Trojaner-Board - Defender zeigte mir heute im Nachrichtenbereich, dass Bedrohung exisitiert phish!pz

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 04.01.2024

durchgeführt von Michael (Administrator) auf PCxxxxxHOME (Intel Corporation NUC7i5BNH) (04-01-2024 23:04:38)

Gestartet von C:\Users\Michael\Downloads\FRST64 (1).exe

Geladene Profile: Michael & MSSQL$ADK

Plattform: Microsoft Windows 10 Pro Version 22H2 19045.3803 (X64) Sprache: Deutsch (Deutschland)

Standard-Browser: FF

Start-Modus: Normal
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

() [Datei ist nicht signiert] C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe

(C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe

(C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ->) (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

(C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\1.3.817.1\DropboxCrashHandler.exe

(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(C:\Program Files\TechSmith\Snagit 2020\Snagit32.exe ->) () [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\crashpad_handler.exe <2>

(C:\Program Files\TechSmith\Snagit 2020\Snagit32.exe ->) (TechSmith Corporation -> TechSmith Corporation) C:\Program Files\TechSmith\Snagit 2020\SnagitEditor.exe

(C:\Program Files\TechSmith\Snagit 2020\Snagit32.exe ->) (TechSmith Corporation -> TechSmith Corporation) C:\Program Files\TechSmith\Snagit 2020\SnagPriv.exe

(C:\Users\Michael\Downloads\adwcleaner.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe

(Citrix Systems, Inc. -> Cloud Software Group, Inc.) C:\Program Files (x86)\Citrix\ICA Client\Receiver\AnalyticsSrv.exe

(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <7>

(explorer.exe ->) (GALAXY DYNAMICS LTD -> Galaxy Dynamics) C:\Users\Michael\AppData\Roaming\cookieaq\updater\cookieaq updater.exe

(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <38>

(explorer.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Users\Michael\Downloads\adwcleaner.exe

(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>

(explorer.exe ->) (PFU LIMITED) [Datei ist nicht signiert] C:\Windows\twain_32\fjscan32\ERG\FTErGuid.exe

(explorer.exe ->) (TechSmith Corporation -> TechSmith Corporation) C:\Program Files\TechSmith\Snagit 2020\Snagit32.exe

(FUJITSU LIMITED) [Datei ist nicht signiert] C:\Windows\twain_32\fjscan32\FjtwMkup.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.352\GoogleCrashHandler.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.352\GoogleCrashHandler64.exe

(Luis Cobian, CobianSoft) [Datei ist nicht signiert] C:\Program Files (x86)\Cobian Backup 11\cbInterface.exe

(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(PFU LIMITED) [Datei ist nicht signiert] C:\Windows\twain_32\fjscan32\SOP\FtLnSOP.exe

(services.exe ->) (ABBYY Software House -> ABBYY (BIT Software)) C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe

(services.exe ->) (ABBYY SOLUTIONS LIMITED -> ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReader\11.00\Licensing\CE\NetworkLicenseServer.exe

(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe

(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe

(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe

(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe

(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(services.exe ->) (Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\Receiver\UpdaterService.exe

(services.exe ->) (CobianSoft, Luis Cobian) [Datei ist nicht signiert] C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe

(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe

(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe

(services.exe ->) (Intel Corporation-Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(services.exe ->) (Intel Corporation-Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(services.exe ->) (Intel Corporation-Wireless Connectivity Solutions -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(services.exe ->) (Intel(R) INTELND1617S2 -> Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe

(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_250db833a1cd577e\igfxCUIService.exe

(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_250db833a1cd577e\IntelCpHDCPSvc.exe

(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_250db833a1cd577e\IntelCpHeciSvc.exe

(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe

(services.exe ->) (Luis Cobian, CobianSoft) [Datei ist nicht signiert] C:\Program Files (x86)\Cobian Backup 11\cbService.exe

(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(services.exe ->) (PFU LIMITED) [Datei ist nicht signiert] C:\Windows\twain_32\fjscan32\FJTWMKSV.exe

(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>

(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe

(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

(services.exe ->) (Wolters Kluwer Deutschland GmbH -> ) C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe

(shbox.de) [Datei ist nicht signiert] C:\Program Files (x86)\FreePDF_XP\fpassist.exe

(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe <2>

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\prevhost.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [878368 2019-05-30] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [824240 2019-11-18] (Acronis International GmbH -> Acronis International GmbH)

HKLM\...\Run: [TechSmithSnagit] => C:\Program Files\TechSmith\Snagit 2020\Snagit32.exe [9094872 2022-02-25] (TechSmith Corporation -> TechSmith Corporation)

HKLM\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [3293072 2023-10-12] (Open Source Developer, Dominik Reichl -> Dominik Reichl)

HKLM-x32\...\Run: [FreePDF Assistant] => C:\Program Files (x86)\FreePDF_XP\fpassist.exe [373760 2014-03-18] (shbox.de) [Datei ist nicht signiert]

HKLM-x32\...\Run: [FtLnSOP_setup] => C:\Windows\Twain_32\Fjscan32\SOP\FtLnSOP.exe [147456 2012-01-23] (PFU LIMITED) [Datei ist nicht signiert]

HKLM-x32\...\Run: [FJTWAIN Setup] => C:\Windows\Twain_32\fjscan32\FjtwMkup.exe [139264 2012-01-23] (FUJITSU LIMITED) [Datei ist nicht signiert]

HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [11561184 2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

HKLM-x32\...\Run: [Cobian Backup 11 interface] => C:\Program Files (x86)\Cobian Backup 11\cbInterface.exe [4407808 2013-03-07] (Luis Cobian, CobianSoft) [Datei ist nicht signiert]

HKLM-x32\...\Run: [DocFetcher-Daemon] => C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe [563621 2018-07-30] () [Datei ist nicht signiert]

HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5048456 2019-11-19] (Acronis International GmbH -> )

HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\tib_mounter_monitor.exe [441448 2019-11-18] (Acronis International GmbH -> Acronis International GmbH)

HKLM-x32\...\Run: [InstallHelper] => C:\Program Files (x86)\Citrix\Citrix WorkSpace 2309\InstallHelper.exe [416056 2023-10-28] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [739448 2023-03-17] (Oracle America, Inc. -> Oracle Corporation)

HKLM-x32\...\Run: [AnalyticsSrv] => C:\Program Files (x86)\Citrix\ICA Client\Receiver\AnalyticsSrv.exe [2720120 2023-10-23] (Citrix Systems, Inc. -> Cloud Software Group, Inc.)

HKLM-x32\...\Run: [ConnectionCenter] => C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [3079296 2023-10-26] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

HKLM-x32\...\Run: [Redirector] => C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [574080 2023-10-26] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Beschränkung <==== ACHTUNG

HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Beschränkung <==== ACHTUNG

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall: Beschränkung <==== ACHTUNG

HKU\S-1-5-21-2216129787-3453094354-8666996-1006\...\Run: [cookieaq updater] => C:\Users\Michael\AppData\Roaming\cookieaq\updater\cookieaq updater.exe [9078600 2023-08-01] (GALAXY DYNAMICS LTD -> Galaxy Dynamics) <==== ACHTUNG

HKU\S-1-5-21-2216129787-3453094354-8666996-1006\...\Run: [MicrosoftEdgeAutoLaunch_F449D40E833C6F137FB991D0BAA64AC0] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3854280 2023-12-21] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-2216129787-3453094354-8666996-500\...\Run: [MicrosoftEdgeAutoLaunch_026DBDC0C9596FB7BC2F75649FF0FD3B] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3854280 2023-12-21] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-2216129787-3453094354-8666996-500\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Administrator.PCWAGMANNW81\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (Keine Datei)

HKU\S-1-5-21-2216129787-3453094354-8666996-500\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Administrator.PCWAGMANNW81\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Keine Datei)

HKU\S-1-5-21-2216129787-3453094354-8666996-500\...\RunOnce: [Uninstall 19.043.0304.0013] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Administrator.PCWAGMANNW81\AppData\Local\Microsoft\OneDrive\19.043.0304.0013" (Keine Datei)

HKLM\...\Print\Monitors\FRITZ!fax Color Port Monitor: C:\WINDOWS\system32\FritzColorPort64.dll [20480 2006-02-23] () [Datei ist nicht signiert]

HKLM\...\Print\Monitors\KM Language Monitor: C:\WINDOWS\system32\KMPJL64.DLL [81408 2014-12-18] (Microsoft Windows Hardware Compatibility Publisher -> KYOCERA Document Solutions Inc.)

HKLM\...\Print\Monitors\PDF-XChange V6 Printer Port Monitor (Lite): C:\WINDOWS\system32\pxcpm5L.dll [150208 2016-11-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)

HKLM\...\Print\Monitors\Redirected Port: C:\WINDOWS\system32\redmon64.dll [113152 2012-06-21] () [Datei ist nicht signiert]

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\120.0.6099.199\Installer\chrmstp.exe [2024-01-04] (Google LLC -> Google LLC)

HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{60f15951-e7ef-11ea-b28e-c4b301b9ed33}] -> C:\Program Files (x86)\Citrix\ICA Client\CitrixEnterpriseBrowser\117.1.1.13\Installer\chrmstp.exe [2023-11-08] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Error Recovery Guide.lnk [2014-12-19]

ShortcutTarget: Error Recovery Guide.lnk -> C:\Windows\twain_32\fjscan32\ERG\FTErGuid.exe (PFU LIMITED) [Datei ist nicht signiert]

GroupPolicy: Beschränkung ? <==== ACHTUNG

Policies: C:\Users\Administrator\NTUSER.pol: Beschränkung <==== ACHTUNG

Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG

Policies: C:\Users\wagmann\NTUSER.pol: Beschränkung <==== ACHTUNG
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {32AB90BD-1B19-4379-A7E2-EF71AC6D6EAC} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG

"C:\Windows\System32\Tasks\Microsoft\Windows\GroupPolicy\{3E0A038B-D834-4930-9981-E89C9BFF83AA}" wurde entsperrt. <==== ACHTUNG

"C:\Windows\System32\Tasks\Microsoft\Windows\GroupPolicy\{A7719E0F-10DB-4640-AD8C-490CC6AD5202}" wurde entsperrt. <==== ACHTUNG

Task: {727986C7-E956-46B6-8689-566B1343AE03} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\BrowserChoice\browserchoice.exe  /launch (Keine Datei)

Task: {C6C3C854-50CB-459C-A56D-192379BAA19B} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\Explorer.EXE [5550856 2023-12-13] (Microsoft Windows -> Microsoft Corporation)

Task: {12436D86-9FE5-43B5-8EEF-8B36BAD9437F} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.)

Task: {AF6BA8A7-9675-4BE5-8F55-1A9E1063A6C6} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.)

Task: {6993C842-31C0-403D-838A-477A93071DA8} - System32\Tasks\G2MUpdateTask-S-1-5-21-1013316503-1690231437-2228150199-1155 => C:\Users\wagmann\AppData\Local\GoToMeeting\8404\g2mupdate.exe [31808 2018-02-23] (LogMeIn, Inc. -> LogMeIn, Inc.)

Task: {A43FB1C8-F623-4579-BAE8-D8EBAA91EA1E} - System32\Tasks\G2MUploadTask-S-1-5-21-1013316503-1690231437-2228150199-1155 => C:\Users\wagmann\AppData\Local\GoToMeeting\8404\g2mupload.exe [31808 2018-02-23] (LogMeIn, Inc. -> LogMeIn, Inc.)

Task: {4BB105C1-E1E5-49A8-9569-10B8D147692E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-04] (Google Inc -> Google Inc.)

Task: {74502E3C-5697-4D3C-90B7-854664CF3912} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-04] (Google Inc -> Google Inc.)

Task: {026FF6C6-A57B-412D-9548-2673CA61CDE6} - System32\Tasks\HPCustParticipation HP ColorLaserJet MFP M278-M281 => C:\Program Files\HP\HP ColorLaserJet MFP M278-M281\Bin\HPCustPartic.exe [6665792 2022-08-17] (HP Inc. -> HP Inc.)

Task: {767E57D2-0F24-415F-A737-106C8658282C} - System32\Tasks\HPCustParticipation HP LaserJet M101-M106 => C:\Program Files\HP\HP LaserJet M101-M106\Bin\HPCustPartic.exe [6658184 2017-04-27] (Hewlett Packard -> HP Inc.)

Task: {05EA894B-EB58-424B-B39B-116FA972E24E} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [1626328 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)

Task: {47843C54-CCE1-4E96-A4F7-D595D5AE0AFD} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)

Task: {9C0E4A9E-FEFF-4EC6-85BB-341B91C798F2} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)

Task: {A29A4B16-728D-4E48-A8E1-7331D530114E} - System32\Tasks\Microsoft\Windows\GroupPolicy\{3E0A038B-D834-4930-9981-E89C9BFF83AA} => C:\WINDOWS\system32\gpupdate.exe [30720 2023-11-18] (Microsoft Windows -> Microsoft Corporation)

Task: {A52BA8E7-4C33-4310-865D-079A379983B6} - System32\Tasks\Microsoft\Windows\GroupPolicy\{A7719E0F-10DB-4640-AD8C-490CC6AD5202} => C:\WINDOWS\system32\gpupdate.exe [30720 2023-11-18] (Microsoft Windows -> Microsoft Corporation)

Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}

Task: {378B6735-940E-45A5-A099-EF9C0F748DAD} - System32\Tasks\Microsoft\Windows\rempl\shell-usoscan => %ProgramFiles%\rempl\remsh.exe  /RunUsoScanOnly (Keine Datei)

Task: {A4E42F6D-B6F2-4032-98A3-8550B484EFDF} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}

Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}

Task: {3F7AC47F-7B75-468D-AE49-74588F9AF2D2} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistant => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe [0 0000-00-00] (Microsoft Corporation) [Zugriff verweigert]

Task: {F4C8C1AB-D6F2-415E-AB9B-4FC2F8329697} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistantCalendarRun => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe [0 0000-00-00] (Microsoft Corporation) [Zugriff verweigert]

Task: {83E6B72D-EF15-41AC-8332-1539C11A6743} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistantWakeupRun => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe [0 0000-00-00] (Microsoft Corporation) [Zugriff verweigert]

Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => %SystemRoot%\System32\AutoWorkplace.exe  join (Keine Datei)

Task: {EA76A48C-8A3B-4C13-BFAE-F0B099EA21F1} - System32\Tasks\Mozilla\Firefox Background Update E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe [674720 2024-01-04] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask backgroundupdate

Task: {A164D7BA-718A-4312-B6EE-F4013B616405} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [35232 2024-01-04] (Mozilla Corporation -> Mozilla Foundation)

Task: {3DF6D6BF-DB8D-4F47-8528-5A6F26F92A24} - System32\Tasks\Open URL by RoboForm => C:\WINDOWS\system32\rundll32.exe [71680 2023-11-18] (Microsoft Windows -> Microsoft Corporation) -> url.dll,FileProtocolHandler "hxxps://www.roboform.com/uninstall.html?aaa=KICMJJNJKJNJPMLJLMOMCNLJJMGMKMCNLMLJKMJJCNGMGMPMMMCNIMLMPMKJMJNJJJJJHMJJKMHMJNJICMHMCNKMCNOMFMOMOMCNOMOMNMCNOMIMOMMMLMFMPMCNPMCNOMIMOMMMLMCNNMJNPICMPMFMFMLMJNHICMEKMICNJJCKJNBJCMCLGJMJHJOJKJDJJNKJCMJNNICMJNDJCMLJKJJNMJCMPMFMPMF (Der Dateneintrag hat 36 mehr Zeichen).

