Trojaner-Board - Mail Account wurde gehackt + Drohmail mit korrektem Passowrt bekommen

FRST

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 02-08.2024

durchgeführt von do83h (Administrator) auf DESKTOP-V3T0UTA (MEDION E63007) (08-08-2024 20:04:38)

Gestartet von C:\Users\do83h\Downloads\FRST64.exe

Geladene Profile: do83h

Plattform: Microsoft Windows 10 Home Version 22H2 19045.4651 (X64) Sprache: Deutsch (Deutschland)

Standard-Browser: FF

Start-Modus: Normal
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe <2>

(Autodesk, Inc. -> Autodesk) C:\Users\do83h\AppData\Local\Programs\Autodesk\Genuine Service\GenuineService.exe

(Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe

(C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe ->) (Autodesk, Inc. -> Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\AcWebBrowser.exe <3>

(C:\Program Files (x86)\Citrix\ICA Client\concentr.exe ->) (Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe

(C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe ->) (Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\SelfServicePlugin.exe

(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe

(Cisco Systems, Inc. -> Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe

(Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\concentr.exe

(Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\Receiver\AnalyticsSrv.exe

(Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\redirector.exe

(DriverStore\FileRepository\cui_dch.inf_amd64_ba5b1813656e5c27\igfxCUIService.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_ba5b1813656e5c27\igfxEM.exe

(explorer.exe ->) (477B7FBA-7EF8-4233-86D2-322330786803 -> ) C:\Program Files\WindowsApps\3138AweZip.AweZip_1.4.36.0_x64__ffd303wmbhcjt\ArchiveObserver\ArchiveObserver.exe

(explorer.exe ->) (Google LLC -> ) C:\Program Files\Google\Drive\googledrivesync.exe <2>

(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>

(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe

(explorer.exe ->) (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe

(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe

(Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\pingsender.exe

(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

(services.exe ->) (Autodesk, Inc. -> Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe

(services.exe ->) (Autodesk, Inc. -> Autodesk) C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\10.1.0.3194\AdskLicensingService\AdskLicensingService.exe

(services.exe ->) (Cisco Systems, Inc. -> Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe

(services.exe ->) (Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\Receiver\UpdaterService.exe

(services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe

(services.exe ->) (Geek Software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe <2>

(services.exe ->) (Hewlett-Packard Company -> HP) C:\Windows\System32\HPSIsvc.exe

(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe

(services.exe ->) (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe

(services.exe ->) (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_a55aa2cd52a3429d\LMS.exe

(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe

(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe

(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_ba5b1813656e5c27\igfxCUIService.exe

(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e8f9f51120464f93\IntelCpHDCPSvc.exe

(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e8f9f51120464f93\IntelCpHeciSvc.exe

(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_6ca78a08b838e305\RstMwService.exe

(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpDefenderCoreService.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MsMpEng.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\NisSrv.exe

(services.exe ->) (Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe

(services.exe ->) (Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\loggerservice.exe

(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c60facea9c32a6cb\RtkAudUService64.exe <2>

(services.exe ->) (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe

(services.exe ->) (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) C:\Program Files\CodeMeter\Runtime\bin\CmWebAdmin.exe

(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.MSPaint_6.2405.19017.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe

(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2429.10.0_x64__cv1g1gvanyjgm\WhatsApp.exe

(svchost.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe

(svchost.exe ->) (Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe

(svchost.exe ->) (Flexera Software LLC -> Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\agent.exe

(svchost.exe ->) (Flexera Software LLC -> Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe

(svchost.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\GoogleUpdater\128.0.6597.0\updater.exe <6>

(svchost.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe

(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe

(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe <3>

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe <2>
 

==================== Registry (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c60facea9c32a6cb\RtkAudUService64.exe [3380320 2021-11-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)

HKLM\...\Run: [PDF24] => C:\Program Files\PDF24\pdf24.exe [645976 2024-03-05] (Geek Software GmbH -> geek software GmbH)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [665384 2019-12-05] (Autodesk, Inc. -> Autodesk, Inc.)

HKLM-x32\...\Run: [Autodesk Genuine Service ] => C:\Users\do83h\AppData\Local\Programs\Autodesk\Genuine Service\GenuineService.exe [1077864 2020-01-02] (Autodesk, Inc. -> Autodesk)

HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [109324536 2021-03-12] (Microsoft Corporation -> Microsoft Corporation)

HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [1713432 2021-09-17] (Cisco Systems, Inc. -> Cisco Systems, Inc.)

HKLM-x32\...\Run: [InstallHelper] => C:\Program Files (x86)\Citrix\Citrix Workspace 2405\InstallHelper.exe [675128 2024-07-08] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\isuspm.exe [2075480 2013-06-24] (Flexera Software LLC -> Flexera Software LLC.)

HKLM-x32\...\Run: [DNS7reminder] => C:\Program Files (x86)\Nuance\NaturallySpeaking13\Ereg\Ereg.exe [325960 2014-05-30] (Nuance Communications, Inc. -> Nuance Communications, Inc.)

HKLM-x32\...\Run: [AnalyticsSrv] => C:\Program Files (x86)\Citrix\ICA Client\Receiver\AnalyticsSrv.exe [2857328 2024-07-05] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

HKLM-x32\...\Run: [ConnectionCenter] => C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [3068544 2024-07-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

HKLM-x32\...\Run: [Redirector] => C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [1040000 2024-07-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

HKLM\...\Policies\Explorer: [ConfirmFileDelete] 1

HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\95.0.0.0\GoogleDriveFS.exe [60931688 2024-08-01] (Google LLC -> Google, Inc.)

HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\95.0.0.0\GoogleDriveFS.exe [60931688 2024-08-01] (Google LLC -> Google, Inc.)

HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4407656 2024-07-17] (Valve Corp. -> Valve Corporation)

HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [33000928 2021-04-07] (Epic Games Inc. -> Epic Games, Inc.)

HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [49958368 2022-02-01] (Google LLC -> )

HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\Run: [com.squirrel.Teams.Teams] => C:\Users\do83h\AppData\Local\Microsoft\Teams\Update.exe [2454184 2021-07-14] (Microsoft 3rd Party Application Component -> Microsoft Corporation)

HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\95.0.0.0\GoogleDriveFS.exe [60931688 2024-08-01] (Google LLC -> Google, Inc.)

HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [2075480 2013-06-24] (Flexera Software LLC -> Flexera Software LLC.)

HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\Run: [MicrosoftEdgeAutoLaunch_87671BE690C6185EAE66EBDAEE7802D1] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3814968 2024-08-01] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\MountPoints2: {11ae930c-1cdb-11eb-a845-6c6a77606d86} - "H:\HiSuiteDownLoader.exe" 

HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\MountPoints2: {2d9bfd5a-ab41-11eb-a86b-6c6a77606d86} - "H:\HiSuiteDownLoader.exe" 

HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\MountPoints2: {2f109b79-53b8-11ec-a87f-6c6a77606d86} - "H:\HiSuiteDownLoader.exe" 

HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\MountPoints2: {8e9c3683-068a-11ed-a89a-6c6a77606d86} - "H:\HiSuiteDownLoader.exe" 

HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\MountPoints2: {d00a6513-1e96-11ee-a8c0-6c6a77606d86} - "H:\HiSuiteDownLoader.exe" 

HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\95.0.0.0\GoogleDriveFS.exe [60931688 2024-08-01] (Google LLC -> Google, Inc.)

