Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Alles rund um Windows (https://www.trojaner-board.de/alles-rund-um-windows/)
-   -   Habe ich mir einen Keylogger eingefangen? (https://www.trojaner-board.de/214921-habe-mir-keylogger-eingefangen.html)

Hopp 10.03.2025 15:29
Habe ich mir einen Keylogger eingefangen?
 
Vor ein paar Wochen wurden mir auf meiner Prepayed-Kreditkarte an einem einzigen Tag 13x USD 0.99 von google.com belastet. Ich habe das gemeldet. Die Karte wurde gesperrt, ersetzt und die Bezüge habe ich vergütet bekommen. Mit der neuen Karte habe ich einige male online eingekauft. Und wieder wurden mit an einem Tag 42x USD 0.99 abgebucht. Ich habe das wieder gemeldet und wiederum wurde die Karte gesperrt, ersetzt und die Bezüge vergütet. Mit der erneut neuen Karte habe ich einmal online bei Aldi eingekauft. Die Kartendaten habe ich nur dieses eine mal im Internet eingegeben. Am nächsten Tag wurden wieder 2x USD 0.99 belastet. Die Karte ist wieder gesperrt und ersetzt worden. Wie kann das sein, was geschieht da? Ich kann mir nur vorstellen, dass ich mir eine Schadsoftware z.B. Keylogger eingefangen habe. Kann mir da jemand helfen? Was muss ich tun?:confused:

M-K-D-B 10.03.2025 16:28
:hallo:



Mein Name ist Matthias und ich werde dir bei der Analyse und Bereinigung deines Systems helfen.



Ungewöhnlich ist das schon... 0,99 € jedes Mal... habe ich so noch nicht gehört hier im Forum.

Wir können hier nur Windows-Geräte überprüfen.

Bitte dazu die Hinweise für Hilfesuchende lesen und umsetzen.
Ohne FRST Logs kann dir niemand helfen.

Vielen Dank für deine Mitarbeit!

Hopp 10.03.2025 20:49
Noch etwas
 
Zu meinem Fall noch etwas. Gehöhrt nicht direkt zum Problem aber vielleicht doch intressant. Ich kann in meiner Banken-App die betroffene Karte selber sperren und entsperren. Die 57x USD 0.99 wurden mir belastet, obwohl die Karte gesperrt war. Zudem sollte ich eine mail bekommen, sobalt meine Karte belastet wurde. Also hätte ich 57 mails bekommen sollen. Ich aber habe kein einziges mail bekommen. Die Bank weiss nicht, wie das geschehen kann und hat mir meinen Schaden sofort vergütet. Da hat wohl jemand einen sehr fiesen Trick gefunden.:headbang:

Im nächsten Post die zwei Dateien.

Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 06-03-2025
durchgeführt von *****l (Administrator) auf DESKTOP-***** (FUJITSU ESPRIMO E910) (10-03-2025 15:49:34)
Gestartet von D:\Benutzer\*****l\AppData\Local\Temp\0603FRST64_exe_7100320251547522657574627\0603FRST64.exe
Geladene Profile: *****l
Plattform: Microsoft Windows 10 Home Version 22H2 19045.5555 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(explorer.exe ->) (CHIP Digital GmbH -> CHIP Digital GmbH) D:\Benutzer\*****l\Desktop\Farbar Recovery Scan Tool (HijackThis Alternative) - CHIP Installer _1m3Ev.exe
(explorer.exe ->) (New Horizon DataSys Inc. -> Horizon Datasys, Inc.) [Datei ist nicht signiert] C:\Program Files\Shield\ShdTray.exe
(explorer.exe ->) (nordvpn s.a. -> NordVPN) C:\Program Files\NordVPN\NordVPN.exe
(explorer.exe ->) (Open-Shell) [Datei ist nicht signiert] C:\Program Files\Open-Shell\StartMenu.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\igfxTray.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (AOMEI International Network Limited -> AOMEI International Network Limited) C:\Program Files (x86)\AOMEI\AOMEI Backupper\7.3.3\ABService.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (Geek Software GmbH -> geek software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\NisSrv.exe
(services.exe ->) (NAVIMATICS LLC -> Navimatics LLC) C:\Program Files (x86)\WinFsp\SxS\sxs.20241007T075757Z\bin\launcher-x64.exe
(services.exe ->) (New Horizon DataSys Inc. -> Horizon Datasys, Inc.) [Datei ist nicht signiert] C:\Program Files\Shield\ShdServ.exe
(services.exe ->) (nordvpn s.a. -> nordvpn S.A.) C:\Program Files\NordUpdater\NordUpdateService.exe
(services.exe ->) (nordvpn s.a. -> nordvpn S.A.) C:\Program Files\NordVPN\NordSec ThreatProtection\nordsec-threatprotection-service.exe
(services.exe ->) (nordvpn s.a. -> NordVPN) C:\Program Files\NordVPN\nordvpn-service.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [XMouseButtonControl] => C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe [1605344 2019-05-06] (Open Source Developer, Phillip Gibbons -> Highresolution Enterprises)
HKLM\...\Run: [Reflect UI] => C:\Program Files\Macrium\Common\ReflectUI.exe [6544000 2019-12-24] (Paramount Software UK Ltd -> Paramount Software UK Ltd)
HKLM\...\Run: [Open-Shell Start Menu] => C:\Program Files\Open-Shell\StartMenu.exe [216576 2020-09-26] (Open-Shell) [Datei ist nicht signiert]
HKLM\...\Run: [Shield] => C:\Program Files\Shield\shdtray.exe [76224 2021-03-19] (New Horizon DataSys Inc. -> Horizon Datasys, Inc.) [Datei ist nicht signiert]
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3138560 2023-01-11] (Logitech Inc -> Logitech, Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [369488 2024-10-12] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [Steganos HotKeys] => C:\Program Files (x86)\Steganos Safe 15\SteganosHotKeyService.exe [100864 2014-02-21] (Steganos Software GmbH) [Datei ist nicht signiert]
HKLM-x32\...\Run: [SAFE15 File Redirection Starter] => C:\Program Files (x86)\Steganos Safe 15\fredirstarter.exe [17408 2014-02-21] (Steganos Software GmbH) [Datei ist nicht signiert]
HKLM-x32\...\Run: [C16A] => C:\WINDOWS\twain_32\Brimc16a\Common\TwDsUiLaunch.exe [85928 2021-03-18] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [146584 2017-11-07] (Brother Industries, Ltd. -> Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2976256 2018-12-07] (Brother Industries, Ltd.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\isuspm.exe [2075480 2013-06-24] (Flexera Software LLC -> Flexera Software LLC.)
HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [35648 2015-01-19] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [17600 2015-01-19] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFProHook] => C:\Program Files (x86)\Nuance\PDF Professional 7\pdfpro7hook.exe [641864 2013-03-20] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706680 2020-12-09] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [PDF24] => C:\Program Files (x86)\PDF24\pdf24.exe [548056 2024-12-13] (Geek Software GmbH -> geek software GmbH)
HKLM\...\Policies\Explorer: [NoInstrumentation] 1
HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\Run: [SAFE15 Browser Monitor] => C:\Program Files (x86)\Steganos Safe 15\SteganosBrowserMonitor.exe [70656 2014-02-21] (Steganos Software GmbH) [Datei ist nicht signiert]
HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\Run: [MicrosoftEdgeAutoLaunch_D21BACCAF4BEE8C5256DDB831BE7B128] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4291112 2025-03-05] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\Run: [pCloud] => C:\Program Files\pCloud Drive\pCloud.exe [390896 2023-09-12] (pCloud AG -> )
HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\Run: [NordVPN] => C:\Program Files\NordVPN\NordVPN.exe [559976 2025-01-20] (nordvpn s.a. -> NordVPN)
HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize  (Keine Datei) <==== ACHTUNG
HKLM\...\Windows x64\Print Processors\BrPrint: C:\Windows\System32\spool\prtprocs\x64\BRPP64A.DLL [41984 2007-02-08] (Microsoft Windows Hardware Compatibility Publisher -> Brother Industries ,Ltd)
HKLM\...\Windows x64\Print Processors\OPLAPP3: C:\Windows\System32\spool\prtprocs\x64\OPLAPP3.dll [43520 2012-04-05] (Microsoft Windows Hardware Compatibility Publisher -> Oki Data Corporation)
HKLM\...\Print\Monitors\Brother QL-570 Monitor: C:\WINDOWS\system32\QL57L.DLL [54272 2010-02-05] (Microsoft Windows Hardware Compatibility Publisher -> Brother Industries, Ltd.)
HKLM\...\Print\Monitors\Oki Language Monitor v2 x64: C:\WINDOWS\system32\OKLMON64.DLL [27648 2009-06-25] (Microsoft Windows Hardware Compatibility Publisher -> Oki Data Corporation)
HKLM\...\Print\Monitors\PDF-XChange Lite Port Monitor: C:\WINDOWS\system32\pxcpmL.dll [2147072 2020-01-06] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
Startup: D:\Benutzer\*****l\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MailWasher.lnk [2024-01-24]
ShortcutTarget: MailWasher.lnk -> C:\Program Files (x86)\Firetrust\MailWasher\MailWasher.exe (Firetrust) [Datei ist nicht signiert]
BootExecute:
GroupPolicy-Firefox: Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {2AEDC92A-4F38-4D70-A636-D41A3969C574} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1580992 2024-12-18] (Adobe Inc. -> Adobe Inc.)
Task: {ADA6F5B0-80ED-44D6-ACB2-BD62B2CCC1EB} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe  (Keine Datei)
Task: {CCCDCCAA-9A52-4F4D-8ACA-E4DD078A359B} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21917888 2025-01-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {302046B7-05F1-4EA5-B8DB-E457E6384286} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21917888 2025-01-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {813E5FB4-ADAC-4AEF-B170-C6ACEA303C7C} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141408 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {1E0AACD8-0038-4935-827C-D4D0E9C2E886} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141408 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {FF236D6B-7896-48BC-80BC-8D03DFC66FC2} - System32\Tasks\Microsoft\VisualStudio\Updates\BackgroundDownload => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\BackgroundDownload.exe [255040 2025-01-15] (Microsoft Corporation -> Microsoft)
Task: {78666DAE-EBCF-4B1E-BB7A-3060050C8043} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {65771C76-37AD-4C85-B006-4DEBF0E1779C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {942D0BD2-BA49-47C7-A6F8-211084C63200} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7CB64DC3-D4D0-4A5C-BCA1-EA598CF89056} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C215AAC1-828D-44E4-9239-AC8627BFD1FE} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34880 2025-03-07] (Mozilla Corporation -> Mozilla Foundation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\..\Interfaces\{d7a51ddb-c7c8-4ee6-8eb3-8784c2792675}: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{d7a51ddb-c7c8-4ee6-8eb3-8784c2792675}: [DhcpDomain] home
Tcpip\..\Interfaces\{de72c232-4437-4033-9f83-78a0b6402266}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{e1f6691b-5483-4339-a19d-6ddf4ccd0ec1}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{fc01fcd5-2b9d-2fd8-78d8-cb78b313e2b2}: [NameServer] 103.86.96.100,103.86.99.100

Edge:
=======
Edge DefaultProfile: Default
Edge Profile: D:\Benutzer\*****l\AppData\Local\Microsoft\Edge\User Data\Default [2025-03-10]
Edge Extension: (NordVPN - VPN proxy for privacy and security) - D:\Benutzer\*****l\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fjoaledfpmneenckfbpdfhkmimnjocfa [2025-03-07]hxxps://clients2.google.com/service/update2/crx
Edge Extension: (Google Docs Offline) - D:\Benutzer\*****l\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-03-04]hxxps://clients2.google.com/service/update2/crx
Edge Extension: (Edge relevant text changes) - D:\Benutzer\*****l\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]hxxps://edge.microsoft.com/extensionwebstorebase/v1/crx
Edge HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [fjoaledfpmneenckfbpdfhkmimnjocfa]

