DVD-Brenner erkennt leere DVD-R nicht und anderes...

Malwarebytes
www.malwarebytes.com
-ProtokolldetailsScan-Datum: 14.11.23
Scan-Zeit: 21:01
Protokolldatei: aa649588-8328-11ee-bc74-3065ec989376.json
-SoftwaredatenVersion: 4.6.5.293
Komponentenversion: 1.0.2181
Version des Aktualisierungspakets: 1.0.77276
Lizenz: Premium
-SystemdatenBetriebssystem: Windows 10 (Build 19045.3636)
CPU: x64Dateisystem: NTFS
Benutzer: DESKTOP-PMBED9M\prokr
-Scan-ÜbersichtScan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 283542
Erkannte Bedrohungen: 1
In die Quarantäne verschobene Bedrohungen: 1
Abgelaufene Zeit: 2 Min., 44 Sek.
-Scan-OptionenSpeicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung
-Scan-DetailsProzess: 0
(keine bösartigen Elemente erkannt)
Modul: 0
(keine bösartigen Elemente erkannt)
Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)Registrierungswert: 0
(keine bösartigen Elemente erkannt)
Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)
Daten-Stream: 0
(keine bösartigen Elemente erkannt)
Ordner: 0
(keine bösartigen Elemente erkannt)
Datei: 1
PUP.Optional.Avanquest, C:\USERS\PROKR\DOWNLOADS\DRIVER_UPDATER_SETUP.EXE, In
Quarantäne, 5763, 904416, 1.0.77276, , ame, , 861F004DBAE7F3F48F63B062384D3C7B,
6D482C9D1C5FD56116752728F8E9D4CCC396DEFD3FC8A31D1B9B59742035C48D
Physischer Sektor: 0
(keine bösartigen Elemente erkannt)
WMI: 0
(keine bösartigen Elemente erkannt)
(end)
         

Malwarebytes
www.malwarebytes.com
-ProtokolldetailsDatum des Schutzereignisses: 15.11.23
Uhrzeit des Schutzereignisses: 13:51Protokolldatei: b4a004f0-83b5-11ee-bb41-3065ec989376.json
-SoftwaredatenVersion: 4.6.5.293
Komponentenversion: 1.0.2181
Version des Aktualisierungspakets: 1.0.77306
Lizenz: Premium
-SystemdatenBetriebssystem: Windows 10 (Build 19045.3693)
CPU: x64
Dateisystem: NTFS
Benutzer: System
-Einzelheiten zu blockierten WebsitesBösartige Website: 1
, C:\Program Files\Mozilla Firefox\firefox.exe, Blockiert, -1, -1, 0.0.0, ,
-Website-DatenKategorie: „Malvertising“
Domäne: shorteh.com
IP-Adresse: 139.45.197.238
Port: 443
Typ: Ausgehend
Datei: C:\Program Files\Mozilla Firefox\firefox.exe
(end)
         

ESET logfile "emplog.txt" ist nicht zu finden!
         

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 05-11-2023 02
durchgeführt von prokr (Administrator) auf DESKTOP-PMBED9M (Acer NG-VN7-791G-70TW) (16-11-
2023 06:26:12)
Gestartet von C:\Users\prokr\Desktop\FRST64.exe
Geladene Profile: prokr
Plattform: Microsoft Windows 10 Home Version 22H2 19045.3693 (X64) Sprache: Deutsch
(Deutschland)
Standard-Browser: FF
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird
nicht verschoben.)
(ACD Systems International Inc. -> ) C:\Program Files\ACD Systems\ACDSee
Ultimate\14.0\ACDSeeCommanderUltimate14.exe
(C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe ->) (Intel Corporation ->
Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. ->
Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\Users\prokr\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe -
>) (Wondershare Technology Group Co.,Ltd -> Wondershare)
C:\Users\prokr\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <7>
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files
(x86)\Dropbox\Update\1.3.817.1\DropboxCrashHandler.exe
(explorer.exe ->) (ACD Systems International Inc. -> ) C:\Program Files\ACD Systems\ACDSee
Pro\16.0\ACDSeeCommanderPro16.exe
(explorer.exe ->) (ACD Systems International Inc. -> ACD Systems International Inc.) C:\Program
Files\ACD Systems\ACDSee Pro\16.0\acdIDInTouch2.exe
(explorer.exe ->) (Avanquest Software SAS -> Avanquest Software)
C:\Users\prokr\AppData\Local\Avanquest\Avanquest Message\AQNotif.exe
(explorer.exe ->) (Marco Barisione (marco.bari@vene.ws)) [Datei ist nicht signiert] C:\Program Files
(x86)\HotKeyBind\HotKeyBind.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program
Files\Realtek\Audio\HDA\RAVBg64.exe(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program
Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv.exe
(Intel(R) pGFX -> ) C:\Windows\System32\igfxTray.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage
Technology\IAStorIcon.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files
(x86)\Microsoft\Edge\Application\msedge.exe <7>
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (ArcSoft, Inc. -> ArcSoft Inc.) C:\Program Files (x86)\Common
Files\ArcSoft\esinter\Bin\eservutil.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Common
Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe
(services.exe ->) (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe
(services.exe ->) (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support
Assistant\DSAService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support
Assistant\DSAUpdateService.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program
Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\AntiMalware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common
Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation)
C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (nordvpn s.a. -> nordvpn S.A.) C:\Program
Files\NordUpdater\NordUpdateService.exe
(services.exe ->) (nordvpn s.a. -> nordvpn S.A.) C:\Program Files\NordVPN\nordvpn-service.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA
Corporation\Display.NvContainer\NVDisplay.Container.exe <2>(services.exe ->) (Wondershare Technology Group Co.,Ltd -> Wondershare)
C:\Users\prokr\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program
Files\WindowsApps\5319275A.WhatsAppDesktop_2.2344.5.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files
(x86)\Dropbox\Update\DropboxUpdate.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program
Files\WindowsApps\Microsoft.WindowsCalculator_11.2307.4.0_x64__8wekyb3d8bbwe\CalculatorA
pp.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program
Files\WindowsApps\Microsoft.XboxGamingOverlay_6.123.10181.0_x64__8wekyb3d8bbwe\GameBa
r.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program
Files\WindowsApps\Microsoft.XboxGamingOverlay_6.123.10181.0_x64__8wekyb3d8bbwe\GameBa
rFTServer.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation)
C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
<2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation)
C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation)
C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert
zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18391104 2018-
11-12] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1506368
2018-11-12] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [ACPW16DE] => C:\Program Files\ACD Systems\ACDSee Pro\16.0\acdIDInTouch2.exe
[3495472 2022-09-18] (ACD Systems International Inc. -> ACD Systems International Inc.)HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage
Technology\IAStorIcon.exe [322120 2017-09-15] (Intel(R) Rapid Storage Technology -> Intel
Corporation)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [11561184
2023-11-14] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139776
2014-06-16] (Brother Industries, Ltd.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
[4513792 2014-05-22] (Brother Industries, Ltd.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [BrHelp] => C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe
[1944576 2013-03-07] (Brother Industries, Ltd.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [TeamsMachineUninstallerLocalAppData] =>
C:\Users\prokr\AppData\Local\Microsoft\Teams\Update.exe [2589872 2023-11-13] (Microsoft 3rd
Party Application Component -> Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application
Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc. -> Apple Inc.)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Beschränkung <====
ACHTUNG
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Beschränkung <==== ACHTUNG
HKU\S-1-5-21-406362002-2203256304-1339820604-1001\...\Run: [OneDrive] => C:\Program
Files\Microsoft OneDrive\OneDrive.exe [2590752 2023-11-14] (Microsoft Corporation -> Microsoft
Corporation)
HKU\S-1-5-21-406362002-2203256304-1339820604-1001\...\Run: [ACDSeeCommanderUltimate14]
=> C:\Program Files\ACD Systems\ACDSee Ultimate\14.0\ACDSeeCommanderUltimate14.exe
[6739128 2020-10-19] (ACD Systems International Inc. -> )
HKU\S-1-5-21-406362002-2203256304-1339820604-1001\...\Run: [Discord] =>
C:\Users\prokr\AppData\Local\Discord\Update.exe [1525016 2023-07-31] (Discord Inc. -> GitHub)
HKU\S-1-5-21-406362002-2203256304-1339820604-1001\...\Run: [HotKeyBind.exe] => C:\Program
Files (x86)\HotKeyBind\HotKeyBind.exe [884224 2004-11-15] (Marco Barisione
(marco.bari@vene.ws)) [Datei ist nicht signiert]
HKU\S-1-5-21-406362002-2203256304-1339820604-1001\...\Run: [ACDSeeCommanderPro16] =>
C:\Program Files\ACD Systems\ACDSee Pro\16.0\ACDSeeCommanderPro16.exe [8189536 2022-10-
13] (ACD Systems International Inc. -> )
HKU\S-1-5-21-406362002-2203256304-1339820604-1001\...\Run:
[MicrosoftEdgeAutoLaunch_AAF85FA943F216B2B4DAB9C18C97573F] => "C:\Program Files
(x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5
[3894824 2023-11-09] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-406362002-2203256304-1339820604-1001\...\Run: [Avanquest Message] =>
C:\Users\prokr\AppData\Local\Avanquest\Avanquest Message\AQNotif.exe [601960 2021-08-12]
(Avanquest Software SAS -> Avanquest Software)HKU\S-1-5-21-406362002-2203256304-1339820604-500\...\Run: [OneDrive] => C:\Program
Files\Microsoft OneDrive\OneDrive.exe [2590752 2023-11-14] (Microsoft Corporation -> Microsoft
Corporation)
Startup: C:\Users\prokr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RossTech VCDS Updater-DRV.lnk [2023-06-06]
ShortcutTarget: Ross-Tech VCDS Updater-DRV.lnk -> C:\Ross-Tech\VCDS-DRV\VCDS.exe (Ross-Tech,
LLC -> Ross-Tech, LLC)
GroupPolicy: Beschränkung ? <==== ACHTUNG
GroupPolicy-Firefox: Beschränkung <==== ACHTUNG
Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird
nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {4530885F-1B9A-4D14-AD23-C2F6B9765A03} - System32\Tasks\Apple\AppleSoftwareUpdate
=> C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [569416 2016-02-23] (Apple
Inc. -> Apple Inc.)
Task: {CD08FC75-1616-473C-AA47-6F699BA428C3} -
System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files
(x86)\Dropbox\Update\DropboxUpdate.exe [130320 2022-11-08] (Dropbox, Inc -> Dropbox, Inc.)
Task: {746A6819-9B2F-464B-ACBD-DD32073B37A1} -
System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files
(x86)\Dropbox\Update\DropboxUpdate.exe [130320 2022-11-08] (Dropbox, Inc -> Dropbox, Inc.)
