) (Version: 41.2.3.17 - Cisco Webex LLC) Citavi 6 (HKLM-x32\...\{6A331045-8FF4-4BC9-9C56-E593ACAE28C2}) (Version: 6.14.4.0 - Swiss Academic Software) Code_Aster v2021 (HKLM-x32\...\{8183D402-E834-4C08-B8D8-2EDBA7B22518}) (Version: 0.0.2021.0 - Simulease) Corsair LINK 4 (HKLM-x32\...\{40036d0c-634b-4fc0-be89-13343b4bea96}) (Version: 4.9.7.35 - Corsair Components, Inc.) Corsair LINK 4 (HKLM-x32\...\{D97F4B31-5A7D-4A07-AC85-16D64FAB93E1}) (Version: 4.9.7.35 - Corsair Components, Inc.) Hidden Corsair Utility Engine (HKLM-x32\...\{01546DEE-62C6-4881-B97B-99A06A10C4FF}) (Version: 2.19.65 - Corsair) CPUID ROG CPU-Z 1.86 (HKLM\...\CPUID ROG CPU-Z_is1) (Version: 1.86 - CPUID, Inc.) CrystalDiskInfo 8.17.11 (HKLM\...\CrystalDiskInfo_is1) (Version: 8.17.11 - Crystal Dew World) CrystalDiskMark 8.0.4c (HKLM\...\CrystalDiskMark8_is1) (Version: 8.0.4c - Crystal Dew World) Dassault Systemes Software Prerequisites x86-x64 (HKLM\...\{CF1EB598-B424-436A-B15F-B763846BA970}) (Version: 8.1.3 - Dassault Systemes) Dassault Systemes Software VC9 Prerequisites x86-x64 (HKLM\...\{F2F2DEA7-36AB-4E13-907C-D8BDE775EF97}) (Version: 9.1.2 - Dassault Systemes) DaVinci Resolve (HKLM\...\{F3B6228C-4E5C-4ADB-BE3D-0B8684928424}) (Version: 18.1.10007 - Blackmagic Design) DaVinci Resolve Control Panels (HKLM\...\{85AC7A9F-9630-42FD-AA1C-58329AB4B7D3}) (Version: 2.0.5.0 - Blackmagic Design) DELFTship (HKLM\...\{3FA68F61-2E56-46D9-A349-3080CFCE1512}) (Version: 9.30.307 - DELFTship Marine Software) Discord (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Discord) (Version: 0.0.311 - Discord Inc.) DroidCam Client (HKLM-x32\...\DroidCam) (Version: 6.5.2 - DEV47APPS) Eco Materials Adviser for Autodesk Inventor 2017 (64-bit) (HKLM\...\{05D87862-35C9-4CB4-92EC-8A1FC97BFF6C}) (Version: 6.4.9.0 - Granta Design Limited) ENE RGB HAL (HKLM\...\{E050E98C-5524-4AFB-9E53-97700BEF2C02}) (Version: 1.1.39.18 - Ene Tech.) Hidden ENE RGB HAL (HKLM-x32\...\{cf6be873-4fda-41b6-87c1-54f5f726365d}) (Version: 1.1.39.18 - Ene Tech.) Hidden ENE_DRAM_RGB_AIO (HKLM\...\{1745D314-9077-46C9-8562-1C62BAE189B7}) (Version: 1.0.3.37 - Ene Tech.) Hidden ENE_DRAM_RGB_AIO (HKLM-x32\...\{f0dbd606-5cc4-469e-87f1-351c2eb23219}) (Version: 1.0.3.37 - Ene Tech.) Hidden ENE_ESD_ASM_HAL (HKLM\...\{3934CCB9-0204-4763-993F-6189B5F95EDF}) (Version: 1.0.9.5 - ENE TECHNOLOGY INC.) Hidden ENE_ESD_ASM_HAL (HKLM-x32\...\{b877119b-682b-444a-92a5-9ea4a54cfdc3}) (Version: 1.0.9.5 - ENE TECHNOLOGY INC.) Hidden ENE_X-JMI_HAL (HKLM\...\{2B8E611F-0B51-4FAC-87BB-AF50D82E7DDA}) (Version: 1.0.5.1 - ENE Tech) Hidden ENE_X-JMI_HAL (HKLM-x32\...\{50ec3a07-291b-463e-be86-487eb8cbb71c}) (Version: 1.0.5.1 - ENE Tech) Hidden Epic Games Launcher (HKLM-x32\...\{2A27CA16-E158-4B0A-A502-3E6364B1F03E}) (Version: 1.2.17.0 - Epic Games, Inc.) Epic Online Services (HKLM-x32\...\{32C68D93-D32F-4B01-8250-61642BFC22F8}) (Version: 2.0.28.0 - Epic Games, Inc.) E-YOOSO-X11 (HKLM-x32\...\{E3BF2376-C649-4F82-AD70-E3BB38E6F4D4}_is1) (Version: 3.1 - E-YOOSO) FAHClient (HKLM-x32\...\FAHClient) (Version: 7.5.1 - Folding@home.org) FANATEC driver package (HKLM\...\{A59927C9-C18D-4EEE-9EB3-0055D1815052}) (Version: 8.34.6 - Endor AG Fanatec) FARO LS 1.1.505.0 (64bit) (HKLM-x32\...\{8834451B-6209-4E02-9EF4-4EF9E3C1F70F}) (Version: 5.5.0.44203 - FARO Scanner Production) Flight Yoke System (HKLM\...\{A7ED1C9E-7EDC-40DF-A086-6B7A183801EC}) (Version: 8.0.150.0 - Logitech) FlightGear v2018.2.2 (HKLM\...\FlightGear_is1) (Version: - The FlightGear Team) FormIt 360 (HKLM\...\{D37622FA-6A22-47F5-BE90-4A0EE84BA898}) (Version: 15.1.235.0 - Autodesk) Futuremark SystemInfo (HKLM-x32\...\{032DC00A-51D1-4D28-BFB7-1D0E85291E11}) (Version: 4.25.366 - Futuremark) G.SKILL (HKLM-x32\...\{7D0C0C2B-7660-4463-A29A-150C45CAA287}) (Version: 1.00.28 - G.SKILL International Enterprise) Geekbench 4 (HKLM-x32\...\Geekbench 4) (Version: - Primate Labs Inc.) GIMP 2.10.34 (HKLM\...\GIMP-2_is1) (Version: 2.10.34 - The GIMP Team) Git (HKLM\...\Git_is1) (Version: 2.39.2 - The Git Development Community) GO Contact Sync Mod (HKLM-x32\...\{AC227C6F-C7E5-470B-A0E9-7DF8CB3070BD}) (Version: 4.1.32 - WebGear Ltd, New Zealand + Create Software + Stru.be + saller.NET + Big-R + obelix30) Google Chrome (HKLM\...\{4880565C-146E-303F-9477-710497DFB2E2}) (Version: 111.0.5563.65 - Google LLC) Google Keep (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\89b2963a4806c4bf0f69afc861c8759e) (Version: 1.0 - Google\Chrome) Imaging Edge (Remote/Viewer/Edit) (HKLM\...\{362241E2-0592-4BFD-9A56-AE9A95729EC1}) (Version: 2.0.01.09170 - Sony Imaging Products & Solutions, Inc.) Imaging Edge Desktop (HKLM\...\{9AF97938-E455-44AE-8FD2-FB5FFE2F6B54}) (Version: 1.0.00.12110 - Sony Imaging Products & Solutions Inc.) Inkscape (HKLM-x32\...\Inkscape) (Version: 1.2.2- - Inkscape) Inventor Connected Desktop for A360 (HKLM\...\{1FA52755-1FBC-0001-0330-7CEA1F3736D8}) (Version: 3.30.0 - Autodesk) Java 8 Update 181 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180181F0}) (Version: 8.0.1810.13 - Oracle Corporation) Java 8 Update 181 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180181F0}) (Version: 8.0.1810.13 - Oracle Corporation) Java 8 Update 361 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180361F0}) (Version: 8.0.3610.9 - Oracle Corporation) Java 8 Update 361 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180361F0}) (Version: 8.0.3610.9 - Oracle Corporation) Java SE Development Kit 8 Update 181 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180181}) (Version: 8.0.1810.13 - Oracle Corporation) KeyShot 10 (HKLM\...\KeyShot 10) (Version: 10.2.113 - Luxion ApS) Kingston AURA DRAM Component (HKLM\...\{965CDF5F-901C-476F-B3A8-7396701B1129}) (Version: 1.1.5 - KINGSTON COMPONENTS INC.) Hidden Kingston AURA DRAM Component (HKLM-x32\...\{9372ad14-df78-4cf2-86fe-e7a8c1c42107}) (Version: 1.1.5 - KINGSTON COMPONENTS INC.) Hidden Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden Leawo Blu-ray Player Version 1.9.6.2 (HKLM-x32\...\{CF7F52BF-DEE0-44CD-A7E1-AADD5CCECCDD}_is1) (Version: 1.9.6.2 - Leawo Software) LinuxLive USB Creator (HKLM-x32\...\LinuxLive USB Creator) (Version: 2.9 - Thibaut Lauziere) Logitech LCD Manager (HKLM\...\{F469B548-030B-41CD-BD46-D37A7EC9A530}) (Version: 3.06.109 - Logitech Inc.) Hidden Luminar 4 (HKLM\...\Luminar 4) (Version: 4.3.3.7895 - Skylum) Luminar Neo (HKLM\...\Luminar Neo) (Version: 1.6.4.10948 - Skylum) MacroRecorder v2.0.74 (HKLM-x32\...\MacroRecorder_is1) (Version: 2.0.74 - Bartels Media GmbH) MATLAB R2022b (HKLM\...\MATLAB R2022b) (Version: 9.13 - MathWorks) MDESIGN 2018 (HKLM-x32\...\MDESIGN explorer 17) (Version: 17 - TEDATA) MDESIGN 2022 - Second Edition (HKLM\...\MDESIGN explorer 19) (Version: 19 - TEDATA) MediathekView 13.9.1 (HKLM\...\1927-5045-2127-3394) (Version: 13.9.1 - MediathekView Team) Microsoft .NET Host - 6.0.14 (x64) (HKLM\...\{40D4EC44-91F8-4EEE-869E-F4B3E90E6688}) (Version: 48.59.55225 - Microsoft Corporation) Hidden Microsoft .NET Host FX Resolver - 6.0.14 (x64) (HKLM\...\{D1726E78-81F3-40A2-A7AF-6286BAA49B1C}) (Version: 48.59.55225 - Microsoft Corporation) Hidden Microsoft .NET Runtime - 6.0.14 (x64) (HKLM\...\{61202CF9-3B84-4E5A-91A1-2984FAE38259}) (Version: 48.59.55225 - Microsoft Corporation) Hidden Microsoft 365 Apps for Enterprise - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.15601.20538 - Microsoft Corporation) Microsoft Access database engine 2010 (English) (HKLM\...\{90140000-00D1-0409-1000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 110.0.1587.69 - Microsoft Corporation) Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 110.0.1587.69 - Microsoft Corporation) Microsoft ODBC Driver 11 for SQL Server (HKLM\...\{BF5ABBDB-D3AA-4BCB-8D10-FCD4A4BB7F93}) (Version: 12.1.4100.1 - Microsoft Corporation) Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 23.038.0219.0001 - Microsoft Corporation) Microsoft SQL Server 2008 Native Client (HKLM\...\{C79A7EAB-9D6F-4072-8A6D-F8F54957CD93}) (Version: 10.0.1600.22 - Microsoft Corporation) Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{6292D514-17A4-403F-98F9-E150F10C043D}) (Version: 10.3.5500.0 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (HKLM\...\{49D665A2-4C2A-476E-9AB8-FCC425F526FC}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft SQL Server 2014 (64-bit) (HKLM\...\Microsoft SQL Server SQLServer2014) (Version: - Microsoft Corporation) Microsoft SQL Server 2014 RsFx Driver (HKLM\...\{655A4169-5BB6-44B0-A9BA-4CBE23A412AA}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden Microsoft SQL Server 2014 Setup (English) (HKLM\...\{C7E2483C-10A4-41E3-A2F6-240186FE3E41}) (Version: 12.1.4100.1 - Microsoft Corporation) Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{FF7DDA05-6EA7-4C01-B44A-3E57F8B9B97B}) (Version: 12.1.4100.1 - Microsoft Corporation) Microsoft Teams (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Teams) (Version: 1.6.00.1381 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{89581302-705F-42C5-99B0-E368A845DAD5}) (Version: 3.70.0.0 - Microsoft Corporation) Microsoft Visual Basic for Applications 7.1 (x64) (HKLM\...\{07C0BFE1-3291-409C-B96A-797340719C8F}) (Version: 7.1.10.96 - Microsoft Corporation) Hidden Microsoft Visual Basic for Applications 7.1 (x64) English (HKLM\...\{826216B1-0F04-409B-A33E-C6A004AA1097}) (Version: 7.1.10.96 - Microsoft Corporation) Hidden Microsoft Visual Basic for Applications 7.1 (x64) German (HKLM\...\{3577C582-28BF-47CF-A134-0F4E2C3A6148}) (Version: 7.1.10.96 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 x64 ATL Runtime 9.0.30729 (HKLM-x32\...\{C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4}) (Version: 9.0.30729 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 x64 CRT Runtime 9.0.30729 (HKLM-x32\...\{F6F09DD8-F39B-3A16-ADB9-C9E6B56903F9}) (Version: 9.0.30729 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 x64 MFC Runtime 9.0.30729 (HKLM-x32\...\{6DA2B636-698A-3294-BF4A-B5E11B238CDD}) (Version: 9.0.30729 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 x64 OpenMP Runtime 9.0.30729 (HKLM-x32\...\{8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF}) (Version: 9.0.30729 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 x86 ATL Runtime 9.0.30729 (HKLM-x32\...\{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}) (Version: 9.0.30729 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 x86 CRT Runtime 9.0.30729 (HKLM-x32\...\{14866AAD-1F23-39AC-A62B-7091ED1ADE64}) (Version: 9.0.30729 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 x86 MFC Runtime 9.0.30729 (HKLM-x32\...\{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}) (Version: 9.0.30729 - Microsoft Corporation) Hidden Microsoft Visual C++ 2008 x86 OpenMP Runtime 9.0.30729 (HKLM-x32\...\{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}) (Version: 9.0.30729 - Microsoft Corporation) Hidden Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation) Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.34.31931 (HKLM-x32\...\{d4cecf3b-b68f-4995-8840-52ea0fab646e}) (Version: 14.34.31931.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.31.31103 (HKLM-x32\...\{41d7b770-418a-43b7-95a5-f925fff05789}) (Version: 14.31.31103.0 - Microsoft Corporation) Microsoft Visual C++ 2022 X64 Additional Runtime - 14.34.31931 (HKLM\...\{EAE242B1-0A26-485A-BFEB-0292EE9F03CB}) (Version: 14.34.31931 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.34.31931 (HKLM\...\{CF4C347D-954E-4543-88D2-EC17F07F466F}) (Version: 14.34.31931 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Additional Runtime - 14.31.31103 (HKLM-x32\...\{5720EC03-F26F-40B7-980C-50B5D420B5DE}) (Version: 14.31.31103 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.31.31103 (HKLM-x32\...\{799E3FFF-705C-461F-B400-6DE27398B3E5}) (Version: 14.31.31103 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{C3600AE6-93A0-3DB7-B7AA-45BD58F133B5}) (Version: 10.0.31124 - Microsoft Corporation) Hidden Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.31119 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2015 (HKLM-x32\...\{ab213ab7-4792-4c6f-a3fa-8485d06c3475}) (Version: 14.0.23829 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2015 Finalizer (HKLM-x32\...\{F93E37BD-4053-37CA-A7BB-A5B74508006C}) (Version: 14.0.23829 - Microsoft Corporation) Hidden Microsoft Visual Studio Tools for Applications 2015 x64 Hosting Support (HKLM\...\{A8C30947-7C1B-3A31-8FD8-CEC6D3357D34}) (Version: 14.0.23829 - Microsoft Corporation) Hidden Microsoft Visual Studio Tools for Applications 2015 x86 Hosting Support (HKLM-x32\...\{11A9EF3E-6616-31B1-82BC-1080366FA34D}) (Version: 14.0.23829 - Microsoft Corporation) Hidden Microsoft VSS Writer for SQL Server 2014 (HKLM\...\{366CD715-2FF4-40B4-A8B4-A05E5D21A945}) (Version: 12.1.4100.1 - Microsoft Corporation) Microsoft Windows Desktop Runtime - 6.0.14 (x64) (HKLM\...\{424D9E0C-14D9-4D4B-9562-845689D972F6}) (Version: 48.59.55235 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 6.0.14 (x64) (HKLM-x32\...\{c4558324-5b32-43fc-9ac2-423fee96dae0}) (Version: 6.0.14.32124 - Microsoft Corporation) Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft) MiKTeX (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\MiKTeX) (Version: 21.6 - MiKTeX.org) MouseRecorder v1.0.52 (HKLM-x32\...\MouseRecorder_is1) (Version: 1.0.52 - Bartels Media GmbH) MovieRescuer version 1.0.0.0 (HKLM-x32\...\{88AA82F3-0570-4d68-A425-0115896479A4}_is1) (Version: - ) MSI Afterburner 4.6.1 (HKLM-x32\...\Afterburner) (Version: 4.6.1 - MSI Co., LTD) Müller Foto (HKLM-x32\...\Müller Foto) (Version: 6.3.6 - CEWE Stiftung u Co. KGaA) NordVPN (HKLM\...\{19465C24-3D5D-4327-B99F-3CC0A1D38151}_is1) (Version: 6.40.5.0 - TEFINCOM S.A.) NordVPN network TAP (HKLM-x32\...\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}) (Version: 1.0.1 - NordVPN) NordVPN network TUN (HKLM\...\{BD0E4F38-D3F6-452D-A32E-B14D721839AC}) (Version: 1.0.1 - NordVPN) Norton AntiVirus (HKLM-x32\...\NGC) (Version: 22.23.1.21 - NortonLifeLock Inc) NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation) OBS Studio (HKLM-x32\...\OBS Studio) (Version: 22.0.2 - OBS Project) Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.15726.20202 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.16026.20200 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.15726.20202 - Microsoft Corporation) Hidden OpenAL (HKLM-x32\...\OpenAL) (Version: - ) Outlook4Gmail 5.1.2 (HKLM-x32\...\{6A53C42D-DCCD-46B7-9143-51071726A6F6}_is1) (Version: - Scand Ltd.) Overwolf (HKLM-x32\...\Overwolf) (Version: 0.166.1.13 - Overwolf Ltd.) P7-S1 (HKLM-x32\...\{5BF95E69-5133-4A4A-8217-58BAF7B3B798}_is1) (Version: 1.00 - AeroCool) Patriot Viper DRAM RGB (HKLM\...\{1F9C282E-CCB4-4D8E-A5CB-7B74DFCD8C95}) (Version: 1.0.8.4 - Patriot Memory) Hidden Patriot Viper DRAM RGB (HKLM-x32\...\{71fce76d-64e1-445d-872c-6870aa23db64}) (Version: 1.0.8.4 - Patriot Memory) Patriot Viper M2 SSD RGB (HKLM\...\{8B4C0A3D-C135-4E1F-98D8-3926494B4D61}) (Version: 1.0.6.3 - Patriot Memory) Hidden Patriot Viper M2 SSD RGB (HKLM-x32\...\{8839fbd5-69f9-41c5-a1cf-cdfbec966d66}) (Version: 1.0.6.3 - Patriot Memory) PDF24 Creator 8.6.1 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org) PDFCreator (HKLM\...\{8960FCDD-66D4-4180-A172-1AD0DD1A075A}) (Version: 5.0.3 - pdfforge GmbH) PHISON HAL (HKLM\...\{966E33F0-6786-4B38-AA29-C1B3F6C1955D}) (Version: 1.0.6.0 - PHISON Electronics Corp.) Hidden PHISON HAL (HKLM-x32\...\{c8f7044c-7f48-404a-9a5d-9f038f28a789}) (Version: 1.0.6.0 - PHISON Electronics Corp.) Hidden PTC Creo 4 Platform Services (HKLM\...\{3AE3FF54-B5A6-4234-BF96-6E1DA66214DF}) (Version: 1.0.201 - PTC) Hidden PTC Creo 4 Platform Services (HKLM-x32\...\{1a6ea568-5726-4d5b-aa3a-56fd27d711dc}) (Version: 1.0.217 - PTC) PTC Creo Direct Version 4.0 Datecode [M020] (HKLM-x32\...\PTC Creo Direct Version 4.0 Datecode [M020]) (Version: 4.0 - PTC) PTC Creo Layout Version 4.0 Datecode [M020] (HKLM-x32\...\PTC Creo Layout Version 4.0 Datecode [M020]) (Version: 4.0 - PTC) PTC Creo Parametric Version 4.0 Datecode [M020] (HKLM-x32\...\PTC Creo Parametric Version 4.0 Datecode [M020]) (Version: 4.0 - PTC) PTC Creo Platform Agent (HKLM\...\{4222796F-D948-4290-9BF3-263951ACFF20}) (Version: 1.0.105 - PTC) Hidden PTC Creo Simulate Version 4.0 Datecode [M020] (HKLM-x32\...\PTC Creo Simulate Version 4.0 Datecode [M020]) (Version: 4.0 - PTC) PTC Creo Thumbnail Viewer 4.0 (HKLM\...\{BCAAF4D3-F486-4B19-8113-01902B4FBCF1}) (Version: 32.17.110 - PTC) PTC Creo View Express 4.0 (HKLM\...\{C71E9025-8D0D-4AA6-8F55-23D0ED20392E}) (Version: 11.0.0.25 - PTC) PTC Diagnostic Tools (HKLM\...\{D5DF50CC-3FFB-4155-96A0-B3530CB3301B}) (Version: 4.0.0.0 - PTC) Qualcomm Atheros 11ac Wireless LAN Installer (HKLM-x32\...\{20CA507E-24AA-4741-87CF-CC1B250790B7}) (Version: 11.0.10427 - Qualcomm) RaceRoom Racing Experience Launcher (HKLM-x32\...\{1FD9F07F-7BBF-4C91-B3F0-A23714A3A913}_is1) (Version: 1.0 - Sector3 Studios) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8273 - Realtek Semiconductor Corp.) Repetier-Host Version 1.0.5 (HKLM\...\{1143F758-929B-4EEB-8784-46CCB622F037}_is1) (Version: 1.0.5 - repetier) RivaTuner Statistics Server 7.2.2 (HKLM-x32\...\RTSS) (Version: 7.2.2 - Unwinder) ROG Live Service (HKLM\...\{2D87BFB6-C184-4A59-9BBE-3E20CE797631}) (Version: 2.0.6.0 - ASUSTek COMPUTER INC.) Service Pack 1 for SQL Server 2014 (KB3058865) (64-bit) (HKLM\...\KB3058865) (Version: 12.1.4100.1 - Microsoft Corporation) Siemens NX (HKLM\...\{DA3E3F18-6E40-492E-9EDD-49D7C2A0F0BD}) (Version: 19.69.2802.00003 - Siemens) Siemens NX 12.0 (HKLM\...\{3C04623B-A1D4-4390-838B-7A8B58D4221A}) (Version: 12.0.0.27 - Siemens) Siemens NX Launcher (HKLM\...\{1615B762-3993-4F6D-982E-2EE1A8511813}) (Version: 19.53.1700.00000 - Siemens) Siemens Solid Edge 2022 (HKLM\...\{6C0CACD4-043C-44DD-8CB5-F4B7E60BCC97}) (Version: 222.00.00132 - Siemens) Signal 6.8.0 (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\7d96caee-06e6-597c-9f2f-c7bb2e0948b4) (Version: 6.8.0 - Signal Messenger, LLC) Simplify3D Software (HKLM\...\Simplify3D Software 4.1.2) (Version: 4.1.2 - Simplify3D) SOLIDWORKS 2021 German Resources (HKLM\...\{A8E011F9-AB58-4C9C-AB8C-7435C7E04FEB}) (Version: 29.151.0001 - Ihr Firmenname) Hidden SOLIDWORKS 2021 SP05.1 (HKLM\...\{9C0A2571-4AAE-4FEE-B673-038B38B85EFC}) (Version: 29.151.0001 - Dassault Systemes SolidWorks Corp) Hidden SOLIDWORKS 2021 SP05.1 (HKLM-x32\...\SolidWorks Installation Manager 20210-40501-1100-100) (Version: 29.5.1.1 - SolidWorks Corporation) SOLIDWORKS CAM 2021 SP05.1 (HKLM\...\{EFF51C01-6447-44F1-B1C6-567BA8E08A3C}) (Version: 29.51.0001 - Dassault Systèmes SolidWorks Corp) Hidden SOLIDWORKS Composer 2021 SP05.1 (HKLM\...\{670D74D1-A07B-4C70-8E11-18FC4B0BAF7E}) (Version: 29.51.0001 - Ihr Firmenname) Hidden SOLIDWORKS eDrawings 2021 SP05.1 (HKLM\...\{5ADD8EC6-ABFA-498D-8ACC-A678A166A222}) (Version: 29.50.0018 - Dassault Systèmes SolidWorks Corp) Hidden SOLIDWORKS Flow Simulation 2021 SP05.1 (HKLM\...\{BC6FEA11-71C2-4D72-A909-2A94B1179DA3}) (Version: 29.51.0002 - Dassault Systèmes SolidWorks Corp) Hidden SOLIDWORKS Plastics 2021 SP05.1 (HKLM\...\{CE4CA359-906F-4F01-AF89-EB0F83B122F5}) (Version: 29.51.0001 - Ihr Firmenname) Hidden SOLIDWORKS Visualize 2021 SP05.1 (HKLM\...\{C493AED2-A596-43E9-9F47-446B35978A42}) (Version: 29.51.0001 - Ihr Firmenname) Hidden SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - ) SQL Server 2014 Common Files (HKLM\...\{BD1CD96B-FE4B-4EAE-83D4-6EF55AB5779C}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden SQL Server 2014 Common Files (HKLM\...\{F7012F84-80F5-4C25-852E-B1BA03276FE6}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden SQL Server 2014 Database Engine Services (HKLM\...\{17531BCD-C627-46A2-9F1E-7CC920E0E94A}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden SQL Server 2014 Database Engine Services (HKLM\...