FireFox:
========
FF DefaultProfile: y3a8ir93.default
FF DefaultProfile: 4owa54wo.default
FF DefaultProfile: uayts4m3.default
FF ProfilePath: D:\Benutzer\*****l\AppData\Roaming\Thunderbird - susi gerettet\Profiles\y3a8ir93.default [2023-09-09]
FF ProfilePath: D:\Benutzer\*****l\AppData\Roaming\Thunderbird - susi gerettet\Profiles\w9sr416t.default-release [2023-12-03]
FF NetworkProxy: Thunderbird - susi gerettet\Profiles\w9sr416t.default-release -> type", 0
FF Extension: (German Dictionary) - D:\Benutzer\*****l\AppData\Roaming\Thunderbird - susi gerettet\Profiles\w9sr416t.default-release\Extensions\de-DE@dictionaries.addons.mozilla.org.xpi [2023-10-14] [ist nicht signiert]
FF Extension: (ImportExportTools NG) - D:\Benutzer\*****l\AppData\Roaming\Thunderbird - susi gerettet\Profiles\w9sr416t.default-release\Extensions\ImportExportToolsNG@cleidigh.kokkini.net.xpi [2023-11-13] [ist nicht signiert]
FF ProfilePath: D:\Benutzer\*****l\AppData\Roaming\Thunderbird - Kopie neu\Profiles\4owa54wo.default [2023-12-01]
FF ProfilePath: D:\Benutzer\*****l\AppData\Roaming\Thunderbird - Kopie neu\Profiles\av1q8uf7.default-release [2023-12-03]
FF Extension: (ImportExportTools NG) - D:\Benutzer\*****l\AppData\Roaming\Thunderbird - Kopie neu\Profiles\av1q8uf7.default-release\Extensions\ImportExportToolsNG@cleidigh.kokkini.net.xpi [2023-11-30] [ist nicht signiert]
FF ProfilePath: D:\Benutzer\*****l\AppData\Roaming\Mozilla\Firefox\Profiles\uayts4m3.default [2025-03-10]
FF Homepage: Mozilla\Firefox\Profiles\uayts4m3.default -> hxxps://
FF NewTab: Mozilla\Firefox\Profiles\uayts4m3.default -> hxxps://
FF ProfilePath: D:\Benutzer\*****l\AppData\Roaming\Mozilla\Firefox\Profiles\ou0d3456.default-release [2025-03-10]
FF Homepage: Mozilla\Firefox\Profiles\ou0d3456.default-release -> hxxps://
FF NewTab: Mozilla\Firefox\Profiles\ou0d3456.default-release -> hxxps://
FF Extension: (AdGuard Werbeblocker) - D:\Benutzer\*****l\AppData\Roaming\Mozilla\Firefox\Profiles\ou0d3456.default-release\Extensions\adguardadblocker@adguard.com.xpi [2025-01-09]
FF Extension: (DeepL: KI-Übersetzer und -Schreibassistent) - D:\Benutzer\*****l\AppData\Roaming\Mozilla\Firefox\Profiles\ou0d3456.default-release\Extensions\firefox-extension@deepl.com.xpi [2024-11-08]
FF Extension: (Ghostery Tracker- & Werbeblocker | Datenschutz AdBlocker) - D:\Benutzer\*****l\AppData\Roaming\Mozilla\Firefox\Profiles\ou0d3456.default-release\Extensions\firefox@ghostery.com.xpi [2025-02-27]
FF Extension: (HTTPS Everywhere) - D:\Benutzer\*****l\AppData\Roaming\Mozilla\Firefox\Profiles\ou0d3456.default-release\Extensions\https-everywhere@eff.org.xpi [2022-08-21]
FF Extension: (Rabattcorner) - D:\Benutzer\*****l\AppData\Roaming\Mozilla\Firefox\Profiles\ou0d3456.default-release\Extensions\jid1-7eplFgLu6atoog@jetpack.xpi [2023-09-26]
FF Extension: (I don't care about cookies) - D:\Benutzer\*****l\AppData\Roaming\Mozilla\Firefox\Profiles\ou0d3456.default-release\Extensions\jid1-KKzOGWgsW3Ao4Q@jetpack.xpi [2023-12-06]
FF Extension: (Privacy Badger) - D:\Benutzer\*****l\AppData\Roaming\Mozilla\Firefox\Profiles\ou0d3456.default-release\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2025-02-01]
FF Extension: (AdBlock − blockieren Sie Werbung im Internet) - D:\Benutzer\*****l\AppData\Roaming\Mozilla\Firefox\Profiles\ou0d3456.default-release\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2025-03-01]
FF Extension: (NordVPN) - D:\Benutzer\*****l\AppData\Roaming\Mozilla\Firefox\Profiles\ou0d3456.default-release\Extensions\nordvpnproxy@nordvpn.com.xpi [2025-03-06]
FF Extension: (uBlock Origin) - D:\Benutzer\*****l\AppData\Roaming\Mozilla\Firefox\Profiles\ou0d3456.default-release\Extensions\uBlock0@raymondhill.net.xpi [2025-01-19]
FF SearchPlugin: D:\Benutzer\*****l\AppData\Roaming\Mozilla\Firefox\Profiles\ou0d3456.default-release\searchplugins\My Yahoo Search.xml [2025-03-10]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2024-01-02] [ist nicht signiert]
FF Plugin: @java.com/DTPlugin,version=11.281.2 -> C:\Program Files\Java\jre1.8.0_281\bin\dtplugin\npDeployJava1.dll [2021-02-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.281.2 -> C:\Program Files\Java\jre1.8.0_281\bin\plugin2\npjp2.dll [2021-02-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-12-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2020-01-06] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2020-01-06] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2020-01-06] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-12-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2020-01-06] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2020-01-06] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2020-01-06] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2025-02-21] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Professional 7\bin\nppdf.dll [2011-07-15] (Zeon Corporation -> Zeon Corporation)
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2020-01-06] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2020-01-06] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2020-01-06] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-4172440889-3953070438-3375788779-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2020-01-06] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-4172440889-3953070438-3375788779-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2020-01-06] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-4172440889-3953070438-3375788779-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2020-01-06] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174520 2024-12-18] (Adobe Inc. -> Adobe Inc.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [103776 2024-10-02] (Apple Inc. -> Apple Inc.)
R2 Backupper Service; C:\Program Files (x86)\AOMEI\AOMEI Backupper\7.3.3\ABService.exe [1102320 2023-10-30] (AOMEI International Network Limited -> AOMEI International Network Limited)
S4 BRA_Scheduler; C:\Program Files (x86)\Brother\BRAdmin Professional 3\bratimer.exe [354640 2019-06-21] (Brother Industries, Ltd. -> )
S4 Brother XP spl Service; C:\WINDOWS\SysWOW64\brsvc01a.exe [57344 2004-06-13] (Microsoft Windows Hardware Compatibility Publisher -> brother Industries Ltd)
S4 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [314368 2018-12-07] (Brother Industries, Ltd.) [Datei ist nicht signiert]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9203384 2024-09-20] (Microsoft Corporation -> Microsoft Corporation)
S4 LibreViewMASMonitor; C:\Program Files (x86)\LibreView Device Drivers\LibreViewMASMonitor.exe [14848 2020-06-08] (Newyu) [Datei ist nicht signiert]
S4 MacriumService; C:\Program Files\Macrium\Common\MacriumService.exe [6447328 2019-12-24] (Paramount Software UK Ltd -> Paramount Software UK Ltd)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpDefenderCoreService.exe [1926976 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 nordsec-threatprotection-service; C:\Program Files\NordVPN\NordSec ThreatProtection\nordsec-threatprotection-service.exe [320088 2023-09-25] (nordvpn s.a. -> nordvpn S.A.)
R2 NordUpdaterService; C:\Program Files\NordUpdater\NordUpdateService.exe [297848 2022-12-21] (nordvpn s.a. -> nordvpn S.A.)
R2 nordvpn-service; C:\Program Files\NordVPN\nordvpn-service.exe [2509280 2025-01-20] (nordvpn s.a. -> NordVPN)
R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [548056 2024-12-13] (Geek Software GmbH -> geek software GmbH)
S4 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [77336 2015-01-19] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
R2 ShdServ; C:\Program Files\Shield\shdserv.exe [307648 2021-03-19] (New Horizon DataSys Inc. -> Horizon Datasys, Inc.) [Datei ist nicht signiert]
S3 VSInstallerElevationService; C:\Program Files (x86)\Microsoft Visual Studio\Installer\VSInstallerElevationService.exe [42544 2025-01-15] (Microsoft Corporation -> Microsoft)
S3 VSStandardCollectorService150; C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [142464 2024-09-03] (Microsoft Corporation -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\NisSrv.exe [4352456 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MsMpEng.exe [270056 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinFsp.Launcher; C:\Program Files (x86)\WinFsp\SxS\sxs.20241007T075757Z\bin\launcher-x64.exe [34592 2023-03-16] (NAVIMATICS LLC -> Navimatics LLC)
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 ambakdrv; C:\WINDOWS\System32\ambakdrv.sys [51120 2019-05-14] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 ammntdrv; C:\WINDOWS\system32\ammntdrv.sys [172928 2023-11-24] (AOMEI International Network Limited -> )
S3 ampa; C:\WINDOWS\system32\ampa.sys [38320 2023-10-10] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 amwrtdrv; C:\WINDOWS\system32\amwrtdrv.sys [32176 2023-11-24] (AOMEI International Network Limited -> )
R1 cbfs20; C:\WINDOWS\System32\drivers\cbfs20.sys [457768 2022-11-09] (Microsoft Windows Hardware Compatibility Publisher -> Callback Technologies, Inc. - www.callback.com)
S3 CH341SER_A64; C:\WINDOWS\System32\Drivers\CH341S64.SYS [74312 2022-03-01] (Microsoft Windows Hardware Compatibility Publisher -> wch.cn)
S3 ddmdrv; C:\WINDOWS\system32\ddmdrv.sys [35760 2023-10-10] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 hmatap; C:\WINDOWS\System32\drivers\hmatap.sys [36456 2018-09-05] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [278944 2025-03-05] (Microsoft Windows -> Microsoft Corporation)
R1 MEmuDrv; C:\WINDOWS\system32\DRIVERS\MEmuDrv.sys [319192 2019-09-21] (Shanghai Microvirt Software Technology Co., Ltd. -> Maiwei Corporation)
R3 mshield; C:\Program Files\NordVPN\NordSec ThreatProtection\1.4.35.5\mshield.sys [45384 2025-02-18] (nordvpn s.a. -> Nordvpn S.A.)
R2 NDivert; C:\Program Files\NordVPN\7.35.1.0\Drivers\NDivert.sys [188752 2025-02-24] (Microsoft Windows Hardware Compatibility Publisher -> Nordvpn S.A.)
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [32352 2017-11-28] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
R4 NordDivert10; C:\Program Files\NordVPN\NordSec ThreatProtection\1.4.35.5\NordDivert1064.sys [97104 2025-02-18] (nordvpn s.a. -> NordVPN/Basil)
R3 ovpn-dco; C:\WINDOWS\System32\drivers\ovpn-dco.sys [103528 2024-10-30] (WDKTestCert lev,133391533294737317 -> OpenVPN, Inc)
S3 Revoflt; C:\WINDOWS\System32\DRIVERS\revoflt.sys [38400 2021-11-17] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)
R0 Shdbus; C:\WINDOWS\System32\DRIVERS\Shdbus.sys [30544 2021-03-19] (EAZ Solution, Inc. -> Horizon Datasys, Inc.) [Datei ist nicht signiert]
R0 Shield; C:\WINDOWS\System32\DRIVERS\shield.sys [117072 2021-03-19] (EAZ Solution, Inc. -> Horizon Datasys, Inc.) [Datei ist nicht signiert]
R0 Shieldf; C:\WINDOWS\System32\DRIVERS\Shieldf.sys [35664 2021-03-19] (EAZ Solution, Inc. -> Horizon Datasys, Inc.) [Datei ist nicht signiert]
R0 Shieldm; C:\WINDOWS\System32\DRIVERS\Shieldm.sys [36176 2021-03-19] (EAZ Solution, Inc. -> Horizon Datasys, Inc.) [Datei ist nicht signiert]
R1 SLEE_18_DRIVER; C:\WINDOWS\Sleen1864.sys [109144 2014-01-30] (Softwareentwicklung Patric Remus - ArchiCrypt - (Patric W.Remus) -> Softwareentwicklung Remus - ArchiCrypt -)
R3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [53088 2024-10-30] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20016 2025-03-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [601520 2025-03-05] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [100768 2025-03-05] (Microsoft Windows -> Microsoft Corporation)
S3 WinFsp+20241007T075757Z; C:\Program Files (x86)\WinFsp\SxS\sxs.20241007T075757Z\bin\winfsp-x64.sys [168512 2023-03-16] (Microsoft Windows Hardware Compatibility Publisher -> Navimatics LLC)
R3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2024-11-24] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2025-03-10 15:48 - 2025-03-10 15:51 - 000000000 ____D C:\FRST
2025-03-10 15:35 - 2025-03-10 15:35 - 000000000 ____D D:\Benutzer\*****l\AppData\Roaming\Lavasoft
2025-03-10 15:35 - 2025-03-10 15:35 - 000000000 ____D D:\Benutzer\*****l\AppData\Local\Lavasoft
2025-03-10 15:33 - 2025-03-10 13:41 - 005331520 _____ (CHIP Digital GmbH) D:\Benutzer\*****l\Desktop\Farbar Recovery Scan Tool (HijackThis Alternative) - CHIP Installer _1m3Ev.exe
2025-03-10 13:43 - 2025-03-10 13:43 - 005331520 _____ (CHIP Digital GmbH) D:\Benutzer\*****l\Downloads\Farbar Recovery Scan Tool (HijackThis Alternative) - CHIP Installer _1m3Ev(2).exe
2025-03-10 13:43 - 2025-03-10 13:43 - 005331520 _____ (CHIP Digital GmbH) D:\Benutzer\*****l\Downloads\Farbar Recovery Scan Tool (HijackThis Alternative) - CHIP Installer _1m3Ev(1).exe
2025-03-10 13:41 - 2025-03-10 13:41 - 005331520 _____ (CHIP Digital GmbH) D:\Benutzer\*****l\Downloads\Farbar Recovery Scan Tool (HijackThis Alternative) - CHIP Installer _1m3Ev.exe
2025-03-10 13:30 - 2025-03-10 13:30 - 001186170 _____ D:\Benutzer\*****l\Downloads\Reboot_Restore_Rx_Pro_v12_User_Guide.pdf
2025-03-10 12:48 - 2025-03-10 12:48 - 000030720 _____ D:\Benutzer\*****l\Desktop\Zufallszahlen.xls
2025-03-10 07:11 - 2025-03-10 07:11 - 000578648 _____ D:\Benutzer\*****l\Downloads\SECURE BOARD 1.0.Productdatasheet.2025-03-10-07-11-28.de_DE.pdf
2025-03-10 06:51 - 2025-03-10 06:51 - 000785412 _____ D:\Benutzer\*****l\Downloads\_5917514156_CH-LOGIN_Anleitung_Vasco_Digipass_Authentisierer.pdf
2025-03-10 06:28 - 2025-03-10 06:28 - 002534400 _____ (Robert Maehl Software) D:\Benutzer\*****l\Downloads\whynotwin11.exe
2025-03-10 06:23 - 2025-03-10 06:23 - 006839104 _____ (Avira Operations GmbH) D:\Benutzer\*****l\Downloads\avira_de_sptl1_29c4021eec9999c7__phpws-spotlight-release.exe
2025-03-09 19:12 - 2025-03-09 19:12 - 000249072 _____ (Gen Digital Inc.) D:\Benutzer\*****l\Downloads\avast_free_antivirus_online-installation.exe
2025-03-09 18:51 - 2025-03-09 18:51 - 000000000 ___HD C:\$WinREAgent
2025-03-09 18:48 - 2025-03-09 18:49 - 014197960 _____ D:\Benutzer\*****l\Downloads\mb-support-1.9.12.1031.exe
2025-03-09 17:41 - 2025-03-09 17:44 - 000042749 _____ D:\Benutzer\Public\Desktop\mbst-clean-results.txt
2025-03-09 15:17 - 2025-03-09 15:17 - 002832624 _____ (Malwarebytes) D:\Benutzer\*****l\Downloads\MBSetup.exe
2025-03-09 15:05 - 2025-03-09 15:05 - 000249072 _____ (Gen Digital Inc.) D:\Benutzer\*****l\Downloads\avast_free_antivirus_setup_online.exe
2025-03-09 11:16 - 2025-03-09 11:16 - 000621863 _____ D:\Benutzer\*****l\Downloads\takeout-20250309T082832Z-001.zip
2025-03-09 11:15 - 2025-03-09 11:15 - 000061301 _____ D:\Benutzer\*****l\Downloads\takeout-20250309T090012Z-001(1).zip
2025-03-09 11:06 - 2025-03-09 11:07 - 000061301 _____ D:\Benutzer\*****l\Downloads\takeout-20250309T090012Z-001.zip
2025-03-08 07:49 - 2025-03-08 07:49 - 008008968 _____ (NordInstaller) D:\Benutzer\*****l\Downloads\NordInstaller(2).exe
2025-03-07 17:28 - 2025-03-07 17:28 - 000451789 _____ D:\Benutzer\*****l\Downloads\sbb-contact-center-swiss-pass-2025-03-05-0050568e391a1edfbe9269d9f6799c55.pdf
2025-03-07 16:58 - 2025-03-07 16:58 - 057436304 _____ (Nord Security ) D:\Benutzer\*****l\Downloads\NordVPNInstall.exe
2025-03-07 16:51 - 2025-03-07 16:51 - 008008968 _____ (NordInstaller) D:\Benutzer\*****l\Downloads\NordInstaller(1).exe
2025-03-07 09:30 - 2025-03-07 09:30 - 000100248 _____ D:\Benutzer\*****l\Downloads\FAQ-Halbtax-Plus-DE.pdf
2025-03-07 09:13 - 2025-03-07 09:13 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2025-03-07 04:27 - 2025-03-07 04:27 - 000830893 _____ D:\Benutzer\*****l\Downloads\Documents ***** *****_pages_2-3-1_repaired.pdf
2025-03-07 04:24 - 2025-03-07 04:24 - 000575946 _____ D:\Benutzer\*****l\Downloads\Documents ***** *****_pages_2-3.pdf
2025-03-06 19:44 - 2025-03-06 19:44 - 000358513 _____ D:\Benutzer\*****l\Downloads\aeoi-exchanges.pdf
2025-03-06 19:40 - 2025-03-06 19:40 - 000500827 _____ D:\Benutzer\*****l\Downloads\conditions-tarifaires-particuliers-2025.pdf
2025-03-06 19:39 - 2025-03-06 19:39 - 000091283 _____ D:\Benutzer\*****l\Downloads\PV33293D_NIP_Bienvenue_Avril_2024_NEW_ADEME.pdf
2025-03-06 19:38 - 2025-03-06 19:38 - 000319991 _____ D:\Benutzer\*****l\Downloads\CG_Convention_Compte_de_depot_Bienvenue_Avril_2025.pdf
2025-03-06 19:35 - 2025-03-06 19:35 - 001812314 _____ D:\Benutzer\*****l\Downloads\tarifs-2025-france.pdf
2025-03-06 19:14 - 2025-03-06 19:14 - 000366149 _____ D:\Benutzer\*****l\Downloads\OUVERTURE DE COMPTE A SIGNER de.pdf
2025-03-06 10:57 - 2025-03-06 10:57 - 002894169 _____ D:\Benutzer\*****l\Downloads\sandero-price.pdf
2025-03-06 10:51 - 2025-03-06 10:51 - 007421829 _____ D:\Benutzer\*****l\Downloads\bedienungs-und-wartungsanleitung-dacia-XJD-Duster.pdf
2025-03-05 12:46 - 2025-03-10 15:47 - 000000000 ____D D:\Benutzer\*****l\AppData\Local\NordVPN
2025-03-05 12:46 - 2025-03-05 12:46 - 000000000 ____D D:\Benutzer\*****l\AppData\Local\ToastNotificationManagerCompat
2025-03-05 12:44 - 2025-03-10 15:46 - 000000000 ____D C:\ProgramData\NordVPN
2025-03-05 12:44 - 2025-03-05 12:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NordSec
2025-03-05 12:44 - 2025-03-05 12:44 - 000000000 ____D C:\Program Files\NordVPN
2025-03-05 12:44 - 2024-10-30 10:21 - 000103528 _____ (OpenVPN, Inc) C:\WINDOWS\system32\Drivers\ovpn-dco.sys
2025-03-05 12:42 - 2025-03-05 12:42 - 000000000 ____D C:\ProgramData\NordUpdater
2025-03-05 12:42 - 2025-03-05 12:42 - 000000000 ____D C:\Program Files\NordUpdater
2025-03-05 12:39 - 2025-03-05 12:40 - 008008968 _____ (NordInstaller) D:\Benutzer\*****l\Downloads\NordInstaller.exe
2025-03-05 10:47 - 2025-03-05 10:47 - 009171536 _____ D:\Benutzer\*****l\Downloads\e235aa2ad2-3.pdf
2025-03-05 10:46 - 2025-03-05 10:46 - 009171536 _____ D:\Benutzer\*****l\Downloads\e235aa2ad2-2.pdf
2025-03-03 11:58 - 2025-03-03 11:58 - 009171536 _____ D:\Benutzer\*****l\Downloads\e235aa2ad2-1.pdf
2025-03-03 11:45 - 2025-03-03 11:45 - 018601116 _____ D:\Benutzer\*****l\Downloads\BJI_1449_9_de-DE-1.pdf
2025-03-03 11:33 - 2025-03-03 11:33 - 008595319 _____ D:\Benutzer\*****l\Downloads\bedienungs-und-wartungsanleitung-dacia-XJI-Sandero-Stepway-Jogger-1-1.pdf
2025-03-03 11:24 - 2025-03-03 11:24 - 008595319 _____ D:\Benutzer\*****l\Downloads\bedienungs-und-wartungsanleitung-dacia-XJI-Sandero-Stepway-Jogger-1.pdf
2025-03-03 10:33 - 2025-03-03 10:33 - 018601116 _____ D:\Benutzer\*****l\Downloads\BJI_1449_9_de-DE.pdf
2025-03-03 09:37 - 2025-03-03 09:37 - 000598553 _____ D:\Benutzer\*****l\Downloads\Neuer_Sandero_PL_d.pdf.asset.pdf
2025-03-03 07:50 - 2025-03-03 07:50 - 000224142 _____ D:\Benutzer\*****l\Downloads\Factsheet_DE.pdf
2025-03-02 13:29 - 2025-03-03 10:31 - 000011103 _____ D:\Benutzer\*****l\Documents\Mappe1.xlsx
2025-03-02 11:23 - 2025-03-02 11:23 - 000467884 _____ D:\Benutzer\*****l\Downloads\Preisliste_eC3.pdf
2025-03-02 11:05 - 2025-03-02 11:05 - 000191773 _____ D:\Benutzer\*****l\Downloads\Njk2NzU0LzAvbWFzdGVy.pdf
2025-03-02 09:24 - 2025-03-02 09:24 - 009171536 _____ D:\Benutzer\*****l\Downloads\e235aa2ad2.pdf
2025-03-01 17:03 - 2025-03-01 17:03 - 007776508 _____ D:\Benutzer\*****l\Downloads\2764_1_de.pdf
2025-03-01 13:54 - 2025-03-01 13:54 - 007283670 _____ (iSeePassword Dr.PDF ) D:\Benutzer\*****l\Downloads\pdf-password-recovery.exe
2025-03-01 10:29 - 2025-03-01 10:29 - 038195872 _____ (TEFINCOM S.A. ) D:\Benutzer\*****l\Downloads\NordLockerSetup__3_.exe
2025-02-28 19:21 - 2025-02-28 19:21 - 000002061 _____ D:\Benutzer\*****l\Downloads\Demo custom character.gcb
2025-02-28 19:20 - 2025-02-28 19:20 - 000001077 _____ D:\Benutzer\*****l\Downloads\Demo mode 10 or 12 for multiple I2C adapters.gcb
2025-02-28 19:19 - 2025-02-28 19:19 - 000000910 _____ D:\Benutzer\*****l\Downloads\Demo mode 0.gcb
2025-02-28 19:18 - 2025-02-28 19:18 - 000000263 _____ D:\Benutzer\*****l\Downloads\Demo mode 4.gcb
2025-02-28 19:17 - 2025-02-28 19:17 - 000000777 _____ D:\Benutzer\*****l\Downloads\Demo mode LCD_IO 2_74XX174.gcb
2025-02-28 19:14 - 2025-02-28 19:14 - 000000882 _____ D:\Benutzer\*****l\Downloads\Demo mode LCD_IO 2_74XX164.gcb
2025-02-27 13:25 - 2025-02-27 13:25 - 000582906 _____ D:\Benutzer\*****l\Downloads\FP_E-SATHDW.pdf
2025-02-26 13:23 - 2025-02-26 13:23 - 000355229 _____ D:\Benutzer\*****l\Downloads\visana-services-ag-2025-02-07-103906699-343778563.pdf
2025-02-25 14:14 - 2025-02-25 14:14 - 000970288 _____ D:\Benutzer\*****l\Downloads\CG_ASSURANCE_HABITATION_BNPP-3.pdf
2025-02-25 14:11 - 2025-02-25 14:11 - 000970288 _____ D:\Benutzer\*****l\Downloads\CG_ASSURANCE_HABITATION_BNPP-2.pdf
2025-02-25 13:36 - 2025-02-25 13:36 - 000209013 _____ D:\Benutzer\*****l\Downloads\UniversalPostcodesDatabaseProductSheetGerman.pdf
2025-02-25 13:36 - 2025-02-25 13:36 - 000189454 _____ D:\Benutzer\*****l\Downloads\fraEn.pdf
2025-02-25 12:26 - 2025-02-25 12:26 - 000970288 _____ D:\Benutzer\*****l\Downloads\CG_ASSURANCE_HABITATION_BNPP-1.pdf
2025-02-25 11:31 - 2025-02-25 11:31 - 000970288 _____ D:\Benutzer\*****l\Downloads\CG_ASSURANCE_HABITATION_BNPP.pdf
2025-02-25 09:32 - 2025-02-25 09:32 - 000282258 _____ D:\Benutzer\*****l\Downloads\25-02-2025 09-28-31-1.pdf
2025-02-25 09:30 - 2025-02-25 09:30 - 000063779 _____ D:\Benutzer\*****l\Downloads\25-02-2025 09-28-31.pdf
2025-02-23 19:24 - 2025-02-23 19:24 - 008059304 _____ D:\Benutzer\*****l\Downloads\Spacestar_1EL20CHE16_DE_HR-1.pdf
2025-02-23 14:11 - 2025-02-23 14:11 - 080814272 _____ (eTeks ) D:\Benutzer\*****l\Downloads\SweetHome3D-7.0.2-windows.exe
2025-02-23 14:01 - 2025-02-23 14:01 - 000690856 _____ D:\Benutzer\*****l\Downloads\GenerateRoof-4.5.sh3p
2025-02-23 14:00 - 2025-02-23 14:00 - 000134550 _____ D:\Benutzer\*****l\Downloads\AdvancedEditing.sh3p
2025-02-23 14:00 - 2025-02-23 14:00 - 000134550 _____ D:\Benutzer\*****l\Downloads\AdvancedEditing(1).sh3p
2025-02-23 13:58 - 2025-02-23 13:58 - 000043638 _____ D:\Benutzer\*****l\Downloads\SideView-1.1.1.sh3p
2025-02-23 13:55 - 2025-02-23 13:55 - 000131092 _____ D:\Benutzer\*****l\Downloads\StaircaseGenerator-1.0.1(1).sh3p
2025-02-23 13:55 - 2025-02-23 13:55 - 000000000 ____D D:\Benutzer\*****l\.openjfx
2025-02-23 13:52 - 2025-02-23 13:52 - 000131092 _____ D:\Benutzer\*****l\Downloads\StaircaseGenerator-1.0.1.sh3p
2025-02-23 11:54 - 2025-02-23 11:54 - 000000875 _____ D:\Benutzer\*****l\Desktop\Sweet Home 3D.lnk
2025-02-23 11:54 - 2025-02-23 11:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sweet Home 3D
2025-02-23 11:54 - 2025-02-23 11:54 - 000000000 ____D C:\Program Files\Sweet Home 3D
2025-02-22 13:25 - 2025-02-22 13:25 - 000000000 ____D D:\Benutzer\*****l\AppData\Roaming\eTeks
2025-02-22 13:15 - 2025-02-22 13:16 - 128517272 _____ (Space Mushrooms ) D:\Benutzer\*****l\Downloads\SweetHome3D-7.6-windows.exe
2025-02-22 12:09 - 2025-02-22 12:09 - 000024514 _____ D:\Benutzer\*****l\Downloads\Digitec_Rechnung_13428103.pdf
2025-02-20 12:51 - 2025-02-20 12:51 - 002246361 _____ D:\Benutzer\*****l\Downloads\Anleitung-Manueller-Sendersuchlauf-DE.pdf
2025-02-20 11:21 - 2025-02-20 11:21 - 000001740 _____ D:\Benutzer\Public\Desktop\iTunes.lnk
2025-02-20 11:21 - 2025-02-20 11:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2025-02-20 11:21 - 2025-02-20 11:21 - 000000000 ____D C:\Program Files\iTunes
2025-02-20 11:01 - 2025-02-20 11:01 - 000055266 _____ D:\Benutzer\*****l\Downloads\steuerverwaltung-des-kantons-bern-2025-02-20-bzr3659398.pdf
2025-02-19 17:19 - 2025-02-19 17:19 - 000393371 _____ D:\Benutzer\*****l\Downloads\tarifs-hellobank.pdf
2025-02-19 14:43 - 2025-02-19 14:43 - 000205100 _____ D:\Benutzer\*****l\Downloads\MULHOUSE-VILLE-N_MES_CENTRE_22-04-25_*****_*****_8FU9M3_UkJhogsxMk68Y0YRbcHv.pdf
2025-02-19 14:42 - 2025-02-19 14:42 - 000205261 _____ D:\Benutzer\*****l\Downloads\MULHOUSE-VILLE-N_MES_CENTRE_22-04-25_*****_*****_8FU9M3_VDQWRJcBnvHITQMo9k73.pdf
2025-02-19 13:23 - 2025-02-19 13:23 - 000092111 _____ D:\Benutzer\*****l\Downloads\20240815_Leistungsabrechnung_8408.pdf
2025-02-19 13:22 - 2025-02-19 13:22 - 000181315 _____ D:\Benutzer\*****l\Downloads\A.31_Leistungsabrechnung_de-2.pdf
2025-02-19 13:21 - 2025-02-19 13:21 - 000092185 _____ D:\Benutzer\*****l\Downloads\20250128_Leistungsabrechnung_da27-1.pdf
2025-02-19 13:21 - 2025-02-19 13:21 - 000087227 _____ D:\Benutzer\*****l\Downloads\20250218_Leistungsabrechnung_b083.pdf
2025-02-19 13:20 - 2025-02-19 13:20 - 000087758 _____ D:\Benutzer\*****l\Downloads\20250114_Leistungsabrechnung_9dfd.pdf
2025-02-19 11:48 - 2025-02-19 11:48 - 000164390 _____ D:\Benutzer\*****l\Downloads\us-estate-planning-fr.pdf
2025-02-19 10:34 - 2025-02-19 10:34 - 003278346 _____ D:\Benutzer\*****l\Downloads\ATTEST-NON-OPPOSITION-DP-1.pdf
2025-02-19 10:27 - 2025-02-19 10:27 - 003278346 _____ D:\Benutzer\*****l\Downloads\ATTEST-NON-OPPOSITION-DP.pdf
2025-02-18 14:40 - 2025-02-18 14:40 - 000292528 _____ D:\Benutzer\*****l\Downloads\dvb_print_20250218-144051.pdf
2025-02-18 14:34 - 2025-02-18 14:34 - 000005905 _____ D:\Benutzer\*****l\Downloads\dvb_print_20250218-143452.pdf
2025-02-18 14:33 - 2025-02-18 14:33 - 000191094 _____ D:\Benutzer\*****l\Downloads\dvb_print_20250218-143316.pdf
2025-02-16 17:41 - 2025-02-16 17:41 - 000135375 _____ D:\Benutzer\*****l\Downloads\factsheet-fiscalite-successions-franco-suisses-ambassade-paris-2020-fr-3.pdf
2025-02-16 17:40 - 2025-02-16 17:40 - 000148649 _____ D:\Benutzer\*****l\Downloads\succession5-2.pdf
2025-02-16 14:57 - 2025-02-16 14:57 - 000021178 _____ D:\Benutzer\*****l\Downloads\suisse_accord-avec-la-suisse-liberalites_fd_2119.pdf
2025-02-16 14:34 - 2025-02-16 14:34 - 000148649 _____ D:\Benutzer\*****l\Downloads\succession5-1.pdf
2025-02-16 14:33 - 2025-02-16 14:33 - 000135375 _____ D:\Benutzer\*****l\Downloads\factsheet-fiscalite-successions-franco-suisses-ambassade-paris-2020-fr-2.pdf
2025-02-16 13:03 - 2025-02-16 13:03 - 000619950 _____ D:\Benutzer\*****l\Downloads\pfaendung.pdf
2025-02-16 10:46 - 2025-02-16 10:46 - 000148649 _____ D:\Benutzer\*****l\Downloads\succession5.pdf
2025-02-16 10:43 - 2025-02-16 10:43 - 000135375 _____ D:\Benutzer\*****l\Downloads\factsheet-fiscalite-successions-franco-suisses-ambassade-paris-2020-fr-1.pdf
2025-02-16 10:42 - 2025-02-16 10:42 - 000135375 _____ D:\Benutzer\*****l\Downloads\factsheet-fiscalite-successions-franco-suisses-ambassade-paris-2020-fr.pdf
2025-02-16 10:36 - 2025-02-16 10:36 - 000309304 _____ D:\Benutzer\*****l\Downloads\factsheet-droit-international-des-successions-ambassade-paris-2020-fr.pdf
2025-02-15 20:22 - 2025-02-15 20:22 - 000044644 _____ D:\Benutzer\*****l\Downloads\dvb_print_20250215-202234.pdf
2025-02-15 20:20 - 2025-02-15 20:20 - 000254178 _____ D:\Benutzer\*****l\Downloads\dvb_print_20250215-202002.pdf
2025-02-15 20:16 - 2025-02-15 20:16 - 000224364 _____ D:\Benutzer\*****l\Downloads\bwo_realisieren08.pdf
2025-02-15 20:13 - 2025-02-15 20:13 - 000119392 _____ D:\Benutzer\*****l\Downloads\svsa-kf-arztzeugnis-koerperbehinderung-d-2.pdf
2025-02-15 20:12 - 2025-02-15 20:12 - 000052255 _____ D:\Benutzer\*****l\Downloads\Info-Flyer körperbehinderte Lenker-innen.pdf.pdf
2025-02-15 12:33 - 2025-02-15 12:33 - 000032759 _____ D:\Benutzer\*****l\Downloads\Galaxus_Rechnung_58543656.pdf
2025-02-15 12:28 - 2025-02-15 12:28 - 000122364 _____ D:\Benutzer\*****l\Downloads\vzfu_wl_14_06_koerperbehinderte_fahrzeugfuehrer_de_260724_1721993876871_pdf_de.pdf
2025-02-15 12:25 - 2025-02-15 12:25 - 000082946 _____ D:\Benutzer\*****l\Downloads\Guidelines-zur-Beurteilung-der-Fahrtauglichkeit-bei-Seniorinnen-und-Senioren.pdf
2025-02-15 12:21 - 2025-02-15 12:21 - 001192241 _____ D:\Benutzer\*****l\Downloads\eignungstest_beispiele_loesung-1.pdf
2025-02-15 11:59 - 2025-02-15 11:59 - 000068749 _____ D:\Benutzer\*****l\Downloads\Muster-MPU-Frageboegen.pdf
2025-02-15 11:53 - 2025-02-15 11:53 - 001192241 _____ D:\Benutzer\*****l\Downloads\eignungstest_beispiele_loesung.pdf
2025-02-15 11:14 - 2025-02-15 11:14 - 000007663 _____ D:\Benutzer\*****l\Downloads\merkblattfahreignungstest.pdf
2025-02-15 10:42 - 2025-02-15 10:42 - 000092842 _____ D:\Benutzer\*****l\Downloads\18-IFI_329a332.pdf
2025-02-15 05:59 - 2025-02-15 05:59 - 000160210 _____ D:\Benutzer\*****l\Downloads\suisse_convention-avec-la-suisse-impots-sur-le-revenu-et-sur-la-fortune_fd_2125.pdf
2025-02-14 09:30 - 2025-02-14 09:30 - 000095349 _____ D:\Benutzer\*****l\Downloads\20250206_Leistungsabrechnung_fbca.pdf
2025-02-13 16:42 - 2025-02-13 16:42 - 000066438 _____ D:\Benutzer\*****l\Downloads\10-14.2.25Mittagsmenue.pdf
2025-02-13 16:39 - 2025-02-13 16:39 - 000274695 _____ D:\Benutzer\*****l\Downloads\Spedition_Speisekarte_2025deutsch.pdf
2025-02-13 16:36 - 2025-02-13 16:36 - 000364399 _____ D:\Benutzer\*****l\Downloads\speisekarte.pdf
2025-02-13 16:34 - 2025-02-13 16:34 - 053958865 _____ D:\Benutzer\*****l\Downloads\Speisekarte_NeuDEF.pdf
2025-02-13 16:31 - 2025-02-13 16:31 - 000584122 _____ D:\Benutzer\*****l\Downloads\Speisekarte_Winter_Februar-2025_DE.pdf
2025-02-13 16:28 - 2025-02-13 16:28 - 003075784 _____ D:\Benutzer\*****l\Downloads\Speisekarte Del Padre 2021 def. Internetseite.pdf
2025-02-13 16:27 - 2025-02-13 16:27 - 000413123 _____ D:\Benutzer\*****l\Downloads\Speisekarte_Grottino_01.2025.pdf
2025-02-13 16:22 - 2025-02-13 16:22 - 000070288 _____ D:\Benutzer\*****l\Downloads\Food_Menu_DE.pdf
2025-02-13 16:21 - 2025-02-13 16:21 - 000710038 _____ D:\Benutzer\*****l\Downloads\BeauRivage_Valentinstag-2025.pdf
2025-02-13 15:46 - 2025-02-13 15:46 - 000575701 _____ D:\Benutzer\*****l\Downloads\IPID-2.pdf
2025-02-13 07:43 - 2025-02-13 07:43 - 026190984 _____ D:\Benutzer\*****l\Downloads\PLAN-URBAIN-RESEAU-URBAIN-Septembre-2024-1.pdf
2025-02-13 07:42 - 2025-02-13 07:42 - 019871869 _____ D:\Benutzer\*****l\Downloads\PLAN-PERIURBAIN-RESEAU-PERIURBAIN-Septembre-2024.pdf
2025-02-13 07:41 - 2025-02-13 07:41 - 026190984 _____ D:\Benutzer\*****l\Downloads\PLAN-URBAIN-RESEAU-URBAIN-Septembre-2024.pdf
2025-02-11 10:20 - 2025-02-11 10:20 - 000176267 _____ D:\Benutzer\*****l\Downloads\Angaben zum Konto_*****-4.pdf
2025-02-11 09:57 - 2025-02-11 09:57 - 000631953 _____ D:\Benutzer\*****l\Downloads\15715.pdf
2025-02-11 08:49 - 2025-02-11 08:49 - 000757005 _____ D:\Benutzer\*****l\Downloads\Banque de France – Particuliers - formulaire_demande_dac_pour_mandataire_candidat_election.pdf
2025-02-11 08:46 - 2025-02-11 08:46 - 000712837 _____ D:\Benutzer\*****l\Downloads\Banque de France – Particuliers - formulaire_dac_personne_physique.pdf
2025-02-11 08:13 - 2025-02-11 08:13 - 000094718 _____ D:\Benutzer\*****l\Downloads\e-banking_Bestimmungen_2308_01_20011_de_sec.pdf
2025-02-10 19:53 - 2025-02-10 19:53 - 000128163 _____ D:\Benutzer\*****l\Downloads\2025-01-06_Renten- _ Zinsanteilbescheinigung.pdf
2025-02-10 19:52 - 2025-02-10 19:52 - 000085440 _____ D:\Benutzer\*****l\Downloads\2025-01-03_Steuerwert-1.pdf
2025-02-10 19:50 - 2025-02-10 19:50 - 000428886 _____ D:\Benutzer\*****l\Downloads\2025-01-06_FSCD_Beschein_Renten_902.357.034-2.pdf
2025-02-10 19:49 - 2025-02-10 19:49 - 000428891 _____ D:\Benutzer\*****l\Downloads\2025-01-06_FSCD_Beschein_Renten_902.338.568-2.pdf
2025-02-10 19:49 - 2025-02-10 19:49 - 000428891 _____ D:\Benutzer\*****l\Downloads\2025-01-06_FSCD_Beschein_Renten_100.153.919-2.pdf
2025-02-10 14:34 - 2025-02-10 14:34 - 000283267 _____ D:\Benutzer\*****l\Downloads\Riedacker Tarifausweis 2023.pdf
2025-02-10 14:32 - 2025-02-10 14:32 - 000148111 _____ D:\Benutzer\*****l\Downloads\preview-5.pdf
2025-02-10 13:55 - 2025-02-10 13:55 - 000191093 _____ D:\Benutzer\*****l\Downloads\dvb_print_20250210-135510.pdf
2025-02-10 13:44 - 2025-02-10 13:44 - 000143900 _____ D:\Benutzer\*****l\Downloads\preview-4.pdf
2025-02-10 13:43 - 2025-02-10 13:43 - 000209436 _____ D:\Benutzer\*****l\Downloads\preview-3.pdf
2025-02-10 11:10 - 2025-02-10 11:10 - 000076630 _____ D:\Benutzer\*****l\Downloads\CH2100790042389804088_20241231_Steuerbescheinigung_20250102040127596.pdf
2025-02-10 10:02 - 2025-02-10 10:02 - 000041332 _____ D:\Benutzer\*****l\Downloads\2025-01-31_00-00-00-18947729175-85474082050580-Kontoauszug.pdf
2025-02-10 09:59 - 2025-02-10 09:59 - 000032786 _____ D:\Benutzer\*****l\Downloads\2024-12-31_00-00-00-18947729175-85207888912168-Zins-_Kapitalausweis-1.pdf
2025-02-10 09:58 - 2025-02-10 09:58 - 000056951 _____ D:\Benutzer\*****l\Downloads\2024-12-31_00-00-00-18947729175-85207888910672-Kontoabschluss_auszug-1.pdf
2025-02-09 10:51 - 2025-02-09 10:51 - 000428891 _____ D:\Benutzer\*****l\Downloads\2025-01-06_FSCD_Beschein_Renten_902.338.568-1.pdf
2025-02-09 10:51 - 2025-02-09 10:51 - 000428891 _____ D:\Benutzer\*****l\Downloads\2025-01-06_FSCD_Beschein_Renten_100.153.919-1.pdf
2025-02-09 10:50 - 2025-02-09 10:50 - 000428886 _____ D:\Benutzer\*****l\Downloads\2025-01-06_FSCD_Beschein_Renten_902.357.034-1.pdf
2025-02-09 10:49 - 2025-02-09 10:49 - 000085440 _____ D:\Benutzer\*****l\Downloads\2025-01-03_Steuerwert.pdf
2025-02-09 09:47 - 2025-02-09 09:47 - 001269457 _____ D:\Benutzer\*****l\Downloads\strassensignale.pdf
2025-02-08 16:28 - 2025-02-08 16:28 - 000031524 _____ D:\Benutzer\*****l\Downloads\Galaxus_Rechnung_59216314.pdf
2025-02-08 13:45 - 2025-02-08 13:45 - 000993193 _____ D:\Benutzer\*****l\Downloads\iddocs-eu-fr-1.pdf
2025-02-08 13:32 - 2025-02-08 13:32 - 032900396 _____ D:\Benutzer\*****l\Downloads\Cattanooga-Compex-e-Tens.pdf
2025-02-08 11:29 - 2025-02-08 11:29 - 002416209 _____ D:\Benutzer\*****l\Downloads\liste_pieces_justificatives.pdf
2025-02-08 10:37 - 2025-02-08 10:37 - 000281250 _____ D:\Benutzer\*****l\Downloads\Z5NerJbqstJ990Aa_ConventionDAV0325.pdf
2025-02-08 10:36 - 2025-02-08 10:36 - 002765871 _____ D:\Benutzer\*****l\Downloads\Zz9P368jQArT1IE4_FIP_Compte-2024.pdf
2025-02-08 10:36 - 2025-02-08 10:36 - 000437014 _____ D:\Benutzer\*****l\Downloads\Z016V5bqstJ978AE_ConditionstarifairesBforBank-BlueandBrown_021224.pdf