Task: {BA2F28FB-9204-432E-84AB-46CBFE992915} - System32\Tasks\EOSv3 Scheduler onLogOn =>
C:\Users\prokr\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [21737944 2023-
04-19] (ESET, spol. s r.o. -> ESET)
Task: {67719D64-0A4E-40BC-BD96-E567C8CA4E8E} - System32\Tasks\EOSv3 Scheduler onTime =>
C:\Users\prokr\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [21737944 2023-
04-19] (ESET, spol. s r.o. -> ESET)
Task: {C7B96D14-2562-4381-AC5D-30C0C3387EA8} -
System32\Tasks\GoogleUpdateTaskMachineCore{7F013C53-8694-443F-94C8-3B1A8605EF83} =>
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2022-10-20] (Google LLC ->
Google LLC)
Task: {01F0D2AD-C46C-4D4C-8FAD-5D5A1F86CCAB} -
System32\Tasks\GoogleUpdateTaskMachineUA{2974A8B6-D26E-4B2F-A6AF-D16BDC839338} =>
C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2022-10-20] (Google LLC ->
Google LLC)Task: {B6E667E0-524A-4EB0-A90D-A1200D705FA8} - System32\Tasks\IntelSURQC-Upgrade-
86621605-2a0b-4128-8ffc-15514c247132 => C:\Program
Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [4850904 2023-
05-24] (Intel Corporation -> Intel Corporation)
Task: {204DA2FC-050E-4C1D-BF0C-B32374AC7281} - System32\Tasks\IntelSURQC-Upgrade-
86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program
Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [4850904 2023-
05-24] (Intel Corporation -> Intel Corporation)
Task: {DFE3BC92-9F8A-47B9-8C00-A907543622D4} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-
A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --
automatic (Keine Datei)
Task: {53CBD0B8-A6D5-4490-BBB6-F1CCE7FA9CD5} - System32\Tasks\Microsoft\Office\Office
Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft
Shared\ClickToRun\OfficeC2RClient.exe [21915760 2023-09-27] (Microsoft Corporation -> Microsoft
Corporation)
Task: {F1A53CDC-402F-430A-ADEC-2338E5A71F80} - System32\Tasks\Microsoft\Office\Office
ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft
Shared\ClickToRun\OfficeC2RClient.exe [21915760 2023-09-27] (Microsoft Corporation -> Microsoft
Corporation)
Task: {A4C90FA2-15E4-4CB5-86F9-336271BEF75A} - System32\Tasks\Microsoft\Office\Office Feature
Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141352 2023-10-18]
(Microsoft Corporation -> Microsoft Corporation)
Task: {B9F68FD2-8673-4582-8FBF-9517BA9FD8B5} - System32\Tasks\Microsoft\Office\Office Feature
Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141352 2023-10-
18] (Microsoft Corporation -> Microsoft Corporation)
Task: {F7115AEC-6858-41ED-BD0A-672567824861} -
System32\Tasks\Microsoft\Windows\ConsentUX\UnifiedConsent\UnifiedConsentSyncTask =>
{82aa0895-198a-4c1b-b2d1-c16894218afb} C:\WINDOWS\System32\unifiedconsent.dll [278016
2023-10-27] (Microsoft Windows -> Microsoft Corporation)
Task: {D5D51B09-39B7-4437-9F09-E900DC6850DF} -
System32\Tasks\Microsoft\Windows\WindowsUpdate\Refresh Group Policy Cache => {07369A67-
07A6-4608-ABEA-379491CB7C46} C:\Windows\System32\UpdatePolicy.dll [251904 2023-11-15]
(Microsoft Windows -> Microsoft Corporation)
Task: {B352C799-5A7E-4194-A589-EE052553AAF4} - System32\Tasks\Mozilla\Firefox Background
Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [676256 2023-11-08]
(Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG
sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE
C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-
e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask
backgroundupdate
Task: {DFC94982-4888-4BA2-A415-B99AEC49BF32} - System32\Tasks\Mozilla\Firefox Default
Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe
[723872 2023-11-08] (Mozilla Corporation -> Mozilla Foundation)Task: {C0617CCE-7BE7-49B6-9CC1-441EAEAD190E} - System32\Tasks\OneDrive Per-Machine
Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe
[4130848 2023-11-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {D658D428-14DA-4D82-9623-C42889B2EFE9} - System32\Tasks\OneDrive Reporting Task-S-1-
5-21-406362002-2203256304-1339820604-1001 => C:\Program Files\Microsoft
OneDrive\OneDriveStandaloneUpdater.exe [4130848 2023-11-14] (Microsoft Corporation ->
Microsoft Corporation)
Task: {7F18271B-F267-43B6-A31C-57A2B849DCF9} - System32\Tasks\OneDrive Reporting Task-S-1-5-
21-406362002-2203256304-1339820604-500 => C:\Program Files\Microsoft
OneDrive\OneDriveStandaloneUpdater.exe [4130848 2023-11-14] (Microsoft Corporation ->
Microsoft Corporation)
Task: {270BEBC3-F52C-4676-9D6D-0E7A68B0D445} -
System32\Tasks\USER_ESRV_SVC_QUEENCREEK => C:\WINDOWS\System32\Wscript.exe [170496
2023-10-13] (Microsoft Windows -> Microsoft Corporation) -> //B //NoLogo "C:\Program
Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die
durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files
(x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files
(x86)\Dropbox\Update\DropboxUpdate.exe
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den
Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc. -
> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-30] (Apple Inc. ->
Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{4b99529f-6917-42e9-8546-a98ab7b88b0f}: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{84f7bd62-946c-405e-9f51-e641bb84c078}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{9272e2bf-6bd5-1513-a95c-605fd4c46776}: [NameServer]
103.86.96.100,103.86.99.100Tcpip\..\Interfaces\{95ff6795-1933-4a14-b97c-ef3da9ff3656}: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{b9d92483-55fe-4a9c-9113-5a141833d9a5}: [DhcpNameServer] 192.168.178.1
Edge:
=======
Edge Profile: C:\Users\prokr\AppData\Local\Microsoft\Edge\User Data\Default [2023-11-16]
Edge Extension: (Google Docs Offline) - C:\Users\prokr\AppData\Local\Microsoft\Edge\User
Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-24]
Edge Extension: (Edge relevant text changes) - C:\Users\prokr\AppData\Local\Microsoft\Edge\User
Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-24]
FireFox:
========
FF DefaultProfile: vxxnpwlp.default
FF ProfilePath: C:\Users\prokr\AppData\Roaming\Mozilla\Firefox\Profiles\vxxnpwlp.default [2023-
02-12]
FF ProfilePath: C:\Users\prokr\AppData\Roaming\Mozilla\Firefox\Profiles\oqpimp9f.default-release
[2023-11-15]
FF Homepage: Mozilla\Firefox\Profiles\oqpimp9f.default-release -> moz-extension://50e13a6e-86f7-
464e-9c65-ec6d669a7bdb/dial.html
FF HomepageOverride: Mozilla\Firefox\Profiles\oqpimp9f.default-release -> Enabled:
admin@fastaddons.com_GroupSpeedDial
FF NewTabOverride: Mozilla\Firefox\Profiles\oqpimp9f.default-release -> Enabled:
admin@fastaddons.com_GroupSpeedDial
FF Extension: (Gruppen-SpeedDial) -
C:\Users\prokr\AppData\Roaming\Mozilla\Firefox\Profiles\oqpimp9f.defaultrelease\Extensions\admin@fastaddons.com_GroupSpeedDial.xpi [2023-11-15]
FF Extension: (Close All Tabs Button) -
C:\Users\prokr\AppData\Roaming\Mozilla\Firefox\Profiles\oqpimp9f.defaultrelease\Extensions\close-all-tabs-single@codefisher.org.xpi [2022-10-19]
FF Extension: (Download Sound) -
C:\Users\prokr\AppData\Roaming\Mozilla\Firefox\Profiles\oqpimp9f.defaultrelease\Extensions\jid1-1vdAiX6gThdiIg@jetpack.xpi [2022-10-19]
FF Extension: (To Google Translate) -
C:\Users\prokr\AppData\Roaming\Mozilla\Firefox\Profiles\oqpimp9f.defaultrelease\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2022-10-19]FF Extension: (I don't care about cookies) -
C:\Users\prokr\AppData\Roaming\Mozilla\Firefox\Profiles\oqpimp9f.defaultrelease\Extensions\jid1-KKzOGWgsW3Ao4Q@jetpack.xpi [2023-09-26]
FF Extension: (Trusted Shops-Erweiterung) -
C:\Users\prokr\AppData\Roaming\Mozilla\Firefox\Profiles\oqpimp9f.defaultrelease\Extensions\jid1-PBNne26X1Kn6hQ@jetpack.xpi [2023-09-19]
FF Extension: (LastPass: Free Password Manager) -
C:\Users\prokr\AppData\Roaming\Mozilla\Firefox\Profiles\oqpimp9f.defaultrelease\Extensions\support@lastpass.com.xpi [2023-11-05]
FF Extension: (Malwarebytes Browser Guard) -
C:\Users\prokr\AppData\Roaming\Mozilla\Firefox\Profiles\oqpimp9f.defaultrelease\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2023-11-15]
FF Extension: (Download All Images) -
C:\Users\prokr\AppData\Roaming\Mozilla\Firefox\Profiles\oqpimp9f.defaultrelease\Extensions\{32af1358-428a-446d-873e-5f8eb5f2a72e}.xpi [2023-03-16]
FF Extension: (Bulk Media Downloader) -
C:\Users\prokr\AppData\Roaming\Mozilla\Firefox\Profiles\oqpimp9f.defaultrelease\Extensions\{72b2e02b-3a71-4895-886c-fd12ebe36ba3}.xpi [2023-07-06]
FF Extension: (Video DownloadHelper) -
C:\Users\prokr\AppData\Roaming\Mozilla\Firefox\Profiles\oqpimp9f.defaultrelease\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2023-08-26]
FF Extension: (Galaxia) -
C:\Users\prokr\AppData\Roaming\Mozilla\Firefox\Profiles\oqpimp9f.defaultrelease\Extensions\{cb450604-c5ea-45d8-a8e6-4c6231419ef2}.xpi [2022-12-09]
FF Extension: (Adblock Plus - kostenloser Adblocker) -
C:\Users\prokr\AppData\Roaming\Mozilla\Firefox\Profiles\oqpimp9f.defaultrelease\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2023-06-21]
FF Extension: (Read Aloud: A Text to Speech Voice Reader) -
C:\Users\prokr\AppData\Roaming\Mozilla\Firefox\Profiles\oqpimp9f.defaultrelease\Extensions\{ddc62400-f22d-4dd3-8b4a-05837de53c2e}.xpi [2023-09-21]
FF Extension: (TuneYou Radio App) -
C:\Users\prokr\AppData\Roaming\Mozilla\Firefox\Profiles\oqpimp9f.defaultrelease\Extensions\{fcce0b11-092d-4c58-a143-0348bbaebebd}.xpi [2022-10-19]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft
Office\root\Office16\NPSPWRAP.DLL [2022-10-19] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-
08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\PROGRAM
FILES (X86)\FOXIT SOFTWARE\FOXIT PDF READER\plugins\npFoxitPDFReaderPlugin.dll [2023-08-14]
(FOXIT SOFTWARE INC. -> Foxit Corporation)FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf ->
C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2023-
08-14] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf ->
C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2023-
08-14] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp ->
C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2023-
08-14] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf ->
C:\Program Files (x86)\Foxit Software\Foxit PDF Reader\plugins\npFoxitPDFReaderPlugin.dll [2023-
08-14] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft
Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-10-19] (Microsoft
Corporation -> Microsoft Corporation)
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird
nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 ADExchange; C:\Program Files (x86)\Common Files\ArcSoft\esinter\Bin\eservutil.exe [43112
2012-02-16] (ArcSoft, Inc. -> ArcSoft Inc.)
S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2013-09-25] (Brother Industries,
Ltd.) [Datei ist nicht signiert]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft
Shared\ClickToRun\OfficeClickToRun.exe [9201848 2023-09-27] (Microsoft Corporation -> Microsoft
Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2022-11-08]
(Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2022-11-08]
(Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2023-11-14] (Dropbox, Inc -> Dropbox, Inc.)
R2 DSAService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe [43784
2023-09-25] (Intel Corporation -> Intel)
R3 DSAUpdateService; C:\Program Files (x86)\Intel\Driver and Support
Assistant\DSAUpdateService.exe [240392 2023-09-25] (Intel Corporation -> Intel)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\23.221.1024.0002\FileSyncHelper.exe
[3507104 2023-11-14] (Microsoft Corporation -> Microsoft Corporation)R2 FoxitReaderUpdateService; C:\Program Files (x86)\Common Files\Foxit\Foxit PDF
Reader\FoxitPDFReaderUpdateService.exe [2432608 2023-08-14] (FOXIT SOFTWARE INC. -> Foxit
Software Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9341488 2023-
11-08] (Malwarebytes Inc. -> Malwarebytes)
R2 NativePushService; C:\Users\prokr\AppData\Local\Wondershare\Wondershare
NativePush\WsNativePushService.exe [594320 2023-02-22] (Wondershare Technology Group Co.,Ltd
-> Wondershare)
S3 nordsec-threatprotection-service; C:\Program Files\NordVPN\NordSec ThreatProtection\nordsecthreatprotection-service.exe [320088 2023-09-25] (nordvpn s.a. -> nordvpn S.A.)
R2 NordUpdaterService; C:\Program Files\NordUpdater\NordUpdateService.exe [297848 2023-05-
24] (nordvpn s.a. -> nordvpn S.A.)
R2 nordvpn-service; C:\Program Files\NordVPN\nordvpn-service.exe [263256 2023-09-25] (nordvpn
s.a. -> nordvpn S.A.)
S3 OneDrive Updater Service; C:\Program Files\Microsoft
OneDrive\23.221.1024.0002\OneDriveUpdaterService.exe [3843600 2023-11-14] (Microsoft
Corporation -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-
0\NisSrv.exe [3121008 2023-08-30] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-
0\MsMpEng.exe [133688 2023-08-30] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird
nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [280064 2022-10-19] (Microsoft
Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [147968 2022-10-18] (Microsoft
Corporation) [Datei ist nicht signiert]
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [158640 2023-02-09] (Microsoft
Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2021-06-03]
(Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 HWHandSet; C:\WINDOWS\System32\drivers\hw_quusbmdm.sys [226560 2021-06-03] (Microsoft
Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)S3 hwusb_cdcacm; C:\WINDOWS\System32\drivers\hw_cdcacm.sys [127360 2021-06-03] (Microsoft
Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 hw_usbdev; C:\WINDOWS\System32\drivers\hw_usbdev.sys [116864 2021-06-03] (Microsoft
Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [31032 2019-09-25] (Acer Incorporated -
> Acer Incorporated)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [222800 2023-11-08]
(Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2023-02-09] (Microsoft
Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [200104 2023-11-15] (Microsoft
Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [78400 2023-11-15] (Microsoft
Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239544 2023-02-23]
(Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [188016 2023-11-15]
(Malwarebytes Inc. -> Malwarebytes)
R2 NDivert; C:\Program Files\NordVPN\7.14.10.0\Drivers\NDivert.sys [131472 2023-05-24] (nordvpn
s.a. -> Nordvpn S.A.)
R1 nordlwf; C:\WINDOWS\system32\DRIVERS\nordlwf.sys [42576 2021-06-13] (nordvpn s.a. ->
TEFINCOM S.A.)