Task: {40CE5594-D783-4DBE-863F-E954EF84B661} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe  (Keine Datei)

Task: {E881479F-0ADD-488A-98E5-E3BB1E56FABD} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [4630208 2016-11-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

Task: C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-1013316503-1690231437-2228150199-1155.job => C:\Users\wagmann\AppData\Local\GoToMeeting\8404\g2mupdate.exe

Task: C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-1013316503-1690231437-2228150199-1155.job => C:\Users\wagmann\AppData\Local\GoToMeeting\8404\g2mupload.exe

Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe-CheckUpdate(Tracker Software Products (Canada) Ltd.Kee
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3: <==== ACHTUNG (Beschränkung - Zones)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{0870edde-a074-40a6-8ce3-e97f27791aa8}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{0870edde-a074-40a6-8ce3-e97f27791aa8}: [DhcpDomain] fritz.box

Tcpip\..\Interfaces\{0870edde-a074-40a6-8ce3-e97f27791aa8}\73245627765633A5775627765623: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{0870edde-a074-40a6-8ce3-e97f27791aa8}\73245627765633A5775627765623: [DhcpDomain] fritz.box

Tcpip\..\Interfaces\{5fc5dc9a-0860-4eba-91af-6b83c6085645}: [DhcpNameServer] 192.168.44.1

Tcpip\..\Interfaces\{720b8e4b-a57e-4978-a4f2-180187041341}: [DhcpNameServer] 10.0.0.5 10.0.0.1

Tcpip\..\Interfaces\{bf6de677-06e8-4870-aa04-c38dbce56565}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{bf6de677-06e8-4870-aa04-c38dbce56565}: [DhcpDomain] fritz.box
 

Edge: 

=======

Edge Profile: C:\Users\Michael\AppData\Local\Microsoft\Edge\User Data\Default [2024-01-04]

Edge Extension: (Google Docs Offline) - C:\Users\Michael\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-12-03]

Edge Extension: (Edge relevant text changes) - C:\Users\Michael\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-12-03]
 

FireFox:

========

FF DefaultProfile: 7x1ny61f.default-1571561941413

FF ProfilePath: C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\7x1ny61f.default-1571561941413 [2024-01-04]

FF NewTab: Mozilla\Firefox\Profiles\7x1ny61f.default-1571561941413 -> hxxps://myfiresearch.com/homepage?hp=1&pId=CH210629&iDate=2023-08-01 01:07:41&bitmask=9996

FF Notifications: Mozilla\Firefox\Profiles\7x1ny61f.default-1571561941413 -> hxxps://www.finanzen.net; hxxps://www.marktjagd.de; hxxps://www.aerzteblatt.de; hxxps://www.ruhrnachrichten.de; hxxps://www.tennisnet.com; hxxps://de.statista.com; hxxps://www.augsburger-allgemeine.de; hxxps://www.rnd.de; hxxps://geizhals.de; hxxps://www.ueberbrueckungshilfe-unternehmen.de; hxxps://www.tt.com; hxxps://www.abendzeitung-muenchen.de

FF NewTabOverride: Mozilla\Firefox\Profiles\7x1ny61f.default-1571561941413 -> Disabled: mailcheck@gmx.net

FF NewTabOverride: Mozilla\Firefox\Profiles\7x1ny61f.default-1571561941413 -> Enabled: keefox@chris.tomlinson

FF Extension: (KeePass Tusk - Password Access and Autofill) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\7x1ny61f.default-1571561941413\Extensions\brandon@subdavis.com.xpi [2020-10-31]

FF Extension: (German Dictionary) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\7x1ny61f.default-1571561941413\Extensions\de-DE@dictionaries.addons.mozilla.org.xpi [2019-10-25] [ist nicht signiert]

FF Extension: (To Google Translate) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\7x1ny61f.default-1571561941413\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2022-04-02]

FF Extension: (Kee - Password Manager) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\7x1ny61f.default-1571561941413\Extensions\keefox@chris.tomlinson.xpi [2021-12-28]

FF Extension: (GMX MailCheck) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\7x1ny61f.default-1571561941413\Extensions\mailcheck@gmx.net.xpi [2021-12-28] [UpdateUrl:hxxps://dl.gmx.net/mailcheck/firefox/updates.json]

FF Extension: (Return YouTube Dislike) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\7x1ny61f.default-1571561941413\Extensions\{762f9885-5a13-4abd-9c77-433dcd38b8fd}.xpi [2022-04-26]

FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2014-10-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)

FF Plugin: @java.com/DTPlugin,version=11.371.2 -> C:\Program Files\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.371.2 -> C:\Program Files\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2016-11-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)

FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2014-10-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)

FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)

FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)

FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-10-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)

FF Plugin-x32: @google.com/sewebplugin -> C:\Windows\system32\npsewebplugin.dll [Keine Datei]

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-19] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2016-11-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)

FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2014-10-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)

FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2016-11-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)
 

Chrome: 

=======

CHR Profile: C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default [2024-01-04]

CHR StartupUrls: Default -> "hxxp://www.google.de/"

CHR Extension: (Avira Password Manager) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2024-01-04]

CHR Extension: (Urban VPN Proxy) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon [2024-01-04]

CHR Extension: (Google Docs Offline) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-05-15]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-26]

CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]

CHR HKLM\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]

CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]

CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
 

Opera: 

=======

OPR Profile: C:\Users\Michael\AppData\Roaming\Opera Software\Opera Stable [2022-05-17]

OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.de/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}

OPR Extension: (Avira Browserschutz) - C:\Users\Michael\AppData\Roaming\Opera Software\Opera Stable\Extensions\dalelnnofafalcmkmnhdbigbjjkloabo [2020-03-05]

OPR Extension: (Avira Password Manager) - C:\Users\Michael\AppData\Roaming\Opera Software\Opera Stable\Extensions\ngohaaocccbohaffogpbgfpmpgbcgccg [2020-03-05]

OPR Extension: (Free Avira Phantom VPN – Entsperrt Webseiten) - C:\Users\Michael\AppData\Roaming\Opera Software\Opera Stable\Extensions\pcgkmkjdikhiodinhloioejnpjgmfigd [2020-03-05]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AAV UpdateService; C:\Program Files (x86)\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe [128296 2008-10-24] (Wolters Kluwer Deutschland GmbH -> )

R2 ABBYY.Licensing.FineReader.Corporate.11.0; C:\Program Files (x86)\Common Files\ABBYY\FineReader\11.00\Licensing\CE\NetworkLicenseServer.exe [819976 2011-08-18] (ABBYY SOLUTIONS LIMITED -> ABBYY)

R2 ABBYY.Licensing.FineReader.Professional.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [759072 2008-05-16] (ABBYY Software House -> ABBYY (BIT Software))

R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [10316304 2019-11-18] (Acronis International GmbH -> )

R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1254784 2019-11-18] (Acronis International GmbH -> Acronis International GmbH)

R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6399680 2020-02-01] (Acronis International GmbH -> )

S3 appprotectionsvc; C:\Program Files (x86)\Citrix\ICA Client\appprotection.exe [546384 2023-09-25] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

R2 cbVSCService11; C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe [67584 2013-03-07] (CobianSoft, Luis Cobian) [Datei ist nicht signiert]

R2 CobianBackup11; C:\Program Files (x86)\Cobian Backup 11\cbService.exe [1131008 2013-03-07] (Luis Cobian, CobianSoft) [Datei ist nicht signiert]

R2 CWAUpdaterService; C:\Program Files (x86)\Citrix\ICA Client\Receiver\UpdaterService.exe [1708344 2023-10-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.)

S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.)

R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

R2 FJTWMKSV; C:\Windows\twain_32\fjscan32\FJTWMKSV.exe [36864 2011-07-20] (PFU LIMITED) [Datei ist nicht signiert]

R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [230360 2023-11-16] (HP Inc. -> HP Inc.)

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9410296 2024-01-04] (Malwarebytes Inc. -> Malwarebytes)

R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4808088 2019-11-18] (Acronis International GmbH -> Acronis International GmbH)

S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2019-11-18] (Acronis International GmbH -> Acronis International GmbH)

S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1916824 2019-11-18] (Acronis International GmbH -> )

R2 MSSQL$ADK; C:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\sqlservr.exe [163008 2016-09-24] (Microsoft Corporation -> Microsoft Corporation)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [534472 2023-12-13] (Microsoft Windows Publisher -> Microsoft Corporation)

S4 SQLAgent$ADK; C:\Program Files (x86)\Microsoft SQL Server\MSSQL11.ADK\MSSQL\Binn\SQLAGENT.EXE [448704 2016-09-24] (Microsoft Corporation -> Microsoft Corporation)

R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)

R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7395256 2019-11-18] (Acronis International GmbH -> )

R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [15110968 2022-11-24] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

S3 Tib Mounter Service; C:\Program Files (x86)\Common Files\Acronis\TibMounter64\tib_mounter_service.exe [7095824 2019-11-18] (Acronis International GmbH -> Acronis International GmbH)

S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe [3174840 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe [133592 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 ctxusbm; C:\WINDOWS\system32\DRIVERS\ctxusbmon.sys [157472 2023-09-24] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)

S3 entryprotectdrv; C:\Program Files (x86)\Citrix\ICA Client\entryprotect.sys [74008 2023-09-25] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

S3 epinject6; C:\Program Files (x86)\Citrix\ICA Client\epinject.sys [155928 2023-09-25] (Citrix Systems, Inc. -> )

S4 epusbfilter; C:\Program Files (x86)\Citrix\ICA Client\epusbfilter.sys [47392 2023-09-25] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [158640 2024-01-04] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

R2 file_protector; C:\WINDOWS\System32\DRIVERS\file_protector.sys [687768 2020-02-01] (Acronis International GmbH -> Acronis International GmbH)

R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [390592 2020-02-01] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)

R0 fltsrv; C:\WINDOWS\System32\DRIVERS\fltsrv.sys [182832 2020-02-01] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)

S3 ITECIRfilter; C:\WINDOWS\system32\DRIVERS\ITECIRfilter.sys [36560 2015-11-24] (ITE Tech. Inc. -> ITE Tech. Inc.)

R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [222784 2024-01-04] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2024-01-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)

R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [200104 2024-01-04] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [78400 2024-01-04] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239576 2024-01-04] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [188008 2024-01-04] (Malwarebytes Inc. -> Malwarebytes)

R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [37336 2021-03-09] (MiniTool Solution Ltd -> )

S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> )

R3 RSP2STOR; C:\WINDOWS\System32\drivers\RtsP2Stor.sys [356344 2019-05-15] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)

S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)

S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)

S3 tib; C:\WINDOWS\system32\DRIVERS\tib.sys [883256 2020-02-01] (Acronis International GmbH -> Acronis International GmbH)

R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [171968 2020-02-01] (Acronis International GmbH -> Acronis International GmbH)

S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [693768 2020-02-01] (Acronis International GmbH -> Acronis International GmbH)

R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [330176 2020-02-01] (Acronis International GmbH -> Acronis International GmbH)

R0 volume_tracker; C:\WINDOWS\System32\DRIVERS\volume_tracker.sys [243472 2020-02-01] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)

S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [55856 2023-12-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [594304 2023-12-06] (Microsoft Windows -> Microsoft Corporation)

S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105856 2023-12-06] (Microsoft Windows -> Microsoft Corporation)

S3 cpuz153; \??\C:\WINDOWS\temp\cpuz153\cpuz153_x64.sys [X]

S3 HWiNFO_180; \??\C:\Users\Michael\AppData\Local\Temp\HWiNFO64A_180.SYS [X] <==== ACHTUNG

S3 sxuptp; \SystemRoot\System32\drivers\sxuptp.sys [X]

S1 UimBus; \SystemRoot\System32\drivers\uimbus.sys [X]

S1 Uim_DEVIM; \SystemRoot\System32\drivers\uimdevim.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2024-01-04 23:04 - 2024-01-04 23:05 - 000041355 _____ C:\Users\Michael\Downloads\FRST.txt

2024-01-04 23:04 - 2024-01-04 23:05 - 000000000 ____D C:\FRST

2024-01-04 23:03 - 2024-01-04 23:04 - 002387968 _____ (Farbar) C:\Users\Michael\Downloads\FRST64 (1).exe

2024-01-04 23:01 - 2024-01-04 23:01 - 002387968 _____ (Farbar) C:\Users\Michael\Downloads\Nicht bestätigt 229911.crdownload

2024-01-04 22:38 - 2024-01-04 22:38 - 000188008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys

2024-01-04 21:55 - 2024-01-04 21:55 - 000002924 _____ C:\Users\Michael\Desktop\AdwCleaner[C00].txt

2024-01-04 21:53 - 2024-01-04 21:54 - 000000000 ____D C:\AdwCleaner

2024-01-04 21:52 - 2024-01-04 21:52 - 008791352 _____ (Malwarebytes) C:\Users\Michael\Downloads\adwcleaner(1).exe

2024-01-04 21:51 - 2024-01-04 21:53 - 008791352 _____ (Malwarebytes) C:\Users\Michael\Downloads\adwcleaner.exe

2024-01-04 21:47 - 2024-01-04 21:47 - 000002766 _____ C:\Users\Michael\Desktop\virenbedrohung.txt

2024-01-04 21:36 - 2024-01-04 22:40 - 000000000 ____D C:\Users\Michael\AppData\Local\Malwarebytes

2024-01-04 21:36 - 2024-01-04 21:36 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk

2024-01-04 21:36 - 2024-01-04 21:36 - 000002021 _____ C:\Users\Public\Desktop\Malwarebytes.lnk

2024-01-04 21:35 - 2024-01-04 21:35 - 000000000 ____D C:\ProgramData\Malwarebytes

2024-01-04 21:35 - 2024-01-04 21:35 - 000000000 ____D C:\Program Files\Malwarebytes

2024-01-04 21:34 - 2024-01-04 21:34 - 002606880 _____ (Malwarebytes) C:\Users\Michael\Downloads\MBSetup.exe

2024-01-04 21:29 - 2024-01-04 21:29 - 000001283 _____ C:\Users\Michael\Desktop\Google Chrome.lnk

2024-01-04 18:32 - 2024-01-04 18:32 - 000122505 _____ C:\Users\Michael\Downloads\Preisliste.pdf

2024-01-04 18:28 - 2024-01-04 18:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox

2024-01-04 17:59 - 2024-01-04 22:37 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox

2023-12-20 14:17 - 2023-12-20 14:17 - 000167635 _____ C:\Users\Michael\Downloads\Wichtige Information zur Versicherung.pdf

2023-12-20 14:11 - 2023-12-20 14:11 - 000248065 _____ C:\Users\Michael\Downloads\Kontoauszug.pdf

2023-12-18 21:19 - 2023-12-18 21:19 - 000046824 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe

2023-12-14 15:13 - 2023-12-14 15:13 - 000000000 ____D C:\WINDOWS\InboxApps

2023-12-13 13:39 - 2023-12-13 13:39 - 000016707 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json

2023-12-13 13:29 - 2023-12-13 13:29 - 000000000 ___HD C:\$WinREAgent

2023-12-13 12:47 - 2024-01-04 22:37 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
 

==================== Ein Monat (geänderte) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2024-01-04 23:02 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2024-01-04 22:56 - 2021-12-21 15:53 - 000000000 ____D C:\WINDOWS\SystemTemp

2024-01-04 22:56 - 2015-08-04 15:10 - 000002293 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2024-01-04 22:56 - 2015-08-04 15:09 - 000000000 ____D C:\Program Files (x86)\Google

2024-01-04 22:44 - 2020-07-16 19:20 - 001846524 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2024-01-04 22:44 - 2019-12-07 15:51 - 000743714 _____ C:\WINDOWS\system32\perfh007.dat

2024-01-04 22:44 - 2019-12-07 15:51 - 000150136 _____ C:\WINDOWS\system32\perfc007.dat