\{5082A9F3-AEE5-4639-9BA7-C19661BA7331}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden SQL Server 2014 Database Engine Shared (HKLM\...\{ACC530B8-B6B4-40D6-B59B-152468CF47D0}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden SQL Server 2014 Database Engine Shared (HKLM\...\{D1B847A9-B06B-4264-9EF0-78E6E1571E65}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden SQL Server Browser for SQL Server 2014 (HKLM-x32\...\{3204DE95-97D2-4261-A286-98A262E171D4}) (Version: 12.1.4100.1 - Microsoft Corporation) Sql Server Customer Experience Improvement Program (HKLM\...\{6476DB81-F263-4C04-8574-AAD31136C304}) (Version: 12.1.4100.1 - Microsoft Corporation) Hidden Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.5.0.30767 - Microsoft Corporation) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.5.0 - TeamSpeak Systems GmbH) TeamSpeak Overlay (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Overwolf_jnabojaampcpfclojlbildognlnebnhfhibiielh) (Version: 1.0.0.2 - Overwolf app) TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.39.6 - TeamViewer) Trident Z Lighting Control (HKLM-x32\...\{97CD7AFC-0ED3-41B8-9CCD-22717E8631D0}_is1) (Version: 1.00.31 - ENG) UE4 Prerequisites (x64) (HKLM\...\{D7B591D8-1091-4A00-A0B3-5301C45E5D51}) (Version: 1.0.14.0 - Epic Games, Inc.) Hidden UE4 Prerequisites (x64) (HKLM-x32\...\{0d995f46-317b-4b5f-bf3e-9f98bae9d339}) (Version: 1.0.14.0 - Epic Games, Inc.) Hidden Ultimaker Cura 5.1.0 (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Ultimaker Cura 5.1.0) (Version: 5.1.0 - Ultimaker B.V.) Universal Adb Driver (HKLM-x32\...\{C0E08D8D-6076-4117-B644-2AF34F35B757}) (Version: 1.0.4 - ClockworkMod) Universal Holtek RGB DRAM (HKLM\...\{826388E4-E31F-4514-948B-3BB954FB3EAF}) (Version: 1.0.0.1 - PD) Hidden Universal Holtek RGB DRAM (HKLM-x32\...\{68fb2ff9-0618-4948-b68f-9f95e5687067}) (Version: 1.0.0.1 - PD) Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{16AD6161-2E47-4BF1-AA77-0946EFE93E08}) (Version: 2.61.0.0 - Microsoft Corporation) Videodownloader (HKLM-x32\...\{9CC896F1-E6B8-44D7-9E2A-92A0467A0349}) (Version: 1.0.9 - POST Service & Consulting Limited) Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{6DA2B636-698A-3294-BF4A-B5E11B238CDD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{F6F09DD8-F39B-3A16-ADB9-C9E6B56903F9}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{14866AAD-1F23-39AC-A62B-7091ED1ADE64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation) VLC media player (HKLM\...\VLC media player) (Version: 3.0.18 - VideoLAN) Vulkan Run Time Libraries 1.0.54.0 (HKLM\...\VulkanRT1.0.54.0) (Version: 1.0.54.0 - LunarG, Inc.) Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0) (Version: 1.1.70.0 - LunarG, Inc.) Hidden Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0-2) (Version: 1.1.70.0 - LunarG, Inc.) Hidden Wacom Tablett (HKLM\...\Wacom Tablet Driver) (Version: 6.3.27-2 - Wacom Technology Corp.) WD_BLACK AN1500 (HKLM\...\{085E2365-0A70-4230-B664-02D5E4FE7E9C}) (Version: 1.0.12.0 - ENE TECHNOLOGY INC.) Hidden WD_BLACK AN1500 (HKLM-x32\...\{9c94735f-73fd-4b0f-9ddb-8be7b3cc4681}) (Version: 1.0.12.0 - ENE TECHNOLOGY INC.) Hidden WD_BLACK D50 (HKLM\...\{BDE43F26-5917-44F8-B86A-F1D9A6B80B32}) (Version: 1.0.9.0 - ENE TECHNOLOGY INC.) Hidden WD_BLACK D50 (HKLM-x32\...\{a1d1ba00-92b7-4a99-8ebd-65b25c0e9e44}) (Version: 1.0.9.0 - ENE TECHNOLOGY INC.) Hidden Windows Driver Package - Arduino LLC (www.arduino.cc) Arduino USB Driver (01/04/2013 1.0.0.0) (HKLM\...\1E3EA5624DD04BEFECF3FFF6D3A21CCE9CD70A91) (Version: 01/04/2013 1.0.0.0 - Arduino LLC (www.arduino.cc)) Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation) Windows-Treiberpaket - Adafruit Industries LLC (usbser) Ports (02/25/2016 6.2.2600.0) (HKLM\...\1245A5961AC9D2C18ADF9EEC931D77E059B7F74E) (Version: 02/25/2016 6.2.2600.0 - Adafruit Industries LLC) Windows-Treiberpaket - Arduino LLC (www.arduino.cc) Arduino USB Driver (11/24/2015 1.2.3.0) (HKLM\...\8B585560B248755A6C5A24D5C0F50FA998310883) (Version: 11/24/2015 1.2.3.0 - Arduino LLC (www.arduino.cc)) Windows-Treiberpaket - Arduino LLC (www.arduino.cc) Genuino USB Driver (01/07/2016 1.0.3.0) (HKLM\...\EC414D98E2986DCA1628FAED2163CD1C9A4ED7EC) (Version: 01/07/2016 1.0.3.0 - Arduino LLC (www.arduino.cc)) Windows-Treiberpaket - Arduino Srl (www.arduino.org) Arduino USB Driver (03/19/2015 1.1.1.0) (HKLM\...\69E507459B453D69A453EFC9E461FAE1E073408A) (Version: 03/19/2015 1.1.1.0 - Arduino Srl (www.arduino.org)) Windows-Treiberpaket - Corsair Components, Inc. (SIUSBXP) USB (07/14/2017 3.3) (HKLM\...\A2206C09905C467F30CB24DCBB49F056D7F0A290) (Version: 07/14/2017 3.3 - Corsair Components, Inc.) Windows-Treiberpaket - libusb-win32 (libusb0) libusb-win32 devices (04/21/2015 1.0.0.0) (HKLM\...\28E91B69CA377EB48D6E1B92C37F897036E8A818) (Version: 04/21/2015 1.0.0.0 - libusb-win32) Windows-Treiberpaket - Linino (usbser) Ports (01/13/2014 1.0.0.0) (HKLM\...\A2C084AD4515675961A87E71B10E80E4FDCF7FAA) (Version: 01/13/2014 1.0.0.0 - Linino) Windows-Treiberpaket - Phase One / Mamiya V-Grip USB Driver (12/03/2014 1.2.0.0) (HKLM\...\3F504CC0B024052107934E093CC26DA720256A7A) (Version: 12/03/2014 1.2.0.0 - Phase One / Mamiya) Windows-Treiberpaket - Phase One A/S (WinUSB) USBDevice (12/14/2018 1.15.0.0) (HKLM\...\9398055CF8BEEF1D6FCF147047450F15A1C7AF2A) (Version: 12/14/2018 1.15.0.0 - Phase One A/S) Wondershare EdrawMax(Build 11.5.6.901) (HKLM-x32\...\{037BAB81-3DF7-4381-A72C-A26B57C03548}_is1) (Version: 11.5.6.901 - EdrawSoft Co.,Ltd.) WPTx64 (HKLM-x32\...\{0B2C58EB-67A2-225B-60B2-D1990E55DD33}) (Version: 8.100.26866 - Microsoft) YouTube (HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\9992dbfe720bcefaebef08840978fc54) (Version: 1.0 - Google\Chrome) Z88ArionV3 (HKLM\...\{3AE2382C-7B64-49D0-88F8-707A435631FA}) (Version: 2.0 - Lehrstuhl fuer Konstruktionlehre und CAD, Universitaet Bayreuth) Z88Aurora V5 (HKLM\...\{0A8FD343-3735-4F2F-AAE6-D317D6A208BE}) (Version: 5.0 - Lehrstuhl fuer Konstruktionlehre und CAD, Universitaet Bayreuth) Zoom(32bit) (HKLM-x32\...\{31491969-DBB8-4727-AF8C-D3606F438C56}) (Version: 5.13.13434 - Zoom) Packages: ========= Arduino IDE -> C:\Program Files\WindowsApps\ArduinoLLC.ArduinoIDE_1.8.57.0_x86__mdqgnx93n4wtt [2022-01-12] (Arduino LLC) ARMOURY CRATE -> C:\Program Files\WindowsApps\B9ECED6F.ArmouryCrate_5.4.10.0_x64__qmba6cd70vzyy [2023-03-08] (ASUSTeK COMPUTER INC.) AURA Creator -> C:\Program Files\WindowsApps\B9ECED6F.AURACreator_3.5.7.0_x64__qmba6cd70vzyy [2023-03-08] (ASUSTeK COMPUTER INC.) Blender -> C:\Program Files\WindowsApps\BlenderFoundation.Blender_3.4.1.0_x64__ppwjx1n5r4v9t [2023-01-08] (Blender Foundation) Canon Inkjet Print Utility -> C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_3.1.0.0_neutral__6e5tt8cgb93ep [2021-02-19] (Canon Inc.) Dropbox für S Modus -> C:\Program Files\WindowsApps\C27EB4BA.DROPBOX_23.4.6.0_x64__xbfy0k16fey96 [2023-01-08] (Dropbox Inc.) Facebook -> C:\Program Files\WindowsApps\FACEBOOK.FACEBOOK_2023.301.1.0_neutral__8xx8rvfyw5nnt [2023-03-05] (Meta) Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2019-11-11] (Microsoft Corporation) Messenger -> C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_1790.13.81.0_x64__8xx8rvfyw5nnt [2023-03-02] (Meta) [Startup Task] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1807.9.0_x64__8wekyb3d8bbwe [2018-09-02] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2020-09-15] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-14] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-14] (Microsoft Corporation) [MS Ad] MuseScore 3 -> C:\Program Files\WindowsApps\64051MuseScoreBVBA.MuseScoreNotationSoftware_3.3.4.0_x64__pz631wrhsw9tj [2020-01-06] (MuseScore BVBA) OneDrive -> C:\Program Files\WindowsApps\microsoft.microsoftskydrive_19.23.19.0_x64__8wekyb3d8bbwe [2021-12-10] (Microsoft Corporation) Prime Video for Windows -> C:\Program Files\WindowsApps\AmazonVideo.PrimeVideo_1.0.128.0_x64__pwbj9vvecjh7j [2023-03-08] (Amazon Development Centre (London) Ltd) RAR Opener -> C:\Program Files\WindowsApps\DeviceDoctor.RAROpener_1.3.48.0_x64__mkdtfchztkfbm [2017-11-17] (Tiny Opener) Raw Image Extension -> C:\Program Files\WindowsApps\Microsoft.RawImageExtension_2.0.40041.0_x64__8wekyb3d8bbwe [2023-01-13] (Microsoft Corporation) Search for text in pictures -> C:\Program Files\WindowsApps\34002IvanMakaruskin.Searchfortextinpictures_1.5.27.0_x64__9p1h6v1a1cwyy [2022-12-02] (Ivan Makaruskin) Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.15.12020.0_x64__8wekyb3d8bbwe [2022-12-10] (Microsoft Studios) [MS Ad] SoundCloud - Music & Songs -> C:\Program Files\WindowsApps\SoundcloudLtd.SoundCloudforWindowsBeta_2.0.0.0_neutral__2xc63xn306dnw [2022-06-05] (SoundCloud Global Limited & Co. KG) Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0 [2023-03-05] (Spotify AB) [Startup Task] TeamViewer: Remote Control -> C:\Program Files\WindowsApps\TeamViewer.31414B719FA93_15.0.100.0_x86__89446h4zmeyyt [2019-11-22] (TeamViewer) Twitter -> C:\Program Files\WindowsApps\9E2F88E3.TWITTER_7.0.1.0_neutral__wgeqdkkx372wm [2021-06-10] (Twitter Inc.) VVS Abfahrtsmonitor -> C:\Program Files\WindowsApps\Verkehrs-undTarifverbundS.VVSAbfahrtsmonitor_1.1.7402.0_x64__k1z1c5w35a7dt [2021-11-22] (Verkehrs- und Tarifverbund Stuttgart GmbH (VVS)) WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2308.4.0_x64__cv1g1gvanyjgm [2023-03-11] (WhatsApp Inc.) [Startup Task] WindowsAppRuntime.1.2 -> C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.2_2000.777.2143.0_x64__8wekyb3d8bbwe [2023-03-02] (Microsoft Corporation) WindowsAppRuntime.1.2 -> C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.2_2000.777.2143.0_x86__8wekyb3d8bbwe [2023-03-02] (Microsoft Corporation) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{00F064D8-FEC3-48ac-B07D-39C314D1727B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{04271989-C4D2-C2C0-1514-2CEA932F0E97} -> [OneDrive - bwedu] => D:\OneDrive - bwedu [2018-01-25 19:58] CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\TestServer.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{13009989-EFB5-48C9-8BD2-943E0392BD71}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\RxAppCtrl.Ocx => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{18A21864-E37B-42b9-9612-2C1E8C450A29}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\nikla\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.22349.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{1D625598-C876-4C51-8EF5-F9D8F96F62AA}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{1D6DFD6A-9E16-435A-9327-6FFEC6BA372F}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{1E5724EA-3423-4BD3-ABD6-46E650D2DC66}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{1E8A29BA-827D-4031-A4A3-AE7999B402F6}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{1EA072EE-57FD-495E-889C-8243C3BDBDBC}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{1FD7F53F-7ED5-439C-9A77-A3821CD09E98}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{20E47D5B-529A-45BD-8E77-BF1A3064A008}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{2709544A-5B24-4F9F-A5DA-CEC7297D3A4E}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{2BCA857B-A18B-4AFA-B183-CC0E49C12058}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{2C74F89E-7421-46B4-BA54-F86F1BD9F237}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{2C7D1157-7D50-4A88-9777-5EBBA3189AB8}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4}\localserver32 -> "C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" -ToastActivated => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{2F8377FC-50C1-44EF-AB7A-8FF1BB8EA277}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{32CDFF57-8CBA-4960-89B1-EC3FA58FB17A}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{32E26FD9-F435-4A20-A561-35D4B987CFDC}\InprocServer32 -> C:\Users\nikla\AppData\Local\WebEx\WebEx64\Meetings\atucfobj.dll (Cisco WebEx LLC -> Cisco WebEx LLC) CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2017 - English\en-US\dwgviewrficn.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{3FC94EB5-AEBD-4f3f-A2A4-B6CE57113C01}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\RxAppDocView.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{444c3d34-4024-4c6f-a9da-b47eed58ceb6}\localserver32 -> C:\Program Files\Skylum\Luminar Neo\Luminar Neo.exe (Skylum Software USA, Inc. -> Skylum) CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{45122C53-8483-4b62-B15A-EAA9FE5FC3D5}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{4C80573A-9150-11d2-B772-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\RxAppDocView.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{4E6F2E83-E7F0-4333-9772-875EB733C820}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\RxTest.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{611cc957-0f52-4a45-b7dc-6f9de800a63e}\localserver32 -> C:\Program Files\Skylum\Luminar Neo\Luminar Neo.exe (Skylum Software USA, Inc. -> Skylum) CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{622F6193-E4DD-46E6-BC66-2ED88E9FD28D}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{644190AE-BD8F-493F-B63D-C79404AC5E07}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A70-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A71-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A72-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A73-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A74-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A77-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtCp.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{720DB9AF-D62C-4ED0-A377-429C22312852}\localserver32 -> C:\Program Files\Autodesk\DWG TrueView 2017 - English\dwgviewr.exe => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{72EC5CC5-88F3-45B1-A865-0A327DF58CC8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{7BA16B3F-1AB3-4BD7-B959-52C4B8504EE9}\InprocServer32 -> AcInetUI.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{81D07C3D-0350-11D3-B7C2-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\RxAppCtrl.Ocx => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{834CE679-2E47-49DE-9E41-FEC87E9192EB}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{8421A29C-54B8-11D1-9837-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\SolidObject.Dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{846217D0-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\UCxTextBtn.Ocx => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{846217D1-8954-11D2-8DCD-0060B0C32531}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\UCxTextBtn.Ocx => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{849AFB5B-D6C9-4924-A712-F7118FF9611F}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{85452F88-5071-492E-B850-2E3C586DCBD8}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{87F5CF8F-A06D-498F-A05F-E520E6B570DB}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{89F0FC31-3B1D-494B-A75B-6BD4FA527B8A}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{8AA16DFC-DFC6-4B51-8FA2-A5D812BE33BF}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{8B0E6BD9-610C-11D1-9842-0060B03C43C8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\SolidObject.Dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{8C23B656-4E6E-4B45-9920-9617168D39A3}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\TestServer.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{8ED07FEF-E1B0-4CC3-B2BA-D354828AB952}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{988F4102-E6E3-4282-ACAC-55270827F2A8}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{9906CDFC-DB2C-4126-9422-13139B148495}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{9A21C6C5-27FC-4442-8590-575E7AFD73BB}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{9ECF83FB-23C5-43B6-83DE-93CFBDD74D4A}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{a3d7e084-b0df-4d14-8e0a-27a572a6332c}\localserver32 -> C:\Program Files\Sony\Imaging Edge Desktop\ied.exe (Sony Imaging Products & Solutions Inc. -> Sony) CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{A58F47CC-FF65-4152-B0B1-666C643A5BFC}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{A6A3D586-44CF-44C2-A92C-620BB713B4F2}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{ABBE3F83-D585-4A50-9B69-198B0F566F2E}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{AC5CECFA-F03A-41D2-A89C-704C44935941}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{B1560245-190E-4BBD-81DF-9B642D0E5325}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{B2A579E0-A797-40B1-8AEE-A8F6404719F8}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{B47196BC-D4AB-41BB-A771-543D67CFC9F5}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{B53CEF4B-1A13-49DE-BBC5-A7100FB2F38C}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{B5EE2B68-9A23-4BCD-BB77-FEA6DFB24DD6}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{B6B5DC40-96E3-11d2-B774-0060B0F159EF}\localserver32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\Inventor.exe /Automation => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{B80687F9-FA4C-4735-9DC4-E5715F2BC698}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{B8E7214B-25CA-4116-84CB-E86FB9625B36}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{BAE5802A-CF21-4F9C-AE04-D98F4036AC31}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{BBF6A206-CB04-479D-96AE-349E1E83319A}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{BC71DEA1-D6FB-48B8-AB06-D151C81BBCDD}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{BE54741D-E02B-4572-93D6-105AF4EDE777}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{BF224DC3-B602-4EEE-BFE9-9E4E0AED6837}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{BF4CC07E-E9BB-40D6-873F-855B211033B9}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C061C82C-D041-4214-BB07-B608107CEFCB}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C2D4ACCC-A3D1-4A0A-AD59-0DD8BA3D5EE1}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C343ED84-A129-11d3-B799-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\RxApprenticeServer.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C4F0910E-E0B4-4E68-8086-452730C7A26A}\InprocServer32 -> C:\Users\nikla\AppData\Local\Autodesk\webdeploy\production\50d1a2b00ac928c7781cbca6551e586a5384d498\NPreview10.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C92F8F8C-8B2C-11d4-B872-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\nikla\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{CFEE2BAF-14F9-4D23-853D-B6E2BCC14263}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DA1F437C-9BD9-11d4-B87C-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DB5D476B-3FF4-4E9D-A606-1E2B473BE571}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\AcInetUI.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DCA7356C-FF94-4b20-AE04-7AA6A8E14117}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DDA9A20F-5B56-49F5-9465-CE82FC199352}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DE6B563C-B074-4BF1-A8A0-B3FED8703E99}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E1C85E9F-60B2-4007-80C3-2C5E09474C3B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\RxInventorUtilities.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\TestServer.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F13E75B9-6AF6-49CB-80B3-6D2FF6E09932}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F2D4F4E5-EEA1-46FF-A83B-A270C92DAE4B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DTInterop.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F4363F9D-3BBA-46AC-ABFE-F27977981DA8}\localserver32 -> "C:\Program Files\Autodesk\Inventor 2020\Bin\ApprenticeServerHost.exe" => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F61064CC-DBFB-47ee-9BC8-CA5A1CBDF0DA}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\InvResc.