HKLM\...\Windows x64\Print Processors\HPM11M13PrintProc: C:\Windows\System32\spool\prtprocs\x64\HPM11M13PP.DLL [74240 2016-02-25] (Microsoft Windows Hardware Compatibility Publisher -> )

HKLM\...\Print\Monitors\HP BC11 Status Monitor: C:\Windows\system32\hpinkstsBC11LM.dll [331664 2012-06-12] (Hewlett Packard -> Hewlett-Packard Co.)

HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Photosmart 7520 series): C:\Windows\system32\HPDiscoPMBC11.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)

HKLM\...\Print\Monitors\HPM11M13LM: C:\Windows\system32\HPM11M13LM.DLL [288768 2016-02-25] (Microsoft Windows Hardware Compatibility Publisher -> )

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\127.0.6533.99\Installer\chrmstp.exe [2024-08-07] (Google LLC -> Google LLC)

HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{60f15951-e7ef-11ea-b28e-c4b301b9ed33}] -> C:\Program Files (x86)\Citrix\ICA Client\CitrixEnterpriseBrowser\126.1.1.22\Installer\chrmstp.exe [2024-07-20] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Startup: C:\Users\do83h\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Photosmart 7520 series.lnk [2024-08-08]

ShortcutAndArgument: Tintenwarnungen überwachen - HP Photosmart 7520 series.lnk -> C:\Windows\system32\RunDll32.exe => "C:\Program Files\HP\HP Photosmart 7520 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=TH4A1710WP05YY;CONNECTION=USB;MONITOR=1;

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodeMeter Control Center.lnk [2021-11-01]

ShortcutTarget: CodeMeter Control Center.lnk -> C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {F574530D-F2B2-44CB-AF37-D06E115518A2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1558984 2024-06-25] (Adobe Inc. -> Adobe Inc.)

Task: {7C6AAADD-6794-4CEC-842E-F176CA9317EC} - System32\Tasks\G2MUpdateTask-S-1-5-21-584500284-1391629960-3397962802-1005 => C:\Users\do83h\AppData\Local\GoToMeeting\19992\g2mupdate.exe [34872 2024-06-22] (LogMeIn, Inc. -> LogMeIn, Inc.)

Task: {8ED46F6B-D868-45F9-A5DA-F936D7B2E679} - System32\Tasks\G2MUploadTask-S-1-5-21-584500284-1391629960-3397962802-1005 => C:\Users\do83h\AppData\Local\GoToMeeting\19992\g2mupload.exe [34872 2024-06-22] (LogMeIn, Inc. -> LogMeIn, Inc.)

Task: {40C3BD78-F59E-4D2F-AE22-905EE6793F9D} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem128.0.6597.0{93A54F35-F806-45F6-8563-F73C85EA83CF} => C:\Program Files (x86)\Google\GoogleUpdater\128.0.6597.0\updater.exe [4889704 2024-07-15] (Google LLC -> Google LLC)

Task: {F59146C7-C25F-4DE3-99D4-7D64FB97AAD4} - System32\Tasks\HPCustParticipation HP Photosmart 7520 series => C:\Program Files\HP\HP Photosmart 7520 series\Bin\HPCustPartic.exe [4119656 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)

Task: {8BC77DBC-D5D6-45D8-B1C0-099E91C2647D} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [4922296 2023-12-19] (Intel Corporation -> Intel Corporation)

Task: {964B9470-0064-4BA7-9FBA-4D49F23DA117} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [4922296 2023-12-19] (Intel Corporation -> Intel Corporation)

Task: {A160F302-5259-4CC8-88D7-5327AE03EDBA} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe  --automatic (Keine Datei)

Task: {514A5D14-4EB0-4135-A4F7-B073E9143C98} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28499640 2024-07-04] (Microsoft Corporation -> Microsoft Corporation)

Task: {CAD81E66-1FF7-42F0-B65F-A45A8FC9B502} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28499640 2024-07-04] (Microsoft Corporation -> Microsoft Corporation)

Task: {B8540C44-B70A-4B2A-B861-15AFF54DC5B0} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [221368 2024-07-14] (Microsoft Corporation -> Microsoft Corporation)

Task: {4EDC9E48-4E12-4EAC-A8F7-5CF3BC16A301} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [221368 2024-07-14] (Microsoft Corporation -> Microsoft Corporation)

Task: {040310DD-CB77-43E4-8279-924E17C6B61B} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_ERROR_HB => C:\Windows\System32\MRT.exe [194135240 2024-07-13] (Microsoft Windows -> Microsoft Corporation) -> C:\Windows\system32\/EHB /HeartbeatFailure "SubmitHeartbeatReportData" /HeartbeatError "0x80072ee7"

Task: {A79195FD-FBEB-4433-886D-0B3991E80CC6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MpCmdRun.exe [1678960 2024-07-17] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {5B046FA0-3D68-4B79-B2E1-95E49AB68E9E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MpCmdRun.exe [1678960 2024-07-17] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {0ACBBB3B-FCFF-48EA-A20D-6565123DAAAB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MpCmdRun.exe [1678960 2024-07-17] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {D9F0F6F7-AA53-4BB6-975D-A100E33BC50D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MpCmdRun.exe [1678960 2024-07-17] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {AF02A63D-FDCC-4CFB-A094-48A4E4432387} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [677448 2024-07-28] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).

Task: {A6AD9B04-DC41-4297-AAA7-93567DEC2F32} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-584500284-1391629960-3397962802-1005 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [677448 2024-07-28] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).

Task: {9AAE5F33-1CA5-4B5D-9110-F8CF75FDB1CA} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34376 2024-07-28] (Mozilla Corporation -> Mozilla Foundation)

Task: {4EBFE576-7342-41DC-8E7A-E73D2197F550} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209072 2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

Task: {E65BF73C-EB8F-452B-979A-36C9931D7E92} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-584500284-1391629960-3397962802-1005 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209072 2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

Task: {6C00A265-94E7-4865-B2EC-59EFABDAE67F} - System32\Tasks\Opera scheduled Autoupdate 1605363011 => C:\Users\do83h\AppData\Local\Programs\Opera\launcher.exe [1538584 2020-03-03] (Opera Software AS -> Opera Software)

Task: {675DE520-3CEC-43D1-B092-71526D2C28F9} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => C:\Windows\System32\Wscript.exe [196608 2024-07-13] (Microsoft Windows -> Microsoft Corporation) -> C:\Program Files\Intel\SUR\QUEENCREEK\x64\//B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-584500284-1391629960-3397962802-1005.job => C:\Users\do83h\AppData\Local\GoToMeeting\19992\g2mupdate.exe

Task: C:\Windows\Tasks\G2MUploadTask-S-1-5-21-584500284-1391629960-3397962802-1005.job => C:\Users\do83h\AppData\Local\GoToMeeting\19992\g2mupload.exe
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{0894d97c-231f-418b-bd94-97d6dc7075e5}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{0894d97c-231f-418b-bd94-97d6dc7075e5}: [DhcpDomain] speedport.ip

Tcpip\..\Interfaces\{a88c09f9-bd5a-4696-92a9-0f25bebc004b}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{a88c09f9-bd5a-4696-92a9-0f25bebc004b}: [DhcpDomain] speedport.ip

Tcpip\..\Interfaces\{a88c09f9-bd5a-4696-92a9-0f25bebc004b}\D4167656E6471675C414E4D233A49575: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{a88c09f9-bd5a-4696-92a9-0f25bebc004b}\D4167656E6471675C414E4D233A49575: [DhcpDomain] speedport.ip
 

Edge: 