2024-01-04 22:44 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF

2024-01-04 22:39 - 2018-03-03 15:29 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Dropbox

2024-01-04 22:39 - 2018-03-03 15:29 - 000000000 ____D C:\Users\Michael\AppData\Local\Dropbox

2024-01-04 22:38 - 2018-03-03 16:39 - 000000000 ____D C:\Users\Michael\AppData\Local\FreePDF_XP

2024-01-04 22:37 - 2020-07-16 19:22 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2024-01-04 22:37 - 2020-07-16 19:14 - 000008192 ___SH C:\DumpStack.log.tmp

2024-01-04 22:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState

2024-01-04 22:37 - 2019-12-07 10:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI

2024-01-04 22:37 - 2018-03-01 15:44 - 000000000 __SHD C:\Users\Michael\IntelGraphicsProfiles

2024-01-04 22:37 - 2015-06-29 13:57 - 000000000 ____D C:\Program Files (x86)\TeamViewer

2024-01-04 22:37 - 2014-12-15 12:47 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2024-01-04 21:36 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP

2024-01-04 21:34 - 2018-03-03 13:57 - 000000000 ____D C:\Users\Michael\AppData\Roaming\KeePass

2024-01-04 21:24 - 2020-07-16 19:14 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2024-01-04 21:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness

2024-01-04 19:57 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps

2024-01-04 19:23 - 2014-12-15 12:47 - 000001167 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

2024-01-04 18:29 - 2018-03-03 15:29 - 000000000 ____D C:\Program Files (x86)\Dropbox

2024-01-04 18:21 - 2018-03-03 16:35 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Microsoft\Excel

2024-01-04 18:13 - 2018-03-03 15:31 - 000000000 ___RD C:\Users\Michael\Dropbox

2024-01-04 18:11 - 2018-03-02 09:55 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Microsoft\Word

2024-01-04 18:00 - 2023-01-17 15:07 - 000002274 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk

2024-01-04 18:00 - 2020-12-04 15:16 - 000004166 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{2DA5EBF2-A26C-44ED-A467-8ED18FDA4986}

2024-01-04 18:00 - 2020-07-14 08:20 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2023-12-18 12:04 - 2018-03-02 13:34 - 000000000 ____D C:\Users\Michael\Documents\Outlook-Dateien-siehe Festplatte E

2023-12-18 11:56 - 2018-06-04 12:00 - 000000000 ____D C:\Users\Michael\Documents\Steuerfälle

2023-12-18 11:48 - 2023-08-01 14:30 - 000000000 ____D C:\M4_PERSONAL_V7_1

2023-12-18 11:47 - 2023-08-01 14:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\M4 PERSONAL

2023-12-18 11:45 - 2015-01-12 14:00 - 000000000 ____D C:\Program Files (x86)\Akademische Arbeitsgemeinschaft

2023-12-18 11:41 - 2015-01-12 14:00 - 000000000 ____D C:\ProgramData\AAV

2023-12-18 11:39 - 2020-07-16 19:15 - 000000000 ____D C:\Users\Michael

2023-12-18 11:39 - 2014-12-18 10:34 - 000000000 ____D C:\ProgramData\TechSmith

2023-12-18 10:28 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp

2023-12-18 09:59 - 2022-02-16 15:21 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38

2023-12-18 09:58 - 2018-11-22 16:31 - 000001274 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk

2023-12-18 09:39 - 2021-12-14 14:30 - 000003580 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2216129787-3453094354-8666996-1006

2023-12-18 09:39 - 2020-07-16 19:22 - 000003374 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2216129787-3453094354-8666996-1006

2023-12-18 09:39 - 2020-07-16 19:15 - 000002440 _____ C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2023-12-18 09:35 - 2018-03-01 15:44 - 000000000 ____D C:\Users\Michael\AppData\Local\Packages

2023-12-14 15:14 - 2020-07-16 19:14 - 000652976 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2023-12-14 15:13 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection

2023-12-14 15:13 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2023-12-14 15:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata

2023-12-14 15:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV

2023-12-14 15:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT

2023-12-14 15:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE

2023-12-14 15:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX

2023-12-14 15:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism

2023-12-14 15:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources

2023-12-14 15:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata

2023-12-14 15:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe

2023-12-14 15:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV

2023-12-14 15:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT

2023-12-14 15:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\et-EE

2023-12-14 15:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX

2023-12-14 15:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism

2023-12-14 15:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences

2023-12-14 15:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning

2023-12-14 15:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions

2023-12-14 15:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr

2023-12-14 15:13 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing

2023-12-13 13:59 - 2018-03-01 15:45 - 000000000 ____D C:\Users\Michael\Documents\Snagit

2023-12-13 13:42 - 2019-12-07 15:54 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll

2023-12-13 13:42 - 2019-12-07 15:54 - 000020827 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml

2023-12-13 13:39 - 2020-07-16 19:17 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll

2023-12-06 14:59 - 2018-03-01 11:52 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd

2023-12-06 14:49 - 2020-07-16 19:22 - 000003926 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA

2023-12-06 14:49 - 2020-07-16 19:22 - 000003802 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
 

2019-11-17 16:26 - 2023-03-08 17:18 - 000008192 ____N () C:\Users\Michael\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2023-07-18 11:47 - 2023-07-18 11:47 - 000015971 ____N () C:\Users\Michael\AppData\Local\recently-used.xbel

2020-05-18 09:36 - 2020-05-18 09:37 - 000000000 ____N () C:\Users\Michael\AppData\Local\{2866B090-E6BE-4A28-A8BC-CB33179F337E}
 

==================== FLock ==============================
 

2018-02-08 09:33 C:\WINDOWS\UpdateAssistant
 

==================== SigCheck ============================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

==================== Ende von FRST.txt ========================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 04.01.2024

durchgeführt von Michael (04-01-2024 23:06:09)

Gestartet von C:\Users\Michael\Downloads

Microsoft Windows 10 Pro Version 22H2 19045.3803 (X64) (2020-07-16 18:22:40)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

Admin (S-1-5-21-2216129787-3453094354-8666996-1001 - Administrator - Enabled) => C:\Users\Admin

Administrator (S-1-5-21-2216129787-3453094354-8666996-500 - Administrator - Enabled) => C:\Users\Administrator.PCWAGMANNW81

DefaultAccount (S-1-5-21-2216129787-3453094354-8666996-503 - Limited - Disabled)

Gast (S-1-5-21-2216129787-3453094354-8666996-501 - Limited - Disabled)

Michael (S-1-5-21-2216129787-3453094354-8666996-1006 - Administrator - Enabled) => C:\Users\Michael

WDAGUtilityAccount (S-1-5-21-2216129787-3453094354-8666996-504 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Malwarebytes (Enabled - Up to date) {0D452135-A081-B000-D6B6-132E52638543}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

1.1.3 (HKLM-x32\...\{A4046FE1-986B-4463-B4DD-CFA473A7056B}_is1) (Version:  - PDFZilla)

7-Zip 22.01 (x64) (HKLM\...\7-Zip) (Version: 22.01 - Igor Pavlov)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)

AAVUpdateManager (HKLM-x32\...\{AFA42FE1-A5C3-485F-9180-BFCF5BF1F1C3}) (Version: 18.00.0000 - Wolters Kluwer Deutschland GmbH)

ABBYY FineReader 11 Corporate Edition (HKLM-x32\...\{F1100000-0007-0000-0000-074957833700}) (Version: 11.0.289 - ABBYY)

ABBYY FineReader 9.0 Professional Edition (HKLM-x32\...\{F9000000-0001-0000-0000-074957833700}) (Version: 9.00.882.55011 - ABBYY)

Acronis True Image (HKLM-x32\...\{7731CFE5-70AE-4EFD-9989-0B97986B6FA9}) (Version: 24.5.22510 - Acronis) Hidden

Acronis True Image (HKLM-x32\...\{7731CFE5-70AE-4EFD-9989-0B97986B6FA9}Visible) (Version: 24.5.22510 - Acronis)

Acronis Universal Restore Bootable Media Builder (HKLM-x32\...\{ED77EF76-9596-4868-BD92-1FE1F452D147}) (Version: 11.7.40250 - Acronis)

Amazon Kindle (HKU\S-1-5-21-2216129787-3453094354-8666996-1006\...\Amazon Kindle) (Version: 1.30.0.59056 - Amazon)

Application Compatibility Toolkit (HKLM\...\{CE3829CE-559B-3BFA-BAE7-0F745FAFCD28}) (Version: 10.1.14393.0 - Microsoft) Hidden

Appman Sequencer on amd64 (HKLM\...\{6A7C97F8-E6B6-8043-19FC-75FB7910491E}) (Version: 10.1.14393.0 - Microsoft) Hidden

Assessments on Client (HKLM-x32\...\{F8288793-51B6-47EF-2F93-D37767663FC5}) (Version: 10.1.14393.0 - Microsoft) Hidden

BCR Plug-in (HKLM-x32\...\{2AD2CD8D-D376-4293-B09D-E5B60A73D7C3}) (Version: 23.9.1.5 - Citrix Systems, Inc.) Hidden

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

calibre (HKLM-x32\...\{CF12702B-90E6-4E6D-B059-5D39F3B9AEE3}) (Version: 5.7.2 - Kovid Goyal)

Citrix Authentication Manager (HKLM-x32\...\{540A2BE7-17F0-4C14-A34E-9688225D88E2}) (Version: 23.8.0.5 - Citrix Systems, Inc.) Hidden

Citrix Online Launcher (HKLM-x32\...\{48947098-A67C-46D4-90C5-9F2F6F0F96FE}) (Version: 1.0.449 - Citrix)

Citrix Web Helper (HKLM-x32\...\{AC8A4EA8-6C72-4052-A3E5-17BA44FC1D9A}) (Version: 23.9.1.41 - Citrix Systems, Inc.) Hidden

Citrix Workspace (DV) (HKLM-x32\...\{502B077E-8634-4A3C-BF4B-7C9B538B39E1}) (Version: 23.9.1.5 - Citrix Systems, Inc.) Hidden

Citrix Workspace (USB) (HKLM-x32\...\{5A282CC1-6439-407C-87AB-9AFC8CB4E262}) (Version: 23.9.1.5 - Citrix Systems, Inc.) Hidden

Citrix Workspace 2309 (HKLM-x32\...\CitrixOnlinePluginPackWeb) (Version: 23.9.1.104 - Citrix Systems, Inc.)

Citrix Workspace Inside (HKLM-x32\...\{937F4ADF-7AC6-428B-B2D1-683CD14A56EB}) (Version: 23.9.1.63 - Citrix Systems, Inc.) Hidden

CLIQZ (HKLM-x32\...\{5A0C0737-6AFE-4DC6-A8B4-6DFE509ACD75}_is1) (Version: 1.0.22 - CLIQZ.com)

Cobian Backup 11 Gravity (HKLM-x32\...\CobBackup11) (Version:  - )

Cookie A.Q (HKU\S-1-5-21-2216129787-3453094354-8666996-1006\...\cookieaq) (Version: 1.0.0.9 - Galaxy Dynamics Ltd.) <==== ACHTUNG

CSG Thumbnail (HKLM\...\{7B1F67AD-E90C-4986-973A-93D77674B2D7}_is1) (Version: 7.0 - CAD Schroer)

DocFetcher (HKLM-x32\...\DocFetcher) (Version: 1.1.22 - )

Dropbox (HKLM-x32\...\Dropbox) (Version: 189.4.8395 - Dropbox, Inc.)

Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.817.1 - Dropbox, Inc.) Hidden

EaseUS Data Recovery Wizard (HKLM\...\EaseUS Data Recovery Wizard_is1) (Version:  - EaseUS)

FreeCommander XE (HKLM-x32\...\FreeCommander XE_is1) (Version:  - Marek Jasinski)

FreePDF (Remove only) (HKLM-x32\...\FreePDF_XP) (Version:  - )

GDR 5343 für SQL Server 2012 (KB3045321) (HKLM-x32\...\KB3045321) (Version: 11.2.5343.0 - Microsoft Corporation)

GDR 5388 für SQL Server 2012 (KB3194719) (HKLM-x32\...\KB3194719) (Version: 11.2.5388.0 - Microsoft Corporation)

GetDataBack Pro version 5.61 (HKLM\...\GetDataBack Pro Install_is1) (Version: 5.61 - Runtime Software, LLC)

GIMP 2.10.12 (HKLM\...\GIMP-2_is1) (Version: 2.10.12 - The GIMP Team)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 120.0.6099.199 - Google LLC)

GoTo Opener (HKLM-x32\...\{D144D2C2-4F96-48B7-BB2A-E9185050B619}) (Version: 1.0.491 - LogMeIn, Inc.)

GPL Ghostscript (HKLM\...\GPL Ghostscript 9.19) (Version: 9.19 - Artifex Software Inc.)

GPL Ghostscript (HKLM-x32\...\GPL Ghostscript 9.07) (Version: 9.07 - Artifex Software Inc.)

GPL Ghostscript (HKLM-x32\...\GPL Ghostscript 9.20) (Version: 9.20 - Artifex Software Inc.)

Harmony Remote Update (HKLM-x32\...\HarmonyRemoteUpdate) (Version: 7.7.1 - Logitech - HarmonyRemoteClient)

HashCalc 2.02 (HKLM-x32\...\HashCalc_is1) (Version:  - SlavaSoft Inc.)

HP Color LaserJet MFP M278-M281  Hilfe (HKLM-x32\...\{3DF29BF3-A40D-4BDC-BE5D-FA592999A767}) (Version: 0.00.0005 - HP)

HP ColorLaserJet MFP M278-M281 - Grundlegende Software für das Gerät (HKLM\...\{6D06B9BC-C519-4596-BEC6-C616D0430184}) (Version: 44.11.2787.22229 - HP Inc.)

HP Dropbox Plugin (HKLM-x32\...\{0A9CC01F-D879-4C38-9CAD-FE00069E52C0}) (Version: 44.5.501.81934 - HP)

HP EmailSMTP Plugin (HKLM-x32\...\{C81E4240-9280-4954-BC08-F95DE943EAA0}) (Version: 44.5.0.0 - HP)

HP FTP Plugin (HKLM-x32\...\{683CB3DB-AA1A-414C-82FC-EF1F2F1B49D0}) (Version: 44.5.0.0 - HP)

HP Google Drive Plugin (HKLM-x32\...\{A87DA792-B9B6-4367-BC9F-71CE6BF66491}) (Version: 44.5.501.81934 - HP)

HP LaserJet M101-M106 - Grundlegende Software für das Gerät (HKLM\...\{F3E2696F-E581-4DE6-9063-072C86244E3C}) (Version: 44.1.2483.17117 - HP Inc.)

HP OneDrive Plugin (HKLM-x32\...\{936D840F-D274-40DD-97DC-2024E18AAA9E}) (Version: 44.5.0.0 - HP)

HP SharePoint Plugin (HKLM-x32\...\{FFB85384-C54C-45C4-9515-78F9945A7945}) (Version: 44.5.0.0 - HP)

HPDiagnosticCoreDll (HKLM-x32\...\{9262B08F-E183-4FED-A2BD-23FF1A84EB79}) (Version: 1.0.15.0 - Hewlett Packard)

HWiNFO64 Version 7.46 (HKLM\...\HWiNFO64_is1) (Version: 7.46 - Martin Malik, REALiX s.r.o.)