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2025-03-10 15:46 - 2023-11-24 11:14 - 000000416 _____ C:\WINDOWS\SysWOW64\AbBakConfig.dat
2025-03-10 15:46 - 2023-11-24 11:13 - 000000432 _____ C:\WINDOWS\SysWOW64\winsevr.dat
2025-03-10 15:46 - 2021-03-19 17:14 - 000008192 ___SH C:\DumpStack.log.tmp
2025-03-10 15:46 - 2020-11-19 00:34 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-03-10 15:46 - 2020-11-18 23:34 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-03-10 15:46 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Registration
2025-03-10 15:46 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-03-10 15:44 - 2021-03-19 17:25 - 000000000 ____D D:\Benutzer\*****l\AppData\Local\OpenShell
2025-03-10 12:48 - 2019-12-29 15:05 - 000000000 ____D D:\Benutzer\*****l\AppData\Roaming\Microsoft\Excel
2025-03-10 12:37 - 2020-01-28 16:05 - 000000000 ____D D:\Benutzer\*****l\Documents\xls
2025-03-10 06:16 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-03-09 19:21 - 2021-03-19 17:23 - 002681546 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-03-09 19:21 - 2019-12-29 11:36 - 000804052 _____ C:\WINDOWS\system32\perfh00C.dat
2025-03-09 19:21 - 2019-12-29 11:36 - 000154172 _____ C:\WINDOWS\system32\perfc00C.dat
2025-03-09 19:21 - 2019-12-07 15:50 - 000743714 _____ C:\WINDOWS\system32\perfh007.dat
2025-03-09 19:21 - 2019-12-07 15:50 - 000150136 _____ C:\WINDOWS\system32\perfc007.dat
2025-03-09 19:21 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2025-03-09 19:15 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-03-09 19:14 - 2020-11-18 23:34 - 000531856 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-03-09 19:13 - 2019-12-07 15:51 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2025-03-09 19:13 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-03-09 19:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-03-09 19:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2025-03-09 19:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-03-09 19:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-03-09 19:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-03-09 19:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-03-09 19:13 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2025-03-09 19:06 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-03-09 19:03 - 2020-11-19 00:36 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-03-09 19:03 - 2017-11-14 18:15 - 000419198 __RSH C:\bootmgr
2025-03-09 17:42 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-03-09 16:05 - 2021-03-19 09:58 - 000000000 ____D D:\Benutzer\*****l\AppData\Local\ElevatedDiagnostics
2025-03-09 15:03 - 2020-01-28 16:04 - 016777216 _____ D:\Benutzer\*****l\Documents\MeinSave.sle
2025-03-09 09:51 - 2019-12-29 15:06 - 000000000 ____D D:\Benutzer\*****l\AppData\Roaming\Microsoft\Word
2025-03-08 20:00 - 2020-11-19 00:37 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-03-08 13:25 - 2023-11-30 11:15 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2025-03-08 13:25 - 2021-03-13 15:18 - 000000000 ____D C:\Program Files\Mozilla Firefox
2025-03-08 13:25 - 2019-12-29 12:55 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-03-08 08:06 - 2020-01-28 16:04 - 000000000 ____D D:\Benutzer\*****l\Documents\Doc
2025-03-08 07:46 - 2020-01-28 16:04 - 000000000 ____D D:\Benutzer\*****l\Documents\Eigene Etiketten
2025-03-07 16:32 - 2020-11-19 00:36 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-03-07 16:32 - 2020-11-19 00:36 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-03-07 10:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2025-03-07 09:13 - 2022-05-28 20:38 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-03-07 09:13 - 2019-12-29 12:55 - 000001071 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2025-03-07 09:11 - 2023-11-30 11:15 - 000001061 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2025-03-07 05:35 - 2025-01-23 12:59 - 000000000 ____D D:\Benutzer\*****l\Documents\Ales
2025-03-06 09:04 - 2020-01-02 12:02 - 000000000 ____D D:\Benutzer\*****l\.mchp_packs
2025-03-06 09:03 - 2023-12-05 19:42 - 000000000 ____D C:\GCstudio
2025-03-06 08:59 - 2020-01-02 12:12 - 000000000 ____D C:\Program Files\dotnet
2025-03-06 08:59 - 2019-12-29 17:13 - 000000000 ____D C:\ProgramData\Package Cache
2025-03-05 20:12 - 2020-11-19 00:34 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-03-05 13:10 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2025-03-05 13:08 - 2022-08-21 10:16 - 000000000 ____D D:\Benutzer\*****l\AppData\Roaming\Mozilla
2025-03-05 13:08 - 2022-08-21 10:16 - 000000000 ____D D:\Benutzer\*****l\AppData\Local\Mozilla
2025-03-05 12:47 - 2019-12-29 12:27 - 000000000 ___SD D:\Benutzer\*****l\AppData\Roaming\Microsoft\Credentials
2025-03-04 13:17 - 2021-03-19 17:16 - 000000000 ____D D:\Benutzer\*****l
2025-03-04 11:11 - 2022-05-28 22:02 - 000000000 ____D D:\Benutzer\*****l\Documents\Kalenderdaten
2025-03-04 08:31 - 2022-05-29 06:02 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-03-04 08:30 - 2024-10-07 08:58 - 000000000 ____D D:\Benutzer\*****l\AppData\Local\Cryptomator
2025-03-03 19:25 - 2022-12-21 12:05 - 000000000 ____D D:\Benutzer\*****l\AppData\Roaming\Cryptomator
2025-03-02 17:22 - 2020-03-22 13:46 - 000000000 ____D D:\Benutzer\*****l\Documents\cadvilla professional 9
2025-03-01 14:11 - 2020-01-28 16:05 - 000000000 ____D D:\Benutzer\*****l\Documents\PDF
2025-02-28 16:45 - 2022-05-28 21:32 - 000000000 ____D C:\ProgramData\Piriform
2025-02-28 16:23 - 2023-12-02 09:40 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2025-02-28 16:23 - 2020-01-28 15:56 - 000000000 ____D D:\Benutzer\*****l\AppData\Local\CrashDumps
2025-02-28 04:11 - 2021-01-15 20:32 - 000000000 ____D D:\Benutzer\*****l\AppData\Roaming\NCH Software
2025-02-28 04:10 - 2021-03-19 17:20 - 000000000 ____D C:\WINDOWS\system32\Tasks\NCH Software
2025-02-28 04:10 - 2021-01-15 20:32 - 000000000 ____D C:\ProgramData\NCH Software
2025-02-28 04:10 - 2021-01-15 20:32 - 000000000 ____D C:\Program Files (x86)\NCH Software
2025-02-27 12:58 - 2020-01-01 19:19 - 000000000 ____D D:\Benutzer\*****l\.MAX
2025-02-27 12:57 - 2020-01-01 19:19 - 000000000 ____D C:\ProgramData\MAX
2025-02-25 15:52 - 2019-12-31 13:23 - 000000000 ____D D:\Benutzer\*****l\AppData\Roaming\Microsoft\HTML Help
2025-02-25 12:58 - 2022-10-12 16:08 - 000002142 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader.lnk
2025-02-25 10:10 - 2019-12-30 11:54 - 000000000 ____D C:\ProgramData\TEMP
2025-02-23 13:54 - 2020-11-19 00:38 - 000000000 ____D C:\ProgramData\Packages
2025-02-23 13:54 - 2019-12-29 12:28 - 000000000 ____D D:\Benutzer\*****l\AppData\Local\Packages
2025-02-22 12:26 - 2024-02-18 09:27 - 000000980 _____ D:\Benutzer\Public\Desktop\Revo Uninstaller Pro.lnk
2025-02-22 12:26 - 2019-12-29 19:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2025-02-21 16:36 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2025-02-19 17:03 - 2025-02-02 08:16 - 000011761 _____ D:\Benutzer\*****l\Documents\Frankreich einkaufen.xlsx
2025-02-18 15:31 - 2024-05-24 13:53 - 000000000 ____D D:\Benutzer\*****l\Documents\Persönliche Dokumente
2025-02-18 15:17 - 2020-01-28 16:04 - 000000000 ____D D:\Benutzer\*****l\Documents\aa_e-Rechnungen
2025-02-17 13:04 - 2021-03-13 19:06 - 000018960 _____ (Logitech, Inc.) C:\WINDOWS\system32\Drivers\LNonPnP.sys
2025-02-14 09:14 - 2022-12-05 10:36 - 000000000 ____D C:\Program Files\Microsoft Office
2025-02-14 09:14 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2025-02-12 10:10 - 2024-07-10 09:56 - 000000000 ____D C:\WINDOWS\system32\compatrel
2025-02-12 10:10 - 2023-12-13 12:27 - 000000000 ____D C:\WINDOWS\InboxApps
2025-02-12 10:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-02-12 10:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2025-02-12 10:10 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\USOPrivate
2025-02-12 08:58 - 2025-01-15 15:57 - 000001729 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2019.lnk
2025-02-12 08:57 - 2019-12-29 12:52 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-02-12 08:50 - 2019-12-29 12:52 - 209365816 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2020-07-24 17:50 - 2023-02-20 16:34 - 000005431 _____ () D:\Benutzer\*****l\AppData\Roaming\LTspiceXVII.ini
2024-02-28 10:36 - 2025-03-05 13:05 - 000269765 _____ () D:\Benutzer\*****l\AppData\Roaming\mozillavpn.log
2023-10-30 14:04 - 2023-10-30 14:11 - 000055659 _____ () D:\Benutzer\*****l\AppData\Roaming\mozillavpn.txt
2020-09-10 12:03 - 2020-09-10 12:03 - 000000064 _____ () D:\Benutzer\*****l\AppData\Roaming\Sandra.ldb
2020-09-10 12:03 - 2019-07-22 01:28 - 017436672 _____ () D:\Benutzer\*****l\AppData\Roaming\Sandra.mdb
2024-12-14 12:01 - 2024-12-14 12:14 - 000000716 ____H () D:\Benutzer\*****l\AppData\Roaming\{76EC4113-99BE-5C38-CF7C-3D8C5AB81D5D}
2020-01-04 15:47 - 2020-01-04 15:47 - 000001897 _____ () D:\Benutzer\*****l\AppData\Local\17031C35C7E34af7B30415B6B3B30AE8.Layout2.lbx
2022-02-06 11:13 - 2022-02-06 11:13 - 000002700 _____ () D:\Benutzer\*****l\AppData\Local\96229643BCE7484eABD89A31D10A9C50.Layout2.lbx
2022-12-29 10:58 - 2022-12-29 10:58 - 000001977 _____ () D:\Benutzer\*****l\AppData\Local\A4D9F88A7055477c91A09FDF2A267CA2.retour.lbx
2024-01-04 13:29 - 2024-01-04 13:29 - 000001966 _____ () D:\Benutzer\*****l\AppData\Local\B559C1FEA9EA412f9088EB669CE7B90A.Layout2.lbx
2023-06-20 15:47 - 2025-01-15 14:57 - 000000000 _____ () D:\Benutzer\*****l\AppData\Local\locker.lck

