Hallo,

ich arbeite in einer Entwicklungsfirma und bin für ein Online-Monitoring-Portal verantwortlich.
Ich weis das Ihr sowas normal nicht macht , ich bin aber in der Probezeit erst 1Monat dort, die IT vor Ort ist ein 1 Mann der wirklich keinen plan hat hier... ich will aber das finden da des schon krass wäre wenn die Firma gehackt wurde. Mein System läuft unter Windows 11 und ist Teil eines Domain-Netzwerks, in dem ich lokale Admin-Rechte habe. In letzter Zeit ist mir aufgefallen, dass sich mein Mauszeiger gelegentlich ohne mein Zutun in die Ecken des Bildschirms bewegt, ca. um 16:00 Uhr. Dies deutet auf eine mögliche Remote Access Trojan (RAT)-Infektion oder ein Überwachungstool hin.

Folgendes habe ich bereits unternommen:

Malware-Scans: Ich habe Scans mit Malwarebytes und Cylance durchgeführt, aber keine Bedrohungen gefunden.
Systemprotokolle: Ich habe die Protokolle im Windows Event Viewer zur fraglichen Zeit überprüft, aber nichts Verdächtiges gefunden.
Autostart-Programme: Mit Autoruns habe ich die Autostart-Programme überprüft, aber keine ungewöhnlichen Einträge gefunden.
Netzwerkisolation: Leider kann ich das System nicht vom Netzwerk trennen, um weitere Untersuchungen durchzuführen.
Zusätzliche Schritte: Ich plane, einen Tiefenscan mit Windows Defender Offline durchzuführen.
Ich bin fast sicher, dass ein RAT oder ein ähnliches Überwachungstool auf meinem System aktiv ist.

Ich habe mit Autoruns geprüft nichts gefunden und mit Prozess-Explorer auch.

Kann mir jemand helfen, den RAT zu identifizieren und weitere Schritte zur Sicherung meines Systems vorzuschlagen? Ich werde außerdem morgen prüfen, ob ähnliche Vorfälle auf anderen Systemen hier im Netzwerk auftreten.

Ich werde morgen FRST ausführen und Posten

FRST.txt

FRST Logfile:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-08.2024
durchgeführt von ALB (Administrator) auf PC-80-BOES (Dell Inc. Inspiron 3910) (13-08-2024 08:27:26)
Gestartet von C:\Verdacht_RAT\FRST64.exe
Geladene Profile: ALB
Plattform: Microsoft Windows 11 Pro Version 23H2 22631.3958 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Edge
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA Overlay.exe <3>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\ShadowPlay\nvsphelper64.exe
(C:\Program Files\WindowsApps\MSTeams_24193.1805.3040.8975_x64__8wekyb3d8bbwe\ms-teams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\127.0.2651.98\msedgewebview2.exe <8>
(DriverStore\FileRepository\ipf_cpu.inf_amd64_bca8bb2217972264\ipf_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_bca8bb2217972264\ipf_helper.exe
(explorer.exe ->) (Cylance, Inc. -> Cylance, Inc.) C:\Program Files\Cylance\Desktop\CylanceUI.exe
(explorer.exe ->) (Marti Climent -> ) C:\Program Files\UniGetUI\UniGetUI.exe
(explorer.exe ->) (ownCloud GmbH -> ) C:\Program Files\ownCloud\owncloud.exe
(explorer.exe ->) (Swyx Solutions AG -> Swyx Solutions GmbH) C:\Program Files (x86)\SwyxIt!\SwyxIt!.exe
(explorer.exe ->) (Veeam Software Group GmbH -> Veeam Software Group GmbH) C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Tray.exe
(explorer.exe ->) (Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo10de.inf_amd64_e306bdf9c02213dc\WavesSvc64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\MSTeams_24193.1805.3040.8975_x64__8wekyb3d8bbwe\ms-teams.exe <2>
(OpenVPN Inc. -> OpenVPN) C:\Program Files\OpenVPN Connect\OpenVPNConnect.exe <4>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Cylance, Inc. -> Cylance, Inc.) C:\Program Files\Cylance\Desktop\CylanceSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_64d7fcfcde9b9c10\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_bca8bb2217972264\ipf_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_f3c201b4c28c14d0\WMIRegistrationService.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvddi.inf_amd64_b740ade77f86efb0\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (OpenVPN Inc. -> ) C:\Program Files\OpenVPN Connect\agent_ovpnconnect_1706702535874.exe
(services.exe ->) (OpenVPN Inc. -> ) C:\Program Files\OpenVPN Connect\ovpnhelper_service.exe
(services.exe ->) (Veeam Software Group GmbH -> Veeam Software Group GmbH) C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Service.exe
(services.exe ->) (Waves Inc -> Waves Audio Ltd) C:\Windows\System32\DriverStore\FileRepository\wavesapo10de.inf_amd64_e306bdf9c02213dc\WavesAudioService.exe
(services.exe ->) (Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo10de.inf_amd64_e306bdf9c02213dc\WavesSysSvc64.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.23.1911.0_x64__8wekyb3d8bbwe\WindowsPackageManagerServer.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_524.18500.10.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe
(svchost.exe ->) (Swyx Solutions AG -> Swyx Solutions GmbH) C:\Program Files (x86)\SwyxIt!\CLMgr.exe
konnte nicht auf den Prozess zugreifen -> vmmemCmZygote

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [WavesSvc] => C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo10de.inf_amd64_e306bdf9c02213dc\WavesSvc64.exe [4585280 2022-05-18] (Waves Inc -> Waves Audio Ltd.)
HKLM\...\Run: [Veeam.EndPoint.Tray.exe] => C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Tray.exe [932000 2024-04-28] (Veeam Software Group GmbH -> Veeam Software Group GmbH)
HKLM\...\Run: [svStartSignaturClient6] => "\\dc-data\gruppen\tech. Abteilung\Lesen\Freigegebene VB Programme\startsignaturClient.exe" (Keine Datei)
HKLM\...\Policies\Explorer: [NoWelcomeScreen] 1
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center: Beschränkung <==== ACHTUNG
HKU\S-1-5-21-3087490873-3835733739-2015806437-2967\...\Run: [WingetUI] => C:\Program Files\UniGetUI\UniGetUI.exe [730432 2024-07-28] (Marti Climent -> )
HKU\S-1-5-21-3087490873-3835733739-2015806437-2967\...\Run: [Duo Desktop.exe] => C:\Program Files (x86)\Duo Desktop\Duo Desktop.exe (Keine Datei)
HKU\S-1-5-21-3087490873-3835733739-2015806437-2967\...\Run: [org.openvpn.client] => C:\Program Files\OpenVPN Connect\OpenVPNConnect.exe [157689448 2024-01-31] (OpenVPN Inc. -> OpenVPN)
HKU\S-1-5-21-3087490873-3835733739-2015806437-2967\...\Run: [Docker Desktop] => C:\Program Files\Docker\Docker\Docker Desktop.exe [3833928 2024-07-16] (Docker Inc -> Docker Inc.)
HKU\S-1-5-21-3087490873-3835733739-2015806437-2967\...\Run: [ownCloud] => C:\Program Files\ownCloud\owncloud.exe [2057968 2024-06-11] (ownCloud GmbH -> )
HKU\S-1-5-21-3087490873-3835733739-2015806437-2967\Software\Policies\...\system: [GroupPolicyRefreshTime] 30
HKU\S-1-5-21-3087490873-3835733739-2015806437-2967\Software\Policies\...\system: [GroupPolicyRefreshTimeOffset] 30
HKLM\...\Print\Monitors\PDF-XChange Lite Port Monitor: C:\Windows\system32\pxcpmL.dll [719848 2022-04-13] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
HKLM\...\Print\Monitors\VFP: C:\Windows\system32\spool\DRIVERS\x64\Vfpmu.dll [440456 2019-07-25] (Swyx Solutions AG -> Swyx Solutions GmbH)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{401C381F-E0DE-4B85-8BD8-4F3F14FBDA57}] -> C:\Program Files (x86)\Microsoft\Edge Dev\Application\129.0.2752.4\Installer\setup.exe [2024-08-09] (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\Users\ALB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Cylance Desktop.lnk [2024-06-25]
ShortcutTarget: Cylance Desktop.lnk -> C:\Program Files\Cylance\Desktop\CylanceUI.exe (Cylance, Inc. -> Cylance, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SwyxIt!.lnk [2022-08-19]
ShortcutTarget: SwyxIt!.lnk -> C:\Program Files (x86)\SwyxIt!\SwyxIt!.exe (Swyx Solutions AG -> Swyx Solutions GmbH)
GroupPolicy: Beschränkung ? <==== ACHTUNG
GroupPolicy\User: Beschränkung ? <==== ACHTUNG
Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {84A93A95-DF5A-41B8-ADC6-B47D22F12E99} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1563080 2024-07-31] (Adobe Inc. -> Adobe Inc.)
Task: {5E83F030-61C3-4F0F-807E-579ACD262FC8} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe  (Keine Datei)
Task: {68BA12D3-DA55-4C7C-8994-C5D484E6F31F} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe [5526008 2024-07-26] (Microsoft Windows -> Microsoft Corporation)
Task: {1D4DF0D3-0B25-46D4-8976-0A1ED8FB4AF3} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [1626328 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {6CDE00B9-667F-4C81-AC17-503E4BAD47ED} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {9FDE6C1B-D479-41BC-ACFC-DF0AF1AE42D7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {FF4551D0-BCCA-42B5-9FA7-CADCFEDB6EB2} - System32\Tasks\Microsoft\VisualStudio\Updates\BackgroundDownload => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\BackgroundDownload.exe [255040 2024-07-16] (Microsoft Corporation -> Microsoft)
Task: {9FCDD6A8-D851-4E42-BA09-A89F33D93ABE} - System32\Tasks\Microsoft\Windows\GroupPolicy\{3E0A038B-D834-4930-9981-E89C9BFF83AA} => C:\WINDOWS\system32\gpupdate.exe [53248 2024-03-12] (Microsoft Windows -> Microsoft Corporation)
Task: {61782E4E-3784-4731-8651-E30E13AC78DE} - System32\Tasks\Microsoft\Windows\GroupPolicy\{A7719E0F-10DB-4640-AD8C-490CC6AD5202} => C:\WINDOWS\system32\gpupdate.exe [53248 2024-03-12] (Microsoft Windows -> Microsoft Corporation)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)
Task: {2E184AF9-09DE-4EB3-B3CA-5A5D10A33B1D} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat [815 2022-11-22] () [Datei ist nicht signiert]
Task: {BEA97042-12C5-4D18-90C2-E464BB2D67E8} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA App.exe [3822632 2024-06-18] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F4ED5C02-8138-41F8-BFEA-592D0857D89C} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-1706817784-3290820598-1487956214-1001 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  /reporting (Keine Datei)
Task: {0A9F65D0-FA5E-407F-813F-0AC354E6D323} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1706817784-3290820598-1487956214-1001 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  (Keine Datei)
Task: {1841E373-CD06-4730-9F55-51B4ECB2E431} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [6045672 2022-04-13] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
Task: {70AB71EC-3C1D-470D-B1EB-7B596B24A63B} - System32\Tasks\ZoomUpdateTaskUser-S-1-5-21-3087490873-3835733739-2015806437-2967 => C:\Users\ALB\AppData\Roaming\Zoom\bin\Zoom.exe [432456 2024-07-05] (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe-CheckUpdate(Tracker Software Products (Canada) Ltd.Kee

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\..\Interfaces\{ad470f77-ee02-4095-9049-9f29cc74f9c9}: [DhcpNameServer] 192.168.158.243
Tcpip\..\Interfaces\{e5e8155c-d85a-46cb-9407-e9262e9bbd64}: [NameServer] 192.168.168.249,192.168.168.247

Edge: 
=======
StartMenuInternet: Microsoft Edge Dev - C:\Program Files (x86)\Microsoft\Edge Dev\Application\msedge.exe

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2022-04-13] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2022-04-13] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2022-04-13] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-08-03] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2022-04-13] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2022-04-13] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2022-04-13] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)