=======

Edge DefaultProfile: Default

Edge Profile: C:\Users\do83h\AppData\Local\Microsoft\Edge\User Data\Default [2024-08-08]

Edge Extension: (Google Docs Offline) - C:\Users\do83h\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-07-13]

Edge Extension: (Edge relevant text changes) - C:\Users\do83h\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]

Edge HKLM-x32\...\Edge\Extension: [mielbhbkcliienpdicphhecpodcaeefg]
 

FireFox:

========

FF DefaultProfile: 79tx312p.default-release

FF ProfilePath: C:\Users\do83h\AppData\Roaming\Mozilla\Firefox\Profiles\bxljijxg.dominik [2024-08-02]

FF Homepage: Mozilla\Firefox\Profiles\bxljijxg.dominik -> hxxps://www.google.com/

FF Extension: (Citavi Picker) - C:\Users\do83h\AppData\Roaming\Mozilla\Firefox\Profiles\bxljijxg.dominik\Extensions\{8AA36F4F-6DC7-4c06-77AF-5035170634FE}.xpi [2023-05-02]

FF ProfilePath: G:\__Neuer PC Medion Oktober 2020\aktuelles Firefox Profil\60zvykgg.Standard-Benutzer-1601207510285 [2020-10-29]

FF Extension: (Citavi Picker) - G:\__Neuer PC Medion Oktober 2020\aktuelles Firefox Profil\60zvykgg.Standard-Benutzer-1601207510285\Extensions\{8AA36F4F-6DC7-4c06-77AF-5035170634FE}.xpi [2024-08-02]

FF ProfilePath: C:\Users\do83h\AppData\Roaming\Mozilla\Firefox\Profiles\79tx312p.default-release [2024-08-02]

FF Extension: (Citavi Picker) - C:\Users\do83h\AppData\Roaming\Mozilla\Firefox\Profiles\79tx312p.default-release\Extensions\{8AA36F4F-6DC7-4c06-77AF-5035170634FE}.xpi [2024-08-02]

FF Extension: (Citavi Picker) - C:\Program Files\Mozilla Firefox\distribution\extensions\{8AA36F4F-6DC7-4c06-77AF-5035170634FE}.xpi [2023-03-23]

FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension

FF Extension: (SmartPrintButton) - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2011-01-26] [] [ist nicht signiert]

FF Plugin: nuance.com/DgnRia2_x86_64 -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\x64\npDgnRia2_x64.dll [2018-09-24] (Nuance Communications, Inc. -> Nuance Communications, Inc.)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-05-19] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-05-19] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2024-07-23] (Adobe Inc. -> Adobe Systems Inc.)

FF Plugin-x32: nuance.com/DgnRia2 -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\npDgnRia2.dll [2018-09-24] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
 

Chrome: 

=======

CHR DefaultProfile: Default

CHR Profile: C:\Users\do83h\AppData\Local\Google\Chrome\User Data\Default [2024-08-02]

CHR Extension: (Google Docs Offline) - C:\Users\do83h\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-07-12]

CHR Extension: (Anwendungs-Launcher für Drive (von Google)) - C:\Users\do83h\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2023-08-23]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\do83h\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]

CHR Extension: (Citavi Picker) - C:\Users\do83h\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohgndokldibnndfnjnagojmheejlengn [2023-07-13]

CHR HKU\S-1-5-21-584500284-1391629960-3397962802-1005\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]

CHR HKLM-x32\...\Chrome\Extension: [ohgndokldibnndfnjnagojmheejlengn]
 

Opera: 

=======

OPR Profile: C:\Users\do83h\AppData\Roaming\Opera Software\Opera Stable [2024-08-02]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1047416 2019-12-05] (Autodesk, Inc. -> Autodesk Inc.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-06-25] (Adobe Inc. -> Adobe Inc.)

R2 AdskLicensingService; C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\Current\AdskLicensingService\AdskLicensingService.exe [16930616 2019-12-18] (Autodesk, Inc. -> Autodesk)

S3 appprotectionsvc; C:\Program Files (x86)\Citrix\ICA Client\appprotection.exe [717896 2024-06-15] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14012384 2024-07-04] (Microsoft Corporation -> Microsoft Corporation)

R2 CmWebAdmin.exe; C:\Program Files\CodeMeter\Runtime\bin\CmWebAdmin.exe [10759616 2021-09-29] (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG)

S3 CtxAdpPolicy; C:\Program Files (x86)\Citrix\AppDataProtection\CtxAdpPolicy.exe [330608 2024-07-05] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

S3 CtxPkm; C:\Program Files (x86)\Citrix\AppDataProtection\CtxPkm.exe [1242992 2024-07-05] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

R2 CWAUpdaterService; C:\Program Files (x86)\Citrix\ICA Client\Receiver\UpdaterService.exe [1708344 2024-07-05] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

R2 DragonLoggerService; C:\Program Files (x86)\Common Files\Nuance\loggerservice.exe [151560 2018-09-24] (Nuance Communications, Inc. -> Nuance Communications, Inc.)

R2 DSAService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe [45464 2024-08-01] (Intel Corporation -> Intel)

R2 DSAUpdateService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe [296856 2024-08-01] (Intel Corporation -> Intel)

S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncHelper.exe [3523088 2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [241104 2024-08-07] (HP Inc. -> HP Inc.)

R2 HPSIService; C:\Windows\system32\HPSIsvc.exe [128272 2016-03-30] (Hewlett-Packard Company -> HP)

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8901528 2024-07-18] (Malwarebytes Inc. -> Malwarebytes)

S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [3073888 2024-05-27] (Malwarebytes Inc. -> Malwarebytes)

R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpDefenderCoreService.exe [1427024 2024-08-08] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.141.0714.0003\OneDriveUpdaterService.exe [3863568 2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

R2 PDF24; C:\Program Files\PDF24\pdf24.exe [645976 2024-03-05] (Geek Software GmbH -> geek software GmbH)

R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\NisSrv.exe [3199648 2024-08-08] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MsMpEng.exe [133704 2024-08-08] (Microsoft Windows Publisher -> Microsoft Corporation)

S2 rsVPNClientSvc; C:\Program Files\ReasonLabs\VPN\rsVPNClientSvc.exe [X]

S2 rsVPNSvc; "C:\Program Files\ReasonLabs\VPN\rsVPNSvc.exe" [X]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 acsock; C:\Windows\system32\DRIVERS\acsock64.sys [300456 2021-09-17] (Microsoft Windows Hardware Compatibility Publisher -> Cisco Systems, Inc.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [209088 2022-07-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [199312 2022-07-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [46704 2022-07-19] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

R2 BdDci; C:\Windows\system32\DRIVERS\bddci.sys [367096 2023-03-18] (Bitdefender SRL -> Bitdefender)

S3 CLVirtualBus01; C:\Windows\System32\drivers\CLVirtualBus01.sys [113888 2018-05-02] (CyberLink Corp. -> CyberLink)

S3 ctxapdriver; C:\Windows\system32\DRIVERS\ctxapdriver.sys [81560 2024-06-14] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

S3 ctxapinject; C:\Windows\system32\DRIVERS\ctxapinject.sys [128664 2024-06-14] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

S4 ctxapusbfilter; C:\Windows\system32\DRIVERS\ctxapusbfilter.sys [60472 2024-06-14] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

S4 CtxDs2; C:\Windows\System32\drivers\CtxDs2.sys [186424 2024-07-05] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

S4 CtxDt2; C:\Windows\System32\drivers\CtxDt2.sys [228296 2024-07-05] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