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{fa5312d1-0b58-428a-bd93-3b87ef89945d}\localserver32 -> C:\Program Files\Skylum\Luminar Neo\Luminar Neo.exe (Skylum Software USA, Inc. -> Skylum) CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FA62F626-EBD5-4dc5-B970-D9E81E0E20E0}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FB469644-3F14-4403-ACCA-6B13486FF7BD}\localserver32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\InvTXTStack.exe /Automation => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{fc2f3575-b316-ac6e-0e71-05c27fa0611c}\localserver32 -> "C:\Users\nikla\AppData\Local\VidCoder.Stable\app-8.25.0\VidCoder.exe" -ToastActivated => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FD703B01-4362-423E-9BDB-91BDCB16C1C9}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DTInterop.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1}\InprocServer32 -> axdb.dll => Keine Datei ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.23.1.21\buShell.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.23.1.21\buShell.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.23.1.21\buShell.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Keine Datei ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2016-02-07] (Autodesk, Inc -> Autodesk, Inc.) ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.23.1.21\buShell.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ShellIconOverlayIdentifiers-x32: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.23.1.21\buShell.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ShellIconOverlayIdentifiers-x32: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.23.1.21\buShell.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert] ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2019-01-30] (Autodesk, Inc. -> Autodesk) ContextMenuHandlers1-x32: [Autodesk.DWF.ContextMenu] -> {6C18531F-CA85-45F7-8278-FF33CF0A5964} => C:\Program Files (x86)\Common Files\Autodesk Shared\DWF Common\DWFShellExtension.dll [2012-01-06] (Autodesk, Inc -> Autodesk, Inc.) ContextMenuHandlers1: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files\Norton Security\Engine\22.23.1.21\buShell.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers1: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.23.1.21\NavShExt.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => C:\Program Files\PDFCreator\PDFCreatorShell.DLL [2022-10-04] (pdfforge GmbH -> pdfforge GmbH) ContextMenuHandlers2: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.23.1.21\NavShExt.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert] ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\23.038.0219.0001\FileSyncShell64.dll [2023-03-09] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2020-07-08] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert] ContextMenuHandlers6: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files\Norton Security\Engine\22.23.1.21\buShell.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers6: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.23.1.21\NavShExt.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers6_S-1-5-21-341515215-1173906820-3305953664-1001: [InventorMenu] -> {6FDE7A70-351B-11d6-988B-0010B57A8BB7} => C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll -> Keine Datei ==================== Codecs (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Drivers32: [VIDC.RTV1] => C:\WINDOWS\system32\rtvcvfw64.dll [246272 2012-09-28] () [Datei ist nicht signiert] HKLM\...\Drivers32-x32: [vidc.XVID] => xvidvfw.dll HKLM\...\Drivers32-x32: [VIDC.VP80] => vp8vfw.dll HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\SysWOW64\rtvcvfw32.dll [247296 2012-09-28] () [Datei ist nicht signiert] ==================== Verknüpfungen & WMI ======================== (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) ShortcutWithArgument: C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Snapshots\109.0.1518.78\Default\Web Applications\_crx__eikjhbkpemdappjfcmdeeeamdpkgabmk\SoundCloud.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=eikjhbkpemdappjfcmdeeeamdpkgabmk --app-url=hxxps://soundcloud.com/discover --app-launch-source=4 ShortcutWithArgument: C:\Users\nikla\AppData\Local\Microsoft\Edge\User Data\Default\Web Applications\_crx__eikjhbkpemdappjfcmdeeeamdpkgabmk\SoundCloud.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=eikjhbkpemdappjfcmdeeeamdpkgabmk --app-url=hxxps://soundcloud.com/discover --app-launch-source=4 ShortcutWithArgument: C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\carus music.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=cgnnddchpghdejcieilejbfebdljhejo ShortcutWithArgument: C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Google Keep.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=eilembjdkfgodjkcjnpgpaenohkicgjd ShortcutWithArgument: C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\YouTube.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=adnlfjpnmidfimlkaohpidplnoimahfh ShortcutWithArgument: C:\Users\nikla\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5803ea45d7990e6f\WhatsChrome Extension.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=kbhfoiaobflocffnclkigpkeoagheimn ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============= 2023-03-05 18:11 - 2023-03-05 18:12 - 007067136 _____ () [Datei ist nicht signiert] C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\widget_core_interface_dll.dll 2020-05-26 17:08 - 2020-05-26 17:08 - 002831360 _____ (Apache Software Foundation) [Datei ist nicht signiert] C:\Program Files (x86)\LightingService\log4cxx.dll 2017-11-18 13:21 - 2015-03-17 08:51 - 000375296 _____ (CANON INC.) [Datei ist nicht signiert] C:\WINDOWS\System32\CNMN6PPM.DLL 2018-03-29 16:56 - 2018-03-29 16:56 - 001272832 _____ (CPUID) [Datei ist nicht signiert] C:\Program Files (x86)\CorsairLink4\cpuidsdk.dll 2021-12-27 09:04 - 2021-12-27 09:04 - 000047104 _____ (CTI) [Datei ist nicht signiert] C:\Program Files\ENE\Aac_ENE_DRAM_RGB_AIO\x86\MsIo32_ENE.dll 2018-01-26 15:16 - 2023-03-08 15:35 - 000181248 _____ (pdfforge GmbH) [Datei ist nicht signiert] C:\WINDOWS\System32\pdfcmon.dll 2018-02-26 12:56 - 2018-02-26 12:56 - 000090112 _____ (Silicon Laboratories, Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\CorsairLink4\SiUSBXp.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [490] ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ================== ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ================= ==================== Internet Explorer (Nicht auf der Ausnahmeliste) ========== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.bing.com/search?FORM=INCOH1&PC=IC05&PTAG=ICO-d9d0d61b SearchScopes: HKU\S-1-5-21-341515215-1173906820-3305953664-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) BHO: Norton Password Manager -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security\Engine\22.23.1.21\coIEPlg.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) BHO: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Program Files (x86)\Internet Explorer\Citavi Picker\x64\SwissAcademic.Citavi.IEPicker.DLL [2023-02-15] (Swiss Academic Software -> Swiss Academic Software) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_361\bin\ssv.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation) BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll => Keine Datei BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_361\bin\jp2ssv.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Norton Password Manager -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security\Engine32\22.23.1.21\coIEPlg.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) BHO-x32: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Program Files (x86)\Internet Explorer\Citavi Picker\SwissAcademic.Citavi.IEPicker.DLL [2023-02-15] (Swiss Academic Software -> Swiss Academic Software) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_361\bin\ssv.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll => Keine Datei BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_361\bin\jp2ssv.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine\22.23.1.21\coIEPlg.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine32\22.23.1.21\coIEPlg.dll [2023-02-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.) DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-02-16] (Microsoft Corporation -> Microsoft Corporation) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) IE trusted site: HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\sharepoint.com -> hxxps://bwedu-files.sharepoint.com ==================== Hosts Inhalt: ========================= (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2017-11-17 15:33 - 2019-08-09 23:54 - 000000822 _____ C:\WINDOWS\system32\drivers\etc\hosts ==================== Andere Bereiche =========================== (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\110\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\120\Tools\Binn\;C:\Program Files\Microsoft SQL Server\120\DTS\Binn\;C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\Calibre2\;C:\Program Files\MATLAB\R2021b\bin;S:\Programme\Siemens\NX1953\CAPITALINTEGRATION\capitalnxremote\;S:\Programme\Inkscape\bin;S:\Programme\MATLAB\R2022b\runtime\win64;S:\Programme\MATLAB\R2022b\bin;C:\Program Files\dotnet\;C:\Program Files\Git\cmd HKU\S-1-5-21-341515215-1173906820-3305953664-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\nikla\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img13.jpg DNS Servers: 192.168.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) ist aktiviert. Network Binding: ============= VPN - VPN Client: NordVPN LightWeight Firewall -> NordLwf (enabled) Ethernet 3: NordVPN LightWeight Firewall -> NordLwf (enabled) Ethernet: NordVPN LightWeight Firewall -> NordLwf (enabled) WLAN: NordVPN LightWeight Firewall -> NordLwf (enabled) Ethernet 2: NordVPN LightWeight Firewall -> NordLwf (enabled) ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) HKLM\...\StartupApproved\StartupFolder: => "Imaging Edge Desktop.lnk" HKLM\...\StartupApproved\StartupFolder: => "CADClick® Click2CAD Toolbox.lnk" HKLM\...\StartupApproved\StartupFolder: => "SOLIDWORKS Hintergrund-Downloader.lnk" HKLM\...\StartupApproved\StartupFolder: => "SOLIDWORKS 2021 Fast Start.lnk" HKLM\...\StartupApproved\Run: => "3DxWare Service" HKLM\...\StartupApproved\Run: => "XboxStat" HKLM\...\StartupApproved\Run: => "Flight Yoke System" HKLM\...\StartupApproved\Run32: => "Autodesk Desktop App" HKLM\...\StartupApproved\Run32: => "PDFPrint" HKLM\...\StartupApproved\Run32: => "TeamsMachineInstaller" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\StartupFolder: => "Corsair Effects Engine.appref-ms" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\StartupFolder: => "An OneNote senden.lnk" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\StartupFolder: => "Luminar Neo.lnk" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\StartupFolder: => "Outlook.lnk" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\Run: => "NordVPN" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\Run: => "Overwolf" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\Run: => "Lync" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\Run: => "EpicGamesLauncher" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\Run: => "CiscoMeetingDaemon" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_BD744D00B7947BA4CE821E1D00C3AA26" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_ALB" HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams" |
13.03.2023, 13:13 | #7 |
| Windows 10: Passwort-Trojaner wirklich weg?Code:
ATTFilter ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================ (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [UDP Query User{65AB9DAE-9EC3-40F3-A2B9-8867446E76C5}C:\program files\windowsapps\arduinollc.arduinoide_1.8.42.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe] => (Allow) C:\program files\windowsapps\arduinollc.arduinoide_1.8.42.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe => Keine Datei FirewallRules: [TCP Query User{759DB5C8-204F-4391-8413-2A58E2E4E4C4}C:\program files\windowsapps\arduinollc.arduinoide_1.8.42.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe] => (Allow) C:\program files\windowsapps\arduinollc.arduinoide_1.8.42.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe => Keine Datei FirewallRules: [{34C1A81C-69D5-40D8-85A8-3156EF367352}] => (Block) C:\program files\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe => Keine Datei FirewallRules: [{41975822-195E-442F-B443-1E4C84E73547}] => (Block) C:\program files\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe => Keine Datei FirewallRules: [UDP Query User{C89DF027-4EE6-41C3-A364-3A0CC25F5695}C:\program files\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe] => (Allow) C:\program files\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe => Keine Datei FirewallRules: [TCP Query User{484027FD-E5FD-4FAF-AE13-0C7EBDE6E625}C:\program files\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe] => (Allow) C:\program files\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe => Keine Datei FirewallRules: [{672AD932-5B7A-4EE1-BB8F-D87021A42762}] => (Allow) C:\Users\nikla\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei FirewallRules: [{1731C34F-E5BE-467B-85CF-2EFF2D9B2722}] => (Allow) C:\Users\nikla\AppData\Roaming\Zoom\bin\Zoom.exe => Keine Datei FirewallRules: [UDP Query User{C9E313A0-7F08-4E67-B6B5-F2681FFBA180}C:\program files\windowsapps\arduinollc.arduinoide_1.8.33.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe] => (Block) C:\program files\windowsapps\arduinollc.arduinoide_1.8.33.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe => Keine Datei FirewallRules: [TCP Query User{1AD96664-7B4B-45EA-A2F4-9824F940AA09}C:\program files\windowsapps\arduinollc.arduinoide_1.8.33.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe] => (Block) C:\program files\windowsapps\arduinollc.arduinoide_1.8.33.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe => Keine Datei FirewallRules: [UDP Query User{0CAF6849-64DB-4050-988E-1950CBE3C1AC}C:\program files (x86)\fahclient\fahclient.exe] => (Allow) C:\program files (x86)\fahclient\fahclient.exe () [Datei ist nicht signiert] FirewallRules: [TCP Query User{E4FFF248-EC23-40EA-A1E2-26CEFE10563D}C:\program files (x86)\fahclient\fahclient.exe] => (Allow) C:\program files (x86)\fahclient\fahclient.exe () [Datei ist nicht signiert] FirewallRules: [{CDB48549-5463-44EC-B8A3-A801DA392C45}] => (Allow) D:\SteamLibrary\steamapps\common\rocketleague\Binaries\RocketLeague.exe => Keine Datei FirewallRules: [{689097E9-EABF-46E3-BDEC-E2EBE8762B63}] => (Allow) D:\SteamLibrary\steamapps\common\rocketleague\Binaries\RocketLeague.exe => Keine Datei FirewallRules: [UDP Query User{FFBB0B2B-C538-465F-9972-678CD7164843}C:\program files\ultimaker cura 4.4\cura.exe] => (Allow) C:\program files\ultimaker cura 4.4\cura.exe => Keine Datei FirewallRules: [TCP Query User{4834D664-B8C1-4062-A2C4-526CB98BA499}C:\program files\ultimaker cura 4.4\cura.exe] => (Allow) C:\program files\ultimaker cura 4.4\cura.exe => Keine Datei FirewallRules: [{D80AD8A4-9EF0-4007-AC3C-43D881C079C7}] => (Allow) D:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe => Keine Datei FirewallRules: [{C239A893-E24F-42B6-9796-207D0FB0C985}] => (Allow) D:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe => Keine Datei FirewallRules: [{8A678F11-C77B-4F66-9356-D70167C7F32A}] => (Allow) D:\SteamLibrary\steamapps\common\wallpaper_engine\launcher.exe (Kristjan Skutta -> ) FirewallRules: [{1DEC1E73-090F-4397-8C74-AF885E0FD540}] => (Allow) D:\SteamLibrary\steamapps\common\wallpaper_engine\launcher.exe (Kristjan Skutta -> ) FirewallRules: [{60AB5C9E-A359-4108-879E-626A9B89837F}] => (Allow) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe => Keine Datei FirewallRules: [{50BB6B7F-DD0E-4FB6-A6A9-11CE9D2CD062}] => (Allow) D:\Program Files\Nox\bin\Nox.exe => Keine Datei FirewallRules: [{E71AF923-19D9-4FA8-BC5B-B53CBA19A930}] => (Block) C:\program files\siemens\nx 11.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [{8A0C25F2-D6D5-4D59-873A-D93360AC2710}] => (Block) C:\program files\siemens\nx 11.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [UDP Query User{51B33274-993E-4E6E-A629-FF68BE3E8369}C:\program files\siemens\nx 11.0\nxbin\ugraf.exe] => (Allow) C:\program files\siemens\nx 11.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [TCP Query User{1733F7D9-4D60-4788-B9D7-E95D9CBB954D}C:\program files\siemens\nx 11.0\nxbin\ugraf.exe] => (Allow) C:\program files\siemens\nx 11.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [UDP Query User{27909000-102E-4640-B10B-A2D1731DA369}C:\program files\solidworks corp\solidworks\photoview\photoview360.exe] => (Block) C:\program files\solidworks corp\solidworks\photoview\photoview360.exe => Keine Datei FirewallRules: [TCP Query User{D2E9C932-5C76-42DD-BE84-AAF4CF1EE1C1}C:\program files\solidworks corp\solidworks\photoview\photoview360.exe] => (Block) C:\program files\solidworks corp\solidworks\photoview\photoview360.exe => Keine Datei FirewallRules: [UDP Query User{DD8F474A-8810-42B7-9B22-5E9A718EF1B2}D:\steamlibrary\steamapps\common\assettocorsa\acs.exe] => (Allow) D:\steamlibrary\steamapps\common\assettocorsa\acs.exe () [Datei ist nicht signiert] FirewallRules: [TCP Query User{8F0E9605-A78E-41A4-9447-E78264EAB6FD}D:\steamlibrary\steamapps\common\assettocorsa\acs.exe] => (Allow) D:\steamlibrary\steamapps\common\assettocorsa\acs.exe () [Datei ist nicht signiert] FirewallRules: [{D67211F6-D7ED-401B-885C-C2C3CFD821A4}] => (Allow) D:\SteamLibrary\steamapps\common\assettocorsa\AssettoCorsa.exe (Kunos Simulazioni) [Datei ist nicht signiert] FirewallRules: [{8579FA19-3E2D-4AB9-9949-4FDCBC6739AD}] => (Allow) D:\SteamLibrary\steamapps\common\assettocorsa\AssettoCorsa.exe (Kunos Simulazioni) [Datei ist nicht signiert] FirewallRules: [{A9B4237B-F7CB-46ED-A67E-4002CA3F05CB}] => (Allow) D:\SteamLibrary\steamapps\common\Project CARS 2\pCARS2.exe (Slightly Mad Studios Ltd) [Datei ist nicht signiert] FirewallRules: [{EE802DCD-956A-4123-9A4F-B9F79FC5E5E4}] => (Allow) D:\SteamLibrary\steamapps\common\Project CARS 2\pCARS2.exe (Slightly Mad Studios Ltd) [Datei ist nicht signiert] FirewallRules: [{8B995574-73EA-4B5B-A0F7-F5A861B53122}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe => Keine Datei FirewallRules: [{68CACCDF-4E39-43BD-B123-44790E6E353A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe => Keine Datei FirewallRules: [{056AA0A3-5FD1-4F6B-AF79-A5E8473BA328}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Project CARS 2\pCARS2.exe => Keine Datei FirewallRules: [{B914E77D-4720-4A96-8F7F-0D0462C81F60}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Project CARS 2\pCARS2.exe => Keine Datei FirewallRules: [{5C0D8EC0-6AD2-42F6-967E-AA5C862F2063}] => (Allow) LPort=5000 FirewallRules: [{53059A3E-06DE-48DF-A8B6-A21AA2022F41}] => (Allow) LPort=51783 FirewallRules: [UDP Query User{8DFFF996-171F-4BA1-89B5-E979C8B92823}C:\users\nikla\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\nikla\appdata\local\akamai\netsession_win.exe => Keine Datei FirewallRules: [TCP Query User{33F34B7E-069C-4731-B913-4B131A3A036B}C:\users\nikla\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\nikla\appdata\local\akamai\netsession_win.exe => Keine Datei FirewallRules: [{01B518F4-5B2F-4737-B0FE-B940925E5012}] => (Block) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\pro_comm_msg.exe => Keine Datei FirewallRules: [{150C0707-B71E-4D83-B399-50ADDCFAEC4B}] => (Block) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\pro_comm_msg.exe => Keine Datei FirewallRules: [UDP Query