Chrome: 
=======
CHR Profile: C:\Users\ALB\AppData\Local\Google\Chrome\User Data\Default [2024-07-02]
CHR Extension: (Google Docs Offline) - C:\Users\ALB\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-06-25]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\ALB\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-06-25]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-07-31] (Adobe Inc. -> Adobe Inc.)
R2 agent_ovpnconnect; C:\Program Files\OpenVPN Connect\agent_ovpnconnect_1706702535874.exe [4698216 2024-01-31] (OpenVPN Inc. -> )
S3 com.docker.service; C:\Program Files\Docker\Docker\com.docker.service [20072 2024-07-16] (Docker Inc -> Docker Inc.)
R2 CylanceSvc; C:\Program Files\Cylance\Desktop\CylanceSvc.exe [1574336 2022-02-26] (Cylance, Inc. -> Cylance, Inc.)
S2 Intel(R) Platform License Manager Service; C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_367008a610747d24\lib\PlatformLicenseManagerService.exe [749048 2022-12-20] (Intel Corporation -> Intel(R) Corporation)
R2 ipfsvc; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_bca8bb2217972264\ipf_uf.exe [2416792 2021-09-28] (Intel Corporation -> Intel Corporation)
R2 IpOverUsbSvc; C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe [15480 2024-02-22] (Microsoft Corporation -> Microsoft Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8965728 2024-08-13] (Malwarebytes Inc. -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [3073888 2024-08-13] (Malwarebytes Inc. -> Malwarebytes)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpDefenderCoreService.exe [1427024 2024-08-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 MicrosoftEdgeDevElevationService; C:\Program Files (x86)\Microsoft\Edge Dev\Application\129.0.2752.4\elevation_service.exe [1727544 2024-08-07] (Microsoft Corporation -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvddi.inf_amd64_b740ade77f86efb0\Display.NvContainer\NVDisplay.Container.exe [1275424 2024-07-11] (NVIDIA Corporation -> NVIDIA Corporation)
R2 ovpnhelper_service; C:\Program Files\OpenVPN Connect\ovpnhelper_service.exe [4534888 2024-01-31] (OpenVPN Inc. -> )
S3 postgresql-x64-16; C:\Program Files\PostgreSQL\16\bin\pg_ctl.exe [122368 2024-06-06] (PostgreSQL Global Development Group) [Datei ist nicht signiert]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [522072 2024-07-26] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [794544 2024-05-02] (Oracle America, Inc. -> Oracle and/or its affiliates)
R2 VeeamEndpointBackupSvc; C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Service.exe [143520 2024-04-28] (Veeam Software Group GmbH -> Veeam Software Group GmbH)
S3 VSInstallerElevationService; C:\Program Files (x86)\Microsoft Visual Studio\Installer\VSInstallerElevationService.exe [42544 2024-07-16] (Microsoft Corporation -> Microsoft)
S3 VSStandardCollectorService150; C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [143480 2024-02-27] (Microsoft Corporation -> Microsoft Corporation)
R2 WavesAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo10de.inf_amd64_e306bdf9c02213dc\WavesAudioService.exe [158016 2022-05-18] (Waves Inc -> Waves Audio Ltd)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\NisSrv.exe [3199648 2024-08-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MsMpEng.exe [133704 2024-08-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
S2 WSLService; "C:\Program Files\WSL\wslservice.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [544768 2024-01-25] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [188416 2024-01-25] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [106496 2022-05-07] (Microsoft Corporation) [Datei ist nicht signiert]
R3 CirrusLFD; C:\WINDOWS\System32\DriverStore\FileRepository\cshda.inf_amd64_469419cbd4e184e8\CSLFD.sys [212096 2023-05-17] (Cirrus Logic, Inc -> Cirrus Logic, Inc.)
R3 CirrusUFD; C:\WINDOWS\System32\DriverStore\FileRepository\cshda.inf_amd64_469419cbd4e184e8\CSUFD.sys [101096 2023-05-17] (WDKTestCert driver dev,131877739977077075 -> Cirrus Logic, Inc.)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [158640 2024-08-13] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R0 fse; C:\WINDOWS\System32\drivers\fse.sys [218608 2024-06-12] (Microsoft Windows -> Microsoft Corporation)
R3 ipf_acpi; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_acpi.inf_amd64_3a6eb60f36ac95a7\ipf_acpi.sys [85656 2021-09-28] (Intel Corporation -> Intel Corporation)
R3 ipf_cpu; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_bca8bb2217972264\ipf_cpu.sys [79512 2021-09-28] (Intel Corporation -> Intel Corporation)
R3 ipf_lf; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_bca8bb2217972264\ipf_lf.sys [425112 2021-09-28] (Intel Corporation -> Intel Corporation)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [231504 2024-08-13] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2024-08-13] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\DRIVERS\farflt11.sys [234168 2024-08-13] (Malwarebytes Inc. -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [78800 2024-08-13] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239568 2024-08-13] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [189776 2024-08-13] (Malwarebytes Inc. -> Malwarebytes)
R1 npcap; C:\WINDOWS\system32\DRIVERS\npcap.sys [69984 2024-01-18] (WDKTestCert Nmap,133147429230506937 -> Insecure.Com LLC.)
R2 NPF; C:\WINDOWS\System32\drivers\npf.sys [36600 2024-07-23] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R3 ovpn-dco; C:\WINDOWS\System32\drivers\ovpn-dco.sys [91560 2023-03-31] (WDKTestCert lev,132435948852968539 -> OpenVPN, Inc)
S3 PCAN_USB; C:\WINDOWS\System32\drivers\PCAN_USB.sys [373808 2022-09-23] (Microsoft Windows Hardware Compatibility Publisher -> PEAK-System Technik GmbH, Darmstadt, Germany)
S3 rtucx22x64; C:\WINDOWS\System32\DriverStore\FileRepository\rtucx22x64.inf_amd64_a6eb3abe5befec7d\rtucx22x64.sys [1876424 2024-04-24] (Realtek Semiconductor Corp. -> Realtek Corporation)
S3 rtux64w10; C:\WINDOWS\System32\DriverStore\FileRepository\rtux64w10.inf_amd64_03831aeaaa2c730e\rtux64w10.sys [683520 2022-05-07] (Microsoft Windows -> Realtek Corporation)
R3 tap_ovpnconnect; C:\WINDOWS\System32\drivers\tap_ovpnconnect.sys [40448 2024-01-31] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R3 USBPcap; C:\WINDOWS\system32\DRIVERS\USBPcap.sys [52872 2020-05-22] (Tomasz Moń -> USBPcap)
S3 VBoxNetAdp; C:\WINDOWS\System32\drivers\VBoxNetAdp6.sys [254352 2024-05-02] (Oracle Corporation -> Oracle and/or its affiliates)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [265224 2024-05-02] (Oracle Corporation -> Oracle and/or its affiliates)
R1 VBoxSup; C:\WINDOWS\system32\DRIVERS\VBoxSup.sys [1063752 2024-05-02] (Oracle Corporation -> Oracle and/or its affiliates)
R1 veracrypt; C:\WINDOWS\System32\drivers\veracrypt.sys [813112 2024-07-24] (Microsoft Windows Hardware Compatibility Publisher -> IDRIX)
S3 vmbusproxy; C:\WINDOWS\system32\drivers\vmbusproxy.sys [94208 2024-01-25] (Microsoft Windows -> )
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [22080 2024-08-09] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [602504 2024-08-09] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105864 2024-08-09] (Microsoft Windows -> Microsoft Corporation)
S3 wfpcapture; C:\WINDOWS\System32\Drivers\wfpcapture.sys [64728 2016-03-22] (Microsoft Corporation -> Microsoft Corporation)
U4 npcap_wifi; kein ImagePath
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-08-13 08:26 - 2024-08-13 08:26 - 000234168 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt11.sys
2024-08-13 08:26 - 2024-08-13 08:26 - 000189776 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2024-08-13 08:26 - 2024-08-13 08:26 - 000012124 __RSH C:\ProgramData\ntuser.pol
2024-08-13 08:10 - 2024-08-13 08:27 - 000000000 ____D C:\FRST
2024-08-13 08:07 - 2024-08-13 08:27 - 000000000 ____D C:\Verdacht_RAT
2024-08-13 07:42 - 2024-08-13 07:55 - 000000000 ____D C:\Users\ALB\AppData\Local\Malwarebytes
2024-08-13 07:42 - 2024-08-13 07:42 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2024-08-13 07:42 - 2024-08-13 07:42 - 000002081 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2024-08-13 07:42 - 2024-08-13 07:42 - 000000000 ____D C:\ProgramData\Malwarebytes
2024-08-13 07:42 - 2024-08-13 07:42 - 000000000 ____D C:\Program Files\Malwarebytes
2024-08-13 07:41 - 2024-08-13 07:41 - 002596072 _____ (Malwarebytes) C:\Users\ALB\Downloads\MBSetup.exe
2024-08-13 07:37 - 2024-08-13 07:37 - 000726096 _____ C:\WINDOWS\system32\perfh007.dat
2024-08-13 07:37 - 2024-08-13 07:37 - 000150616 _____ C:\WINDOWS\system32\perfc007.dat
2024-08-12 16:29 - 2024-08-12 16:29 - 613127064 _____ C:\Users\ALB\Desktop\16.20-16.29_Anschauen.pcapng
2024-08-12 16:25 - 2024-08-12 16:26 - 000000000 ____D C:\Users\ALB\Desktop\1
2024-08-12 13:15 - 2024-08-12 14:42 - 000000000 ____D C:\Users\ALB\Desktop\Shots
2024-08-12 11:49 - 2024-08-12 11:49 - 003053819 _____ C:\Users\ALB\Desktop\2.json
2024-08-12 11:46 - 2024-08-12 11:46 - 007311491 _____ C:\Users\ALB\Desktop\Aufzeichnungverkerhr.json
2024-08-12 11:27 - 2024-08-12 11:27 - 000715780 _____ C:\Users\ALB\Desktop\Aufzeichnung1.txt
2024-08-12 11:23 - 2024-08-12 11:23 - 026633908 _____ C:\Users\ALB\Desktop\Aufzeichnung.pcapng
2024-08-12 11:18 - 2024-08-12 11:18 - 000029469 _____ C:\WINDOWS\system32\PktMon.etl
2024-08-12 11:17 - 2024-08-12 11:18 - 000264480 _____ C:\WINDOWS\system32\readable_output.txt
2024-08-12 09:20 - 2024-08-12 09:30 - 000000000 ____D C:\csv
2024-08-09 13:04 - 2024-08-09 13:05 - 000000000 ____D C:\wazuh-docker
2024-08-09 12:12 - 2024-08-09 12:12 - 000000000 ____D C:\Users\ALB\.chocolatey
2024-08-09 10:09 - 2024-08-09 10:09 - 000005367 _____ C:\Users\ALB\Downloads\Testhandbuch_Final.md
2024-08-09 10:05 - 2024-08-09 10:05 - 000005416 _____ C:\Users\ALB\Downloads\Testhandbuch_Updated.md
2024-08-09 10:02 - 2024-08-09 10:02 - 000004099 _____ C:\Users\ALB\Downloads\Testhandbuch.md
2024-08-09 08:26 - 2024-08-09 08:26 - 020386224 _____ (Famatech Corp. ) C:\Users\ALB\Downloads\Advanced_Port_Scanner_2.5.3869.exe
2024-08-08 10:35 - 2024-08-08 10:35 - 001446818 _____ C:\Users\ALB\Downloads\LicenseGenerator.zip
2024-08-08 10:31 - 2024-08-08 10:38 - 000000000 ____D C:\Users\ALB\Desktop\Romann Welker
2024-08-08 10:15 - 2024-08-08 10:15 - 000000000 ____D C:\WINDOWS\ABR
2024-08-08 10:14 - 2024-08-08 10:16 - 000000000 ____D C:\HiJackThis
2024-08-08 10:14 - 2024-08-08 10:14 - 004369651 _____ C:\Users\ALB\Downloads\HiJackThis.zip
2024-08-08 10:06 - 2024-08-08 10:06 - 009033217 _____ C:\Users\ALB\Downloads\RevoUninstaller_Portable.zip
2024-08-08 10:06 - 2024-08-08 10:06 - 000000000 ____D C:\Users\ALB\Downloads\RevoUninstaller_Portable
2024-08-08 09:19 - 2024-08-08 09:19 - 000005223 _____ C:\Users\ALB\docker-compose.yml
2024-08-08 09:18 - 2024-08-08 09:18 - 000000000 ____D C:\ProgramData\shimgen
2024-08-08 09:01 - 2024-08-08 09:01 - 000000000 ____D C:\ProgramData\ChocolateyHttpCache
2024-08-08 07:46 - 2024-08-08 07:46 - 000000000 _____ C:\Users\ALB\Desktop\Textdokument (neu).txt
2024-08-07 10:41 - 2024-08-07 10:41 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-08-07 10:15 - 2024-08-07 10:48 - 000000000 ____D C:\Users\ALB\Downloads\Sicherheit
2024-08-07 08:42 - 2024-08-08 07:47 - 000000000 ____D C:\Users\ALB\Desktop\Tickets
2024-08-06 16:08 - 2024-08-06 16:08 - 003459165 _____ C:\Users\ALB\Downloads\ProcessExplorer.zip
2024-08-06 16:08 - 2024-08-06 16:08 - 000000000 ____D C:\Users\ALB\Downloads\ProcessExplorer
2024-08-06 12:50 - 2024-08-06 12:50 - 000014852 _____ C:\Users\ALB\Downloads\Config.nlgc
2024-08-05 15:37 - 2024-08-05 15:37 - 000000062 _____ C:\Users\ALB\Downloads\error_event_log_2024-08-05.csv
2024-08-05 14:57 - 2024-08-05 14:57 - 002212676 _____ C:\Users\ALB\Desktop\8988303000004627620.pcapng
2024-08-05 13:25 - 2024-06-05 22:14 - 005545032 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\Netwtw14.sys
2024-08-05 13:25 - 2024-06-05 22:13 - 001496136 _____ (Intel Corporation) C:\WINDOWS\system32\IntelIHVRouter14.dll
2024-08-05 13:09 - 2024-08-05 13:09 - 000001519 _____ C:\Users\ALB\Downloads\gitattributes
2024-08-05 13:08 - 2024-08-05 13:08 - 000000000 ____D C:\Users\ALB\Downloads\mistralaiMamba-Codestral-7B-v0.1
2024-08-05 13:03 - 2024-08-05 13:29 - 000000000 ____D C:\Users\ALB\Downloads\Meta-Llama-3-8B-Instruct.Q8_0.llamafile
2024-08-05 08:06 - 2024-08-05 08:06 - 000008736 _____ C:\Users\ALB\Downloads\events_2024-08-05T06_06_58.708Z.csv
2024-08-05 07:57 - 2024-08-05 07:58 - 000000000 ____D C:\Users\ALB\Desktop\Verbesserungsvorschläge
2024-08-02 08:54 - 2024-08-02 10:31 - 000000000 ____D C:\Users\ALB\Downloads\llava-v1.5-7b-q4.llamafile
2024-08-01 13:00 - 2024-08-05 12:58 - 000000000 ____D C:\Users\ALB\Downloads\Meta-Llama-3-8B-Instruct.Q5_K_M.llamafile
2024-08-01 12:58 - 2024-08-01 12:58 - 000000000 ____D C:\Users\ALB\AppData\Local\Adaware
2024-08-01 11:57 - 2024-08-01 11:57 - 000000000 ____D C:\ProgramData\WinaeroTweaker
2024-08-01 09:53 - 2024-08-04 13:46 - 000000000 ____D C:\Users\ALB\Downloads\winaerotweaker
2024-08-01 09:53 - 2024-08-01 09:53 - 005471798 _____ C:\Users\ALB\Downloads\winaerotweaker.zip
2024-08-01 08:48 - 2024-08-01 08:48 - 000545233 _____ C:\Users\ALB\Downloads\cru-1.5.2.zip
2024-08-01 08:48 - 2024-08-01 08:48 - 000000000 ____D C:\Users\ALB\Downloads\cru-1.5.2
2024-08-01 08:38 - 2024-07-11 00:29 - 000121872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2024-08-01 08:37 - 2024-07-11 21:32 - 002040576 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2024-08-01 08:37 - 2024-07-11 21:32 - 002040576 _____ C:\WINDOWS\system32\vulkaninfo.exe
2024-08-01 08:37 - 2024-07-11 21:32 - 001583872 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2024-08-01 08:37 - 2024-07-11 21:32 - 001583872 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2024-08-01 08:37 - 2024-07-11 21:32 - 001446656 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2024-08-01 08:37 - 2024-07-11 21:32 - 001446656 _____ C:\WINDOWS\system32\vulkan-1.dll
2024-08-01 08:37 - 2024-07-11 21:32 - 001296640 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2024-08-01 08:37 - 2024-07-11 21:32 - 001296640 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2024-08-01 08:37 - 2024-07-11 21:32 - 000477704 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2024-08-01 08:37 - 2024-07-11 21:32 - 000374288 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2024-08-01 08:37 - 2024-07-11 21:29 - 000669816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2024-08-01 08:37 - 2024-07-11 21:29 - 000505992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2024-08-01 08:37 - 2024-07-11 21:28 - 002178160 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2024-08-01 08:37 - 2024-07-11 21:28 - 001629832 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2024-08-01 08:37 - 2024-07-11 21:28 - 001546760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2024-08-01 08:37 - 2024-07-11 21:28 - 001202704 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2024-08-01 08:37 - 2024-07-11 21:28 - 001079432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2024-08-01 08:37 - 2024-07-11 21:28 - 001034360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2024-08-01 08:37 - 2024-07-11 21:28 - 000856584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2024-08-01 08:37 - 2024-07-11 21:28 - 000797320 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2024-08-01 08:37 - 2024-07-11 21:27 - 016199688 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2024-08-01 08:37 - 2024-07-11 21:27 - 014270072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2024-08-01 08:37 - 2024-07-11 21:27 - 006914056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2024-08-01 08:37 - 2024-07-11 21:27 - 005910664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2024-08-01 08:37 - 2024-07-11 21:27 - 005349408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2024-08-01 08:37 - 2024-07-11 21:27 - 003788400 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2024-08-01 08:37 - 2024-07-11 21:27 - 000461432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2024-08-01 08:37 - 2024-07-11 21:26 - 007133048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2024-08-01 08:37 - 2024-07-11 21:26 - 000853112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2024-08-01 08:37 - 2024-07-11 21:25 - 006211816 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2024-08-01 08:37 - 2024-07-11 00:29 - 000128301 _____ C:\WINDOWS\system32\nvinfo.pb
2024-07-31 15:32 - 2024-07-31 15:32 - 063239646 _____ C:\Users\ALB\Downloads\llamafile-0.8.12.zip
2024-07-31 15:32 - 2024-07-31 15:32 - 000000000 ____D C:\Users\ALB\Downloads\llamafile-0.8.12
2024-07-31 13:43 - 2024-07-31 14:00 - 000000000 ____D C:\Uebrwachung
2024-07-31 13:39 - 2024-07-31 13:39 - 000195040 _____ C:\Users\ALB\Downloads\USBPcapSetup-1.5.4.0.exe
2024-07-31 13:08 - 2024-07-31 13:42 - 000000000 ____D C:\Users\ALB\.zenmap
2024-07-31 09:13 - 2024-07-31 09:13 - 001912412 _____ C:\Users\ALB\Desktop\2.pdf
2024-07-31 09:12 - 2024-07-31 09:12 - 001836388 _____ C:\Users\ALB\Desktop\1.pdf
2024-07-31 08:09 - 2024-07-31 08:09 - 000003181 _____ C:\Users\ALB\Downloads\alloy-voice-assistant-main pop2pop3.zip
2024-07-31 08:06 - 2024-07-31 08:06 - 000003965 _____ C:\Users\ALB\Downloads\alloy-voice-assistant-main ishaqahmad41455 DOCKER.zip
2024-07-31 08:03 - 2024-07-31 08:03 - 000004152 _____ C:\Users\ALB\Downloads\A-voice-assistant-main.zip
2024-07-31 08:02 - 2024-07-31 08:02 - 000004820 _____ C:\Users\ALB\Downloads\alloy-voice-assistant-main he-huang-1982.zip
2024-07-31 07:59 - 2024-07-31 07:59 - 000004185 _____ C:\Users\ALB\Downloads\alloy-voice-assistant-main shiv19.zip
2024-07-31 07:56 - 2024-07-31 07:56 - 000004888 _____ C:\Users\ALB\Downloads\alloy-voice-assistant-main kemmeny.zip
2024-07-30 16:09 - 2024-07-30 16:09 - 000000945 _____ C:\Users\ALB\Desktop\Projekte - Verknüpfung.lnk
2024-07-29 16:17 - 2024-07-29 16:17 - 012716101 _____ C:\Users\ALB\Downloads\netscan_portable.zip
2024-07-29 16:17 - 2024-07-29 16:17 - 000000000 ____D C:\Users\ALB\Downloads\netscan_portable
2024-07-29 16:03 - 2024-07-29 16:03 - 000000000 ____D C:\Users\ALB\AppData\Roaming\Suchtool
2024-07-29 11:12 - 2024-07-29 11:13 - 000000000 ____D C:\Users\ALB\Downloads\ffmpeg-7.0.1-full_build
2024-07-29 11:12 - 2024-07-29 11:12 - 051939996 _____ C:\Users\ALB\Downloads\ffmpeg-7.0.1-full_build.7z
2024-07-29 10:45 - 2024-07-29 10:45 - 000006723 _____ C:\Users\ALB\Downloads\AI-Assistant-with-Webcam-and-Desktop-Integration-main_wildownes.zip
2024-07-29 10:44 - 2024-07-29 10:44 - 000004647 _____ C:\Users\ALB\Downloads\dan-voice-assistant-main.zip
2024-07-29 10:36 - 2024-07-29 10:36 - 001943154 _____ C:\Users\ALB\Downloads\alloy-voice-assistant-main QIN2DIM.zip
2024-07-29 10:30 - 2024-07-29 10:30 - 000014280 _____ C:\Users\ALB\Downloads\alloy-voice-assistant-main KevinBean.zip
2024-07-29 10:23 - 2024-07-29 10:23 - 000049915 _____ C:\Users\ALB\Downloads\alloy-voice-assistant-main Paul Cutcliffe.zip
2024-07-29 10:19 - 2024-07-29 10:19 - 000004152 _____ C:\Users\ALB\Downloads\A-voice-assistant-main OLIMIEMMA.zip
2024-07-29 09:54 - 2024-07-29 09:54 - 000004149 _____ C:\Users\ALB\Downloads\Katie_Paxton-Fear_Tools.md
2024-07-29 09:25 - 2024-08-13 08:26 - 000000000 ___SD C:\Users\ALB\ownCloud
2024-07-29 09:25 - 2024-07-29 09:25 - 000000000 ____D C:\Users\ALB\AppData\Local\ownCloud
2024-07-29 09:24 - 2024-08-13 08:26 - 000000000 ____D C:\Users\ALB\AppData\Roaming\ownCloud
2024-07-29 09:24 - 2024-07-29 09:24 - 022024192 _____ C:\Users\ALB\Downloads\ownCloud-5.3.1.14018.x64.msi
2024-07-29 09:24 - 2024-07-29 09:24 - 000001872 _____ C:\Users\Public\Desktop\ownCloud.lnk
2024-07-29 09:24 - 2024-07-29 09:24 - 000001024 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ownCloud.lnk
2024-07-29 09:24 - 2024-07-29 09:24 - 000000000 ____D C:\Program Files\ownCloud
2024-07-29 08:58 - 2024-07-29 08:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Veeam
2024-07-29 08:58 - 2024-07-29 08:58 - 000000000 ____D C:\Program Files\Common Files\Veeam
2024-07-26 10:15 - 2024-07-26 10:15 - 000001237 _____ C:\Users\Public\Desktop\Synology Assistant.lnk
2024-07-26 10:15 - 2024-07-26 10:15 - 000000000 ____D C:\ProgramData\Synology
2024-07-26 10:15 - 2024-07-26 10:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Synology
2024-07-26 10:14 - 2024-07-26 10:14 - 051380072 _____ C:\Users\ALB\Downloads\SynologyAssistantSetup-4.2-3179.exe
2024-07-26 10:14 - 2024-07-26 10:14 - 000000000 ____D C:\Program Files (x86)\Synology
2024-07-26 05:04 - 2024-07-26 05:04 - 000026169 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-07-26 05:04 - 2024-07-26 05:04 - 000026169 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2024-07-25 16:46 - 2024-07-25 16:47 - 013009435 _____ C:\Users\ALB\Desktop\view-source_192.168.168.164_new_service_index.php_service=pam#.html
2024-07-25 11:29 - 2024-07-25 11:29 - 006082635 _____ C:\Users\ALB\Downloads\AI mit Arnie · ChatBots bauen & Technik (1).html
2024-07-25 11:29 - 2024-07-25 11:29 - 004873198 _____ C:\Users\ALB\Downloads\AI mit Arnie · ChatBots bauen & Technik.html
2024-07-24 16:36 - 2024-07-24 16:36 - 000027216 _____ C:\Users\ALB\Downloads\obs-websocket-tester.html
2024-07-24 16:12 - 2024-07-24 16:12 - 000000016 _____ C:\Users\ALB\AppData\Roaming\obs-virtualcam.txt
2024-07-24 15:55 - 2024-07-24 15:55 - 000970767 _____ C:\Users\ALB\Downloads\IMG-20220703-WA0007.jpeg
2024-07-24 14:45 - 2024-08-09 13:15 - 000000000 ____D C:\Users\ALB\AppData\Roaming\Code
2024-07-24 14:45 - 2024-08-09 12:10 - 000000000 ____D C:\Microsoft VS Code
2024-07-24 14:45 - 2024-08-08 18:35 - 000000000 ____D C:\Users\ALB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Visual Studio Code
2024-07-24 14:45 - 2024-07-26 07:58 - 000000783 _____ C:\Users\ALB\Desktop\Visual Studio Code.lnk
2024-07-24 14:45 - 2024-07-24 14:45 - 000000000 ____D C:\Users\ALB\.vscode
2024-07-24 14:27 - 2024-07-24 14:27 - 000000141 _____ C:\Users\ALB\Desktop\lange pfade.reg
2024-07-24 14:26 - 2024-07-24 14:26 - 000000606 _____ C:\Users\ALB\Desktop\zeichen probleme beheben.reg
2024-07-24 14:25 - 2024-07-24 14:25 - 000000603 _____ C:\Users\ALB\Desktop\zurück.reg
2024-07-24 14:06 - 2024-07-24 14:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Git
2024-07-24 14:06 - 2024-07-24 14:06 - 000000000 ____D C:\Program Files\Git
2024-07-24 14:05 - 2024-07-24 14:05 - 068131584 _____ (The Git Development Community ) C:\Users\ALB\Downloads\Git-2.45.2-64-bit.exe
2024-07-24 13:44 - 2024-07-24 13:44 - 000001489 _____ C:\Users\ALB\Desktop\Shared - Verknüpfung.lnk
2024-07-24 13:30 - 2024-07-24 13:30 - 000000000 _____ C:\Users\ALB\.gitconfig
2024-07-24 13:27 - 2024-07-24 13:27 - 000000000 ____D C:\Users\ALB\source
2024-07-24 11:30 - 2024-08-09 03:12 - 000002359 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge Dev.lnk
2024-07-24 11:30 - 2024-08-09 03:12 - 000002318 _____ C:\Users\Public\Desktop\Microsoft Edge Dev.lnk
2024-07-24 11:14 - 2024-07-24 11:14 - 000000915 _____ C:\Users\ALB\Desktop\KeePass (2).lnk
2024-07-24 11:12 - 2024-07-24 11:13 - 000000174 _____ C:\Users\ALB\Desktop\SYMLINK EDGE.txt
2024-07-24 11:07 - 2024-07-24 11:07 - 000553313 _____ C:\Users\ALB\Downloads\Symlink.Creator.1.2.7.zip
2024-07-24 11:07 - 2024-07-24 11:07 - 000000000 ____D C:\Users\ALB\Downloads\Symlink.Creator.1.2.7
2024-07-24 11:07 - 2024-03-06 00:45 - 003440128 _____ (Arnob Paul) C:\Users\ALB\Downloads\SymlinkCreator.exe
2024-07-24 10:13 - 2024-07-24 10:47 - 000000000 ____D C:\Users\ALB\AppData\Roaming\VeraCrypt
2024-07-24 10:13 - 2024-07-24 10:19 - 000000000 ____D C:\DATEN_B
2024-07-24 10:11 - 2024-07-24 10:11 - 000000888 _____ C:\Users\Public\Desktop\VeraCrypt.lnk
2024-07-24 10:11 - 2024-07-24 10:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VeraCrypt
2024-07-24 10:11 - 2024-07-24 10:11 - 000000000 ____D C:\Program Files\VeraCrypt
2024-07-24 10:10 - 2024-07-24 10:11 - 035282192 _____ (IDRIX) C:\Users\ALB\Downloads\VeraCrypt Setup 1.26.7.exe
2024-07-24 10:09 - 2024-07-24 10:09 - 031213802 _____ C:\Users\ALB\Downloads\VeraCrypt_1.26.7.zip
2024-07-24 10:09 - 2024-07-24 10:09 - 000000000 ____D C:\Users\ALB\Downloads\VeraCrypt_1.26.7
2024-07-24 09:16 - 2024-07-26 05:29 - 000000000 ____D C:\Program Files\Hyper-V
2024-07-24 09:16 - 2024-07-24 09:16 - 000000000 ____D C:\WINDOWS\system32\BestPractices
2024-07-24 08:14 - 2024-07-24 08:14 - 075968440 _____ (Piriform Software Ltd) C:\Users\ALB\Downloads\ccsetup626.exe
2024-07-23 14:57 - 2024-07-23 14:57 - 000000000 ____D C:\Users\ALB\Downloads\VIGI Configuration Tools V1.1.4
2024-07-23 14:57 - 2024-07-23 14:57 - 000000000 ____D C:\ProgramData\Oracle
2024-07-23 14:54 - 2024-07-24 08:49 - 000000000 ____D C:\Users\ALB\AppData\Roaming\TP-Link
2024-07-23 14:54 - 2024-07-23 14:57 - 000000000 ____D C:\Users\ALB\Documents\TP-Link
2024-07-23 14:54 - 2024-07-23 14:53 - 000036600 _____ (Riverbed Technology, Inc.) C:\WINDOWS\system32\Drivers\npf.sys
2024-07-23 14:53 - 2024-07-24 08:49 - 000000000 ____D C:\Program Files (x86)\TP-Link
2024-07-23 14:53 - 2024-07-23 14:54 - 289655972 _____ C:\Users\ALB\Downloads\VIGI Configuration Tools V1.1.4.zip
2024-07-23 14:53 - 2024-07-23 14:53 - 093569542 _____ C:\Users\ALB\Downloads\VIGI Security Manager_setup_1.6.85.zip
2024-07-23 14:53 - 2024-07-23 14:53 - 000000000 ____D C:\Users\ALB\Downloads\VIGI Security Manager_setup_1.6.85
2024-07-23 14:35 - 2024-07-23 15:04 - 000000084 _____ C:\Users\ALB\advanced_ip_scanner_MAC.bin
2024-07-23 14:35 - 2024-07-23 15:04 - 000000015 _____ C:\Users\ALB\advanced_ip_scanner_Comments.bin
2024-07-23 14:35 - 2024-07-23 15:04 - 000000015 _____ C:\Users\ALB\advanced_ip_scanner_Aliases.bin
2024-07-23 13:28 - 2024-07-23 13:28 - 000000000 ____D C:\Users\ALB\AppData\Roaming\Microsoft\MessageAnalyzer
2024-07-23 13:28 - 2024-07-23 13:28 - 000000000 ____D C:\Users\ALB\AppData\Local\IsolatedStorage
2024-07-23 13:27 - 2024-07-23 13:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Message Analyzer
2024-07-23 13:25 - 2024-07-23 13:31 - 000000000 ____D C:\Users\ALB\Documents\MessageAnalyzer
2024-07-23 13:25 - 2024-07-23 13:25 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_wfpcapture_01011.Wdf
2024-07-23 13:25 - 2024-07-23 13:25 - 000000000 ____D C:\Program Files\Microsoft Message Analyzer
2024-07-23 10:24 - 2024-07-23 10:24 - 000440481 _____ C:\Users\ALB\Downloads\Übersicht.html
2024-07-23 10:22 - 2024-07-23 10:23 - 000213868 _____ C:\Users\ALB\Downloads\Home Office Januar.html
2024-07-23 10:22 - 2024-07-23 10:23 - 000210539 _____ C:\Users\ALB\Downloads\Home Office Februar.html
2024-07-23 10:22 - 2024-07-23 10:23 - 000209725 _____ C:\Users\ALB\Downloads\Home Office März.html
2024-07-23 10:22 - 2024-07-23 10:22 - 000211401 _____ C:\Users\ALB\Downloads\Home Office MAI.html
2024-07-23 10:22 - 2024-07-23 10:22 - 000210363 _____ C:\Users\ALB\Downloads\Home Office April.html
2024-07-23 10:20 - 2024-07-23 10:20 - 000211387 _____ C:\Users\ALB\Downloads\Home Offfice Juni.html
2024-07-23 10:19 - 2024-07-23 10:19 - 000207966 _____ C:\Users\ALB\Downloads\Home Office Juli.html
2024-07-22 15:33 - 2024-07-22 15:33 - 000307667 _____ C:\Users\ALB\Downloads\Steuerung.pdf
2024-07-22 15:27 - 2024-07-22 15:27 - 001063586 _____ C:\Users\ALB\Downloads\Home Office (2).html
2024-07-22 14:08 - 2024-07-22 14:07 - 000996656 _____ (Simon Tatham) C:\Users\ALB\Downloads\plink (1) - Kopie.exe
2024-07-22 14:07 - 2024-07-22 14:07 - 000996656 _____ (Simon Tatham) C:\Users\ALB\Downloads\plink (1).exe
2024-07-22 13:17 - 2024-07-22 13:17 - 000002232 _____ C:\Users\ALB\Desktop\Nmap - Zenmap GUI.lnk
2024-07-22 13:17 - 2024-07-22 13:17 - 000000000 ____D C:\Users\ALB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Nmap
2024-07-22 13:16 - 2024-07-22 13:17 - 000000000 ____D C:\Program Files (x86)\Nmap
2024-07-22 13:16 - 2024-07-22 13:16 - 000003460 _____ C:\WINDOWS\system32\Tasks\npcapwatchdog
2024-07-22 13:16 - 2024-07-22 13:16 - 000000000 ____D C:\WINDOWS\SysWOW64\Npcap
2024-07-22 13:15 - 2024-07-22 13:15 - 033969480 _____ (Insecure.org) C:\Users\ALB\Downloads\nmap-7.95-setup.exe
2024-07-22 13:12 - 2024-07-22 13:12 - 001882953 _____ C:\Users\ALB\Downloads\rustscan-2.3.0-x86_64-windows.zip
2024-07-22 13:12 - 2024-07-22 13:12 - 000000000 ____D C:\Users\ALB\Downloads\rustscan-2.3.0-x86_64-windows
2024-07-19 09:25 - 2024-07-19 09:25 - 000000000 ____D C:\Users\ALB\unifi
2024-07-19 09:10 - 2024-07-19 09:10 - 000000000 ____D C:\Users\ALB\AppData\Local\fanal
2024-07-17 11:59 - 2024-07-17 11:59 - 000007177 _____ C:\Users\ALB\Downloads\f4-e2-c6-67-6e-e8.json
2024-07-16 14:58 - 2024-07-23 13:31 - 000000128 _____ C:\Users\ALB\AppData\Local\PUTTY.RND
2024-07-16 14:55 - 2024-07-16 14:55 - 003431424 _____ C:\Users\ALB\Downloads\putty-0.81-installer.msi
2024-07-16 14:55 - 2024-07-16 14:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PuTTY
2024-07-16 14:55 - 2024-07-16 14:55 - 000000000 ____D C:\Program Files (x86)\PuTTY
2024-07-16 14:54 - 2024-07-16 14:54 - 000001676 _____ C:\Users\ALB\Desktop\UNIFISSH.lnk
2024-07-16 13:17 - 2024-07-16 13:17 - 000002146 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Docker Desktop.lnk
2024-07-16 13:17 - 2024-07-16 13:17 - 000002140 _____ C:\Users\ALB\Desktop\Docker Desktop.lnk
2024-07-16 13:15 - 2024-07-16 13:17 - 000000000 ____D C:\Program Files\Docker
2024-07-16 13:13 - 2024-07-16 13:13 - 000000000 ____D C:\Users\ALB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\docker-desktop
2024-07-16 13:13 - 2024-07-16 13:13 - 000000000 ____D C:\Users\ALB\.azure
2024-07-16 13:13 - 2024-07-16 13:13 - 000000000 ____D C:\Users\ALB\.aws
2024-07-16 13:12 - 2024-08-12 16:40 - 000000000 ____D C:\Users\ALB\AppData\Roaming\Docker Desktop
2024-07-16 13:12 - 2024-08-12 16:39 - 000000000 ____D C:\Users\ALB\.docker
2024-07-16 13:08 - 2024-08-12 16:39 - 000000000 ____D C:\Users\ALB\AppData\Roaming\Docker
2024-07-16 13:08 - 2024-08-09 11:27 - 000000000 ____D C:\ProgramData\DockerDesktop
2024-07-16 13:08 - 2024-07-16 13:17 - 000000000 ____D C:\Users\ALB\AppData\Local\Docker
2024-07-16 09:15 - 2024-07-16 10:22 - 000000000 ____D C:\Users\ALB\AppData\Roaming\AVG
2024-07-16 09:14 - 2024-07-16 10:22 - 000000000 ____D C:\ProgramData\AVG
2024-07-16 09:13 - 2024-07-24 08:15 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2024-07-16 08:01 - 2024-07-16 08:01 - 000001757 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2022.lnk
2024-07-15 14:01 - 2024-07-15 14:01 - 000698686 _____ C:\WINDOWS\system32\gpreport.html
2024-07-15 14:01 - 2024-07-15 14:01 - 000009739 _____ C:\WINDOWS\system32\ics_diagnose_log.txt
2024-07-15 07:39 - 2024-08-08 10:59 - 000000000 ____D C:\Users\ALB\AppData\Roaming\AnyDesk