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================

Hopp 10.03.2025 21:02
Mein Addition.txt
 
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 06-03-2025
durchgeführt von *****l (10-03-2025 15:53:59)
Gestartet von D:\Benutzer\*****l\AppData\Local\Temp\0603FRST64_exe_7100320251547522657574627
Microsoft Windows 10 Home Version 22H2 19045.5555 (X64) (2021-03-19 16:20:56)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-4172440889-3953070438-3375788779-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4172440889-3953070438-3375788779-503 - Limited - Disabled)
Gast (S-1-5-21-4172440889-3953070438-3375788779-501 - Limited - Disabled)
*****l (S-1-5-21-4172440889-3953070438-3375788779-1001 - Administrator - Enabled) => D:\Benutzer\*****l
WDAGUtilityAccount (S-1-5-21-4172440889-3953070438-3375788779-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

3D +++ Collection 1 (HKLM\...\{DB98A61E-0A22-4179-851C-A8D8690BFFF8}_is1) (Version:  - )
3D-Tool FreeViewer V15 (HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\3D-Tool FreeViewer V15) (Version: V15.20 - 3D-Tool GmbH & Co. KG)
Adobe Acrobat Reader - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 24.005.20421 - Adobe Systems Incorporated)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601108}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
AllDup 4.4.12 (HKLM-x32\...\AllDup_is1) (Version: 4.4.12 - Michael Thummerer Software Design)
AOMEI Backupper (HKLM-x32\...\{A83692F5-3E9B-4E95-9E7E-B5DF5536CE9D}_is1) (Version: 7.3.3 - AOMEI International Network Limited.)
AOMEI Partition Assistant 10.3.0 (HKLM-x32\...\{04F850ED-FD0F-4ED1-AE1B-4498165BF3D2}_is1) (Version: 10.3.0 - AOMEI International Network Limited.)
Apple Mobile Device Support (HKLM\...\{AAFEC555-4154-4A21-9523-30B8CDE94533}) (Version: 18.0.0.33 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{B292D163-23D2-4523-A699-1ABEC1875609}) (Version: 2.7.0.3 - Apple Inc.)
Application Verifier x64 External Package (HKLM\...\{10CA1677-8F02-3131-F25C-780BAB52E468}) (Version: 10.1.18362.1 - Microsoft) Hidden
Arduino IDE 2.3.4 (HKLM\...\459fc68c-eb53-59f8-8957-9913bc627af3) (Version: 2.3.4 - Arduino SA)
Atmel Driver Files (HKLM-x32\...\{529FE21D-F776-44B0-A4BC-1009EC92F7E3}) (Version: 8.1.39 - Atmel Corporation)
Atmel LibUSB0 Driver (x64) (HKLM\...\{C1F86585-CDAC-4ABE-B163-161DDBCC4332}) (Version: 7.0.125 - Atmel)
Audacity 3.4.2 (HKLM\...\Audacity_is1) (Version: 3.4.2 - Audacity Team)
BlueStacks X (HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\BlueStacks X) (Version: 0.14.4.2 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BRAdmin Professional 3 (HKLM-x32\...\{75C885D4-C758-4896-A3B4-90DA34B44C31}) (Version: 3.73.0001 - Brother)
BrLauncher (HKLM-x32\...\{C04DCB6D-02A2-41AD-AA79-2644CEB26445}) (Version: 2.0.17.0 - Brother Industries Ltd.) Hidden
BrLogRx (HKLM-x32\...\{B556F816-FF4D-4BB6-9339-ED28639E2EF3}) (Version: 1.0.2.1 - Brother Industries Ltd.) Hidden
Brother PCFax Driver (HKLM-x32\...\{56BA05BD-7A67-4EF8-85A7-8C6528AEE2AC}) (Version: 1.4.0.0 - Brother Industries Ltd.) Hidden
Brother Printer Driver (HKLM-x32\...\{86962AFD-E211-47BB-A104-BB8C698FDA21}) (Version: 1.3.0.0 - Brother Industries Ltd.) Hidden
Brother P-touch Editor 5.4 (HKLM-x32\...\{3D6B8787-51B7-45F3-B730-79875DA88764}) (Version: 5.4.0150 - Brother Industries, Ltd.)
Brother P-touch Update Software (HKLM-x32\...\{3B924AD1-366A-4691-BAEB-4B8ACD16A03D}) (Version: 1.0.0270 - Brother Industries, Ltd.)
Brother Scanner Driver (HKLM-x32\...\{12ED4482-1F06-4EEA-9E5B-C09C5CB185F2}) (Version: 1.0.20.1 - Brother Industries Ltd.) Hidden
BrSupportTools (HKLM-x32\...\{E1B7CE6D-A4F9-4C9B-8FAB-9178CF47FDED}) (Version: 1.0.27.0 - Brother Industries Ltd.) Hidden
cadvilla professional9.0.3.0 (HKLM\...\{2C98D9F7-4F1D-4D75-8170-B83260B2FCE5}_is1) (Version:  - Trixl GmbH)
capella 8 (HKLM-x32\...\{63283d1e-1533-4083-9790-ea9f90f997d4}) (Version: 8 - capella-software AG)
capella reader 8 (HKLM-x32\...\{6703cf0f-636d-4208-9aab-f968e906d868}) (Version: 8 - capella-software AG)
capella-scan 8 Ergänzungswörterbücher (HKLM-x32\...\{8A22263A-70C9-48CA-8C78-545ECBA566AE}) (Version: 8.1.0 - capella-software)
capella-scan 9 (HKLM-x32\...\{8f16b848-80f7-4c78-a37a-41653e903547}) (Version: 9 - capella-software AG)
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1691.6 - Piriform Software) Hidden
ClickOnce Bootstrapper Package for Microsoft .NET Framework (HKLM-x32\...\{89138B06-997A-4962-9168-7E83C7D8B79A}) (Version: 4.8.04739 - Microsoft Corporation) Hidden
ColorPic (HKLM-x32\...\ColorPic) (Version: 4.1 - Iconico)
ControlCenter4 (HKLM-x32\...\{CD0E9C09-7A83-4DC4-A54E-7B8EECBF3CA0}) (Version: 4.6.22.1 - Brother Industries, Ltd.) Hidden
ControlCenter4 CSDK (HKLM-x32\...\{1E89F75C-EF46-406C-9AAC-615B3CCC1D3D}) (Version: 4.3.2.1 - Brother Insutries Ltd.) Hidden
CopyTrans Control Center nur deinstallieren (HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\CopyTrans Suite) (Version: 5.003 - WindSolutions)
Cryptomator (HKLM\...\{3872290D-61BB-3B70-86B7-035FF4ED0D3F}) (Version: 1.14.0.5375 - Skymatic GmbH) Hidden
Cryptomator (HKLM-x32\...\{f25871ad-225a-4dd1-b735-9436aea7afee}) (Version: 1.14.0.5375 - Skymatic GmbH)
CrystalDiskInfo 9.2.3 Aoi Edition (HKLM\...\CrystalDiskInfo_is1) (Version: 9.2.3 - Crystal Dew World)
Debut Video-Aufnahme-Programm (HKLM-x32\...\Debut) (Version: 8.81 - NCH Software)
DeskProto 6.1 (HKLM\...\DeskProto 6.1 (64 bit)_is1) (Version: 6.1 - Delft Spline Systems)
DesktopOK (HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\DesktopOK) (Version:  - hxxp://www.softwareok.de/)
DeskUpdate (HKLM-x32\...\DeskUpdate_is1) (Version: 5.2.27.0 - Fujitsu Client Computing Limited)
DiagnosticsHub_CollectionService (HKLM\...\{05CD6D2B-7078-4F6B-98C2-5BC949AFE63E}) (Version: 16.11.35303 - Microsoft Corporation) Hidden
Entity Framework 6.2.0 Tools  for Visual Studio 2019 (HKLM-x32\...\{F878746A-C5F7-420A-A672-4DFEF74ADC3A}) (Version: 6.2.0.0 - Microsoft Corporation) Hidden
FILOU-NC20 (HKLM-x32\...\{4e8beae7-9cb4-455f-91f3-8aa82ed1133e}_is1) (Version:  - FILOU Software GmbH)
FoneTool (HKLM-x32\...\{AD04677C-79B8-4B7A-BB39-FEE6F138E716}_is1) (Version: 2.5.0 - AOMEI International Network Limited.)
FT_Prog (HKLM-x32\...\FT_Prog) (Version: 3.10.132.511 - Future Technology Devices International Ltd.)
GC Studio (HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\GC Studio) (Version: 1.03.00.00 - Mier Engineering)
GLUCOFACTS(TM) Deluxe (HKLM-x32\...\{B6A86BBA-CB54-45D7-8CC5-4FFC05B7488B}) (Version: 3.16.00 - ASCENSIA Diabetes Care)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.13 - Google LLC) Hidden
Great Cow BASIC v0.98.06 - Full Installation (HKLM-x32\...\Great Cow BASIC  v0.98.06_is1) (Version:  - Hugh Considine and Evan R. Venn)
grepWin (HKLM-x32\...\{12ED8216-2909-42F2-A63F-427085C79705}) (Version: 1.7.720 - Stefans Tools)
HowToGuide (HKLM-x32\...\{36580EEB-4EDF-4880-BBD4-097E2C645ECD}) (Version: 1.0.1.0 - Brother Industries Ltd.) Hidden
HWiNFO64 (HKLM\...\HWiNFO64_is1) (Version: 7.68 - Martin Malik, REALiX s.r.o.)
icecap_collection_neutral (HKLM-x32\...\{8C0AD97C-C084-4A58-905E-75106278ED8C}) (Version: 16.11.34930 - Microsoft Corporation) Hidden
icecap_collection_x64 (HKLM\...\{4071AFED-A868-4FBE-A0E3-29F2C442F9C6}) (Version: 16.11.34930 - Microsoft Corporation) Hidden
icecap_collectionresources (HKLM-x32\...\{17FE6770-0486-406F-9E7B-E52CC991D268}) (Version: 16.11.34827 - Microsoft Corporation) Hidden
icecap_collectionresourcesx64 (HKLM-x32\...\{DC8C6BA1-EC33-4EC1-8A19-C3C1A58715A4}) (Version: 16.11.34827 - Microsoft Corporation) Hidden
Incomedia WebSite X5 v12 - Evolution (HKLM-x32\...\{B7B23A06-AD7B-4ADE-809C-E8E34676EE13}_is1) (Version: 12.0.3.19 - Incomedia s.r.l.)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.5161 - Intel Corporation)
IntelliTraceProfilerProxy (HKLM\...\{1C92D642-AD8C-4319-8E7B-5D6AA55F430B}) (Version: 15.0.18198.01 - Microsoft Corporation) Hidden
IntelliTraceProfilerProxy (HKLM-x32\...\{7D94CF67-6666-4111-B027-D7AB7F189F70}) (Version: 15.0.18198.01 - Microsoft Corporation) Hidden
iTunes (HKLM\...\{B9140EF0-978E-412F-8D19-E715275EAC33}) (Version: 12.13.4.4 - Apple Inc.)
Java 8 Update 281 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180281F0}) (Version: 8.0.2810.9 - Oracle Corporation)
Kits Configuration Installer (HKLM-x32\...\{63AAA877-5536-9481-2385-28A082100D78}) (Version: 10.1.18362.1 - Microsoft) Hidden
Kumulatives Microsoft .NET Framework Intellisense Pack für Visual Studio (Deutsch) (HKLM-x32\...\{E1F68FC9-F23C-4F44-8092-CAC55E43A80B}) (Version: 4.8.03761 - Microsoft Corporation) Hidden
Language Pack (HKLM-x32\...\{46363971-8CFF-44B6-AC72-7777A8EBF64A}) (Version: 1.00.0000 - DesignSoft)
LibreView Device Drivers - 3.2.4 (HKLM-x32\...\{D2200BF1-9BF0-4C1C-9282-A727FFCC5046}) (Version: 3.2.4 - Newyu)
Logitech SetPoint 6.90 (HKLM\...\sp6) (Version: 6.90.66 - Logitech)
LTspice XVII (HKLM\...\LTspice XVII) (Version:  - Linear Technology Corporation)
Macrium Reflect Free Edition (HKLM\...\{A69180CE-2BC8-4CDD-85E1-88A849828F05}) (Version: 7.2.4601 - Paramount Software (UK) Ltd.) Hidden
Macrium Reflect Free Edition (HKLM\...\MacriumReflect) (Version: 7.2 - Paramount Software (UK) Ltd.)
MailWasher (HKLM-x32\...\{8DCD4B54-C80C-4C26-91C0-FB6CB5D7A16E}) (Version: 7.12.188 - Firetrust)
Max Local Application (HKLM-x32\...\{8A551628-20DB-4A9C-A172-572689456C44}) (Version: 1.4.6 - ELV Elektronik AG) Hidden
Max Local Application (HKLM-x32\...\Max Local Application) (Version: 1.4.6 - ELV Elektronik AG)
MEmu (HKLM-x32\...\MEmu) (Version: 7.2.7.0 - Microvirt Software Technology Co. Ltd.)
Microsoft .NET AppHost Pack - 5.0.17 (x64) (HKLM\...\{83EE22D9-C7B3-4CBC-9956-9DF0D4D0FF46}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 5.0.17 (x64_arm) (HKLM\...\{38CA215A-103C-4C37-A86E-57E49C2220AD}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 5.0.17 (x64_arm64) (HKLM\...\{E61152B0-06C3-4EA3-AE31-13BCB874406A}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 5.0.17 (x64_x86) (HKLM\...\{A95FEF96-3FF2-4387-9301-792B6721F648}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 5.0.4 (x64) (HKLM\...\{06EBD892-2541-498C-8E78-BCB7E9596589}) (Version: 40.16.29816 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 5.0.4 (x64_arm) (HKLM\...\{4FB34C2A-BAD1-4E64-8DFB-6568EFFA8B4B}) (Version: 40.16.29816 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 5.0.4 (x64_arm64) (HKLM\...\{D9C5ED51-E728-4C16-8176-DE2D2A5E1221}) (Version: 40.16.29816 - Microsoft Corporation) Hidden
Microsoft .NET AppHost Pack - 5.0.4 (x64_x86) (HKLM\...\{28BB0210-B7E3-4128-8EA9-9ED79E2D0B34}) (Version: 40.16.29816 - Microsoft Corporation) Hidden
Microsoft .NET Core 2.1 Templates 5.0.416 (x64) (HKLM\...\{8CE9048E-569D-458A-AFB5-FC2D09ABB70C}) (Version: 8.29.63110 - Microsoft Corporation) Hidden
Microsoft .NET Core 3.1 Templates 3.1.426 (x64) (HKLM\...\{1F0B1023-8690-4D84-A0F7-6193AF1CA36C}) (Version: 3.1.33.016244 - Microsoft Corporation) Hidden
Microsoft .NET Core 3.1 Templates 5.0.416 (x64) (HKLM\...\{4AAD9CF5-98D4-4A54-B007-48B70D6BD174}) (Version: 12.29.30342 - Microsoft Corporation) Hidden
Microsoft .NET Core 5.0 Templates 5.0.104 (x64) (HKLM\...\{9F8A0542-8146-43CE-8916-6F38012D7FC0}) (Version: 20.3.15214 - Microsoft Corporation) Hidden
Microsoft .NET Core 5.0 Templates 5.0.416 (x64) (HKLM\...\{2A752C18-4EA7-416E-A4D4-1DFDDB6B1FE8}) (Version: 20.5.30342 - Microsoft Corporation) Hidden
Microsoft .NET Core AppHost Pack - 3.1.32 (x64) (HKLM\...\{51FB23C0-2978-423B-BC84-6F4923EFEF6D}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core AppHost Pack - 3.1.32 (x64_arm) (HKLM\...\{270D2A13-4AA7-44FD-B9B3-EA09DD8F32E7}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core AppHost Pack - 3.1.32 (x64_arm64) (HKLM\...\{F11CFE11-BE79-4A34-8649-404C8184A4D4}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core AppHost Pack - 3.1.32 (x64_x86) (HKLM\...\{A4FF0652-BEA3-4E62-91A1-410194316D1F}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core Host - 2.1.30 (x64) (HKLM\...\{8FD66631-B964-4E12-92E1-A8A4CAD5D14C}) (Version: 16.120.30411 - Microsoft Corporation) Hidden
Microsoft .NET Core Host - 3.1.32 (x64) (HKLM\...\{8A8E3A04-83BC-4CDE-9259-893B666C1AB1}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core Host - 3.1.32 (x86) (HKLM-x32\...\{3C73457A-1A33-4DE0-B6C2-6FBA877E1FCF}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core Host FX Resolver - 2.1.30 (x64) (HKLM\...\{EB291DFA-DEDE-4355-98D9-17F95E91C437}) (Version: 16.120.30411 - Microsoft Corporation) Hidden
Microsoft .NET Core Host FX Resolver - 3.1.32 (x64) (HKLM\...\{ABC6B3C2-1A8D-4C5E-AC16-C2AE44F02743}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core Host FX Resolver - 3.1.32 (x86) (HKLM-x32\...\{CE1A992F-4571-423D-9CAE-1184E8F29471}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 2.1.30 (x64) (HKLM\...\{92A0517D-D5F9-4D8F-87F9-83ABC04240C2}) (Version: 16.120.30411 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 2.1.30 (x64) (HKLM-x32\...\{e6e5b73d-9aea-4a61-9110-4f93d1b9bc75}) (Version: 2.1.30.30411 - Microsoft Corporation)
Microsoft .NET Core Runtime - 3.1.32 (x64) (HKLM\...\{A741B803-3F0E-4684-81EF-FC128D15A92C}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core Runtime - 3.1.32 (x86) (HKLM-x32\...\{841FE4B1-2C3F-4304-A686-6DF41B4CC1A1}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft .NET Core SDK 3.1.426 (x64) (HKLM-x32\...\{fe99eef2-4dec-46d1-b6c5-fdeb89e28f17}) (Version: 3.1.426.16244 - Microsoft Corporation)
Microsoft .NET Core Targeting Pack - 3.1.0 (x64) (HKLM\...\{31EDE1E7-C855-4633-9D73-56F566136567}) (Version: 24.64.28315 - Microsoft Corporation) Hidden
Microsoft .NET Core Toolset 3.1.426 (x64) (HKLM\...\{685DF87E-9750-432A-84F3-51F88AFC817D}) (Version: 12.22.49012 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{19E8AE59-4D4A-3534-B567-6CC08FA4102E}) (Version: 4.5.51651 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.6.1 Targeting Pack (HKLM-x32\...\{8BC3EEC9-090F-4C53-A8DA-1BEC913040F9}) (Version: 4.6.01055 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.7.2 Targeting Pack (HKLM-x32\...\{1784A8CD-F7FE-47E2-A87D-1F31E7242D0D}) (Version: 4.7.03062 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.8 SDK (Deutsch) (HKLM-x32\...\{5F62E29E-C154-44CB-81D6-696FB3474844}) (Version: 4.8.03761 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4.8 SDK (HKLM-x32\...\{949C0535-171C-480F-9CF4-D25C9E60FE88}) (Version: 4.8.03928 - Microsoft Corporation) Hidden
Microsoft .NET Host - 5.0.17 (x64) (HKLM\...\{E663ED1E-899C-40E8-91D0-8D37B95E3C69}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft .NET Host - 5.0.17 (x86) (HKLM-x32\...\{54DE7EA9-E391-4BD2-A373-3A72A18EBDB5}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft .NET Host - 5.0.4 (x64) (HKLM\...\{DD901386-A294-4FF1-A683-0EFF5C66209A}) (Version: 40.16.29816 - Microsoft Corporation) Hidden
Microsoft .NET Host - 7.0.20 (x86) (HKLM-x32\...\{5B42B80B-A402-4711-B7E4-2E42B953ACAB}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.13 (x64) (HKLM\...\{6CD2C0A9-55E7-4133-BC19-205CCF2B64C9}) (Version: 64.52.27977 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 5.0.17 (x64) (HKLM\...\{8BA25391-0BE6-443A-8EBF-86A29BAFC479}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 5.0.17 (x86) (HKLM-x32\...\{AF01038B-6523-4EA7-9D9E-4F1E2927D88B}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 5.0.4 (x64) (HKLM\...\{773EF543-570F-4746-953A-3CB19DFCB3E2}) (Version: 40.16.29816 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 7.0.20 (x86) (HKLM-x32\...\{9D0BB263-30C0-477F-A78D-D5E25FFAC64A}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.13 (x64) (HKLM\...\{BB5AC4BC-A263-43DA-A530-9CB56342D6B8}) (Version: 64.52.27977 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 5.0.17 (x64) (HKLM\...\{5A66E598-37BD-4C8A-A7CB-A71C32ABCD78}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 5.0.17 (x86) (HKLM-x32\...\{59650A2A-3839-46EC-9D9C-6B3B1C743C55}) (Version: 40.68.31213 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 5.0.4 (x64) (HKLM\...\{879C9645-ADF3-4697-915B-00B76EBA629F}) (Version: 40.16.29816 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 7.0.20 (x86) (HKLM-x32\...\{4DAE978C-6175-400D-A508-2403109B89E9}) (Version: 56.80.15184 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.13 (x64) (HKLM\...\{C7FB4EEE-D481-4AC1-B113-120A9124FE50}) (Version: 64.52.27977 - Microsoft Corporation) Hidden
Microsoft .NET SDK 5.0.104 (x64) (HKLM-x32\...\{ffd9c013-1ec9-45ed-8ca2-104e6a0800b7}) (Version: 5.1.421.11822 - Microsoft Corporation)
Microsoft .NET SDK 5.0.416 (x64) from Visual Studio (HKLM\...\{E5AE74BC-BDBB-4C18-B61E-592A09F36A5D}) (Version: 5.4.1622.58022 - Microsoft Corporation)
Microsoft .NET Standard Targeting Pack - 2.1.0 (x64) (HKLM\...\{A7036CFB-B403-4598-85FF-D397ABB88173}) (Version: 24.0.28113 - Microsoft Corporation) Hidden
Microsoft .NET Targeting Pack - 5.0.0 (x64) (HKLM\...\{678F8AE2-7E5F-4392-9B6D-AED8326FB2AF}) (Version: 40.0.29513 - Microsoft Corporation) Hidden
Microsoft .NET Toolset 5.0.104 (x64) (HKLM\...\{325A8055-811B-4906-AE26-9409CB74E7A9}) (Version: 20.3.15214 - Microsoft Corporation) Hidden
Microsoft .NET Toolset 5.0.416 (x64) (HKLM\...\{1170C1ED-5306-484D-8FF6-4958D62F9B3C}) (Version: 20.5.30342 - Microsoft Corporation) Hidden
Microsoft Access database engine 2016 (English) (HKLM-x32\...\{90160000-00D1-0409-0000-0000000FF1CE}) (Version: 16.0.5044.1000 - Microsoft Corporation)
Microsoft ASP.NET Core 2.1.30 - Shared Framework (HKLM-x32\...\{614a1747-bef3-44e7-86a8-799e4d2ab88d}) (Version: 2.1.30.60071 - Microsoft Corporation)
Microsoft ASP.NET Core 2.1.30 Shared Framework (x64) (HKLM\...\{3F0FA3FE-95FA-3B48-ABD1-46FB4DA4021E}) (Version: 2.1.30.60071 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 3.1.10 Targeting Pack (x64) (HKLM\...\{3DCD041B-A4CB-3585-893D-60E7B8D74C37}) (Version: 3.1.10.20560 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 3.1.10 Targeting Pack (x64) (HKLM\...\{FEA48357-CE2F-3ED0-B2A0-8548BEC6F111}) (Version: 3.1.10.20520 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 3.1.32 - Shared Framework (x86) (HKLM-x32\...\{b52191c1-a9c0-4b34-9a4e-930c2dd8a540}) (Version: 3.1.32.22566 - Microsoft Corporation)
Microsoft ASP.NET Core 3.1.32 Shared Framework (x64) (HKLM\...\{2E69E59E-17DF-3977-A405-49096F8B8432}) (Version: 3.1.32.22566 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 3.1.32 Shared Framework (x86) (HKLM-x32\...\{C2C8E71E-42CF-3CFE-8CFB-F8F96670C190}) (Version: 3.1.32.22566 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 5.0.0 Targeting Pack (x64) (HKLM\...\{7E0C04EC-9D6F-36CD-A821-DC8493EE407F}) (Version: 5.0.0.20526 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 5.0.17 - Shared Framework (x64) (HKLM-x32\...\{e3da8d0c-a835-4acd-82dc-e5271a74c29c}) (Version: 5.0.17.22215 - Microsoft Corporation)
Microsoft ASP.NET Core 5.0.17 - Shared Framework (x86) (HKLM-x32\...\{df6af485-2321-46de-a0f8-b81bd59cd6f2}) (Version: 5.0.17.22215 - Microsoft Corporation)
Microsoft ASP.NET Core 5.0.17 Shared Framework (x64) (HKLM\...\{C1FF10EF-6BCB-3B08-AE1A-0D237C9F9F30}) (Version: 5.0.17.22215 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 5.0.17 Shared Framework (x86) (HKLM-x32\...\{6A095B1E-4950-3F81-9E38-C0781147C932}) (Version: 5.0.17.22215 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 5.0.4 Shared Framework (x64) (HKLM\...\{4CFF18E0-1998-37CA-AAE3-F849BFF084F5}) (Version: 5.0.4.21118 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 134.0.3124.51 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 133.0.3065.92 - Microsoft Corporation) Hidden
Microsoft NetStandard SDK (HKLM-x32\...\{737FDDA7-B944-4CB5-92D9-3D56373BD301}) (Version: 15.0.51105 - Microsoft Corporation) Hidden
Microsoft Office LTSC Professional Plus 2021 - de-de (HKLM\...\ProPlus2021Volume - de-de) (Version: 16.0.14332.20857 - Microsoft Corporation)
Microsoft Rechner-Plus (HKLM-x32\...\{437C19B3-7E20-4E39-B868-CA6BAA820E1C}) (Version: 1.0.0 - Microsoft)
Microsoft Support and Recovery Assistant (HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\1411bee0b739e9b9) (Version: 17.0.9326.9 - Microsoft Corporation)
Microsoft TestPlatform SDK Local Feed (HKLM-x32\...\{71DA9320-08C2-4EC4-90AD-2DB68E37ED90}) (Version: 16.11.0.4953698 - Microsoft) Hidden
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4048 (HKLM\...\{91415F19-4C22-3609-A105-92ED3522D83C}) (Version: 9.0.30729.4048 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4048 (HKLM-x32\...\{5B1F2843-B379-3FF2-B0D3-64DD143ED53A}) (Version: 9.0.30729.4048 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.42.34438 (HKLM-x32\...\{b49c10dd-4d54-45f8-ad13-fa25704456a4}) (Version: 14.42.34438.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.38.33130 (HKLM-x32\...\{2cfeba4a-21f8-4ea7-9927-c5a5c6f13cc9}) (Version: 14.38.33130.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.42.34438 (HKLM\...\{E528AD94-12D7-42C4-91A3-908BE28E9BD2}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.42.34438 (HKLM\...\{2E15F519-4FDA-4834-B4EE-7EFCE7D8D4EE}) (Version: 14.42.34438 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.38.33130 (HKLM-x32\...\{5CA9AE7B-2EFC-4F02-81CD-32ABE173C755}) (Version: 14.38.33130 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.38.33130 (HKLM-x32\...\{DF1B52DF-C88E-4DDF-956B-6E7A03327F46}) (Version: 14.38.33130 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}) (Version: 10.0.50908 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 3.12.2320.19252 - Microsoft Corporation)
Microsoft Visual Studio Setup Configuration (HKLM-x32\...\{6AC5612A-D067-44B9-9C8E-2C1B3473B429}) (Version: 3.7.2182.35401 - Microsoft Corporation) Hidden