Imaging And Configuration Designer (HKLM-x32\...\{05935793-A34C-4272-3361-7AF9AEEE5649}) (Version: 10.1.14393.0 - Microsoft) Hidden

Imaging Designer (HKLM-x32\...\{FB54F620-9555-3A11-26CB-B027C4DDF260}) (Version: 10.1.14393.0 - Microsoft) Hidden

Imaging Tools Support (HKLM-x32\...\{C30A729A-E9BA-37F8-3C58-64AD9F1D4694}) (Version: 10.1.14393.0 - Microsoft) Hidden

INSTAR Camera Tool (HKLM-x32\...\{898D9706-ED7C-40B6-A0A8-BD8CE1161CFD}) (Version: 2.0.8.0 - INSTAR Deutschland GmbH)

Intel(R) Chipset Device Software (HKLM\...\{81520FC5-3518-40E9-9803-70CE8A801D07}) (Version: 10.1.1.38 - Intel Corporation) Hidden

Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1017 - Intel Corporation)

Intel(R) Management Engine Components (HKLM\...\{5D75A9AB-99AE-45A5-B488-54B8A431EE76}) (Version: 1.0.0.0 - Intel Corporation) Hidden

Intel(R) ME UninstallLegacy (HKLM\...\{E9B9A1A5-6398-4C99-8FDE-10794F6505C5}) (Version: 1.0.1.0 - Intel Corporation) Hidden

Intel(R) Network Connections 22.4.16.0 (HKLM\...\{00751608-84BC-4420-A51E-FDA884C1DEA9}) (Version: 22.4.16.0 - Intel) Hidden

Intel(R) Network Connections 22.4.16.0 (HKLM\...\PROSetDX) (Version: 22.4.16.0 - Intel)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 22.20.16.4729 - Intel Corporation)

Intel(R) Visual Fortran Redistributables on Intel(R) 64 (HKLM-x32\...\{C05BE0CE-DF74-472D-8E8F-4C663B8B47E3}) (Version: 19.0.203 - Intel Corporation)

Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{DDE28492-B260-4DF0-BA99-7F96FC2932C1}) (Version: 19.60.0 - Intel Corporation)

Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden

Intel® PROSet/Wireless Software (HKLM-x32\...\{03929cf1-3ae4-4765-b8b3-32b8e2e26a8d}) (Version: 19.60.0 - Intel Corporation)

Intel® PROSet/Wireless WiFi Software (HKLM\...\{60130678-813A-4D4B-97E7-284F27516561}) (Version: 19.60.0.0986 - Intel Corporation) Hidden

IrfanView 4.51 (32-bit) (HKLM-x32\...\IrfanView) (Version: 4.51 - Irfan Skiljan)

IrfanView 4.62 (64-bit) (HKLM\...\IrfanView64) (Version: 4.62 - Irfan Skiljan)

Java 8 Update 371 (64-bit) (HKLM\...\{71124AE4-039E-4CA4-87B4-2F64180371F0}) (Version: 8.0.3710.11 - Oracle Corporation)

JiveX DICOM Viewer Light 4.7.2 (HKLM-x32\...\JiveX DICOM Viewer Light 4.7.2) (Version:  - VISUS Technology Transfer GmbH)

Joe (HKLM-x32\...\{F8C986EA-13F8-4B39-91C3-A6B9A851CD34}) (Version: 4.01.0000 - Wirth IT Design)

KeePass Password Safe 2.55 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.55 - Dominik Reichl)

Kits Configuration Installer (HKLM-x32\...\{C661B45B-1D2A-AF7C-27D0-B4FFD670A4FE}) (Version: 10.1.14393.0 - Microsoft) Hidden

Kyocera Product Library (HKLM\...\Kyocera Product Library) (Version: 4.2.1909 - KYOCERA Document Solutions Inc.)

LM101 (HKLM-x32\...\{C1D550A6-7C72-4286-970D-5CBF7C828A38}) (Version: 0.00.0005 - HP)

Logitech Harmony Remote Software 7 (HKLM-x32\...\{5C6F884D-680C-448B-B4C9-22296EE1B206}) (Version: 7.7.0.0 - Logitech)

Malwarebytes version 4.6.8.311 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.6.8.311 - Malwarebytes)

Microsoft .NET Host - 6.0.25 (x86) (HKLM-x32\...\{906F835E-F52B-47C2-A996-A769EB284880}) (Version: 48.100.4028 - Microsoft Corporation) Hidden

Microsoft .NET Host FX Resolver - 6.0.25 (x86) (HKLM-x32\...\{73191C34-7ACF-493B-B92E-FE368D8F4071}) (Version: 48.100.4028 - Microsoft Corporation) Hidden

Microsoft .NET Runtime - 6.0.25 (x86) (HKLM-x32\...\{6D7737C0-9538-48ED-ACB7-688A891417C4}) (Version: 48.100.4028 - Microsoft Corporation) Hidden

Microsoft Access MUI (German) 2013 (HKLM\...\{90150000-0015-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft ASP.NET MVC 2 (HKLM-x32\...\{DD8FF2F3-0D97-4CF3-AF78-FA0E1B242244}) (Version: 2.0.60926.0 - Microsoft Corporation)

Microsoft DCF MUI (German) 2013 (HKLM\...\{90150000-0090-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 120.0.2210.91 - Microsoft Corporation)

Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 120.0.2210.91 - Microsoft Corporation)

Microsoft Excel MUI (German) 2013 (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Groove MUI (German) 2013 (HKLM\...\{90150000-00BA-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft HEVC Media Extension Installation for Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe (x64) (HKLM\...\{B0169E83-757B-EF66-E2F0-391944D785BC}) (Version: 1.0.0.0 - Microsoft Corporation) Hidden

Microsoft InfoPath MUI (German) 2013 (HKLM\...\{90150000-0044-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Lync MUI (German) 2013 (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office 32-bit Components 2013 (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Korrekturhilfen 2013 - Deutsch (HKLM\...\{90150000-001F-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office OSM MUI (German) 2013 (HKLM\...\{90150000-00E1-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office OSM UX MUI (German) 2013 (HKLM\...\{90150000-00E2-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Professional Plus 2013 (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)

Microsoft Office Proofing (German) 2013 (HKLM\...\{90150000-002C-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2013 - English (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Proofing Tools 2013 - Italiano (HKLM\...\{90150000-001F-0410-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Shared 32-bit MUI (German) 2013 (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Office Shared MUI (German) 2013 (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft OneDrive (HKU\S-1-5-21-2216129787-3453094354-8666996-1006\...\OneDriveSetup.exe) (Version: 23.246.1127.0002 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-2216129787-3453094354-8666996-500\...\OneDriveSetup.exe) (Version: 21.220.1024.0005 - Microsoft Corporation)

Microsoft OneNote MUI (German) 2013 (HKLM\...\{90150000-00A1-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Outlook MUI (German) 2013 (HKLM\...\{90150000-001A-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft PowerPoint MUI (German) 2013 (HKLM\...\{90150000-0018-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Publisher MUI (German) 2013 (HKLM\...\{90150000-0019-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)

Microsoft SQL Server 2008 Setup Support Files  (HKLM-x32\...\{D441BD04-E548-4F8E-97A4-1B66135BAAA8}) (Version: 10.1.2731.0 - Microsoft Corporation)

Microsoft SQL Server 2012 (HKLM-x32\...\Microsoft SQL Server SQLServer2012) (Version:  - Microsoft Corporation)

Microsoft SQL Server 2012 Native Client  (HKLM\...\{2B9EE1FE-105F-4093-A40E-C1BF12F873B7}) (Version: 11.2.5388.0 - Microsoft Corporation)

Microsoft SQL Server 2012 RsFx Driver (HKLM-x32\...\{A39258D7-D80D-4148-84BC-4172C3CFF285}) (Version: 11.2.5058.0 - Microsoft Corporation) Hidden

Microsoft SQL Server 2012 Setup (English) (HKLM-x32\...\{8C5F8558-39DE-4903-B55A-4DF790090CB3}) (Version: 11.2.5388.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Transact-SQL ScriptDom  (HKLM\...\{E721A8AA-2632-4798-B439-6D4C8A689BB8}) (Version: 11.2.5058.0 - Microsoft Corporation)

Microsoft Teams (HKU\S-1-5-21-2216129787-3453094354-8666996-1006\...\Teams) (Version: 1.5.00.36367 - Microsoft Corporation)

Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (HKLM\...\{764384C5-BCA9-307C-9AAC-FD443662686A}) (Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (HKLM\...\{2EDC2FA3-1F34-34E5-9085-588C9EFD1CC6}) (Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.60610 (HKLM-x32\...\{3D6AD258-61EA-35F5-812C-B7A02152996E}) (Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.60610 (HKLM-x32\...\{E7D4E834-93EB-351F-B8FB-82CDAE623003}) (Version: 11.0.60610 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40660 (HKLM\...\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}) (Version: 12.0.40660 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40660 (HKLM\...\{CB0836EC-B072-368D-82B2-D3470BF95707}) (Version: 12.0.40660 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.32.31332 (HKLM-x32\...\{3746f21b-c990-4045-bb33-1cf98cff7a68}) (Version: 14.32.31332.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.30.30704 (HKLM-x32\...\{4d8dcf8c-a72a-43e1-9833-c12724db736e}) (Version: 14.30.30704.0 - Microsoft Corporation)

Microsoft Visual C++ 2022 X64 Additional Runtime - 14.32.31332 (HKLM\...\{F4499EE3-A166-496C-81BB-51D1BCDC70A9}) (Version: 14.32.31332 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.32.31332 (HKLM\...\{3407B900-37F5-4CC2-B612-5CD5D580A163}) (Version: 14.32.31332 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X86 Additional Runtime - 14.30.30704 (HKLM-x32\...\{BF08E976-B92E-4336-B56F-2171179476C4}) (Version: 14.30.30704 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.30.30704 (HKLM-x32\...\{F6080405-9FA8-4CAA-9982-14E95D1A3DAC}) (Version: 14.30.30704 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}) (Version: 10.0.50908 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft VSS Writer for SQL Server 2012 (HKLM\...\{3E0DD83F-BE4C-4478-86A0-AD0D79D1353E}) (Version: 11.2.5058.0 - Microsoft Corporation)

Microsoft Windows Desktop Runtime - 6.0.25 (x86) (HKLM-x32\...\{2deb241e-99d9-4489-ae8d-4778d470fedd}) (Version: 6.0.25.33020 - Microsoft Corporation)

Microsoft Windows Desktop Runtime - 6.0.25 (x86) (HKLM-x32\...\{AF1BA644-A730-46A9-BFE1-C1B79EBBE36D}) (Version: 48.100.4037 - Microsoft Corporation) Hidden

Microsoft Word MUI (German) 2013 (HKLM\...\{90150000-001B-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 121.0 (x64 de)) (Version: 121.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 60.9.1 - Mozilla)

Mozilla Thunderbird (x86 de) (HKLM-x32\...\Mozilla Thunderbird 115.5.2 (x86 de)) (Version: 115.5.2 - Mozilla)

msi_revit_importer (HKLM\...\{C96AD830-1E77-460E-8647-53B8D9DB2048}) (Version: 23.1.0724 - SketchUp) Hidden

msi_scan_essentials_lo (HKLM\...\{1D832526-614E-4F86-8BCB-359C3E08169B}) (Version: 23.1.0724 - SketchUp) Hidden

msi_scan_essentials_su (HKLM\...\{187AC53A-22B8-4211-90BD-7DC8FB9ABFEA}) (Version: 23.1.0724 - SketchUp) Hidden

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

MTOP Client (HKLM-x32\...\{336EE547-0630-480B-BAA8-E12872E0CF66}) (Version: 23.9.1.5 - Citrix Systems, Inc.) Hidden

MXAx64 (HKLM-x32\...\{E17085AE-9658-AA36-AE63-2A79581D8B64}) (Version: 10.1.14393.0 - Microsoft) Hidden

Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.8.5 - Notepad++ Team)

Nuvoton SIO CIR Device Driver (HKLM-x32\...\{2FAECEAF-0EBE-48FF-B60A-B4577C0EFDAB}) (Version: 2.09.1007 - Nuvoton Technology Corp.)

OneSafe Photo Recovery (HKLM-x32\...\OneSafe Photo Recovery_is1) (Version: 7.0.0.0 - Stellar Information Technology Pvt Ltd.)

Online Plug-in (HKLM-x32\...\{24D600B8-C188-47D9-ABD1-3C90D034376E}) (Version: 23.9.1.5 - Citrix Systems, Inc.) Hidden

Outils de vérification linguistique 2013 de Microsoft Office*- Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden

PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.311.0 - Tracker Software Products Ltd)

PDF-XChange Editor (HKLM\...\{B7E5844A-B8ED-4F27-A3C8-966114DCB007}) (Version: 6.0.319.0 - Tracker Software Products (Canada) Ltd.) Hidden

PDF-XChange Editor (HKLM-x32\...\{e44f0a83-eeaa-471b-8e1e-5475e4183164}) (Version: 6.0.319.0 - Tracker Software Products (Canada) Ltd.)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.15063.29094 - Realtek Semiconductor Corp.)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7982 - Realtek Semiconductor Corp.)

Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)

RedMon - Redirection Port Monitor (HKLM\...\Redirection Port Monitor) (Version: 1.90 - Ghostgum Software Pty Ltd)

Remote Control USB Driver (HKLM-x32\...\{8471021C-F529-43DE-84DF-3612E10F58C4}) (Version: 2.3.2.317 - )

Roadkil's Unstoppable Copier Version 5.2 (HKLM-x32\...\{A306FD29-7D3A-4287-91AC-9A0180931395}_is1) (Version:  - Roadkil.Net)

Samsung Kies3 (HKLM-x32\...\{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15041.2 - Samsung Electronics Co., Ltd.) Hidden

Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.15041.2 - Samsung Electronics Co., Ltd.)

Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.)

ScandAll 21 (HKLM-x32\...\{AEFF1CC5-2774-4EAE-A19F-8A86F2E9EFDB}) (Version:  - )

Scanner Utility for Microsoft Windows V09L21 (HKLM-x32\...\{580E9BBC-A51E-4AE9-A977-7B0939BEDAD3}) (Version: 9.11.2.0 - FUJITSU)

Self-Service Plug-in (HKLM-x32\...\{E4DC6F03-22CD-4020-9FFA-D68360844195}) (Version: 23.9.1.41 - Citrix Systems, Inc.) Hidden

Service Pack 2 for SQL Server 2012 (KB2958429) (HKLM-x32\...\KB2958429) (Version: 11.2.5058.0 - Microsoft Corporation)

SketchUp 2023 (HKLM\...\{a6b24dd3-d0cb-88bd-a339-374e72f5f5f5}) (Version: 23.1.340.117 - SketchUp) Hidden

SketchUp 2023 (HKLM-x32\...\{5a2cfe94-23d3-11ed-861d-0242ac120017}) (Version: 23.1.340 - Trimble, Inc.)

SketchUp Viewer 2021 (HKLM-x32\...\{440DEAEB-348A-4949-9CDB-F4322F31EF9F}) (Version: 21.1.332 - Trimble, Inc.)