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-08-13 08:27 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-08-13 08:26 - 2024-07-04 14:20 - 000000000 ____D C:\Users\ALB\AppData\Roaming\OpenVPN Connect
2024-08-13 08:26 - 2024-07-02 14:38 - 000000523 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2024-08-13 08:26 - 2024-01-25 14:56 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-08-13 08:26 - 2024-01-25 14:53 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2024-08-13 08:26 - 2024-01-22 11:01 - 000000000 ____D C:\ProgramData\Veeam
2024-08-13 08:26 - 2022-08-19 07:21 - 000000128 _____ C:\WINDOWS\system32\config\netlogon.ftl
2024-08-13 08:26 - 2022-08-18 09:05 - 000000000 ____D C:\ProgramData\NVIDIA
2024-08-13 08:26 - 2022-08-18 08:47 - 000012288 ___SH C:\DumpStack.log.tmp
2024-08-13 08:26 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ServiceState
2024-08-13 08:26 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-08-13 08:25 - 2022-05-07 07:17 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2024-08-13 07:42 - 2022-05-07 07:24 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2024-08-13 07:42 - 2022-05-07 07:22 - 000000000 ____D C:\WINDOWS\INF
2024-08-13 07:41 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-08-13 07:37 - 2024-01-25 14:55 - 001671852 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-08-13 07:30 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2024-08-13 07:29 - 2024-01-25 14:53 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-08-12 16:45 - 2024-07-02 09:16 - 000000000 ____D C:\Users\ALB\AppData\Roaming\obs-studio
2024-08-12 16:20 - 2024-06-25 10:27 - 000000000 ____D C:\Users\ALB\AppData\Local\D3DSCache
2024-08-12 07:56 - 2022-08-18 08:47 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-08-09 13:28 - 2022-09-05 15:29 - 000000000 ____D C:\ProgramData\VMware
2024-08-09 13:28 - 2022-09-05 15:29 - 000000000 ____D C:\Program Files (x86)\VMware
2024-08-09 13:23 - 2022-05-07 07:17 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-08-09 13:21 - 2022-05-07 07:24 - 000000000 ___SD C:\WINDOWS\SysWOW64\lxss
2024-08-09 13:21 - 2022-05-07 07:24 - 000000000 ___SD C:\WINDOWS\system32\lxss
2024-08-09 13:18 - 2022-08-18 08:56 - 000000000 ____D C:\ProgramData\Packages
2024-08-09 13:11 - 2024-07-10 13:41 - 000000000 ____D C:\Users\ALB\AppData\Local\CrashDumps
2024-08-09 13:04 - 2024-06-25 10:25 - 000000000 ____D C:\Users\ALB
2024-08-09 12:26 - 2024-01-25 14:56 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2024-08-09 12:26 - 2022-10-13 11:55 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2024-08-09 12:26 - 2022-10-13 11:55 - 000002061 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2024-08-09 12:15 - 2022-08-18 08:47 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2024-08-07 08:39 - 2024-06-25 10:50 - 000000000 ____D C:\Users\ALB\AppData\Roaming\Microsoft\Excel
2024-08-06 16:47 - 2024-06-25 10:26 - 000000000 ____D C:\Users\ALB\AppData\Roaming\Microsoft\Word
2024-08-01 11:31 - 2024-07-02 13:50 - 000000000 ____D C:\Python311
2024-08-01 11:01 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2024-08-01 09:56 - 2024-06-25 10:23 - 000003636 _____ C:\WINDOWS\system32\Tasks\CreateExplorerShellUnelevatedTask
2024-08-01 08:39 - 2024-07-04 08:53 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2024-08-01 08:35 - 2024-07-04 08:53 - 000000000 ____D C:\Users\ALB\AppData\Local\NVIDIA Corporation
2024-07-31 12:22 - 2024-06-25 10:25 - 000000000 ____D C:\Users\ALB\AppData\Local\Packages
2024-07-29 15:46 - 2023-04-28 09:53 - 000000000 ____D C:\Program Files (x86)\Dia
2024-07-29 15:44 - 2022-08-19 07:24 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2024-07-29 09:25 - 2024-06-25 10:25 - 000000000 ___SD C:\Users\ALB\AppData\Roaming\Microsoft\Credentials
2024-07-28 17:32 - 2024-07-02 16:26 - 000000859 _____ C:\ProgramData\Microsoft\Windows\Start Menu\UniGetUI (formerly WingetUI).lnk
2024-07-28 17:32 - 2024-07-02 16:26 - 000000853 _____ C:\Users\Public\Desktop\UniGetUI (formerly WingetUI).lnk
2024-07-28 17:32 - 2024-07-02 16:26 - 000000000 ____D C:\Program Files\UniGetUI
2024-07-28 15:06 - 2024-01-25 14:56 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-07-28 15:06 - 2024-01-25 14:56 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-07-26 07:31 - 2024-07-02 16:40 - 000000000 ____D C:\Users\ALB\AppData\Roaming\TortoiseHg
2024-07-26 05:47 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\USOPrivate
2024-07-26 05:30 - 2024-01-25 14:53 - 000495104 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-07-26 05:29 - 2022-05-07 12:39 - 000000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents
2024-07-26 05:29 - 2022-05-07 12:39 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2024-07-26 05:29 - 2022-05-07 07:24 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-07-26 05:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\WUModels
2024-07-26 05:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\UUS
2024-07-26 05:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2024-07-26 05:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2024-07-26 05:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemResources
2024-07-26 05:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemApps
2024-07-26 05:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2024-07-26 05:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2024-07-26 05:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-07-26 05:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\Dism
2024-07-26 05:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\appraiser
2024-07-26 05:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ShellExperiences
2024-07-26 05:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ShellComponents
2024-07-26 05:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\Provisioning
2024-07-26 05:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2024-07-26 05:29 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-07-24 14:57 - 2024-07-03 15:16 - 000000000 ____D C:\Users\ALB\.cache
2024-07-24 13:56 - 2024-07-02 16:58 - 000000000 ____D C:\Users\ALB\Documents\Visual Studio 2022
2024-07-24 13:54 - 2024-07-02 16:41 - 000000000 ____D C:\Users\ALB\AppData\Roaming\Visual Studio Setup
2024-07-24 13:54 - 2022-11-22 10:41 - 000001433 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio Installer.lnk
2024-07-24 13:36 - 2022-08-19 07:57 - 000000000 ____D C:\ProgramData\Package Cache
2024-07-24 13:30 - 2024-07-02 16:58 - 000000000 ____D C:\Users\ALB\AppData\Roaming\Microsoft\VisualStudio
2024-07-24 13:27 - 2024-07-02 16:58 - 000000000 ____D C:\Users\ALB\AppData\Local\.IdentityService
2024-07-24 11:20 - 2024-06-25 10:25 - 000000000 ____D C:\Users\ALB\AppData\Local\ConnectedDevicesPlatform
2024-07-24 11:18 - 2024-06-25 10:26 - 000002444 _____ C:\Users\ALB\Desktop\Geschäftlich - Edge.lnk
2024-07-24 09:17 - 2024-07-04 08:12 - 000000000 ____D C:\WINDOWS\system32\Npcap
2024-07-24 09:16 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\schemas
2024-07-24 09:14 - 2024-07-10 16:19 - 000000000 ____D C:\Users\ALB\appdaten
2024-07-24 08:50 - 2022-08-19 07:53 - 000000000 ____D C:\Program Files (x86)\Google
2024-07-24 08:11 - 2024-07-11 08:58 - 000000000 ____D C:\Users\ALB\AppData\Roaming\draw.io
2024-07-22 13:16 - 2024-07-04 08:12 - 000000000 ____D C:\Program Files\Npcap
2024-07-16 14:05 - 2024-06-25 10:26 - 000000000 ____D C:\Users\ALB\AppData\Roaming\Microsoft\Office
2024-07-16 10:03 - 2024-07-02 16:26 - 000000000 ____D C:\Users\ALB\.dotnet
2024-07-16 08:04 - 2024-07-04 08:13 - 000001827 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk
2024-07-16 08:04 - 2024-07-04 08:13 - 000001815 _____ C:\Users\Public\Desktop\Wireshark.lnk
2024-07-16 08:04 - 2024-07-04 08:12 - 000000000 ____D C:\Program Files\Wireshark
2024-07-16 08:02 - 2022-11-22 11:00 - 000000000 ____D C:\Program Files\dotnet
2024-07-16 08:01 - 2024-07-02 16:46 - 000000000 ____D C:\Program Files (x86)\dotnet
2024-07-16 08:00 - 2022-11-22 10:41 - 000000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2024-07-16 07:58 - 2024-06-25 10:50 - 000000000 ____D C:\Users\ALB\AppData\Roaming\Notepad++
2024-07-16 07:58 - 2022-12-12 12:00 - 000000877 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk
2024-07-15 13:48 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\ias
2024-07-15 08:39 - 2024-06-25 10:26 - 000000000 ____D C:\Users\ALB\AppData\Local\PlaceholderTileLogoFolder

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2024-07-03 15:16 - 2024-07-03 15:19 - 000000840 _____ () C:\Users\ALB\AppData\Roaming\jd-gui.cfg
2024-07-24 16:12 - 2024-07-24 16:12 - 000000016 _____ () C:\Users\ALB\AppData\Roaming\obs-virtualcam.txt
2024-07-16 14:58 - 2024-07-23 13:31 - 000000128 _____ () C:\Users\ALB\AppData\Local\PUTTY.RND

==================== SigCheckExt =========================

2015-06-26 14:51 - 2015-06-26 14:51 - 000003072 _____ C:\WINDOWS\system32\Microsoft-Pef-WebProxy.dll
2022-06-23 22:48 - 2022-06-23 22:48 - 000332800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D2D1Debug2.dll
2022-06-23 22:53 - 2022-06-23 22:53 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11sdklayers.dll
2022-06-23 22:53 - 2022-06-23 22:53 - 000698368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11_1sdklayers.dll
2022-06-23 22:53 - 2022-06-23 22:53 - 000936960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11_2sdklayers.dll
2024-07-03 15:26 - 2024-07-03 15:26 - 001620576 _____ (Igor Pavlov) C:\Users\ALB\Downloads\7z2407-x64.exe
2024-07-24 11:07 - 2024-03-06 00:45 - 003440128 _____ (Arnob Paul) C:\Users\ALB\Downloads\SymlinkCreator.exe
2024-07-26 10:14 - 2024-07-26 10:14 - 051380072 _____ C:\Users\ALB\Downloads\SynologyAssistantSetup-4.2-3179.exe
2023-04-28 09:52 - 2023-04-28 09:52 - 019620143 _____ (The Dia Developers) C:\Users\JSO\Downloads\dia-setup-0.97.2-2-unsigned.exe
2022-11-22 15:03 - 2022-11-22 15:03 - 000340221 _____ C:\Users\JSO\Downloads\termite-3.4.exe

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)


==================== BCD ================================

Start-Manager für Firmware
--------------------------
Bezeichner              {fwbootmgr}
displayorder            {bootmgr}
                        {8780fd6e-1ec9-11ed-a68c-d90444aa4305}
                        {8780fd6b-1ec9-11ed-a68c-d90444aa4305}
                        {8780fd6c-1ec9-11ed-a68c-d90444aa4305}
                        {8780fd6d-1ec9-11ed-a68c-d90444aa4305}
                        {06e60891-2b90-11ee-8235-806e6f6e6963}
                        {1a0be224-386d-11ef-8265-806e6f6e6963}
                        {1a0be225-386d-11ef-8265-806e6f6e6963}
                        {1a0be226-386d-11ef-8265-806e6f6e6963}
timeout                 0

Windows-Start-Manager
---------------------
Bezeichner              {bootmgr}
device                  partition=\Device\HarddiskVolume3
path                    \EFI\Microsoft\Boot\bootmgfw.efi
description             Windows Boot Manager
locale                  de-DE
inherit                 {globalsettings}
default                 {current}
resumeobject            {8780fd75-1ec9-11ed-a68c-d90444aa4305}
displayorder            {current}
toolsdisplayorder       {memdiag}
timeout                 30

Firmwareanwendung (101fffff)
----------------------------
Bezeichner              {06e60891-2b90-11ee-8235-806e6f6e6963}
description             UEFI HTTPs Boot (MAC:00BE43DE7BA1)

Firmwareanwendung (101fffff)
----------------------------
Bezeichner              {1a0be224-386d-11ef-8265-806e6f6e6963}
description             USB NIC (IPV4)

Firmwareanwendung (101fffff)
----------------------------
Bezeichner              {1a0be225-386d-11ef-8265-806e6f6e6963}
description             USB NIC (IPV6)

Firmwareanwendung (101fffff)
----------------------------
Bezeichner              {1a0be226-386d-11ef-8265-806e6f6e6963}
description             UEFI HTTPs Boot (MAC:00E04C681207)

Firmwareanwendung (101fffff)
----------------------------
Bezeichner              {8780fd6b-1ec9-11ed-a68c-d90444aa4305}
description             ONBOARD NIC (IPV4)

Firmwareanwendung (101fffff)
----------------------------
Bezeichner              {8780fd6c-1ec9-11ed-a68c-d90444aa4305}
description             ONBOARD NIC (IPV6)

Firmwareanwendung (101fffff)
----------------------------
Bezeichner              {8780fd6d-1ec9-11ed-a68c-d90444aa4305}
description             UEFI HTTPs Boot

Firmwareanwendung (101fffff)
----------------------------
Bezeichner              {8780fd6e-1ec9-11ed-a68c-d90444aa4305}
device                  partition=\Device\HarddiskVolume3
path                    \EFI\Boot\BootX64.efi
description             UEFI Samsung SSD 990 EVO 2TB S7GDNS0X101746D 1

Windows-Startladeprogramm
-------------------------
Bezeichner              {8780fd73-1ec9-11ed-a68c-d90444aa4305}
device                  ramdisk=[unknown]\Recovery\WindowsRE\Winre.wim,{8780fd74-1ec9-11ed-a68c-d90444aa4305}
path                    \windows\system32\winload.efi
description             Windows Recovery Environment
locale                  de-de
inherit                 {bootloadersettings}
displaymessage          Recovery
osdevice                ramdisk=[unknown]\Recovery\WindowsRE\Winre.wim,{8780fd74-1ec9-11ed-a68c-d90444aa4305}
systemroot              \windows
nx                      OptIn
bootmenupolicy          Standard
winpe                   Yes