S4 CtxIsolate; C:\Windows\System32\drivers\CtxIsolate.sys [336840 2024-07-05] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

S4 CtxSupport; C:\Windows\System32\drivers\CtxSupport.sys [107976 2024-07-05] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

R2 ctxusbm; C:\Windows\system32\DRIVERS\ctxusbmon.sys [160832 2024-07-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)

R2 googledrivefs31626; C:\Program Files\Google\Drive File Stream\Drivers\31626\googledrivefs31626.sys [384096 2024-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)

S3 iaLPSS2_GPIO2_ICL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_gpio2_icl.inf_amd64_90beccc7e046abab\iaLPSS2_GPIO2_ICL.sys [132872 2020-04-27] (Intel Corporation -> Intel Corporation)

S3 iaLPSS2_I2C_ICL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_i2c_icl.inf_amd64_c8c0638291b9b209\iaLPSS2_I2C_ICL.sys [200456 2020-04-27] (Intel Corporation -> Intel Corporation)

S3 iaLPSS2_SPI_ICL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_spi_icl.inf_amd64_66a759065dfa6f64\iaLPSS2_SPI_ICL.sys [160024 2020-04-27] (Intel Corporation -> Intel Corporation)

R2 mbamchameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [221264 2024-08-07] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [21480 2023-05-17] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)

R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [239568 2024-08-02] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

R3 MpKsl3625c029; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A18D9C54-0B0D-4EA6-B599-8D5BAFFEAFDB}\MpKslDrv.sys [271640 2024-08-08] (Microsoft Windows -> Microsoft Corporation)

S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [29192 2016-03-17] (Microsoft Windows Hardware Compatibility Publisher -> Marvell Semiconductor, Inc.)

S0 ProtectedELAM; C:\Windows\System32\drivers\protected_elam.sys [18912 2022-09-27] (Microsoft Windows Early Launch Anti-malware Publisher -> TODO: <Company name>)

S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)

S3 ss_conn_usb_driver2; C:\Windows\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)

S3 Usbnet; C:\Windows\System32\drivers\usbnet.sys [46080 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 vpnva; C:\Windows\System32\drivers\vpnva64-6.sys [74064 2021-09-17] (Cisco Systems, Inc. -> Cisco Systems, Inc.)

S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [22080 2024-08-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [602504 2024-08-08] (Microsoft Windows -> Microsoft Corporation)

R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105864 2024-08-08] (Microsoft Windows -> Microsoft Corporation)
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2024-08-07 20:51 - 2024-08-07 20:52 - 000000004 ____H C:\ProgramData\cm-lock

2024-08-07 18:01 - 2024-08-07 18:01 - 000001514 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver & Support Assistant.lnk

2024-08-07 18:01 - 2024-08-07 18:01 - 000000000 ____D C:\Program Files (x86)\Intel

2024-08-05 19:43 - 2024-08-05 19:46 - 000000000 ____D C:\KVRT2020_Data

2024-08-05 19:40 - 2024-08-05 19:42 - 111753072 _____ (AO Kaspersky Lab) C:\Users\do83h\OneDrive\Bilder\Desktop\KVRT.exe

2024-08-04 21:59 - 2024-08-04 22:05 - 000001382 _____ C:\Users\do83h\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk

2024-08-04 21:59 - 2024-08-04 22:04 - 000001288 _____ C:\Users\do83h\OneDrive\Bilder\Desktop\ESET Online Scanner.lnk

2024-08-04 21:57 - 2024-08-04 21:58 - 008389496 _____ (ESET) C:\Users\do83h\Downloads\esetonlinescanner.exe

2024-08-04 21:55 - 2024-08-04 21:59 - 000000000 ____D C:\Users\do83h\AppData\Local\ESET

2024-08-04 21:53 - 2024-08-04 21:53 - 010351480 _____ (ESET) C:\Users\do83h\Downloads\eset_smart_security_premium_live_installer.exe

2024-08-02 15:27 - 2024-08-02 15:27 - 000003466 _____ C:\Users\do83h\Downloads\kvzxmyidrjqipqqc.txt

2024-08-02 15:19 - 2024-08-02 15:35 - 000010310 _____ C:\Users\do83h\Downloads\Fixlog.txt

2024-08-02 15:19 - 2024-08-02 15:19 - 000003466 _____ C:\Users\do83h\Downloads\gsvvqskfezicl.txt

2024-07-29 18:28 - 2024-07-29 18:31 - 000085704 _____ C:\Users\do83h\Downloads\Addition.txt

2024-07-29 18:26 - 2024-08-08 20:05 - 000038048 _____ C:\Users\do83h\Downloads\FRST.txt

2024-07-28 08:46 - 2024-08-02 15:36 - 000000000 ____D C:\Program Files\Mozilla Firefox

2024-07-26 14:53 - 2024-07-26 14:53 - 002523036 _____ C:\Users\do83h\Downloads\SfV_Bestellung_87580143463.pdf

2024-07-24 17:41 - 2024-07-24 17:41 - 002591728 _____ (Malwarebytes) C:\Users\do83h\OneDrive\Bilder\Desktop\MBSetup(1).exe

2024-07-23 19:00 - 2024-07-23 19:00 - 000288888 _____ C:\Users\do83h\OneDrive\Dokumente\Ausweis Vorne und hinten.pdf

2024-07-22 18:03 - 2024-07-24 18:02 - 000000000 ____D C:\Users\do83h\Downloads\Trojaner Board

2024-07-22 17:44 - 2024-08-02 15:19 - 002397184 _____ (Farbar) C:\Users\do83h\Downloads\FRST64.exe

2024-07-20 17:04 - 2024-07-20 17:04 - 000002588 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Citrix Workspace.lnk

2024-07-20 17:04 - 2024-07-20 17:04 - 000000000 ____D C:\ProgramData\Citrix

2024-07-13 14:16 - 2024-07-13 14:16 - 000000000 ____D C:\Windows\system32\compatrel

2024-07-13 11:20 - 2024-07-13 11:20 - 000021724 _____ C:\Windows\SysWOW64\IntegratedServicesRegionPolicySet.json

2024-07-13 11:19 - 2024-07-13 11:19 - 000021724 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json

2024-07-13 11:09 - 2024-07-13 11:09 - 000000000 ___HD C:\$WinREAgent
 

==================== Ein Monat (geänderte) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2024-08-08 20:04 - 2023-04-23 12:32 - 000000000 ____D C:\FRST

2024-08-08 20:04 - 2022-02-09 19:55 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38

2024-08-08 20:04 - 2020-10-29 13:58 - 000000000 ____D C:\Users\do83h

2024-08-08 20:04 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness

2024-08-08 20:03 - 2021-12-19 00:44 - 000000000 ____D C:\Windows\SystemTemp

2024-08-08 20:03 - 2020-06-15 08:59 - 000000000 ____D C:\Windows\system32\Drivers\wd

2024-08-08 20:01 - 2021-11-01 18:16 - 000000068 ___SH C:\Windows\system32\Drivers\WppRecorder.winsecurity

2024-08-08 20:01 - 2020-10-29 14:03 - 000000000 __SHD C:\Users\do83h\IntelGraphicsProfiles

2024-08-07 21:30 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2024-08-07 21:29 - 2020-10-29 14:48 - 000000000 ____D C:\Program Files (x86)\Steam

2024-08-07 21:27 - 2023-05-19 17:17 - 000000000 ____D C:\Users\do83h\AppData\Local\Malwarebytes

2024-08-07 21:15 - 2020-10-29 15:00 - 000000000 ____D C:\Users\do83h\AppData\Local\D3DSCache