User{507083F8-248A-46F8-84D2-13A1DC5F6560}C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\pro_comm_msg.exe] => (Allow) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\pro_comm_msg.exe => Keine Datei FirewallRules: [TCP Query User{6040F311-1D59-428B-BF2F-BDA50BC73333}C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\pro_comm_msg.exe] => (Allow) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\pro_comm_msg.exe => Keine Datei FirewallRules: [UDP Query User{F4736F99-6932-4AA8-8004-F4F7D61DA904}C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\xtop.exe] => (Block) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\xtop.exe => Keine Datei FirewallRules: [TCP Query User{0A5804D8-23BC-45E3-80E6-C712A7B5BF6C}C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\xtop.exe] => (Block) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\xtop.exe => Keine Datei FirewallRules: [UDP Query User{5B1C8087-62EF-4854-BA9E-B5922A847593}C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\nms\nmsd.exe] => (Block) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\nms\nmsd.exe => Keine Datei FirewallRules: [TCP Query User{D0F8E151-7252-4A6A-95D7-81244AF61E71}C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\nms\nmsd.exe] => (Block) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\nms\nmsd.exe => Keine Datei FirewallRules: [{95A5BF17-F713-4E1A-B1C8-A1D54E1C9110}] => (Allow) C:\Program Files\PTC\Creo 4.0\View Express\i486_nt\obj\productview.exe => Keine Datei FirewallRules: [{35C4AEC8-278E-448A-A108-E7C61CB89DF3}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Keine Datei FirewallRules: [{8391F01B-14B6-4023-9B65-C228A20CC87B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Keine Datei FirewallRules: [{2F7FB196-453C-4ED9-9D72-12E2488765A0}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{DE214E2C-6C6F-485C-876A-A49FC7BC74D7}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [TCP Query User{8902E667-F1E6-43F2-983C-8D154089C526}C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\ugodxtopro.exe] => (Allow) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\ugodxtopro.exe => Keine Datei FirewallRules: [UDP Query User{BE818C3F-A33C-45F2-AD6E-4D6C04ECFD88}C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\ugodxtopro.exe] => (Allow) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\ugodxtopro.exe => Keine Datei FirewallRules: [{7A52930F-1BA2-4431-A1D4-B4A3A78EEA0B}] => (Block) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\ugodxtopro.exe => Keine Datei FirewallRules: [{F81A1F50-D054-4EE2-9FFE-7EBFD6A9E070}] => (Block) C:\program files\ptc\creo 4.0\m020\common files\x86e_win64\obj\ugodxtopro.exe => Keine Datei FirewallRules: [{6CFD9D29-B49B-4CC2-BB09-F1D7E8FA38B4}] => (Allow) D:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe => Keine Datei FirewallRules: [{D236B7A9-F3F5-4445-9040-99CDBDD20A12}] => (Allow) D:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe => Keine Datei FirewallRules: [TCP Query User{7A302E00-3330-425E-8CCB-C7D018D75580}D:\x-plane 11\x-plane.exe] => (Allow) D:\x-plane 11\x-plane.exe (Laminar Research, LLC -> Laminar Research) FirewallRules: [UDP Query User{4A65A39D-A7B3-47A2-A70C-8B585B2EE070}D:\x-plane 11\x-plane.exe] => (Allow) D:\x-plane 11\x-plane.exe (Laminar Research, LLC -> Laminar Research) FirewallRules: [TCP Query User{6B77A115-7AD4-458B-BEE0-56DACA1B9338}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe => Keine Datei FirewallRules: [UDP Query User{880F1C2A-4332-4BB3-A562-FBCA61A46211}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe => Keine Datei FirewallRules: [{AB5E1959-0D3C-4C07-9944-9320F08048D2}] => (Allow) D:\FlightGear 2018.2.2\bin\fgfs.exe => Keine Datei FirewallRules: [{220FECEE-8EF1-4057-9D64-1896AFC06A91}] => (Allow) D:\FlightGear 2018.2.2\bin\fgfs.exe => Keine Datei FirewallRules: [{15922939-1A07-4A39-8DF0-F446FF2571CA}] => (Allow) D:\FlightGear 2018.2.2\bin\fgcom.exe => Keine Datei FirewallRules: [{D219C6F3-3948-4CCA-BB29-368D7540BF70}] => (Allow) D:\FlightGear 2018.2.2\bin\fgcom.exe => Keine Datei FirewallRules: [{DB07C7EF-85A8-45E4-9D6B-628D881D1EA3}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{AB296513-03DF-4996-A359-07D97404CCA8}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{C096C13F-C184-40BA-B230-2A0546CA7A48}] => (Allow) D:\SteamLibrary\steamapps\common\Assetto Corsa Competizione\acc.exe (Epic Games, Inc.) [Datei ist nicht signiert] FirewallRules: [{1B018928-E63D-4EE2-AE2A-F980F7D0F8CF}] => (Allow) D:\SteamLibrary\steamapps\common\Assetto Corsa Competizione\acc.exe (Epic Games, Inc.) [Datei ist nicht signiert] FirewallRules: [TCP Query User{C0BE47B6-F859-4CF2-8579-2DAF21324293}D:\steamlibrary\steamapps\common\assetto corsa competizione\ac2\binaries\win64\ac2-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\assetto corsa competizione\ac2\binaries\win64\ac2-win64-shipping.exe (Kunos Simulazioni) [Datei ist nicht signiert] FirewallRules: [UDP Query User{A9B71CB9-266F-4766-BD90-0D0CDEAC84D4}D:\steamlibrary\steamapps\common\assetto corsa competizione\ac2\binaries\win64\ac2-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\assetto corsa competizione\ac2\binaries\win64\ac2-win64-shipping.exe (Kunos Simulazioni) [Datei ist nicht signiert] FirewallRules: [TCP Query User{11AF203B-24BF-412E-852B-16FC9D248B97}C:\program files\ultimaker cura 3.2\cura.exe] => (Allow) C:\program files\ultimaker cura 3.2\cura.exe => Keine Datei FirewallRules: [UDP Query User{CD63C664-9679-479C-8FD6-DD485567B214}C:\program files\ultimaker cura 3.2\cura.exe] => (Allow) C:\program files\ultimaker cura 3.2\cura.exe => Keine Datei FirewallRules: [TCP Query User{23FF45D5-E21B-4138-9E6A-26A093231F49}C:\program files\windowsapps\arduinollc.arduinoide_1.8.15.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe] => (Allow) C:\program files\windowsapps\arduinollc.arduinoide_1.8.15.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe => Keine Datei FirewallRules: [UDP Query User{BE34C00B-4210-4311-9929-CB40764B838C}C:\program files\windowsapps\arduinollc.arduinoide_1.8.15.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe] => (Allow) C:\program files\windowsapps\arduinollc.arduinoide_1.8.15.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe => Keine Datei FirewallRules: [TCP Query User{FFD93AF9-1A99-48F2-AE83-A2A1A53551B1}D:\downloads\arduino-nightly-windows\arduino-nightly\java\bin\javaw.exe] => (Allow) D:\downloads\arduino-nightly-windows\arduino-nightly\java\bin\javaw.exe => Keine Datei FirewallRules: [UDP Query User{42DE1C3B-C810-4D56-8F5D-DF4742ED206A}D:\downloads\arduino-nightly-windows\arduino-nightly\java\bin\javaw.exe] => (Allow) D:\downloads\arduino-nightly-windows\arduino-nightly\java\bin\javaw.exe => Keine Datei FirewallRules: [TCP Query User{4BFA4B57-FE92-4FE9-851C-7243BE944849}C:\program files\siemens\nx 12.0\nxbin\ugraf.exe] => (Allow) C:\program files\siemens\nx 12.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [UDP Query User{4D66185B-8BB9-4A9B-B638-18DDF87B27B8}C:\program files\siemens\nx 12.0\nxbin\ugraf.exe] => (Allow) C:\program files\siemens\nx 12.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [{B6CEF1BF-C733-49A6-B9E7-9193FBE6D5D2}] => (Block) C:\program files\siemens\nx 12.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [{E1872525-59B3-428C-948C-4DD3E58950DE}] => (Block) C:\program files\siemens\nx 12.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [{01EDF16C-090F-49F0-A3F6-E49B2A3575C6}] => (Allow) C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe => Keine Datei FirewallRules: [{F24E8927-DB9F-4460-A1EB-3CBA2A14146B}] => (Allow) C:\Program Files (x86)\Canon\EOS Utility\EOSUPNPSV.exe => Keine Datei FirewallRules: [TCP Query User{EA3F8049-CF81-4691-AD81-0D862915B163}C:\program files\windowsapps\arduinollc.arduinoide_1.8.21.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe] => (Allow) C:\program files\windowsapps\arduinollc.arduinoide_1.8.21.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe => Keine Datei FirewallRules: [UDP Query User{E29BA4A4-FF77-4800-BF2E-2EB64BE0DB1C}C:\program files\windowsapps\arduinollc.arduinoide_1.8.21.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe] => (Allow) C:\program files\windowsapps\arduinollc.arduinoide_1.8.21.0_x86__mdqgnx93n4wtt\java\bin\javaw.exe => Keine Datei FirewallRules: [{27F526F8-FC23-4215-B70E-6075BBC9D266}] => (Allow) D:\SteamLibrary\steamapps\common\raceroom racing experience\Game\x64\RRRE64.exe => Keine Datei FirewallRules: [{34970F23-04A4-422F-9739-604A77063385}] => (Allow) D:\SteamLibrary\steamapps\common\raceroom racing experience\Game\x64\RRRE64.exe => Keine Datei FirewallRules: [{D166E197-2575-48EA-840D-8502F43D4E86}] => (Allow) D:\SteamLibrary\steamapps\common\raceroom racing experience\Game\RRRE.exe => Keine Datei FirewallRules: [{CB9528DC-A026-4C17-B2F3-3C20A250944A}] => (Allow) D:\SteamLibrary\steamapps\common\raceroom racing experience\Game\RRRE.exe => Keine Datei FirewallRules: [{D4352BE6-F72C-4D0D-AB1A-80960695841D}] => (Allow) C:\Program Files (x86)\hide.me VPN\SoftEtherVPN\vpnclient_x64.exe => Keine Datei FirewallRules: [{95CF3A05-572B-4A0C-9F55-1B454F5AF36D}] => (Allow) C:\Program Files (x86)\hide.me VPN\SoftEtherVPN\vpncmd.exe => Keine Datei FirewallRules: [{4AAEC142-4C6D-4A1B-8960-4D41CF9A301C}] => (Allow) D:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win64\RocketLeague.exe (Psyonix, LLC) [Datei ist nicht signiert] FirewallRules: [{DB926E50-CCD1-4310-B68E-24EFD4E9BDFE}] => (Allow) D:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win64\RocketLeague.exe (Psyonix, LLC) [Datei ist nicht signiert] FirewallRules: [{1877CE7B-C65E-472E-84D0-CD0426EF63BA}] => (Allow) D:\SteamLibrary\steamapps\common\wallpaper_engine\bin\diagnostics32.exe (Kristjan Skutta -> ) FirewallRules: [{BBDDFCB3-76E1-4CE7-8B3E-C4CAD20B8F5B}] => (Allow) D:\SteamLibrary\steamapps\common\wallpaper_engine\bin\diagnostics32.exe (Kristjan Skutta -> ) FirewallRules: [TCP Query User{3CC8445E-71C7-49D0-9A78-306B747C7CDF}D:\catia\win_b64\code\bin\orbixd.exe] => (Allow) D:\catia\win_b64\code\bin\orbixd.exe => Keine Datei FirewallRules: [UDP Query User{CF97D8D0-CF58-4227-95C4-C4C7FB69B5E6}D:\catia\win_b64\code\bin\orbixd.exe] => (Allow) D:\catia\win_b64\code\bin\orbixd.exe => Keine Datei FirewallRules: [TCP Query User{89DC1002-0132-4164-B3C8-9BF1D465D787}D:\catia\win_b64\code\bin\cnext.exe] => (Allow) D:\catia\win_b64\code\bin\cnext.exe => Keine Datei FirewallRules: [UDP Query User{1181E074-BD56-4235-A25D-F3EFFB405DCB}D:\catia\win_b64\code\bin\cnext.exe] => (Allow) D:\catia\win_b64\code\bin\cnext.exe => Keine Datei FirewallRules: [TCP Query User{EBE9FB6C-6678-4DEB-879D-80D3CC8677E8}C:\program files\dassault systemes\b21\win_b64\code\bin\orbixd.exe] => (Allow) C:\program files\dassault systemes\b21\win_b64\code\bin\orbixd.exe => Keine Datei FirewallRules: [UDP Query User{4CCF665D-2AC3-4440-836A-61A92BFEC42C}C:\program files\dassault systemes\b21\win_b64\code\bin\orbixd.exe] => (Allow) C:\program files\dassault systemes\b21\win_b64\code\bin\orbixd.exe => Keine Datei FirewallRules: [{B90FFDD5-A689-44A8-983B-E28B261ECC0B}] => (Block) C:\program files\dassault systemes\b21\win_b64\code\bin\orbixd.exe => Keine Datei FirewallRules: [{E16CF9B5-2DA7-4FB4-A737-14DB6EC9EF2D}] => (Block) C:\program files\dassault systemes\b21\win_b64\code\bin\orbixd.exe => Keine Datei FirewallRules: [TCP Query User{BE803C36-128F-49FA-A8DA-D9151F43936B}C:\program files\dassault systemes\b21\win_b64\code\bin\cnext.exe] => (Allow) C:\program files\dassault systemes\b21\win_b64\code\bin\cnext.exe => Keine Datei FirewallRules: [UDP Query User{CF6A11E8-97D1-4CF7-9DB4-C43D6628DD01}C:\program files\dassault systemes\b21\win_b64\code\bin\cnext.exe] => (Allow) C:\program files\dassault systemes\b21\win_b64\code\bin\cnext.exe => Keine Datei FirewallRules: [{B79937C6-06C5-4544-9C92-78FCB08E168F}] => (Block) C:\program files\dassault systemes\b21\win_b64\code\bin\cnext.exe => Keine Datei FirewallRules: [{C3162B10-BF83-4EEA-9DFC-0843C3B0F52F}] => (Block) C:\program files\dassault systemes\b21\win_b64\code\bin\cnext.exe => Keine Datei FirewallRules: [TCP Query User{ED921B5C-4D02-440B-A8FE-7CF95A910DD5}C:\users\nikla\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\nikla\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [UDP Query User{7F563BFC-B2ED-4982-A00E-A889960C8631}C:\users\nikla\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\nikla\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [TCP Query User{AD3AECE6-9347-4DAD-8FE4-0131711E6C90}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\mayamonitor.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\mayamonitor.exe => Keine Datei FirewallRules: [UDP Query User{5EF693D8-AE83-4954-AD9F-11A6FCD78325}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\mayamonitor.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\mayamonitor.exe => Keine Datei FirewallRules: [{287AA140-796B-4659-90BC-256A9CBB55DF}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\mayamonitor.exe => Keine Datei FirewallRules: [{1473DBCE-91D9-49BD-B358-410B395A6678}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\mayamonitor.exe => Keine Datei FirewallRules: [TCP Query User{D23567D1-81D2-4761-BD7F-F16665C65640}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\vufac.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\vufac.exe => Keine Datei FirewallRules: [UDP Query User{9E51E0A7-3088-4226-82C4-0BD535F9AC8C}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\vufac.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\vufac.exe => Keine Datei FirewallRules: [{35812641-7EDB-4986-AF33-929D1916F444}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\vufac.exe => Keine Datei FirewallRules: [{53625852-4B13-4D0C-8FC2-055C3434DCF4}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\vufac.exe => Keine Datei FirewallRules: [TCP Query User{6B39EAB0-48C4-4E87-BCC9-20469A758240}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\grayb.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\grayb.exe => Keine Datei FirewallRules: [UDP Query User{B38833AF-E2B3-4AB4-B715-F4DE09FEA3D0}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\grayb.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\grayb.exe => Keine Datei FirewallRules: [TCP Query User{F26C7109-6AC2-40F2-AFCC-283B966A5188}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\power.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\power.exe => Keine Datei FirewallRules: [UDP Query User{418CFED0-EC5E-4CCB-911C-436A355C7D0C}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\power.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\power.exe => Keine Datei FirewallRules: [TCP Query User{1043AACF-D8E8-4D88-A47C-577D14F46EAD}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\merel.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\merel.exe => Keine Datei FirewallRules: [UDP Query User{ABAF575E-3AA0-4AF2-AE84-8B4C45D61CA2}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\merel.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\merel.exe => Keine Datei FirewallRules: [{07936CFC-41DE-4693-B864-4DA6DBC69F8A}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\power.exe => Keine Datei FirewallRules: [{C64D79C4-BEA0-4C58-8F69-1F92EF0F339F}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\power.exe => Keine Datei FirewallRules: [TCP Query User{83DACC57-C7DD-4BD0-A8E1-D71890F2CBC9}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\analyz.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\analyz.exe => Keine Datei FirewallRules: [UDP Query User{81BEF5DD-871B-4E17-A11A-C9B5FF390D8A}C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\analyz.exe] => (Allow) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\analyz.exe => Keine Datei FirewallRules: [{895F5255-350C-4107-91CB-E98C19181369}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\analyz.exe => Keine Datei FirewallRules: [{F123DFF4-D478-4978-8C83-E50F10BFEE55}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\analyz.exe => Keine Datei FirewallRules: [{60E0AC67-EB86-478D-B668-2D0814C5073B}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\merel.exe => Keine Datei FirewallRules: [{E2047B0A-0EF9-4F39-9636-4D8B28080284}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\merel.exe => Keine Datei FirewallRules: [{FB16069A-199F-455B-B486-EFE876B8F733}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\grayb.exe => Keine Datei FirewallRules: [{7CAB3E5C-83DF-4422-A176-45B3D49D586C}] => (Block) C:\program files\siemens\nx 12.0\nxcae_extras\tmg\exe\grayb.exe => Keine Datei FirewallRules: [TCP Query User{0A4BE601-DC5B-4287-BBB9-713B0B15915A}C:\program files\ultimaker cura 4.8.0\cura.exe] => (Allow) C:\program files\ultimaker cura 4.8.0\cura.exe => Keine Datei FirewallRules: [UDP Query User{6231E34C-4487-4425-8066-90B798348E20}C:\program files\ultimaker cura 4.8.0\cura.exe] => (Allow) C:\program files\ultimaker cura 4.8.0\cura.exe => Keine Datei FirewallRules: [{47BB7A8C-64CC-478E-B83D-17B49EBD8653}] => (Allow) C:\Program Files (x86)\Overwolf\0.165.0.28\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD) FirewallRules: [{A9D8BF20-A335-4F27-B7F1-E1EAEAB57FEF}] => (Allow) C:\Program Files (x86)\Overwolf\0.165.0.28\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD) FirewallRules: [{97CB6800-F551-4255-B834-0ECC711DB336}] => (Block) C:\Program Files (x86)\Overwolf\0.165.0.28\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD) FirewallRules: [{FBB43B40-46D7-423B-B375-DF92E418C4B8}] => (Block) C:\Program Files (x86)\Overwolf\0.165.0.28\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD) FirewallRules: [TCP Query User{97C1F93F-454C-45A6-92E4-53F2FF9A5FD5}D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{146D0936-BADE-4A58-867F-7914D4B0722E}D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [TCP Query User{76EE3992-9D65-483C-8C2C-C391AD752B12}D:\epic games\ue_4.26\engine\binaries\win64\ue4editor.exe] => (Allow) D:\epic games\ue_4.26\engine\binaries\win64\ue4editor.exe => Keine Datei FirewallRules: [UDP Query User{9C92385F-DEDC-417D-841E-45E0EB0FAC73}D:\epic games\ue_4.26\engine\binaries\win64\ue4editor.exe] => (Allow) D:\epic games\ue_4.26\engine\binaries\win64\ue4editor.exe => Keine Datei FirewallRules: [{67A84AFF-D5D1-4ADA-B47E-87B401702612}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe => Keine Datei FirewallRules: [{37C66A4A-3C28-42F2-9779-1BD6C0DF274A}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe => Keine Datei FirewallRules: [{0519F4EF-FCAF-4D31-ADD3-521FC74C137B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.168.632.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{764E89D8-9093-4197-9360-A470B866D284}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.168.632.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{C8DA94C2-0B3A-4573-80C6-5C518764F2E0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.168.632.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{A212C80D-0711-458A-A4D6-BC892AA8C318}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.168.632.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{2E317B0A-570F-4A54-BB16-E1B51D235D69}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.168.632.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{BCA2E7ED-12FE-45BE-9842-D2B444D04118}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.168.632.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{548D787F-6B22-4AB9-9327-EC49CC317D14}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.168.632.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{16CA0211-C777-48BD-A844-5F251777E9E8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.168.632.