Windows-Startladeprogramm
-------------------------
Bezeichner              {current}
device                  partition=C:
path                    \WINDOWS\system32\winload.efi
description             Windows 11
locale                  de-DE
inherit                 {bootloadersettings}
recoverysequence        {8780fd78-1ec9-11ed-a68c-d90444aa4305}
displaymessageoverride  Recovery
recoveryenabled         Yes
isolatedcontext         Yes
allowedinmemorysettings 0x15000075
osdevice                partition=C:
systemroot              \WINDOWS
resumeobject            {8780fd75-1ec9-11ed-a68c-d90444aa4305}
nx                      OptIn
bootmenupolicy          Standard
hypervisorlaunchtype    Auto

Windows-Startladeprogramm
-------------------------
Bezeichner              {8780fd78-1ec9-11ed-a68c-d90444aa4305}
device                  ramdisk=[\Device\HarddiskVolume5]\Recovery\WindowsRE\Winre.wim,{8780fd79-1ec9-11ed-a68c-d90444aa4305}
path                    \windows\system32\winload.efi
description             Windows Recovery Environment
locale                  de-DE
inherit                 {bootloadersettings}
displaymessage          Recovery
osdevice                ramdisk=[\Device\HarddiskVolume5]\Recovery\WindowsRE\Winre.wim,{8780fd79-1ec9-11ed-a68c-d90444aa4305}
systemroot              \windows
nx                      OptIn
bootmenupolicy          Standard
winpe                   Yes

Wiederaufnahme aus dem Ruhezustand
----------------------------------
Bezeichner              {8780fd75-1ec9-11ed-a68c-d90444aa4305}
device                  partition=C:
path                    \WINDOWS\system32\winresume.efi
description             Windows Resume Application
locale                  de-DE
inherit                 {resumeloadersettings}
recoverysequence        {8780fd78-1ec9-11ed-a68c-d90444aa4305}
recoveryenabled         Yes
isolatedcontext         Yes
allowedinmemorysettings 0x15000075
filedevice              partition=C:
custom:21000026         partition=C:
filepath                \hiberfil.sys
bootmenupolicy          Standard
debugoptionenabled      No

Windows-Speichertestprogramm
----------------------------
Bezeichner              {memdiag}
device                  partition=\Device\HarddiskVolume3
path                    \EFI\Microsoft\Boot\memtest.efi
description             Windows-Speicherdiagnose
locale                  de-DE
inherit                 {globalsettings}
badmemoryaccess         Yes

EMS-Einstellungen
-----------------
Bezeichner              {emssettings}
bootems                 No

Debuggereinstellungen
---------------------
Bezeichner              {dbgsettings}
debugtype               Local

RAM-Defekte
-----------
Bezeichner              {badmemory}

Globale Einstellungen
---------------------
Bezeichner              {globalsettings}
inherit                 {dbgsettings}
                        {emssettings}
                        {badmemory}

Startladeprogramm-Einstellungen
-------------------------------
Bezeichner              {bootloadersettings}
inherit                 {globalsettings}
                        {hypervisorsettings}

Hypervisoreinstellungen
-----------------------
Bezeichner              {hypervisorsettings}
hypervisordebugtype     Serial
hypervisordebugport     1
hypervisorbaudrate      115200

Einstellungen zur Ladeprogrammfortsetzung
-----------------------------------------
Bezeichner              {resumeloadersettings}
inherit                 {globalsettings}

Geräteoptionen
--------------
Bezeichner              {8780fd79-1ec9-11ed-a68c-d90444aa4305}
description             Windows Recovery
ramdisksdidevice        partition=\Device\HarddiskVolume5
ramdisksdipath          \Recovery\WindowsRE\boot.sdi