2024-08-07 21:13 - 2020-10-31 17:15 - 000000000 ____D C:\Users\do83h\AppData\Roaming\Microsoft\Word

2024-08-07 21:02 - 2023-05-01 23:04 - 000000000 ____D C:\Users\do83h\OneDrive\Dokumente\Citavi 6

2024-08-07 21:02 - 2021-11-01 18:16 - 000000068 ___SH C:\Windows\system32\Drivers\WdfLdr.winsecurity

2024-08-07 21:01 - 2020-07-02 08:37 - 000739414 _____ C:\Windows\system32\perfh007.dat

2024-08-07 21:01 - 2020-07-02 08:37 - 000149046 _____ C:\Windows\system32\perfc007.dat

2024-08-07 21:01 - 2020-06-15 09:07 - 001713106 _____ C:\Windows\system32\PerfStringBackup.INI

2024-08-07 21:01 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF

2024-08-07 20:52 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps

2024-08-07 20:51 - 2021-08-26 13:18 - 000000000 ____D C:\Program Files\Microsoft OneDrive

2024-08-07 20:51 - 2021-07-10 00:47 - 000001426 _____ C:\Windows\system32\default_error_stack-000000-000000.txt

2024-08-07 20:51 - 2020-06-15 08:59 - 000000006 ____H C:\Windows\Tasks\SA.DAT

2024-08-07 20:51 - 2019-12-07 11:03 - 000786432 _____ C:\Windows\system32\config\BBI

2024-08-07 20:49 - 2020-06-15 08:59 - 000000000 ____D C:\Windows\system32\SleepStudy

2024-08-07 18:01 - 2020-10-29 14:59 - 000000000 ____D C:\ProgramData\Package Cache

2024-08-07 17:58 - 2023-08-10 01:17 - 000000000 ____D C:\Windows\system32\Tasks\HP

2024-08-07 17:58 - 2023-07-19 21:20 - 000000000 ____D C:\Program Files\HPPrintScanDoctor

2024-08-07 17:45 - 2020-10-29 14:46 - 000002243 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2024-08-05 21:03 - 2021-06-25 21:49 - 000000000 ____D C:\Users\do83h\OneDrive\Dokumente\GermanFunScript

2024-08-04 22:09 - 2020-12-20 15:00 - 000000000 ____D C:\Users\do83h\AppData\Local\CrashDumps

2024-08-04 22:00 - 2019-12-07 11:14 - 000000000 ___HD C:\Windows\ELAMBKUP

2024-08-04 21:32 - 2020-10-29 21:37 - 000000000 ____D C:\Users\do83h\AppData\Roaming\Microsoft\Excel

2024-08-04 21:13 - 2020-07-02 09:15 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2024-08-02 21:30 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\LiveKernelReports

2024-08-02 20:17 - 2020-10-29 15:32 - 000000000 ____D C:\Users\do83h\Knuddels-Stapp

2024-08-02 20:04 - 2022-01-06 16:39 - 000003592 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-584500284-1391629960-3397962802-1005

2024-08-02 20:04 - 2021-07-14 11:35 - 000003194 _____ C:\Windows\system32\Tasks\OneDrive Per-Machine Standalone Update Task

2024-08-02 20:04 - 2021-07-14 11:35 - 000002152 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2024-08-02 15:59 - 2023-07-09 15:54 - 000297177 _____ C:\Users\do83h\OneDrive\Dokumente\FC Lisboa NEU.xlsx

2024-08-02 15:36 - 2023-05-17 18:52 - 000239568 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys

2024-08-02 15:36 - 2020-10-29 15:01 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2024-08-02 15:34 - 2022-10-19 13:05 - 000000000 ____D C:\Users\do83h\AppData\LocalLow\Temp

2024-08-02 15:32 - 2022-01-19 15:56 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla

2024-08-02 15:19 - 2023-04-23 12:32 - 000000000 ____D C:\Users\do83h\Downloads\FRST-OlderVersion

2024-08-01 18:35 - 2022-10-11 16:18 - 000002140 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader.lnk

2024-08-01 18:35 - 2020-11-01 15:12 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task

2024-08-01 18:26 - 2021-09-22 18:18 - 000002170 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk

2024-08-01 18:26 - 2020-12-16 00:32 - 000002060 _____ C:\Users\do83h\OneDrive\Bilder\Desktop\Google Drive.lnk

2024-07-29 18:19 - 2020-10-30 00:55 - 000000000 ____D C:\Users\do83h\AppData\Local\Steam

2024-07-28 21:42 - 2020-10-29 15:01 - 000001009 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

2024-07-28 21:40 - 2020-07-02 09:15 - 000003756 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

2024-07-28 21:40 - 2020-07-02 09:15 - 000003632 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

2024-07-24 17:50 - 2023-05-17 18:53 - 000000000 ____D C:\Users\do83h\AppData\LocalLow\IGDump

2024-07-24 17:45 - 2023-05-17 18:52 - 000002097 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk

2024-07-24 17:42 - 2023-05-17 18:46 - 000000000 ____D C:\ProgramData\Malwarebytes

2024-07-24 17:42 - 2023-05-17 18:46 - 000000000 ____D C:\Program Files\Malwarebytes

2024-07-21 17:10 - 2020-10-29 17:28 - 000000000 ____D C:\Users\do83h\OneDrive\Dokumente\eigene dateien

2024-07-20 17:04 - 2022-11-02 13:40 - 000000000 ____D C:\Program Files (x86)\Citrix

2024-07-14 17:02 - 2021-07-14 16:13 - 000029709 _____ C:\Users\do83h\AppData\Roaming\Durch Trennzeichen getrennte Werte.ADR

2024-07-14 15:31 - 2020-10-30 16:23 - 000000000 ____D C:\Program Files (x86)\Microsoft Office

2024-07-13 14:17 - 2021-02-18 14:56 - 000000666 _____ C:\Windows\Tasks\G2MUploadTask-S-1-5-21-584500284-1391629960-3397962802-1005.job

2024-07-13 14:17 - 2021-02-18 14:56 - 000000570 _____ C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-584500284-1391629960-3397962802-1005.job

2024-07-13 14:17 - 2020-06-15 08:59 - 000571592 _____ C:\Windows\system32\FNTCACHE.DAT

2024-07-13 14:16 - 2023-12-16 00:56 - 000000000 ____D C:\Windows\InboxApps

2024-07-13 14:16 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel

2024-07-13 14:16 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism

2024-07-13 14:16 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources

2024-07-13 14:16 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns

2024-07-13 14:16 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\setup

2024-07-13 14:16 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\SecureBootUpdates

2024-07-13 14:16 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe

2024-07-13 14:16 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism

2024-07-13 14:16 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\appraiser

2024-07-13 14:16 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellExperiences

2024-07-13 14:16 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellComponents

2024-07-13 14:16 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\PolicyDefinitions

2024-07-13 14:16 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr

2024-07-13 11:24 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp

2024-07-13 11:19 - 2020-06-15 09:01 - 003016192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll

2024-07-13 11:07 - 2023-10-18 19:00 - 000000000 ____D C:\Program Files (x86)\dotnet

2024-07-13 11:07 - 2020-11-01 17:21 - 000000000 ____D C:\Windows\system32\MRT

2024-07-13 11:04 - 2020-07-02 09:13 - 194135240 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
 

2020-12-30 00:50 - 2020-12-30 00:50 - 000000457 _____ () C:\Program Files (x86)\INSTALL.LOG