SketchUpViewer (HKLM\...\{0d0e3ac4-386d-0005-57ec-fda37e174124}) (Version: 21.1.332 - Trimble Inc.) Hidden

Snagit 2020 (HKLM\...\{46DF39C3-F6AC-47FA-A1F5-D91ACB82530D}) (Version: 20.1.8 - TechSmith Corporation) Hidden

Snagit 2020 (HKLM-x32\...\{8e06da60-b3fd-48c1-bf2d-d677cc66dfc9}) (Version: 20.1.8.16558 - TechSmith Corporation)

Software Operation Panel (HKLM-x32\...\{E0632353-257C-49C2-83AD-CF2B056D9045}) (Version: 3.3.16.0 - PFU LIMITED)

SQL Server 2012 Common Files (HKLM-x32\...\{124D51A1-F3C2-45AE-B812-D3CA71247093}) (Version: 11.2.5058.0 - Microsoft Corporation) Hidden

SQL Server 2012 Common Files (HKLM-x32\...\{7D29ED63-84F9-4EC7-B49F-994A3A3195B2}) (Version: 11.2.5058.0 - Microsoft Corporation) Hidden

SQL Server 2012 Database Engine Services (HKLM-x32\...\{87D50333-E534-493A-8E98-0A49BC28F64B}) (Version: 11.2.5058.0 - Microsoft Corporation) Hidden

SQL Server 2012 Database Engine Services (HKLM-x32\...\{C22613C2-C7A4-4761-A906-116ECD4E7477}) (Version: 11.2.5058.0 - Microsoft Corporation) Hidden

SQL Server 2012 Database Engine Shared (HKLM-x32\...\{54F84805-0116-467F-8713-899DFC472235}) (Version: 11.2.5058.0 - Microsoft Corporation) Hidden

SQL Server 2012 Database Engine Shared (HKLM-x32\...\{D0F44C37-A22B-4733-BBA7-86C9F4988725}) (Version: 11.2.5058.0 - Microsoft Corporation) Hidden

SQL Server Browser for SQL Server 2012 (HKLM-x32\...\{4B9E6EB0-0EED-4E74-9479-F982C3254F71}) (Version: 11.2.5058.0 - Microsoft Corporation)

Sql Server Customer Experience Improvement Program (HKLM-x32\...\{30CA21F2-901A-44DB-A43F-FC31CD0F2493}) (Version: 11.2.5058.0 - Microsoft Corporation) Hidden

Steuer-Ratgeber 2018-2019 (HKLM-x32\...\{B96CAC3C-B7E7-4291-B422-0544096E217B}) (Version: 18.11.0 - Akademische Arbeitsgemeinschaft Verlagsgesellschaft mbH)

SteuerRatgeber 2019-2020 (HKLM-x32\...\{9DBC64BE-3C7D-44E4-B672-C8204E1EC357}) (Version: 20.01.6 - Akademische Arbeitsgemeinschaft Verlagsgesellschaft mbH)

SteuerRatgeber 2020-2021 (HKLM-x32\...\{2E5063A0-872A-4B65-8163-168B25E6D50A}) (Version: 21.02.22 - Akademische Arbeitsgemeinschaft Verlagsgesellschaft mbH)

SteuerRatgeber 2021-2022 (HKLM-x32\...\{03F5B20E-69BB-426F-B873-6549E6F80C60}) (Version: 27.22.04.14 - Akademische Arbeitsgemeinschaft Verlagsgesellschaft mbH)

SteuerRatgeber 2022-2023 (HKLM-x32\...\{9886EDBE-795A-447E-AD30-99DCC50F69A1}) (Version: 28.22.10.21 - Akademische Arbeitsgemeinschaft Verlagsgesellschaft mbH)

SteuerSparErklärung 2019 (HKLM-x32\...\{C1274A30-7822-4CAE-A4C8-395E9E687107}) (Version: 24.35.136 - Akademische Arbeitsgemeinschaft Verlagsgesellschaft mbH)

SteuerSparErklärung 2020 (HKLM-x32\...\{E7E3F711-933D-4D9A-BA51-01F47179F23C}) (Version: 25.41.96 - Akademische Arbeitsgemeinschaft Verlagsgesellschaft mbH)

SteuerSparErklärung 2021 (HKLM-x32\...\{8C111EC2-454D-4C0B-B0D7-E845F1B3AAAD}) (Version: 26.41.114 - Akademische Arbeitsgemeinschaft Verlagsgesellschaft mbH)

SteuerSparErklärung 2022 (HKLM-x32\...\{7FED71CC-993E-42A4-A2C7-798D4416A192}) (Version: 27.33.86 - Akademische Arbeitsgemeinschaft Verlagsgesellschaft mbH)

SteuerSparErklärung 2023 (HKLM-x32\...\{3DC8F379-3D6D-4424-8AC9-9D5477CBC41F}) (Version: 28.32.67 - Akademische Arbeitsgemeinschaft Verlagsgesellschaft mbH)

SteuerSparErklärung 2024 (HKLM\...\{9882BD33-6F36-4582-9743-CFEAED5C2BC9}) (Version: 29.20.16 - Akademische Arbeitsgemeinschaft Verlagsgesellschaft mbH)

Studie zur Verbesserung von HP ColorLaserJet MFP M278-M281 (HKLM\...\{78938165-B1B5-4CC4-9EE0-F63778350A30}) (Version: 44.11.2787.22229 - HP Inc.)

Studie zur Verbesserung von HP LaserJet M101-M106 (HKLM\...\{6C0B61B6-E03B-4D3B-8B2E-EE662C005EC4}) (Version: 44.1.2483.17117 - HP Inc.)

TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.36.9 - TeamViewer)

Telegram Desktop (HKU\S-1-5-21-2216129787-3453094354-8666996-1006\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 4.12.2 - Telegram FZ-LLC)

Toolkit Documentation (HKLM-x32\...\{6143A694-5FE1-BDF6-F78E-4F7BF3E9419B}) (Version: 10.1.14393.0 - Microsoft) Hidden

Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 10.00 - Ghisler Software GmbH)

TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.2 - TrueCrypt Foundation)

twengoo (HKLM-x32\...\{2ADA8DBD-2833-4235-A07E-0CD653A992FF}) (Version: 1.0.0.0 - Twengoo) <==== ACHTUNG

UEV Tools on amd64 (HKLM\...\{1454FA4E-58BC-2EF1-9A19-147B0E499E03}) (Version: 10.1.14393.0 - Microsoft) Hidden

Update for Skype for Business 2015 (KB4484289) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{1C76EBD9-0A70-4094-A543-00CAA3B62113}) (Version:  - Microsoft)

Update for Skype for Business 2015 (KB4484289) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUSR_{1C76EBD9-0A70-4094-A543-00CAA3B62113}) (Version:  - Microsoft)

Update for Skype for Business 2015 (KB4484289) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{1C76EBD9-0A70-4094-A543-00CAA3B62113}) (Version:  - Microsoft)

Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{7B63012A-4AC6-40C6-B6AF-B24A84359DD5}) (Version: 8.93.0.0 - Microsoft Corporation)

UpdateAssistant (HKLM-x32\...\{7C070E60-8769-4763-BBD8-7537A28A60D4}) (Version: 1.10.0.0 - Microsoft Corporation) Hidden

User State Migration Tool (HKLM-x32\...\{F7AADEDA-233A-1079-CD15-03AEB050F0C6}) (Version: 10.1.14393.0 - Microsoft) Hidden

Visual C++ 9.0 CRT (x86) WinSXS MSM (HKLM-x32\...\{0138F525-6C8A-333F-A105-14AE030B9A54}) (Version: 9.0 - Microsoft Corporation) Hidden

VLC media player (HKLM\...\VLC media player) (Version: 3.0.18 - VideoLAN)

Volume Activation Management Tool (HKLM-x32\...\{0D008B74-0622-7F35-0791-C763427F3969}) (Version: 10.1.14393.0 - Microsoft) Hidden

Vulkan Run Time Libraries 1.0.42.0 (HKLM\...\VulkanRT1.0.42.0) (Version: 1.0.42.0 - LunarG, Inc.)

Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1) (Version: 1.0.54.1 - Intel Corporation Inc.)

Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden

Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1-2) (Version: 1.0.65.1 - LunarG, Inc.) Hidden

Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1-3) (Version: 1.0.65.1 - LunarG, Inc.) Hidden

web control version 3.0.2.3 (HKLM-x32\...\{20779EFD-5A24-45F7-A133-132975478C4E}_is1) (Version: 3.0.2.3 - )

Windows 10 Update Assistant (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22350 - Microsoft Corporation)

Windows Assessment and Deployment Kit - Windows 10 (HKLM-x32\...\{39ebb79f-797c-418f-b329-97cfdf92b7ab}) (Version: 10.1.14393.0 - Microsoft Corporation)

Windows Assessment Services - Client (AMD64 Architecture Specific, Client SKU) (HKLM-x32\...\{561FA6E1-9438-E678-2D2A-CA99F8DDFBC0}) (Version: 10.1.14393.0 - Microsoft) Hidden

Windows Assessment Services - Client (Client SKU) (HKLM-x32\...\{8C5FB518-E78C-F8F0-BFEC-8EAC65F51003}) (Version: 10.1.14393.0 - Microsoft) Hidden

Windows Assessment Toolkit (AMD64 Architecture Specific) (HKLM-x32\...\{91361B2A-F741-E591-303B-4EF957F3BAF1}) (Version: 10.1.14393.0 - Microsoft) Hidden

Windows Assessment Toolkit (HKLM-x32\...\{F4EBF948-F00E-29EF-894C-D10A718F981D}) (Version: 10.1.14393.0 - Microsoft) Hidden

Windows Deployment Customizations (HKLM-x32\...\{9D550F66-5D52-29CA-28B5-EE0C2C0CDFBE}) (Version: 10.1.14393.0 - Microsoft) Hidden

Windows Deployment Tools (HKLM-x32\...\{52EA560E-E50F-DC8F-146D-1B631548BA29}) (Version: 10.1.14393.0 - Microsoft) Hidden

Windows PE x86 x64 (HKLM-x32\...\{230524D3-ADB4-69CC-2A78-96D879E3221B}) (Version: 10.1.14393.0 - Microsoft) Hidden

Windows PE x86 x64 wims (HKLM-x32\...\{47AEE104-BF96-E407-D3FE-80BBD42732F4}) (Version: 10.1.14393.0 - Microsoft) Hidden

Windows Phone Common Packaging and Test Tools (NT_x86_fre) (HKLM-x32\...\{4D989432-59D7-76A0-DD51-B96422F6FF7F}) (Version: 10.1.14393.0 - Microsoft Corporation) Hidden

Windows System Image Manager on amd64 (HKLM-x32\...\{363D76EC-B5B9-5D7B-0F59-C193FF6F03FC}) (Version: 10.1.14393.0 - Microsoft) Hidden

Windows-PC-Integritätsprüfung (HKLM\...\{4254C1AD-B9B0-4020-A4B1-D8B61D12142A}) (Version: 3.7.2204.15001 - Microsoft Corporation)

Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)

WMS studio pro (HKLM\...\{90BC0C3C-3964-4549-A530-BAF0DF782237}) (Version: 3.2.96.0 - WAREMA Renkhoff SE)

WPT Redistributables (HKLM-x32\...\{549DAD2D-2505-204C-EC58-59807FE6E037}) (Version: 10.1.14393.0 - Microsoft) Hidden

WPTx64 (HKLM-x32\...\{97B6FAD9-6F14-CC46-3165-F1785ECCE255}) (Version: 10.1.14393.0 - Microsoft) Hidden

yEd Graph Editor 3.22 (HKLM\...\3309-7404-0599-8908) (Version: 3.22 - yWorks GmbH)

Zoom (HKU\S-1-5-21-2216129787-3453094354-8666996-1006\...\ZoomUMX) (Version: 5.8.3 (1581) - Zoom Video Communications, Inc.)
 

Packages:

=========

Dell Document Hub -> C:\Program Files\WindowsApps\DellPrinter.DellDocumentHub_1.7.0.6_x64__nmdn7k89bxsn6 [2018-03-10] (DELL GLOBAL B.V. (SINGAPORE BRANCH))

Dropbox -> C:\Program Files (x86)\Dropbox\Client\PackageAssets [2024-01-04] (Dropbox Inc.)

HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_150.1.1140.0_x64__v10z8vjag6ke6 [2023-11-16] (HP Inc.)

Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-09-30] (Microsoft Corporation)

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1808.3.0_x64__8wekyb3d8bbwe [2020-07-16] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-02-13] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-02-13] (Microsoft Corporation) [MS Ad]

MSN Gesundheit & Fitness -> C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.4.336_x64__8wekyb3d8bbwe [2024-01-04] (Microsoft Corporation) [MS Ad]

MSN Kochen & Genuss -> C:\Program Files\WindowsApps\Microsoft.BingFoodAndDrink_3.0.4.336_x64__8wekyb3d8bbwe [2024-01-04] (Microsoft Corporation) [MS Ad]

MSN Reisen -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.4.336_x64__8wekyb3d8bbwe [2024-01-04] (Microsoft Corporation) [MS Ad]

Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.3.181.0_x64__dt26b99r8h8gj [2019-09-17] (Realtek Semiconductor Corp)

WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2349.2.0_x64__cv1g1gvanyjgm [2023-12-18] (WhatsApp Inc.) [Startup Task]
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-2216129787-3453094354-8666996-1006_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Michael\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.22304.2\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2216129787-3453094354-8666996-1006_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\Michael\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.19106.2\x64\Microsoft.Teams.AddinLoader.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-2216129787-3453094354-8666996-1006_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> C:\Users\Michael\AppData\Local\Microsoft\Teams\current\Teams.exe (Microsoft Corporation -> Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-2216129787-3453094354-8666996-1006_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\Michael\Dropbox [2018-03-03 15:31]

CustomCLSID: HKU\S-1-5-21-2216129787-3453094354-8666996-1006_Classes\CLSID\{FBD6D0C9-8321-B4A3-ABE5-BC96E3FFB74C}\InprocServer32 -> C:\WINDOWS\system32\ole32.dll (Microsoft Windows -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [     AcronisDrive] -> {5D74FD4B-4EFB-4586-8022-8637BBE40970} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64_24_5_22510.dll [2019-11-18] (Acronis International GmbH -> )

ShellIconOverlayIdentifiers: [     AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64_24_5_22510.dll [2019-11-18] (Acronis International GmbH -> )

ShellIconOverlayIdentifiers: [     AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64_24_5_22510.dll [2019-11-18] (Acronis International GmbH -> )

ShellIconOverlayIdentifiers: [     AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64_24_5_22510.dll [2019-11-18] (Acronis International GmbH -> )

ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2020-03-04] (Notepad++ -> )

ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ContextMenuHandlers1: [FineReader11ContextMenu] -> {79E48320-C6B5-49F1-992B-571D53586885} => C:\Program Files (x86)\ABBYY FineReader 11\FRIntegration.x64.dll [2011-08-18] (ABBYY SOLUTIONS LIMITED -> ABBYY.)

ContextMenuHandlers1-x32: [FineReader9ContextMenu] -> {59A3380E-5305-4cea-BD99-4F2FF510C91F} => C:\Program Files (x86)\ABBYY FineReader 9.0\FRIntegration.dll [2008-06-07] (ABBYY Software House -> ABBYY Software Ltd)

ContextMenuHandlers1: [PDFXChange Editor Context menu] -> {2ACD35AB-F74A-4C20-AA9B-2DE80081626D} => C:\Program Files\Tracker Software\Shell Extensions\XCShellMenu.x64.dll [2016-11-28] (Tracker Software Products (Canada) Ltd -> Tracker Software Products (Canada) Ltd.)

ContextMenuHandlers1: [SnagItMainShellExt] -> {CF74B903-3389-469c-B3B6-0204D204FCBD} => C:\Program Files\TechSmith\Snagit 2020\DLLx64\SnagitShellExt64.dll [2022-02-25] (TechSmith Corporation -> TechSmith Corporation)

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2024-01-04] (Malwarebytes Inc. -> Malwarebytes)

ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)

ContextMenuHandlers4: [SnagItMainShellExt] -> {CF74B903-3389-469c-B3B6-0204D204FCBD} => C:\Program Files\TechSmith\Snagit 2020\DLLx64\SnagitShellExt64.dll [2022-02-25] (TechSmith Corporation -> TechSmith Corporation)

ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.69.0.dll [2023-12-18] (Dropbox, Inc -> Dropbox, Inc.)

ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Keine Datei

ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_250db833a1cd577e\igfxDTCM.dll [2018-02-28] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)

ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers6: [FineReader11ContextMenu] -> {79E48320-C6B5-49F1-992B-571D53586885} => C:\Program Files (x86)\ABBYY FineReader 11\FRIntegration.x64.dll [2011-08-18] (ABBYY SOLUTIONS LIMITED -> ABBYY.)