==================== Ende von FRST.txt ========================
         

--- --- ---

Addition.txt

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-08.2024
durchgeführt von ALB (13-08-2024 08:28:31)
Gestartet von C:\Verdacht_RAT
Microsoft Windows 11 Pro Version 23H2 22631.3958 (X64) (2024-01-25 12:56:15)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-1706817784-3290820598-1487956214-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1706817784-3290820598-1487956214-503 - Limited - Disabled)
Gast (S-1-5-21-1706817784-3290820598-1487956214-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-1706817784-3290820598-1487956214-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Malwarebytes (Enabled - Up to date) {0D452135-A081-B000-D6B6-132E52638543}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: CylancePROTECT (Enabled - Up to date) {69526C9F-C7CF-439E-2AB9-ABB711304251}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 24.07 (x64) (HKLM\...\7-Zip) (Version: 24.07 - Igor Pavlov)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1031-1033-7760-BC15014EA700}) (Version: 24.002.20991 - Adobe)
Adobe Digital Editions 4.5 (HKLM-x32\...\Adobe Digital Editions 4.5) (Version: 4.5.11 - Adobe Systems Incorporated)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601078}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Advanced IP Scanner 2.5.1 (HKLM-x32\...\{3A223684-DC1B-40E8-B579-D1949C8A86EF}) (Version: 2.5.4594.1 - Famatech)
Application Verifier x64 External Package (DesktopEditions) (HKLM\...\{C85A0AA9-2CF5-7B43-C078-4E8B7CE362D2}) (Version: 10.1.22621.3233 - Microsoft) Hidden
Application Verifier x64 External Package (HKLM\...\{10CA1677-8F02-3131-F25C-780BAB52E468}) (Version: 10.1.18362.1 - Microsoft) Hidden
Application Verifier x64 External Package (HKLM\...\{2CBA883F-51A6-3D7D-DBB9-0527D39433CB}) (Version: 10.1.22000.832 - Microsoft) Hidden
Application Verifier x64 External Package (HKLM\...\{8A4CD158-E6B3-6D91-D7DE-10098BC980E2}) (Version: 10.1.19041.685 - Microsoft) Hidden
Application Verifier x64 External Package (OnecoreUAP) (HKLM\...\{2C78EC40-921E-1C02-01FC-A1B6B0489B8C}) (Version: 10.1.22621.3233 - Microsoft) Hidden
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1691.6 - Piriform Software) Hidden
ClickOnce Bootstrapper Package for Microsoft .NET Framework (HKLM-x32\...\{22E13608-4DB0-4977-A267-3AAFA09CD54A}) (Version: 4.8.09037 - Microsoft Corporation) Hidden
Cylance PROTECT (HKLM\...\{2E64FC5C-9286-4A31-916B-0D8AE4B22954}) (Version: 3.0.1000.25 - Cylance, Inc.)
DiagnosticsHub_CollectionService (HKLM\...\{92A47FAD-5C85-400C-8B00-698D4C5F7031}) (Version: 17.10.34627 - Microsoft Corporation) Hidden
Docker Desktop (HKLM\...\Docker Desktop) (Version: 4.32.0 - Docker Inc.)
draw.io 24.6.4 (HKLM\...\27a75bf3-be48-5c35-934f-8491cf108abe) (Version: 24.6.4 - JGraph)
Entity Framework 6.2.0 Tools  for Visual Studio 2022 (HKLM-x32\...\{F0495FAC-8E08-4F2F-801C-12880B242781}) (Version: 6.2.0.0 - Microsoft Corporation) Hidden
Flash Magic 10.82 (HKLM-x32\...\Flash Magic_is1) (Version:  - Embedded Systems Academy, Inc.)
Git (HKLM\...\Git_is1) (Version: 2.45.2 - The Git Development Community)
icecap_collection_neutral (HKLM-x32\...\{8CBD0D8C-4720-443D-A0DA-93FE812E62D0}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
icecap_collection_x64 (HKLM\...\{60FF723D-CD10-4C2A-99BD-85F8425AA3C0}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
icecap_collectionresources (HKLM-x32\...\{395402EA-8DAD-4B26-8379-3672FEEA130B}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
icecap_collectionresources (HKLM-x32\...\{78F5880D-D3DD-4AC7-B7C0-EF3F29165CEC}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
icecap_collectionresourcesx64 (HKLM-x32\...\{7D5F1165-1446-48EF-B685-BA2A6DB6F4A0}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
icecap_collectionresourcesx64 (HKLM-x32\...\{F9158504-6564-4F74-AF74-715C980AB2CA}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
IntelliTraceProfilerProxy (HKLM\...\{F8B9E8C8-61E8-4E9E-879D-F3F498AD0230}) (Version: 15.0.21225.01 - Microsoft Corporation) Hidden
IntelliTraceProfilerProxy (HKLM-x32\...\{C8891AD2-C223-45CD-A9BE-617A68923B61}) (Version: 15.0.21225.01 - Microsoft Corporation) Hidden
Java(TM) SE Development Kit 17.0.11 (64-bit) (HKLM\...\{0FAEA8F8-E75C-579F-981F-093F0430FE97}) (Version: 17.0.11.0 - Oracle Corporation)
Kits Configuration Installer (HKLM-x32\...\{5D7663D4-8EF0-0323-8F60-1FC5EECB77E5}) (Version: 10.1.22621.3233 - Microsoft) Hidden
Kumulatives Microsoft .NET Framework Intellisense Pack für Visual Studio (Deutsch) (HKLM-x32\...\{2D018AF1-91F2-4451-AECD-A802520315AD}) (Version: 4.8.09037 - Microsoft Corporation) Hidden
Malwarebytes version 5.1.7.121 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.1.7.121 - Malwarebytes)
Mercurial 6.3.1 (x64) (HKLM\...\{2774F3D2-3CCF-4DE9-B3CE-63A1422E0BBB}) (Version: 6.3.1 - Olivia Mackall and others)
Microsoft .NET 6.0 Templates 8.0.303 (x64) (HKLM\...\{77FEF8F6-334A-46A7-9ADF-93F62D406DCB}) (Version: 24.15.56572 - Microsoft Corporation) Hidden
Microsoft .NET 7.0 Templates 8.0.302 (x64) (HKLM\...\{79B7FCE2-368F-420E-905A-50F474F33E63}) (Version: 28.12.52866 - Microsoft Corporation) Hidden
Microsoft .NET 8.0 Templates 8.0.303 (x64) (HKLM\...\{D7CCB512-5F47-41FA-A24D-DAE587F3F673}) (Version: 32.9.56572 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 6.0.32 (x64) (HKLM\...\{F8778B7B-617B-434A-A8B2-40DB8A1315BA}) (Version: 48.128.16743 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 6.0.32 (x64_arm) (HKLM\...\{C87A793B-06D2-49DC-B0F1-B724A9D7BB69}) (Version: 48.128.16743 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 6.0.32 (x64_arm64) (HKLM\...\{421DDC0A-A1B4-4462-9DF3-7BB062803436}) (Version: 48.128.16743 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 6.0.32 (x64_x86) (HKLM\...\{36E60084-E52A-41BF-B095-DCE7997257D3}) (Version: 48.128.16743 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 7.0.20 (x64) (HKLM\...\{1EE86997-97BB-4CC5-A5C9-824D4A8C4C33}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 7.0.20 (x64_arm) (HKLM\...\{004C6218-4F46-4ECD-9825-0AF4AB2299A8}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 7.0.20 (x64_arm64) (HKLM\...\{866F4150-A781-40E0-80E7-5DF0E4F36BDD}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 7.0.20 (x64_x86) (HKLM\...\{B241FC20-E3D2-4597-8B98-9B784C6526A0}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 8.0.7 (x64) (HKLM\...\{0171410C-9D1D-425E-B98B-564CC50A404C}) (Version: 64.28.16731 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 8.0.7 (x64_arm64) (HKLM\...\{B964E2F4-43E5-4759-8565-8352D614CA7B}) (Version: 64.28.16731 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 8.0.7 (x64_x86) (HKLM\...\{90EADA42-BD9B-400E-8C33-354F7E64B5DD}) (Version: 64.28.16731 - Microsoft Corporation) Hidden
Microsoft .NET CoreRuntime For CoreCon (HKLM-x32\...\{48A8F171-52F2-372B-8414-EA50617708BE}) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft .NET CoreRuntime SDK (HKLM-x32\...\{12702494-9E6A-3F5E-9441-2B7D258A639B}) (Version: 1.1.27004.0 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.7.2 Targeting Pack (ENU) (HKLM-x32\...\{B517DBD3-B542-4FC8-9957-FFB2C3E65D1D}) (Version: 4.7.03062 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.7.2 Targeting Pack (HKLM-x32\...\{1784A8CD-F7FE-47E2-A87D-1F31E7242D0D}) (Version: 4.7.03062 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.8 SDK (Deutsch) (HKLM-x32\...\{5F62E29E-C154-44CB-81D6-696FB3474844}) (Version: 4.8.03761 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.8 SDK (HKLM-x32\...\{949C0535-171C-480F-9CF4-D25C9E60FE88}) (Version: 4.8.03928 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.8 Targeting Pack (ENU) (HKLM-x32\...\{A4EA9EE5-7CFF-4C5F-B159-B9B4E5D2BDE2}) (Version: 4.8.03761 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.8 Targeting Pack (HKLM-x32\...\{BAAF5851-0759-422D-A1E9-90061B597188}) (Version: 4.8.03761 - Microsoft Corporation) Hidden
Microsoft .NET Framework Cumulative Intellisense Pack for Visual Studio (ENU) (HKLM-x32\...\{1A9C3A1A-566B-4CFA-8B27-71FC623963BE}) (Version: 4.8.09037 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.7 (x64) (HKLM\...\{E424D6A6-FA28-41E2-8356-B59519A84BB0}) (Version: 64.28.16731 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.7 (x86) (HKLM-x32\...\{0A508837-2D1C-409B-81AF-2C3BC4B7D2A5}) (Version: 64.28.16731 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.7 (x64) (HKLM\...\{3E3E3302-0CAD-4D0D-B6C0-206B30773468}) (Version: 64.28.16731 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.7 (x86) (HKLM-x32\...\{A39B6EA9-63D1-4564-B8BE-1E67E452039A}) (Version: 64.28.16731 - Microsoft Corporation) Hidden
Microsoft .NET Native SDK (HKLM-x32\...\{EF0C772D-F5E3-36D0-BDAB-FD378533CD40}) (Version: 15.0.24211.07 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.32 (x64) (HKLM\...\{3FDCF0A2-7C1F-41C7-9749-0D91EC216AED}) (Version: 48.128.16743 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.32 (x86) (HKLM-x32\...\{7A3488C1-1FF3-4F64-A6FA-5CFCD533A5DB}) (Version: 48.128.16743 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 7.0.20 (x64) (HKLM\...\{221BB52A-B763-4C9D-AA62-4B0B6C9AAD62}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 7.0.20 (x86) (HKLM-x32\...\{4DAE978C-6175-400D-A508-2403109B89E9}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.7 (x64) (HKLM\...\{CA4FE2DB-2E1C-453B-B8C9-960AB929E5B4}) (Version: 64.28.16731 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.7 (x86) (HKLM-x32\...\{30BA024B-0DA0-4814-9469-EF6C43103F9C}) (Version: 64.28.16731 - Microsoft Corporation) Hidden
Microsoft .NET SDK 8.0.303 (x64) from Visual Studio (HKLM\...\{8275139B-39D6-40A3-A606-E7C4D8787FE6}) (Version: 8.3.324.31708 - Microsoft Corporation)
Microsoft .NET Standard Targeting Pack - 2.1.0 (x64) (HKLM\...\{A7036CFB-B403-4598-85FF-D397ABB88173}) (Version: 24.0.28113 - Microsoft Corporation) Hidden
Microsoft .NET Targeting Pack - 6.0.32 (x64) (HKLM\...\{E2648D21-87A2-4B21-9F44-3D44FF3D1814}) (Version: 48.128.16743 - Microsoft Corporation) Hidden
Microsoft .NET Targeting Pack - 6.0.32 (x86) (HKLM-x32\...\{F0BC501B-EDD9-4B68-9FCB-DB0AE70F63CD}) (Version: 48.128.16743 - Microsoft Corporation) Hidden
Microsoft .NET Targeting Pack - 7.0.20 (x64) (HKLM\...\{7C8005BF-9A78-4548-9680-1C04500D689D}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft .NET Targeting Pack - 7.0.20 (x86) (HKLM-x32\...\{535F2658-B9C6-4CFC-85E9-C025EBE72CB4}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft .NET Targeting Pack - 8.0.7 (x64) (HKLM\...\{D6430DB4-1525-42FE-9CA3-F20146454E73}) (Version: 64.28.16731 - Microsoft Corporation) Hidden
Microsoft .NET Targeting Pack - 8.0.7 (x86) (HKLM-x32\...\{C4C159D8-A8F8-42E5-8876-51AD846D709B}) (Version: 64.28.16731 - Microsoft Corporation) Hidden
Microsoft .NET Toolset 8.0.303 (x64) (HKLM\...\{C8024FF6-2F88-4890-A666-05ACB9253BC3}) (Version: 32.8.56572 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 6.0.32 Shared Framework (x64) (HKLM\...\{F0168C8F-46D9-3CD7-9C3F-BF2D61609357}) (Version: 6.0.32.24314 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 6.0.32 Shared Framework (x86) (HKLM-x32\...\{09FA12D5-95B0-3F5A-BBEF-2E622BE912BF}) (Version: 6.0.32.24314 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 6.0.32 Targeting Pack (x64) (HKLM\...\{601DC44A-52A5-32A6-AE44-C4ED7C1166D8}) (Version: 6.0.32.24314 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 6.0.32 Targeting Pack (x86) (HKLM-x32\...\{5D8146D0-663A-3E8A-93BC-F8A039A75336}) (Version: 6.0.32.24314 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 7.0.20 Shared Framework (x64) (HKLM\...\{BD401329-F877-391C-9E5A-FEB423C5A196}) (Version: 7.0.20.24269 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 7.0.20 Shared Framework (x86) (HKLM-x32\...\{28BDB469-F7EA-3C09-B19E-C533A1D43BD4}) (Version: 7.0.20.24269 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 7.0.20 Targeting Pack (x64) (HKLM\...\{87DB9F7C-C794-39A6-93FE-D72AF734237A}) (Version: 7.0.20.24269 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 7.0.20 Targeting Pack (x86) (HKLM-x32\...\{85662951-18B2-3C85-A696-D58BDBD16A80}) (Version: 7.0.20.24269 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.7 Shared Framework (x64) (HKLM\...\{B6412982-E20D-3D1B-A53B-1620D7ECC9E6}) (Version: 8.0.7.24314 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.7 Shared Framework (x86) (HKLM-x32\...\{2AAF296E-31CB-399A-A021-064599920D60}) (Version: 8.0.7.24314 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.7 Targeting Pack (x64) (HKLM\...\{6EE544FD-E95A-3356-B43F-ED96BBCD3605}) (Version: 8.0.7.24314 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.7 Targeting Pack (x86) (HKLM-x32\...\{A3B41465-A830-310E-9655-66F92E162618}) (Version: 8.0.7.24314 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 127.0.2651.98 - Microsoft Corporation)
Microsoft Edge Dev (HKLM-x32\...\Microsoft Edge Dev) (Version: 129.0.2752.4 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 127.0.2651.98 - Microsoft Corporation)
Microsoft Excel MUI (German) 2013 (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Groove MUI (German) 2013 (HKLM\...\{90150000-00BA-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Message Analyzer (HKLM\...\{DAA1EBBC-6DBD-4889-B317-9021BCA1B0B2}) (Version: 4.0.7948.0 - Microsoft Corporation)
Microsoft NetStandard SDK (HKLM-x32\...\{737FDDA7-B944-4CB5-92D9-3D56373BD301}) (Version: 15.0.51105 - Microsoft Corporation) Hidden
Microsoft Office 32-bit Components 2013 (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (HKLM\...\{90150000-001F-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (HKLM\...\{90150000-00E1-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (HKLM\...\{90150000-00E2-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (HKLM\...\{90150000-002C-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (HKLM\...\{90150000-001F-0410-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2013 (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Standard 2013 (HKLM\...\{90150000-0012-0000-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Standard 2013 (HKLM\...\Office15.STANDARD) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneNote MUI (German) 2013 (HKLM\...\{90150000-00A1-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (HKLM\...\{90150000-001A-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (HKLM\...\{90150000-0018-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (HKLM\...\{90150000-0019-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{C18B132E-4032-4425-826A-24B1CA9DFF0C}) (Version: 11.4.7001.0 - Microsoft Corporation)
Microsoft SQL Server 2012 Management Objects  (x64) (HKLM\...\{7ED2561C-FBC2-421E-A2B5-C7BEFD623145}) (Version: 11.4.7001.0 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{CECCBAE9-1880-411E-9D28-8E562F6DAAE2}) (Version: 11.4.7001.0 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2019 (HKLM\...\{5BC7E9EB-13E8-45DB-8A60-F2481FEB4595}) (Version: 15.0.2000.5 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.24.19202 - Microsoft)
Microsoft TestPlatform SDK Local Feed (HKLM-x32\...\{7F86DEBA-AF7D-43F2-8312-DBCB65F116A9}) (Version: 17.10.0.9037153 - Microsoft) Hidden
Microsoft UniversalWindowsPlatform SDK (HKLM-x32\...\{C756420B-C91C-4410-8092-F49C24CEF594}) (Version: 15.9.16 - Microsoft) Hidden
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.40.33810 (HKLM-x32\...\{5af95fd8-a22e-458f-acee-c61bd787178e}) (Version: 14.40.33810.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.40.33810 (HKLM-x32\...\{47109d57-d746-4f8b-9618-ed6a17cc922b}) (Version: 14.40.33810.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.40.33810 (HKLM\...\{59CED48F-EBFE-480C-8A38-FC079C2BEC0F}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Debug Runtime - 14.40.33810 (HKLM\...\{3003CC13-9BC4-48D1-95D6-14B2AFE0683B}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.40.33810 (HKLM\...\{B8B3BB4A-A10D-4F51-91B7-A64FFAC31EA7}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.40.33810 (HKLM-x32\...\{5EA6C998-D5AC-4ED9-89C3-9F25B17CCD3D}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Debug Runtime - 14.40.33810 (HKLM-x32\...\{A0B90EAF-8FC1-49B2-A7D6-7F9B1FEFDD43}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.40.33810 (HKLM-x32\...\{0C3457A0-3DCE-4A33-BEF0-9B528C557771}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{610487D9-3460-328A-9333-219D43A75CC5}) (Version: 10.0.60922 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.60917 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.60917 - Microsoft Corporation)
Microsoft Visual Studio Code (User) (HKU\S-1-5-21-3087490873-3835733739-2015806437-2967\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.92.1 - Microsoft Corporation)
Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 3.10.2157.28521 - Microsoft Corporation)
Microsoft Visual Studio Setup Configuration (HKLM-x32\...\{6E7D95E1-DA2A-4DED-A8C6-3FBA1714DB62}) (Version: 3.9.2148.60653 - Microsoft Corporation) Hidden
Microsoft Visual Studio Setup WMI Provider (HKLM-x32\...\{0AC39B1B-4AFC-4684-B22C-625848E16C92}) (Version: 3.9.2148.60653 - Microsoft Corporation) Hidden
Microsoft Web Deploy 4.0 (HKLM\...\{82FD8C73-C24D-433C-85A9-48AE93570410}) (Version: 10.0.8305 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 6.0.32 (x64) (HKLM\...\{885F1CFB-4EAC-4C60-97B8-394BD65ED91E}) (Version: 48.128.16742 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.32 (x86) (HKLM-x32\...\{8E331834-5413-4C57-8E5E-FB2FF60B6D1D}) (Version: 48.128.16742 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 7.0.20 (x64) (HKLM\...\{72C29BED-666F-4E5E-BC49-DF44C890742E}) (Version: 56.80.15245 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 7.0.20 (x86) (HKLM-x32\...\{D21715FE-E342-4744-A499-76ECE655DE5C}) (Version: 56.80.15245 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.7 (x64) (HKLM\...\{F6FBF64F-D459-4F03-BF3B-C0A36A0596A2}) (Version: 64.28.16739 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.7 (x64) (HKLM-x32\...\{754bcfb5-42ac-4c12-8f12-b818943a1365}) (Version: 8.0.7.33814 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.7 (x86) (HKLM-x32\...\{EEE5F68A-D6F3-4049-AB32-CD20C27C45C3}) (Version: 64.28.16739 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Targeting Pack - 6.0.32 (x64) (HKLM\...\{FB3C4C0A-2683-4E14-95C5-E56F9AA1C323}) (Version: 48.128.16742 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Targeting Pack - 6.0.32 (x86) (HKLM-x32\...\{010FD45C-7439-4F14-9BEA-A6FAE954F6C7}) (Version: 48.128.16742 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Targeting Pack - 7.0.20 (x64) (HKLM\...\{644C2637-F41C-49AF-97A5-C7BE2979BB88}) (Version: 56.80.15245 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Targeting Pack - 7.0.20 (x86) (HKLM-x32\...\{160B3BBA-225E-4939-B0BD-3171D9D68F45}) (Version: 56.80.15245 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Targeting Pack - 8.0.7 (x64) (HKLM\...\{D330B7EB-6033-4A19-B087-B0FA39F9D463}) (Version: 64.28.16739 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Targeting Pack - 8.0.7 (x86) (HKLM-x32\...\{A15D66AB-9B8C-4420-9C2B-0B7AA177DD3F}) (Version: 64.28.16739 - Microsoft Corporation) Hidden
Microsoft Word MUI (German) 2013 (HKLM\...\{90150000-001B-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.Android.Manifest-8.0.100 (x64) (HKLM\...\{EF47685B-FE23-416C-A4BC-BACDA77050EA}) (Version: 34.0.95 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.Aspire.Manifest-8.0.100 (x64) (HKLM\...\{D29976ED-3448-467B-A80B-05870B2A07CA}) (Version: 64.0.15042 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.iOS.Manifest-8.0.100 (x64) (HKLM\...\{44AA4ED3-CE25-4117-8553-C9461DD1E0DE}) (Version: 17.2.8053 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.MacCatalyst.Manifest-8.0.100 (x64) (HKLM\...\{51E67585-599D-4870-9579-A74DE14B9F42}) (Version: 17.2.8053 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.macOS.Manifest-8.0.100 (x64) (HKLM\...\{B5A8CFDD-420C-420D-B586-01132FB27631}) (Version: 14.2.8053 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.Maui.Manifest-8.0.100 (x64) (HKLM\...\{A9035DEE-7144-4E0D-975C-07D4C3E06BBF}) (Version: 8.0.61 - Microsoft Corporation) Hidden
Microsoft.NET.Sdk.tvOS.Manifest-8.0.100 (x64) (HKLM\...\{380FDDE5-2234-48F7-B859-50CD288CBA2F}) (Version: 17.2.8053 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.Current.Manifest (x64) (HKLM\...\{E68DD641-9608-4E19-985E-6150C320D798}) (Version: 64.28.16721 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.net6.Manifest (x64) (HKLM\...\{79186F33-2783-464B-BAB9-7BAF6596086B}) (Version: 64.28.16721 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Emscripten.net7.Manifest (x64) (HKLM\...\{7D6B9689-C2FA-4DBF-9D34-2BAA26D90322}) (Version: 64.28.16721 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.Current.Manifest (x64) (HKLM\...\{819AA58B-CC69-418C-9751-CD05BDBEDCE7}) (Version: 64.28.16731 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.net6.Manifest (x64) (HKLM\...\{29927EE1-A7BA-430E-8B9F-B87E48B92800}) (Version: 64.28.16731 - Microsoft Corporation) Hidden
Microsoft.NET.Workload.Mono.Toolchain.net7.Manifest (x64) (HKLM\...\{9FDD6501-C501-4C65-A186-29020C7DC22C}) (Version: 64.28.16731 - Microsoft Corporation) Hidden
MSI Development Tools (HKLM-x32\...\{3891A7DE-A85F-9B4E-2B84-50162AFA1E48}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
MSI Development Tools (HKLM-x32\...\{7AAC93B0-F3D7-6B24-6B37-9E74980C1C81}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
MSI Development Tools (HKLM-x32\...\{95A498A9-5E6E-5779-1523-876224F41F94}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
MSI Development Tools (HKLM-x32\...\{DB4DB790-64DD-1902-4BF2-833B3B6DBCA1}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Nmap 7.95 (HKLM-x32\...\Nmap) (Version: 7.95 - Nmap Project)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.6.9 - Notepad++ Team)
Npcap (HKLM-x32\...\NpcapInst) (Version: 1.79 - Nmap Project)
NVIDIA FrameView SDK 1.4.9615.33661400 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.4.9615.33661400 - NVIDIA Corporation)
NVIDIA Grafiktreiber 560.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 560.70 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.4.0.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.0.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)
NVIDIA USBC Driver 1.52.831.832 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_USBC) (Version: 1.52.831.832 - NVIDIA Corporation)
NVIDIA-App 10.0.1.256 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 10.0.1.256 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 30.1.2 - OBS Project)
OpenVPN Connect (HKLM\...\{D31E8657-7903-46FA-A297-8D11E16D6A83}) (Version: 3.4.4 - OpenVPN Inc.)
Oracle VM VirtualBox 7.0.18 (HKLM\...\{63A2B392-8FBD-450D-B02F-BE287BAF1FE8}) (Version: 7.0.18 - Oracle and/or its affiliates)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
ownCloud (HKLM\...\{054FD9C9-CD78-458E-87EC-30F16A7B0DAD}) (Version: 5.3.1.14018 - ownCloud GmbH)
Paket zur Festlegung von Zielversionen von Microsoft .NET Framework 4.7.2 (Deutsch) (HKLM-x32\...\{98FE7C2A-22A4-401A-B45B-2AA107C06DD7}) (Version: 4.7.03062 - Microsoft Corporation) Hidden
Paket zur Festlegung von Zielversionen von Microsoft .NET Framework 4.8 (Deutsch) (HKLM-x32\...\{9E68042B-8597-4DE3-BA10-D1198BA9316B}) (Version: 4.8.03761 - Microsoft Corporation) Hidden
PDF-XChange Editor (HKLM\...\{9BD82FF0-5048-4EC8-B4D5-47E8FA90FF26}) (Version: 9.3.361.0 - Tracker Software Products (Canada) Ltd.) Hidden
PDF-XChange Editor (HKLM-x32\...\{e080e406-b759-4337-a2dd-924db2f2e535}) (Version: 9.3.361.0 - Tracker Software Products (Canada) Ltd.)
PEAK-Drivers 4.4.0 (HKLM\...\{f460128f-a9bd-4a7e-8a78-c24de4b52c78}) (Version: 4.4.0.521 - PEAK-System Technik GmbH) Hidden
PEAK-Drivers 4.4.0 (HKLM\...\PEAK-Drivers 4.4.0 4.4.0.521) (Version: 4.4.0.521 - PEAK-System Technik GmbH)
PostgreSQL 16  (HKLM\...\PostgreSQL 16) (Version: 16.3-2 - PostgreSQL Global Development Group)
PuTTY release 0.81 (HKLM-x32\...\{39BD3E24-0C91-4DAC-A0D8-6119B0A152CE}) (Version: 0.81.0.0 - Simon Tatham)
Python 3.11.9 (64-bit) (HKU\S-1-5-21-3087490873-3835733739-2015806437-2967\...\{1da2e09b-199c-4def-9a99-93a8c1b8ddf2}) (Version: 3.11.9150.0 - Python Software Foundation)
Python 3.11.9 Add to Path (64-bit) (HKLM\...\{CD925D17-C20C-441B-AAE2-4FA5B78C978F}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Core Interpreter (64-bit debug) (HKLM\...\{8AAC46AB-B365-40B6-96C2-FBDE327222E7}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Core Interpreter (64-bit symbols) (HKLM\...\{F1A61D26-BF02-4882-89CA-B40DFAEB453F}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Core Interpreter (64-bit) (HKLM\...\{B074012B-9B85-4049-BA01-A58A8C4C2236}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Development Libraries (64-bit debug) (HKLM\...\{B4AAEB42-B00D-40D6-81C3-A95A7F3A7063}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Development Libraries (64-bit) (HKLM\...\{CEE03ABD-D5F9-4104-BFA5-520711B8D71F}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Documentation (64-bit) (HKLM\...\{425B36E9-4EA6-47B4-88C3-E798BA903188}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Executables (64-bit debug) (HKLM\...\{80252711-B5ED-4678-9855-2FE110C681D6}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Executables (64-bit symbols) (HKLM\...\{D85F5CD2-D9CC-4493-8D28-91289B974C78}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Executables (64-bit) (HKLM\...\{C038789C-DCB5-42D3-8C51-3BC9DDB26B90}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 pip Bootstrap (64-bit) (HKLM\...\{1D653E80-09B2-40AB-9530-7DF12E632F8A}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Standard Library (64-bit debug) (HKLM\...\{7BE1DB92-6277-4790-92B0-396021CF435C}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Standard Library (64-bit symbols) (HKLM\...\{0B0C2C04-F7A3-4F33-8E58-F184FB186DB1}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Standard Library (64-bit) (HKLM\...\{9AFDC691-40E5-4B15-835F-9A524AC4672C}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Tcl/Tk Support (64-bit debug) (HKLM\...\{D42DE99D-FB4A-40BD-B7C8-2E342D31B597}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Tcl/Tk Support (64-bit symbols) (HKLM\...\{E7A3BF5F-105A-4D38-B5FD-B6D567E520E7}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Tcl/Tk Support (64-bit) (HKLM\...\{57AC2A86-EC99-4E9C-9FF9-15DAA88D1FAE}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Test Suite (64-bit debug) (HKLM\...\{E8CAD711-3936-44C5-95D7-A190A7E7F181}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Test Suite (64-bit symbols) (HKLM\...\{2699D4EE-A9BE-498B-9B63-E690CE0071AA}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Test Suite (64-bit) (HKLM\...\{A9F91BE3-1B3B-4CB4-A169-19E13DD70BEA}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.11.9 Utility Scripts (64-bit) (HKLM\...\{29CEC70F-9D96-472B-B6A1-AE7578376985}) (Version: 3.11.9150.0 - Python Software Foundation) Hidden
Python 3.9.13 (64-bit) (HKU\S-1-5-21-3087490873-3835733739-2015806437-2967\...\{f599560c-4808-4daa-85d8-15f363099f67}) (Version: 3.9.13150.0 - Python Software Foundation)
Python 3.9.13 Core Interpreter (64-bit debug) (HKLM\...\{A782250A-B3C8-4460-B690-2740D80D3A69}) (Version: 3.9.13150.0 - Python Software Foundation) Hidden
Python 3.9.13 Core Interpreter (64-bit symbols) (HKLM\...\{44BCBD6F-228D-456F-8F26-52EF9B205A4D}) (Version: 3.9.13150.0 - Python Software Foundation) Hidden
Python 3.9.13 Core Interpreter (64-bit) (HKLM\...\{D7536B55-7339-436F-A2B3-8B8C0240DF32}) (Version: 3.9.13150.0 - Python Software Foundation) Hidden
Python 3.9.13 Development Libraries (64-bit debug) (HKLM\...\{1813A955-274B-4FC1-8311-733539A499F4}) (Version: 3.9.13150.0 - Python Software Foundation) Hidden
Python 3.9.13 Development Libraries (64-bit) (HKLM\...\{A621340A-3F22-40D3-9CCD-50B048EBB48E}) (Version: 3.9.13150.0 - Python Software Foundation) Hidden
Python 3.9.13 Documentation (64-bit) (HKLM\...\{1FB094A5-7604-4C0F-A1FB-EAB7ED730DE2}) (Version: 3.9.13150.0 - Python Software Foundation) Hidden
Python 3.9.13 Executables (64-bit debug) (HKLM\...\{B420F85D-B56E-4B69-A607-A3D29B06CA3B}) (Version: 3.9.13150.0 - Python Software Foundation) Hidden
Python 3.9.13 Executables (64-bit symbols) (HKLM\...\{3D1C9D81-340E-45DD-8752-88593113B332}) (Version: 3.9.13150.0 - Python Software Foundation) Hidden
Python 3.9.13 Executables (64-bit) (HKLM\...\{D497CDAE-43AC-4397-A1C6-B66A7A8F8010}) (Version: 3.9.13150.0 - Python Software Foundation) Hidden
Python 3.9.13 pip Bootstrap (64-bit) (HKLM\...\{72964D30-1BFE-459F-B218-D267EBE0D5B2}) (Version: 3.9.13150.0 - Python Software Foundation) Hidden
Python 3.9.13 Standard Library (64-bit debug) (HKLM\...\{2EC0EF79-B5A2-433A-97F9-598CA6747189}) (Version: 3.9.13150.0 - Python Software Foundation) Hidden
Python 3.9.13 Standard Library (64-bit symbols) (HKLM\...\{E40CC2FD-4435-4AEB-95DC-47B017999C90}) (Version: 3.9.13150.0 - Python Software Foundation) Hidden
Python 3.9.13 Standard Library (64-bit) (HKLM\...\{90A30DAB-6FD8-4CF8-BB8B-C0DB21C69F20}) (Version: 3.9.13150.0 - Python Software Foundation) Hidden
Python 3.9.13 Tcl/Tk Support (64-bit debug) (HKLM\...\{E4436E59-DB66-4D15-A0CC-9F0BA029753D}) (Version: 3.9.13150.0 - Python Software Foundation) Hidden
Python 3.9.13 Tcl/Tk Support (64-bit symbols) (HKLM\...\{408D42FD-EC5F-47EC-929B-5BE3B9EFEDCD}) (Version: 3.9.13150.0 - Python Software Foundation) Hidden
Python 3.9.13 Tcl/Tk Support (64-bit) (HKLM\...\{E7233E87-1712-40E0-8207-17C8D0157FCC}) (Version: 3.9.13150.0 - Python Software Foundation) Hidden
Python 3.9.13 Test Suite (64-bit debug) (HKLM\...\{7944B4D3-DE20-4CE2-964D-46094D518062}) (Version: 3.9.13150.0 - Python Software Foundation) Hidden
Python 3.9.13 Test Suite (64-bit symbols) (HKLM\...\{D99D5931-E427-4388-9D0F-B11EF72C9D66}) (Version: 3.9.13150.0 - Python Software Foundation) Hidden
Python 3.9.13 Test Suite (64-bit) (HKLM\...\{7491B488-F171-4A97-935A-9098E7CE2A26}) (Version: 3.9.13150.0 - Python Software Foundation) Hidden
Python 3.9.13 Utility Scripts (64-bit) (HKLM\...\{618E9DD0-9212-486C-AB4A-023ACAB7CD36}) (Version: 3.9.13150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{1A8286E4-2F70-4165-B2BF-CC6B49664005}) (Version: 3.9.7806.0 - Python Software Foundation)
Python Launcher (HKLM-x32\...\{3182A195-B671-44A8-B0C7-7876B916BA5A}) (Version: 3.12.150.0 - Python Software Foundation)
SDK ARM Additions (HKLM-x32\...\{2D2C18BA-7B10-0A98-F662-9D397CAEA0C3}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
SDK ARM Redistributables (HKLM-x32\...\{B5F4C6AF-DC6F-F6A4-1087-D068F4660610}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
sPlan 7.0 (HKLM-x32\...\sPlan_70_is1) (Version:  - )