S3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [25400 2019-09-25] (Acer
Incorporated -> Acer Incorporated)
R3 rpwkmdrvk; C:\WINDOWS\system32\drivers\rpwkmdrvk.sys [49280 2020-03-23] (深圳雷柏科技
股份有限公司 -> )
S3 RT-USB; C:\WINDOWS\system32\drivers\RT-USB64.SYS [97152 2014-05-12] (Ross-Tech, LLC ->
Ross-Tech LLC)
R3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [49744 2021-06-13] (nordvpn s.a. ->
The OpenVPN Project)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2018-02-05] (Microsoft
Windows Hardware Compatibility Publisher -> Apple, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [55872 2023-08-30] (Microsoft
Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert
wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [574872 2023-08-30] (Microsoft
Windows -> Microsoft Corporation)S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105864 2023-08-30] (Microsoft
Windows -> Microsoft Corporation)
S3 wintun; C:\WINDOWS\System32\drivers\wintun.sys [29592 2022-03-15] (Microsoft Windows
Hardware Compatibility Publisher -> WireGuard LLC)
S3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2023-07-09] (Microsoft
Windows Hardware Compatibility Publisher -> WireGuard LLC)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird
nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2023-11-16 06:26 - 2023-11-16 06:26 - 000030249 _____ C:\Users\prokr\Desktop\FRST.txt
2023-11-16 01:02 - 2023-11-16 01:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start
Menu\Programs\Dropbox
2023-11-15 21:44 - 2023-11-15 21:44 - 004974098 _____
C:\Users\prokr\Downloads\guide_2476_en(1).pdf
2023-11-15 21:35 - 2023-11-15 21:35 - 004974098 _____
C:\Users\prokr\Downloads\guide_2476_en.pdf
2023-11-15 09:24 - 2023-11-15 09:24 - 000188016 _____ (Malwarebytes)
C:\WINDOWS\system32\Drivers\mwac.sys
2023-11-15 09:07 - 2023-11-15 09:07 - 000000000 ____D
C:\Users\prokr\Downloads\setup_v11.45.4.3
2023-11-15 00:00 - 2023-11-15 00:00 - 000000000 ___HD C:\$WinREAgent
2023-11-14 20:44 - 2023-11-14 20:44 - 000000000 ____D
C:\Users\prokr\AppData\Roaming\Globalscape
2023-11-14 20:44 - 2023-11-14 20:44 - 000000000 ____D
C:\Users\prokr\AppData\Local\Globalscape
2023-11-14 20:44 - 2023-11-14 20:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start
Menu\Programs\Globalscape
2023-11-14 20:44 - 2023-11-14 20:44 - 000000000 ____D C:\ProgramData\Globalscape2023-11-14 20:44 - 2023-11-14 20:44 - 000000000 ____D C:\Program Files (x86)\Globalscape
2023-11-14 20:43 - 2023-11-14 20:44 - 020513472 _____ (GlobalSCAPE, Inc. )
C:\Users\prokr\Downloads\cuteftp_9.0.5.exe
2023-11-14 03:06 - 2023-11-14 03:06 - 000046824 _____ (Dropbox, Inc.)
C:\WINDOWS\system32\DbxSvc.exe
2023-11-13 21:00 - 2023-11-13 21:00 - 001743698 _____
C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2023-11-13 21:00 - 2023-11-13 21:00 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start
Menu\Programs\Intel
2023-11-13 21:00 - 2023-11-13 21:00 - 000000000 ____D C:\Users\prokr\Intel
2023-11-13 21:00 - 2023-11-13 21:00 - 000000000 ____D C:\Users\prokr\AppData\Roaming\Intel
Corporation
2023-11-13 20:29 - 2023-11-13 20:30 - 000000000 ___HD C:\Program Files (x86)\Temp
2023-11-13 20:29 - 2023-11-13 20:29 - 000000000 ____D C:\Program Files (x86)\Realtek
2023-11-13 20:29 - 2018-11-12 07:15 - 000965128 _____ (Sony Corporation)
C:\WINDOWS\system32\SFSS_APO.dll
2023-11-13 20:29 - 2018-11-12 07:15 - 000541216 _____ (SRS Labs, Inc.)
C:\WINDOWS\system32\SRSTSX64.dll
2023-11-13 20:29 - 2018-11-12 07:15 - 000232016 _____ (Synopsys, Inc.)
C:\WINDOWS\system32\SFNHK64.dll
2023-11-13 20:29 - 2018-11-12 07:15 - 000230808 _____ (SRS Labs, Inc.)
C:\WINDOWS\system32\SRSTSH64.dll
2023-11-13 20:29 - 2018-11-12 07:15 - 000218376 _____ (SRS Labs, Inc.)
C:\WINDOWS\system32\SRSHP64.dll
2023-11-13 20:29 - 2018-11-12 07:15 - 000175048 _____ (SRS Labs, Inc.)
C:\WINDOWS\system32\SRSWOW64.dll
2023-11-13 20:29 - 2018-11-12 07:15 - 000091040 _____ (Synopsys, Inc.)
C:\WINDOWS\system32\SFCOM64.dll
2023-11-13 20:29 - 2018-11-12 07:15 - 000088424 _____ (Synopsys, Inc.)
C:\WINDOWS\system32\SFAPO64.dll
2023-11-13 20:29 - 2018-11-12 07:15 - 000083728 _____ (Virage Logic Corporation / Sonic Focus)
C:\WINDOWS\SysWOW64\SFCOM.dll
2023-11-13 20:29 - 2018-11-12 07:14 - 007178560 _____ (Dolby Laboratories)
C:\WINDOWS\system32\R4EEP64A.dll
2023-11-13 20:29 - 2018-11-12 07:14 - 003677248 _____ (Realtek Semiconductor Corp.)
C:\WINDOWS\system32\RTSnMg64.cpl
2023-11-13 20:29 - 2018-11-12 07:14 - 003319504 _____ (Realtek Semiconductor Corp.)
C:\WINDOWS\system32\RtkApi64.dll2023-11-13 20:29 - 2018-11-12 07:14 - 003159504 _____ (Realtek Semiconductor Corp.)
C:\WINDOWS\system32\RtPgEx64.dll
2023-11-13 20:29 - 2018-11-12 07:14 - 002930240 _____ (Realtek Semiconductor Corp.)
C:\WINDOWS\system32\RCoInstII64.dll
2023-11-13 20:29 - 2018-11-12 07:14 - 001353408 _____ (Realtek Semiconductor Corp.)
C:\WINDOWS\system32\RTCOM64.dll
2023-11-13 20:29 - 2018-11-12 07:14 - 000692256 _____ (Realtek Semiconductor Corp.)
C:\WINDOWS\system32\RtDataProc64.dll
2023-11-13 20:29 - 2018-11-12 07:14 - 000684464 _____ (Waves Audio Ltd.)
C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
2023-11-13 20:29 - 2018-11-12 07:14 - 000453368 _____ (Dolby Laboratories)
C:\WINDOWS\system32\R4EED64A.dll
2023-11-13 20:29 - 2018-11-12 07:14 - 000392960 _____ (Dolby Laboratories, Inc.)
C:\WINDOWS\system32\RTEEP64A.dll
2023-11-13 20:29 - 2018-11-12 07:14 - 000343800 _____ (Realtek Semiconductor Corp.)
C:\WINDOWS\system32\RtlCPAPI64.dll
2023-11-13 20:29 - 2018-11-12 07:14 - 000327360 _____ (Dolby Laboratories, Inc.)
C:\WINDOWS\system32\RP3DHT64.dll
2023-11-13 20:29 - 2018-11-12 07:14 - 000327360 _____ (Dolby Laboratories, Inc.)
C:\WINDOWS\system32\RP3DAA64.dll
2023-11-13 20:29 - 2018-11-12 07:14 - 000220480 _____ (Dolby Laboratories, Inc.)
C:\WINDOWS\system32\RTEED64A.dll
2023-11-13 20:29 - 2018-11-12 07:14 - 000193072 _____ (Realtek Semiconductor Corp.)
C:\WINDOWS\system32\RtkCfg64.dll
2023-11-13 20:29 - 2018-11-12 07:14 - 000157432 _____ (Dolby Laboratories)
C:\WINDOWS\system32\R4EEL64A.dll
2023-11-13 20:29 - 2018-11-12 07:14 - 000139848 _____ (Dolby Laboratories)
C:\WINDOWS\system32\R4EEA64A.dll
2023-11-13 20:29 - 2018-11-12 07:14 - 000116632 _____ (Dolby Laboratories, Inc.)
C:\WINDOWS\system32\RTEEL64A.dll
2023-11-13 20:29 - 2018-11-12 07:14 - 000093992 _____ (Dolby Laboratories, Inc.)
C:\WINDOWS\system32\RTEEG64A.dll
2023-11-13 20:29 - 2018-11-12 07:14 - 000090264 _____ (Dolby Laboratories)
C:\WINDOWS\system32\R4EEG64A.dll
2023-11-13 20:29 - 2018-11-12 07:13 - 002059688 _____ (Waves Audio Ltd.)
C:\WINDOWS\system32\MaxxAudioEQ64.dll
2023-11-13 20:29 - 2018-11-12 07:13 - 000684976 _____ (Waves Audio Ltd.)
C:\WINDOWS\system32\MaxxAudioAPO30.dll2023-11-13 20:29 - 2018-11-12 07:13 - 000378472 _____ (Dolby Laboratories)
C:\WINDOWS\system32\HiFiDAX2API.dll
2023-11-13 20:29 - 2018-11-12 07:13 - 000338288 _____ (Waves Audio Ltd.)
C:\WINDOWS\system32\MaxxAudioAPO20.dll
2023-11-13 20:29 - 2018-11-12 07:10 - 007101832 _____ (Dolby Laboratories)
C:\WINDOWS\system32\DDPP64A.dll
2023-11-13 20:29 - 2018-11-12 07:10 - 006270280 _____ (Dolby Laboratories)
C:\WINDOWS\system32\DDPP64AF3.dll
2023-11-13 20:29 - 2018-11-12 07:10 - 005347088 _____ (Dolby Laboratories)
C:\WINDOWS\system32\DolbyDAX2APOv211.dll
2023-11-13 20:29 - 2018-11-12 07:10 - 001965248 _____ (Dolby Laboratories)
C:\WINDOWS\system32\DDPD64AF3.dll
2023-11-13 20:29 - 2018-11-12 07:10 - 001788048 _____ (DTS)
C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2023-11-13 20:29 - 2018-11-12 07:10 - 001598488 _____ (DTS)
C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2023-11-13 20:29 - 2018-11-12 07:10 - 001516360 _____ (DTS)
C:\WINDOWS\system32\DTSBoostDLL64.dll
2023-11-13 20:29 - 2018-11-12 07:10 - 001159272 _____ (Dolby Laboratories)
C:\WINDOWS\system32\DolbyDAX2APOProp.dll
2023-11-13 20:29 - 2018-11-12 07:10 - 000751392 _____ (DTS)
C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2023-11-13 20:29 - 2018-11-12 07:10 - 000734864 _____ (DTS)
C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2023-11-13 20:29 - 2018-11-12 07:10 - 000715736 _____ (DTS)
C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2023-11-13 20:29 - 2018-11-12 07:10 - 000511736 _____ (DTS)
C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2023-11-13 20:29 - 2018-11-12 07:10 - 000452824 _____ (DTS)
C:\WINDOWS\system32\DTSLimiterDLL64.dll
2023-11-13 20:29 - 2018-11-12 07:10 - 000448696 _____ (DTS)
C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2023-11-13 20:29 - 2018-11-12 07:10 - 000367704 _____ (Dolby Laboratories)
C:\WINDOWS\system32\DDPO64AF3.dll
2023-11-13 20:29 - 2018-11-12 07:10 - 000316072 _____ (Dolby Laboratories)
C:\WINDOWS\system32\DDPA64F3.dll
2023-11-13 20:29 - 2018-11-12 07:10 - 000261328 _____ (DTS)
C:\WINDOWS\system32\DTSGFXAPO64.dll2023-11-13 20:29 - 2018-11-12 07:10 - 000261288 _____ (DTS)
C:\WINDOWS\system32\DTSLFXAPO64.dll
2023-11-13 20:29 - 2018-11-12 07:10 - 000260304 _____ (DTS)
C:\WINDOWS\system32\DTSGFXAPONS64.dll
2023-11-13 20:29 - 2018-11-12 07:10 - 000122408 _____ (Real Sound Lab SIA)
C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2023-11-13 20:29 - 2018-11-12 07:06 - 002856800 _____ (Realtek Semiconductor Corp.)