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2024-01-04] (Malwarebytes Inc. -> Malwarebytes)

ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)
 

==================== Codecs (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Drivers32: [vidc.i420] => C:\WINDOWS\system32\lvcod64.dll [175392 2012-10-26] (Logitech, Inc. -> Logitech Inc.)

HKLM\...\Drivers32: [vidc.i420] => C:\Windows\SysWOW64\lvcodec2.dll [305000 2012-10-26] (Logitech, Inc. -> Logitech Inc.)
 

==================== Verknüpfungen & WMI ========================
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
 

2018-08-14 13:49 - 2018-08-14 13:49 - 001874432 _____ () [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\cairo.dll

2018-08-14 13:49 - 2018-08-14 13:49 - 000790528 _____ () [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\fontconfig.dll

2018-08-14 13:49 - 2018-08-14 13:49 - 001041920 _____ () [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\harfbuzz-vs14.dll

2018-08-14 13:49 - 2018-08-14 13:49 - 000060928 _____ () [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\iconv.dll

2018-12-11 13:09 - 2018-12-11 13:09 - 000790016 _____ () [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\libhpdf.dll

2018-08-14 13:49 - 2018-08-14 13:49 - 000257536 _____ () [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\libpng16.dll

2018-08-14 13:49 - 2018-08-14 13:49 - 001294336 _____ () [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\libxml2.dll

2019-07-01 15:23 - 2019-07-01 15:23 - 016857600 _____ () [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\opencv_core410.dll

2019-07-01 15:23 - 2019-07-01 15:23 - 046091264 _____ () [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\opencv_imgproc410.dll

2018-08-14 13:49 - 2018-08-14 13:49 - 000086528 _____ () [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\zlib1.dll

2018-11-15 13:24 - 2006-02-23 11:35 - 000020480 _____ () [Datei ist nicht signiert] C:\WINDOWS\System32\FritzColorPort64.dll

2014-12-19 10:30 - 2012-06-21 07:25 - 000113152 _____ () [Datei ist nicht signiert] C:\WINDOWS\System32\redmon64.dll

2018-08-14 13:49 - 2018-08-14 13:49 - 000088576 _____ (Free Software Foundation) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\intl.dll

2016-01-08 11:28 - 2016-01-08 11:28 - 000356352 _____ (hxxp://hunspell.sourceforge.net/) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\libhunspell.dll

2023-05-18 19:08 - 2022-07-15 15:00 - 000094720 _____ (Igor Pavlov) [Datei ist nicht signiert] C:\Program Files\7-Zip\7-zip.dll

2020-01-29 08:16 - 2020-01-29 08:16 - 000649552 _____ (LEAD Technologies, Inc. -> LEAD Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\lfCmpX.DLL

2020-01-29 08:16 - 2020-01-29 08:16 - 000175952 _____ (LEAD Technologies, Inc. -> LEAD Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\lfFaxX.DLL

2020-01-29 08:16 - 2020-01-29 08:16 - 000284496 _____ (LEAD Technologies, Inc. -> LEAD Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\lfPngX.DLL

2020-01-29 08:16 - 2020-01-29 08:16 - 000289616 _____ (LEAD Technologies, Inc. -> LEAD Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\lfTifX.DLL

2020-01-29 08:16 - 2020-01-29 08:16 - 000470352 _____ (LEAD Technologies, Inc. -> LEAD Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\Ltdisx.dll

2020-01-29 08:16 - 2020-01-29 08:16 - 000441680 _____ (LEAD Technologies, Inc. -> LEAD Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\Ltefxx.dll

2020-01-29 08:16 - 2020-01-29 08:16 - 000588112 _____ (LEAD Technologies, Inc. -> LEAD Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\Ltfilx.dll

2020-01-29 08:16 - 2020-01-29 08:16 - 000374608 _____ (LEAD Technologies, Inc. -> LEAD Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\Ltimgclrx.dll

2020-01-29 08:16 - 2020-01-29 08:16 - 001983312 _____ (LEAD Technologies, Inc. -> LEAD Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\Ltimgcorx.dll

2020-01-29 08:16 - 2020-01-29 08:16 - 000319312 _____ (LEAD Technologies, Inc. -> LEAD Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\Ltimgefxx.dll

2020-01-29 08:16 - 2020-01-29 08:16 - 000439120 _____ (LEAD Technologies, Inc. -> LEAD Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\Ltimgutlx.dll

2020-01-29 08:16 - 2020-01-29 08:16 - 001515344 _____ (LEAD Technologies, Inc. -> LEAD Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\Ltkrnx.dll

2020-01-29 08:16 - 2020-01-29 08:16 - 000091472 _____ (LEAD Technologies, Inc. -> LEAD Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\Ltthunkutlx.dll

2020-01-29 08:16 - 2020-01-29 08:16 - 000341840 _____ (LEAD Technologies, Inc. -> LEAD Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\Lttwnx.dll

2014-12-19 10:36 - 2013-03-07 22:07 - 000009728 _____ (Luis Cobian) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\Cobian Backup 11\CobStringList.dll

2014-12-19 10:36 - 2013-03-07 22:27 - 002684928 _____ (Luis Cobian, CobianSoft) [Datei ist nicht signiert] C:\Program Files (x86)\Cobian Backup 11\cbEngine.dll

2008-04-11 12:54 - 2008-04-11 12:54 - 000348160 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\MSVCR71.dll

2020-07-16 19:16 - 2020-07-16 19:16 - 001654784 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\WINDOWS\WinSxS\amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_8448b2bd328df189\MFC80U.DLL

2020-07-16 19:16 - 2020-07-16 19:16 - 000054272 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\WINDOWS\WinSxS\amd64_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_bc20f59b0bdd1acd\MFC80DEU.DLL

2014-12-19 14:54 - 2007-04-21 11:36 - 000049152 _____ (PFU LIMITED) [Datei ist nicht signiert] C:\WINDOWS\TWAIN_32\fjscan32\FJSTMKSV.dll

2018-08-14 13:49 - 2018-08-14 13:49 - 000291840 _____ (Red Hat Software) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\pango-1.0.dll

2018-08-14 13:49 - 2018-08-14 13:49 - 000578560 _____ (Red Hat Software) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\pangocairo-1.0.dll

2018-08-14 13:49 - 2018-08-14 13:49 - 000605184 _____ (Red Hat Software) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\pangoft2-1.0.dll

2018-08-14 13:49 - 2018-08-14 13:49 - 000064512 _____ (Red Hat Software) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\pangowin32-1.0.dll

2020-10-19 06:40 - 2020-10-19 06:40 - 000258048 _____ (The Apache Software Foundation) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\Citrix\ICA Client\Receiver\log4net.dll

2018-08-14 13:49 - 2018-08-14 13:49 - 001338368 _____ (The GLib developer community) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\glib-2.0.dll

2018-08-14 13:49 - 2018-08-14 13:49 - 000284160 _____ (The GLib developer community) [Datei ist nicht signiert] C:\Program Files\TechSmith\Snagit 2020\gobject-2.0.dll

2018-11-15 13:24 - 2006-02-23 12:16 - 000047616 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\WINDOWS\System32\AvmColorFax.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\Users\Michael\Downloads\adwcleaner.exe:MBAM.Zone.Identifier [247]

AlternateDataStreams: C:\Users\Michael\Downloads\FRST64 (1).exe:MBAM.Zone.Identifier [240]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
 

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
 

SearchScopes: HKLM -> DefaultScope {2BEB8D3A-B24F-4284-BBD8-B6B30EC1F64E} URL = 

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2020-04-14] (Microsoft Corporation -> Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre-1.8\bin\ssv.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation -> Microsoft Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre-1.8\bin\jp2ssv.dll [2023-03-17] (Oracle America, Inc. -> Oracle Corporation)

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2020-04-14] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation -> Microsoft Corporation)

DPF: HKLM-x32 {A4150320-98EC-4DB6-9BFB-EBF4B6FBEB16} hxxp://10.0.0.239/codebase/DVM_IPCam2.ocx

Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2017-08-15] (Microsoft Corporation -> Microsoft Corporation)

Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2023-10-26] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2023-10-26] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2023-10-26] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2023-10-26] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2023-10-26] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2023-10-26] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2023-10-26] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2023-10-26] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2023-10-26] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2023-10-26] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2023-10-26] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2023-10-26] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2023-10-26] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2023-10-26] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2023-10-26] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2023-10-26] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE trusted site: HKU\S-1-5-21-2216129787-3453094354-8666996-1006\...\localhost -> localhost
 

==================== Hosts Inhalt: =========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2013-08-22 14:25 - 2013-08-22 14:25 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
 

==================== Andere Bereiche ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> %INTEL_DEV_REDIST%redist\intel64_win\mpirt;%INTEL_DEV_REDIST%redist\intel64_win\compiler;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\SQL Anywhere 12\Bin32\;C:\Program Files (x86)\SQL Anywhere 16\Bin32\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\Calibre2\;C:\Program Files (x86)\Common Files\Acronis\VirtualFile\;C:\Program Files (x86)\Common Files\Acronis\VirtualFile64\;C:\Program Files (x86)\Common Files\Acronis\FileProtector\;C:\Program Files (x86)\Common Files\Acronis\FileProtector64\;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\;C:\Program Files (x86)\Microsoft SQL Server\110\Tools\Binn\;C:\Program Files (x86)\Microsoft SQL Server\110\DTS\Binn\;C:\Program Files (x86)\Windows Kits\10\Microsoft Application Virtualization\Sequencer\

HKU\S-1-5-21-2216129787-3453094354-8666996-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg

HKU\S-1-5-21-2216129787-3453094354-8666996-1006\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg

HKU\S-1-5-21-2216129787-3453094354-8666996-500\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg

HKU\S-1-5-80-4287524181-3401991209-718407576-1481970793-3068686015\Control Panel\Desktop\\Wallpaper -> 

DNS Servers: 192.168.178.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)

 ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

HKLM\...\StartupApproved\Run: => "Acronis Scheduler2 Service"

HKLM\...\StartupApproved\Run32: => "ConnectionCenter"

HKLM\...\StartupApproved\Run32: => "Redirector"

HKLM\...\StartupApproved\Run32: => "AcronisTibMounterMonitor"

HKLM\...\StartupApproved\Run32: => "TrueImageMonitor.exe"

HKU\S-1-5-21-2216129787-3453094354-8666996-1006\...\StartupApproved\Run: => "Copernic Desktop Search"

HKU\S-1-5-21-2216129787-3453094354-8666996-1006\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{3202093C-7303-4E61-9730-9C249FBA4DE7}] => (Allow) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe => Keine Datei

FirewallRules: [{7FCBF10F-DA31-42C0-A495-1DFBF641FD86}] => (Allow) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe => Keine Datei

FirewallRules: [{E1A7A692-3026-459E-93DA-BA777BCB957E}] => (Block) C:\Program Files (x86)\Avira\SoftwareUpdater\avirasoftwareupdatertoastnotificationsbridge.exe => Keine Datei

FirewallRules: [{7FA6F59B-289D-4EB7-BBBB-0CB8F0C8BAF7}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{B92AC3E5-5062-44BD-BB31-4076AC2BC800}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{BC2C1F71-6304-41F8-B4A5-521892152564}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{670165E9-45F7-4344-BC16-047AFA229A28}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{9006E715-8272-4549-A029-EDB5D70CC28F}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe (Acronis International GmbH -> )

FirewallRules: [{DD54CC31-A970-40CC-9BF6-78CAD2ED8877}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\Home\report_sender.exe (Acronis International GmbH -> )

FirewallRules: [{B0B2A588-C78F-4457-866E-9433E0F60DD1}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\LicenseActivator.exe (Acronis International GmbH -> )

FirewallRules: [{FD104E29-E090-4D5D-A427-EEEB8A0F1856}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\ga_service.exe (Acronis International GmbH -> )

FirewallRules: [{F5354673-CF86-494F-B2AB-E697CB626168}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe (Acronis International GmbH -> )

FirewallRules: [{8331E688-6B1C-4364-A52B-837DD3AF7149}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe (Acronis International GmbH -> Acronis International GmbH)

FirewallRules: [{D76460BA-2AC7-472E-B0CB-C12C7F4269B3}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\acronis_drive.exe (Acronis International GmbH -> )

FirewallRules: [{03BC57BB-A75D-454D-B973-C91A42F0D487}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\SystemReport.exe (Acronis International GmbH -> )

FirewallRules: [{582AAFFB-3A7C-4A13-A88A-9B899759B8FE}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\MediaBuilder.exe (Acronis International GmbH -> )

FirewallRules: [{88A7100E-2C74-4168-B4DA-308ECFAE7CD4}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\TrueImageHome\TrueImageHomeService.exe (Acronis International GmbH -> )

FirewallRules: [{617DE38A-F03E-4F17-91D0-8A9C709F9B05}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageTools.exe (Acronis International GmbH -> )

FirewallRules: [{A9842956-A171-4A46-BDC2-912DECCC032B}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis International GmbH -> )

FirewallRules: [{80304B04-3B08-4573-9387-09E71BE20B2F}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImage.exe (Acronis International GmbH -> )

FirewallRules: [{5661F7D1-EC98-4354-94A0-AB3DB5489831}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe (Acronis International GmbH -> Acronis International GmbH)

FirewallRules: [{C1005DDC-43DB-453D-9FD0-A8209908026A}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (Acronis International GmbH -> )

FirewallRules: [{56CA0644-3333-48A3-84FB-4E36BC7FD021}] => (Block) C:\program files (x86)\instar\instar camera tool\instar camera tool.exe (INSTAR Deutschland GmbH) [Datei ist nicht signiert]

FirewallRules: [{EFD8E259-CC28-4460-8E72-54386BE19671}] => (Block) C:\program files (x86)\instar\instar camera tool\instar camera tool.exe (INSTAR Deutschland GmbH) [Datei ist nicht signiert]

FirewallRules: [UDP Query User{137DD80B-B1D9-4F65-81E2-03068318FDC4}C:\program files (x86)\instar\instar camera tool\instar camera tool.exe] => (Allow) C:\program files (x86)\instar\instar camera tool\instar camera tool.exe (INSTAR Deutschland GmbH) [Datei ist nicht signiert]

FirewallRules: [TCP Query User{6E04982D-2D44-472D-BCF7-DA9E53552833}C:\program files (x86)\instar\instar camera tool\instar camera tool.exe] => (Allow) C:\program files (x86)\instar\instar camera tool\instar camera tool.exe (INSTAR Deutschland GmbH) [Datei ist nicht signiert]

FirewallRules: [{BDB56D3C-3502-4A48-8646-A22C215FD424}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{F93758B1-4EE9-43EE-8500-6FFB604FCB15}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{A2251CC3-B721-49F5-A927-B557E7288D22}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{10A208E5-5F75-4050-9B73-4B8A6EA15FA9}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{7B9D054E-6448-4001-BA19-8CEC739D991A}] => (Allow) C:\Program Files\HP\HP LaserJet M101-M106\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> HP Inc.)

FirewallRules: [{18FF3AD1-7357-4110-B884-24BCFE33BD59}] => (Allow) LPort=5357

FirewallRules: [{2A21F2C1-0188-4AC4-8449-E0F228080B22}] => (Allow) C:\Program Files\HP\HP LaserJet M101-M106\Bin\DeviceSetup.exe (Hewlett Packard -> HP Inc.)

FirewallRules: [{735D400E-78B8-40C7-88A7-4E77540437B4}] => (Allow) C:\Program Files\HP\HP LaserJet M101-M106\bin\EWSProxy.exe (Hewlett Packard -> HP Inc.)