SwyxIt! (HKLM\...\{B73725C8-4618-486A-A227-4BB2E8F31791}) (Version: 11.50.12166.0 - Swyx Solutions GmbH)
Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version:  - )
Termite (HKLM-x32\...\Termite) (Version:  - CompuPhase)
UniGetUI (formerly WingetUI) (HKLM-x32\...\{889610CC-4337-4BDB-AC3B-4F21806C0BDE}_is1) (Version: 3.1.1 - Martí Climent)
Universal CRT Extension SDK (HKLM-x32\...\{13952D7A-B7B3-F4F8-5F29-5CD18E8168B7}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Universal CRT Extension SDK (HKLM-x32\...\{4D69FB64-4443-F2DD-DE1C-F14FD98AAC59}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Universal CRT Extension SDK (HKLM-x32\...\{90AAE845-42CE-EC12-4041-8ADF7BE765E7}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Universal CRT Extension SDK (HKLM-x32\...\{E9508840-8997-0DA6-2BF2-66913126B654}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{6B56745A-F6A4-C51C-933A-AD96C00683EA}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{74CBC330-ED16-31B9-E8BE-0C6A8E67DE32}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{98D5C5AA-993C-1371-C7AF-8F8A0E8CAF86}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{D3CE43AE-FB64-9FCA-BE16-5A2F3F2B112D}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{0460C87B-7F4C-3170-FAC9-B7A6AE5CE4E9}) (Version: 10.0.26624 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{1D228B5E-62E8-737B-3478-78A795EBB8EC}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{847D4DAF-0182-265B-324F-406462E8A90D}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{8EC1DC78-0A65-B6AC-664D-DFB3AC8E9736}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{A57CD0A6-4297-FD30-34A4-34758B6F5F69}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Universal CRT Tools x64 (HKLM\...\{2C897543-D940-0177-58DE-0D00653DE0B2}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Universal CRT Tools x86 (HKLM-x32\...\{384A28F5-6B08-01FB-BE75-EBC673BBCACF}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{6F54BF87-2EE6-FA6D-431D-33A665992D49}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{A7E95C47-B5F4-110C-D27A-DECB03412B96}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{D3B0EFC4-878A-CA8C-7C79-1160CDF637D1}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{D62BC488-4C4A-BF17-A0CE-21B4BF8F9B30}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Update for Skype for Business 2015 (KB4484289) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.STANDARD_{1C76EBD9-0A70-4094-A543-00CAA3B62113}) (Version:  - Microsoft)
USBPcap 1.5.4.0 (HKLM\...\USBPcap) (Version: 1.5.4.0 - Tomasz Mon)
vcpp_crt.redist.clickonce (HKLM-x32\...\{86A92FDF-05A2-4B6E-AEE8-EFB68E7FF6B5}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
vcpp_crt.redist.clickonce (HKLM-x32\...\{92668CA7-D080-40A4-A0B4-061504E9C785}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Veeam Agent for Microsoft Windows (HKLM\...\{73C672F4-000F-4C97-BF29-5EA345711E4C}) (Version: 6.1.2.134 - Veeam Software Group GmbH)
VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.26.7 - IDRIX)
Visual C++ Library CRT Appx Package (HKLM-x32\...\{0FDA2516-CF0D-4398-A329-937FF69796E7}) (Version: 14.40.33811 - Microsoft Corporation) Hidden
Visual C++ Library CRT Appx Package (HKLM-x32\...\{2CE35F27-3D6B-472C-878C-C1081B19ABD3}) (Version: 14.40.33811 - Microsoft Corporation) Hidden
Visual C++ Library CRT Appx Resource Package (HKLM-x32\...\{47177278-E135-4396-957A-6C3FB312F441}) (Version: 14.40.33811 - Microsoft Corporation) Hidden
Visual C++ Library CRT Appx Resource Package (HKLM-x32\...\{7BF51E19-72BB-4C30-AB5A-2BF587640F9F}) (Version: 14.40.33811 - Microsoft Corporation) Hidden
Visual C++ Library CRT ARM64 Appx Package (HKLM-x32\...\{6F02E006-9C82-4FC0-9892-B48AA8942C3B}) (Version: 14.40.33811 - Microsoft Corporation) Hidden
Visual C++ Library CRT ARM64 Appx Package (HKLM-x32\...\{9F07CFE0-D17B-42D2-B114-4A19DFBAC907}) (Version: 14.40.33811 - Microsoft Corporation) Hidden
Visual C++ Library CRT Desktop Appx Package (HKLM-x32\...\{01AA2557-2373-44A8-83EE-A36BACDF9E37}) (Version: 14.40.33811 - Microsoft Corporation) Hidden
Visual C++ Library CRT Desktop Appx Package (HKLM-x32\...\{3DCD9175-D33E-402A-86F1-41F0718FF2D6}) (Version: 14.40.33811 - Microsoft Corporation) Hidden
Visual C++ Library CRT Desktop Appx Package (HKLM-x32\...\{8A11E2B0-37A5-4E71-9BCD-3F317FF4AFB8}) (Version: 14.40.33811 - Microsoft Corporation) Hidden
Visual Studio Community 2022 (HKLM-x32\...\96b4db99) (Version: 17.10.4 - Microsoft Corporation)
VS Immersive Activate Helper (HKLM-x32\...\{FFFF1EAF-0FE4-4E67-82C2-CA5DB41BB093}) (Version: 17.0.125.0 - Microsoft Corporation) Hidden
VS JIT Debugger (HKLM\...\{C17B72FB-7790-44C0-B897-9BEE0BAD5BA0}) (Version: 17.0.125.0 - Microsoft Corporation) Hidden
VS Script Debugging Common (HKLM\...\{D56DC014-C4C1-4330-B32B-D9785DAE7BCB}) (Version: 17.0.125.0 - Microsoft Corporation) Hidden
vs_BlendMsi (HKLM-x32\...\{40B04196-847F-4391-8412-A970B2E78556}) (Version: 17.10.34803 - Microsoft Corporation) Hidden
vs_clickoncebootstrappermsi (HKLM-x32\...\{0EB2372D-7C75-4AF9-953A-FE7D778552F1}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
vs_clickoncebootstrappermsires (HKLM-x32\...\{0AF58B73-7149-4591-818A-BAFE26678749}) (Version: 17.10.34803 - Microsoft Corporation) Hidden
vs_clickoncesigntoolmsi (HKLM-x32\...\{72B80CCC-41B0-4C2F-BF4A-39BE0D88412A}) (Version: 17.10.34803 - Microsoft Corporation) Hidden
vs_communitymsires (HKLM-x32\...\{D53621DB-9A8B-443C-A5DA-B31625BAF7D0}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
vs_communitymsires (HKLM-x32\...\{D54611B7-3B63-4310-9CC2-5E599ADD1F50}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
vs_communitysharedmsi (HKLM-x32\...\{30E1FE2A-3AF7-4025-8C58-7CC7A6111956}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
vs_communityx64msi (HKLM\...\{A02B2AB5-932A-4D33-9625-DC3FFDBE5E5D}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
vs_CoreEditorFonts (HKLM-x32\...\{6AA3DE9F-ADDE-463B-8F29-27DD247C5282}) (Version: 17.4.33006 - Microsoft Corporation) Hidden
vs_devenvsharedmsi (HKLM-x32\...\{CBF99F17-F6C0-47BF-B465-027CADCA0779}) (Version: 17.10.34803 - Microsoft Corporation) Hidden
vs_devenx64vmsi (HKLM\...\{9171E2C0-96F0-4BC2-85EA-B881B53FDAAD}) (Version: 17.10.34803 - Microsoft Corporation) Hidden
vs_filehandler_amd64 (HKLM-x32\...\{D1C55BC2-6D4A-4324-A55C-CA49A8824307}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
vs_filehandler_x86 (HKLM-x32\...\{56100714-49CB-4B21-9206-4DD1AFDDD56F}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
vs_FileTracker_Singleton (HKLM-x32\...\{7E323F7D-3983-41D9-9D7F-F961D53EB7B8}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
vs_githubprotocolhandlermsi (HKLM-x32\...\{7239EFF3-63C4-474B-874B-5A7364E243EE}) (Version: 17.10.34803 - Microsoft Corporation) Hidden
vs_Graphics_Singletonx64 (HKLM\...\{86881BC3-95D7-4952-A120-CC33D76A0C06}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
vs_Graphics_Singletonx86 (HKLM-x32\...\{256CD476-F11D-4281-92E4-4145E4B8D8EC}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
vs_minshellinteropsharedmsi (HKLM-x32\...\{EEA6D3A0-5550-4C72-A240-6855A26F2784}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
vs_minshellinteropx64msi (HKLM\...\{A203B4C7-4822-4025-BD6D-109FEEC7E466}) (Version: 17.10.34803 - Microsoft Corporation) Hidden
vs_minshellmsires (HKLM-x32\...\{4653288F-EBB6-4AAB-9BD6-E34741F0B5D0}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
vs_minshellmsires (HKLM-x32\...\{DE0B333D-49EB-498A-8AFE-90186269B5EA}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
vs_minshellsharedmsi (HKLM-x32\...\{E37D72E2-6E06-4F6E-96C5-95C8F0B51E6E}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
vs_minshellx64msi (HKLM\...\{236C270A-E9DE-4DBE-901E-8FA4FF6BC6D3}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
vs_SQLClickOnceBootstrappermsi (HKLM-x32\...\{B0EFBE55-C603-4EBC-9F23-FD80DBBA0D77}) (Version: 17.10.34803 - Microsoft Corporation) Hidden
vs_tipsmsi (HKLM-x32\...\{1A7360EA-1FEA-40F9-A041-3C12F6E69002}) (Version: 17.10.34803 - Microsoft Corporation) Hidden
vs_vswebprotocolselectormsi (HKLM-x32\...\{66DCCE57-13F7-43AC-B16E-48EA5C89806D}) (Version: 17.10.34803 - Microsoft Corporation) Hidden
vs_vswebprotocolselectormsires (HKLM-x32\...\{582A2D2E-B9C9-4002-BA6C-28EDDA3DBD96}) (Version: 17.10.34803 - Microsoft Corporation) Hidden
WinAppDeploy (HKLM-x32\...\{2ADF1977-BF31-E127-B651-AC28A8658317}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinAppDeploy (HKLM-x32\...\{8E3AB865-9E38-1E5F-7B49-C8E3A70C6303}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
WinAppDeploy (HKLM-x32\...\{8E3AE0EF-D067-700C-BDB4-10D5552155DC}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
WinAppDeploy (HKLM-x32\...\{C952A289-86CA-9322-7C44-F6E7526FD5E3}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows App Certification Kit Native Components (HKLM\...\{750766A0-28E0-2EC0-B83C-7C6F1236B041}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows App Certification Kit SupportedApiList x86 (HKLM-x32\...\{C7C6D595-1045-1CDB-DDB8-F0DCB03B63B2}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows App Certification Kit x64 (HKLM-x32\...\{2CF6B1B1-3D60-A198-E401-093F7BA784F0}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows App Certification Kit x64 (OnecoreUAP) (HKLM-x32\...\{7625FDE9-5B15-1CDF-3810-EC60A67F6D39}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows Desktop Extension SDK (HKLM-x32\...\{3F737DA8-C5B7-8740-6B07-BA73B5E62CDF}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows Desktop Extension SDK (HKLM-x32\...\{B4A7994D-DBA1-8B4D-621A-03EE52CF838A}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows Desktop Extension SDK (HKLM-x32\...\{D3B54AAA-2B64-5DE2-EA64-9900152E5282}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows Desktop Extension SDK (HKLM-x32\...\{D6982C58-1FDC-FB2E-B55A-7329ADE7315C}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows Desktop Extension SDK Contracts (HKLM-x32\...\{39EDCC7D-7B63-5D99-C053-C8CDF02DC5ED}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows Desktop Extension SDK Contracts (HKLM-x32\...\{779B6704-D2FB-9087-C7FB-0AA1586F6FCD}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows Desktop Extension SDK Contracts (HKLM-x32\...\{A34A6580-86EF-A26A-33A5-80E1919B7F75}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows Desktop Extension SDK Contracts (HKLM-x32\...\{D54B24F7-43DE-C7BF-3A5C-83F9E8E0700D}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows Driver Package - NXP (WinUSB) LpcDevice  (08/06/2009 7.0.7600.16385) (HKLM\...\5F6D17F943AE4462A3F80B19435931046D6352AB) (Version: 08/06/2009 7.0.7600.16385 - NXP)
Windows IoT Extension SDK (HKLM-x32\...\{084094EF-6AC9-480A-7CC1-04199047BBDD}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows IoT Extension SDK (HKLM-x32\...\{5B64C01B-2798-A2F6-89C3-AC03906F8788}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows IoT Extension SDK (HKLM-x32\...\{9DA29C3D-9E36-AC22-59C8-FFCF413DC068}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows IoT Extension SDK (HKLM-x32\...\{CFF175F4-9F1D-289D-B99E-EA6AFCF28F4E}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows IoT Extension SDK Contracts (HKLM-x32\...\{1FF69612-5A91-3565-7EE3-0539A04E3B8D}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows IoT Extension SDK Contracts (HKLM-x32\...\{3CEE8EB6-538E-DDA2-51A5-842ECE6CE1E8}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows IoT Extension SDK Contracts (HKLM-x32\...\{497B2D49-F5C2-CA3B-05FF-22ABF39F2873}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows IoT Extension SDK Contracts (HKLM-x32\...\{8D92043C-84C1-368A-885F-5FD8B92200EC}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows IP Over USB (HKLM-x32\...\{EE16E41D-40CF-5FA5-02DD-75E75707AE1D}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows Mobile Extension SDK (HKLM-x32\...\{30AD20A4-1FFF-2632-4555-EFAF9D8A32CD}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows Mobile Extension SDK (HKLM-x32\...\{718C25EB-084C-6341-1C3E-589DA641C28F}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows Mobile Extension SDK (HKLM-x32\...\{A3D0A593-20CD-83E6-83DE-6068053F2BDF}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows Mobile Extension SDK (HKLM-x32\...\{DF2A6855-DB81-9047-3033-8D6AC6055AEF}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows Mobile Extension SDK Contracts (HKLM-x32\...\{01E7E930-A0F4-5340-5E2D-92EFC9D5821D}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows Mobile Extension SDK Contracts (HKLM-x32\...\{154EEEB2-18D9-4FD5-EDE1-6D0B318FAC53}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows Mobile Extension SDK Contracts (HKLM-x32\...\{7A9E937D-9757-80CB-A6E3-F4AB6081AEA6}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows Mobile Extension SDK Contracts (HKLM-x32\...\{8EDE105B-885A-D173-50F8-F50F39C51CF9}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK (HKLM-x32\...\{2DF27D5D-478A-CC3F-EF64-E461BC3B3580}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK AddOn (HKLM-x32\...\{15941C7F-810D-41DF-8C5A-8D0490277AFB}) (Version: 10.1.0.0 - Microsoft Corporation)
Windows SDK ARM Desktop Tools (HKLM-x32\...\{20C00582-BD18-B599-CF98-61011567D747}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK ARM Desktop Tools (HKLM-x32\...\{940042ED-CB90-8E03-BE68-DF8A76E661FD}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK ARM Desktop Tools (HKLM-x32\...\{963BD0BD-2098-D21C-AA37-39876C732819}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK ARM Desktop Tools (HKLM-x32\...\{A99B19D4-7F87-03E5-B4A8-80420ECD7F53}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers arm (HKLM-x32\...\{31D517CE-04EE-F508-87C6-A503372B02A1}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers arm (HKLM-x32\...\{3DC4086C-B365-3DE4-878B-659DEB72904E}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers arm (HKLM-x32\...\{4BD2B107-B0D3-850C-7135-ACA153D30C78}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers arm (HKLM-x32\...\{C7C68DA0-8501-16DD-1E6A-6C34AAA28F21}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers arm64 (HKLM-x32\...\{30092A0E-1D50-8D66-E5EB-01F6AA8C1FFE}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers arm64 (HKLM-x32\...\{452ABC9E-731E-71B2-8824-C5B2595370AF}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers arm64 (HKLM-x32\...\{A69CD06B-FED5-81AD-3D62-38B325BAD254}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers arm64 (HKLM-x32\...\{C88797F9-0AD8-E022-5BBB-596BC78D4C76}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers x64 (HKLM-x32\...\{3A928615-B22E-42B6-A30A-CB7B1135F1CF}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers x64 (HKLM-x32\...\{6A96DEED-D0D8-6DD0-21BD-7D8F60714854}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers x64 (HKLM-x32\...\{C47F0820-6424-AE53-6BAF-2D41E829C855}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers x64 (HKLM-x32\...\{C81D239D-863A-D4B4-3562-BC8D3D7C271E}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers x86 (HKLM-x32\...\{3D5981B5-ABF0-1495-7FC3-102D1C75B9C8}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers x86 (HKLM-x32\...\{6F1B1243-7C12-5398-F575-5102906569A6}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers x86 (HKLM-x32\...\{86ADBBAE-77AE-FA26-7C17-802AE28AC316}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers x86 (HKLM-x32\...\{F50E3BAF-A09C-0730-319C-56221E12B747}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs arm (HKLM-x32\...\{2AC29D7B-F29F-34FA-4434-C5DF1F086264}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs arm (HKLM-x32\...\{2F5EB743-8C97-930F-F41E-2EC8D5D5565B}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs arm (HKLM-x32\...\{6221E085-FE37-1068-E6D7-9D08ABD32AE2}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs arm (HKLM-x32\...\{995DDD4F-928C-4EBA-9702-E7CD3F6A7A9D}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs arm64 (HKLM-x32\...\{166BCCDD-48C1-8103-A7E7-0F3DE471223D}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs arm64 (HKLM-x32\...\{82931C8D-83CC-CF2E-F4FA-9AF0829BCA22}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs arm64 (HKLM-x32\...\{87CB1714-C57F-13EA-8982-8F720B44BCF3}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs arm64 (HKLM-x32\...\{9555AB64-6A00-776F-CA44-568E0E7B9632}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs x64 (HKLM-x32\...\{170B023D-7C1B-2EF4-D3E9-B974A26752AC}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs x64 (HKLM-x32\...\{1A457607-6262-3949-63D4-E1F85A3D95FD}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs x64 (HKLM-x32\...\{54140689-B7DB-B9CF-537D-8FEB279410F9}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs x64 (HKLM-x32\...\{838DC63C-34E9-9DBB-3A07-AEFC7768DC2A}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs x86 (HKLM-x32\...\{238F56B7-7D14-F8EB-3F4D-8CFF18C19E2B}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs x86 (HKLM-x32\...\{24DAC073-46EA-ED5D-860A-845E8A27F426}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs x86 (HKLM-x32\...\{7CAF3DA2-79F6-C0DB-6C56-2462C8C4914C}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs x86 (HKLM-x32\...\{7DD1F495-F1BF-6A30-620F-AC064DD302D8}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools arm64 (HKLM-x32\...\{06E580FA-F3B2-08E9-4DC0-0AB55D985CBB}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools arm64 (HKLM-x32\...\{2E6C6299-BF5F-379D-55F2-8FD3367F5918}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools arm64 (HKLM-x32\...\{54E5E684-132E-23D3-CBF6-962122E2C568}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools arm64 (HKLM-x32\...\{A4634E74-BFEE-CF6C-BF53-8D5E252FC574}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools x64 (HKLM-x32\...\{795E8F11-37DE-611E-921E-7D70BE09BF7B}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools x64 (HKLM-x32\...\{BED088F5-660E-C8E2-9FF4-F652445CC5FA}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools x64 (HKLM-x32\...\{E5715C32-34B0-6F8E-81B8-13FB19B1B682}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools x64 (HKLM-x32\...\{F9BDEC71-9E56-CFBF-0AE8-E7AF032D07C7}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools x86 (HKLM-x32\...\{02594FB6-9905-CBB9-10E8-EFCFB7122D7C}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools x86 (HKLM-x32\...\{1C966E96-8553-EF1E-A06F-A8174B3CAA60}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools x86 (HKLM-x32\...\{540ADDB0-7A37-9B99-3568-FD1EA33D3B38}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools x86 (HKLM-x32\...\{CACD4EBA-F620-A294-1B60-3CEB0954FE02}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK DirectX x64 Remote (HKLM\...\{7E23CCDF-D8BD-36F8-CB1F-1DDE0D2B3F07}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK DirectX x86 Remote (HKLM-x32\...\{8122ABB9-0148-144D-F136-C3AFF4B985DB}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK EULA (HKLM-x32\...\{5F56BF12-0818-B58A-5862-939784E12F8B}) (Version: 10.1.18362.1 - Microsoft Corporations) Hidden
Windows SDK EULA (HKLM-x32\...\{A50A075D-973C-1867-4228-738205D555C8}) (Version: 10.1.19041.685 - Microsoft Corporations) Hidden
Windows SDK EULA (HKLM-x32\...\{E473E2C8-92A5-BA58-31B1-D24F923D927B}) (Version: 10.1.22621.3233 - Microsoft Corporations) Hidden
Windows SDK Facade Windows WinMD Versioned (HKLM-x32\...\{2D296649-CFBE-CF23-EA8E-E24554187B3F}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Facade Windows WinMD Versioned (HKLM-x32\...\{31B6D021-BC97-82C5-9C42-16AB86C37215}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK Facade Windows WinMD Versioned (HKLM-x32\...\{7741665B-2D3B-7E24-1014-56B62296CD88}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Facade Windows WinMD Versioned (HKLM-x32\...\{A5EF45C5-FA27-7E8F-1AE8-E3D39BAC779E}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps (HKLM-x32\...\{6136B5FC-9FAD-B577-C5EA-AF2D266B7293}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Contracts (HKLM-x32\...\{2A8533B3-8D16-67E4-E729-5BB04EDD2FE4}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Contracts (HKLM-x32\...\{5F1CD2CB-9C4E-BF51-9C82-DE916CA5E4AE}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Contracts (HKLM-x32\...\{AD3B32A0-5F71-DE89-B55A-9E85964186D8}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Contracts (HKLM-x32\...\{C13D21F1-E9A3-FB93-18C4-B905FB47F122}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps DirectX x86 Remote (HKLM-x32\...\{0E2FEA3B-C853-DE2A-8A04-BB7D5BF010E0}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps DirectX x86 Remote (HKLM-x32\...\{31A3EB09-E226-B0E5-FA70-FF4B3CAD2ECF}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps DirectX x86 Remote (HKLM-x32\...\{5E5BB524-BA91-E7DE-4A85-11EC531AA622}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps DirectX x86 Remote (HKLM-x32\...\{8F21D4CD-9CB4-2648-EECC-60147DE7B32D}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Headers (HKLM-x32\...\{65E9398F-77A0-8681-026C-8CF092A71F11}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Headers (HKLM-x32\...\{76749279-BE8A-20AF-F257-0A79E080CF7E}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Headers (HKLM-x32\...\{8E9DD3FE-3338-8012-81C5-F3AA9B617BAE}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Headers (HKLM-x32\...\{A1DA436A-2FA4-FDC2-9B0A-FBB40CF0499D}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Libs (HKLM-x32\...\{1FBBD022-F751-FE7B-54DF-9FED23892B2F}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Libs (HKLM-x32\...\{217E19C8-ACC0-C7ED-AB69-A30F3F96C625}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Libs (HKLM-x32\...\{C8977C7D-F685-8282-3C78-6276E03E3B32}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Libs (HKLM-x32\...\{CE1B7747-A39C-46B8-EB6F-01E5262B1289}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Metadata (HKLM-x32\...\{2CFB2180-7C20-5470-4B8A-747512A6AB70}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Metadata (HKLM-x32\...\{4A130AF9-EC97-7D26-1FB0-03A0E5CC672B}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Metadata (HKLM-x32\...\{5FAF2ED2-CA24-0313-8CAF-C28DEE421200}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Metadata (HKLM-x32\...\{7907F380-3CFD-247C-9DFC-A23CED2012F8}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Tools (HKLM-x32\...\{35552522-5930-E1A1-B1E9-FF78918E1543}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Tools (HKLM-x32\...\{4AC6C7FB-D848-9D68-DCB0-1376083FEA3A}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Tools (HKLM-x32\...\{68F11757-8C35-BEB6-2AED-6F7C6CC5B8C0}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Tools (HKLM-x32\...\{A5174AE6-3704-EE0A-BEFF-21BC5275BA02}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Managed Apps Libs (HKLM-x32\...\{0374E0D0-98AE-0078-841E-DE9F70EDCB90}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Managed Apps Libs (HKLM-x32\...\{B0CB401F-F1EF-E63C-8191-9A447FC24C58}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Managed Apps Libs (HKLM-x32\...\{CEDD7BE6-97B5-9AE8-57C0-B390E0C4328F}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Managed Apps Libs (HKLM-x32\...\{FF7D4409-CF59-34AE-BDC7-8A6146A9BA36}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Modern Non-Versioned Developer Tools (HKLM-x32\...\{76D32574-2D58-5B25-A3D7-8B2CB4873306}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Modern Versioned Developer Tools (HKLM-x32\...\{21514D7D-4124-E52E-8483-727380B855D7}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Modern Versioned Developer Tools (HKLM-x32\...\{C65278B7-2A3B-2D88-1489-991195ECF5F2}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Modern Versioned Developer Tools (HKLM-x32\...\{EA338ECA-C63F-4BD6-B66F-274433C75A49}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK Modern Versioned Developer Tools (HKLM-x32\...\{FC5A59F8-6BEE-FBB4-C720-47C565A92798}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows SDK Redistributables (HKLM-x32\...\{417DF3A3-09A1-3EAE-9F6C-5EB8DB4AD0F2}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Signing Tools (HKLM-x32\...\{0F5E7D7D-8969-DC1B-205D-024FB54A0417}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows SDK Signing Tools (HKLM-x32\...\{4CA7ABF1-DB68-0F9E-5AD9-58550198D0AC}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Signing Tools (HKLM-x32\...\{56E349AC-F849-A151-269B-8CFF2D14BB14}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows SDK Signing Tools (HKLM-x32\...\{B62A26BB-90A0-82FB-2DDC-3157ADF07833}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows Software Development Kit - Windows 10.0.18362.1 (HKLM-x32\...\{126dedf0-cc0e-4b48-9ece-806b0e437195}) (Version: 10.1.18362.1 - Microsoft Corporation)
Windows Software Development Kit - Windows 10.0.19041.685 (HKLM-x32\...\{4591faf1-a2db-4a3d-bfda-aa5a4ebb1587}) (Version: 10.1.19041.685 - Microsoft Corporation)
Windows Software Development Kit - Windows 10.0.22000.832 (HKLM-x32\...\{d6a76ead-c762-4d93-9c24-1fa3efa1e12d}) (Version: 10.1.22000.832 - Microsoft Corporation)
Windows Software Development Kit - Windows 10.0.22621.3233 (HKLM-x32\...\{71684ad3-afc2-4a65-9d45-92ef58510f18}) (Version: 10.1.22621.3233 - Microsoft Corporation)
Windows Subsystem for Linux (HKLM\...\{57CD6412-C4AC-431F-8753-46A620EF3A4E}) (Version: 2.2.4.0 - Microsoft Corporation) Hidden
Windows Subsystem for Linux Update (HKLM\...\{F8474A47-8B5D-4466-ACE3-78EAB3BF21A8}) (Version: 5.10.102.1 - Microsoft Corporation)
Windows Team Extension SDK (HKLM-x32\...\{14705B25-5AC2-82AC-DB79-A35219016ABB}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows Team Extension SDK (HKLM-x32\...\{6EEDDD9D-BF7B-8229-92B4-89DFCF7481ED}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows Team Extension SDK (HKLM-x32\...\{908BD5F8-E6C6-D2F6-AC09-C9F36EBC1A5F}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
Windows Team Extension SDK (HKLM-x32\...\{CE7E4A6A-45A2-2968-4B34-D0D4CFCC0E1D}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows Team Extension SDK Contracts (HKLM-x32\...\{5D60A4EF-6EDF-AAF4-F0F0-49FDD40176B8}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows Team Extension SDK Contracts (HKLM-x32\...\{5F1D4DE5-BFF3-503B-D05F-40ED6927DE17}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Windows Team Extension SDK Contracts (HKLM-x32\...\{5F616EBF-DF09-A2DA-AB66-3A5341FA611C}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
Windows Team Extension SDK Contracts (HKLM-x32\...\{FAA6B22E-702C-2AC7-05B1-197CD7CEA21D}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
windows_toolscorepkg (HKLM-x32\...\{8B348192-D4E4-41ED-847C-16FDA0C151D2}) (Version: 17.10.34804 - Microsoft Corporation) Hidden
WinRAR 7.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 7.01.0 - win.rar GmbH)
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{B3CFDD53-69FB-E652-4F3D-D3781CF7F66E}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{BCF7CA0F-E53C-2A4F-B128-A751EC9A1016}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{E67F1F03-FB4A-3D61-8999-E6A4C4B26F34}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{FBF034E1-563E-1F9D-DC45-491BB88E9B9E}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{538E91F2-5231-E289-051F-DB55DE88CF56}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{7EF010FF-7800-28BA-FF49-2D219EC7BA82}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{837DD890-14CE-9EB3-E8E1-F96A7EE5CFE5}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{B42BF427-AFDB-C00F-DB60-6F51395D74A1}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{3335615C-ABEB-960E-2226-4274CD28E046}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{36AE12FB-4349-6EAA-B6E4-5F4E06FA8AE8}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{44E4AFD9-74E0-9631-4CE0-E7C779624FE2}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{823E92A6-7572-174D-0671-95A55785F991}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{216D5F47-257D-6284-5849-B51037875EFA}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{3A8F388C-D0F7-0A66-0EDE-D477B1B1B2F4}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{6430F847-9A5F-B3B8-7EEE-355F9F1CCD47}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{6B03A6A4-643C-57CE-CA6F-4E19BF47497A}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
WinRT Intellisense Mobile - en-us (HKLM-x32\...\{0F2D2736-F436-3F10-FB30-9D279F58305B}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
WinRT Intellisense Mobile - en-us (HKLM-x32\...\{443FF51E-16C3-F23B-18FC-0D1D66024B0B}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense Mobile - en-us (HKLM-x32\...\{7E99A93A-8345-8BB6-EADB-10461E81BE0F}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
WinRT Intellisense Mobile - en-us (HKLM-x32\...\{918A448F-59E8-FBF5-B087-D3F07160C7E0}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{15E29AFF-CB19-A20B-9A81-B0765A63115F}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{66483041-F590-EC46-4AF0-EE39C62FB680}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{C5BEF528-FEAA-9607-907E-0972D86AD06F}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{FEAF2203-A2AC-080C-9D55-9F09623F38C3}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{5EBB309A-2974-F721-42A9-0212E54B3693}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{9C61E6D2-C43E-6746-B519-6185558C4A24}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{A06212FE-3C20-31C7-F88A-46673EF72E83}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{FF2B49B7-0254-3D6A-4BE0-EF4C59DBCC2B}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{0AF3B821-474B-1885-473A-6E3FB4F1CF71}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{4308116D-A763-144D-DC81-6243BE6B2ADF}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{6B37CC5B-78DF-5050-2215-68479716A587}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{94DE555A-B513-762F-D7C6-2B2922940641}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{250D5341-0879-4016-399C-BBCD87B80E95}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{3C25B44A-1D95-9E5E-57E3-19D9AE3C3BC1}) (Version: 10.1.22621.3233 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{8832F8ED-1035-9ABE-FD73-4E5ABAA84A5C}) (Version: 10.1.19041.685 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{D307C8A5-7335-056E-6E64-E28544674EFD}) (Version: 10.1.22000.832 - Microsoft Corporation) Hidden
Wireshark 4.2.6 x64 (HKLM-x32\...\Wireshark) (Version: 4.2.6 - The Wireshark developer community, hxxps://www.wireshark.org)
WPT Redistributables (HKLM-x32\...\{A8E21603-6CBA-D168-ADF7-108A1DA16DB5}) (Version: 10.1.22621.3233 - Microsoft) Hidden
WPTx64 (DesktopEditions) (HKLM-x32\...\{DBD97598-BDA1-233D-708C-14FE85D60F3B}) (Version: 10.1.22621.3233 - Microsoft) Hidden
WPTx64 (OnecoreUAP) (HKLM-x32\...\{1D1FEDA5-D45A-C685-9947-A127B647407C}) (Version: 10.1.22621.3233 - Microsoft) Hidden
Zoom Workplace (HKU\S-1-5-21-3087490873-3835733739-2015806437-2967\...\ZoomUMX) (Version: 6.1.1 (41705) - Zoom Video Communications, Inc.)