C:\WINDOWS\RtlExUpd.dll
2023-11-13 20:28 - 2023-11-14 21:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start
Menu\Programs\Driver Genius
2023-11-13 20:28 - 2023-11-13 20:29 - 000000000 ____D C:\ProgramData\DriverGenius
2023-11-13 20:28 - 2023-11-13 20:28 - 000000000 ____D
C:\Users\prokr\AppData\Roaming\Avanquest Software
2023-11-13 20:28 - 2023-11-13 20:28 - 000000000 ____D C:\Users\prokr\AppData\Local\Avanquest
2023-11-13 20:28 - 2023-11-13 20:28 - 000000000 ____D C:\Program Files (x86)\Driver-Soft
2023-11-13 09:05 - 2023-11-13 09:05 - 000000306 __RSH C:\ProgramData\ntuser.pol
2023-11-13 09:02 - 2023-11-13 09:02 - 000000000 ____D C:\Users\prokr\AppData\Local\Rufus
2023-11-12 23:34 - 2023-11-12 23:34 - 001431624 _____ (Akeo Consulting)
C:\Users\prokr\Downloads\rufus-4.3.exe
2023-11-05 19:04 - 2023-11-05 19:04 - 000054051 _____
C:\Users\prokr\Downloads\Berufsbild_BVP_Produktionskoordinatorin.pdf
2023-11-03 21:52 - 2023-11-03 21:52 - 000058802 _____
C:\Users\prokr\Downloads\Berufsbild_BVL_Locationscout.pdf
2023-11-03 07:32 - 2023-11-03 07:32 - 000003670 _____
C:\WINDOWS\system32\Tasks\USER_ESRV_SVC_QUEENCREEK
2023-11-03 07:32 - 2023-09-25 17:59 - 000047240 _____
C:\WINDOWS\system32\Drivers\semav6msr64.sys
2023-10-30 20:15 - 2023-10-30 20:15 - 000000000 ____D
C:\Users\prokr\Downloads\Application_Acer_1.02.3502_W7x86W7x64_A
2023-10-28 19:36 - 2023-10-28 20:26 - 000225807 _____ C:\Users\prokr\Downloads\cf_29.pdf
2023-10-28 10:14 - 2023-10-28 10:14 - 002116160 _____ (Power Software Ltd)
C:\Users\prokr\Downloads\anyburn_setup_x64.exe
2023-10-28 10:14 - 2023-10-28 10:14 - 000000843 _____ C:\Users\Public\Desktop\AnyBurn.lnk
2023-10-28 10:14 - 2023-10-28 10:14 - 000000000 ____D C:\Users\prokr\AppData\Roaming\anyburn
2023-10-28 10:14 - 2023-10-28 10:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start
Menu\Programs\AnyBurn
2023-10-28 10:14 - 2023-10-28 10:14 - 000000000 ____D C:\Program Files\AnyBurn2023-10-25 19:21 - 2023-10-25 19:21 - 000008705 _____ C:\Users\prokr\Desktop\Scout-231025.kml
2023-10-25 19:18 - 2023-10-25 19:26 - 000001623 _____ C:\Users\prokr\Desktop\Scout-231025.kmz
2023-10-24 10:37 - 2023-10-24 10:37 - 000000701 _____
C:\Users\prokr\Desktop\recoverit_setup_full4153.exe.lnk
2023-10-23 07:00 - 2023-10-16 17:39 - 000000000 ____D C:\Users\prokr\Downloads\Volvo VIDA
2014D
2023-10-23 06:56 - 2023-10-23 06:59 - 1349731777 _____ C:\Users\prokr\Downloads\Volvo VIDA
2014D.rar
2023-10-22 13:09 - 2023-10-22 13:09 - 002055299 _____
C:\Users\prokr\Downloads\iCarsoft_MSDIAG_PCClientKits(1).zip
2023-10-19 17:13 - 2023-10-19 17:13 - 000000000 ____D C:\Users\prokr\Documents\MEGA
Downloads
2023-10-19 16:59 - 2023-10-19 16:59 - 000000000 ____D C:\Users\prokr\Downloads\2014A-B-D-
2099
2023-10-19 16:59 - 2018-01-02 16:27 - 000000000 ____D C:\VIDA
2023-10-19 16:23 - 2023-10-19 18:44 - 000000000 ____D C:\WINDOWS\system32\Tasks\MEGA
2023-10-19 16:23 - 2023-10-19 16:23 - 000000000 ____D C:\Users\prokr\AppData\Local\Mega
Limited
2023-10-19 16:20 - 2023-10-19 16:20 - 055814688 _____ (MEGA Limited)
C:\Users\prokr\Downloads\MEGAsyncSetup64.exe
2023-10-19 16:20 - 2023-10-19 16:20 - 000000000 ____D C:\Users\prokr\AppData\Local\MEGAsync
2023-10-19 12:03 - 2023-10-19 17:06 - 001315230 _____
C:\Users\prokr\Downloads\A1zEzyM6eGL.pdf
2023-10-19 11:59 - 2023-10-19 17:06 - 000701082 _____
C:\Users\prokr\Downloads\OM0273_Zuordnungsliste_OM0273_OM0287.pdf
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2023-11-16 06:26 - 2023-02-09 14:34 - 000000000 ____D C:\FRST
2023-11-16 06:25 - 2023-02-12 10:25 - 000000000 ____D C:\Users\prokr\Desktop\FRSTOlderVersion
2023-11-16 06:25 - 2023-02-09 14:33 - 002383872 _____ (Farbar)
C:\Users\prokr\Desktop\FRST64.exe
2023-11-16 06:25 - 2022-10-18 21:29 - 000000000 ____D C:\WINDOWS\system32\SleepStudy2023-11-16 05:50 - 2022-10-20 22:33 - 000000000 ____D C:\Program Files (x86)\Google
2023-11-16 05:50 - 2022-10-18 21:43 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-11-16 04:49 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-
06.com.microsoft
2023-11-16 01:15 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-11-16 01:03 - 2022-11-08 19:06 - 000000000 ____D
C:\Users\prokr\AppData\Roaming\Dropbox
2023-11-16 01:03 - 2022-11-08 19:06 - 000000000 ____D C:\Users\prokr\AppData\Local\Dropbox
2023-11-16 01:03 - 2022-11-08 19:06 - 000000000 ____D C:\Program Files (x86)\Dropbox
2023-11-16 01:02 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-11-15 22:38 - 2023-04-19 07:22 - 000001384 _____
C:\Users\prokr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online
Scanner.lnk
2023-11-15 22:37 - 2023-04-19 07:22 - 000001278 _____ C:\Users\prokr\Desktop\ESET Online
Scanner.lnk
2023-11-15 22:34 - 2023-05-14 10:24 - 000000000 ____D
C:\Users\prokr\AppData\Local\Malwarebytes
2023-11-15 22:33 - 2022-10-19 10:50 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-
4177-a864-e594e8d1fb38
2023-11-15 09:28 - 2022-10-18 21:37 - 001716528 _____
C:\WINDOWS\system32\PerfStringBackup.INI
2023-11-15 09:28 - 2019-12-07 15:50 - 000741712 _____ C:\WINDOWS\system32\perfh007.dat
2023-11-15 09:28 - 2019-12-07 15:50 - 000149806 _____ C:\WINDOWS\system32\perfc007.dat
2023-11-15 09:28 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2023-11-15 09:25 - 2023-09-19 16:24 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-
491A-97AE-5C4B05D86E01}.bat
2023-11-15 09:25 - 2022-10-19 10:26 - 000000000 __SHD C:\Users\prokr\IntelGraphicsProfiles
2023-11-15 09:25 - 2022-10-18 21:30 - 000000000 ____D C:\ProgramData\NVIDIA
2023-11-15 09:24 - 2022-10-18 21:29 - 000008192 ___SH C:\DumpStack.log.tmp
2023-11-15 09:24 - 2022-10-18 21:29 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-11-15 09:23 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2023-11-15 09:23 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2023-11-15 09:23 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-11-15 09:23 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-11-15 09:23 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns2023-11-15 09:23 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-11-15 09:23 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2023-11-15 09:23 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2023-11-15 09:23 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2023-11-15 09:23 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-11-15 09:23 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2023-11-15 00:08 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-11-15 00:05 - 2022-10-18 21:30 - 003016192 _____ (Microsoft Corporation)
C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-11-15 00:00 - 2022-10-19 10:32 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-11-14 23:57 - 2022-10-19 10:32 - 182871392 ____C (Microsoft Corporation)
C:\WINDOWS\system32\MRT.exe
2023-11-14 23:45 - 2022-10-20 22:33 - 000004014 _____
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{2974A8B6-D26E-4B2F-A6AFD16BDC839338}
2023-11-14 23:45 - 2022-10-20 22:33 - 000003890 _____
C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{7F013C53-8694-443F-94C8-
3B1A8605EF83}
2023-11-14 23:22 - 2022-10-22 07:48 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2023-11-14 22:03 - 2023-03-08 11:58 - 000000000 ____D C:\1-PROJEKTE-2023
2023-11-14 22:03 - 2023-02-11 14:55 - 000000000 ____D C:\AdwCleaner
2023-11-14 22:03 - 2023-01-19 08:39 - 000000000 ____D C:\Users\Administrator
2023-11-14 22:03 - 2022-11-08 19:09 - 000000000 ___RD C:\Users\prokr\Dropbox
2023-11-14 22:03 - 2022-10-19 10:26 - 000000000 ___RD C:\Users\prokr\3D Objects
2023-11-14 22:03 - 2022-10-19 10:22 - 000000000 ____D C:\Users\prokr
2023-11-14 20:44 - 2022-10-19 22:50 - 000000000 ___HD C:\Program Files (x86)\InstallShield
Installation Information
2023-11-14 20:00 - 2022-10-19 22:21 - 000000000 ____D
C:\Users\prokr\AppData\Roaming\Microsoft\Word
2023-11-14 11:34 - 2023-01-19 08:41 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive
Reporting Task-S-1-5-21-406362002-2203256304-1339820604-500
2023-11-14 11:34 - 2022-10-19 22:20 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive
Per-Machine Standalone Update Task
2023-11-14 11:34 - 2022-10-19 22:20 - 000002154 _____ C:\ProgramData\Microsoft\Windows\Start
Menu\Programs\OneDrive.lnk2023-11-14 11:34 - 2022-10-19 10:28 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive
Reporting Task-S-1-5-21-406362002-2203256304-1339820604-1001
2023-11-13 21:00 - 2022-10-19 12:35 - 000000000 ____D C:\Program Files (x86)\Intel
2023-11-13 21:00 - 2022-10-19 11:15 - 000000000 ____D C:\ProgramData\Package Cache
2023-11-13 21:00 - 2022-10-18 21:30 - 000000000 ____D C:\Program Files\Intel
2023-11-13 20:30 - 2022-10-18 21:30 - 002033568 _____
C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2023-11-13 20:30 - 2022-10-18 21:30 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2023-11-13 20:30 - 2022-10-18 21:30 - 000000000 ____D C:\WINDOWS\system32\DAX2
2023-11-13 19:59 - 2022-10-20 22:56 - 000000000 ____D
C:\Users\prokr\AppData\Roaming\Microsoft\Teams
2023-11-13 19:43 - 2022-10-19 10:22 - 000000000 ___SD
C:\Users\prokr\AppData\Roaming\Microsoft\Credentials
2023-11-13 11:41 - 2022-10-19 10:26 - 000000000 __RHD C:\Users\Public\AccountPictures
2023-11-13 09:36 - 2022-10-20 22:56 - 000000000 ____D
C:\Users\prokr\AppData\Local\SquirrelTemp
2023-11-12 23:34 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2023-11-12 17:50 - 2023-04-19 07:29 - 000003858 _____ C:\WINDOWS\system32\Tasks\EOSv3
Scheduler onLogOn
2023-11-12 17:50 - 2023-04-19 07:29 - 000003416 _____ C:\WINDOWS\system32\Tasks\EOSv3
Scheduler onTime
2023-11-11 18:36 - 2022-10-18 21:29 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start
Menu\Programs\Microsoft Edge.lnk
2023-11-11 10:34 - 2023-04-19 08:02 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2023-11-11 10:34 - 2023-02-28 17:45 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-11-11 10:33 - 2023-08-31 18:20 - 000000000 ____D C:\Users\prokr\AppData\Roaming\discord
2023-11-11 10:17 - 2023-02-09 13:19 - 000000000 ____D
C:\Users\prokr\AppData\Local\CrashDumps
2023-11-11 10:17 - 2022-10-19 10:26 - 000000000 ____D C:\Users\prokr\AppData\Local\Packages
2023-11-10 17:02 - 2023-07-09 08:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start
Menu\Programs\NordSec
2023-11-10 17:02 - 2023-07-09 08:37 - 000000000 ____D C:\Program Files\NordVPN
2023-11-10 09:47 - 2023-04-19 08:02 - 000001061 _____ C:\ProgramData\Microsoft\Windows\Start
Menu\Programs\Thunderbird.lnk
2023-11-08 09:56 - 2022-10-19 10:50 - 000001011 _____ C:\ProgramData\Microsoft\Windows\Start
Menu\Programs\Firefox.lnk2023-11-03 12:14 - 2022-10-19 13:02 - 000003834 _____ C:\WINDOWS\system32\Tasks\IUMF1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2023-11-03 09:24 - 2022-10-19 10:34 - 000000000 ____D C:\Program Files\Microsoft Update Health
Tools
2023-11-03 07:32 - 2022-10-19 12:35 - 000003762 _____ C:\WINDOWS\system32\Tasks\IntelSURQCUpgrade-86621605-2a0b-4128-8ffc-15514c247132
2023-11-03 07:32 - 2022-10-19 12:35 - 000003528 _____ C:\WINDOWS\system32\Tasks\IntelSURQCUpgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon
2023-11-03 07:29 - 2023-08-31 18:20 - 000000000 ____D C:\Users\prokr\AppData\Local\Discord
2023-10-31 07:15 - 2023-08-31 18:20 - 000002233 _____ C:\Users\prokr\Desktop\Discord.lnk
2023-10-28 08:31 - 2022-10-18 21:29 - 000003754 _____
C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-10-28 08:31 - 2022-10-18 21:29 - 000003630 _____
C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-10-27 07:22 - 2022-10-18 21:29 - 000446704 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-10-27 07:21 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2023-10-27 07:21 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files (x86)\Windows Photo
Viewer
2023-10-27 07:21 - 2019-12-07 15:50 - 000000000 ____D C:\WINDOWS\SysWOW64\de
2023-10-27 07:21 - 2019-12-07 15:50 - 000000000 ____D C:\WINDOWS\system32\de
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\F12
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D
C:\WINDOWS\SysWOW64\PerceptionSimulation
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D
C:\WINDOWS\SysWOW64\AdvancedInstallers
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D
C:\WINDOWS\system32\SystemResetPlatform
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D
C:\WINDOWS\system32\PerceptionSimulation
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Com
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D
C:\WINDOWS\system32\AdvancedInstallers
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\IME
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows Defender
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\System
2023-10-27 07:21 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2023-10-27 07:21 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2023-10-27 07:19 - 2019-12-07 15:54 - 000023552 _____ (Microsoft Corporation)
C:\WINDOWS\system32\OEMDefaultAssociations.dll
2023-10-27 07:19 - 2019-12-07 10:15 - 000208384 _____ (Microsoft Corporation)
C:\WINDOWS\SysWOW64\msclmd.dll
2023-10-27 07:19 - 2019-12-07 10:14 - 000232448 _____ (Microsoft Corporation)
C:\WINDOWS\system32\msclmd.dll
2023-10-26 09:34 - 2022-11-25 13:13 - 000000000 ____D
C:\Users\prokr\AppData\Roaming\Microsoft\Excel2023-10-25 21:30 - 2023-09-11 09:53 - 000000000 ____D C:\Users\prokr\Downloads\Telegram
Desktop
2023-10-25 21:21 - 2022-11-09 22:04 - 000000000 ____D
C:\Users\prokr\AppData\Roaming\Telegram Desktop
2023-10-24 10:38 - 2023-02-25 18:32 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2023-10-24 10:22 - 2023-07-09 08:37 - 000000000 ____D C:\Users\prokr\AppData\Local\NordVPN
2023-10-24 10:21 - 2023-07-09 08:37 - 000001782 _____ C:\Users\prokr\Desktop\NordVPN.lnk
2023-10-18 11:41 - 2022-10-19 22:18 - 000000000 ____D C:\Program Files\Microsoft Office
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2023-01-26 13:02 - 2023-01-26 13:02 - 000007601 _____ ()
C:\Users\prokr\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 05-11-2023
02
durchgeführt von prokr (16-11-2023 06:28:13)
Gestartet von C:\Users\prokr\Desktop
Microsoft Windows 10 Home Version 22H2 19045.3693 (X64) (2022-10-18 20:33:05)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)Administrator (S-1-5-21-406362002-2203256304-1339820604-500 - Administrator - Enabled) =>
C:\Users\Administrator
DefaultAccount (S-1-5-21-406362002-2203256304-1339820604-503 - Limited - Disabled)
Gast (S-1-5-21-406362002-2203256304-1339820604-501 - Limited - Disabled)
prokr (S-1-5-21-406362002-2203256304-1339820604-1001 - Administrator - Enabled) =>
C:\Users\prokr
WDAGUtilityAccount (S-1-5-21-406362002-2203256304-1339820604-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Malwarebytes (Enabled - Up to date) {0D452135-A081-B000-D6B6-132E52638543}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um
sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7-Zip 22.01 (x64) (HKLM\...\7-Zip) (Version: 22.01 - Igor Pavlov)
ACDSee Photo Studio Professional 2023 (HKLM\...\{6A0B2F1A-B97C-46AF-82B1-E7D9CD6CF0B5})
(Version: 16.0.3.2344 - ACD Systems International Inc.)