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [TCP Query User{EE7090DE-8FAA-4628-81AF-CC535E31B573}C:\program files\ultimaker cura 4.11.0\cura.exe] => (Allow) C:\program files\ultimaker cura 4.11.0\cura.exe => Keine Datei FirewallRules: [UDP Query User{3BA78666-8A5B-4D40-B975-21C67297D8C3}C:\program files\ultimaker cura 4.11.0\cura.exe] => (Allow) C:\program files\ultimaker cura 4.11.0\cura.exe => Keine Datei FirewallRules: [TCP Query User{8A1A8CB4-E4AB-4580-8544-3ABBDF113440}D:\epic games\twinmotion2021.1edu\twinmotion\binaries\win64\twinmotion-win64-shipping.exe] => (Allow) D:\epic games\twinmotion2021.1edu\twinmotion\binaries\win64\twinmotion-win64-shipping.exe (Epic Games, Inc. -> Epic Games) FirewallRules: [UDP Query User{5B9DBDE4-D437-42B0-B032-588CAB5BD896}D:\epic games\twinmotion2021.1edu\twinmotion\binaries\win64\twinmotion-win64-shipping.exe] => (Allow) D:\epic games\twinmotion2021.1edu\twinmotion\binaries\win64\twinmotion-win64-shipping.exe (Epic Games, Inc. -> Epic Games) FirewallRules: [TCP Query User{0A8052EE-555A-4808-8687-BEB79F03E8C6}D:\epic games\ue_4.27\engine\binaries\win64\ue4editor.exe] => (Allow) D:\epic games\ue_4.27\engine\binaries\win64\ue4editor.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{58B33AF3-3982-4F3C-ABA6-00C4D2EDCE6F}D:\epic games\ue_4.27\engine\binaries\win64\ue4editor.exe] => (Allow) D:\epic games\ue_4.27\engine\binaries\win64\ue4editor.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [TCP Query User{BEB44742-087C-4305-B868-1E90EB731505}D:\epic games\ue_4.27\engine\binaries\dotnet\swarmagent.exe] => (Allow) D:\epic games\ue_4.27\engine\binaries\dotnet\swarmagent.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{E64D8B57-41D2-4AD2-A980-78EB41ACA328}D:\epic games\ue_4.27\engine\binaries\dotnet\swarmagent.exe] => (Allow) D:\epic games\ue_4.27\engine\binaries\dotnet\swarmagent.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [TCP Query User{7C69A699-F5A9-4668-B757-EBD0AF40F3B2}C:\program files\bridge\bridge.exe] => (Allow) C:\program files\bridge\bridge.exe (Epic Games, Inc -> Quixel) FirewallRules: [UDP Query User{5D9608B9-392C-4AAA-80C7-FCE9EB87F576}C:\program files\bridge\bridge.exe] => (Allow) C:\program files\bridge\bridge.exe (Epic Games, Inc -> Quixel) FirewallRules: [TCP Query User{46510009-311E-453F-AD91-F06AD7C9E4A8}D:\epic games\ue_5.0ea\engine\binaries\win64\unrealeditor.exe] => (Allow) D:\epic games\ue_5.0ea\engine\binaries\win64\unrealeditor.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{53881352-4A5D-4E03-A1E9-C6791C7E7DBB}D:\epic games\ue_5.0ea\engine\binaries\win64\unrealeditor.exe] => (Allow) D:\epic games\ue_5.0ea\engine\binaries\win64\unrealeditor.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [TCP Query User{352F03E2-BD2E-4A66-9611-6266DEA024A0}C:\program files\blackmagic design\davinci resolve\resolve.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.) FirewallRules: [UDP Query User{67E717F1-F18A-4CBE-81C6-9831A0F7548E}C:\program files\blackmagic design\davinci resolve\resolve.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.) FirewallRules: [TCP Query User{E4B16196-DF9B-4BAD-88FF-72164FE1CCA0}C:\program files\blackmagic design\davinci resolve\fuscript.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\fuscript.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.) FirewallRules: [UDP Query User{F5EEC4AA-F5EB-4555-ADD8-FC51F0DDB18B}C:\program files\blackmagic design\davinci resolve\fuscript.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\fuscript.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.) FirewallRules: [{E552023A-F412-463A-859E-3D0D2D3AE513}] => (Allow) C:\Program Files (x86)\DroidCam\DroidCamApp.exe (DEV47 APPS LTD. -> ) FirewallRules: [{65554809-D7EF-4385-8F3B-F8A8DC0EFAAE}] => (Allow) C:\Program Files (x86)\DroidCam\DroidCamApp.exe (DEV47 APPS LTD. -> ) FirewallRules: [{143F4FC2-6CA5-427A-ABFA-7067CC7E7719}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{27CB252C-0B77-4CDC-B9F5-65E4DC1EDF47}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{C697B75D-83F7-44AB-92B6-C5E0A5598094}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{F6D37BC2-D5B2-45F9-88A7-4049188A8BAC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [TCP Query User{676EF435-F116-4BE3-9444-02E4EE98820A}C:\program files\e2esoft\ivcam\ivcam.exe] => (Allow) C:\program files\e2esoft\ivcam\ivcam.exe => Keine Datei FirewallRules: [UDP Query User{11C8FE5A-38F5-4ECE-975A-C22AB5B344FE}C:\program files\e2esoft\ivcam\ivcam.exe] => (Allow) C:\program files\e2esoft\ivcam\ivcam.exe => Keine Datei FirewallRules: [{432543CC-CC30-4FA1-A646-BC9A65A6AE79}] => (Allow) C:\Program Files\e2eSoft\iVCam\iVCam.exe => Keine Datei FirewallRules: [{73B8B96A-394E-44AA-B341-EC1E00BD81B4}] => (Allow) C:\Program Files\e2eSoft\iVCam\iVCam.exe => Keine Datei FirewallRules: [TCP Query User{58CE5726-2F3A-4A6C-B28E-055800D8D172}C:\program files\ultimaker cura 4.12.1\cura.exe] => (Allow) C:\program files\ultimaker cura 4.12.1\cura.exe => Keine Datei FirewallRules: [UDP Query User{562DF3A4-765A-49D1-9BEB-702AFB55BE71}C:\program files\ultimaker cura 4.12.1\cura.exe] => (Allow) C:\program files\ultimaker cura 4.12.1\cura.exe => Keine Datei FirewallRules: [TCP Query User{2DF7A996-C132-4508-BAAA-B318E743E452}S:\programme\siemens\nx 12.0\nxbin\ugraf.exe] => (Allow) S:\programme\siemens\nx 12.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [UDP Query User{52C4F09C-0525-4970-AEA1-E379334BBAFB}S:\programme\siemens\nx 12.0\nxbin\ugraf.exe] => (Allow) S:\programme\siemens\nx 12.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [{51B53005-5F1A-42C7-89B2-95592AFB393C}] => (Block) S:\programme\siemens\nx 12.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [{E3FFA845-B394-4ED7-8FE2-5E3269401150}] => (Block) S:\programme\siemens\nx 12.0\nxbin\ugraf.exe => Keine Datei FirewallRules: [TCP Query User{B56E331C-EA39-4CE5-AD40-15D51B8E7F5F}S:\programme\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe] => (Allow) S:\programme\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe => Keine Datei FirewallRules: [UDP Query User{456D0FD4-5AC5-4231-B5A5-34945E654A77}S:\programme\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe] => (Allow) S:\programme\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe => Keine Datei FirewallRules: [{231642E3-5385-43BF-9DCF-FABADE62726A}] => (Block) S:\programme\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe => Keine Datei FirewallRules: [{85234A53-03BD-4212-BEDA-CE702D223924}] => (Block) S:\programme\siemens\nx 12.0\nxnastran\nxn12\em64tntl\analysis.exe => Keine Datei FirewallRules: [TCP Query User{3F15D4E0-3362-4887-8A1D-188FC9C86E2A}C:\program files\matlab\r2021b\bin\win64\addonproductinstaller.exe] => (Allow) C:\program files\matlab\r2021b\bin\win64\addonproductinstaller.exe => Keine Datei FirewallRules: [UDP Query User{8E698587-A05F-413B-95A8-A6E5594F7C37}C:\program files\matlab\r2021b\bin\win64\addonproductinstaller.exe] => (Allow) C:\program files\matlab\r2021b\bin\win64\addonproductinstaller.exe => Keine Datei FirewallRules: [TCP Query User{6E0A9FD8-BF57-4DE3-856F-FC4AE51B8E02}C:\program files\matlab\r2021b\bin\win64\matlab.exe] => (Allow) C:\program files\matlab\r2021b\bin\win64\matlab.exe => Keine Datei FirewallRules: [UDP Query User{718DD24B-A368-4F9F-80C5-BFB2E09B1CF8}C:\program files\matlab\r2021b\bin\win64\matlab.exe] => (Allow) C:\program files\matlab\r2021b\bin\win64\matlab.exe => Keine Datei FirewallRules: [TCP Query User{4A944FBB-C989-4637-96B9-64955EE0908C}S:\programme\matlab\r2021b\bin\win64\addonproductinstaller.exe] => (Allow) S:\programme\matlab\r2021b\bin\win64\addonproductinstaller.exe => Keine Datei FirewallRules: [UDP Query User{DFDC8C9D-6C09-4401-88E5-6347F16392DC}S:\programme\matlab\r2021b\bin\win64\addonproductinstaller.exe] => (Allow) S:\programme\matlab\r2021b\bin\win64\addonproductinstaller.exe => Keine Datei FirewallRules: [{44736CBC-8370-481F-98A4-5BADE1478CE2}] => (Allow) C:\Program Files\KeyShot10\bin\keyshot.exe (Luxion, Inc. -> Luxion) FirewallRules: [{E2A79634-D2B2-46B3-877A-254EB81537A3}] => (Allow) C:\Program Files\KeyShot10\bin\lux_upd.exe (Luxion, Inc. -> Luxion) FirewallRules: [{C7F0EFBE-2FDD-4FEB-853D-D1C223BDF1C0}] => (Allow) C:\Program Files\KeyShot10\bin\QtWebEngineProcess.exe (Luxion, Inc. -> The Qt Company Ltd.) FirewallRules: [TCP Query User{2EC212AC-986A-4322-A1C0-B80B48B76CA8}S:\programme\siemens\nx 12\nxbin\ugraf.exe] => (Allow) S:\programme\siemens\nx 12\nxbin\ugraf.exe (Siemens Product Lifecycle Management Software Inc.) [Datei ist nicht signiert] FirewallRules: [UDP Query User{DE996C61-F366-41F9-9D52-E4D33A104BB4}S:\programme\siemens\nx 12\nxbin\ugraf.exe] => (Allow) S:\programme\siemens\nx 12\nxbin\ugraf.exe (Siemens Product Lifecycle Management Software Inc.) [Datei ist nicht signiert] FirewallRules: [{0ED3C01B-8ACC-4E1A-99AB-D44C421A14BC}] => (Block) S:\programme\siemens\nx 12\nxbin\ugraf.exe (Siemens Product Lifecycle Management Software Inc.) [Datei ist nicht signiert] FirewallRules: [{321E4CD3-4B96-481E-A2F0-FB88F9396190}] => (Block) S:\programme\siemens\nx 12\nxbin\ugraf.exe (Siemens Product Lifecycle Management Software Inc.) [Datei ist nicht signiert] FirewallRules: [{4628BE7A-06B5-4E50-AECB-3870CCE0C8F7}] => (Allow) S:\Programme\Siemens\NX1953\AUTOMATION_DESIGNER\adagent\Siemens.AutomationDesigner.ADAgentUI.exe (Siemens AG) [Datei ist nicht signiert] FirewallRules: [{30C4E18D-A591-4375-8495-AD26B8D6EF6A}] => (Allow) S:\Programme\Siemens\NX1953\NXBIN\ugraf.exe (Siemens Industry Software Inc. -> Siemens Industry Software Inc.) FirewallRules: [{ADA6689E-6860-42A4-B979-8ED164E50ADB}] => (Allow) S:\Programme\Siemens\NX1953\NXBIN\simcenter3d.exe (Siemens Industry Software Inc. -> Siemens Industry Software Inc.) FirewallRules: [TCP Query User{C592B678-58A2-4811-9E00-89746324E488}C:\program files\ultimaker cura 4.13.1\cura.exe] => (Allow) C:\program files\ultimaker cura 4.13.1\cura.exe => Keine Datei FirewallRules: [UDP Query User{334F23E7-B3F7-4B30-85A7-3BAA2234E178}C:\program files\ultimaker cura 4.13.1\cura.exe] => (Allow) C:\program files\ultimaker cura 4.13.1\cura.exe => Keine Datei FirewallRules: [{505D6CB3-0DA5-4822-A2FD-9D27F8AA7333}] => (Allow) LPort=8029 FirewallRules: [TCP Query User{667B8403-B2C7-4ED8-9532-BA3FC1EBE357}S:\programme\siemens\nx 12\nxnastran\nxn12\em64tntl\analysis.exe] => (Allow) S:\programme\siemens\nx 12\nxnastran\nxn12\em64tntl\analysis.exe () [Datei ist nicht signiert] FirewallRules: [UDP Query User{31255EAA-58DC-4851-99CC-2902221E4794}S:\programme\siemens\nx 12\nxnastran\nxn12\em64tntl\analysis.exe] => (Allow) S:\programme\siemens\nx 12\nxnastran\nxn12\em64tntl\analysis.exe () [Datei ist nicht signiert] FirewallRules: [{A345FF1C-E14F-460C-8B37-DDA1639971D8}] => (Block) S:\programme\siemens\nx 12\nxnastran\nxn12\em64tntl\analysis.exe () [Datei ist nicht signiert] FirewallRules: [{080DF85D-FA07-4169-8E67-232466F744BF}] => (Block) S:\programme\siemens\nx 12\nxnastran\nxn12\em64tntl\analysis.exe () [Datei ist nicht signiert] FirewallRules: [{70230A0F-3167-4325-87C5-46BD7796BEAC}] => (Allow) LPort=8029 FirewallRules: [{C9E1643A-7F4A-449B-B900-FA920B262B2D}] => (Allow) LPort=8029 FirewallRules: [TCP Query User{6486027A-34CC-40B7-AA20-ED07A2C8192E}C:\program files\skylum\luminar neo\luminar neo.exe] => (Allow) C:\program files\skylum\luminar neo\luminar neo.exe (Skylum Software USA, Inc. -> Skylum) FirewallRules: [UDP Query User{D8187F6B-820E-4D6D-B6CE-8138D1DF7AB8}C:\program files\skylum\luminar neo\luminar neo.exe] => (Allow) C:\program files\skylum\luminar neo\luminar neo.exe (Skylum Software USA, Inc. -> Skylum) FirewallRules: [{83DD7A0C-BAE3-4D34-B13E-34448D7D2FEA}] => (Allow) LPort=8029 FirewallRules: [{340C45C5-5AEF-48DE-89FD-FF643CD1EBB3}] => (Allow) LPort=8029 FirewallRules: [{D5915E74-B191-484E-AA3F-69CE64F1C62F}] => (Allow) LPort=8029 FirewallRules: [TCP Query User{E64C9E56-292A-4B21-A27A-6A3DEEA1506A}C:\users\nikla\appdata\local\vortxengine\app-2.2.20\signal-x64\signalrgb.exe] => (Allow) C:\users\nikla\appdata\local\vortxengine\app-2.2.20\signal-x64\signalrgb.exe => Keine Datei FirewallRules: [UDP Query User{76441F1C-912E-4803-9FC1-850CE6CB1F87}C:\users\nikla\appdata\local\vortxengine\app-2.2.20\signal-x64\signalrgb.exe] => (Allow) C:\users\nikla\appdata\local\vortxengine\app-2.2.20\signal-x64\signalrgb.exe => Keine Datei FirewallRules: [{7CC44A30-B8C5-464B-957B-1CABB90726EC}] => (Block) C:\users\nikla\appdata\local\vortxengine\app-2.2.20\signal-x64\signalrgb.exe => Keine Datei FirewallRules: [{88383EDD-5E41-4919-B26E-CD05E12456AE}] => (Block) C:\users\nikla\appdata\local\vortxengine\app-2.2.20\signal-x64\signalrgb.exe => Keine Datei FirewallRules: [{19FAF5F5-977C-477D-9777-62D1E285FBBC}] => (Allow) C:\Program Files (x86)\MouseRecorder\MouseRecorder.exe (Bartels Media GmbH) [Datei ist nicht signiert] FirewallRules: [{6DC4CCBE-78BA-44A8-9A92-618A26E9222F}] => (Allow) C:\Program Files (x86)\MacroRecorder\MacroRecorder.exe (Bartels Media GmbH -> ) FirewallRules: [{C96C59C9-D3FF-44CA-A878-45AC6A588977}] => (Allow) LPort=8029 FirewallRules: [{5A7955DA-9FFD-494F-8F76-09A29BE51830}] => (Allow) LPort=8029 FirewallRules: [{6ABEDCA6-CA8B-48A2-88AD-2975B5CDED61}] => (Allow) LPort=8029 FirewallRules: [{08CBBF9E-4051-4156-B22A-FAA8C9B7E6F8}] => (Allow) LPort=8029 FirewallRules: [{8CD839CA-C2DC-499A-BC70-66A07A4B670B}] => (Allow) LPort=8029 FirewallRules: [{4F893B4B-B1C0-4E32-B839-93EDF6DEBCA1}] => (Allow) LPort=8029 FirewallRules: [{F035234F-1DD1-4A99-891A-4FD54A61DD83}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{BFE3B19D-5CF7-49AA-AF1C-26584EAF2DBD}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{77986E38-C690-45F2-897A-AC261A1CB493}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{AE7BE2F9-EB7D-420C-9190-FD8CE66A41B9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{D09921A6-B4C2-47B1-9EFB-305338AEC13C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{DCE678A4-B087-464C-BC55-2438B4DDE857}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{25E0E862-2DDC-4554-A2D6-ED5F48AF872F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{23C0E494-C7D8-4A8A-B0A9-1DBA3C39434C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{C70E0070-EED6-4743-8F23-24F0D5E4F44E}] => (Allow) LPort=8029 FirewallRules: [{2D8EFA46-F917-434A-9FE0-55944717F719}] => (Allow) LPort=8029 FirewallRules: [{9F1F9C5D-82BC-4AF8-9AAB-BA32DFEB0A4C}] => (Allow) LPort=8029 FirewallRules: [{EA07AE34-42C0-4225-8E89-6E8C11706780}] => (Allow) LPort=8029 FirewallRules: [{84B7094F-DF0A-4762-8BA2-4347FCB7B0D2}] => (Allow) LPort=8029 FirewallRules: [{F8E92263-E320-4B70-9914-58784B1B67EF}] => (Allow) LPort=8029 FirewallRules: [{1BEE7E83-6A9E-4786-876B-9039B0089418}] => (Allow) LPort=8029 FirewallRules: [{C62E67CB-664A-44D7-8FD5-9D36F3C7BB23}] => (Allow) LPort=8029 FirewallRules: [{5A56EE7F-6A35-427E-BA25-9C03D8ECA65A}] => (Allow) LPort=8029 FirewallRules: [{E80A4692-0126-422A-A075-46E1CC99472B}] => (Allow) LPort=8029 FirewallRules: [{01F13636-65BD-4394-80CF-E7B9C2D59148}] => (Allow) LPort=8029 FirewallRules: [{13687E3E-BA51-4819-9D38-CFD7BE21FF64}] => (Allow) LPort=8029 FirewallRules: [TCP Query User{F0D5D6CF-480B-42D8-B585-0117D757CA94}C:\program files\ultimaker cura 5.1.0\ultimaker-cura.exe] => (Allow) C:\program files\ultimaker cura 5.1.0\ultimaker-cura.exe () [Datei ist nicht signiert] FirewallRules: [UDP Query User{92D75EFB-8AA0-4407-A095-E4570EA732A0}C:\program files\ultimaker cura 5.1.0\ultimaker-cura.exe] => (Allow) C:\program files\ultimaker cura 5.1.0\ultimaker-cura.exe () [Datei ist nicht signiert] FirewallRules: [{E5A72416-4AA2-470B-915D-5D114057EA11}] => (Block) C:\program files\ultimaker cura 5.1.0\ultimaker-cura.exe () [Datei ist nicht signiert] FirewallRules: [{35CE294E-15B0-4179-BD93-AAD9544AC33E}] => (Block) C:\program files\ultimaker cura 5.1.0\ultimaker-cura.exe () [Datei ist nicht signiert] FirewallRules: [{BDDC26F3-5174-437F-A925-A7BE74921760}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.193.898.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{2843070A-3B1B-41C1-A2CD-C638E544C60F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.193.898.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{A044263D-ED7C-4EA4-A652-CBE9C62AD9E2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.193.898.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{365A306E-929A-4A82-A811-23D3F490D697}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.193.898.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{F6173E01-D9C8-46D8-B2E7-DD1ED1D23ADB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.193.898.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{99A27CB8-B3B0-4363-AF35-042B7D31AA68}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.193.898.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{92507196-BFC9-4FF0-966E-F761C1D5A7F4}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.193.898.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{CB73BBF1-DA42-42E8-8994-17412A799DA7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.193.898.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{8BE3812E-1EBC-419A-947B-EEA787C4263C}] => (Allow) LPort=8029 FirewallRules: [{88D9E43F-08A0-491D-BB5C-3EC83D199EF7}] => (Allow) LPort=8029 FirewallRules: [{B3C55018-D9C0-4097-BE07-320FFFADA71F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.874.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{CA953AD3-F092-4EC7-BDAF-3FFBE76B8C6A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.874.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{87DF17B9-3B01-47A2-A0F9-8C0AF03618E6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.874.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{DBE64E68-CBB6-4671-99AB-3B7CE72FD779}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.874.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{B0C6C661-0D7E-4B62-8836-EC90F2072B99}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.874.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{11639486-1118-4668-BDA4-2EB32EDBC5FF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.874.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{3A9D311C-41A8-4AE0-9F42-0D42D66F1BFF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.874.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{75D09D76-4283-4B0C-B226-2DBA7D61EEA1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.874.0_x86__zpdnekdrzrea0\Spotify.exe => Keine Datei FirewallRules: [{745A51DB-39C9-455D-B630-4CA1CBFFEA46}] => (Allow) LPort=8029 FirewallRules: [{FB0B1871-5607-4148-80E0-F2C8421FDBE1}] => (Allow) LPort=8029 FirewallRules: [{FD766BD5-3801-4FB5-897B-8133D8DE5BFA}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) FirewallRules: [{A40078E4-BEA9-4602-927A-74880D1C4C34}] => (Allow) LPort=8029 FirewallRules: [{F2EE4A28-A0CB-487E-A1B9-D27841B93554}] => (Allow) LPort=8029 FirewallRules: [{C22E9D76-74B0-4A7A-A252-DD5A383F5D4F}] => (Allow) LPort=8029 FirewallRules: [{4243D40C-E29B-4958-A504-9E1FC9068E30}] => (Allow) LPort=8029 FirewallRules: [{A08E214B-29B8-456F-96B3-BA84BFE608C1}] => (Allow) LPort=8029 FirewallRules: [{767B54A7-76E9-46C2-94CB-ACDABBC014A0}] => (Allow) LPort=8029 FirewallRules: [{582E9BAC-C1A9-4CAD-81E9-C8D29871C709}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.) FirewallRules: [{1AC72469-09EE-4A64-9D5B-91DEA7902B6B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe (Blackmagic Design Pty Ltd -> ) FirewallRules: [{AC8B3668-257F-4AB6-B97C-9CFE081D0C06}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DaVinciPanelDaemon.exe (Blackmagic Design Pty Ltd -> ) FirewallRules: [{849E15CE-EC40-4CD6-B069-9FA2FD915F62}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe (Blackmagic Design Pty Ltd -> ) FirewallRules: [{B2528A95-C3ED-426F-9FF9-DFBC13D1D44C}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe (Blackmagic Design Pty Ltd -> ) FirewallRules: [{7C6B5737-ED57-4903-88B9-F5D7265E4F1A}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe (Blackmagic Design Pty Ltd -> ) FirewallRules: [{9CD80997-8385-4BB3-8327-D9752FB43350}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe => Keine Datei FirewallRules: [{E4F2AFB0-75CD-4C38-BF31-8B6273231F77}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\fuscript.