FirewallRules: [{628BF9B0-F4D7-45D8-A2C8-47655435AD8D}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{36471B40-5969-4A0B-B724-37BB4A9584EA}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{01F64546-0599-43D8-A10E-AB94B5AB2D05}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{11D6F1C5-97A3-42FE-A37E-4B8F419CA7B1}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{B77DB1C8-D16E-4C80-AE27-D939002B8485}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{7FBD0916-C44D-4BE6-A316-62F62D728156}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [UDP Query User{AE63D004-5664-4220-BAC9-28D94EEBB2D0}C:\program files (x86)\rohos\welcome.exe] => (Allow) C:\program files (x86)\rohos\welcome.exe => Keine Datei

FirewallRules: [TCP Query User{F24E0676-3937-41DC-9615-7D3D65344251}C:\program files (x86)\rohos\welcome.exe] => (Allow) C:\program files (x86)\rohos\welcome.exe => Keine Datei

FirewallRules: [{8460DD34-2C3A-48A1-B290-DF647AEDAC08}] => (Allow) C:\Windows\System32\LogonUI.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{8DE6F01C-BFD1-440E-9E75-7F89F16A3642}] => (Allow) C:\Windows\System32\LogonUI.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{F0828781-5332-4502-A28A-1A31C7594413}] => (Allow) C:\Windows\System32\LogonUI.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{0DF9C0D1-8E08-4768-9DD4-4FBBF1C0E4C3}] => (Allow) C:\Windows\System32\LogonUI.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [UDP Query User{B8FF3D23-E450-46CE-A019-376D0E2AA5A3}C:\program files\transmission\transmission-qt.exe] => (Allow) C:\program files\transmission\transmission-qt.exe => Keine Datei

FirewallRules: [TCP Query User{CFD8701D-465A-4353-9F1D-45428A0A6825}C:\program files\transmission\transmission-qt.exe] => (Allow) C:\program files\transmission\transmission-qt.exe => Keine Datei

FirewallRules: [{2D272AD8-53D1-4732-803C-0878A0C567D2}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{AA3E919F-C581-4798-A1F0-16743886E751}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{40430C97-1136-41A4-8713-4089D7F5B690}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{C76A8D87-E154-4055-888A-128F5284C455}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{C21CD597-FAF0-4091-AC8D-6A3DE0467FEE}] => (Allow) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe => Keine Datei

FirewallRules: [{85D6C233-2F54-4762-A55B-C6A5F7BFA0E4}] => (Allow) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe => Keine Datei

FirewallRules: [{141E5018-9DF5-4536-82CE-23A912864BE1}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{594275C9-3149-4774-BAC3-A6190249D54B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [TCP Query User{4B8C5DA1-643E-4D96-920E-2D5D62BEF918}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [UDP Query User{36874983-D06A-45ED-83B4-22586B817DC5}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [TCP Query User{E7DA08B6-B124-4B75-AF53-58BCDA3BE7CD}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [UDP Query User{C7B3D987-E38F-4E3C-A9C5-FD35FFCCC0E1}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [TCP Query User{3E3A7B8B-6E88-4DE8-9A8A-0F004006FB36}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [UDP Query User{E2A4A359-7EF7-4E55-BEC0-0F3EE50DC358}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [TCP Query User{7BBE6C67-F2A4-495B-B8DD-9C9EAAC84452}C:\users\wagmann\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\wagmann\appdata\roaming\dropbox\bin\dropbox.exe => Keine Datei

FirewallRules: [UDP Query User{BBD1C7A7-4F10-41A6-A246-773B988B0122}C:\users\wagmann\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\wagmann\appdata\roaming\dropbox\bin\dropbox.exe => Keine Datei

FirewallRules: [TCP Query User{DCCB0C0E-E0DC-44D1-B240-695A6F5C1A3C}C:\program files (x86)\copernic\desktopsearch\copernic.desktopsearch.exe] => (Allow) C:\program files (x86)\copernic\desktopsearch\copernic.desktopsearch.exe => Keine Datei

FirewallRules: [UDP Query User{4E5656D0-CE09-4C82-8A6A-605EC54C87EC}C:\program files (x86)\copernic\desktopsearch\copernic.desktopsearch.exe] => (Allow) C:\program files (x86)\copernic\desktopsearch\copernic.desktopsearch.exe => Keine Datei

FirewallRules: [{55410149-ED2D-4A50-B304-97AD7DCAF1C4}] => (Allow) C:\Users\wagmann\AppData\Local\StarLeaf\Breeze\1\Breeze.exe (Starleaf Ltd -> StarLeaf)

FirewallRules: [{D73281C7-BDB7-468D-8482-A4898529273E}] => (Allow) C:\Users\wagmann\AppData\Local\StarLeaf\Breeze\2\Breeze.exe (Starleaf Ltd -> StarLeaf)

FirewallRules: [TCP Query User{D922381D-8AF6-4909-90FA-C554D345E5F7}C:\program files (x86)\copernic\desktopsearch\copernic.desktopsearch.exe] => (Block) C:\program files (x86)\copernic\desktopsearch\copernic.desktopsearch.exe => Keine Datei

FirewallRules: [UDP Query User{10480967-7743-4F21-BB14-5E7CBECA38D3}C:\program files (x86)\copernic\desktopsearch\copernic.desktopsearch.exe] => (Block) C:\program files (x86)\copernic\desktopsearch\copernic.desktopsearch.exe => Keine Datei

FirewallRules: [{63D4F583-191A-4F60-A716-28FE82B91B7C}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation-Wireless Connectivity Solutions -> )

FirewallRules: [TCP Query User{4EAE3EB8-6F4C-4BB6-B8C9-D837BA3C09A8}C:\program files (x86)\keepass password safe 2\keepass.exe] => (Allow) C:\program files (x86)\keepass password safe 2\keepass.exe (Open Source Developer, Dominik Reichl -> Dominik Reichl)

FirewallRules: [UDP Query User{B6259554-160E-40A8-8388-0AB4B7D4CE3E}C:\program files (x86)\keepass password safe 2\keepass.exe] => (Allow) C:\program files (x86)\keepass password safe 2\keepass.exe (Open Source Developer, Dominik Reichl -> Dominik Reichl)

FirewallRules: [{B8DF855B-7E94-4205-B485-1CFD1A1468C3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{56A315BD-BF9C-4CBD-9143-13FFD186F898}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{2B46DA6E-FBF4-4BB4-A317-BCA1E50BF108}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{42E50DCC-BFFF-4FE1-AA49-819D8736FD09}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [TCP Query User{53F9205D-2170-44F6-ABD1-E61E3827B10B}C:\users\michael\appdata\local\temp\_istmp1.dir\_ins5576._mp] => (Allow) C:\users\michael\appdata\local\temp\_istmp1.dir\_ins5576._mp => Keine Datei

FirewallRules: [UDP Query User{B07C0303-881F-4BDB-B3CA-9B9B6AC77B01}C:\users\michael\appdata\local\temp\_istmp1.dir\_ins5576._mp] => (Allow) C:\users\michael\appdata\local\temp\_istmp1.dir\_ins5576._mp => Keine Datei

FirewallRules: [TCP Query User{A40C663E-121D-4416-9F7D-F54AABD6112D}C:\program files (x86)\fritz!\frifax32.exe] => (Allow) C:\program files (x86)\fritz!\frifax32.exe => Keine Datei

FirewallRules: [UDP Query User{7319F006-B6C0-4D8F-B2C8-273675C7A623}C:\program files (x86)\fritz!\frifax32.exe] => (Allow) C:\program files (x86)\fritz!\frifax32.exe => Keine Datei

FirewallRules: [TCP Query User{81C0B524-782F-4A6E-A82E-AC8157B9B9AC}C:\users\michael\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light] => (Allow) C:\users\michael\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light => Keine Datei

FirewallRules: [UDP Query User{92B0F230-57A8-45E9-AE7D-22834323996B}C:\users\michael\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light] => (Allow) C:\users\michael\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light => Keine Datei

FirewallRules: [TCP Query User{50705C51-DB84-437A-80F6-6268AC7B1E81}C:\program files (x86)\jivexdvlight\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\jivexdvlight\jre\bin\javaw.exe

FirewallRules: [UDP Query User{31337D38-A9F2-4A9C-B15E-54623701E616}C:\program files (x86)\jivexdvlight\jre\bin\javaw.exe] => (Allow) C:\program files (x86)\jivexdvlight\jre\bin\javaw.exe

FirewallRules: [TCP Query User{52F7589F-9F82-41A3-AC5C-31001FD36ACC}C:\program files (x86)\keepass password safe 2\keepass.exe] => (Allow) C:\program files (x86)\keepass password safe 2\keepass.exe (Open Source Developer, Dominik Reichl -> Dominik Reichl)

FirewallRules: [UDP Query User{3988CFE6-008E-461A-B949-62F366AA09B2}C:\program files (x86)\keepass password safe 2\keepass.exe] => (Allow) C:\program files (x86)\keepass password safe 2\keepass.exe (Open Source Developer, Dominik Reichl -> Dominik Reichl)

FirewallRules: [TCP Query User{8F9E29F4-AFCF-440C-A925-27D285DC2A42}C:\users\michael\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\michael\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [UDP Query User{C7596447-4F5E-4C5D-9951-E0CEB72AED0A}C:\users\michael\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\michael\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [TCP Query User{3F953580-5756-4B81-A401-29EB4F1130A5}C:\users\michael\appdata\roaming\jwrapper-bmwdownloadmanager\jwrapper-windows32jre-00077183754-complete\bin\bmwdownloadmanagerlauncher.exe] => (Allow) C:\users\michael\appdata\roaming\jwrapper-bmwdownloadmanager\jwrapper-windows32jre-00077183754-complete\bin\bmwdownloadmanagerlauncher.exe (Bayerische Motoren Werke AG -> )

FirewallRules: [UDP Query User{2800E893-1E21-458D-9987-3BC682B518FD}C:\users\michael\appdata\roaming\jwrapper-bmwdownloadmanager\jwrapper-windows32jre-00077183754-complete\bin\bmwdownloadmanagerlauncher.exe] => (Allow) C:\users\michael\appdata\roaming\jwrapper-bmwdownloadmanager\jwrapper-windows32jre-00077183754-complete\bin\bmwdownloadmanagerlauncher.exe (Bayerische Motoren Werke AG -> )

FirewallRules: [TCP Query User{655FC41D-1FC9-4EED-91D9-EB3065141D3E}C:\users\michael\appdata\roaming\jwrapper-bmwdownloadmanager\jwrapper-windows32jre-00077183754-complete\bin\bmwdownloadmanager.exe] => (Allow) C:\users\michael\appdata\roaming\jwrapper-bmwdownloadmanager\jwrapper-windows32jre-00077183754-complete\bin\bmwdownloadmanager.exe (Bayerische Motoren Werke AG -> )

FirewallRules: [UDP Query User{96C285EF-3181-47F5-AC66-66EC820A977C}C:\users\michael\appdata\roaming\jwrapper-bmwdownloadmanager\jwrapper-windows32jre-00077183754-complete\bin\bmwdownloadmanager.exe] => (Allow) C:\users\michael\appdata\roaming\jwrapper-bmwdownloadmanager\jwrapper-windows32jre-00077183754-complete\bin\bmwdownloadmanager.exe (Bayerische Motoren Werke AG -> )

FirewallRules: [TCP Query User{BB25BEE2-85EE-40B4-BBDF-EDD32E4C23F8}C:\users\michael\appdata\roaming\jwrapper-bmwdownloadmanager\jwrapper-windows32jre-00077183754-complete\bin\bmwdownloadmanagerapp.exe] => (Allow) C:\users\michael\appdata\roaming\jwrapper-bmwdownloadmanager\jwrapper-windows32jre-00077183754-complete\bin\bmwdownloadmanagerapp.exe (Bayerische Motoren Werke AG -> )

FirewallRules: [UDP Query User{382698D4-3436-4BC7-9736-3CA33015268C}C:\users\michael\appdata\roaming\jwrapper-bmwdownloadmanager\jwrapper-windows32jre-00077183754-complete\bin\bmwdownloadmanagerapp.exe] => (Allow) C:\users\michael\appdata\roaming\jwrapper-bmwdownloadmanager\jwrapper-windows32jre-00077183754-complete\bin\bmwdownloadmanagerapp.exe (Bayerische Motoren Werke AG -> )

FirewallRules: [TCP Query User{A7B897D5-6A8D-4AC8-834D-E7DAFBF979FA}C:\users\michael\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\michael\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [UDP Query User{744F405E-31B6-4E35-A279-E17CA39AB098}C:\users\michael\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\michael\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [TCP Query User{B4EE7B65-F00F-4921-B645-1EF5E43DDE94}E:\1pc_new\privat\jakob_skoliose\roentgen_jakob2021_04\dcmview\teamview.exe] => (Allow) E:\1pc_new\privat\jakob_skoliose\roentgen_jakob2021_04\dcmview\teamview.exe => Keine Datei

FirewallRules: [UDP Query User{1477F940-541B-4744-B47B-B389FC8C5347}E:\1pc_new\privat\jakob_skoliose\roentgen_jakob2021_04\dcmview\teamview.exe] => (Allow) E:\1pc_new\privat\jakob_skoliose\roentgen_jakob2021_04\dcmview\teamview.exe => Keine Datei

FirewallRules: [TCP Query User{624C27E5-3608-41F3-92D6-9D186A5F41D9}E:\1pc_new\privat\roentgen_jakob2021_04\dcmview\teamview.exe] => (Allow) E:\1pc_new\privat\roentgen_jakob2021_04\dcmview\teamview.exe => Keine Datei

FirewallRules: [UDP Query User{D8E80639-4182-4D31-A333-BA739A6052FB}E:\1pc_new\privat\roentgen_jakob2021_04\dcmview\teamview.exe] => (Allow) E:\1pc_new\privat\roentgen_jakob2021_04\dcmview\teamview.exe => Keine Datei

FirewallRules: [{C7896E37-B73A-4439-9DCB-D239B90956C1}] => (Allow) C:\Users\Michael\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)

FirewallRules: [{024E7580-A49A-4563-824D-6CD956424416}] => (Allow) C:\Users\Michael\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei

FirewallRules: [{9A2ECEC3-C2A7-4803-8522-E550450760CB}] => (Allow) C:\Users\Michael\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei

FirewallRules: [{AE51E1C7-69AA-4132-867E-2949302960DE}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei

FirewallRules: [{CBF44C23-4C0A-4AF7-B2D4-C6E595DC4E2D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei

FirewallRules: [{4CBF85DA-3F8C-422E-8BFB-2C52F4C6C306}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei

FirewallRules: [{BF61FF1B-7C40-4F08-BABE-911076A2C79D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei

FirewallRules: [{0969922D-CAD7-47F2-9E1F-D423AB83D21E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{18700C0B-7AA7-405D-8736-FBB12D42C6AA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{B0351445-2E28-4C54-AD64-B799D01E538A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{7D86C122-8A4D-49F9-9AA6-11BB00C060A5}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{81D7F28A-B8F5-4B52-AB68-061B3730A314}] => (Allow) LPort=8299

FirewallRules: [{935897F1-0DE2-4BC7-A612-0644266EEE0F}] => (Allow) C:\Program Files\HP\HP ColorLaserJet MFP M278-M281\bin\EWSProxy.exe (HP Inc. -> HP Inc.)

FirewallRules: [{E0F3E243-5910-4865-9835-F43F5A098939}] => (Allow) C:\Program Files\HP\HP ColorLaserJet MFP M278-M281\bin\FaxApplications.exe (HP Inc. -> HP Inc.)

FirewallRules: [{E419A5DE-CFEC-4ECD-81E0-32531970BECF}] => (Allow) C:\Program Files\HP\HP ColorLaserJet MFP M278-M281\bin\DigitalWizards.exe (HP Inc. -> HP Inc.)