ACDSee Photo Studio Ultimate 2021 (HKLM\...\{47BF289E-CAC7-4F23-9B16-DEAF0FD4BE3A})
(Version: 14.0.1.2451 - ACD Systems International Inc.)
AnyBurn (HKLM-x32\...\AnyBurn) (Version: 5.9 - Power Software Ltd)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version:
2.3.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version:
2.2.0.150 - Apple Inc.)
ArcSoft Panorama Maker 6 (HKLM-x32\...\{8A7D0970-C0A4-4B56-94D4-E3A175AB45BB}) (Version:
6.0.0.94 - ArcSoft)
Audacity 3.0.0 (HKLM-x32\...\Audacity_is1) (Version: 3.0.0 - Audacity Team)Avanquest Message (HKU\S-1-5-21-406362002-2203256304-1339820604-1001\...\{20573C69-4A68-
4BEF-A23D-365CB66924CE}) (Version: 2.15.0 - Avanquest Software)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Brother MFL-Pro Suite MFC-J5320DW (HKLM-x32\...\{7FC49664-DAA4-4E7C-ADD0-614ABB43691B})
(Version: 1.0.5.0 - Brother Industries, Ltd.)
CrystalDiskInfo 8.17.13 (HKLM\...\CrystalDiskInfo_is1) (Version: 8.17.13 - Crystal Dew World)
CuteFTP 9 (HKLM-x32\...\{89B9E358-75C6-4C6B-BD38-803FF156CC4B}) (Version: 9.0.5 - Globalscape)
Discord (HKU\S-1-5-21-406362002-2203256304-1339820604-1001\...\Discord) (Version: 1.0.9016 -
Discord Inc.)
Documentation Manager (HKLM\...\{5C67CECE-B908-4BCF-B585-8C170B817C1D}) (Version:
22.240.0.6 - Intel Corporation) Hidden
Driver Genius (HKLM-x32\...\Driver Genius_is1) (Version: 15.0 - Driver-Soft Inc.)
Dropbox (HKLM-x32\...\Dropbox) (Version: 187.4.5691 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version:
1.3.817.1 - Dropbox, Inc.) Hidden
Foxit PDF Reader (HKLM-x32\...\{58919E0A-3B2E-11EE-AA33-54BF64A63C26}) (Version:
2023.2.0.21408 - Foxit Software Inc.)
Google Earth Pro (HKLM\...\{F27DBA46-80E1-4858-9285-19198FFFBF3D}) (Version: 7.3.6.9345 -
Google)
HotKeyBind 1.2 (HKLM-x32\...\HotKeyBind_is1) (Version: 1.2 - Marco Barisione)
iCarsoft_MSDIAG_PCClientKits (HKLM-x32\...\{C108F6F0-9B39-4BD7-8FF8-54EB0452A81F}) (Version:
3.32.000 - iCarsoft)
Intel Driver && Support Assistant (HKLM-x32\...\{63B67EA4-4AE1-4A45-A67D-21318B4345EF})
(Version: 23.4.39.9 - Intel) Hidden
Intel(R) Chipset Device Software (HKLM\...\{CF205EE1-92CD-4701-B7B5-6D9054EC2B1A}) (Version:
10.1.17833.8098 - Intel Corporation) Hidden
Intel(R) Computing Improvement Program (HKLM\...\{663AD3E8-E97D-4559-A61F-24BEF338F859})
(Version: 2.4.10611 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{2BEABA68-151F-44B1-A685-EE519A3118E6}) (Version:
14.8.18.1066 - Intel Corporation) Hidden
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version:
14.8.18.1066 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000250-0220-1031-84C8-B8D95FA3C8C3}) (Version:
22.250.0.2 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{9b79e14e-9943-4fdc-9645-4860d19d9a12}) (Version:
10.1.17833.8098 - Intel(R) Corporation) HiddenIntel® Driver & Support Assistant (HKLM-x32\...\{ecbee3cf-26b3-4f27-854c-e2e16b3f7fa9}) (Version:
23.4.39.9 - Intel)
Intel® Software Installer (HKLM-x32\...\{318c42c7-b0bf-4429-b733-753440cb751f}) (Version:
22.240.0.6 - Intel Corporation) Hidden
LockHunter 3.4, 32/64 bit (HKLM\...\LockHunter_is1) (Version: 3.4.3.146 - Crystal Rich Ltd)
LoiLoScope 2 (HKLM-x32\...\{CAB75FFC-2377-4B95-A8FA-C9234B812A92}_is1) (Version: 2.5.5.0 -
LoiLo inc)
Malwarebytes version 4.6.5.293 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1)
(Version: 4.6.5.293 - Malwarebytes)
Microsoft .NET Core Host - 3.1.28 (x64) (HKLM\...\{26ECE92F-518E-40AF-9108-7B7B444A46DE})
(Version: 24.112.31513 - Microsoft Corporation) Hidden
Microsoft .NET Core Host FX Resolver - 3.1.28 (x64) (HKLM\...\{CDEA72F4-1367-4E0A-AC5F-
0EBAF7C6825A}) (Version: 24.112.31513 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.28 (x64) (HKLM\...\{3691148D-EF42-4812-8956-AE11FC413B8D})
(Version: 24.112.31513 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.28 (x64) (HKLM-x32\...\{231e3b76-4d0f-4e60-9d69-
f11c9c448630}) (Version: 3.1.28.31513 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 119.0.2151.58 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 119.0.2151.58
- Microsoft Corporation)
Microsoft Office LTSC Standard 2021 - de-de (HKLM\...\Standard2021Volume - de-de) (Version:
16.0.14332.20582 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 23.221.1024.0002 - Microsoft
Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version:
3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-
1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-
6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-
8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.32.31332 (HKLM-x32\...\{3746f21b-c990-
4045-bb33-1cf98cff7a68}) (Version: 14.32.31332.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.32.31332 (HKLM-x32\...\{a98dc6ff-d360-
4878-9f0a-915eba86eaf3}) (Version: 14.32.31332.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.32.31332 (HKLM\...\{F4499EE3-A166-496C-
81BB-51D1BCDC70A9}) (Version: 14.32.31332 - Microsoft Corporation) HiddenMicrosoft Visual C++ 2022 X64 Minimum Runtime - 14.32.31332 (HKLM\...\{3407B900-37F5-4CC2-
B612-5CD5D580A163}) (Version: 14.32.31332 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.32.31332 (HKLM-x32\...\{8972AC25-452E-
4FFE-945A-EB9E28C20322}) (Version: 14.32.31332 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.32.31332 (HKLM-x32\...\{AEAA18F7-9C96-
4A43-BC07-8B88A4913EEB}) (Version: 14.32.31332 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 119.0.1 (x64 de)) (Version: 119.0.1 - Mozilla)
Mozilla Thunderbird (x64 de) (HKLM\...\Mozilla Thunderbird 115.4.2 (x64 de)) (Version: 115.4.2 -
Mozilla)
NordUpdater (HKLM\...\{6E35DB82-3D19-4DD6-B8CB-F082815FDE18}_is1) (Version: 1.4.0.132 - Nord
Security)
NordVPN (HKLM\...\{19465C24-3D5D-4327-B99F-3CC0A1D38151}_is1) (Version: 7.14.10.0 - Nord
Security)
NordVPN network TAP (HKLM-x32\...\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}) (Version: 1.0.1 -
NordVPN)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.5.3 - Notepad++ Team)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-
0000000FF1CE}) (Version: 16.0.14332.20582 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE})
(Version: 16.0.14332.20582 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-
0000000FF1CE}) (Version: 16.0.14332.20546 - Microsoft Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 -
Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC})
(Version: 6.0.1.8569 - Realtek Semiconductor Corp.)
Telegram Desktop (HKU\S-1-5-21-406362002-2203256304-1339820604-1001\...\{53F49750-6209-
4FBF-9CA8-7A333C87D1ED}_is1) (Version: 4.10.2 - Telegram FZ-LLC)
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{7B63012A-4AC6-40C6-B6AFB24A84359DD5}) (Version: 8.93.0.0 - Microsoft Corporation)
VCDS DRV 23.3 (HKLM-x32\...\VCDS DRV) (Version: DRV 23.3.1 - Ross-Tech, LLC)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.18 - VideoLAN)
Windows-PC-Integritätsprüfung (HKLM\...\{4254C1AD-B9B0-4020-A4B1-D8B61D12142A}) (Version:
3.7.2204.15001 - Microsoft Corporation)
Wondershare NativePush(Build 1.0.0.7) (HKU\S-1-5-21-406362002-2203256304-1339820604-
1001\...\Wondershare NativePush_is1) (Version: - )
Wondershare Recoverit(Build 12.0.12.7) (HKLM-x32\...\{829555DC-31E5-4FEA-B350-
8FCF24CECD95}_is1) (Version: 12.0.12.7 - Wondershare Software Co.,Ltd.)Packages:
=========
Always on Top -> C:\Program
Files\WindowsApps\22164ayamadori.AlwaysonTop_2.0.0.0_x64__rtpjcevvdcnva [2023-09-01]
(ayamadori)
Dropbox -> C:\Program Files (x86)\Dropbox\Client\PackageAssets [2023-11-16] (Dropbox Inc.)
Media Engine-Add-On für Fotos -> C:\Program
Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2023-01-
26] (Microsoft Corporation)
Solitaire & Casual Games -> C:\Program
Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.18.11020.0_x64__8wekyb3d8bbwe
[2023-11-05] (Microsoft Studios) [MS Ad]
Spotify Music -> C:\Program
Files\WindowsApps\SpotifyAB.SpotifyMusic_1.224.756.0_x64__zpdnekdrzrea0 [2023-11-11] (Spotify
AB) [Startup Task]
WhatsApp -> C:\Program
Files\WindowsApps\5319275A.WhatsAppDesktop_2.2344.5.0_x64__cv1g1gvanyjgm [2023-11-09]
(WhatsApp Inc.) [Startup Task]
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird
nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-406362002-2203256304-1339820604-1001_Classes\CLSID\{14100442-
9664-1407-2647-000000000000}\localserver32 ->
C:\Users\prokr\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe
(Wondershare Technology Group Co.,Ltd -> Wondershare)
CustomCLSID: HKU\S-1-5-21-406362002-2203256304-1339820604-1001_Classes\CLSID\{4e6f7264-
5650-4e00-0000-000000000000}\localserver32 -> C:\Program Files\NordVPN\NordVPN.exe (nordvpn
s.a. -> nordvpn S.A.)
CustomCLSID: HKU\S-1-5-21-406362002-2203256304-1339820604-1001_Classes\CLSID\{9d3fd14a-
0a33-41cb-9f3f-4a732242408b}\InprocServer32 -> C:\Program Files\Mozilla
Thunderbird\notificationserver.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-406362002-2203256304-1339820604-1001_Classes\CLSID\{d1b22d3d-
8585-53a6-acb3-0e803c7e8d2a}\localserver32 ->
"C:\Users\prokr\AppData\Local\Microsoft\Teams\current\Teams.exe" --toast => Keine DateiCustomCLSID: HKU\S-1-5-21-406362002-2203256304-1339820604-1001_Classes\CLSID\{E31EA727-
12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\prokr\Dropbox [2022-11-08 19:09]
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>
C:\ProgramData\MEGAsync\ShellExtX64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>
C:\ProgramData\MEGAsync\ShellExtX64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>
C:\ProgramData\MEGAsync\ShellExtX64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} =>
C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} =>
C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} =>
C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} =>
C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} =>
C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} =>
C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} =>
C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} =>
C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} =>
C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} =>
C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B}
=> C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} =>
C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} =>
C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B}
=> C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B}
=> C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B}
=> C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B}
=> C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} =>
C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} =>
C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} =>
C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} =>
C:\Program Files\Microsoft OneDrive\23.221.1024.0002\FileSyncShell64.dll [2023-11-14] (Microsoft
Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program
Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [CuteShellExt] -> {A09315EC-39D3-4ED3-B6A1-262DDC54A3C5} =>
C:\Program Files (x86)\Globalscape\CuteFTP\CuteShell64.dll [2013-06-25] (GlobalSCAPE, Inc.) [Datei
ist nicht signiert]
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} =>
C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ContextMenuHandlers1: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} =>
C:\Program Files\LockHunter\LHShellExt64.dll [2021-06-24] (Crystal Rich Ltd -> Crystal Rich Ltd)ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>
C:\ProgramData\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers1: [PicaViewCtxMenuShlExt] -> {F3CBBA61-EE3F-4D6D-B1C6-B3474E579936}
=> C:\Program Files\Common Files\ACD Systems\PicaView\ACDSeePV.dll [2022-08-31] (ACD Systems
International Inc. -> ACD Systems International Inc.)