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.) FirewallRules: [{140E6179-9144-4A05-9887-2B737A2AABA4}] => (Allow) LPort=8029 FirewallRules: [{A78A5FE2-E981-4E61-BDF7-791A239F7EBD}] => (Allow) LPort=8029 FirewallRules: [{CEA9DABD-59BD-42D3-A043-9C7D9185C865}] => (Allow) LPort=8029 FirewallRules: [{5E827B65-5F58-4E0D-ABA3-3B887E7BF3AF}] => (Allow) C:\Program Files\AusweisApp2\AusweisApp2.exe (Governikus GmbH & Co. KG -> Governikus GmbH & Co. KG) FirewallRules: [AusweisApp2-Firewall-Rule] => (Allow) C:\Program Files\AusweisApp2\AusweisApp2.exe (Governikus GmbH & Co. KG -> Governikus GmbH & Co. KG) FirewallRules: [{F59337E9-230D-4552-BAA3-852887B97690}] => (Allow) LPort=8029 FirewallRules: [{2AB9FB9F-7672-4A71-81DF-36D4168098DF}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{29D22AD5-4A4B-4076-9CA7-9E4D6B06EE20}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{0C705E16-866A-42C8-B4CD-31453DF12C74}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{C566A1A2-D2B3-4210-8727-0F187A0835DC}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{635FB920-D4CB-48ED-B05B-E9229C553542}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{5926AF3F-719B-4A94-A33D-2F653E2CAA82}] => (Allow) LPort=8029 FirewallRules: [{A9C5F967-42BB-4318-A95A-07E169766E72}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{C358D50D-423B-47EA-BF7B-C92094F7A308}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{391A81FB-988F-4AD4-ACCC-0042084B0F54}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{C92E9B09-0437-43F8-9D1A-1D154DC79DC1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{0E2006D7-06AB-4E92-8D2F-A34F54DAE50C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{CFBCBD15-C97A-4251-8E70-58014FD4BEF3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{F0103891-DE8C-4675-BAE8-989CE1629CE5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{F318CC54-ED99-47E3-8DBC-85D87238AB97}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.205.1006.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{FB15FCEF-0334-4C7E-9135-2667BFA766A1}] => (Allow) LPort=8029 FirewallRules: [{B5756D3E-81C7-4147-8BA9-A85E99E20ED0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.94.3428.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{CC4B8823-BC72-4A31-B489-3778FC46F36F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.94.3428.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{FC4DD87D-3D2E-4DC4-80C6-16FB3AACA226}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.94.3428.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{2B3BFA61-572C-4BCD-B367-78806A5C5B32}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.94.3428.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{420A2189-EDEB-4913-B384-6C5F2C49DEF1}] => (Allow) LPort=8029 FirewallRules: [TCP Query User{03730C52-D1B4-4F3B-A6BB-30C3E5C64C08}S:\programme\salome_meca\w64\omniorb\bin\x86_win32\omninames.exe] => (Allow) S:\programme\salome_meca\w64\omniorb\bin\x86_win32\omninames.exe => Keine Datei FirewallRules: [UDP Query User{71A7789B-1C90-422A-B3B6-35AE07E625BA}S:\programme\salome_meca\w64\omniorb\bin\x86_win32\omninames.exe] => (Allow) S:\programme\salome_meca\w64\omniorb\bin\x86_win32\omninames.exe => Keine Datei FirewallRules: [TCP Query User{50612FEC-B701-4BBE-ACDE-0A8197C655B8}S:\programme\salome_meca\w64\ext\bin\salome_connectionmanagerserver.exe] => (Allow) S:\programme\salome_meca\w64\ext\bin\salome_connectionmanagerserver.exe => Keine Datei FirewallRules: [UDP Query User{961E0C8D-C418-4E18-8145-AEF328C76663}S:\programme\salome_meca\w64\ext\bin\salome_connectionmanagerserver.exe] => (Allow) S:\programme\salome_meca\w64\ext\bin\salome_connectionmanagerserver.exe => Keine Datei FirewallRules: [TCP Query User{1C20122B-D5B9-4DBB-9704-BBB67519016E}S:\programme\salome_meca\w64\ext\bin\salome_launcherserver.exe] => (Allow) S:\programme\salome_meca\w64\ext\bin\salome_launcherserver.exe => Keine Datei FirewallRules: [UDP Query User{B56931C8-FAE8-4D7C-8577-C23A276E4E7F}S:\programme\salome_meca\w64\ext\bin\salome_launcherserver.exe] => (Allow) S:\programme\salome_meca\w64\ext\bin\salome_launcherserver.exe => Keine Datei FirewallRules: [TCP Query User{AF5FCC6D-21D3-4000-848C-827E472D5C48}S:\programme\salome_meca\w64\ext\bin\salome_session_server.exe] => (Allow) S:\programme\salome_meca\w64\ext\bin\salome_session_server.exe => Keine Datei FirewallRules: [UDP Query User{F42DCCFE-E0E4-4704-8768-CF4BAED954BC}S:\programme\salome_meca\w64\ext\bin\salome_session_server.exe] => (Allow) S:\programme\salome_meca\w64\ext\bin\salome_session_server.exe => Keine Datei FirewallRules: [{0D2D25C1-0304-4B21-83BA-F8FCF15B709E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{9FFE4112-CFE2-4544-B81E-7E57517C931D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{D92AEFE7-67F5-4CA1-AA4F-7DCAC82D07E1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{D2F887A4-608A-4C4A-A8B3-7B9A3D3F8B3E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{6A8EECC2-6B02-48F8-BC87-C74D24B1E103}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{BFD3DD13-4D80-4A95-8CF9-F8747B94B4CA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{2C3F8301-A82C-4ADD-8C17-2A9C50B0A7D1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{D18D583C-F896-4CA6-A218-BF9DEF41F01E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.206.863.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{A2FFA6A9-5BC2-4D48-8CBE-4E8FB725DC75}] => (Allow) LPort=8029 FirewallRules: [{84DBE6C6-BEAD-411B-832D-D8A8AD5AFA5D}] => (Allow) LPort=8029 FirewallRules: [{ACC6A380-8CA2-42AF-9A29-46DEBDBA48CE}] => (Allow) LPort=8029 FirewallRules: [{AA0EA586-DF2E-443A-983E-0C0121C20ACB}] => (Allow) LPort=8029 FirewallRules: [{6B7B86E1-A1BE-49D5-8763-F16DED866BBA}] => (Allow) LPort=8029 FirewallRules: [{A293B013-D456-4628-946A-2078944CA5F4}] => (Allow) LPort=8029 FirewallRules: [{EED0E56A-5EB9-4B33-8933-42CDF5BC2C03}] => (Allow) C:\Program Files (x86)\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [{C116202A-288C-43C4-B9A5-1A16F84536E2}] => (Allow) C:\Program Files (x86)\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [{973DF13F-7DD2-471E-B4E2-FB0A72761654}] => (Allow) C:\Program Files (x86)\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [{B1B7E5C7-2EB2-428D-AF6D-04FA1C80AE7F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{58D57D73-87B1-4993-A038-DE501322DB3D}] => (Allow) LPort=8029 FirewallRules: [{E9B078DC-A68B-415E-9F17-D0ACC5A9FFA3}] => (Allow) LPort=8029 FirewallRules: [{7888AADD-760C-48F2-8C3B-87210232582C}] => (Allow) C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) FirewallRules: [{04A3F213-9B14-44AD-BE23-C3C9F556C78D}] => (Allow) C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) FirewallRules: [{8407BBAF-D50B-44F1-9136-1B96C8E16EA4}] => (Allow) LPort=8029 FirewallRules: [{32188054-DDA0-4FD9-BE9B-81426E95807F}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) FirewallRules: [{22104F84-AB93-488C-85AB-4ECB3F060F80}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) FirewallRules: [{00DE580C-B260-498C-B492-4A2F2845624A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) FirewallRules: [{4AAF011A-8494-48EE-9593-7813174A6102}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) FirewallRules: [{6B577B3F-FE8C-45F9-B3E9-8F6F5753D448}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\110.0.1587.69\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation) ==================== Wiederherstellungspunkte ========================= 08-03-2023 18:34:16 Geplanter Prüfpunkt ==================== Fehlerhafte Geräte im Gerätemanager ============ Name: High Definition Audio Bus Description: High Definition Audio Bus Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318} Manufacturer: AMD Service: HDAudBus Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19) Resolution: A registry problem was detected. This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options: On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver. Name: Cisco AnyConnect Virtual Miniport Adapter for Windows x64 Description: Cisco AnyConnect Virtual Miniport Adapter for Windows x64 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: vpnva Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Fehlereinträge in der Ereignisanzeige: ======================== Applikationsfehler: ================== Error: (03/12/2023 02:03:02 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: OverwolfUpdater.exe, Version: 0.166.1.13, Zeitstempel: 0x602a3be7 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.19041.2546, Zeitstempel: 0xe8e9ac9b Ausnahmecode: 0xe0434352 Fehleroffset: 0x000000000002cd29 ID des fehlerhaften Prozesses: 0x4038 Startzeit der fehlerhaften Anwendung: 0x01d954e2fa722099 Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll Berichtskennung: 4c03db64-bbb2-443f-92b3-7c8e944d01bd Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (03/12/2023 02:03:02 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Anwendung: OverwolfUpdater.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet. Ausnahmeinformationen: System.Security.Principal.IdentityNotMappedException bei System.Security.Principal.NTAccount.Translate(System.Security.Principal.IdentityReferenceCollection, System.Type, Boolean) bei System.Security.Principal.NTAccount.Translate(System.Type) bei System.Security.AccessControl.CommonObjectSecurity.ModifyAccess(System.Security.AccessControl.AccessControlModification, System.Security.AccessControl.AccessRule, Boolean ByRef) bei System.Security.AccessControl.CommonObjectSecurity.AddAccessRule(System.Security.AccessControl.AccessRule) bei OverwolfUpdater.Program.SetFolderPermissions() bei OverwolfUpdater.Program.Main(System.String[]) Error: (03/11/2023 04:51:12 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: mDNSResponder.exe, Version: 3.1.0.1, Zeitstempel: 0x55cbcce6 Name des fehlerhaften Moduls: mDNSResponder.exe, Version: 3.1.0.1, Zeitstempel: 0x55cbcce6 Ausnahmecode: 0xc0000409 Fehleroffset: 0x00000000000437c3 ID des fehlerhaften Prozesses: 0x1428 Startzeit der fehlerhaften Anwendung: 0x01d952a0d10984a1 Pfad der fehlerhaften Anwendung: C:\Program Files\Bonjour\mDNSResponder.exe Pfad des fehlerhaften Moduls: C:\Program Files\Bonjour\mDNSResponder.exe Berichtskennung: 52ecdc1d-fe91-42fd-a50b-1bc500b8976b Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (03/11/2023 02:03:02 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: OverwolfUpdater.exe, Version: 0.166.1.13, Zeitstempel: 0x602a3be7 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.19041.2546, Zeitstempel: 0xe8e9ac9b Ausnahmecode: 0xe0434352 Fehleroffset: 0x000000000002cd29 ID des fehlerhaften Prozesses: 0x4484 Startzeit der fehlerhaften Anwendung: 0x01d95419d005e82b Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll Berichtskennung: a67d394a-e5f6-43de-bce4-efe2bba9ed0a Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (03/11/2023 02:03:02 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Anwendung: OverwolfUpdater.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet. Ausnahmeinformationen: System.Security.Principal.IdentityNotMappedException bei System.Security.Principal.NTAccount.Translate(System.Security.Principal.IdentityReferenceCollection, System.Type, Boolean) bei System.Security.Principal.NTAccount.Translate(System.Type) bei System.Security.AccessControl.CommonObjectSecurity.ModifyAccess(System.Security.AccessControl.AccessControlModification, System.Security.AccessControl.AccessRule, Boolean ByRef) bei System.Security.AccessControl.CommonObjectSecurity.AddAccessRule(System.Security.AccessControl.AccessRule) bei OverwolfUpdater.Program.SetFolderPermissions() bei OverwolfUpdater.Program.Main(System.String[]) Error: (03/10/2023 10:30:34 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: Aac3572MbHal_x86.exe, Version: 1.2.8.0, Zeitstempel: 0x61c29640 Name des fehlerhaften Moduls: combase.dll, Version: 10.0.19041.2673, Zeitstempel: 0xb3862aeb Ausnahmecode: 0xc0000005 Fehleroffset: 0x000dabd9 ID des fehlerhaften Prozesses: 0x3468 Startzeit der fehlerhaften Anwendung: 0x01d952a0d9efadef Pfad der fehlerhaften Anwendung: C:\Program Files\ASUS\AacMB\Aac3572MbHal_x86.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\combase.dll Berichtskennung: 414f62e0-db3b-4bb0-84a0-56dfccd348e0 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (03/10/2023 10:03:02 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: OverwolfUpdater.exe, Version: 0.166.1.13, Zeitstempel: 0x602a3be7 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.19041.2546, Zeitstempel: 0xe8e9ac9b Ausnahmecode: 0xe0434352 Fehleroffset: 0x000000000002cd29 ID des fehlerhaften Prozesses: 0x47f4 Startzeit der fehlerhaften Anwendung: 0x01d95393b3c1faf7 Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll Berichtskennung: fd344a76-42f4-4f85-9b86-8112d179c60b Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (03/10/2023 10:03:02 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Anwendung: OverwolfUpdater.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet. Ausnahmeinformationen: System.Security.Principal.IdentityNotMappedException bei System.Security.Principal.NTAccount.Translate(System.Security.Principal.IdentityReferenceCollection, System.Type, Boolean) bei System.Security.Principal.NTAccount.Translate(System.Type) bei System.Security.AccessControl.CommonObjectSecurity.ModifyAccess(System.Security.AccessControl.AccessControlModification, System.Security.AccessControl.AccessRule, Boolean ByRef) bei System.Security.AccessControl.CommonObjectSecurity.AddAccessRule(System.Security.AccessControl.AccessRule) bei OverwolfUpdater.Program.SetFolderPermissions() bei OverwolfUpdater.Program.Main(System.String[]) Systemfehler: ============= Error: (03/13/2023 01:09:02 PM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT) Description: Fehler "1053" in DCOM, als der Dienst "asComSvc" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden: {BC50CF2A-E12C-4F18-90CE-714CC8600CEE} Error: (03/13/2023 01:09:02 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst ASUS Com Service erreicht. Error: (03/13/2023 01:08:32 PM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT) Description: Fehler "1053" in DCOM, als der Dienst "asComSvc" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden: {BC50CF2A-E12C-4F18-90CE-714CC8600CEE} Error: (03/13/2023 01:08:32 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst ASUS Com Service erreicht. Error: (03/13/2023 01:07:24 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-***GFFN) Description: Der Server "{95775DC4-77AA-4E94-8CF6-68267EEF1856}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (03/13/2023 01:05:58 PM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT) Description: Fehler "1053" in DCOM, als der Dienst "asComSvc" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden: {BC50CF2A-E12C-4F18-90CE-714CC8600CEE} Error: (03/13/2023 01:05:58 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst ASUS Com Service erreicht. Error: (03/13/2023 01:05:28 PM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT) Description: Fehler "1053" in DCOM, als der Dienst "asComSvc" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden: {BC50CF2A-E12C-4F18-90CE-714CC8600CEE} Windows Defender: ================ Date: 2023-03-08 12:29:24 Description: Der überwachte Ordnerzugriff hat C:\Program Files\Norton Security\Engine\22.23.1.21\cltLMH.exe daran gehindert, Änderungen am Speicher durchzuführen. Erkennungszeit: 2023-03-08T11:29:24.986Z Benutzer: NT-AUTORITÄT\SYSTEM Pfad: \Device\Harddisk1\DR1 Name des Prozesses: C:\Program Files\Norton Security\Engine\22.23.1.21\cltLMH.exe Sicherheitsversion: 1.383.1161.0 Modulversion: 1.1.20000.2 Produktversion: 4.18.2301.6 Date: 2023-03-08 00:56:10 Description: Der überwachte Ordnerzugriff hat C:\Program Files (x86)\LightingService\LightingService.exe daran gehindert, Änderungen am Speicher durchzuführen. Erkennungszeit: 2023-03-07T23:56:10.573Z Benutzer: NT-AUTORITÄT\SYSTEM Pfad: \Device\Harddisk0\DR0 Name des Prozesses: C:\Program Files (x86)\LightingService\LightingService.exe Sicherheitsversion: 1.383.1161.0 Modulversion: 1.1.20000.2 Produktversion: 4.18.2301.6 Date: 2023-03-07 20:49:06 Description: Der überwachte Ordnerzugriff hat C:\Program Files (x86)\LightingService\LightingService.exe daran gehindert, Änderungen am Speicher durchzuführen. Erkennungszeit: 2023-03-07T19:49:06.627Z Benutzer: NT-AUTORITÄT\SYSTEM Pfad: \Device\Harddisk0\DR0 Name des Prozesses: C:\Program Files (x86)\LightingService\LightingService.exe Sicherheitsversion: 1.383.1161.0 Modulversion: 1.1.20000.2 Produktversion: 4.18.2301.6 Date: 2023-03-07 09:59:35 Description: Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet. Überprüfungs-ID: {307B58EF-359D-4A33-81DA-EBCD9F16FF4E} Überprüfungstyp: Antimalware Überprüfungsparameter: Vollständige Überprüfung Benutzer: DESKTOP-***GFFN\*** Date: 2023-03-07 09:52:15 Description: C:\Windows\System32\svchost.exe wurde durch den überwachten Ordnerzugriff daran gehindert, S:\Videos zu ändern. Erkennungszeit: 2023-03-07T08:52:15.366Z Benutzer: DESKTOP-***GFFN\*** Pfad: S:\Videos Prozessname: C:\Windows\System32\svchost.exe Sicherheitsversion: 1.383.1124.0 Modulversion: 1.1.20000.2 Produktversion: 4.18.2301.6 CodeIntegrity: =============== Date: 2023-03-13 13:01:34 Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume6\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2023-03-13 12:59:29 Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume6\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements. ==================== Speicherinformationen =========================== BIOS: American Megatrends Inc. 0906 03/22/2017 Hauptplatine: ASUSTeK COMPUTER INC. STRIX Z270E GAMING Prozessor: Intel(R) Core(TM) i7-7700K CPU @ 4.20GHz Prozentuale Nutzung des RAM: 27% Installierter physikalischer RAM: 32692.97 MB Verfügbarer physikalischer RAM: 23847.57 MB Summe virtueller Speicher: 37556.97 MB Verfügbarer virtueller Speicher: 26777.62 MB ==================== Laufwerke ================================ Drive c: () (Fixed) (Total:232.29 GB) (Free:74.84 GB) (Model: Samsung SSD 850 EVO 250GB) NTFS Drive d: (Volume) (Fixed) (Total:931.39 GB) (Free:573.35 GB) (Model: WDC WD10EZEX-22MFCA0) NTFS Drive s: (Volume) (Fixed) (Total:1863 GB) (Free:913.19 GB) (Model: ST2000DM008-2FR102) NTFS \\?\Volume{ec611612-131e-410f-808f-564f669b62a8}\ () (Fixed) (Total:0.49 GB) (Free:0.04 GB) NTFS \\?\Volume{701cc1a9-03ad-4eca-a9bf-a127c10ae69a}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32 ==================== MBR & Partitionstabelle ==================== ========================================================== Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000) Partition: GPT. ========================================================== Disk: 1 (Protective MBR) (Size: 232.9 GB) (Disk ID: 00000000) Partition: GPT. ========================================================== Disk: 2 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000) Partition: GPT. ==================== Ende von Addition.txt ======================= |
13.03.2023, 15:38 | #8 |
/// TB-Ausbilder | Windows 10: Passwort-Trojaner wirklich weg? Gut gemacht. Es folgt ein Fix mit FRST (Entfernung verwaister Einträge und Überprüfung der Systemdateien) sowie ein Scan mit SC. Schritt 1 WARNUNG AN ALLE MITLESER !!! Dieses FRST-Script ist ausschließlich für diesen Nutzer gedacht und sollte niemals 1:1 für ein anderes System verwendet werden!