Microsoft Visual Studio Setup WMI Provider (HKLM-x32\...\{E281F6E2-136B-4AF0-895B-253279711697}) (Version: 3.7.2182.35401 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 3.1.32 (x64) (HKLM\...\{5BEE5F3E-4D78-4DE8-A8F3-36D3E9D8868C}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 3.1.32 (x86) (HKLM-x32\...\{25D5B94A-E3CD-44E8-9C3A-FE320B7B38FC}) (Version: 24.192.31915 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 3.1.32 (x86) (HKLM-x32\...\{4f894285-fd43-43ac-8669-33e8b7c0a97d}) (Version: 3.1.32.31915 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 5.0.17 (x64) (HKLM\...\{3C31CBA1-A0D9-4B95-A807-AD2313D12F47}) (Version: 40.68.31219 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 5.0.17 (x64) (HKLM-x32\...\{20d5df4e-006c-4d6d-a0dc-490d009b9786}) (Version: 5.0.17.31219 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 5.0.17 (x86) (HKLM-x32\...\{098c6ff7-1af1-4c4a-b86f-c60608c98e31}) (Version: 5.0.17.31219 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 5.0.17 (x86) (HKLM-x32\...\{0D02D706-44F2-4957-A448-E7259A0B56B9}) (Version: 40.68.31219 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 5.0.4 (x64) (HKLM\...\{A04C83D6-2FC0-4F09-9166-E870E5A9E168}) (Version: 40.16.29817 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 7.0.20 (x86) (HKLM-x32\...\{b16df2a0-c74b-4842-a33c-e03a23c6972d}) (Version: 7.0.20.33720 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 7.0.20 (x86) (HKLM-x32\...\{D21715FE-E342-4744-A499-76ECE655DE5C}) (Version: 56.80.15245 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.13 (x64) (HKLM\...\{852F821B-340A-4473-BA94-8FAFD5AFFE85}) (Version: 64.52.27986 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.13 (x64) (HKLM-x32\...\{e882eb81-b18c-4676-88f0-9a6ea9db6090}) (Version: 8.0.13.34517 - Microsoft Corporation)
Microsoft Windows Desktop Targeting Pack - 3.1.0 (x64) (HKLM\...\{7519423C-A977-4160-83A2-48633600A216}) (Version: 24.64.28315 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Targeting Pack - 5.0.0 (x64) (HKLM\...\{B7846BB6-4EDE-409B-9147-631286EF7FDD}) (Version: 40.0.29420 - Microsoft Corporation) Hidden
Microsoft-System-CLR-Typen für SQL Server 2019 CTP2.2 (HKLM\...\{0AF3B52A-F38D-4D63-9F72-73623C601CD9}) (Version: 15.0.1200.24 - Microsoft Corporation)
Microsoft-System-CLR-Typen für SQL Server 2019 CTP2.2 (HKLM-x32\...\{BF16A1DB-06A6-4A8E-B7A8-61F1F9C9FBA3}) (Version: 15.0.1200.24 - Microsoft Corporation)
Migros Bank E-Banking (HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\{3574a8d3-a887-4186-900e-0766c8c08929}) (Version: 9.2.2812.0 - KOBIL Systems GmbH) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 136.0 (x64 de)) (Version: 136.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 115.5.1 - Mozilla)
Mozilla Thunderbird (x64 de) (HKLM\...\Mozilla Thunderbird 128.8.0 (x64 de)) (Version: 128.8.0 - Mozilla)
MPLAB X IDE v5.30 (HKLM-x32\...\MPLAB X IDE v5.30 v5.30) (Version: v5.30 - Microchip)
MPLAB XC8 C Compiler (HKLM-x32\...\MPLAB XC8 C Compiler v2.10) (Version: v2.10 - Microchip)
MSI Development Tools (HKLM-x32\...\{DB4DB790-64DD-1902-4BF2-833B3B6DBCA1}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
NetworkRepairTool (HKLM-x32\...\{947DE453-69FD-4CF6-A682-04D1308C79AF}) (Version: 1.2.15.0 - Brother Industries, Ltd.) Hidden
NordUpdater (HKLM\...\{6E35DB82-3D19-4DD6-B8CB-F082815FDE18}_is1) (Version: 1.4.6.950 - Nord Security)
NordVPN (HKLM\...\{19465C24-3D5D-4327-B99F-3CC0A1D38151}_is1) (Version: 7.35.1.0 - Nord Security)
Nuance PaperPort 14 (HKLM-x32\...\{6CC9391F-D441-4D2E-9ECC-1F7084C733ED}) (Version: 14.5.0006 - Nuance Communications, Inc.)
Nuance PDF Viewer SE (HKLM-x32\...\{7BAC9170-359D-4EAD-B6E4-238A14940C11}) (Version: 7.20.3230 - Nuance Communications, Inc.)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14332.20857 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14332.20857 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.14332.20791 - Microsoft Corporation) Hidden
OKI Network Extension (HKLM-x32\...\{38ADB9A6-798C-11D6-A855-00105A80791C}) (Version: 1.00.000 - Okidata)
Open-Shell (HKLM\...\{F4B6EE58-F183-4B0D-930B-4480673C0F5B}) (Version: 4.4.160 - The Open-Shell Team)
Paket zur Festlegung von Zielversionen von Microsoft .NET Framework 4.7.2 (Deutsch) (HKLM-x32\...\{98FE7C2A-22A4-401A-B45B-2AA107C06DD7}) (Version: 4.7.03062 - Microsoft Corporation) Hidden
PaperPort Image Printer 64-bit (HKLM\...\{715CAACC-579B-4831-A5F4-A83A8DE3EFE2}) (Version: 14.00.0002 - Nuance Communications, Inc.)
PC-FAXReceive (HKLM-x32\...\{5905E4B2-93DD-4F9D-AC84-8AE1FC7F91F7}) (Version: 1.6.17.0 - Brother Insutries Ltd.) Hidden
PCFaxTx (HKLM-x32\...\{3C17737F-A6C4-4528-9A60-06DD0D4B3A63}) (Version: 1.0.18.1 - Brother Industries Ltd.) Hidden
pCloud Drive (HKLM\...\{0DED6451-DEA7-4F71-A62C-AC1C5D4EA6AF}) (Version: 4.1.4.0 - pCloud AG) Hidden
pCloud Drive (HKLM\...\{BBE0DEDC-F66F-423E-9D23-16629D698876}) (Version: 3.11.16.0 - pCloud AG) Hidden
pCloud Drive (HKLM-x32\...\{12fa27f6-ae6e-4b15-80b1-962a1d0dec39}) (Version: 4.1.4.0 - pCloud AG)
PDF24 Creator 9.12.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 9.12.0 - geek software GmbH)
PDF-XChange Editor (HKLM\...\{3BB66258-EB01-4052-9558-D9353DC5AC89}) (Version: 8.0.336.0 - Tracker Software Products (Canada) Ltd.) Hidden
PDF-XChange Editor (HKLM-x32\...\{797baf93-803d-4306-9b2f-9ff5972f040c}) (Version: 8.0.336.0 - Tracker Software Products (Canada) Ltd.)
PicoPDF PDF-Editor (HKLM-x32\...\PicoPDF) (Version: 6.44 - NCH Software)
Reboot Restore Rx (HKLM\...\Shield) (Version: 2.2 - Horizon Datasys, Inc.)
RemoteSetup (HKLM-x32\...\{EB4D046E-28C1-4884-9129-47F41317E9B0}) (Version: 3.10.3.0 - Brother Industries Ltd.) Hidden
Revo Uninstaller Pro 5.3.5 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 5.3.5 - VS Revo Group, Ltd.)
Scanner Mouse (HKLM-x32\...\{8021C8CA-213C-4717-BA1A-6068AC980805}) (Version: 2.5.7 - Dacuda)
ScannerUtilityInstaller (HKLM-x32\...\{5B645FE2-19E9-4B15-B5B2-3D8766F6FA27}) (Version: 1.0.0.0 - Brother) Hidden
Scribus 1.6.1 (HKLM-x32\...\Scribus 1.6.1) (Version: 1.6.1 - The Scribus Team)
SDK ARM Additions (HKLM-x32\...\{73681F86-CD86-4208-572F-959B45430B04}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
SDK ARM Redistributables (HKLM-x32\...\{67EE3804-9642-62BA-EBF1-B1561FB4ECBE}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Simplify3D Software (HKLM\...\Simplify3D Software 5.0.2) (Version: 5.0.2 - Simplify3D)
Simplify3D Software (HKLM\...\Simplify3D Software 5.1.0) (Version: 5.1.0 - Simplify3D)
Simplify3D Software (HKLM\...\Simplify3D Software 5.1.1) (Version: 5.1.1 - Simplify3D)
Simplify3D Software (HKLM\...\Simplify3D Software 5.1.2) (Version: 5.1.2 - Simplify3D)
SmartScore 64 Player Edition (HKLM\...\{73401F9A-EE1F-4334-B53C-389F68535FE3}) (Version: 11.5.92 - Musitek)
Snagit 11 (HKLM-x32\...\{F8E3C768-71F3-11E1-9DF7-70804824019B}) (Version: 11.0.1 - TechSmith Corporation)
StatusMonitor (HKLM-x32\...\{B8C27558-33E8-46D3-B965-5937285234CD}) (Version: 1.22.25.0 - Brother Industries, Ltd.) Hidden
Steganos Safe 15 (HKLM-x32\...\{D3FB0B73-11DF-41EE-9B6D-C7198079A88E}) (Version: 15.2.1 - Steganos Software GmbH)
Sweet Home 3D version 7.6 (HKLM\...\Sweet Home 3D_is1) (Version: 7.6 - Space Mushrooms)
TARGET 3001! V30 professional (HKLM-x32\...\TARGET 3001! V30 professional) (Version: (V30) - Ing. Buero FRIEDRICH)
TARGET 3001! V31 professional (HKLM-x32\...\TARGET 3001! V31 professional) (Version: (V31) - Ing. Buero FRIEDRICH)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.4.0.19572 - Microsoft Corporation)
TeighaX 64bit Version 4.03.01 (HKLM\...\{CA48199D-3D9A-43C5-9411-F86C03EADC27}_is1) (Version: 4.03.01 - )
Tina 10 - BasicPlus (HKLM-x32\...\{B14B20FC-2287-4EBE-8BAF-72AFF7846BB7}) (Version: 10.00.000 - DesignSoft)
Tina 15 - BasicPlus (64 bit) (HKLM-x32\...\{2D2C0FF5-DB7E-4301-A9AA-AE1FAFC196B3}) (Version: 15.00.000 - DesignSoft)
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.12 - Ghisler Software GmbH)
TurboCAD 2015 Professional 64-bit (HKLM\...\{74EF91E7-7952-4C2C-9E24-0302098DBB87}) (Version: 22.2.593 - IMSIDesign)
TurboCAD 2020 64-bit (HKLM\...\{9685BC55-6328-466A-A7C5-84F906E879C4}) (Version: 27.0.900 - IMSIDesign)
TypeScript SDK (HKLM-x32\...\{6D0FC687-BA41-4DFD-80B4-3469E567AA0F}) (Version: 4.3.5.0 - Microsoft Corporation) Hidden
UltiMaker Cura (HKLM\...\{A0251AC1-8DE3-4B43-B228-6D609DEDB251}) (Version: 5.9.0 - UltiMaker)
UltiMaker Cura (HKLM\...\{A338A59A-7496-4F39-A7D2-618FB3CAD97F}) (Version: 5.6.0 - UltiMaker)
UltiMaker Cura (HKLM\...\{BCC428DF-CBE0-4426-AE1F-386F39C84ECD}) (Version: 5.8.0 - UltiMaker)
Universal CRT Extension SDK (HKLM-x32\...\{13952D7A-B7B3-F4F8-5F29-5CD18E8168B7}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Universal CRT Headers Libraries and Sources (HKLM-x32\...\{74CBC330-ED16-31B9-E8BE-0C6A8E67DE32}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Universal CRT Redistributable (HKLM-x32\...\{847D4DAF-0182-265B-324F-406462E8A90D}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Universal CRT Tools x64 (HKLM\...\{54FE4D23-11A2-F1C4-76E9-79C8FB40A4A1}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Universal CRT Tools x86 (HKLM-x32\...\{9F7B0D96-881D-8850-C303-43F3A08E6902}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Universal General MIDI DLS Extension SDK (HKLM-x32\...\{6F54BF87-2EE6-FA6D-431D-33A665992D49}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Update for  (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation)
UsbRepairTool (HKLM-x32\...\{F8762A81-32B5-4144-9F3C-9274F515A651}) (Version: 1.4.0.0 - Brother Industries, Ltd.) Hidden
vcpp_crt.redist.clickonce (HKLM-x32\...\{E0F78CC5-79F1-4839-8876-7AC8B1FCDCD0}) (Version: 14.29.30157 - Microsoft Corporation) Hidden
Visual C++ Library CRT Appx Package (HKLM-x32\...\{1B013A23-3564-4B56-94A1-A3FD058F07DC}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Visual C++ Library CRT Appx Package (HKLM-x32\...\{8A7639DF-5A62-440A-A10F-27B2C9D555AB}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Visual C++ Library CRT Appx Resource Package (HKLM-x32\...\{4FA3C123-FA4E-403C-B0C9-A04F3F17C4FB}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Visual C++ Library CRT ARM64 Appx Package (HKLM-x32\...\{B0B4929B-EFFA-4802-B07F-F5E95768BAA0}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Visual C++ Library CRT Desktop Appx Package (HKLM-x32\...\{143D3406-87B0-4137-8C60-023AE1E82728}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Visual C++ Library CRT Desktop Appx Package (HKLM-x32\...\{7AC21103-2E31-46B8-A973-7F8CB87A19F1}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Visual C++ Library CRT Desktop Appx Package (HKLM-x32\...\{C49E3AC8-BDDF-428A-B7B1-7D1481BFDE6B}) (Version: 14.29.30133 - Microsoft Corporation) Hidden
Visual Studio Community 2019 (HKLM-x32\...\12acbfe4) (Version: 16.11.44 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN)
VS Immersive Activate Helper (HKLM-x32\...\{A71406B5-E487-4B01-8E59-D466841350F5}) (Version: 16.0.102.0 - Microsoft Corporation) Hidden
VS JIT Debugger (HKLM\...\{C7E8A4F2-EF09-42A8-B892-69D5ED99D965}) (Version: 16.0.102.0 - Microsoft Corporation) Hidden
VS Script Debugging Common (HKLM\...\{A4272808-82F5-410F-A5F9-1BF6F63F6B9A}) (Version: 16.0.102.0 - Microsoft Corporation) Hidden
vs_BlendMsi (HKLM-x32\...\{B5E3A3E1-1529-4D5A-9E95-34971FA07825}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
vs_clickoncebootstrappermsi (HKLM-x32\...\{6F7948F9-8EED-4FA5-A1D9-7DD512A2CA26}) (Version: 16.10.31206 - Microsoft Corporation) Hidden
vs_clickoncebootstrappermsires (HKLM-x32\...\{271F1F42-B547-4498-825F-590DBB1774F7}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
vs_clickoncesigntoolmsi (HKLM-x32\...\{30D97A69-3C0F-4552-9A72-60E591B210C7}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
vs_communitymsi (HKLM-x32\...\{375AFBC1-2264-470C-9ADE-2C0BF23328A2}) (Version: 16.11.34930 - Microsoft Corporation) Hidden
vs_communitymsires (HKLM-x32\...\{85309CBF-4898-412A-8218-1DC44FEEFD97}) (Version: 16.10.31213 - Microsoft Corporation) Hidden
vs_devenvmsi (HKLM-x32\...\{AD0C92A4-1514-4BC1-A723-A272A8343924}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
vs_filehandler_amd64 (HKLM-x32\...\{102E83BD-B6A0-4C74-AD22-7D594A3435D3}) (Version: 16.11.31503 - Microsoft Corporation) Hidden
vs_filehandler_x86 (HKLM-x32\...\{6CBDE7BE-E956-4E0E-81FB-2CB79190C924}) (Version: 16.11.31503 - Microsoft Corporation) Hidden
vs_FileTracker_Singleton (HKLM-x32\...\{AB0010C0-CA62-40C7-BDED-DB2514BDCF19}) (Version: 16.11.34827 - Microsoft Corporation) Hidden
vs_minshellinteropmsi (HKLM-x32\...\{883D29E5-9A41-4C45-A192-C10B8078BF0C}) (Version: 16.10.31306 - Microsoft Corporation) Hidden
vs_minshellmsi (HKLM-x32\...\{C1337DAC-D78B-4435-B795-29E8B7D5E75C}) (Version: 16.11.34902 - Microsoft Corporation) Hidden
vs_minshellmsires (HKLM-x32\...\{8C5B1421-CACA-461B-A173-98B1C7864D06}) (Version: 16.10.31303 - Microsoft Corporation) Hidden
vs_SQLClickOnceBootstrappermsi (HKLM-x32\...\{9A9E968E-1C75-4B85-BCBF-D1E26D6F7A6B}) (Version: 16.10.31205 - Microsoft Corporation) Hidden
vs_tipsmsi (HKLM-x32\...\{E208E682-50EE-4F2F-9860-C91B906B8A03}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
Win10 Spy Disabler v1.5 (HKLM\...\Win10 Spy Disabler_is1) (Version: 1.5.0.0 - site2unblock.com)
WinAppDeploy (HKLM-x32\...\{8E3AE0EF-D067-700C-BDB4-10D5552155DC}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows App Certification Kit Native Components (HKLM\...\{21F4DE3E-CE64-584E-BD74-2D1765EB39DE}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows App Certification Kit SupportedApiList x86 (HKLM-x32\...\{5C3F08FC-E0D4-6C94-90EF-72DE63DDA885}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows App Certification Kit x64 (HKLM-x32\...\{15E06EC7-2755-BD07-45AD-98DF1679A6BE}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows Desktop Extension SDK (HKLM-x32\...\{B4A7994D-DBA1-8B4D-621A-03EE52CF838A}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows Desktop Extension SDK Contracts (HKLM-x32\...\{39EDCC7D-7B63-5D99-C053-C8CDF02DC5ED}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows IoT Extension SDK (HKLM-x32\...\{9DA29C3D-9E36-AC22-59C8-FFCF413DC068}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows IoT Extension SDK Contracts (HKLM-x32\...\{3CEE8EB6-538E-DDA2-51A5-842ECE6CE1E8}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows Mobile Extension SDK (HKLM-x32\...\{30AD20A4-1FFF-2632-4555-EFAF9D8A32CD}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows Mobile Extension SDK Contracts (HKLM-x32\...\{154EEEB2-18D9-4FD5-EDE1-6D0B318FAC53}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK (HKLM-x32\...\{3A98BFB1-16A6-576B-FFC8-7FEF26B40DBA}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK AddOn (HKLM-x32\...\{E6F877A1-2F65-4BF0-87B6-A4071B7663D3}) (Version: 10.1.0.0 - Microsoft Corporation)
Windows SDK ARM Desktop Tools (HKLM-x32\...\{20C00582-BD18-B599-CF98-61011567D747}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers arm (HKLM-x32\...\{3DC4086C-B365-3DE4-878B-659DEB72904E}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers arm64 (HKLM-x32\...\{452ABC9E-731E-71B2-8824-C5B2595370AF}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers x64 (HKLM-x32\...\{6A96DEED-D0D8-6DD0-21BD-7D8F60714854}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Headers x86 (HKLM-x32\...\{86ADBBAE-77AE-FA26-7C17-802AE28AC316}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs arm (HKLM-x32\...\{995DDD4F-928C-4EBA-9702-E7CD3F6A7A9D}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs arm64 (HKLM-x32\...\{166BCCDD-48C1-8103-A7E7-0F3DE471223D}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs x64 (HKLM-x32\...\{54140689-B7DB-B9CF-537D-8FEB279410F9}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Libs x86 (HKLM-x32\...\{238F56B7-7D14-F8EB-3F4D-8CFF18C19E2B}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools arm64 (HKLM-x32\...\{2E6C6299-BF5F-379D-55F2-8FD3367F5918}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools x64 (HKLM-x32\...\{795E8F11-37DE-611E-921E-7D70BE09BF7B}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Desktop Tools x86 (HKLM-x32\...\{540ADDB0-7A37-9B99-3568-FD1EA33D3B38}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK DirectX x64 Remote (HKLM\...\{6E3528B9-92A6-A48A-AE84-890E0E5DE9BB}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK DirectX x86 Remote (HKLM-x32\...\{52CE7A43-B499-5F4B-A525-AA8794D3580F}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK EULA (HKLM-x32\...\{5F56BF12-0818-B58A-5862-939784E12F8B}) (Version: 10.1.18362.1 - Microsoft Corporations) Hidden
Windows SDK Facade Windows WinMD Versioned (HKLM-x32\...\{A5EF45C5-FA27-7E8F-1AE8-E3D39BAC779E}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps (HKLM-x32\...\{39692B57-0BA8-2197-8BC5-4108DFB8475A}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Contracts (HKLM-x32\...\{C13D21F1-E9A3-FB93-18C4-B905FB47F122}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps DirectX x86 Remote (HKLM-x32\...\{8F21D4CD-9CB4-2648-EECC-60147DE7B32D}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Headers (HKLM-x32\...\{65E9398F-77A0-8681-026C-8CF092A71F11}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Libs (HKLM-x32\...\{217E19C8-ACC0-C7ED-AB69-A30F3F96C625}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Metadata (HKLM-x32\...\{5FAF2ED2-CA24-0313-8CAF-C28DEE421200}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Apps Tools (HKLM-x32\...\{A5174AE6-3704-EE0A-BEFF-21BC5275BA02}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK for Windows Store Managed Apps Libs (HKLM-x32\...\{CEDD7BE6-97B5-9AE8-57C0-B390E0C4328F}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Modern Non-Versioned Developer Tools (HKLM-x32\...\{DDAF4CFD-D635-8305-5157-9ECEA9F89678}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Modern Versioned Developer Tools (HKLM-x32\...\{21514D7D-4124-E52E-8483-727380B855D7}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Redistributables (HKLM-x32\...\{34B51780-922E-5CBF-C16F-13F0A9502267}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows SDK Signing Tools (HKLM-x32\...\{4CA7ABF1-DB68-0F9E-5AD9-58550198D0AC}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows Software Development Kit - Windows 10.0.18362.1 (HKLM-x32\...\{126dedf0-cc0e-4b48-9ece-806b0e437195}) (Version: 10.1.18362.1 - Microsoft Corporation)
Windows Team Extension SDK (HKLM-x32\...\{6EEDDD9D-BF7B-8229-92B4-89DFCF7481ED}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
Windows Team Extension SDK Contracts (HKLM-x32\...\{5D60A4EF-6EDF-AAF4-F0F0-49FDD40176B8}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
windows_toolscorepkg (HKLM-x32\...\{5838B143-0AFC-40A5-A65D-DBFF216304DB}) (Version: 16.11.34827 - Microsoft Corporation) Hidden
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Windows-Treiberpaket - Adafruit Industries LLC (usbser) Ports  (02/25/2016 6.2.2600.0) (HKLM\...\1245A5961AC9D2C18ADF9EEC931D77E059B7F74E) (Version: 02/25/2016 6.2.2600.0 - Adafruit Industries LLC)
Windows-Treiberpaket - Arduino LLC (www.arduino.cc) Arduino USB Driver (11/24/2015 1.2.3.0) (HKLM\...\8B585560B248755A6C5A24D5C0F50FA998310883) (Version: 11/24/2015 1.2.3.0 - Arduino LLC (www.arduino.cc))
Windows-Treiberpaket - Arduino LLC (www.arduino.cc) Genuino USB Driver (01/07/2016 1.0.3.0) (HKLM\...\EC414D98E2986DCA1628FAED2163CD1C9A4ED7EC) (Version: 01/07/2016 1.0.3.0 - Arduino LLC (www.arduino.cc))
Windows-Treiberpaket - Arduino Srl (www.arduino.org) Arduino USB Driver (03/19/2015 1.1.1.0) (HKLM\...\69E507459B453D69A453EFC9E461FAE1E073408A) (Version: 03/19/2015 1.1.1.0 - Arduino Srl (www.arduino.org))
Windows-Treiberpaket - libusb-win32 (libusb0) libusb-win32 devices  (04/21/2015 1.0.0.0) (HKLM\...\28E91B69CA377EB48D6E1B92C37F897036E8A818) (Version: 04/21/2015 1.0.0.0 - libusb-win32)
Windows-Treiberpaket - Linino (usbser) Ports  (01/13/2014 1.0.0.0) (HKLM\...\A2C084AD4515675961A87E71B10E80E4FDCF7FAA) (Version: 01/13/2014 1.0.0.0 - Linino)
Windows-Treiberpaket - Segger (jlink) USB  (08/02/2018 2.70.08.0) (HKLM\...\67EA26CAD232922E8506AD97DBD93123C434F28F) (Version: 08/02/2018 2.70.08.0 - Segger)
Windows-Treiberpaket - SEGGER (JLinkCDC) Ports  (06/06/2019 1.34.0.44950) (HKLM\...\132A9445F9095BD5CEE4933C0C25054C253BD8A3) (Version: 06/06/2019 1.34.0.44950 - SEGGER)
Windows-Treiberpaket - SEGGER Microcontroller GmbH (WinUSB) USBDevice  (06/14/2019 3.00.00.000) (HKLM\...\BCE8431F6070A538518E2C2403B8E063956798AA) (Version: 06/14/2019 3.00.00.000 - SEGGER Microcontroller GmbH)
WinFsp 2023 (HKLM-x32\...\{E4C768C9-0ED1-4E8D-9B05-CC533F7D1B1A}) (Version: 2.0.23075 - Navimatics LLC)
WinRT Intellisense Desktop - en-us (HKLM-x32\...\{E67F1F03-FB4A-3D61-8999-E6A4C4B26F34}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
WinRT Intellisense Desktop - Other Languages (HKLM-x32\...\{7EF010FF-7800-28BA-FF49-2D219EC7BA82}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - en-us (HKLM-x32\...\{36AE12FB-4349-6EAA-B6E4-5F4E06FA8AE8}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
WinRT Intellisense IoT - Other Languages (HKLM-x32\...\{6B03A6A4-643C-57CE-CA6F-4E19BF47497A}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
WinRT Intellisense Mobile - en-us (HKLM-x32\...\{918A448F-59E8-FBF5-B087-D3F07160C7E0}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - en-us (HKLM-x32\...\{66483041-F590-EC46-4AF0-EE39C62FB680}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
WinRT Intellisense PPI - Other Languages (HKLM-x32\...\{9C61E6D2-C43E-6746-B519-6185558C4A24}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - en-us (HKLM-x32\...\{6B37CC5B-78DF-5050-2215-68479716A587}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
WinRT Intellisense UAP - Other Languages (HKLM-x32\...\{250D5341-0879-4016-399C-BBCD87B80E95}) (Version: 10.1.18362.1 - Microsoft Corporation) Hidden
WizFile v3.02 (HKLM\...\WizFile_is1) (Version: 3.02 - Antibody Software)
X-Mouse Button Control 2.18.7 (HKLM-x32\...\X-Mouse Button Control) (Version: 2.18.7 - Highresolution Enterprises)