Packages:
=========

Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC [2024-06-25] ()
Copilot -> C:\Program Files\WindowsApps\Microsoft.Copilot_1.0.4.0_neutral__8wekyb3d8bbwe [2024-08-04] (Microsoft Corporation)
Dev Home (Preview) -> C:\Program Files\WindowsApps\Microsoft.Windows.DevHome_0.1601.561.0_x64__8wekyb3d8bbwe [2024-07-17] (Microsoft Corporation) [Startup Task]
Microsoft Edge Dev -> C:\Program Files (x86)\Microsoft\Edge Dev\Application [2024-08-09] ()
Microsoft Teams -> C:\Program Files\WindowsApps\MSTeams_24193.1805.3040.8975_x64__8wekyb3d8bbwe [2024-08-12] (Microsoft) [Startup Task]
MicrosoftWindows.CrossDevice -> C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.24071.45.0_x64__cw5n1h2txyewy [2024-08-07] (Microsoft Windows) [Startup Task]
Notepad++ -> C:\Program Files\Notepad++\contextMenu [2024-07-16] (Notepad++)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.966.0_x64__56jybvy8sckqj [2024-08-01] (NVIDIA Corp.)
Waves MaxxAudio Pro for Dell 2021 -> C:\Program Files\WindowsApps\WavesAudio.MaxxAudioProforDell2021_4.0.53.0_x64__fh4rh281wavaa [2024-07-11] (Waves Audio)
Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\LKG\MicrosoftWindows.LKG.DesktopSpotlight_cw5n1h2txyewy [2024-07-26] (Microsoft Windows)
Windows Package Manager Source (platform) -> C:\Program Files\WindowsApps\Microsoft.Winget.Platform.Source_2024.619.2424.27_neutral__8wekyb3d8bbwe [2024-06-25] (Microsoft Corporation)
Windows-Fotoanzeige -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2024.11070.31001.0_x64__8wekyb3d8bbwe [2024-08-02] (Microsoft Corporation) [Startup Task]
WinRAR -> C:\Program Files\WinRAR [2024-07-08] (win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3087490873-3835733739-2015806437-2967_Classes\CLSID\{0BAD39CB-DD3E-4F21-9156-649B0156C28E}\localserver32 -> C:\Windows\System32\DriverStore\FileRepository\wavesapo10de.inf_amd64_e306bdf9c02213dc\WavesSvc64.exe (Waves Inc -> Waves Audio Ltd.)
CustomCLSID: HKU\S-1-5-21-3087490873-3835733739-2015806437-2967_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-3087490873-3835733739-2015806437-2967_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\ALB\AppData\Local\Microsoft\TeamsMeetingAdd-in\1.24.19202\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3087490873-3835733739-2015806437-2967_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-3087490873-3835733739-2015806437-2967_Classes\CLSID\{9BAB8D70-E5C8-453A-BF90-E4083C53FE74} -> [ownCloud] => C:\Users\ALB\ownCloud [2024-07-29 09:25]
CustomCLSID: HKU\S-1-5-21-3087490873-3835733739-2015806437-2967_Classes\CLSID\{a224b3e2-4a74-4173-e7e1-995095b972c7}\localserver32 -> C:\Program Files\UniGetUI\UniGetUI.exe (Marti Climent -> )
CustomCLSID: HKU\S-1-5-21-3087490873-3835733739-2015806437-2967_Classes\CLSID\{b0522089-faef-3c82-eb45-511c9bbcf9e2}\localserver32 -> C:\Program Files\UniGetUI\WingetUI.exe (Marti Climent -> )
CustomCLSID: HKU\S-1-5-21-3087490873-3835733739-2015806437-2967_Classes\CLSID\{BEA218D2-6950-497B-9434-61683EC065FE}\InprocServer32 -> C:\Users\ALB\AppData\Local\Programs\Python\Launcher\pyshellext.amd64.dll (Python Software Foundation -> Python Software Foundation)
ShellIconOverlayIdentifiers: [  OCError] -> {0960F090-F328-48A3-B746-276B1E3C3722} => C:\Program Files\ownCloud\OCOverlays.dll [2024-06-11] (ownCloud GmbH -> )
ShellIconOverlayIdentifiers: [  OCOK] -> {0960F092-F328-48A3-B746-276B1E3C3722} => C:\Program Files\ownCloud\OCOverlays.dll [2024-06-11] (ownCloud GmbH -> )
ShellIconOverlayIdentifiers: [  OCOKShared] -> {0960F093-F328-48A3-B746-276B1E3C3722} => C:\Program Files\ownCloud\OCOverlays.dll [2024-06-11] (ownCloud GmbH -> )
ShellIconOverlayIdentifiers: [  OCSync] -> {0960F094-F328-48A3-B746-276B1E3C3722} => C:\Program Files\ownCloud\OCOverlays.dll [2024-06-11] (ownCloud GmbH -> )
ShellIconOverlayIdentifiers: [  OCWarning] -> {0960F096-F328-48A3-B746-276B1E3C3722} => C:\Program Files\ownCloud\OCOverlays.dll [2024-06-11] (ownCloud GmbH -> )
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Keine Datei
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2024-06-19] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [PDFXChange Editor Context menu] -> {2ACD35AB-F74A-4C20-AA9B-2DE80081626D} => C:\Program Files\Tracker Software\Shell Extensions\XCShellMenu.x64.dll [2022-04-13] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2024-08-13] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers3: [OCContextMenuHandler] -> {841A0AAD-AA11-4B50-84D9-7F8E727D77D7} => C:\Program Files\ownCloud\OCContextMenu.dll [2024-06-11] (ownCloud GmbH -> )
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2024-06-19] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvddi.inf_amd64_b740ade77f86efb0\nvshext.dll [2024-07-11] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2024-06-19] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2024-08-13] (Malwarebytes Inc. -> Malwarebytes)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\Users\ALB\Desktop\Geschäftlich - Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory="Default"
ShortcutWithArgument: C:\Users\ALB\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\e4ed22b324357c2e\PRIVAT - Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory="Profile 2"

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2024-07-28 17:32 - 2024-07-28 15:53 - 000006656 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.Core.Classes.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000015872 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.Core.Data.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000018432 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.Core.IconEngine.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000014336 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.Core.LanguageEngine.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000005120 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.Core.Logging.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000004608 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.Core.Settings.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000019456 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.Core.Tools.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000026624 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.Interface.BackgroundApi.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000005120 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.Interface.Enums.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000083456 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.PackageEngine.Classes.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000029184 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.PackageEngine.Managers.Chocolatey.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000024064 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.PackageEngine.Managers.Dotnet.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000023040 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.PackageEngine.Managers.Generic.NuGet.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000025600 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.PackageEngine.Managers.Npm.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000024064 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.PackageEngine.Managers.Pip.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000026112 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.PackageEngine.Managers.PowerShell.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000026112 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.PackageEngine.Managers.PowerShell7.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000038912 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.PackageEngine.Managers.Scoop.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000089088 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.PackageEngine.Managers.WinGet.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000021504 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.PackageEngine.PackageLoaders.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000007168 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.PackageEngine.PEInterface.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000008704 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.PackageEngine.Serializable.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000006656 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.PackageEngine.Structs.dll
2019-07-25 14:29 - 2019-07-25 14:29 - 000045056 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\SwyxIt!\SPLicense.dll
2023-09-05 07:12 - 2023-09-05 07:12 - 000187392 _____ () [Datei ist nicht signiert] C:\Program Files\ownCloud\brotlicommon.dll
2023-09-05 07:12 - 2023-09-05 07:12 - 000109568 _____ () [Datei ist nicht signiert] C:\Program Files\ownCloud\brotlidec.dll
2023-09-05 07:14 - 2023-09-05 07:14 - 002054656 _____ () [Datei ist nicht signiert] C:\Program Files\ownCloud\harfbuzz.dll
2023-09-06 03:23 - 2023-09-06 03:23 - 000109056 _____ () [Datei ist nicht signiert] C:\Program Files\ownCloud\kdsingleapplication-qt6.dll
2023-09-05 07:13 - 2023-09-05 07:13 - 000105984 _____ () [Datei ist nicht signiert] C:\Program Files\ownCloud\libbzip2.dll
2023-09-05 07:12 - 2023-09-05 07:12 - 000260096 _____ () [Datei ist nicht signiert] C:\Program Files\ownCloud\libpng16.dll
2023-09-06 03:22 - 2023-09-06 03:22 - 000051712 _____ () [Datei ist nicht signiert] C:\Program Files\ownCloud\libsharpyuv.dll
2023-09-05 07:13 - 2023-09-05 07:13 - 001349632 _____ () [Datei ist nicht signiert] C:\Program Files\ownCloud\libsqlite.dll
2023-09-06 03:22 - 2023-09-06 03:22 - 000529920 _____ () [Datei ist nicht signiert] C:\Program Files\ownCloud\libwebp.dll
2023-09-06 03:22 - 2023-09-06 03:22 - 000050688 _____ () [Datei ist nicht signiert] C:\Program Files\ownCloud\libwebpdemux.dll
2023-09-06 03:22 - 2023-09-06 03:22 - 000077312 _____ () [Datei ist nicht signiert] C:\Program Files\ownCloud\libwebpmux.dll
2023-09-05 07:13 - 2023-09-05 07:13 - 000412672 _____ () [Datei ist nicht signiert] C:\Program Files\ownCloud\pcre2-16.dll
2023-09-06 03:23 - 2023-09-06 03:23 - 000094208 _____ () [Datei ist nicht signiert] C:\Program Files\ownCloud\qt6keychain.dll
2023-09-06 03:22 - 2023-09-06 03:22 - 000570368 _____ () [Datei ist nicht signiert] C:\Program Files\ownCloud\tiff.dll
2023-09-05 06:48 - 2023-09-05 06:48 - 000130048 _____ () [Datei ist nicht signiert] C:\Program Files\ownCloud\zlib1.dll
2024-07-28 17:32 - 2019-04-27 12:54 - 000919552 _____ (Andreas Håkansson, Steven Robbins and contributors) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\Nancy.dll
2024-07-28 17:32 - 2019-04-27 12:55 - 000024064 _____ (Andreas Håkansson, Steven Robbins and contributors) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\Nancy.Hosting.Self.dll
2019-03-04 12:38 - 2021-05-20 01:00 - 011346944 _____ (CANON INC.) [Datei ist nicht signiert] C:\WINDOWS\system32\spool\DRIVERS\x64\3\Cnp60MUI_D69BE.DLL
2024-07-28 17:32 - 2024-07-28 16:20 - 000380928 _____ (ExternalLibraries.WindowsPackageManager.Interop) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\ExternalLibraries.WindowsPackageManager.Interop.dll
2019-07-25 14:29 - 2019-07-25 14:29 - 001922048 _____ (GN Audio A/S) [Datei ist nicht signiert] C:\Program Files (x86)\SwyxIt!\Plugins\libjabra.dll
2024-07-28 17:32 - 2024-07-10 04:58 - 000391168 _____ (havendv) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\H.NotifyIcon.dll
2024-07-28 17:32 - 2024-07-10 05:00 - 000171520 _____ (havendv) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\H.NotifyIcon.WinUI.dll
2024-07-03 15:26 - 2024-06-19 09:00 - 000101376 _____ (Igor Pavlov) [Datei ist nicht signiert] C:\Program Files\7-Zip\7-zip.dll
2024-07-28 17:32 - 2023-10-11 17:15 - 000056320 _____ (Jeff Hansen) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\Jeffijoe.MessageFormat.dll
2024-07-28 17:32 - 2024-07-28 15:53 - 000017408 _____ (Martí Climent and the contributors) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\UniGetUI\UniGetUI.PackageEngine.Interfaces.dll
2023-09-05 07:12 - 2023-09-05 07:12 - 001091584 _____ (Meta Platforms, Inc.) [Datei ist nicht signiert] C:\Program Files\ownCloud\zstd.dll
2024-07-04 08:53 - 2024-07-04 08:53 - 000000000 ____L (NVIDIA Corporation) [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\PlugIns\NVIDIA app\MessageBusRouter.dll] C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\PlugIns\NVIDIA Overlay\MessageBusRouter.dll
2024-07-04 08:53 - 2024-07-04 08:53 - 000000000 ____L (NVIDIA Corporation) [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA app\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll
2020-05-30 20:04 - 2020-05-30 20:04 - 001638912 _____ (Robert Simpson, et al.) [Datei ist nicht signiert] C:\Program Files\Cylance\Desktop\SQLite.Interop.dll
2024-07-15 08:01 - 2024-07-15 08:01 - 000269824 _____ (Swyx Solutions GmbH) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\IpPbx.Confifec5fcc9#\a1aa6bfd9d3fac13da827dae31856dcd\IpPbx.Configuration.Model.ni.dll
2024-07-15 08:01 - 2024-07-15 08:01 - 013486592 _____ (Swyx Solutions GmbH) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\IpPbxCDSClientLib\192b055d03b751c627737dedfe560152\IpPbxCDSClientLib.ni.dll
2024-07-15 08:01 - 2024-07-15 08:01 - 001098752 _____ (Swyx Solutions GmbH) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\IpPbxCDSSharedLib\3b0e22c70373714d4f475dc6a5a0c8ff\IpPbxCDSSharedLib.ni.dll
2024-07-15 08:01 - 2024-07-15 08:01 - 015433216 _____ (Swyx Solutions GmbH) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\IpPbxCDSWrap\85faed9f5c0b5d7604cd7ad95d1538db\IpPbxCDSWrap.ni.dll
2024-07-15 08:01 - 2024-07-15 08:01 - 000068608 _____ (Swyx Solutions GmbH) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\IpPbxTracing\9888155b2264209ea5619583a524b11b\IpPbxTracing.ni.dll
2019-07-25 14:29 - 2019-07-25 14:29 - 000049152 _____ (Tenovis GmbH & Co. KG) [Datei ist nicht signiert] C:\Program Files (x86)\SwyxIt!\UHS02.dll
2023-09-05 07:17 - 2023-09-05 07:17 - 000846336 _____ (The FreeType Project) [Datei ist nicht signiert] C:\Program Files\ownCloud\freetype.dll
2023-09-05 07:12 - 2023-09-05 07:12 - 000840704 _____ (The libjpeg-turbo Project) [Datei ist nicht signiert] C:\Program Files\ownCloud\jpeg62.dll
2023-09-05 07:11 - 2023-09-05 07:11 - 006146560 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\ownCloud\libcrypto-3-x64.dll
2023-09-05 07:11 - 2023-09-05 07:11 - 000779264 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\ownCloud\libssl-3-x64.dll
2023-09-05 07:48 - 2023-09-05 07:48 - 000051712 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\iconengines\qsvgicon.dll
2023-09-08 01:34 - 2023-09-08 01:34 - 000036352 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\imageformats\qgif.dll
2023-09-06 03:23 - 2023-09-06 03:23 - 000043520 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\imageformats\qicns.dll
2023-09-08 01:34 - 2023-09-08 01:34 - 000035328 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\imageformats\qico.dll
2023-09-08 01:34 - 2023-09-08 01:34 - 000044032 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\imageformats\qjpeg.dll
2023-09-05 07:48 - 2023-09-05 07:48 - 000028672 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\imageformats\qsvg.dll
2023-09-06 03:23 - 2023-09-06 03:23 - 000027136 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\imageformats\qtga.dll
2023-09-06 03:23 - 2023-09-06 03:23 - 000040960 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\imageformats\qtiff.dll
2023-09-06 03:23 - 2023-09-06 03:23 - 000025088 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\imageformats\qwbmp.dll
2023-09-06 03:23 - 2023-09-06 03:23 - 000032256 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\imageformats\qwebp.dll
2023-09-08 01:31 - 2023-09-08 01:31 - 000060928 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\networkinformation\qnetworklistmanager.dll
2023-09-08 01:33 - 2023-09-08 01:33 - 000801792 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\platforms\qwindows.dll
2023-09-08 01:29 - 2023-09-08 01:29 - 005121024 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\Qt6Core.dll
2023-09-08 01:31 - 2023-09-08 01:31 - 005952512 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\Qt6Gui.dll
2023-09-08 01:30 - 2023-09-08 01:30 - 001512960 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\Qt6Network.dll
2023-09-05 07:48 - 2023-09-05 07:48 - 000342528 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\Qt6Svg.dll
2023-09-08 01:33 - 2023-09-08 01:33 - 005912064 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\Qt6Widgets.dll
2023-09-08 01:30 - 2023-09-08 01:30 - 000123904 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\Qt6Xml.dll
2023-09-08 01:34 - 2023-09-08 01:34 - 000145920 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\styles\qwindowsvistastyle.dll
2023-09-08 01:31 - 2023-09-08 01:31 - 000086016 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\tls\qcertonlybackend.dll
2023-09-08 01:31 - 2023-09-08 01:31 - 000218624 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\tls\qopensslbackend.dll
2023-09-08 01:31 - 2023-09-08 01:31 - 000200704 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\ownCloud\tls\qschannelbackend.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========

BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2021-08-17] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2021-06-05 14:08 - 2024-07-16 13:10 - 000001060 _____ C:\WINDOWS\system32\drivers\etc\hosts
192.168.168.80 host.docker.internal
192.168.168.80 gateway.docker.internal
127.0.0.1 kubernetes.docker.internal

2024-07-02 14:38 - 2024-08-13 08:26 - 000000523 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
172.20.144.1 PC-80-Boes.mshome.net # 2029 8 0 12 6 26 34 287
2024 8 5 2 7 5 25 371
172.28.32.1 PC-80-Boes.mshome.net # 2029 8 3 1 6 2 28 663

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Common Files\Oracle\Java\javapath;C:\Python311\Scripts\;C:\Python311\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\dotnet\;C:\Program Files\Mercurial\;C:\Program Files\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\;C:\Program Files\NVIDIA Corporation\NVIDIA app\NvDLISR;C:\Program Files\Docker\Docker\resources\bin;C:\Program Files (x86)\PuTTY\;C:\Program Files\Git\cmd;Z:\VSC_Repos\ffmpeg\bin;;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common
HKU\S-1-5-21-3087490873-3835733739-2015806437-2967\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 192.168.168.249 - 192.168.168.247
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
 ist aktiviert.

Network Binding:
=============
OpenVPN Connect DCO Adapter: OpenVPN Data Channel Offload -> ovpn-dco.sys
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys
Ethernet 4: Realtek USB GbE Family Controller -> rtucx22x64.sys
Bluetooth-Netzwerkverbindung: Bluetooth Device (Personal Area Network) -> bthpan.sys
WLAN: Intel(R) Wi-Fi 6 AX201 160MHz -> Netwtw14.sys
LAN-Verbindung: TAP-Windows Adapter V9 for OpenVPN Connect -> tap_ovpnconnect.sys
Ethernet 2: VirtualBox Host-Only Ethernet Adapter #2 -> VBoxNetAdp6.sys

vms_vsf: Erweiterungsfilter für virtuellen Hyper-V-Switch
oracle_VBoxNetLwf: VirtualBox NDIS6 Bridged Networking Driver
INSECURE_NPCAP: Npcap Packet Driver (NPCAP)
ms_winvfp: Microsoft Azure VFP Switch Filter Extension
vms_vsp: Extension-Protokoll für virtuellen Hyper-V-Switch

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKLM\...\StartupApproved\Run: => "svStartSignaturClient6"
HKU\S-1-5-21-3087490873-3835733739-2015806437-2967\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_17A2D1DA8539E16A1168BD4593E8A124"
HKU\S-1-5-21-3087490873-3835733739-2015806437-2967\...\StartupApproved\Run: => "Docker Desktop"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [UDP Query User{C452CE1E-1C51-4B37-95CB-732249D79C3D}C:\program files\microsoft visual studio\2022\community\common7\ide\extensions\microsoft\liveshare\agent\vsls-agent.exe] => (Block) C:\program files\microsoft visual studio\2022\community\common7\ide\extensions\microsoft\liveshare\agent\vsls-agent.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{379A3548-5F91-4543-A145-1B13545F183D}C:\program files\microsoft visual studio\2022\community\common7\ide\extensions\microsoft\liveshare\agent\vsls-agent.exe] => (Block) C:\program files\microsoft visual studio\2022\community\common7\ide\extensions\microsoft\liveshare\agent\vsls-agent.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1CAD7690-9933-4283-819E-A9B0FAE20712}] => (Block) C:\users\jso\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B1E6C787-D1E4-4E01-8D77-150B95C7A32B}] => (Block) C:\users\jso\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{8661F9A1-1D60-45AD-A7D6-71ED26E5B443}C:\users\jso\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\jso\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{9681930E-A55D-4684-8EBB-9AF67EA71D89}C:\users\jso\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\jso\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3AF6178B-17CB-46B1-BF8C-1F0ACBF9C7C5}] => (Allow) C:\Program Files (x86)\SwyxIt!\SwyxIt!.exe (Swyx Solutions AG -> Swyx Solutions GmbH)
FirewallRules: [{6167D759-B725-4134-8991-A7FB36143551}] => (Allow) C:\Program Files (x86)\SwyxIt!\CLMgr.exe (Swyx Solutions AG -> Swyx Solutions GmbH)
FirewallRules: [{54A0F955-BB48-4427-9AD5-27F1D0AFFEB7}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22183.300.1431.9295_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2D64EC0C-4AFC-4306-88B9-1EE0751EBD55}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22183.300.1431.9295_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{1C3A83ED-EAD2-44FB-AE1B-C8DEB7D72193}C:\program files\java\jdk-17\bin\java.exe] => (Allow) C:\program files\java\jdk-17\bin\java.exe
FirewallRules: [UDP Query User{100A1878-EBB6-42B0-A66D-0E07E3956764}C:\program files\java\jdk-17\bin\java.exe] => (Allow) C:\program files\java\jdk-17\bin\java.exe
FirewallRules: [{1701810A-0172-47C4-A6E3-7D264BD9CD0C}] => (Allow) C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Recovery.exe (Veeam Software Group GmbH -> Veeam Software Group GmbH)
FirewallRules: [{BDF828A8-4852-4AD6-B1C6-8DFE751342DC}] => (Allow) C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Service.exe (Veeam Software Group GmbH -> Veeam Software Group GmbH)
FirewallRules: [{6C016B13-5050-435D-B8FA-36A1D6AF1C8B}] => (Allow) C:\Program Files\Veeam\Endpoint Backup\Veeam.EndPoint.Service.exe (Veeam Software Group GmbH -> Veeam Software Group GmbH)
FirewallRules: [{A81AFF0B-91FF-4722-B9B2-F39C6621D280}] => (Allow) C:\Program Files\Veeam\Endpoint Backup\x64\VeeamAgent.exe (Veeam Software Group GmbH -> Veeam Software Group GmbH)
FirewallRules: [{34F28AD4-AA0A-45ED-A0E7-55F9B2D89A59}] => (Allow) C:\Program Files\Veeam\Endpoint Backup\x64\VeeamAgent.exe (Veeam Software Group GmbH -> Veeam Software Group GmbH)
FirewallRules: [{BD4C0D34-A63A-4BCF-8B17-3F1FC68C55C1}] => (Allow) C:\Program Files\Veeam\Endpoint Backup\VeeamDeploymentSvc.exe (Veeam Software Group GmbH -> Veeam Software Group GmbH)
FirewallRules: [{1A2D6056-7A1D-4AFE-A4A5-B1069904F8D9}] => (Allow) C:\Program Files\Veeam\Endpoint Backup\VeeamDeploymentSvc.exe (Veeam Software Group GmbH -> Veeam Software Group GmbH)
FirewallRules: [{DCFBA248-D0A3-48C8-9F4C-9E2CACEBC22A}] => (Allow) C:\Program Files (x86)\Microsoft\Edge Dev\Application\msedge.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D7E0499E-1C42-4196-BC64-C2D68C0674F0}] => (Allow) C:\Program Files (x86)\Microsoft\Edge Dev\Application\129.0.2752.4\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{81F336A4-FE30-435B-B624-3AE2EF9EA70D}] => (Allow) C:\Program Files\WindowsApps\MSTeams_24193.1805.3040.8975_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CC70E3FD-70B2-4ACF-8596-BDFC0E81B8A3}] => (Allow) C:\Program Files\WindowsApps\MSTeams_24193.1805.3040.8975_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{538F59E6-94B6-4E7E-B6AC-372C4237FEA9}] => (Allow) LPort=8001
FirewallRules: [{5BB682DB-2335-45B3-AD24-33327CDB763C}] => (Allow) LPort=8001
FirewallRules: [TCP Query User{ED09B9EF-21B8-4FE2-BC5D-179126AB4EB6}C:\program files\obs-studio\bin\64bit\obs64.exe] => (Block) C:\program files\obs-studio\bin\64bit\obs64.exe (Hugh Bailey -> OBS)
FirewallRules: [UDP Query User{90F29E93-D58D-41EE-A9C3-B6F3E85EE602}C:\program files\obs-studio\bin\64bit\obs64.exe] => (Block) C:\program files\obs-studio\bin\64bit\obs64.exe (Hugh Bailey -> OBS)
FirewallRules: [{96F24920-1A7E-4C77-9F1D-5C530ED7072C}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\127.0.2651.98\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Wiederherstellungspunkte =========================

08-08-2024 10:15:39 Restore Point by HiJackThis+
09-08-2024 13:21:27 Windows Modules Installer
09-08-2024 13:27:54 Removed VMware Workstation
13-08-2024 08:18:32 Removed Duo Desktop

==================== Fehlerhafte Geräte im Gerätemanager ============

Name: Realtek USB GbE Family Controller
Description: Realtek USB GbE Family Controller
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek
Service: rtucx22x64
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: VirtualBox Host-Only Ethernet Adapter #2
Description: VirtualBox Host-Only Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Oracle Corporation
Service: VBoxNetAdp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Intel(R) Wi-Fi 6 AX201 160MHz
Description: Intel(R) Wi-Fi 6 AX201 160MHz
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel Corporation
Service: Netwtw14
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (08/13/2024 08:28:47 AM) (Source: CylanceSvc) (EventID: 16) (User: )
Description: <<<Driver Failed To Connect, Device Not Protected>>>

Error: (08/13/2024 08:28:42 AM) (Source: CylanceSvc) (EventID: 16) (User: )
Description: <<<Driver Failed To Connect, Device Not Protected>>>

Error: (08/13/2024 08:28:37 AM) (Source: CylanceSvc) (EventID: 16) (User: )
Description: <<<Driver Failed To Connect, Device Not Protected>>>

Error: (08/13/2024 08:28:32 AM) (Source: CylanceSvc) (EventID: 16) (User: )
Description: <<<Driver Failed To Connect, Device Not Protected>>>

Error: (08/13/2024 08:28:27 AM) (Source: CylanceSvc) (EventID: 16) (User: )
Description: <<<Driver Failed To Connect, Device Not Protected>>>

Error: (08/13/2024 08:28:22 AM) (Source: CylanceSvc) (EventID: 16) (User: )
Description: <<<Driver Failed To Connect, Device Not Protected>>>

Error: (08/13/2024 08:28:17 AM) (Source: CylanceSvc) (EventID: 16) (User: )
Description: <<<Driver Failed To Connect, Device Not Protected>>>

Error: (08/13/2024 08:28:12 AM) (Source: CylanceSvc) (EventID: 16) (User: )
Description: <<<Driver Failed To Connect, Device Not Protected>>>


Systemfehler:
=============
Error: (08/13/2024 08:28:19 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (08/13/2024 08:26:24 AM) (Source: RemoteAccess) (EventID: 20063) (User: )
Description: Fehler beim Starten der RAS-Verbindungsverwaltung, da das Protokoll-Engine [IKEv2] nicht initialisiert wurde. Die Anforderung wird nicht unterstützt.

Error: (08/13/2024 08:26:24 AM) (Source: RemoteAccess) (EventID: 20063) (User: )
Description: Fehler beim Starten der RAS-Verbindungsverwaltung, da das Protokoll-Engine [rasgreeng.dll] nicht initialisiert wurde. Das angegebene Modul wurde nicht gefunden.

Error: (08/13/2024 08:26:09 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "WSLService" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (08/13/2024 08:26:09 AM) (Source: NETLOGON) (EventID: 5719) (User: )
Description: Der Computer konnte eine sichere Sitzung mit einem
Domänencontroller in der Domäne *Geheim* aufgrund der folgenden
Ursache nicht einrichten: 
Sie können mit diesen Anmeldeinformationen nicht angemeldet werden, weil Ihre Domäne nicht verfügbar ist. Stellen Sie sicher, dass Ihr Gerät mit dem Netzwerk Ihrer Organisation verbunden ist, und versuchen Sie es erneut. Wenn Sie sich auf diesem Gerät zuvor mit anderen Anmeldeinformationen angemeldet haben, können Sie sich mit diesen Anmeldeinformationen anmelden.


Dies kann zu Authentifizierungsproblemen führen. Stellen
Sie sicher, dass der Computer mit dem Netzwerk verbunden ist.
Wenden Sie sich an den Domänenadministrator, wenn das Problem
weiterhin besteht.



ZUSÄTZLICHE INFORMATIONEN

Wenn dieser Computer ein Domänencontroller der bestimmten
Domäne ist, wird eine sichere Sitzung zum primären
Domänencontrolleremulator in der bestimmten Domäne eingerichtet.
Andernfalls richtet dieser Computer eine sichere Sitzung zu
einem beliebigen Domänencontroller in der bestimmten Domäne ein.

Error: (08/13/2024 08:26:08 AM) (Source: Microsoft-Windows-Eventlog) (EventID: 22) (User: NT-AUTORITÄT)
Description: Der Ereignisprotokollierungsdienst hat einen Fehler beim Initialisieren der Veröffentlichung von Ressourcen für Kanal "Microsoft-RMS-MSIPC/Debug" erkannt. Falls ein direkter Kanal festgelegt ist, kann dies ein Hinweis darauf sein, dass auch das Protokollieren der Ressourcen nicht initialisiert werden konnte.

Error: (08/13/2024 08:26:02 AM) (Source: VBoxNetLwf) (EventID: 12) (User: )
Description: Der Treiber hat einen internen Treiberfehler auf \Device\VBoxNetLwf gefunden.

Error: (08/13/2024 07:32:00 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.


Windows Defender:
================Event[0]

Date: 2024-07-24 10:16:46
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 1.415.295.0
%Vorherige Version der Sicherheitsinformationen: 1.415.6.0
Update Source: Benutzer
Sicherheitstyp: AntiSpyware
Updatetyp: Delta
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 1.1.24060.5
%Vorherige Modulversion: 1.1.24060.5
Fehlercode: 0x80501102
Fehlerbeschreibung: Unerwartetes Problem. Installieren Sie bei Bedarf verfügbare Updates, und starten Sie das Programm dann erneut. Informationen zum Installieren von Updates finden Sie unter "Hilfe und Support".  

Date: 2024-07-24 10:16:46
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 1.415.295.0
%Vorherige Version der Sicherheitsinformationen: 1.415.6.0
Update Source: Benutzer
Sicherheitstyp: AntiVirus
Updatetyp: Delta
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 1.1.24060.5
%Vorherige Modulversion: 1.1.24060.5
Fehlercode: 0x80501102
Fehlerbeschreibung: Unerwartetes Problem. Installieren Sie bei Bedarf verfügbare Updates, und starten Sie das Programm dann erneut. Informationen zum Installieren von Updates finden Sie unter "Hilfe und Support".  

CodeIntegrity:
===============
Date: 2024-08-13 08:28:52
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Windows signing level requirements. 

Date: 2024-08-13 08:28:51
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Windows signing level requirements. 


==================== Speicherinformationen =========================== 

BIOS: Dell Inc. 1.22.0 04/10/2024
Hauptplatine: Dell Inc. 0KHP4K
Prozessor: 12th Gen Intel(R) Core(TM) i7-12700F
Prozentuale Nutzung des RAM: 41%
Installierter physikalischer RAM: 16140.73 MB
Verfügbarer physikalischer RAM: 9487.08 MB
Summe virtueller Speicher: 24076.73 MB
Verfügbarer virtueller Speicher: 16084.22 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:1862.07 GB) (Free:634.99 GB) (Model: Samsung SSD 990 EVO 2TB) NTFS
Drive d: () (Fixed) (Total:931.51 GB) (Free:206.75 GB) (Model: Hitachi HDS721010CLA332) NTFS

\\?\Volume{7b5e60d1-5c9e-4c7b-91b2-99cbcd6e37d1}\ () (Fixed) (Total:0.72 GB) (Free:0.07 GB) NTFS
\\?\Volume{1b44cc1e-28ab-4c53-8750-ae1db7f35cea}\ () (Fixed) (Total:0.1 GB) (Free:0.04 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 874766E9)

Partition: GPT.

==========================================================
Disk: 1 (Size: 1863 GB) (Disk ID: 8B2101E0)

Partition: GPT.

==================== Ende von Addition.txt =======================
         

Kann mir jemand helfen, den RAT zu identifizieren und weitere Schritte zur Sicherung meines Systems vorzuschlagen?

Alo das verstehe ich nicht. Du hast hier erstmal nichts weiter als eine ziemlich hysterische Vermutung, RAT-Befall nur weil sich mal die Maus bewegt hast und ein paar Absätze stellst es als Fakt dar. Was soll denn sowas?

Wir wärs wenn man einfach mal die Maus tauscht und dann mal weiter sieht?

Und: wenn du schon so voreingenommen bist, wird dich eh keine Bereinigung zufriedenstellen. Hab schon dutzende solcher User wie dich hier gesehen. Da hilft für die Psyche nur eine eine komplette Neuinstallation.

Hallo Cosinus,

Ich hab's mit OBS aufgenommen ist keine Einbildung.
Die Maus ist schon neu, ganz blöde bin ich nicht.
Es passiert mehrere Male am Tag momentan
Und nicht jeder ist ein DAU auch wenn du das denkst gerade.. ich bin vom Fach aber eben jetzt kein Spezialist um den zu finden.. darum bin ich hier weil hier Spezialisten/Pentester sind wie du die jeden Tag damit zu tun haben.

Dann mal Preisfrage: ein Superhacker hat eure Firmenfirewall überwunden und nun irgendwelche W11-Kisten unter Kontrolle. Was macht man da dann? Richtig, erstmal den Mauszeiger nach oben rechts schieben

Setz die Kiste neu auf und fertig. Selbst wenn dir 100 Leute sagen in den Logs sei nichts zu erkennen, du hast dich auf einen Kompromittierung eingeschossen also denkst du ist das auch so.

Das führt hier zu nichts. Und das TB macht auch keine Pentests. Such dir dazu kommerzielle Anbieter.

Das war auch mein erster Gedanke: Es ist unverständlich, warum der ins Fenster klickt, die Maus übernimmt und sich anschließend wieder aus dem rdp Fenster zurückzieht.

Da ich den Vorgang jedoch mit OBS aufzeichnen konnte, habe ich den Beweis, dass dies tatsächlich passiert.

Ich werde den Vorfall erneut aufzeichnen und gegebenenfalls hier melden, da, wie bekannt, auch Unternehmen wie Nvidia und andere Opfer von Cyberangriffen geworden sind.

Es ist bemerkenswert, dass solche Vorfälle im Büroalltag oft weniger auffallen. Angesichts der Tatsache, dass unsere IT-Abteilung hier eher vernachlässigt wird, sind wir ein attraktives Ziel für Angriffe.Vielen Dank für die Überprüfung der Daten.

wieder aus dem rdp Fenster zurückzieht.

RDP ist schon mal Unsinn.
Über Remotedesktop wird nach Anmeldung vom entfernten Client die Session lokal gesperrt, d.h. du siehst NIX was der andere genau macht. Du hast nur nen gesperrten Bildschirm.

Naja wenn er die RDP Datei patcht sieht er trotzdem alles.
Dann kommt ist es halt eine Art VNC oder Teamviewer oder anydesk. Die RAT sachen verwenden eh was selbst gebasteltes.

Ich hab irgendwie den Eindruck, die siehst zuviel schlechte Filme.
Verrat doch mal, warum ein Angreifer "RDP patchen" soll - wenn er das kann hat er eh schon vollen Zugriff auf dein System und braucht keine Lachnummern-Stunts wie "Mauszeiger nach oben rechts" hinzulegen.

Domain vs. Domäne ist nen Riesenunterschied, bitte lernen für die Zukunft.