2021-07-14 16:13 - 2024-07-14 17:02 - 000029709 _____ () C:\Users\do83h\AppData\Roaming\Durch Trennzeichen getrennte Werte.ADR

2020-10-30 15:19 - 2021-06-30 15:53 - 000022399 _____ () C:\Users\do83h\AppData\Roaming\Kommagetrennte Werte (Windows).ADR

2023-06-26 23:40 - 2023-06-30 21:25 - 000001435 _____ () C:\Users\do83h\AppData\Roaming\SAS7_000.DAT

2020-10-29 21:51 - 2021-01-06 19:19 - 000000081 _____ () C:\Users\do83h\AppData\Local\.bidstack.fault

2021-03-14 22:46 - 2021-03-14 22:46 - 000000950 _____ () C:\Users\do83h\AppData\Local\recently-used.xbel
 

==================== SigCheck ============================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

==================== Ende von FRST.txt ========================

Addition

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 02-08.2024

durchgeführt von do83h (08-08-2024 20:06:22)

Gestartet von C:\Users\do83h\Downloads

Microsoft Windows 10 Home Version 22H2 19045.4651 (X64) (2020-08-27 06:57:47)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

Administrator (S-1-5-21-584500284-1391629960-3397962802-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-584500284-1391629960-3397962802-503 - Limited - Disabled)

do83h (S-1-5-21-584500284-1391629960-3397962802-1005 - Administrator - Enabled) => C:\Users\do83h

Gast (S-1-5-21-584500284-1391629960-3397962802-501 - Limited - Disabled)

WDAGUtilityAccount (S-1-5-21-584500284-1391629960-3397962802-504 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

7-Zip 22.01 (x64) (HKLM\...\7-Zip) (Version: 22.01 - Igor Pavlov)

Adobe Acrobat Reader - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 24.002.20965 - Adobe Systems Incorporated)

Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601078}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden

AppDataProtection (HKLM-x32\...\{E06F4281-7DB4-4B2A-94E9-7B0025888F8E}) (Version: 24.5.0.45 - Citrix Systems, Inc.) Hidden

AutoCAD 2021 - Deutsch (German) (HKLM\...\{28B89EEF-4101-0407-2102-CF3F3A09B77D}) (Version: 24.0.47.0 - Autodesk) Hidden

Autodesk App Manager 2020-2021 (HKLM-x32\...\{DB92FEA7-F78C-469E-B138-E2303220F0C4}) (Version: 3.1.0 - Autodesk)

Autodesk AutoCAD 2021 - Deutsch (German) (HKLM\...\AutoCAD 2021 - Deutsch (German)) (Version: 24.0.47.0 - Autodesk)

Autodesk Desktop-App (HKLM-x32\...\Autodesk Desktop App) (Version: 7.0.21.17 - Autodesk)

Autodesk Genuine Service (HKLM-x32\...\{54A00624-3EF9-49A2-92A9-7244EADD0212}) (Version: 3.2.18 - Autodesk)

Autodesk Material Library 2021 (HKLM-x32\...\{6774FD60-7D4B-4D57-BE56-2702A07C9701}) (Version: 19.1.22.0 - Autodesk)

Autodesk Material Library Base Resolution Image Library 2021 (HKLM-x32\...\{6EFAD582-86C1-4AB2-97C5-2070D0B90E08}) (Version: 19.1.22.0 - Autodesk)

Autodesk Single Sign On Component (HKLM\...\{951BB060-1350-4C93-BD83-D966C51D4005}) (Version: 11.2.0.1802 - Autodesk)

Backup and Sync from Google (HKLM\...\{696895F7-52C7-4C9E-998B-C7E0CC907092}) (Version: 3.57.4256.0809 - Google, Inc.)

BCR Plug-in (HKLM-x32\...\{E3787976-26D3-4233-BCE6-DA76546065A7}) (Version: 24.5.0.102 - Citrix Systems, Inc.) Hidden

Cisco AnyConnect Secure Mobility Client  (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 4.10.03104 - Cisco Systems, Inc.)

Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\{A4076314-DE10-4FEB-A977-A3AF859B4073}) (Version: 4.10.03104 - Cisco Systems, Inc.) Hidden

Citavi 6 (HKLM-x32\...\{6A331045-8FF4-4BC9-9C56-E593ACAE28C2}) (Version: 6.15.2.0 - Swiss Academic Software)

Citrix Authentication Manager (HKLM-x32\...\{52AC5919-13F9-4A79-A122-1C6141314E6B}) (Version: 24.5.0.5 - Citrix Systems, Inc.) Hidden

Citrix Web Helper (HKLM-x32\...\{4CCE776F-F163-4A0B-99A4-5CDE5CC9E488}) (Version: 24.5.0.68 - Citrix Systems, Inc.) Hidden

Citrix Workspace (DV) (HKLM-x32\...\{CD5A49E9-1E6E-4D95-846E-A3254E5ED73F}) (Version: 24.5.0.102 - Citrix Systems, Inc.) Hidden

Citrix Workspace (USB) (HKLM-x32\...\{330BC04E-A42B-45B2-A257-4B8ACD8A33AE}) (Version: 24.5.0.102 - Citrix Systems, Inc.) Hidden

Citrix Workspace 2405 (HKLM-x32\...\CitrixOnlinePluginPackWeb) (Version: 24.5.0.131 - Citrix Systems, Inc.)

Citrix Workspace Inside (HKLM-x32\...\{8761DB26-F0A6-4413-B69D-D9BCEF60F90E}) (Version: 24.5.0.57 - Citrix Systems, Inc.) Hidden

CodeMeter Runtime Kit v7.30a (HKLM\...\{9B600D30-C133-4D53-BDE1-CBDC9783E657}) (Version: 7.30.4820.501 - WIBU-SYSTEMS AG)

CyberLink PowerRecover (HKLM\...\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.8922 - CyberLink Corp.) Hidden

CyberLink PowerRecover (HKLM-x32\...\InstallShield_{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.7.0.8922 - CyberLink Corp.)

Dragon (HKLM-x32\...\{33EA20FB-5389-4938-BA59-2BCD9BB68F41}) (Version: 13.00.000 - Nuance Communications Inc.)

Epic Games Launcher (HKLM-x32\...\{07D9F8F3-EC99-4133-919D-DA341C62937C}) (Version: 1.1.298.0 - Epic Games, Inc.)

Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

FileZilla Client 3.51.0 (HKLM-x32\...\FileZilla Client) (Version: 3.51.0 - Tim Kosse)

Funkyplot 1.1.0-pre1 (HKLM-x32\...\Funkyplot_is1) (Version:  - LOGICIEL)

FUSSBALL MANAGER 11 (HKLM-x32\...\FUSSBALL MANAGER 11) (Version:  - Electronic Arts)

GGU-SOFTWARE COMPLETE PACK (HKLM-x32\...\{B2A0B907-6666-4ADD-817D-173678BAD83E}) (Version: 20.21.023 - Civilserve GmbH)

GIMP 2.10.22 (HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\GIMP-2_is1) (Version: 2.10.22 - The GIMP Team)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 127.0.6533.99 - Google LLC)

Google Drive (HKLM\...\{6BBAE539-2232-434A-A4E5-9A33560C6283}) (Version: 95.0.0.0 - Google LLC)

GoTo Opener (HKLM-x32\...\{E69269DB-A77B-4BC1-8F39-241107B09F26}) (Version: 1.0.539 - LogMeIn, Inc.)