ContextMenuHandlers2: [CuteShellExt] -> {A09315EC-39D3-4ED3-B6A1-262DDC54A3C5} =>
C:\Program Files (x86)\Globalscape\CuteFTP\CuteShell64.dll [2013-06-25] (GlobalSCAPE, Inc.) [Datei
ist nicht signiert]
ContextMenuHandlers2: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} =>
C:\Program Files\LockHunter\LHShellExt64.dll [2021-06-24] (Crystal Rich Ltd -> Crystal Rich Ltd)
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>
C:\ProgramData\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} =>
C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-03-06] (Malwarebytes Inc. ->
Malwarebytes)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>
C:\ProgramData\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} =>
C:\Program Files\Microsoft OneDrive\23.221.1024.0002\FileSyncShell64.dll [2023-11-14] (Microsoft
Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program
Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers4: [CuteShellExt] -> {A09315EC-39D3-4ED3-B6A1-262DDC54A3C5} =>
C:\Program Files (x86)\Globalscape\CuteFTP\CuteShell64.dll [2013-06-25] (GlobalSCAPE, Inc.) [Datei
ist nicht signiert]
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} =>
C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ContextMenuHandlers4: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} =>
C:\Program Files\LockHunter\LHShellExt64.dll [2021-06-24] (Crystal Rich Ltd -> Crystal Rich Ltd)
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>
C:\ProgramData\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} =>
C:\Program Files\Microsoft OneDrive\23.221.1024.0002\FileSyncShell64.dll [2023-11-14] (Microsoft
Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} =>
C:\Program Files (x86)\Dropbox\Client\DropboxExt64.67.0.dll [2023-10-17] (Dropbox, Inc ->
Dropbox, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Keine DateiContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} =>
C:\WINDOWS\system32\igfxDTCM.dll [2016-12-19] (Microsoft Windows Hardware Compatibility
Publisher -> Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} =>
C:\WINDOWS\system32\nvshext.dll [2020-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program
Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} =>
C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-03-06] (Malwarebytes Inc. ->
Malwarebytes)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
==================== Verknüpfungen & WMI ========================
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
2022-11-30 12:20 - 2005-04-22 05:36 - 000143360 _____ () [Datei ist nicht signiert]
C:\WINDOWS\system32\BrSNMP64.dll
2012-05-03 09:47 - 2012-05-03 09:47 - 001681408 _____ (/n software inc. - www.nsoftware.com)
[Datei ist nicht signiert] C:\Program Files\ACD Systems\ACDSee Pro\16.0\ipworksssl8.dll
2012-05-03 09:47 - 2012-05-03 09:47 - 001681408 _____ (/n software inc. - www.nsoftware.com)
[Datei ist nicht signiert] C:\Program Files\ACD Systems\ACDSee Ultimate\14.0\ipworksssl8.dll
2022-11-30 12:20 - 2013-03-08 07:44 - 000087040 _____ (Brother Industries, Ltd.) [Datei ist nicht
signiert] C:\WINDOWS\system32\BrNetSti.dll
2023-09-25 17:59 - 2023-09-25 17:59 - 001600512 _____ (Robert Simpson, et al.) [Datei ist nicht
signiert] C:\Program Files\Intel\SUR\QUEENCREEK\x64\SQLite.Interop.dll
2023-09-25 17:59 - 2023-09-25 17:59 - 002889728 _____ (SQLite Development Team) [Datei ist nicht
signiert] C:\Program Files\Intel\SUR\QUEENCREEK\x64\sqlite3.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\prokr\Desktop\2023-09-28 18.16.09.jpg:com.dropbox.attrs [54]
AlternateDataStreams: C:\Users\prokr\Desktop\2023-09-28 18.16.09.jpg:com.dropbox.internal [232]AlternateDataStreams: C:\Users\prokr\Desktop\2023-09-28 18.16.13.jpg:com.dropbox.attrs [54]
AlternateDataStreams: C:\Users\prokr\Desktop\2023-09-28 18.16.13.jpg:com.dropbox.internal [232]
AlternateDataStreams: C:\Users\prokr\Desktop\2023-09-28 18.16.32.jpg:com.dropbox.attrs [52]
AlternateDataStreams: C:\Users\prokr\Desktop\2023-09-28 18.16.32.jpg:com.dropbox.internal [232]
AlternateDataStreams: C:\Users\prokr\Desktop\2023-09-28 18.16.45.jpg:com.dropbox.attrs [54]
AlternateDataStreams: C:\Users\prokr\Desktop\2023-09-28 18.16.45.jpg:com.dropbox.internal [232]
AlternateDataStreams: C:\Users\prokr\Downloads\9000300601_B.pdf:shield [132]
AlternateDataStreams: C:\Users\prokr\Downloads\9000521334_L(1).pdf:shield [135]
AlternateDataStreams: C:\Users\prokr\Downloads\9000521334_L.pdf:shield [132]
AlternateDataStreams: C:\Users\prokr\Downloads\A1zEzyM6eGL.pdf:shield [126]
AlternateDataStreams: C:\Users\prokr\Downloads\acdseepro.exe:MBAM.Zone.Identifier [123]
AlternateDataStreams: C:\Users\prokr\Downloads\anyburn_setup_x64.exe:MBAM.Zone.Identifier
[131]
AlternateDataStreams: C:\Users\prokr\Downloads\cf_29.pdf:shield [111]
AlternateDataStreams: C:\Users\prokr\Downloads\cuteftp_9.0.5.exe:MBAM.Zone.Identifier [210]
AlternateDataStreams: C:\Users\prokr\Downloads\iCarsoft_MSDIAG_PCClientKits(1).zip:shield [169]
AlternateDataStreams: C:\Users\prokr\Downloads\lockhuntersetup_3-4-
3.exe:MBAM.Zone.Identifier [95]
AlternateDataStreams: C:\Users\prokr\Downloads\MEGAsyncSetup64.exe:MBAM.Zone.Identifier
[71]
AlternateDataStreams: C:\Users\prokr\Downloads\MSTeamsSetup_c_l_.exe:MBAM.Zone.Identifier
[328]
AlternateDataStreams:
C:\Users\prokr\Downloads\OM0273_Zuordnungsliste_OM0273_OM0287.pdf:shield [180]
AlternateDataStreams: C:\Users\prokr\Downloads\rufus-4.3.exe:MBAM.Zone.Identifier [609]
AlternateDataStreams: C:\Users\prokr\Downloads\Volvo VIDA 2014D.rar:shield [140]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert
"AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} ->
C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft
Office\Office16\OCHelper.dll [2022-10-19] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program
Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-10-19] (Microsoft Corporation -> Microsoft
Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program
Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-10-
19] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft
Office\root\Office16\MSOSB.DLL [2022-10-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program
Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-10-
19] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft
Office\root\Office16\MSOSB.DLL [2022-10-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program
Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-10-
19] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft
Office\root\Office16\MSOSB.DLL [2022-10-19] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft
Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-10-19] (Microsoft
Corporation -> Microsoft Corporation)
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei
zurückzusetzen.)
2019-12-07 10:14 - 2023-02-12 10:28 - 000000027 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-406362002-2203256304-1339820604-1001\Control Panel\Desktop\\Wallpaper ->
C:\Users\prokr\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackgroun
d\acd hintergrund.bmp
HKU\S-1-5-21-406362002-2203256304-1339820604-500\Control Panel\Desktop\\Wallpaper ->
C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System =>
(ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost => (EnableWebContentEvaluation:
1)
ist aktiviert.
Network Binding:
=============
WLAN: NordVPN LightWeight Firewall -> NordLwf (enabled)
Ethernet 2: NordVPN LightWeight Firewall -> NordLwf (enabled)
Ethernet: NordVPN LightWeight Firewall -> NordLwf (enabled)
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run32: => "BrHelp"
HKLM\...\StartupApproved\Run32: => "ControlCenter4"
HKLM\...\StartupApproved\Run32: => "Dropbox"
HKLM\...\StartupApproved\Run32: => "TeamsMachineInstaller"
HKLM\...\StartupApproved\Run32: => "BrStsMon00"HKLM\...\StartupApproved\Run32: => "TeamsMachineUninstallerProgramData"
HKLM\...\StartupApproved\Run32: => "APSDaemon"
HKU\S-1-5-21-406362002-2203256304-1339820604-1001\...\StartupApproved\StartupFolder: =>
"Ross-Tech VCDS Updater-DRV.lnk"
HKU\S-1-5-21-406362002-2203256304-1339820604-1001\...\StartupApproved\Run: =>
"ACDSeeCommanderUltimate14"
HKU\S-1-5-21-406362002-2203256304-1339820604-1001\...\StartupApproved\Run: => "CCleaner
Smart Cleaning"
HKU\S-1-5-21-406362002-2203256304-1339820604-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-406362002-2203256304-1339820604-1001\...\StartupApproved\Run: => "Discord"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird
nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [TCP Query User{3F111882-CB1C-4408-9906-3A026110795C}C:\program files\acd
systems\acdsee ultimate\14.0\acdseecommanderultimate14.exe] => (Block) C:\program files\acd
systems\acdsee ultimate\14.0\acdseecommanderultimate14.exe (ACD Systems International Inc. -> )
FirewallRules: [UDP Query User{E2003954-B46D-4A7E-A9FA-88C93AE28A21}C:\program files\acd
systems\acdsee ultimate\14.0\acdseecommanderultimate14.exe] => (Block) C:\program files\acd
systems\acdsee ultimate\14.0\acdseecommanderultimate14.exe (ACD Systems International Inc. -> )
FirewallRules: [{FF9A47AE-B006-4FA5-93B5-342303EA967B}] => (Allow) C:\Program Files\Mozilla
Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{A6CC0CDB-355E-49F0-96AA-FA82028C6A3E}] => (Allow) C:\Program Files\Mozilla
Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{5EFD441B-F6E2-4A35-9F32-ABFF7FA32610}] => (Allow) C:\Program Files\Microsoft
Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F15F78BA-4494-4B69-80E1-99E04B8E0734}] => (Allow) LPort=57209
FirewallRules: [{D85634E9-43AB-41A9-8262-DD62BB01A423}] => (Allow) LPort=57210
FirewallRules: [{A3710559-071E-447D-B2C5-1D4BD14A05B8}] => (Allow) LPort=57211
FirewallRules: [{A77C8AC1-A652-4F90-B715-C1F57E27898B}] => (Allow) LPort=57212
FirewallRules: [{CABF200C-EBD7-4AFE-A0A1-A923FFA8933F}] => (Allow) LPort=57213
FirewallRules: [{E161C91C-66DE-4BB6-B4A5-8163B16E5D8B}] => (Allow) LPort=57214
FirewallRules: [{F10F8FB7-256A-48B5-A6F8-9D8BDC0DE4B8}] => (Allow) LPort=57215
FirewallRules: [{97EEC59B-DC88-44C5-8442-2FA7104300DD}] => (Allow) LPort=57216FirewallRules: [{EECD53A6-AB6D-4D81-8D55-5576958BDEA2}] => (Allow) LPort=57217
FirewallRules: [{02D66BE2-C514-4361-ADB1-F133B5457A27}] => (Allow) LPort=57218
FirewallRules: [{27362375-D08B-4BBB-A39B-00B835DDB502}] => (Allow) LPort=57209
FirewallRules: [{F96A5597-FC9B-4946-A456-57339BC84240}] => (Allow) LPort=57210
FirewallRules: [{BFA347FA-CA5D-4A75-B225-71ABF600D447}] => (Allow) LPort=57211
FirewallRules: [{7E98ADED-373B-4AEC-8CAD-DA52F4AD9566}] => (Allow) LPort=57212
FirewallRules: [{6C11DDFF-82D4-46E9-BCDE-3A5CADB79624}] => (Allow) LPort=57213
FirewallRules: [{F1976EE3-8551-4CE2-832C-5EA314806821}] => (Allow) LPort=57214
FirewallRules: [{5A5FC2BA-E5F6-4420-8798-5F19C1AB600E}] => (Allow) LPort=57215