Schritt 2 Führe SecurityCheck gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei. Bitte poste mit deiner nächsten Antwort:
|
13.03.2023, 19:39 | #9 |
| Windows 10: Passwort-Trojaner wirklich weg?Code:
ATTFilter Entfernungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-03-2023 durchgeführt von *** (13-03-2023 19:20:04) Run:3 Gestartet von D:\Downloads\FRST-OlderVersion\FRST-OlderVersion Geladene Profile: *** Start-Modus: Normal ============================================== fixlist Inhalt: ***************** Start:: SystemRestore: On CreateRestorePoint: CloseProcesses: HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [Lync] => "C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe" /fromrunkey (Keine Datei) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [CorsairEffectsEngine] => "C:\Users\nikla\AppData\Local\CorsairEffectsEngine\Update.exe" --processStart CorsairEffectsEngine.exe (Keine Datei) HKU\S-1-5-21-341515215-1173906820-3305953664-1001\...\Run: [SignalRgb] => "C:\Users\nikla\AppData\Local\VortxEngine\SignalRgbLauncher.exe" --silent (Keine Datei) Startup: C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2022-06-30] GroupPolicy: Beschränkung ? <==== ACHTUNG Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG Task: {BF0FCB18-B0F1-4441-8FF5-30C4484F9369} - System32\Tasks\Driver Booster SkipUAC (***) => C:\Program Files (x86)\IObit\Driver Booster\5.1.0\DriverBooster.exe /skipuac (Keine Datei) C:\Program Files (x86)\IObit Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden] Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden] Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden] Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden] FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi => nicht gefunden FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi => nicht gefunden FF Plugin: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [Keine Datei] FF Plugin-x32: wacom.com/WacomTabletPlugin -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [Keine Datei] S3 CM_VENDER_CMD; \??\C:\Program Files\Common Files\Logitech\G430Install\CMVC64.sys [X] 2023-03-06 21:29 - 2023-03-06 21:29 - 000684984 _____ (Mozilla Foundation) C:\Users\nikla\AppData\LocalLow\freebl3.dll 2023-03-06 21:29 - 2023-03-06 21:29 - 000627128 _____ (Mozilla Foundation) C:\Users\nikla\AppData\LocalLow\mozglue.dll 2023-03-06 21:29 - 2023-03-06 21:29 - 000254392 _____ (Mozilla Foundation) C:\Users\nikla\AppData\LocalLow\softokn3.dll BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll => Keine Datei BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{18A21864-E37B-42b9-9612-2C1E8C450A29}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\TestServer.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{13009989-EFB5-48C9-8BD2-943E0392BD71}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\RxAppCtrl.Ocx => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4}\localserver32 -> "C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe" -ToastActivated => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{2F8377FC-50C1-44EF-AB7A-8FF1BB8EA277}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{32CDFF57-8CBA-4960-89B1-EC3FA58FB17A}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2017 - English\en-US\dwgviewrficn.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{3FC94EB5-AEBD-4f3f-A2A4-B6CE57113C01}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\RxAppDocView.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{45122C53-8483-4b62-B15A-EAA9FE5FC3D5}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{4C80573A-9150-11d2-B772-0060B0F159EF}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\RxAppDocView.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{4E6F2E83-E7F0-4333-9772-875EB733C820}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\RxTest.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{644190AE-BD8F-493F-B63D-C79404AC5E07}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A70-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A71-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A72-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A73-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A74-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A77-351B-11d6-988B-0010B57A8BB7}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtCp.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{720DB9AF-D62C-4ED0-A377-429C22312852}\localserver32 -> C:\Program Files\Autodesk\DWG TrueView 2017 - English\dwgviewr.exe => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{72EC5CC5-88F3-45B1-A865-0A327DF58CC8}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{7BA16B3F-1AB3-4BD7-B959-52C4B8504EE9}\InprocServer32 -> AcInetUI.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B}\InprocServer32 -> axdb.dll => Keine Datei ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C4F0910E-E0B4-4E68-8086-452730C7A26A}\InprocServer32 -> C:\Users\nikla\AppData\Local\Autodesk\webdeploy\production\50d1a2b00ac928c7781cbca6551e586a5384d498\NPreview10.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C92F8F8C-8B2C-11d4-B872-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\nikla\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{CFEE2BAF-14F9-4D23-853D-B6E2BCC14263}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22}\InprocServer32 -> AcETransmit.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DA1F437C-9BD9-11d4-B87C-0060B0EC020B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DtBridge.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DB5D476B-3FF4-4E9D-A606-1E2B473BE571}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\AcInetUI.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DCA7356C-FF94-4b20-AE04-7AA6A8E14117}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DDA9A20F-5B56-49F5-9465-CE82FC199352}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DE6B563C-B074-4BF1-A8A0-B3FED8703E99}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E1C85E9F-60B2-4007-80C3-2C5E09474C3B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\RxInventorUtilities.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\TestServer.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F13E75B9-6AF6-49CB-80B3-6D2FF6E09932}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2017\Bin\ServiceModule.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F2D4F4E5-EEA1-46FF-A83B-A270C92DAE4B}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DTInterop.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F4363F9D-3BBA-46AC-ABFE-F27977981DA8}\localserver32 -> "C:\Program Files\Autodesk\Inventor 2020\Bin\ApprenticeServerHost.exe" => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F61064CC-DBFB-47ee-9BC8-CA5A1CBDF0DA}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\InvResc.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FB469644-3F14-4403-ACCA-6B13486FF7BD}\localserver32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\InvTXTStack.exe /Automation => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{fc2f3575-b316-ac6e-0e71-05c27fa0611c}\localserver32 -> "C:\Users\nikla\AppData\Local\VidCoder.Stable\app-8.25.0\VidCoder.exe" -ToastActivated => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FD703B01-4362-423E-9BDB-91BDCB16C1C9}\InprocServer32 -> C:\Program Files\Autodesk\Inventor 2020\Bin\DTInterop.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220}\InprocServer32 -> axdb.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1}\InprocServer32 -> axdb.dll => Keine Datei startpowershell: Function Remove-all-windefend-excludes { $Paths=(Get-MpPreference).ExclusionPath $Extensions=(Get-MpPreference).ExclusionExtension $Processes=(Get-MpPreference).ExclusionProcess foreach ($Path in $Paths) { Remove-MpPreference -ExclusionPath $Path -force} foreach ($Extension in $Extensions) { Remove-MpPreference -ExclusionExtension $Extension -force} foreach ($Process in $Processes) { Remove-MpPreference -ExclusionProcess $Process -force} } Set-MpPreference -DisableAutoExclusions $true -Force Remove-all-windefend-excludes endpowershell: CMD: netsh winsock reset CMD: netsh int ip reset CMD: ipconfig /flushdns CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: netsh winhttp reset proxy CMD: Bitsadmin /Reset /Allusers CMD: "%WINDIR%\SYSTEM32\lodctr.exe" /R CMD: "%WINDIR%\SysWOW64\lodctr.exe" /R CMD: "%WINDIR%\SYSTEM32\lodctr.exe" /R CMD: "%WINDIR%\SysWOW64\lodctr.exe" /R CMD: cscript /nologo %systemroot%\System32\slmgr.vbs /dlv CMD: sfc /scannow Hosts: RemoveProxy: EmptyTemp: End:: ***************** SystemRestore: On => abgeschlossen Wiederherstellungspunkt wurde erfolgreich erstellt. Prozesse erfolgreich geschlossen. "HKU\S-1-5-21-341515215-1173906820-3305953664-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Lync" => erfolgreich entfernt "HKU\S-1-5-21-341515215-1173906820-3305953664-1001\Software\Microsoft\Windows\CurrentVersion\Run\\CorsairEffectsEngine" => erfolgreich entfernt "HKU\S-1-5-21-341515215-1173906820-3305953664-1001\Software\Microsoft\Windows\CurrentVersion\Run\\SignalRgb" => erfolgreich entfernt "C:\Users\nikla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk" => nicht gefunden "C:\WINDOWS\system32\GroupPolicy\Machine" Ordner verschieben: Konnte nicht verschoben werden "C:\WINDOWS\system32\GroupPolicy\Machine" => ist geplant bei Neustart verschoben zu werden. Konnte nicht verschoben werden "C:\ProgramData\NTUSER.pol" => ist geplant bei Neustart verschoben zu werden. HKLM\SOFTWARE\Policies\Mozilla => erfolgreich entfernt "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BF0FCB18-B0F1-4441-8FF5-30C4484F9369}" => erfolgreich entfernt "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BF0FCB18-B0F1-4441-8FF5-30C4484F9369}" => erfolgreich entfernt Konnte nicht verschoben werden "C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (***)" => ist geplant bei Neustart verschoben zu werden. "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster SkipUAC (***)" => nicht gefunden "C:\Program Files (x86)\IObit" => nicht gefunden HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => erfolgreich entfernt HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\BookReader_B171F20233094AC88D05A8EF7B9763E8 => erfolgreich entfernt HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => erfolgreich entfernt HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => erfolgreich entfernt "HKLM\Software\Mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}" => erfolgreich entfernt "HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}" => erfolgreich entfernt HKLM\Software\MozillaPlugins\wacom.com/WacomTabletPlugin => erfolgreich entfernt HKLM\Software\Wow6432Node\MozillaPlugins\wacom.com/WacomTabletPlugin => erfolgreich entfernt HKLM\System\CurrentControlSet\Services\CM_VENDER_CMD => erfolgreich entfernt CM_VENDER_CMD => Dienst erfolgreich entfernt "C:\Users\nikla\AppData\LocalLow\freebl3.dll" => nicht gefunden "C:\Users\nikla\AppData\LocalLow\mozglue.dll" => nicht gefunden "C:\Users\nikla\AppData\LocalLow\softokn3.dll" => nicht gefunden HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF} => erfolgreich entfernt HKLM\Software\Classes\CLSID\{B164E929-A1B6-4A06-B104-2CD0E90A88FF} => erfolgreich entfernt HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B164E929-A1B6-4A06-B104-2CD0E90A88FF} => erfolgreich entfernt HKLM\Software\Wow6432Node\Classes\CLSID\{B164E929-A1B6-4A06-B104-2CD0E90A88FF} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{0215A4C0-5431-4FD0-9B06-46589B5C4939} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{048ED0E0-12CF-4C0F-9FFA-947C2FBE8C8E} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{071339A1-1946-44B2-B63E-50459B15DB86} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{08A60FF7-BB37-44F4-9759-0ADA6C7B9CC9} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{0B38CACA-3D3C-48EA-BEB5-7D95F4F6EE15} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{0C3393F8-94F5-4B79-8C01-49A2D0CC0FE9} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{0D555CE0-304A-47A6-858B-B145209A3982} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{12545889-6D32-4424-9967-1E1D7BD1F809} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{14679E3B-C952-4998-8E13-4B1286E6DD99} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{1481B385-759A-4B00-9257-E96357563999} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{162EF0A1-5A33-46F2-ACCF-CA388B084A09} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{18A21864-E37B-42b9-9612-2C1E8C450A29} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{073CB204-6B29-46FC-AB98-451F1D068741} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{13009989-EFB5-48C9-8BD2-943E0392BD71} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{2F8377FC-50C1-44EF-AB7A-8FF1BB8EA277} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{32CDFF57-8CBA-4960-89B1-EC3FA58FB17A} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{3497C2EC-5684-4B21-AF74-F6760E0221DC} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{38C8B14E-7879-4DA9-8C3F-8CAAC359293A} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{3FC94EB5-AEBD-4f3f-A2A4-B6CE57113C01} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{3FCEB42C-9B98-486A-BED7-FD7F3ADB7291} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{40770568-0D5E-49D4-BE47-BC47A4F0B0A4} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{44A52280-AE56-490D-890C-89FB7279ED6B} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{45122C53-8483-4b62-B15A-EAA9FE5FC3D5} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{46C56738-39C6-4240-8B9B-008CCD769A84} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{47179DDE-10AC-4737-97C9-8CE5379343EA} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{475C7B4A-6964-4F9E-9708-05A16EAC31D0} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{48270F9E-CCF6-4C79-B6FF-267C960E6425} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{48FEFCD7-5D7C-4E4A-9F11-60E69A31D4B1} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{49998808-648A-4A9C-A7A5-B1672775D9AB} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{4A756F5F-CBA4-428B-B17F-AF80C0C8502D} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{4B40437B-8972-4444-BBE3-1588FF55F203} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{4BD03680-3C0F-4501-AFF7-3D008586917F} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{4C80573A-9150-11d2-B772-0060B0F159EF} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{4E6F2E83-E7F0-4333-9772-875EB733C820} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{5544903C-2CCC-487C-91BB-F310B72A8E9B} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{59A224A2-BEF8-4C89-96E0-83A5411ABB6C} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{644190AE-BD8F-493F-B63D-C79404AC5E07} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6451051B-AD22-4C6A-ACCE-013A0E1DDBC3} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{64B99FDB-1D85-447F-98C7-569DBDA723DB} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6BCE6F6E-C050-4F39-BD98-E2743949F724} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6F56D7C9-18DD-4C15-9FA8-C54E3610EC40} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A70-351B-11d6-988B-0010B57A8BB7} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A71-351B-11d6-988B-0010B57A8BB7} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A72-351B-11d6-988B-0010B57A8BB7} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A73-351B-11d6-988B-0010B57A8BB7} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A74-351B-11d6-988B-0010B57A8BB7} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{6FDE7A77-351B-11d6-988B-0010B57A8BB7} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{70DBCAE8-8C2B-450C-9E1D-43E4686C6512} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{713C0E8A-5AE8-4695-B442-5ED6C4FE5C42} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{720DB9AF-D62C-4ED0-A377-429C22312852} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{7293E009-3015-4AD3-96EC-D42C36B5FCE3} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{72EC5CC5-88F3-45B1-A865-0A327DF58CC8} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{72EFC580-D085-4B81-8C55-26A79E445338} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{750AEC19-2E4C-4ED9-9B9F-F9CAFCD060F3} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{794199C5-827C-41C8-8CB2-3A1EA056AF5E} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{798391FE-4AF2-4851-9DDA-1F0D70C02A9E} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{7BA16B3F-1AB3-4BD7-B959-52C4B8504EE9} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{7C239DAB-BC87-45F3-B7B1-FCC1541A235B} => erfolgreich entfernt HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C4F0910E-E0B4-4E68-8086-452730C7A26A} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C8C18F89-794D-466B-8B97-95634D9890EF} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C8EC7647-1E79-4F13-81D7-2EED803D0D22} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{C92F8F8C-8B2C-11d4-B872-0060B0EC020B} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{CC23CA32-9892-4FBA-A108-FE31CA0F35A6} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{CD865713-70D6-4E15-BB7B-9B99AD9DEB85} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{CFEE2BAF-14F9-4D23-853D-B6E2BCC14263} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{D56F5AB3-9C4D-4F1A-A851-A671D9FE8C22} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{D66873EA-AAE5-41CC-8DD2-8CE3228E9F89} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{D86B6C47-11F2-4D95-B635-EA575F0892FC} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DA1F437C-9BD9-11d4-B87C-0060B0EC020B} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DB207560-8449-4FAF-BDC2-61676EB012D4} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DB5D476B-3FF4-4E9D-A606-1E2B473BE571} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DCA7356C-FF94-4b20-AE04-7AA6A8E14117} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DDA9A20F-5B56-49F5-9465-CE82FC199352} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DE6B563C-B074-4BF1-A8A0-B3FED8703E99} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DE74F5AD-DA2F-429F-BAF9-850A2808D585} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{DF6525C2-6358-4B07-813D-708120C5FE1A} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E177A457-9EAA-43C3-A3CE-84874A28F6CA} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E1C85E9F-60B2-4007-80C3-2C5E09474C3B} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E29F6C45-6927-4508-8F3F-34105FD3FC5F} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E4222C78-3670-4BB1-9AD4-7D8F3E581F2D} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E5B0515D-48D2-4F04-906D-0192ED65A2DD} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E70DE962-842A-4488-9481-1D0FD72A020F} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{E9C07CEC-7B82-49E4-BBA2-7533B88E9D64} => erfolgreich entfernt HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{EA34A0C0-5CE7-4701-A6FA-117D25CD5EBB} => nicht gefunden HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{EF01D98A-747B-4522-AD70-991B90855DBF} => nicht gefunden HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F13E75B9-6AF6-49CB-80B3-6D2FF6E09932} => nicht gefunden HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F196F03F-651A-43AF-BE34-D11942F24445} => nicht gefunden HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F2D4F4E5-EEA1-46FF-A83B-A270C92DAE4B} => nicht gefunden HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F2DB0EE3-7137-4CB0-8349-483C4FF2143A} => nicht gefunden HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F40E2FF0-4D77-40B2-9A44-A3AEECCE8EFF} => nicht