Packages:
=========
Adobe Acrobat Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC [2023-11-15] ()
Excel -> C:\Program Files\WindowsApps\excel.office.com-4362FB92_1.0.0.0_neutral__2vp2pd36ganw2 [2022-12-05] (excel.office.com)
Excel -> C:\Program Files\WindowsApps\excel.office.com-72EAE3D_1.0.0.1_neutral__2vp2pd36ganw2 [2023-10-15] (excel.office.com)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2023-07-16] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-12-29] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-12-29] (Microsoft Corporation) [MS Ad]
Sweet Home 3D -> C:\Program Files\WindowsApps\eTeks.SweetHome3D_7.9.27.0_x64__y7v7etvrysvmm [2025-02-25] (Space Mushrooms)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{056ADF40-C1D0-4CEB-94D2-4B82CB2C25F4}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Ties\SolidBodyTie.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{120a7249-5dcf-4e83-95e6-6dac108e79eb}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{130E8ABC-A163-43b5-B9E5-A31C1B1CB7B4}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Draggers\BPMngr.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{15544F60-D775-4962-BEB4-E580346B1591}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Ties\ScetchTie.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{19841221-BBBB-45FE-BB16-F55BADC6D9E3} -> [myCloud] => D:\Benutzer\*****l\myCloud [2021-10-18 10:44]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{2017F29F-68F4-11D5-B9BF-00C0DF0625A5}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Draggers\SpiralTool.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{25A9F9F0-A045-4ADE-8D1A-86A2E3A57299}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\TcTools\TCContactManagerTool.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{28696026-B7E6-11D0-9B3B-444553540000}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Filters\Jpeg.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{28A80F2D-0869-4E55-B0B3-0E44E64DC4C6}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Draggers\ExtRefManager.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{2C10CA50-05D0-11D2-8697-0000B46B691D}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Ties\ObjectTie.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{2F015029-FB7C-11D1-B8AC-000021452DB6}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Draggers\InsSmObj.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{45232FA2-65A2-11D2-8C4A-00403338C504}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Regens\RRectA.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{49E39851-1FC0-11D2-8698-0000B46B691D}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Ties\SmartHatch.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{4e6f7264-5650-4e00-0000-000000000000}\localserver32 -> C:\Program Files\NordVPN\NordVPN.exe (nordvpn s.a. -> NordVPN)
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{554EDBD6-7585-40C5-9713-180E76DAC4FC}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Regens\TCImage.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{5B60CCED-F564-43BA-802B-01183FAA0A84}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Draggers\TCImageTool.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{6A3A61A2-D373-4B31-8164-263601C79016}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Draggers\TCRougness.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{6A481001-E531-11CF-A115-00A024158DAF}\localserver32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\tcw27.exe (IMSI Design LLC -> IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{6A481002-E531-11CF-A115-00A024158DAF}\localserver32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\tcw27.exe (IMSI Design LLC -> IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{6A481003-E531-11CF-A115-00A024158DAF}\localserver32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\tcw27.exe (IMSI Design LLC -> IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{6A481004-E531-11CF-A115-00A024158DAF}\localserver32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\tcw27.exe (IMSI Design LLC -> IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{6A481005-E531-11CF-A115-00A024158DAF}\localserver32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\tcw27.exe (IMSI Design LLC -> IMSIDesign, LLC)
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{6A481100-E531-11CF-A115-00A024158DAF}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\ImsigxPS27.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{6A481801-E531-11CF-A115-00A024158DAF}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\IMSIGX27.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{6A481802-E531-11CF-A115-00A024158DAF}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\IMSIGX27.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{6A481803-E531-11CF-A115-00A024158DAF}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\IMSIGX27.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{6A481804-E531-11CF-A115-00A024158DAF}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\IMSIGX27.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{6A481805-E531-11CF-A115-00A024158DAF}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\IMSIGX27.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{6A482001-E531-11CF-A115-00A024158DAF}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\imsigxext\gxext27.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{6A482002-E531-11CF-A115-00A024158DAF}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\imsigxext\gxext27.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{6A482003-E531-11CF-A115-00A024158DAF}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\imsigxext\gxext27.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{6E1099B5-A2D4-11D5-BA2B-00C0DF0625A5}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Draggers\RevisionCloud.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{71E21C97-83FB-4242-8997-A52627FFEFF9}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Draggers\TCWeldSm.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{7657D07B-63D1-480B-B9E5-839E458E659E}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Ties\DimensionTie.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{7724BB36-B671-11D0-9B3B-444553540000}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Regens\Rrect.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{7724BB46-B671-11D0-9B3B-444553540000}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Regens\MfcSplin.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{8188189D-6F33-48f2-B54B-936205216521}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Ties\DCMMarkTie.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel(R) pGFX 2020 -> Intel Corporation)
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{90E611F0-DE07-11D2-ABC3-0000B46B691D}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Ties\ViewportTie.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{A9A57835-4F86-4497-AC4A-0D777DF7F7C1}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{AFF6A5F1-41F6-4979-9D44-F1232D471F39}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\TcTools\DOCCompareLaunchTool.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{BDA1344C-D91F-4557-BBB1-59C5B1AD1645}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Draggers\TCPssWiz.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{BF0BBC85-A311-11D3-A82D-00C0DF246524}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\TcTools\PalTool.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{C9ACD2AA-AB9F-40DE-AFBE-1350D6BCB291}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Draggers\TCTrnTools.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{D732323E-7207-465d-9924-BCBAFE352435}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Ties\CompoundProfileTie.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{DBBF69A6-EF75-4CDD-AE62-02C8E1484D2B}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\Ties\TagTie.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{DF9B76D3-539B-42DC-B0A3-80B0664B2C01}\InprocServer32 -> C:\Program Files\IMSIDesign\TCW2020DE\Program64\TcTools\TcCfpLaunchTool.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001_Classes\CLSID\{EFFDB231-8367-11D2-82F5-006052012837}\InprocServer32 -> C:\Program Files\IMSIDesign\TCWP2015\Program\Draggers\InsTool.dll (IMSIDesign, LLC) [Datei ist nicht signiert]
SSODL: CallbackTechMountNotificator-cbfs20 - {521D6F89-46DF-464C-9491-798AC334FD47} - C:\WINDOWS\system32\cbfsShellHelper20.dll (Callback Technologies, Inc. -> Callback Technologies, Inc. - www.callback.com)
SSODL-x32: CallbackTechMountNotificator-cbfs20 - {521D6F89-46DF-464C-9491-798AC334FD47} - C:\WINDOWS\SysWOW64\cbfsShellHelper20.dll (Callback Technologies, Inc. -> Callback Technologies, Inc. - www.callback.com)
ShellServiceObjects: Virtual Storage Mount Notification -> {521D6F89-46DF-464C-9491-798AC334FD47} => C:\WINDOWS\system32\cbfsShellHelper20.dll [2022-04-07] (Callback Technologies, Inc. -> Callback Technologies, Inc. - www.callback.com)
ShellServiceObjects-x32: Virtual Storage Mount Notification -> {521D6F89-46DF-464C-9491-798AC334FD47} => C:\WINDOWS\SysWOW64\cbfsShellHelper20.dll [2022-04-07] (Callback Technologies, Inc. -> Callback Technologies, Inc. - www.callback.com)
ShellIconOverlayIdentifiers: [    pCloudINPROGRESS] -> {D8BFAFBD-B670-4252-9C17-9CF1C64C2BAF} => C:\Program Files\pCloud Drive\OverlayIcon64.dll [2017-10-23] (TODO: <Company name>) [Datei ist nicht signiert]
ShellIconOverlayIdentifiers: [    pCloudINSYNC] -> {8D0C0582-552A-4A6B-9455-DA63E1F329C0} => C:\Program Files\pCloud Drive\OverlayIcon64.dll [2017-10-23] (TODO: <Company name>) [Datei ist nicht signiert]
ShellIconOverlayIdentifiers: [    pCloudNOSYNC] -> {3858ED1B-8F1C-42ED-A8A9-FDBF591E3C6B} => C:\Program Files\pCloud Drive\OverlayIcon64.dll [2017-10-23] (TODO: <Company name>) [Datei ist nicht signiert]
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Open-Shell\ClassicExplorer64.dll [2020-09-26] (Open-Shell) [Datei ist nicht signiert]
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Open-Shell\ClassicExplorer64.dll [2020-09-26] (Open-Shell) [Datei ist nicht signiert]
ContextMenuHandlers1: [ContextMenuExtension] -> {3103a792-c2d9-3c57-98dd-30071b26c05f} => C:\Program Files\pCloud Drive\ContextMenuHandler64.dll [2023-02-20] (pCloud AG) [Datei ist nicht signiert] [Datei wird verwendet]
ContextMenuHandlers1: [PDFXChange Editor Context menu] -> {2ACD35AB-F74A-4C20-AA9B-2DE80081626D} => C:\Program Files\Tracker Software\Shell Extensions\XCShellMenu.x64.dll [2020-01-06] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
ContextMenuHandlers1: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => C:\Program Files\Macrium\Reflect\RContextMenu.dll [2019-09-20] (Paramount Software UK Ltd -> Paramount Software UK Ltd)
ContextMenuHandlers1: [SnagItMainShellExt] -> {CF74B903-3389-469c-B3B6-0204D204FCBD} => C:\Program Files (x86)\TechSmith\Snagit 11\DLLx64\SnagitShellExt64.dll [2012-05-16] (TechSmith Corporation -> TechSmith Corporation)
ContextMenuHandlers2: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => C:\Program Files\Macrium\Reflect\RContextMenu.dll [2019-09-20] (Paramount Software UK Ltd -> Paramount Software UK Ltd)
ContextMenuHandlers2: [SteganosShellExtension] -> {FAE0A3E0-3010-41BA-9DDC-A631394F047F} => C:\Program Files (x86)\Steganos Safe 15\ShellExtension.dll [2010-11-17] () [Datei ist nicht signiert]
ContextMenuHandlers3: [SteganosShellExtension] -> {FAE0A3E0-3010-41BA-9DDC-A631394F047F} => C:\Program Files (x86)\Steganos Safe 15\ShellExtension.dll [2010-11-17] () [Datei ist nicht signiert]
ContextMenuHandlers4: [ContextMenuExtension] -> {3103a792-c2d9-3c57-98dd-30071b26c05f} => C:\Program Files\pCloud Drive\ContextMenuHandler64.dll [2023-02-20] (pCloud AG) [Datei ist nicht signiert] [Datei wird verwendet]
ContextMenuHandlers4: [SnagItMainShellExt] -> {CF74B903-3389-469c-B3B6-0204D204FCBD} => C:\Program Files (x86)\TechSmith\Snagit 11\DLLx64\SnagitShellExt64.dll [2012-05-16] (TechSmith Corporation -> TechSmith Corporation)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Keine Datei
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2020-08-31] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [Fast Explorer] -> {693BE9C0-BEC3-11D2-B4C1-C33BBD3AD64B} => C:\ProgramData\AllDup\FEShlExt.dll [2008-08-20] (Alex Yakovlev) [Datei ist nicht signiert]
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2022-04-04] (VS Revo Group Ltd. -> VS Revo Group)
ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\WINDOWS\system32\StartMenuHelper64.dll [2020-09-26] (Open-Shell) [Datei ist nicht signiert]
ContextMenuHandlers1_S-1-5-21-4172440889-3953070438-3375788779-1001: [FlexHEX Menu] -> {6514CF27-CAB1-4577-81A9-EC81618C5003} =>  -> Keine Datei