FirewallRules: [{6535F72B-AFF6-46FA-A6E1-5AF8CA975C3F}] => (Allow) LPort=57216
FirewallRules: [{D12063BE-E5A0-497A-954E-43A75D7F4642}] => (Allow) LPort=57217
FirewallRules: [{AB891C6F-EE08-4D42-8658-CEDBB6B63ADB}] => (Allow) LPort=57218
FirewallRules: [{10A74507-80BA-4FB6-9144-4669490912E5}] => (Allow) LPort=23007
FirewallRules: [{EF195FB9-C980-4633-9A60-C1C11FD096A3}] => (Allow) LPort=23008
FirewallRules: [{91E76F81-3D7B-4D48-A982-5DEB6C896FA9}] => (Allow) LPort=33009
FirewallRules: [{825FC9E6-36EB-445E-B05D-53E9751A6507}] => (Allow) LPort=33010
FirewallRules: [{3186298E-67BF-4910-ADFA-5665E6250AC8}] => (Allow) LPort=33011
FirewallRules: [{44553F3D-B8F8-4E1A-923A-D0D2A4F0CF83}] => (Allow) LPort=43012
FirewallRules: [{662C56D3-DCB0-4DDE-88FD-9737CEBCDE6F}] => (Allow) LPort=43013
FirewallRules: [{95814EEF-2FB0-4C8A-894A-0CF72877C634}] => (Allow) LPort=53014
FirewallRules: [{D25E7958-8C3C-4DBF-A8F4-06544E74F3E2}] => (Allow) LPort=53015
FirewallRules: [{3B38C1CD-071F-4912-8AE6-D1BB901679C6}] => (Allow) LPort=53016
FirewallRules: [{EC944A4C-5CE6-4700-97DE-BACB6EF54777}] => (Allow) LPort=23007
FirewallRules: [{D50892BA-E8CA-40D3-8E58-E974E6638E13}] => (Allow) LPort=23008
FirewallRules: [{CC2356A2-792B-4848-9668-23AB1CE1ABEF}] => (Allow) LPort=33009
FirewallRules: [{DF8718DD-CA50-42E4-841C-837CB678AD87}] => (Allow) LPort=33010
FirewallRules: [{86BC1FAC-A416-4F6B-AF3A-09EDDCA43674}] => (Allow) LPort=33011
FirewallRules: [{9FE498EF-D791-462C-A26E-9F1D3515502B}] => (Allow) LPort=43012
FirewallRules: [{CC719ADD-4366-4FF5-A9DA-B88B78FFBBC3}] => (Allow) LPort=43013
FirewallRules: [{6F39E004-9FDB-466A-AAF9-A317E72E56A8}] => (Allow) LPort=53014
FirewallRules: [{FE80785C-122E-49C5-9287-FDC882E235A9}] => (Allow) LPort=53015
FirewallRules: [{E90DE1B3-AD32-4216-82CB-9F303761C741}] => (Allow) LPort=53016FirewallRules: [{6C913DA3-0F6A-4A0B-AEF3-65828C1DE126}] => (Allow) LPort=50053
FirewallRules: [{5E173539-53B4-41D6-A212-2B7DC9C0154C}] => (Allow) LPort=50053
FirewallRules: [{EAABC0CF-9777-4238-A370-46966C6B397C}] => (Allow) LPort=57209
FirewallRules: [{846E822B-20E0-4B4C-9234-09616923B577}] => (Allow) LPort=57210
FirewallRules: [{9FECAF56-9357-42C6-939A-C203C40C9780}] => (Allow) LPort=57211
FirewallRules: [{6EC63AD0-09B5-488D-A022-B3969DF67332}] => (Allow) LPort=57212
FirewallRules: [{238625FE-7723-49B5-AFD9-291AC2663D56}] => (Allow) LPort=57213
FirewallRules: [{31E3C567-E80F-490C-8F65-C25E664DB349}] => (Allow) LPort=57214
FirewallRules: [{015B4F2F-9472-493C-B2A2-5B1730D6112F}] => (Allow) LPort=57215
FirewallRules: [{D911BD9C-B239-4738-A6C0-CD53DF603AFE}] => (Allow) LPort=57216
FirewallRules: [{E15A8BD1-832D-4B1A-995E-953FEDEAE77A}] => (Allow) LPort=57217
FirewallRules: [{60D834A9-6E4F-4B99-9CDF-6A0231E035AE}] => (Allow) LPort=57218
FirewallRules: [{68F0826B-2F55-438D-8250-76525FF36D78}] => (Allow) LPort=57209
FirewallRules: [{69B96B77-4481-4AD9-9B18-9682657D3682}] => (Allow) LPort=57210
FirewallRules: [{A51ECD74-5E03-4207-8051-4BC18AFE1889}] => (Allow) LPort=57211
FirewallRules: [{601DD6C2-3C36-4C14-8F2D-EA11F8F04FF5}] => (Allow) LPort=57212
FirewallRules: [{34C4DB0D-66B3-495E-9911-F0347E47493F}] => (Allow) LPort=57213
FirewallRules: [{865FF108-CAB4-431A-B10F-48A1B073164C}] => (Allow) LPort=57214
FirewallRules: [{05701D75-53F5-4346-BBA7-536AE98B5DC9}] => (Allow) LPort=57215
FirewallRules: [{6404B138-A375-460E-8FC6-294D32332F72}] => (Allow) LPort=57216
FirewallRules: [{52D704EF-15A9-43C1-B266-B0A4F262AFD7}] => (Allow) LPort=57217
FirewallRules: [{D3C331ED-04F1-4A32-924E-97C9365A6938}] => (Allow) LPort=57218
FirewallRules: [{1D30AC90-4FA4-45C6-8CCB-8397F26275E2}] => (Allow) LPort=23007
FirewallRules: [{E7511AF6-205D-464D-AAFC-FA907E87F23C}] => (Allow) LPort=23008
FirewallRules: [{27DB25EB-3156-4A14-99CD-3A9213620CFF}] => (Allow) LPort=33009
FirewallRules: [{E9700BA0-EED0-4744-A9DC-B99578E707D9}] => (Allow) LPort=33010
FirewallRules: [{02224CE2-10F9-457C-91D9-B8CFB0438CF7}] => (Allow) LPort=33011
FirewallRules: [{36548C54-E84A-4CF5-88A3-A2A3DC47D0EB}] => (Allow) LPort=43012
FirewallRules: [{B4C6482B-AF04-4D82-ACF3-1CF59AF71237}] => (Allow) LPort=43013
FirewallRules: [{88FB6476-2763-439F-89F7-2639A3FEABAD}] => (Allow) LPort=53014
FirewallRules: [{8261ABC5-3F0D-4233-AADC-AF0E208A419A}] => (Allow) LPort=53015
FirewallRules: [{24A7A081-A4C0-4DC3-89A7-91A73ABCB42B}] => (Allow) LPort=53016FirewallRules: [{6DE493E2-541A-46B2-98CD-4510E75CC3A0}] => (Allow) LPort=23007
FirewallRules: [{B8031BF2-9D5E-4395-AC7C-4962B43AD3A0}] => (Allow) LPort=23008
FirewallRules: [{10AEF16B-D06D-476B-9720-49EA794C54F8}] => (Allow) LPort=33009
FirewallRules: [{3199C518-2316-4BDA-9AB6-CE40BB786697}] => (Allow) LPort=33010
FirewallRules: [{CA8575E4-263D-49D8-B16A-BF767892972C}] => (Allow) LPort=33011
FirewallRules: [{111527BF-8361-4C0F-974B-01F082E6E390}] => (Allow) LPort=43012
FirewallRules: [{15831D03-790D-465C-A09C-3DE44EEBB770}] => (Allow) LPort=43013
FirewallRules: [{0C025162-CEA5-4159-A72B-632FCC28864B}] => (Allow) LPort=53014
FirewallRules: [{FE641421-519D-44B7-9215-23E40E523982}] => (Allow) LPort=53015
FirewallRules: [{AD6B9955-6374-440D-82F2-071CC38BDC72}] => (Allow) LPort=53016
FirewallRules: [{2B37FB76-E56C-4A97-B87F-BCE481FADB15}] => (Allow) LPort=50053
FirewallRules: [{2BB74DAE-FFF8-4D87-A8F0-FC8BA4AD248C}] => (Allow) LPort=50053
FirewallRules: [TCP Query User{6D0E01A1-4322-4822-B9AD-80EFABFAD326}C:\program files\acd
systems\acdsee ultimate\14.0\acdseecommanderultimate14.exe] => (Allow) C:\program files\acd
systems\acdsee ultimate\14.0\acdseecommanderultimate14.exe (ACD Systems International Inc. -> )
FirewallRules: [UDP Query User{F9D14056-B42A-45BB-80F4-40D3AE60F95E}C:\program files\acd
systems\acdsee ultimate\14.0\acdseecommanderultimate14.exe] => (Allow) C:\program files\acd
systems\acdsee ultimate\14.0\acdseecommanderultimate14.exe (ACD Systems International Inc. -> )
FirewallRules: [{E5D21CBE-1CF7-429B-9556-7CBE9A9DD392}] => (Allow) C:\Ross-Tech\VCDSDRV\VCDS.EXE (Ross-Tech, LLC -> Ross-Tech, LLC)
FirewallRules: [{A3D36B5C-AA89-4FC3-8BB8-44966E8E255F}] => (Allow) C:\Ross-Tech\VCDSDRV\VCIConfig.EXE (Ross-Tech, LLC) [Datei ist nicht signiert]
FirewallRules: [{F1A84CCF-4947-41B5-9066-736A36451D2F}] => (Allow) LPort=57209
FirewallRules: [{D6176F55-051D-42C8-8E88-9B862FBECE61}] => (Allow) LPort=57210
FirewallRules: [{308856D8-950C-4E59-A0C8-DA236F63DE30}] => (Allow) LPort=57211
FirewallRules: [{21D518D2-0B7F-4D68-A79F-BA928FBC40E7}] => (Allow) LPort=57212
FirewallRules: [{96614754-5D0C-4924-BF0C-A65231541680}] => (Allow) LPort=57213
FirewallRules: [{332ED772-9153-44C8-B835-482B9C41CE6B}] => (Allow) LPort=57214
FirewallRules: [{62874BE2-F718-405E-81DA-482409FEE86E}] => (Allow) LPort=57215
FirewallRules: [{AF4E6BB4-38F3-41B2-AF8F-5D94CF7CFD40}] => (Allow) LPort=57216
FirewallRules: [{FB41BEB7-2869-485F-92EC-190BBCF24555}] => (Allow) LPort=57217
FirewallRules: [{B4C0907B-4CE6-43B2-9691-D63ADC3E59D6}] => (Allow) LPort=57218
FirewallRules: [{AB96F4E3-4B13-4B28-8A72-76A5E64F7E5D}] => (Allow) LPort=57209
FirewallRules: [{16AB26DB-8009-4592-A9B1-7B53EC62A9E7}] => (Allow) LPort=57210FirewallRules: [{71E9E6A7-A26A-4722-85AA-FCF0D4F00B29}] => (Allow) LPort=57211
FirewallRules: [{1C5E45A9-1538-45B9-A612-D4981179C2F1}] => (Allow) LPort=57212
FirewallRules: [{09D3F6BD-B173-4D75-AA78-1CFF621D5FFC}] => (Allow) LPort=57213
FirewallRules: [{80DEA981-94E0-4D69-833E-2347FE7D0BA0}] => (Allow) LPort=57214
FirewallRules: [{66BBB1FE-92B5-4EA9-AF19-79CD21C558E0}] => (Allow) LPort=57215
FirewallRules: [{E15B7220-EF74-4501-8E43-3A3CC3789BEE}] => (Allow) LPort=57216
FirewallRules: [TCP Query User{57337A27-784C-4E63-AA46-
BC20BB3D3D21}C:\users\prokr\appdata\local\wondershare\wondershare
nativepush\wstoastnotification.exe] => (Allow)
C:\users\prokr\appdata\local\wondershare\wondershare nativepush\wstoastnotification.exe
(Wondershare Technology Group Co.,Ltd -> Wondershare)
FirewallRules: [UDP Query User{8A9EF564-B876-4C4C-9F52-
0526B20CBBBB}C:\users\prokr\appdata\local\wondershare\wondershare
nativepush\wstoastnotification.exe] => (Allow)
C:\users\prokr\appdata\local\wondershare\wondershare nativepush\wstoastnotification.exe
(Wondershare Technology Group Co.,Ltd -> Wondershare)
FirewallRules: [{29F6E702-9960-43FF-AD58-1D1A710A5D56}] => (Allow) LPort=57217
FirewallRules: [{A4691BE3-C592-4635-BCEE-4BB8A3D87A57}] => (Allow) LPort=57218
FirewallRules: [{9518B515-7AE0-4762-BC8E-E1FA79021AE0}] => (Allow) LPort=23007
FirewallRules: [{462B8FD3-5EB6-4A1B-979F-E4BCC8404579}] => (Allow) LPort=23008
FirewallRules: [{009C1830-DA7C-4616-8B03-423E4627B84A}] => (Allow) LPort=33009
FirewallRules: [{A44ADEA8-069D-4AAC-8A2E-DE1B70BEFF5F}] => (Allow) LPort=33010
FirewallRules: [{38826B26-10D5-4257-A4DE-8AE496C88951}] => (Allow) LPort=33011
FirewallRules: [{90EB2D96-4753-4474-96C5-FA305C395C01}] => (Allow) LPort=43012
FirewallRules: [{155E19DF-A243-415A-9329-A4611EC29CB0}] => (Allow) LPort=43013
FirewallRules: [{0DD0F560-064F-4390-9794-E7523496EFC8}] => (Allow) LPort=53014
FirewallRules: [{8ABEC607-54EC-4D52-A72A-14AFEAEE794A}] => (Allow) LPort=53015
FirewallRules: [{BC752976-4CC5-408F-8CEF-BF0B75AD3928}] => (Allow) LPort=53016
FirewallRules: [{11862F4E-D94D-4FCB-B2E1-B1E99819B50B}] => (Allow) LPort=23007
FirewallRules: [{013FEB59-08C4-438B-BC6B-327C3BAEFAFB}] => (Allow) LPort=23008
FirewallRules: [{78C8C663-C5C5-4505-ACB5-55AFB6F3A8B8}] => (Allow) LPort=33009
FirewallRules: [{BCCC7E26-6005-4A23-98D4-19089811FBCD}] => (Allow) LPort=33010
FirewallRules: [{57E493DF-ABF2-4A6E-AF0B-DDBCF27423C6}] => (Allow) LPort=33011
FirewallRules: [{46CCD354-7CA8-42C3-9D8E-93DD3C74E853}] => (Allow) LPort=43012
FirewallRules: [{DFD178B4-A77C-4BFD-A788-7305603AFF7F}] => (Allow) LPort=43013FirewallRules: [{24B310B8-CFBB-45F5-AAD2-17CA26094E98}] => (Allow) LPort=53014
FirewallRules: [{598B3A8A-2614-4B74-AF9A-9EE400DBE6B1}] => (Allow) LPort=53015
FirewallRules: [{D67EEAE8-2732-4866-9A74-751A1EC7FC45}] => (Allow) LPort=53016
FirewallRules: [{D453A8ED-53D6-404B-BA8E-24A68D896D8A}] => (Allow) LPort=50053
FirewallRules: [{843886B1-655E-46FC-8CF2-8FBD5EA3ED33}] => (Allow) LPort=50053
FirewallRules: [TCP Query User{097C1172-9BC0-44B6-9421-
521224A86696}C:\users\prokr\appdata\local\wondershare\wondershare
nativepush\wstoastnotification.exe] => (Block)
C:\users\prokr\appdata\local\wondershare\wondershare nativepush\wstoastnotification.exe
(Wondershare Technology Group Co.,Ltd -> Wondershare)
FirewallRules: [UDP Query User{019F4AC6-3580-4746-88E8-
CCAA1E83AB43}C:\users\prokr\appdata\local\wondershare\wondershare
nativepush\wstoastnotification.exe] => (Block)
C:\users\prokr\appdata\local\wondershare\wondershare nativepush\wstoastnotification.exe
(Wondershare Technology Group Co.,Ltd -> Wondershare)
FirewallRules: [{D5DBEEF1-F53A-4436-A88D-2F162CC3C526}] => (Allow) C:\Program Files
(x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe (Apple Inc. -> Apple
Inc.)