gefunden HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F4363F9D-3BBA-46AC-ABFE-F27977981DA8} => nicht gefunden HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F5522F0C-962A-48AC-9992-E81B07628F1F} => nicht gefunden HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F61064CC-DBFB-47ee-9BC8-CA5A1CBDF0DA} => nicht gefunden HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F78DCF7C-043D-45FC-9D21-676FC307BA3F} => nicht gefunden HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{F868EAEC-1B73-4F5E-BA73-90EBA94E75BE} => nicht gefunden HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FA97F7A7-FD19-4D55-ABF2-CFEFFF777426} => nicht gefunden HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FB469644-3F14-4403-ACCA-6B13486FF7BD} => nicht gefunden HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{fc2f3575-b316-ac6e-0e71-05c27fa0611c} => nicht gefunden HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FD51ED8A-D518-4554-B236-B6E9D234FD03} => nicht gefunden HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FD703B01-4362-423E-9BDB-91BDCB16C1C9} => nicht gefunden HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FE054BB2-AF94-40AC-88AA-2F59F7018B1D} => nicht gefunden HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FE317223-8EDE-4684-B424-E48B9EA90220} => nicht gefunden HKU\S-1-5-21-341515215-1173906820-3305953664-1001_Classes\CLSID\{FE718E8F-C3AA-4F30-9103-432450CF1DA1} => nicht gefunden ========= Powershell: ========= Set-MpPreference : Fehler beim Vorgang: 0x800106ba. Vorgang: Set-MpPreference. Ziel: DisableAutoExclusions. In C:\FRST\tmp000.ps1:9 Zeichen:1 + Set-MpPreference -DisableAutoExclusions $true -Force + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (MSFT_MpPreference:root\Microsoft\...FT_MpPreference) [Set-MpPreference], CimException + FullyQualifiedErrorId : HRESULT 0x800106ba,Set-MpPreference ========= Ende von Powershell: ========= ========= netsh winsock reset ========= Der Winsock-Katalog wurde zurckgesetzt. Sie mssen den Computer neu starten, um den Vorgang abzuschlieáen. ========= Ende von CMD: ========= ========= netsh int ip reset ========= Depotweiterleitung wird zurckgesetzt... OK Depot wird zurckgesetzt... OK Steuerungsprotokoll wird zurckgesetzt... OK Echosequenzanforderung wird zurckgesetzt... OK Global wird zurckgesetzt... OK Schnittstelle wird zurckgesetzt... OK Anycastadresse wird zurckgesetzt... OK Multicastadresse wird zurckgesetzt... OK Unicastadresse wird zurckgesetzt... OK Nachbar wird zurckgesetzt... OK Pfad wird zurckgesetzt... OK Potentiell wird zurckgesetzt... OK Pr„fixrichtlinie wird zurckgesetzt... OK Proxynachbar wird zurckgesetzt... OK Route wird zurckgesetzt... OK Standordpr„fix wird zurckgesetzt... OK Unterschnittstelle wird zurckgesetzt... OK Reaktivierungsmuster wird zurckgesetzt... OK Nachbar aufl”sen wird zurckgesetzt... OK wird zurckgesetzt... OK wird zurckgesetzt... OK wird zurckgesetzt... OK wird zurckgesetzt... OK wird zurckgesetzt... Fehler Zugriff verweigert wird zurckgesetzt... OK wird zurckgesetzt... OK wird zurckgesetzt... OK wird zurckgesetzt... OK wird zurckgesetzt... OK wird zurckgesetzt... OK wird zurckgesetzt... OK wird zurckgesetzt... OK Starten Sie den Computer neu, um die Aktion abzuschlieáen. ========= Ende von CMD: ========= ========= ipconfig /flushdns ========= Windows-IP-Konfiguration Der DNS-Aufl”sungscache wurde geleert. ========= Ende von CMD: ========= ========= netsh advfirewall reset ========= OK. ========= Ende von CMD: ========= ========= netsh advfirewall set allprofiles state ON ========= OK. ========= Ende von CMD: ========= ========= netsh winhttp reset proxy ========= Aktuelle WinHTTP-Proxyeinstellungen: DirectAccess (kein Proxyserver). ========= Ende von CMD: ========= ========= Bitsadmin /Reset /Allusers ========= BITSADMIN version 3.0 BITS administration utility. (C) Copyright Microsoft Corp. {AF1BA35D-B284-420F-8754-2735CB036EDF} canceled. 1 out of 1 jobs canceled. ========= Ende von CMD: ========= ========= "%WINDIR%\SYSTEM32\lodctr.exe" /R ========= Fehler: Die Leistungsindikatoreinstellung konnte nicht aus dem Systemsicherungsspeicher neu erstellt werden. Fehlercode: 5. ========= Ende von CMD: ========= ========= "%WINDIR%\SysWOW64\lodctr.exe" /R ========= Fehler: Die Leistungsindikatoreinstellung konnte nicht aus dem Systemsicherungsspeicher neu erstellt werden. Fehlercode: 5. ========= Ende von CMD: ========= ========= "%WINDIR%\SYSTEM32\lodctr.exe" /R ========= Fehler: Die Leistungsindikatoreinstellung konnte nicht aus dem Systemsicherungsspeicher neu erstellt werden. Fehlercode: 5. ========= Ende von CMD: ========= ========= "%WINDIR%\SysWOW64\lodctr.exe" /R ========= Fehler: Die Leistungsindikatoreinstellung konnte nicht aus dem Systemsicherungsspeicher neu erstellt werden. Fehlercode: 5. ========= Ende von CMD: ========= ========= cscript /nologo %systemroot%\System32\slmgr.vbs /dlv ========= Softwarelizenzierungsdienst-Version: 10.0.19041.2673 Name: Windows(R), Professional edition Beschreibung: Windows(R) Operating System, VOLUME_MAK channel Aktivierungs-ID: 49cd895b-53b2-4dc4-a5f7-b18aa019ad37 Anwendungs-ID: 55c92734-d682-4d71-983e-d6ec3f16059f Erweiterte PID: 03612-03312-030-000000-03-1031-19041.0000-2592020 Product Key-Kanal: Volume:MAK Installations-ID: 093269078423354301811788595429701940372696650508007743917472561 Lizenz-URL verwenden: https://activation-v2.sls.microsoft.com/SLActivateProduct/SLActivateProduct.asmx?configextension=Retail URL fr die šberprfung: https://validation-v2.sls.microsoft.com/SLWGA/slwga.asmx Teil-Product Key: P7JXM Lizenzstatus: Lizenziert Verbleibende Windows Rearm-Anzahl: 1001 Verbleibende SKU Rearm-Anzahl: 1001 Vertrauenswrdige Zeit: 13.03.2023 19:20:42 ========= Ende von CMD: ========= ========= sfc /scannow ========= Systemsuche wird gestartet. Dieser Vorgang kann einige Zeit dauern. Überprüfungsphase der Systemsuche wird gestartet. Überprüfung 0 % abgeschlossen. Überprüfung 1 % abgeschlossen. Überprüfung 1 % abgeschlossen. Überprüfung 2 % abgeschlossen. Überprüfung 2 % abgeschlossen. Überprüfung 3 % abgeschlossen. Überprüfung 4 % abgeschlossen. Überprüfung 4 % abgeschlossen. Überprüfung 5 % abgeschlossen. Überprüfung 5 % abgeschlossen. Überprüfung 6 % abgeschlossen. Überprüfung 7 % abgeschlossen. Überprüfung 7 % abgeschlossen. Überprüfung 8 % abgeschlossen. Überprüfung 8 % abgeschlossen. Überprüfung 9 % abgeschlossen. Überprüfung 10 % abgeschlossen. Überprüfung 10 % abgeschlossen. Überprüfung 11 % abgeschlossen. Überprüfung 11 % abgeschlossen. Überprüfung 12 % abgeschlossen. Überprüfung 13 % abgeschlossen. Überprüfung 13 % abgeschlossen. Überprüfung 14 % abgeschlossen. Überprüfung 14 % abgeschlossen. Überprüfung 15 % abgeschlossen. Überprüfung 15 % abgeschlossen. Überprüfung 16 % abgeschlossen. Überprüfung 17 % abgeschlossen. Überprüfung 17 % abgeschlossen. Überprüfung 18 % abgeschlossen. Überprüfung 18 % abgeschlossen. Überprüfung 19 % abgeschlossen. Überprüfung 20 % abgeschlossen. Überprüfung 20 % abgeschlossen. Überprüfung 21 % abgeschlossen. Überprüfung 21 % abgeschlossen. Überprüfung 22 % abgeschlossen. Überprüfung 23 % abgeschlossen. Überprüfung 23 % abgeschlossen. Überprüfung 24 % abgeschlossen. Überprüfung 24 % abgeschlossen. Überprüfung 25 % abgeschlossen. Überprüfung 26 % abgeschlossen. Überprüfung 26 % abgeschlossen. Überprüfung 27 % abgeschlossen. Überprüfung 27 % abgeschlossen. Überprüfung 28 % abgeschlossen. Überprüfung 29 % abgeschlossen. Überprüfung 29 % abgeschlossen. Überprüfung 30 % abgeschlossen. Überprüfung 30 % abgeschlossen. Überprüfung 31 % abgeschlossen. Überprüfung 31 % abgeschlossen. Überprüfung 32 % abgeschlossen. Überprüfung 33 % abgeschlossen. Überprüfung 33 % abgeschlossen. Überprüfung 34 % abgeschlossen. Überprüfung 34 % abgeschlossen. Überprüfung 35 % abgeschlossen. Überprüfung 36 % abgeschlossen. Überprüfung 36 % abgeschlossen. Überprüfung 37 % abgeschlossen. Überprüfung 37 % abgeschlossen. Überprüfung 38 % abgeschlossen. Überprüfung 39 % abgeschlossen. Überprüfung 39 % abgeschlossen. Überprüfung 40 % abgeschlossen. Überprüfung 40 % abgeschlossen. Überprüfung 41 % abgeschlossen. Überprüfung 42 % abgeschlossen. Überprüfung 42 % abgeschlossen. Überprüfung 43 % abgeschlossen. Überprüfung 43 % abgeschlossen. Überprüfung 44 % abgeschlossen. Überprüfung 45 % abgeschlossen. Überprüfung 45 % abgeschlossen. Überprüfung 46 % abgeschlossen. Überprüfung 46 % abgeschlossen. Überprüfung 47 % abgeschlossen. Überprüfung 47 % abgeschlossen. Überprüfung 48 % abgeschlossen. Überprüfung 49 % abgeschlossen. Überprüfung 49 % abgeschlossen. Überprüfung 50 % abgeschlossen. Überprüfung 50 % abgeschlossen. Überprüfung 51 % abgeschlossen. Überprüfung 52 % abgeschlossen. Überprüfung 52 % abgeschlossen. Überprüfung 53 % abgeschlossen. Überprüfung 53 % abgeschlossen. Überprüfung 54 % abgeschlossen. Überprüfung 55 % abgeschlossen. Überprüfung 55 % abgeschlossen. Überprüfung 56 % abgeschlossen. Überprüfung 56 % abgeschlossen. Überprüfung 57 % abgeschlossen. Überprüfung 58 % abgeschlossen. Überprüfung 58 % abgeschlossen. Überprüfung 59 % abgeschlossen. Überprüfung 59 % abgeschlossen. Überprüfung 60 % abgeschlossen. Überprüfung 61 % abgeschlossen. Überprüfung 61 % abgeschlossen. Überprüfung 62 % abgeschlossen. Überprüfung 62 % abgeschlossen. Überprüfung 63 % abgeschlossen. Überprüfung 63 % abgeschlossen. Überprüfung 64 % abgeschlossen. Überprüfung 65 % abgeschlossen. Überprüfung 65 % abgeschlossen. Überprüfung 66 % abgeschlossen. Überprüfung 66 % abgeschlossen. Überprüfung 67 % abgeschlossen. Überprüfung 68 % abgeschlossen. Überprüfung 68 % abgeschlossen. Überprüfung 69 % abgeschlossen. Überprüfung 69 % abgeschlossen. Überprüfung 70 % abgeschlossen. Überprüfung 71 % abgeschlossen. Überprüfung 71 % abgeschlossen. Überprüfung 72 % abgeschlossen. Überprüfung 72 % abgeschlossen. Überprüfung 73 % abgeschlossen. Überprüfung 74 % abgeschlossen. Überprüfung 74 % abgeschlossen. Überprüfung 75 % abgeschlossen. Überprüfung 75 % abgeschlossen. Überprüfung 76 % abgeschlossen. Überprüfung 77 % abgeschlossen. Überprüfung 77 % abgeschlossen. Überprüfung 78 % abgeschlossen. Überprüfung 78 % abgeschlossen. Überprüfung 79 % abgeschlossen. Überprüfung 79 % abgeschlossen. Überprüfung 80 % abgeschlossen. Überprüfung 81 % abgeschlossen. Überprüfung 81 % abgeschlossen. Überprüfung 82 % abgeschlossen. Überprüfung 82 % abgeschlossen. Überprüfung 83 % abgeschlossen. Überprüfung 84 % abgeschlossen. Überprüfung 84 % abgeschlossen. Überprüfung 85 % abgeschlossen. Überprüfung 85 % abgeschlossen. Überprüfung 86 % abgeschlossen. Überprüfung 87 % abgeschlossen. Überprüfung 87 % abgeschlossen. Überprüfung 88 % abgeschlossen. Überprüfung 88 % abgeschlossen. Überprüfung 89 % abgeschlossen. Überprüfung 90 % abgeschlossen. Überprüfung 90 % abgeschlossen. Überprüfung 91 % abgeschlossen. Überprüfung 91 % abgeschlossen. Überprüfung 92 % abgeschlossen. Überprüfung 93 % abgeschlossen. Überprüfung 93 % abgeschlossen. Überprüfung 94 % abgeschlossen. Überprüfung 94 % abgeschlossen. Überprüfung 95 % abgeschlossen. Überprüfung 95 % abgeschlossen. Überprüfung 96 % abgeschlossen. Überprüfung 97 % abgeschlossen. Überprüfung 97 % abgeschlossen. Überprüfung 98 % abgeschlossen. Überprüfung 98 % abgeschlossen. Überprüfung 99 % abgeschlossen. Überprüfung 100 % abgeschlossen. Der Windows-Ressourcenschutz hat beschädigte Dateien gefunden und erfolgreich repariert. Bei Onlinereparaturen finden Sie Details in der CBS-Protokolldatei unter windir\Logs\CBS\CBS.log. Beispiel C:\Windows\Logs\CBS\CBS.log. Bei Offlinereparaturen finden Sie Details in der durch das /OFFLOGFILE-Kennzeichen angegebenen Protokolldatei. ========= Ende von CMD: ========= Konnte nicht verschoben werden "C:\Windows\System32\Drivers\etc\hosts" => ist geplant bei Neustart verschoben zu werden. ========= RemoveProxy: ========= "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt "HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => erfolgreich entfernt "HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt "HKU\S-1-5-21-341515215-1173906820-3305953664-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => erfolgreich entfernt "HKU\S-1-5-21-341515215-1173906820-3305953664-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt ========= Ende von RemoveProxy: ========= =========== EmptyTemp: ========== FlushDNS => abgeschlossen BITS transfer queue => 0 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 3416676807 B Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 415582041 B Windows/system/drivers => 7193665 B Edge => 1473561 B Chrome => 554902108 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 7168 B ProgramData => 7168 B Public => 7168 B systemprofile => 60354057 B systemprofile32 => 60354436 B LocalService => 60397054 B NetworkService => 61807212 B nikla => 663341028 B RecycleBin => 0 B EmptyTemp: => 4.9 GB temporäre Dateien entfernt. ================================ Ergebnis der geplanten Datei-Verschiebungen (Start-Modus: Normal) (Datum&Uhrzeit: 13-03-2023 19:26:38) C:\WINDOWS\system32\GroupPolicy\Machine => ist erfolgreich verschoben C:\ProgramData\NTUSER.pol => ist erfolgreich verschoben C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (***) => erfolgreich verschoben C:\Windows\System32\Drivers\etc\hosts => ist erfolgreich verschoben Hosts erfolgreich wiederhergestellt. ==== Ende vom Fixlog 19:26:38 ==== Code:
ATTFilter SecurityCheck by glax24 & Severnyj v.1.4.0.54 [06.12.21] WebSite: www.safezone.cc DateLog: 13.03.2023 19:34:19 Path starting: C:\Users\nikla\AppData\Local\Temp\SecurityCheck\SecurityCheck.exe Log directory: C:\SecurityCheck\ IsAdmin: True User: *** VersionXML: 10.49is-11.03.2023 ___________________________________________________________________________ Windows 10(6.3.19045) (x64) Professional Release: 2009 Lang: German(0407) Installation date OS: 15.09.2020 10:36:46 LicenseStatus: Windows(R), Professional edition The machine is permanently activated. Boot Mode: Normal Default Browser: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe SystemDrive: C: FS: [NTFS] Capacity: [232.3 Gb] Used: [154.7 Gb] Free: [77.6 Gb] ------------------------------- [ Windows ] ------------------------------- User Account Control enabled (Level 3) Norton WSC Service (nsWscSvc) - The service is running Remoteregistrierung (RemoteRegistry) - The service has stopped SSDP-Suche (SSDPSRV) - The service is running Remotedesktopdienste (TermService) - The service is running Windows-Remoteverwaltung (WS-Verwaltung) (WinRM) - The service has stopped ------------------------------ [ MS Office ] ------------------------------ Microsoft Office 2010 x64 v.14.0.7015.1000 ---------------------------- [ Antivirus_WMI ] ---------------------------- Windows Defender (disabled and up to date) Norton AntiVirus (enabled) ---------------------------- [ Firewall_WMI ] ----------------------------- Norton AntiVirus --------------------------- [ AntiSpyware_WMI ] --------------------------- Sophos Home (enabled) Windows Defender (disabled and up to date) ---------------------- [ AntiVirusFirewallInstall ] ----------------------- Norton AntiVirus v.22.23.1.21 --------------------------- [ OtherUtilities ] ---------------------------- AMD Software v.20.Q3 Warning! Download Update Git v.2.39.2 Microsoft 365 Apps for Enterprise - de-de v.16.0.15601.20538 Warning! Download Update How Install Office updates? Microsoft SQL Server 2012 Native Client v.11.0.2100.60 Warning! This software is no longer supported. Microsoft SQL Server 2008 Setup Support Files v.10.3.5500.0 Warning! This software is no longer supported. Microsoft SQL Server 2008 Native Client v.10.0.1600.22 Warning! This software is no longer supported. Steam v.2.10.91.91 TeamViewer v.15.39.6 Epic Games Launcher v.1.2.17.0 ------------------------------- [ Backup ] -------------------------------- Microsoft OneDrive v.23.038.0219.0001 ------------------------------ [ ArchAndFM ] ------------------------------ 7-Zip 22.01 (x64 edition) v.22.01.00.0 ------------------------------- [ Imaging ] ------------------------------- GIMP 2.10.34 v.2.10.34 Blender v.2.79.0 Inkscape v.1.2.2- -------------------------- [ IMAndCollaborate ] --------------------------- Signal 6.8.0 v.6.8.0 Warning! Download Update Discord v.0.0.311 Warning! Download Update Microsoft Teams v.1.6.00.1381 Warning! Download Update Cisco Webex Meetings v.41.2.3.17 Warning! Download Update ---------------------------- [ ProxyAndVPNs ] ----------------------------- NordVPN v.6.40.5.0 -------------------------------- [ Java ] --------------------------------- Java 8 Update 181 (64-bit) v.8.0.1810.13 Warning! Download Update Uninstall old version and install new one (jre-8u361-windows-x64.exe). Java 8 Update 361 (64-bit) v.8.0.3610.9 Java SE Development Kit 8 Update 181 (64-bit) v.8.0.1810.13 Warning! This software is no longer supported. Please uninstall it and use Java SE Development Kit (jdk-19_windows-x64_bin.exe). Java 8 Update 181 v.8.0.1810.13 Warning! Download Update Uninstall old version and install new one (jre-8u361-windows-i586.exe). Java 8 Update 361 v.8.0.3610.9 -------------------------------- [ Media ] -------------------------------- VLC media player v.3.0.18 Audacity 3.2.5 v.3.2.5 --------------------------- [ AdobeProduction ] --------------------------- Adobe Acrobat Reader - Deutsch v.23.001.20064 ------------------------------- [ Browser ] ------------------------------- Google Chrome v.111.0.5563.65 Microsoft Edge v.110.0.1587.69 ------------------ [ AntivirusFirewallProcessServices ] ------------------- Norton Security (NortonSecurity) - The service is running C:\Program Files\Norton Security\Engine\22.23.1.21\NortonSecurity.exe v.17.2.3.65 Microsoft Defender Antivirus-Dienst (WinDefend) - The service has stopped Microsoft Defender Antivirus-Netzwerkinspektionsdienst (WdNisSvc) - The service has stopped ---------------------------- [ UnwantedApps ] ----------------------------- Bonjour v.3.1.0.1 Warning! Application is distributed through the partnership programs and bundle assemblies. Uninstallation recommended. Possible you became a victim of fraud or social engineering. ----------------------------- [ End of Log ] ------------------------------ |
13.03.2023, 21:14 | #10 |
/// TB-Ausbilder | Windows 10: Passwort-Trojaner wirklich weg? Bitte die folgenden Programme updaten (falls noch benötigt) oder deinstallieren (falls nicht mehr benötigt oder nicht mehr unterstützt):
Die Downloadlinks findest du in der Logdatei von SecurityCheck. Entfernung der verwendeten Tools Führe KpRm gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei. Dann wären wir durch! Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber. Wenn Du möchtest, kannst Du hier sagen, ob du mit mir und meiner Hilfe zufrieden warst... Vielleicht möchtest du das Forum mit einer kleinen Spende unterstützen. Zum Schluss bitte unbedingt die Sicherheitsmaßnahmen lesen und umsetzen: Hinweis: Bitte gib mir eine kurze Rückmeldung, sobald du die oben verlinkten Informationen gelesen hast, alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann. |
17.03.2023, 14:59 | #11 |
/// TB-Ausbilder | Windows 10: Passwort-Trojaner wirklich weg? Wir sind froh, dass wir helfen konnten Dieses Thema scheint erledigt und wird aus unseren Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke uns bitte eine Erinnerung inklusive Link zum Thema. Jeder andere bitte hier klicken und ein eigenes Thema erstellen. |
Themen zu Windows 10: Passwort-Trojaner wirklich weg? |
appdata, bedrohungen, build, bösartige, code, defender, eset, explorer, gen, gestartet, interne, internet, internet explorer, laufen, limited, loader, logfiles, malwarebytes, microsoft, quarantäne, quick, roaming, service, webadvisor, windows, wirklich |