GoToMeeting 10.20.0.19992 (HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\GoToMeeting) (Version: 10.20.0.19992 - LogMeIn, Inc.)

HP LaserJet Pro M11-M13 Series (HKLM\...\HP LaserJet Pro M11-M13 Series) (Version:  - )

HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)

HP Photosmart 7520 series - Grundlegende Software für das Gerät (HKLM\...\{62883BA5-32F6-44D0-AF9D-9CBED778F36F}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

HP Photosmart 7520 series Hilfe (HKLM-x32\...\{2230C40A-ADE0-4231-98EC-7AAFC14BC7F3}) (Version: 28.0.0 - Hewlett Packard)

HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)

HPSSupply (HKLM-x32\...\{7902E313-FF0F-4493-ACB1-A8147B78DCD0}) (Version: 2.1.1.0000 - Hewlett Packard Development Company L.P.)

In Autodesk Web & Mobile speichern (HKLM\...\{A9005AC0-4AD8-4E84-B1F7-EE38BB6BCC2D}) (Version: 3.0.26 - Autodesk)

Intel Driver && Support Assistant (HKLM-x32\...\{4FB48B50-C8BF-4EC5-983E-F740A6B05FAF}) (Version: 24.4.32.8 - Intel) Hidden

Intel(R) Computing Improvement Program (HKLM\...\{15E71D2B-4046-4B9D-A8BB-EBFC5CC12D86}) (Version: 2.4.10717 - Intel Corporation)

Intel(R) SUR QC Software Asset Manager (HKLM\...\{B3804557-9824-4918-AA88-0DFAC94CD3B5}) (Version: 3.5.5033 - Intel Corporation) Hidden

Intel® Driver & Support Assistant (HKLM-x32\...\{E4B94748-555B-4785-8A6C-73AD00FDD58B}) (Version: 24.4.32.8 - Intel)

Knuddels Standalone App (HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\Knuddels App ) (Version: "2015.12.6.0" - "Knuddels App")

Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

Malwarebytes version 5.1.6.117 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.1.6.117 - Malwarebytes)

Microsoft .NET Core Host - 3.1.32 (x64) (HKLM\...\{8A8E3A04-83BC-4CDE-9259-893B666C1AB1}) (Version: 24.192.31915 - Microsoft Corporation) Hidden

Microsoft .NET Core Host FX Resolver - 3.1.32 (x64) (HKLM\...\{ABC6B3C2-1A8D-4C5E-AC16-C2AE44F02743}) (Version: 24.192.31915 - Microsoft Corporation) Hidden

Microsoft .NET Core Runtime - 3.1.32 (x64) (HKLM\...\{A741B803-3F0E-4684-81EF-FC128D15A92C}) (Version: 24.192.31915 - Microsoft Corporation) Hidden

Microsoft .NET Core Runtime - 3.1.32 (x64) (HKLM-x32\...\{784973c8-d618-4ac8-97ed-1fd52c5bdf2f}) (Version: 3.1.32.31915 - Microsoft Corporation)

Microsoft .NET Host - 6.0.32 (x86) (HKLM-x32\...\{1855786F-395A-4EB8-8927-581D53B129E8}) (Version: 48.128.16743 - Microsoft Corporation) Hidden

Microsoft .NET Host FX Resolver - 6.0.32 (x86) (HKLM-x32\...\{8B44FB6C-6343-40DA-97DB-C206A054C9F4}) (Version: 48.128.16743 - Microsoft Corporation) Hidden

Microsoft .NET Runtime - 6.0.32 (x86) (HKLM-x32\...\{7A3488C1-1FF3-4F64-A6FA-5CFCD533A5DB}) (Version: 48.128.16743 - Microsoft Corporation) Hidden

Microsoft 365 Apps for Business - de-de (HKLM\...\O365BusinessRetail - de-de) (Version: 16.0.17628.20188 - Microsoft Corporation)

Microsoft Edge (HKLM-x32\...\{3196C85D-CFB0-3E5B-A592-0322692C2140}) (Version: 127.0.2651.86 - Microsoft Corporation)

Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 126.0.2592.113 - Microsoft Corporation)

Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.141.0714.0003 - Microsoft Corporation)

Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 18.151.0729.0013 - Microsoft Corporation)

Microsoft Teams (HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\Teams) (Version: 1.4.00.18264 - Microsoft Corporation)

Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.36.32532 (HKLM-x32\...\{8bdfe669-9705-4184-9368-db9ce581e0e7}) (Version: 14.36.32532.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.36.32532 (HKLM-x32\...\{410c0ee1-00bb-41b6-9772-e12c2828b02f}) (Version: 14.36.32532.0 - Microsoft Corporation)

Microsoft Visual C++ 2022 X64 Additional Runtime - 14.36.32532 (HKLM\...\{0025DD72-A959-45B5-A0A3-7EFEB15A8050}) (Version: 14.36.32532 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.36.32532 (HKLM\...\{D5D19E2F-7189-42FE-8103-92CD1FA457C2}) (Version: 14.36.32532 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X86 Additional Runtime - 14.36.32532 (HKLM-x32\...\{C2C59CAB-8766-4ABD-A8EF-1151A36C41E5}) (Version: 14.36.32532 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.36.32532 (HKLM-x32\...\{73F77E4E-5A17-46E5-A5FC-8A061047725F}) (Version: 14.36.32532 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}) (Version: 10.0.50908 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Windows Desktop Runtime - 6.0.32 (x86) (HKLM-x32\...\{8E331834-5413-4C57-8E5E-FB2FF60B6D1D}) (Version: 48.128.16742 - Microsoft Corporation) Hidden

Microsoft Windows Desktop Runtime - 6.0.32 (x86) (HKLM-x32\...\{d84a656c-01d4-408c-9586-2c04c996d6ed}) (Version: 6.0.32.33814 - Microsoft Corporation)

mIRC (HKLM-x32\...\mIRC) (Version: 7.63 - mIRC Co. Ltd.)

Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 128.0.3 (x64 de)) (Version: 128.0.3 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 82.0.2 - Mozilla)

MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)

MTOP Client (HKLM-x32\...\{50D69D99-D166-4D1C-B519-5A36CA1F8938}) (Version: 24.5.0.102 - Citrix Systems, Inc.) Hidden

Nicepage 5.13.1 (HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\c9e6a573-2a17-5f23-a9b7-1d442c8e5de0) (Version: 5.13.1 - Artisteer Limited)

Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.17628.20110 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.17628.20188 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.17628.20188 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.17628.20110 - Microsoft Corporation) Hidden

Online Plug-in (HKLM-x32\...\{6E8C5986-A159-45BD-8D3E-7C6E30C2A691}) (Version: 24.5.0.102 - Citrix Systems, Inc.) Hidden

PDF24 Creator 11.17.0 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.17.0 - geek software GmbH)

Phase 5 HTML-Editor (HKLM-x32\...\{20B1B020-DEAE-48D1-9960-D4C3185D758B}) (Version: 5.6.2.3 - Systemberatung Schommer)

QGIS 3.28.1 'Firenze' (HKLM\...\{7EC18ED8-729C-1014-BC9F-C7938B569609}) (Version: 3.28.1 - QGIS.org)

RuckZuck Demo (HKLM-x32\...\{E7EB9C2F-4270-435E-93C3-3BC734234A75}) (Version: 6.0.22 - MURSOFT)

Self-Service Plug-in (HKLM-x32\...\{E416CF61-0B2A-4B71-923F-B5E99F15CD44}) (Version: 24.5.0.68 - Citrix Systems, Inc.) Hidden