FirewallRules: [ACDSee Professional 2023 TCP] => (Allow) C:\Program Files\ACD Systems\ACDSee
Pro\16.0\ACDSeeProfessional2023.exe (ACD Systems International Inc. -> ACD Systems International
Inc.)
FirewallRules: [ACDSee Professional 2023 UDP] => (Allow) C:\Program Files\ACD Systems\ACDSee
Pro\16.0\ACDSeeProfessional2023.exe (ACD Systems International Inc. -> ACD Systems International
Inc.)
FirewallRules: [ACDSee Commander Professional 2023 TCP] => (Allow) C:\Program Files\ACD
Systems\ACDSee Pro\16.0\ACDSeeCommanderPro16.exe (ACD Systems International Inc. -> )
FirewallRules: [ACDSee Commander Professional 2023 UDP] => (Allow) C:\Program Files\ACD
Systems\ACDSee Pro\16.0\ACDSeeCommanderPro16.exe (ACD Systems International Inc. -> )
FirewallRules: [{AD437642-905C-45F8-BD02-CBC43E5D09DE}] => (Allow) C:\Program
Files\WindowsApps\Microsoft.SkypeApp_15.107.3215.0_x64__kzf8qxf38zg5c\Skype\Skype.exe
(Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{44EC05AF-D897-49D5-AB03-238429291EB4}] => (Allow) C:\Program
Files\WindowsApps\Microsoft.SkypeApp_15.107.3215.0_x64__kzf8qxf38zg5c\Skype\Skype.exe
(Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{AB30852C-4E13-441E-B369-40435B53C0B7}] => (Allow) C:\Program
Files\WindowsApps\Microsoft.SkypeApp_15.107.3215.0_x64__kzf8qxf38zg5c\Skype\Skype.exe
(Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{11FE48B9-C7E7-49A1-98AD-959A82FE5E4B}] => (Allow) C:\Program
Files\WindowsApps\Microsoft.SkypeApp_15.107.3215.0_x64__kzf8qxf38zg5c\Skype\Skype.exe
(Skype Software Sarl -> Skype Technologies S.A.)FirewallRules: [{3568B4B0-7D23-431D-886F-DF476256021B}] => (Allow) C:\Program
Files\WindowsApps\SpotifyAB.SpotifyMusic_1.224.756.0_x64__zpdnekdrzrea0\Spotify.exe
(453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{B2F89857-5C58-4824-9231-275F2EF80A12}] => (Allow) C:\Program
Files\WindowsApps\SpotifyAB.SpotifyMusic_1.224.756.0_x64__zpdnekdrzrea0\Spotify.exe
(453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{A449AA8F-F0D0-468B-82F4-310383DCC8C3}] => (Allow) C:\Program
Files\WindowsApps\SpotifyAB.SpotifyMusic_1.224.756.0_x64__zpdnekdrzrea0\Spotify.exe
(453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{21B5C9DB-93B1-4E80-B38F-C4DC8547F6F1}] => (Allow) C:\Program
Files\WindowsApps\SpotifyAB.SpotifyMusic_1.224.756.0_x64__zpdnekdrzrea0\Spotify.exe
(453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{EA22F51D-0601-4A49-A361-3F75F750CD5A}] => (Allow) C:\Program
Files\WindowsApps\SpotifyAB.SpotifyMusic_1.224.756.0_x64__zpdnekdrzrea0\Spotify.exe
(453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{E1E460AF-68E8-40C8-A61E-C501D03C7CAB}] => (Allow) C:\Program
Files\WindowsApps\SpotifyAB.SpotifyMusic_1.224.756.0_x64__zpdnekdrzrea0\Spotify.exe
(453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{8BA9976B-B8CA-4F15-AFAE-45AE0F1E707F}] => (Allow) C:\Program
Files\WindowsApps\SpotifyAB.SpotifyMusic_1.224.756.0_x64__zpdnekdrzrea0\Spotify.exe
(453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{6D87C150-EB50-4C6C-84C3-305675A89220}] => (Allow) C:\Program
Files\WindowsApps\SpotifyAB.SpotifyMusic_1.224.756.0_x64__zpdnekdrzrea0\Spotify.exe
(453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{20DC3988-962B-4A71-BC44-0650052AD1A2}] => (Allow) C:\Program
Files\WindowsApps\SpotifyAB.SpotifyMusic_1.224.756.0_x64__zpdnekdrzrea0\Spotify.exe
(453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{F4D91B34-E017-4988-B4E8-05BAECF7F655}] => (Allow) C:\Program
Files\WindowsApps\SpotifyAB.SpotifyMusic_1.224.756.0_x64__zpdnekdrzrea0\Spotify.exe
(453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{EF6B3D33-54D7-4DAF-8E4B-69972BD46047}] => (Allow) C:\Program Files
(x86)\Microsoft\EdgeWebView\Application\119.0.2151.58\msedgewebview2.exe (Microsoft
Corporation -> Microsoft Corporation)
FirewallRules: [{3C2FFA82-955D-465E-BBD2-4CE7D203FDC2}] => (Allow) C:\Program
Files\NordVPN\nordvpn-service.exe (nordvpn s.a. -> nordvpn S.A.)
FirewallRules: [{5FF062B2-5599-48EE-AC88-586DBB753231}] => (Allow) C:\Program
Files\NordVPN\nordvpn-service.exe (nordvpn s.a. -> nordvpn S.A.)
FirewallRules: [{BE838E43-BDC2-43DA-AE5B-9BCE0A88DF9F}] => (Allow) C:\Program Files
(x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{62AD9BD4-0538-4AA1-BC97-944AF5C9AEAD}] => (Allow) C:\Program Files
(x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)==================== Wiederherstellungspunkte =========================
13-11-2023 21:00:19 IIF_MSI
15-11-2023 00:00:03 Windows Modules Installer
15-11-2023 00:00:57 Windows Modules Installer
==================== Fehlerhafte Geräte im Gerätemanager ============
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (11/16/2023 01:03:25 AM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Das Objekt oder die Eigenschaft
wurde nicht gefunden.
Error: (11/16/2023 01:03:25 AM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Das Objekt oder die Eigenschaft
wurde nicht gefunden.
Error: (11/16/2023 01:03:25 AM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Das Objekt oder die Eigenschaft
wurde nicht gefunden.
Error: (11/16/2023 01:03:24 AM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Das Objekt oder die Eigenschaft
wurde nicht gefunden.
Error: (11/16/2023 01:03:22 AM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Das Objekt oder die Eigenschaft
wurde nicht gefunden.Error: (11/16/2023 01:02:55 AM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Das Objekt oder die Eigenschaft
wurde nicht gefunden.
Error: (11/16/2023 01:02:55 AM) (Source: DbxSvc) (EventID: 322) (User: )
Description: Failed to get driver message: (-2147024890) Das Handle ist ungültig.
Error: (11/16/2023 01:02:55 AM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Das Objekt oder die Eigenschaft
wurde nicht gefunden.
Systemfehler:
=============
Error: (11/15/2023 10:39:15 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (11/15/2023 10:39:15 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\prokr\AppData\Local\Temp\ehdrv.sys
Error: (11/15/2023 10:39:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (11/15/2023 10:39:14 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\prokr\AppData\Local\Temp\ehdrv.sys
Error: (11/15/2023 10:39:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.Error: (11/15/2023 10:39:14 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\prokr\AppData\Local\Temp\ehdrv.sys
Error: (11/15/2023 10:39:14 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (11/15/2023 10:39:14 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\prokr\AppData\Local\Temp\ehdrv.sys
Windows Defender:
================
Date: 2023-08-31 13:27:10
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {4005BDFD-7150-4079-8C00-7A8E5AAC4739}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Date: 2023-02-09 10:50:01
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {4148C4A2-94E1-44C6-8A3A-AF8905C5FD32}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Date: 2023-02-08 09:55:44
Description:Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {8EC93966-9C5E-4D68-B873-BCAFE3927379}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Date: 2023-02-05 21:53:30
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {BB26D59D-51BA-43F7-B59F-9074107435C2}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Date: 2023-02-04 15:21:39
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {2F261C92-B931-40C1-9EDB-834A2A80CBFA}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Event[0]:
Date: 2023-11-15 09:23:51
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Security Intelligence
aufgetreten. Es wird versucht, zu einer vorherigen Version zurückzukehren.
Security Intelligence versucht: Aktuell
Fehlercode: 0x80501102
Fehlerbeschreibung: Unerwartetes Problem. Installieren Sie bei Bedarf verfügbare Updates, und
starten Sie das Programm dann erneut. Informationen zum Installieren von Updates finden Sie unter
"Hilfe und Support".
Security Intelligence-Version: 1.401.271.0;1.401.271.0Modulversion: 1.1.23100.2009
Date: 2023-11-15 09:11:53
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen
aufgetreten.
Neue Version der Sicherheitsinformationen:
%Vorherige Version der Sicherheitsinformationen: 1.401.271.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion:
%Vorherige Modulversion: 1.1.23100.2009
Fehlercode: 0x8007045b
Fehlerbeschreibung: Der Computer wird heruntergefahren.
Date: 2023-10-27 08:21:56
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Security Intelligence
aufgetreten. Es wird versucht, zu einer vorherigen Version zurückzukehren.
Security Intelligence versucht: Aktuell
Fehlercode: 0x80501102
Fehlerbeschreibung: Unerwartetes Problem. Installieren Sie bei Bedarf verfügbare Updates, und
starten Sie das Programm dann erneut. Informationen zum Installieren von Updates finden Sie unter
"Hilfe und Support".
Security Intelligence-Version: 1.399.1226.0;1.399.1226.0
Modulversion: 1.1.23090.2007
Date: 2023-10-24 11:19:54
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen
aufgetreten.Neue Version der Sicherheitsinformationen:
%Vorherige Version der Sicherheitsinformationen: 1.399.136.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion:
%Vorherige Modulversion: 1.1.23090.2007
Fehlercode: 0x8007045b
Fehlerbeschreibung: Der Computer wird heruntergefahren.
Date: 2023-10-13 17:09:52
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Security Intelligence
aufgetreten. Es wird versucht, zu einer vorherigen Version zurückzukehren.
Security Intelligence versucht: Aktuell
Fehlercode: 0x80501102
Fehlerbeschreibung: Unerwartetes Problem. Installieren Sie bei Bedarf verfügbare Updates, und
starten Sie das Programm dann erneut. Informationen zum Installieren von Updates finden Sie unter
"Hilfe und Support".
Security Intelligence-Version: 1.399.136.0;1.399.136.0
Modulversion: 1.1.23090.2007
CodeIntegrity:
===============
Date: 2023-11-16 06:25:31
Description:
Code Integrity determined that a process
(\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load
\Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft
signing level requirements.
Date: 2023-11-16 06:23:46
Description:Code Integrity determined that a process
(\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load
\Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows
signing level requirements.
Date: 2023-11-16 06:18:02
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program
Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load
\Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 /
Antimalware signing level requirements.
==================== Speicherinformationen ===========================
BIOS: Insyde Corp. V1.14 08/06/2015
Hauptplatine: Acer NG-VN7-791G-70TW
Prozessor: Intel(R) Core(TM) i7-4720HQ CPU @ 2.60GHz
Prozentuale Nutzung des RAM: 35%
Installierter physikalischer RAM: 16307.27 MB
Verfügbarer physikalischer RAM: 10447.01 MB
Summe virtueller Speicher: 18739.27 MB
Verfügbarer virtueller Speicher: 12097.89 MB
==================== Laufwerke ================================
Drive c: (SYSTEM) (Fixed) (Total:930.44 GB) (Free:631 GB) (Model: Samsung SSD 860 EVO M.2 1TB)
NTFS
Drive d: (DATA) (Fixed) (Total:1863 GB) (Free:760.71 GB) (Model: SanDisk SDSSDH3 2T00) NTFS
Drive f: () (Removable) (Total:0 GB) (Free:0 GB)
\\?\Volume{61b6b614-98b6-43ec-8e65-dcdc23be9621}\ (Wiederherstellung) (Fixed) (Total:0.44 GB)
(Free:0.15 GB) NTFS
\\?\Volume{639c66e4-1fa7-4c5d-a7fc-3966c54ba400}\ () (Fixed) (Total:0.52 GB) (Free:0.08 GB) NTFS\\?\Volume{7e267ef5-efb6-45b4-b34c-e2d3f2c5bf0b}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB)
FAT32
==================== MBR & Partitionstabelle ====================
==========================================================
Disk: 2 (Size: 58.6 GB) (Disk ID: 07F3D8A2)
Partition 1: (Active) - (Size=58.6 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt =======================