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: D:\Benutzer\*****l\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TARGET 3001! V31 professional\Online Hilfe.lnk -> hxxp://server.ibfriedrich.com/wiki/ibfwikide/index.ph
Shortcut: D:\Benutzer\*****l\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TARGET 3001! V30 professional\Online Hilfe.lnk -> hxxp://server.ibfriedrich.com/wiki/ibfwikide/index.ph

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2010-11-17 15:00 - 2010-11-17 15:00 - 000220672 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Steganos Safe 15\ShellExtension.dll
2020-03-28 01:03 - 2018-05-02 15:25 - 000091648 _____ () [Datei ist nicht signiert] C:\WINDOWS\system32\BrNetSti.dll
2020-03-28 01:03 - 2005-04-22 13:36 - 000143360 _____ () [Datei ist nicht signiert] C:\WINDOWS\system32\BrSNMP64.dll
2021-03-19 23:46 - 2021-03-19 23:46 - 000062976 ____N (Horizon Datasys, Inc.) [Datei ist nicht signiert] C:\Program Files\Shield\ShdIdle.dll
2021-03-19 17:06 - 2021-03-19 17:06 - 000065536 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\WINDOWS\WinSxS\x86_microsoft.vc80.openmp_1fc8b3b9a1e18e3b_8.0.50727.6195_none_3b1209fdc9ac7774\vcomp.dll
2021-03-19 23:46 - 2021-03-19 23:46 - 000015808 ____N (New Horizon DataSys Inc. -> ) [Datei ist nicht signiert] C:\Program Files\Shield\shdservps.dll
2021-03-19 23:46 - 2021-03-19 23:46 - 000125376 ____N (New Horizon DataSys Inc. -> Horizon Datasys, Inc.) [Datei ist nicht signiert] C:\Program Files\Shield\ShdApi.dll
2021-03-19 23:46 - 2021-03-19 23:46 - 000175040 ____N (New Horizon DataSys Inc. -> Horizon Datasys, Inc.) [Datei ist nicht signiert] C:\Program Files\Shield\ShdPub.dll
2021-03-19 23:46 - 2021-03-19 23:46 - 000562112 ____N (New Horizon DataSys Inc. -> Horizon Datasys, Inc.) [Datei ist nicht signiert] C:\Program Files\Shield\ShdUI.dll
2020-09-26 13:47 - 2020-09-26 13:47 - 002659328 _____ (Open-Shell) [Datei ist nicht signiert] C:\Program Files\Open-Shell\StartMenuDLL.dll
2020-09-26 13:48 - 2020-09-26 13:48 - 000562688 _____ (Open-Shell) [Datei ist nicht signiert] C:\WINDOWS\system32\StartMenuHelper64.dll
2017-10-23 18:28 - 2017-10-23 18:28 - 000342016 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\Program Files\pCloud Drive\OverlayIcon64.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:0CE3F7A1 [400]
AlternateDataStreams: C:\ProgramData\TEMP:4686A4C8 [131]
AlternateDataStreams: C:\ProgramData\TEMP:6653ACF6 [350]
AlternateDataStreams: C:\ProgramData\TEMP:6E64BB99 [210]
AlternateDataStreams: D:\Benutzer\*****l\Desktop\Farbar Recovery Scan Tool (HijackThis Alternative) - CHIP Installer _1m3Ev.exe:mshield [673]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\aeoi-exchanges.pdf:mshield [171]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\avast_free_antivirus_online-installation.exe:mshield [278]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\avast_free_antivirus_setup_online.exe:mshield [237]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\avira_de_sptl1_29c4021eec9999c7__phpws-spotlight-release.exe:mshield [249]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\bedienungs-und-wartungsanleitung-dacia-XJD-Duster.pdf:mshield [233]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\CG_Convention_Compte_de_depot_Bienvenue_Avril_2025.pdf:mshield [267]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\conditions-tarifaires-particuliers-2025.pdf:mshield [235]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\Documents ***** *****_pages_2-3-1_repaired.pdf:mshield [329]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\Documents ***** *****_pages_2-3.pdf:mshield [318]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\FAQ-Halbtax-Plus-DE.pdf:mshield [161]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\Farbar Recovery Scan Tool (HijackThis Alternative) - CHIP Installer _1m3Ev(1).exe:mshield [676]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\Farbar Recovery Scan Tool (HijackThis Alternative) - CHIP Installer _1m3Ev(2).exe:mshield [676]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\Farbar Recovery Scan Tool (HijackThis Alternative) - CHIP Installer _1m3Ev.exe:mshield [673]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\mb-support-1.9.12.1031.exe:mshield [211]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\MBSetup.exe:mshield [141]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\NordInstaller(1).exe:mshield [168]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\NordInstaller(2).exe:mshield [241]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\NordVPNInstall.exe:mshield [167]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\OUVERTURE DE COMPTE A SIGNER de.pdf:mshield [112]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\PV33293D_NIP_Bienvenue_Avril_2024_NEW_ADEME.pdf:mshield [253]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\Reboot_Restore_Rx_Pro_v12_User_Guide.pdf:mshield [192]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\sandero-price.pdf:mshield [155]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\sbb-contact-center-swiss-pass-2025-03-05-0050568e391a1edfbe9269d9f6799c55.pdf:mshield [330]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\SECURE BOARD 1.0.Productdatasheet.2025-03-10-07-11-28.de_DE.pdf:mshield [217]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\takeout-20250309T082832Z-001.zip:mshield [256]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\takeout-20250309T090012Z-001(1).zip:mshield [259]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\takeout-20250309T090012Z-001.zip:mshield [256]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\tarifs-2025-france.pdf:mshield [212]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\unnamed.jpg:mshield [397]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\whynotwin11.exe:mshield [174]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\WindowsPCHealthCheckSetup(1).msi:mshield [215]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\WindowsPCHealthCheckSetup.msi:mshield [212]
AlternateDataStreams: D:\Benutzer\*****l\Downloads\_5917514156_CH-LOGIN_Anleitung_Vasco_Digipass_Authentisierer.pdf:mshield [231]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============

BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Open-Shell\ClassicExplorer64.dll [2020-09-26] (Open-Shell) [Datei ist nicht signiert]
BHO: Kein Name -> {521D6F89-46DF-464C-9491-798AC334FD47}' -> Keine Datei
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_281\bin\ssv.dll [2021-02-07] (Oracle America, Inc. -> Oracle Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2023-01-11] (Logitech Inc -> Logitech, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_281\bin\jp2ssv.dll [2021-02-07] (Oracle America, Inc. -> Oracle Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Open-Shell\ClassicIEDLL_64.dll [2020-09-26] (Open-Shell) [Datei ist nicht signiert]
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2022-12-05] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Open-Shell\ClassicExplorer32.dll [2020-09-26] (Open-Shell) [Datei ist nicht signiert]
BHO-x32: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files (x86)\Nuance\PDF Professional 7\Bin\PlusIEContextMenu.dll [2011-06-30] (Zeon Corporation -> Zeon Corporation)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2023-01-11] (Logitech Inc -> Logitech, Inc.)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Open-Shell\ClassicIEDLL_32.dll [2020-09-26] (Open-Shell) [Datei ist nicht signiert]
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Open-Shell\ClassicExplorer64.dll [2020-09-26] (Open-Shell) [Datei ist nicht signiert]
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Open-Shell\ClassicExplorer32.dll [2020-09-26] (Open-Shell) [Datei ist nicht signiert]
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-12-05] (Microsoft Corporation -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\webcompanion.com -> hxxp://webcompanion.com

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2019-03-19 05:49 - 2025-03-10 15:52 - 000000982 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 cryptomator-vault
100.127.163.229 *****.*****-everest.nord
100.127.166.127 *****.*****-alps.nord
100.68.146.147 *****.*****-himalayas.nord

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\dotnet\;C:\Program Files (x86)\dotnet\;C:\Program Files\Shield;C:\Program Files (x86)\Boxcryptor\bin\;C:\Program Files (x86)\AOMEI\AOMEI Backupper\7.3.3
HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 103.86.96.100 - 103.86.99.100
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
 ist aktiviert.

Network Binding:
=============
NordLynx: NordLynx Tunnel -> wireguard.sys
Ethernet: Intel(R) 82579LM Gigabit Network Connection -> e1i65x64.sys
LAN-Verbindung: TAP-NordVPN Windows Adapter V9 -> tapnordvpn.sys
OpenVPN Data Channel Offload for NordVPN: OpenVPN Data Channel Offload -> ovpn-dco.sys