FirewallRules: [{A6A21615-A451-4EC9-BDFC-48DE8D4A393D}] => (Allow) C:\Program Files\HP\HP ColorLaserJet MFP M278-M281\bin\SendAFax.exe (HP Inc. -> HP Inc.)

FirewallRules: [{B7659C50-1663-49BA-AB04-DE61D1A6F21E}] => (Allow) C:\Program Files\HP\HP ColorLaserJet MFP M278-M281\bin\FaxPrinterUtility.exe (HP Inc. -> HP Inc.)

FirewallRules: [{3C0EF093-D62A-4BB3-B77D-FCE8BD4CA504}] => (Allow) C:\Program Files\HP\HP ColorLaserJet MFP M278-M281\Bin\DeviceSetup.exe (HP Inc. -> HP Inc.)

FirewallRules: [{70CA0D11-1D6D-464A-B9C9-92A4CCC74512}] => (Allow) C:\Program Files\HP\HP ColorLaserJet MFP M278-M281\Bin\HPNetworkCommunicatorCom.exe (HP Inc. -> HP Inc.)

FirewallRules: [{C065C476-7E3C-4D50-BD50-70526291F001}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => Keine Datei

FirewallRules: [{7822996F-DD1C-4210-A05B-C278CCBF01CC}] => (Allow) C:\Program Files\MiniTool ShadowMaker\AgentService.exe => Keine Datei

FirewallRules: [{049167F6-4F0F-4485-BA85-D5C88EC09D0B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.211.916.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{5AAB1800-42ED-4F78-B187-E39300A9174C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.211.916.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{AB1C4957-0385-4BDF-B2CA-050B2C7CBF72}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.211.916.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{00186C31-73F8-489B-9B55-CF5A61394F6A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.211.916.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{21376AAF-1321-42CB-A7CB-9821F04F49CE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.211.916.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{EA83A251-BBD4-4855-B4C8-257D5E601CF8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.211.916.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{43190AE0-BCC8-4CD2-98A6-B5012F42651C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.211.916.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{B2EB5812-ED6C-47E8-9A3D-DEF115F28418}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.211.916.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{AAE6E314-060F-40A3-B9A5-6D2581E408EE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.211.916.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{15473598-DF6F-48A7-A132-E3B3CC0AB819}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.211.916.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{555F46A2-3CE6-4E01-A146-ED5E29207EDC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.97.3404.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{FD13257B-A18D-4D52-9909-227F1A4ED9A5}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.97.3404.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{6DC8B7B6-15D0-4313-A8AB-BBAD9F47CB67}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.97.3404.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{0D582380-AADF-42B0-9396-067CC7D618A5}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.97.3404.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [TCP Query User{C0BEB1BB-36AE-4EE6-9130-476ED299F32E}C:\m4_personal_v7_1\med2d\m2d\run\draft.exe] => (Allow) C:\m4_personal_v7_1\med2d\m2d\run\draft.exe => Keine Datei

FirewallRules: [UDP Query User{937EC2EF-3C6C-4476-BCAC-D4E17607C8C9}C:\m4_personal_v7_1\med2d\m2d\run\draft.exe] => (Allow) C:\m4_personal_v7_1\med2d\m2d\run\draft.exe => Keine Datei

FirewallRules: [{9539B313-7B7D-45DE-B969-F698AE880D76}] => (Allow) C:\Program Files (x86)\Citrix\ICA Client\CitrixEnterpriseBrowser\CitrixEnterpriseBrowser.exe (Citrix Systems, Inc. -> Citrix Systems, Inc.)

FirewallRules: [{BFF673F1-A661-45C5-A8CB-597A72742F03}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{C5A3EEFC-CDF0-4EC2-8CA1-F50A89CCFE4E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{5F456C83-DF52-4F07-815F-871F29CE7A07}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{E82AA6E0-6EFE-4C45-B80E-BDD74421482D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{806C537E-A935-47B7-8DFB-F2DA10BF7B30}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{56597A11-4404-4993-AEDB-01CB3F42F483}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{92DD5A28-BC6D-4545-A83B-5EBAC7DE5B8E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{B27D876A-168E-4DF6-9AD0-1AF4F04E68A2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{803196CA-4ECB-49F3-A63F-304009C2F585}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{01C2B5E7-9D34-45D7-9909-C216F8F0CE2F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.226.1187.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{7026E440-C3F9-4D45-843B-67BF76C2B428}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\120.0.2210.91\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{8D26A5B5-E377-45C0-8A42-546A43C7A935}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)

FirewallRules: [{A16FC6D6-5C0B-4040-8336-EEFB1450272F}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)

FirewallRules: [{3D9AF204-AAB6-47BD-AC06-39DA9CC3259D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.110.3218.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{FC419DD7-B88E-44B2-993E-13BD85219C2E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.110.3218.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{859370A9-DB42-4334-ADE8-8519FC0D2628}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.110.3218.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{E6C171CD-2B80-4F36-ABA6-DC1439F5925B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.110.3218.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{F4623946-A273-4421-98E2-5689E69342BC}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

DomainProfile\AuthorizedApplications: [C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe] => Enabled:Logitech Harmony Remote Software 7

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Logitech\Logitech Harmony Remote Software 7\HarmonyRemote.exe] => Enabled:Logitech Harmony Remote Software 7
 

==================== Wiederherstellungspunkte =========================
 

18-12-2023 09:38:37 Windows-Sicherung

04-01-2024 18:01:25 Windows-Sicherung
 

==================== Fehlerhafte Geräte im Gerätemanager ============
 

Name: Intel(R) Ethernet Connection (4) I219-V

Description: Intel(R) Ethernet Connection (4) I219-V

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Intel Corporation

Service: e1i65x64

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Fehlereinträge in der Ereignisanzeige: ========================
 

Applikationsfehler:

==================

Error: (01/04/2024 10:38:24 PM) (Source: CertEnroll) (EventID: 87) (User: NT-AUTORITÄT)

Description: Fehler bei der SCEP-Zertifikatregistrierung für WORKGROUP\PCWAGMANNHOME$ über https://INTC-KeyId-5e73c89aa3e902b272b9f0741f7d8730e3ec724a.microsoftaik.azure.net/templates/Aik/scep:
 

SubmitDone

Submit(Request): Bad Request

{"Message":"Attestation statement cannot be verified, rejecting request: 0x80070057."}

HTTP/1.1 400 Bad Request

Date: Thu, 04 Jan 2024 21:38:31 GMT

Content-Length: 86

Content-Type: application/json; charset=utf-8

X-Content-Type-Options: nosniff

Strict-Transport-Security: max-age=31536000;includeSubDomains

x-ms-request-id: 6eb0fd44-0c14-4105-b14f-b1a4274317f9
 

Methode: POST(1891ms)

Phase: SubmitDone

Ungültige Anforderung (400). 0x80190190 (-2145844848 HTTP_E_STATUS_BAD_REQUEST)
 

Error: (01/04/2024 07:21:01 PM) (Source: COM) (EventID: 10031) (User: )

Description: Eine das Marshalling aufhebende Richtlinienprüfung wurde ausgeführt, als das Marshalling eines benutzerdefinierten gemarshallten Objekts aufgehoben wurde. Die Klasse "{BE88F957-42CC-4DA7-92CF-9BC35C5D5EE2}" wurde abgelehnt.
 

Error: (01/04/2024 07:20:59 PM) (Source: COM) (EventID: 10031) (User: )

Description: Eine das Marshalling aufhebende Richtlinienprüfung wurde ausgeführt, als das Marshalling eines benutzerdefinierten gemarshallten Objekts aufgehoben wurde. Die Klasse "{BE88F957-42CC-4DA7-92CF-9BC35C5D5EE2}" wurde abgelehnt.
 

Error: (01/04/2024 07:19:44 PM) (Source: Windows Backup) (EventID: 4104) (User: )

Description: Die Sicherung war nicht erfolgreich. Fehler: Der Vorgang konnte nicht erfolgreich abgeschlossen werden, da die Datei einen Virus oder möglicherweise unerwünschte Software enthält. (0x800700E1).
 

Error: (01/04/2024 06:28:45 PM) (Source: DbxSvc) (EventID: 281) (User: )

Description: CertFindCertificateInStore failed with: (-2146885628) Das Objekt oder die Eigenschaft wurde nicht gefunden.
 

Error: (01/04/2024 06:28:45 PM) (Source: DbxSvc) (EventID: 281) (User: )

Description: CertFindCertificateInStore failed with: (-2146885628) Das Objekt oder die Eigenschaft wurde nicht gefunden.
 

Error: (01/04/2024 06:07:26 PM) (Source: DbxSvc) (EventID: 281) (User: )

Description: CertFindCertificateInStore failed with: (-2146885628) Das Objekt oder die Eigenschaft wurde nicht gefunden.
 

Error: (01/04/2024 06:07:26 PM) (Source: DbxSvc) (EventID: 281) (User: )

Description: CertFindCertificateInStore failed with: (-2146885628) Das Objekt oder die Eigenschaft wurde nicht gefunden.
 
 

Systemfehler:

=============

Error: (01/04/2024 10:40:59 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)

Description: Der Server "{784E29F4-5EBE-4279-9948-1E8FE941646D}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (01/04/2024 10:38:20 PM) (Source: Service Control Manager) (EventID: 7011) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst AcronisActiveProtectionService erreicht.
 

Error: (01/04/2024 09:54:11 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Acronis Active Protection (TM) Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/04/2024 09:54:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Intel(R) Content Protection HECI Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (01/04/2024 09:54:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "ABBYY FineReader 11 CE Licensing Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (01/04/2024 09:54:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Intel(R) Content Protection HDCP Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (01/04/2024 09:54:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Citrix Workspace Advanced Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (01/04/2024 09:54:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Acronis Managed Machine Service Mini" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

Windows Defender:

================

Date: 2024-01-04 21:25:41

Description: 

Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.

Überprüfungs-ID: {A117FC55-7C17-42FC-9BCB-9A1B8C33B029}

Überprüfungstyp: Antimalware

Überprüfungsparameter: Vollständige Überprüfung

Benutzer: PCWAGMANNHOME\Michael
 

Date: 2024-01-04 21:25:41

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/Istuni&threatid=265835&enterprise=0

Name: BrowserModifier:Win32/Istuni

Schweregrad: Hoch

Kategorie: Browserveränderer

Pfad: file:_C:\Program Files (x86)\twengoo\ff\instui.exe

Erkennungsursprung: Lokaler Computer

Erkennungstype: Konkret

Erkennungsquelle: Benutzer

Benutzer: PCWAGMANNHOME\Michael

Prozessname: Unknown

Sicherheitsversion: AV: 1.403.1636.0, AS: 1.403.1636.0, NIS: 1.403.1636.0

Modulversion: AM: 1.1.23110.2, NIS: 1.1.23110.2
 

Date: 2024-01-04 18:22:59

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:HTML/Phish!pz&threatid=2147888341&enterprise=0

Name: Trojan:HTML/Phish!pz

Schweregrad: Schwerwiegend

Kategorie: Trojaner

Pfad: file:_\Device\HarddiskVolumeShadowCopy15\Users\Michael\AppData\Local\Thunderbird\Profiles\wdt527s7.default\cache2\entries\0154E410779BC880BC81CF850D8A4F34E62F10E8

Erkennungsursprung: Unbekannt

Erkennungstype: Konkret

Erkennungsquelle: Echtzeitschutz

Benutzer: NT-AUTORITÄT\SYSTEM

Prozessname: C:\Windows\System32\svchost.exe

Sicherheitsversion: AV: 1.403.1636.0, AS: 1.403.1636.0, NIS: 1.403.1636.0

Modulversion: AM: 1.1.23110.2, NIS: 1.1.23110.2
 

Date: 2023-12-20 14:25:16

Description: 

Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.

Überprüfungs-ID: {8440F51F-E523-444C-8FE9-33557E48E609}

Überprüfungstyp: Antimalware

Überprüfungsparameter: Schnellüberprüfung

Benutzer: NT-AUTORITÄT\SYSTEM
 

Date: 2023-12-18 12:29:42

Description: 

Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.

Überprüfungs-ID: {4691F68F-5DB3-45A1-8C83-F8D4B0BCD036}

Überprüfungstyp: Antimalware

Überprüfungsparameter: Schnellüberprüfung

Benutzer: NT-AUTORITÄT\SYSTEM

Event[0]:
 

Date: 2024-01-04 22:37:03

Description: 

Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Security Intelligence aufgetreten. Es wird versucht, zu einer vorherigen Version zurückzukehren.

Security Intelligence versucht: Aktuell

Fehlercode: 0x80501102

Fehlerbeschreibung: Unerwartetes Problem. Installieren Sie bei Bedarf verfügbare Updates, und starten Sie das Programm dann erneut. Informationen zum Installieren von Updates finden Sie unter "Hilfe und Support". 

Security Intelligence-Version: 1.403.1636.0;1.403.1636.0

Modulversion: 1.1.23110.2
 

Date: 2023-09-26 19:17:17

Description: 

Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.

Neue Version der Sicherheitsinformationen: 

%Vorherige Version der Sicherheitsinformationen: 1.397.939.0

Update Source: Microsoft Center zum Schutz vor Schadsoftware

Sicherheitstyp: AntiVirus

Updatetyp: Voll

Benutzer: NT-AUTORITÄT\SYSTEM

Aktuelle Modulversion: 

%Vorherige Modulversion: 1.1.23080.2005

Fehlercode: 0x80070102

Fehlerbeschreibung: Der Wartevorgang wurde abgebrochen. 
 

CodeIntegrity:

===============

Date: 2024-01-04 23:03:01

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.
 
 

==================== Speicherinformationen =========================== 
 

BIOS: Intel Corp. BNKBL357.86A.0052.2017.0918.1346 09/18/2017

Hauptplatine: Intel Corporation NUC7i5BNB

Prozessor: Intel(R) Core(TM) i5-7260U CPU @ 2.20GHz

Prozentuale Nutzung des RAM: 63%

Installierter physikalischer RAM: 8084.01 MB

Verfügbarer physikalischer RAM: 2988.4 MB

Summe virtueller Speicher: 17812.01 MB

Verfügbarer virtueller Speicher: 11291.2 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:231.55 GB) (Free:42.58 GB) (Model: Samsung SSD 960 EVO 250GB) NTFS

Drive d: (System-reserviert) (Fixed) (Total:0.34 GB) (Free:0.08 GB) (Model: Samsung SSD 960 EVO 250GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

Drive e: (Aktive_Festplatte E) (Fixed) (Total:1862.98 GB) (Free:1685.11 GB) (Model: WD Elements 25A2 USB Device) NTFS

Drive f: (Backup) (Fixed) (Total:1862.98 GB) (Free:89.39 GB) (Model: WD Elements 2621 USB Device) NTFS
 

\\?\Volume{357f493a-ca5e-4de8-b84b-aff429db63bb}\ () (Fixed) (Total:0.77 GB) (Free:0.09 GB) NTFS

\\?\Volume{ce61e2b2-b289-4008-9c82-7fa777634b5e}\ () (Fixed) (Total:0.1 GB) (Free:0.07 GB) FAT32
 

==================== MBR & Partitionstabelle ====================
 

==========================================================

Disk: 0 (MBR Code: Windows 7/8/10) (Size: 232.9 GB) (Disk ID: 1790FC26)
 

Partition: GPT.
 

==========================================================

Disk: 1 (Size: 1863 GB) (Disk ID: 16F2A91F)
 

Partition: GPT.
 

==========================================================

Disk: 2 (Size: 1863 GB) (Disk ID: 16F2A91F)
 

Partition: GPT.
 

==================== Ende von Addition.txt =======================