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: BRA_Scheduler => 2
MSCONFIG\Services: Brother XP spl Service => 2
MSCONFIG\Services: BrYNSvc => 3
MSCONFIG\Services: cphs => 3
MSCONFIG\Services: GoogleChromeElevationService => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: HmaProVpn => 2
MSCONFIG\Services: igfxCUIService1.0.0.0 => 2
MSCONFIG\Services: LibreViewMASMonitor => 2
MSCONFIG\Services: MacriumService => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: PDF24 => 2
MSCONFIG\Services: PDFProFiltSrvPP => 2
MSCONFIG\Services: ShdServ => 2
HKLM\...\StartupApproved\StartupFolder: => "HMA VPN.lnk"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "Classic Start Menu"
HKLM\...\StartupApproved\Run: => "Reflect UI"
HKLM\...\StartupApproved\Run: => "XMouseButtonControl"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "EvtMgr6"
HKLM\...\StartupApproved\Run32: => "ISUSPM"
HKLM\...\StartupApproved\Run32: => "ControlCenter4"
HKLM\...\StartupApproved\Run32: => "SAFE15 File Redirection Starter"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "IndexSearch"
HKLM\...\StartupApproved\Run32: => "PaperPort PTD"
HKLM\...\StartupApproved\Run32: => "PDFPrint"
HKLM\...\StartupApproved\Run32: => "PDFProHook"
HKLM\...\StartupApproved\Run32: => "BrStsMon00"
HKLM\...\StartupApproved\Run32: => "Steganos HotKeys"
HKLM\...\StartupApproved\Run32: => "C16A"
HKLM\...\StartupApproved\Run32: => "TeamsMachineInstaller"
HKLM\...\StartupApproved\Run32: => "PDF24"
HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\StartupApproved\StartupFolder: => "FreeClips.LNK"
HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\StartupApproved\StartupFolder: => "MailWasher.lnk"
HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\StartupApproved\Run: => "SAFE15 Browser Monitor"
HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\StartupApproved\Run: => "Skype for Desktop"
HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\StartupApproved\Run: => "NETGEARGenie"
HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\StartupApproved\Run: => "AnyTransToolHelper"
HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_D21BACCAF4BEE8C5256DDB831BE7B128"
HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
HKU\S-1-5-21-4172440889-3953070438-3375788779-1001\...\StartupApproved\Run: => "pCloud"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{07272B68-4FFA-4BCE-861E-365CF74D908B}] => (Allow) c:\program files (x86)\pc-faxreceive\brengineprocess.exe (Brother Industries, Ltd.) [Datei ist nicht signiert]
FirewallRules: [{3D9210A9-36A4-4E37-9E6A-842333F7BD05}] => (Allow) c:\program files (x86)\pc-faxreceive\brengineprocess.exe (Brother Industries, Ltd.) [Datei ist nicht signiert]
FirewallRules: [{6517B723-557F-4ADA-BB32-6B291CDA54C4}] => (Allow) LPort=54925
FirewallRules: [{95685B99-2C2D-41ED-A5EE-DA0203F250A4}] => (Allow) C:\Program Files (x86)\CLX.ScanMouse\Scanner Mouse.exe (Dacuda AG -> )
FirewallRules: [{5F5793BF-599E-4519-8129-8AEAE6EA17A4}] => (Block) C:\program files (x86)\microchip\mplabx\v5.30\sys\java\jre1.8.0_181\bin\javaw.exe
FirewallRules: [{5A1D7E36-AA8C-4A80-8841-27027AD1CCC2}] => (Block) C:\program files (x86)\microchip\mplabx\v5.30\sys\java\jre1.8.0_181\bin\javaw.exe
FirewallRules: [UDP Query User{57D12251-F240-4778-ADA5-2FFECBCF4CE9}C:\program files (x86)\microchip\mplabx\v5.30\sys\java\jre1.8.0_181\bin\javaw.exe] => (Allow) C:\program files (x86)\microchip\mplabx\v5.30\sys\java\jre1.8.0_181\bin\javaw.exe
FirewallRules: [TCP Query User{8D05BCA8-AFFD-4E9E-B4F7-E630D094D028}C:\program files (x86)\microchip\mplabx\v5.30\sys\java\jre1.8.0_181\bin\javaw.exe] => (Allow) C:\program files (x86)\microchip\mplabx\v5.30\sys\java\jre1.8.0_181\bin\javaw.exe
FirewallRules: [{03A0DF3E-A417-4A34-AFF6-1D8C173D4028}] => (Allow) LPort=23272
FirewallRules: [{3B4AAE6A-D06A-42AF-8F89-DD525495B5DB}] => (Allow) LPort=62910
FirewallRules: [{FBCEDC36-5C3D-416C-A77A-B31E939F639C}] => (Allow) LPort=62910
FirewallRules: [{51A97243-EC9E-4A46-98DB-4516603A504D}] => (Allow) LPort=23272
FirewallRules: [{B4CE163F-4845-4376-B4D0-031ADEFD520D}] => (Allow) C:\Program Files (x86)\Brother\BRAdmin Professional 3\bradminv3.exe (Brother Industries, Ltd. -> Brother Industries, Ltd.)
FirewallRules: [{A7A3FF3F-14D5-4B05-A17F-06CC98489724}] => (Allow) C:\Program Files (x86)\Brother\BRAdmin Professional 3\bradminv3.exe (Brother Industries, Ltd. -> Brother Industries, Ltd.)
FirewallRules: [{29B1D9FB-CC71-486E-8404-3D9C3A3A6B17}] => (Allow) C:\Program Files (x86)\Brother\BRAdmin Professional 3\auditorserver.exe (Brother Industries, Ltd. -> )
FirewallRules: [{4A56BC87-D6C9-4458-A61D-47B404674EC8}] => (Allow) C:\Program Files (x86)\Brother\BRAdmin Professional 3\auditorserver.exe (Brother Industries, Ltd. -> )
FirewallRules: [{0B99F4D9-8EE8-4C93-AE00-FF8D5FAD0531}] => (Allow) C:\Program Files (x86)\Brother\BRAdmin Professional 3\discover.exe (Brother Industries, Ltd. -> )
FirewallRules: [{5E1568D6-FB6A-4081-A133-A845BE4F2CD1}] => (Allow) C:\Program Files (x86)\Brother\BRAdmin Professional 3\discover.exe (Brother Industries, Ltd. -> )
FirewallRules: [{1A8DA10D-326B-486E-82AC-A8C91A0E6A55}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3ABBF938-7A12-49E1-8C5D-2C57880EC40C}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{8D7BBE53-C9EA-48EA-9627-E15E09971109}C:\program files (x86)\common files\oracle\java\javapath_target_79843\javaw.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_79843\javaw.exe
FirewallRules: [UDP Query User{61C02024-7458-407D-B6EF-5BC0E31C36DA}C:\program files (x86)\common files\oracle\java\javapath_target_79843\javaw.exe] => (Allow) C:\program files (x86)\common files\oracle\java\javapath_target_79843\javaw.exe
FirewallRules: [{576B316D-6625-47E6-9D21-7A02F23AEB15}] => (Allow) C:\Program Files\Shield\ShdServ.exe (New Horizon DataSys Inc. -> Horizon Datasys, Inc.) [Datei ist nicht signiert]
FirewallRules: [{6F032C70-89B0-418F-8624-688C5715F519}] => (Allow) C:\Program Files\Shield\ShdServ.exe (New Horizon DataSys Inc. -> Horizon Datasys, Inc.) [Datei ist nicht signiert]
FirewallRules: [{D8C13F3D-C7D4-4F17-A850-CA62D7FABB74}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A6896329-04D9-484D-8B84-7BE0DAD84E5F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{18B6A1D2-8A49-4FD2-8AB9-21D32B2AB58A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{BF9B78BF-5DC3-4CFA-A375-97FA7EDE0240}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{27649980-3251-4A70-90B1-756B03AF7C70}] => (Allow) C:\Program Files\pCloud Drive\pCloud.exe (pCloud AG -> )
FirewallRules: [{89F1BD98-7035-4E52-9AA7-FC579F031A86}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.91.3404.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{628B1676-D710-4B4B-A50B-45E23EDDA863}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.91.3404.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7B2F0056-1965-49A1-A210-C3CCBE61CBF2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.91.3404.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B982DAF1-2347-4F22-A994-CB0D13084464}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.91.3404.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{01551FE0-49A9-4F2B-B022-72F2B8A1FFE8}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{01C7BE39-321B-4C2B-9BD3-46D64C56B5DA}C:\program files (x86)\ultimaker cura 5.0.0\ultimaker-cura.exe] => (Allow) C:\program files (x86)\ultimaker cura 5.0.0\ultimaker-cura.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{63A25911-C18A-4443-85BF-1994F64921B1}C:\program files (x86)\ultimaker cura 5.0.0\ultimaker-cura.exe] => (Allow) C:\program files (x86)\ultimaker cura 5.0.0\ultimaker-cura.exe () [Datei ist nicht signiert]
FirewallRules: [{E6C33904-127F-4225-87F7-37A94ED7F996}] => (Block) C:\program files (x86)\ultimaker cura 5.0.0\ultimaker-cura.exe () [Datei ist nicht signiert]
FirewallRules: [{62960D48-8CA0-46E8-9EB7-82276929BF8B}] => (Block) C:\program files (x86)\ultimaker cura 5.0.0\ultimaker-cura.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{7270AC23-AE41-4513-963E-3162485F174F}C:\program files\simplify3d-5.0.2\simplify3d.exe] => (Allow) C:\program files\simplify3d-5.0.2\simplify3d.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{0960389D-B485-4070-897E-93FEB0DC6CA1}C:\program files\simplify3d-5.0.2\simplify3d.exe] => (Allow) C:\program files\simplify3d-5.0.2\simplify3d.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{7E9B2165-6BBE-4FEC-887E-3B7759018C5E}C:\program files (x86)\microchip\mplabx\v5.30\mplab_platform\bin\mplab_ide64.exe] => (Block) C:\program files (x86)\microchip\mplabx\v5.30\mplab_platform\bin\mplab_ide64.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{8F448D6A-578B-4D42-A28E-F07801CE29EC}C:\program files (x86)\microchip\mplabx\v5.30\mplab_platform\bin\mplab_ide64.exe] => (Block) C:\program files (x86)\microchip\mplabx\v5.30\mplab_platform\bin\mplab_ide64.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{3B014F96-4F0A-4AEC-A0E0-3D57AFE93049}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{C1E546B3-C961-4017-B5EC-713B958B2FF2}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{8614D2C9-A9CC-41B9-9585-38AE1C89198F}] => (Allow) C:\Program Files (x86)\AOMEI\AOMEI Backupper\7.3.3\ABService.exe (AOMEI International Network Limited -> AOMEI International Network Limited)
FirewallRules: [{849E8693-152A-4EA8-AD26-9C684E15C7A7}] => (Allow) C:\Program Files (x86)\AOMEI\AOMEI Backupper\7.3.3\ABService.exe (AOMEI International Network Limited -> AOMEI International Network Limited)
FirewallRules: [{171558A3-7FE7-4341-8690-A4D74EE1C347}] => (Allow) C:\Program Files\UltiMaker Cura 5.6.0\UltiMaker-Cura.exe () [Datei ist nicht signiert]
FirewallRules: [{1D8BC6DB-77F8-4BE2-BA5A-47A8310D014A}] => (Allow) C:\Program Files\UltiMaker Cura 5.6.0\CuraEngine.exe (Ultimaker BV.) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{FFDD9147-A619-4D38-A519-E16FE23CFAF4}C:\program files\ultimaker cura 5.8.0\ultimaker-cura.exe] => (Allow) C:\program files\ultimaker cura 5.8.0\ultimaker-cura.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{B423EA60-03C5-42FF-A535-C3DF561DCA17}C:\program files\ultimaker cura 5.8.0\ultimaker-cura.exe] => (Allow) C:\program files\ultimaker cura 5.8.0\ultimaker-cura.exe () [Datei ist nicht signiert]
FirewallRules: [{D9BA7AFA-6635-4C2E-98A3-721F38AC026F}] => (Block) C:\program files\ultimaker cura 5.8.0\ultimaker-cura.exe () [Datei ist nicht signiert]
FirewallRules: [{4F5ACD61-86AF-4464-9285-C1BC7CFC3C04}] => (Block) C:\program files\ultimaker cura 5.8.0\ultimaker-cura.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{15C8ECC2-2954-46B2-B513-FB682AA4440E}C:\program files\ultimaker cura 5.9.0\ultimaker-cura.exe] => (Allow) C:\program files\ultimaker cura 5.9.0\ultimaker-cura.exe (UltiMaker B.V. -> )
FirewallRules: [UDP Query User{67023570-C68A-469F-84B8-E73DCAD0027D}C:\program files\ultimaker cura 5.9.0\ultimaker-cura.exe] => (Allow) C:\program files\ultimaker cura 5.9.0\ultimaker-cura.exe (UltiMaker B.V. -> )
FirewallRules: [TCP Query User{341BD9DC-20CE-4D26-849A-31C84FAE603C}C:\program files\arduino ide\arduino ide.exe] => (Allow) C:\program files\arduino ide\arduino ide.exe (Arduino SA -> Arduino SA)
FirewallRules: [UDP Query User{80212A83-7786-4DE7-8EAC-CA4CE9F06FFF}C:\program files\arduino ide\arduino ide.exe] => (Allow) C:\program files\arduino ide\arduino ide.exe (Arduino SA -> Arduino SA)
FirewallRules: [TCP Query User{863BF04D-0BF2-479D-9661-67E4B009D717}D:\benutzer\*****l\appdata\local\arduino15\packages\builtin\tools\mdns-discovery\1.0.9\mdns-discovery.exe] => (Allow) D:\benutzer\*****l\appdata\local\arduino15\packages\builtin\tools\mdns-discovery\1.0.9\mdns-discovery.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{F1C458DF-7392-4357-99BA-6D02FC8A1CB6}D:\benutzer\*****l\appdata\local\arduino15\packages\builtin\tools\mdns-discovery\1.0.9\mdns-discovery.exe] => (Allow) D:\benutzer\*****l\appdata\local\arduino15\packages\builtin\tools\mdns-discovery\1.0.9\mdns-discovery.exe () [Datei ist nicht signiert]
FirewallRules: [{8CA946E7-BFE9-420A-ABF6-C6A82B38E189}] => (Block) D:\benutzer\*****l\appdata\local\arduino15\packages\builtin\tools\mdns-discovery\1.0.9\mdns-discovery.exe () [Datei ist nicht signiert]
FirewallRules: [{6BF048AB-599B-4CF8-86BA-F189EE7C1506}] => (Block) D:\benutzer\*****l\appdata\local\arduino15\packages\builtin\tools\mdns-discovery\1.0.9\mdns-discovery.exe () [Datei ist nicht signiert]
FirewallRules: [{F7AF18E6-EB24-4E0A-B009-A555C308D65E}] => (Block) C:\program files\arduino ide\arduino ide.exe (Arduino SA -> Arduino SA)
FirewallRules: [{8924B992-A683-4BAC-93F0-7F13A6CE153F}] => (Block) C:\program files\arduino ide\arduino ide.exe (Arduino SA -> Arduino SA)
FirewallRules: [{5D88FBE6-846E-4F10-9846-56C650ED5E68}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{EB30F5DB-558D-42E1-B833-CD9D5BA43F32}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\133.0.3065.92\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9BA93926-055F-44CC-8AB8-F06D3419E87B}] => (Allow) C:\Program Files\NordVPN\NordSec ThreatProtection\nordsec-threatprotection-service.exe (nordvpn s.a. -> nordvpn S.A.)
FirewallRules: [{0A8CED3D-9B13-43C9-8ADA-706290594157}] => (Allow) C:\Program Files\NordVPN\NordSec ThreatProtection\nordsec-threatprotection-service.exe (nordvpn s.a. -> nordvpn S.A.)
FirewallRules: [{987DEB14-6B12-4681-BBB1-46221E4266C9}] => (Allow) C:\Program Files\NordVPN\nordvpn-service.exe (nordvpn s.a. -> NordVPN)
FirewallRules: [{0EC13CB3-2FB2-40E1-B5B4-528571D13FA0}] => (Allow) C:\Program Files\NordVPN\nordvpn-service.exe (nordvpn s.a. -> NordVPN)
FirewallRules: [{CBCE3450-F4D8-406E-807B-3658951893FA}] => (Allow) C:\Program Files\NordVPN\NordVPN.exe (nordvpn s.a. -> NordVPN)
FirewallRules: [{AD5298C7-B428-48DE-9869-13433F211CEF}] => (Allow) C:\Program Files\NordVPN\NordVPN.exe (nordvpn s.a. -> NordVPN)
FirewallRules: [{50DAA0D6-81EB-47B7-92A5-AD0C8F606462}] => (Allow) C:\Program Files\NordVPN\NordVPN.exe (nordvpn s.a. -> NordVPN)
FirewallRules: [{816548C2-CA54-49D2-A6B9-ADA07E98E01B}] => (Allow) C:\Program Files\NordVPN\NordVPN.exe (nordvpn s.a. -> NordVPN)

==================== Wiederherstellungspunkte =========================


==================== Fehlerhafte Geräte im Gerätemanager ============
Name: Unbekanntes USB-Gerät (Fehler beim Anfordern einer Gerätebeschreibung.)
Description: Unbekanntes USB-Gerät (Fehler beim Anfordern einer Gerätebeschreibung.)
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Standard-USB-Hostcontroller)
Service:
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation.


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (03/10/2025 06:17:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname DESKTOP-*****.local already in use; will try DESKTOP-*****-2.local instead

Error: (03/10/2025 06:17:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister    4 DESKTOP-*****.local. Addr 192.168.0.102

Error: (03/10/2025 06:17:02 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.102:5353  16 DESKTOP-*****.local. AAAA 2A02:21B4:1A5F:F600:7BAD:AB82:0285:7EF7

Error: (03/10/2025 05:13:43 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname DESKTOP-*****.local already in use; will try DESKTOP-*****-2.local instead

Error: (03/10/2025 05:13:43 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 0; will deregister    4 DESKTOP-*****.local. Addr 192.168.0.102

Error: (03/10/2025 05:13:43 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.102:5353  16 DESKTOP-*****.local. AAAA 2A02:21B4:1A5F:F600:7BAD:AB82:0285:7EF7

Error: (03/10/2025 05:12:52 AM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.]

Error: (03/10/2025 04:53:31 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname DESKTOP-*****.local already in use; will try DESKTOP-*****-2.local instead


Systemfehler:
=============
Error: (03/10/2025 03:51:34 PM) (Source: volsnap) (EventID: 28) (User: )
Description: Schattenkopie von Volume "C:" konnte nicht erstellt werden, weil beim Erstellen der erforderlichen Datenträgerstrukturen ein Fehler aufgetreten ist.

Error: (03/10/2025 03:49:29 PM) (Source: volsnap) (EventID: 28) (User: )
Description: Schattenkopie von Volume "C:" konnte nicht erstellt werden, weil beim Erstellen der erforderlichen Datenträgerstrukturen ein Fehler aufgetreten ist.

Error: (03/10/2025 03:48:31 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Broker für Laufzeitüberwachung der Systemüberwachung" wurde mit folgendem Fehler beendet:
%%3489660935

Error: (03/10/2025 03:48:31 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet:
Das System kann die angegebene Datei nicht finden.

Error: (03/10/2025 03:47:04 PM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{D7A51DDB-C7C8-4EE6-8EB3-8784C2792675} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.

Error: (03/10/2025 03:47:04 PM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{D7A51DDB-C7C8-4EE6-8EB3-8784C2792675} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.

Error: (03/10/2025 03:47:04 PM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{D7A51DDB-C7C8-4EE6-8EB3-8784C2792675} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.

Error: (03/10/2025 03:47:04 PM) (Source: Server) (EventID: 2505) (User: )
Description: Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht \Device\NetBT_Tcpip_{D7A51DDB-C7C8-4EE6-8EB3-8784C2792675} vom Serverdienst nicht gebunden werden. Der Serverdienst konnte nicht gestartet werden.


Windows Defender:
================
Date: 2025-03-06 08:50:33
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2025-03-03 17:44:01
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Schnellüberprüfung

Date: 2025-03-02 17:33:36
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Schnellüberprüfung

Date: 2025-02-28 17:23:00
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Schnellüberprüfung

Date: 2025-02-26 09:08:56
Description:
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Schnellüberprüfung
Event[0]:

Date: 2024-04-12 16:42:39
Description:
Microsoft Defender Antivirus has encountered a critical error when taking action on malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020&name=Ransom:MSIL/Gorf&threatid=2147725282&enterprise=0
Name: Ransom:MSIL/Gorf
Severity: Schwerwiegend
Category: Ransomware
Path: file:_F:\AutoVerify.exe
Detection Origin: Lokaler Computer
Detection Type: FastPath
Detection Source: Echtzeitschutz
Process Name: C:\Windows\explorer.exe
Action: Quarantäne
Action Status:  No additional actions required
Error Code: 0x80070013
Error description: Das Medium ist schreibgeschützt.
Security intelligence Version: AV: 1.409.220.0, AS: 1.409.220.0, NIS: 1.409.220.0
Engine Version: AM: 1.1.24030.4, NIS: 1.1.24030.4

Date: 2023-11-02 09:22:51
Description:
Microsoft Defender Antivirus has encountered a critical error when taking action on malware or other potentially unwanted software.
For more information please see the following:
https://go.microsoft.com/fwlink/?linkid=37020&name=Ransom:MSIL/Gorf&threatid=2147725282&enterprise=0
Name: Ransom:MSIL/Gorf
Severity: Schwerwiegend
Category: Ransomware
Path: file:_F:\AutoVerify.exe
Detection Origin: Lokaler Computer
Detection Type: FastPath
Detection Source: Echtzeitschutz
Process Name: C:\Windows\explorer.exe
Action: Quarantäne
Action Status:  No additional actions required
Error Code: 0x80070013
Error description: Das Medium ist schreibgeschützt.
Security intelligence Version: AV: 1.399.1714.0, AS: 1.399.1714.0, NIS: 1.399.1714.0
Engine Version: AM: 1.1.23090.2007, NIS: 1.1.23090.2007

CodeIntegrity:
===============
Date: 2025-03-10 15:49:23
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2025-03-10 15:48:45
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpDefenderCoreService.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen ===========================

BIOS: FUJITSU // American Megatrends Inc. V4.6.5.3 R1.16.0 for D3162-A1x 10/29/2012
Hauptplatine: FUJITSU D3162-A1
Prozessor: Intel(R) Core(TM) i5-3470 CPU @ 3.20GHz
Prozentuale Nutzung des RAM: 27%
Installierter physikalischer RAM: 16235.78 MB
Verfügbarer physikalischer RAM: 11824.5 MB
Summe virtueller Speicher: 18667.78 MB
Verfügbarer virtueller Speicher: 14557.09 MB

==================== Laufwerke ================================

Drive c: (System) (Fixed) (Total:250 GB) (Free:73.92 GB) (Model: Intenso SSD Sata III) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: (Daten) (Fixed) (Total:386.27 GB) (Free:206.08 GB) (Model: CT1000P3PSSD8) NTFS

\\?\Volume{7c604f70-0000-0000-00ee-8a1a06000000}\ (System) (Fixed) (Total:520.83 GB) (Free:423.92 GB) NTFS
\\?\Volume{7c604f70-0000-0000-0000-100000000000}\ (Recovery) (Fixed) (Total:24.41 GB) (Free:16.6 GB) NTFS
\\?\Volume{7d74fd30-0000-0000-0000-100000000000}\ (Recovery) (Fixed) (Total:11.72 GB) (Free:3.91 GB) NTFS
\\?\Volume{7d74fd30-0000-0000-0000-206e41000000}\ (Daten) (Fixed) (Total:185.41 GB) (Free:74.66 GB) NTFS

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 7C604F70)
Partition 1: (Not Active) - (Size=24.4 GB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=520.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=386.3 GB) - (Type=07 NTFS)

==========================================================
Disk: 1 (Size: 447.1 GB) (Disk ID: 7D74FD30)
Partition 1: (Not Active) - (Size=11.7 GB) - (Type=27)
Partition 2: (Active) - (Size=250 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=185.4 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt =======================

M-K-D-B 10.03.2025 22:20
Vielen Dank für die Logdateien.

Neben unerwünschter Software werden mehrere Systemfehler angezeigt, die Firmware ist total veraltet und die Systempflege ist äußerst bescheiden... dann kommen noch miserable Downloadquellen (z. B. Chip) dazu... insgesamt empfehle ich hier eine saubere Neuinstallation des Systems.

Daher verschiebe ich das Thema in den Windowsbereich.

Das System erhält noch bis Oktober Updates, danach ist Schluss mit diesem System. Du solltest dich nach was Neuem umsehen.


Alle Zeitangaben in WEZ +1. Es ist jetzt 00:13 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131