SmartTools Office DDE-Fix (HKLM-x32\...\SmartTools PublishingOffice DDE-Fixv1.20) (Version: v1.20 - SmartTools Publishing)

Stahlbau (HKLM-x32\...\{41C5E1CA-3507-49CE-87D4-9939AE5D3521}) (Version: 1.1.1 - Schneider Bautabellen)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Studie zur Verbesserung von HP Photosmart 7520 series Produkten (HKLM\...\{D662A279-973A-42A0-8D4B-8747C56C0501}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)

SupportAPP (HKLM\...\{0000A0AB-3A12-1EF4-A21C-9ADE1843AB04}) (Version: 1.1 - )

Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.4.0.7174 - Microsoft Corporation)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.2.3 - TeamSpeak Systems GmbH)

TeleGuard (HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\93443beb-f105-47fe-bac0-709583ac44cb_is1) (Version: 3.3.1.4 - Swisscows)

Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{85C69797-7336-4E83-8D97-32A7C8465A3B}) (Version: 8.94.0.0 - Microsoft Corporation)

Verfügbare Autodesk-Apps 2020-2021 (HKLM-x32\...\{2CBD494D-0A3E-4CB3-AFB3-8CE1734613B0}) (Version: 3.1.0 - Autodesk)

VLC media player (HKLM\...\VLC media player) (Version: 3.0.18 - VideoLAN)

VPN by RAV (HKLM\...\ReasonLabs-VPN) (Version: 2.18.0 - Reason Cybersecurity Inc.)

Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)

Zoom (HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\ZoomUMX) (Version: 5.13.5 (12053) - Zoom Video Communications, Inc.)
 

Packages:

=========
 

7-Zip File Manager (Unofficial) -> C:\Program Files\WindowsApps\HaukeGtze.7-ZipFileManagerUnofficial_1.2201.1.0_x64__6bk20wvc8rfx2 [2022-12-30] (Hauke Hasselberg)

Adobe Acrobat Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC [2023-11-15] ()

Adobe Reader Touch -> C:\Program Files\WindowsApps\AdobeSystemsIncorporated.AdobeReader_3.1.8.7675_x86__ynb6jyjzte8ga [2020-10-29] (Adobe Systems Incorporated)

Aldi Angebote -> C:\Program Files\WindowsApps\MEDION.AldiAngebote_1.1.4.0_x64__eqf9tz77ft5w8 [2020-07-13] (MEDION)

Aldi Foto -> C:\Program Files\WindowsApps\MEDION.AldiFoto_1.1.46.0_x64__eqf9tz77ft5w8 [2020-07-13] (MEDION)

ALDI life -> C:\Program Files\WindowsApps\MEDION.ALDIlife_1.1.5.0_x64__eqf9tz77ft5w8 [2020-07-13] (MEDION)

AldiTalk -> C:\Program Files\WindowsApps\MEDION.AldiTalk_1.1.28.0_x64__eqf9tz77ft5w8 [2020-07-13] (MEDION)

BreeZip -> C:\Program Files\WindowsApps\3138AweZip.AweZip_1.4.36.0_x64__ffd303wmbhcjt [2024-06-16] (BreeZip) [Startup Task]

Dropbox Lite -> C:\Program Files\WindowsApps\C27EB4BA.DROPBOX_23.4.27.0_x64__xbfy0k16fey96 [2024-07-30] (Dropbox Inc.)

HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_155.1.1088.0_x64__v10z8vjag6ke6 [2024-08-07] (HP Inc.)

Intel® Grafik-Kontrollraum -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5587.0_x64__8j3eq9eme6ctt [2024-08-07] (INTEL CORP) [Startup Task]

Internet-Security -> C:\Program Files\WindowsApps\MEDION.Internet-Security_1.1.26.0_x64__eqf9tz77ft5w8 [2020-10-30] (MEDION)

Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2022-04-16] (Microsoft Corporation)

MEDION -> C:\Program Files\WindowsApps\MEDION.MEDION_1.1.26.0_x64__eqf9tz77ft5w8 [2024-06-28] (MEDION)

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-12-23] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-12-23] (Microsoft Corporation) [MS Ad]

Microsoft Teams (work or school) -> C:\Program Files\WindowsApps\MSTeams_23320.3021.2567.4799_x64__8wekyb3d8bbwe [2024-01-04] (Microsoft) [Startup Task]

MPEG-2-Videoerweiterung -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.61931.0_x64__8wekyb3d8bbwe [2023-08-23] (Microsoft Corporation)

OneDrive -> C:\Program Files\WindowsApps\microsoft.microsoftskydrive_19.23.19.0_x64__8wekyb3d8bbwe [2023-03-07] (Microsoft Corporation)

Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.30.259.0_x64__dt26b99r8h8gj [2022-02-04] (Realtek Semiconductor Corp)

Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0 [2024-08-05] (Spotify AB) [Startup Task]

Telegram Desktop -> C:\Program Files\WindowsApps\TelegramMessengerLLP.TelegramDesktop_5.2.3.0_x64__t4vj0pshhgkwm [2024-07-07] (Telegram Messenger LLP) [Startup Task]

Websuche von Microsoft Bing -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.0.95.0_x64__8wekyb3d8bbwe [2024-07-28] (Microsoft Corporation)

WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2429.10.0_x64__cv1g1gvanyjgm [2024-07-28] (WhatsApp Inc.) [Startup Task]

XING -> C:\Program Files\WindowsApps\XINGAG.XING_4.0.9.0_x86__xpfg3f7e9an52 [2021-06-02] (New Work SE)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-584500284-1391629960-3397962802-1005_Classes\CLSID\{04271989-C4D2-3B08-EDAD-DFB9128A2A49} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}

CustomCLSID: HKU\S-1-5-21-584500284-1391629960-3397962802-1005_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\do83h\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.21105.1\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-584500284-1391629960-3397962802-1005_Classes\CLSID\{233525e0-5434-46ef-b464-fd7e45e2e145}\localserver32 -> C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe (Intel Corporation -> Intel)

CustomCLSID: HKU\S-1-5-21-584500284-1391629960-3397962802-1005_Classes\CLSID\{345D3165-3889-4694-AB75-A91A27B217E8}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2021\acad.exe (Autodesk, Inc. -> Autodesk, Inc.)

CustomCLSID: HKU\S-1-5-21-584500284-1391629960-3397962802-1005_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\do83h\AppData\Local\GoToMeeting\19228\G2MOutlookAddin64.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-584500284-1391629960-3397962802-1005_Classes\CLSID\{8B4929F8-076F-4AEC-AFEE-8928747B7AE3}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2021\acad.exe (Autodesk, Inc. -> Autodesk, Inc.)

CustomCLSID: HKU\S-1-5-21-584500284-1391629960-3397962802-1005_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> C:\Users\do83h\AppData\Local\Microsoft\Teams\current\Teams.exe (Microsoft Corporation -> Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-584500284-1391629960-3397962802-1005_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2021\de-DE\acadficn.dll (Autodesk Asia Pte. Ltd. -> Autodesk, Inc.)

ShellIconOverlayIdentifiers: [     OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncShell64.dll [2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [     OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncShell64.dll [2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [     OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncShell64.dll [2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [     OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncShell64.dll [2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [     OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncShell64.dll [2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [     OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncShell64.dll [2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [     OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncShell64.dll [2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [    GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\95.0.0.0\drivefsext.dll [2024-08-01] (Google LLC -> Google, Inc.)

ShellIconOverlayIdentifiers: [    GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\95.0.0.0\drivefsext.dll [2024-08-01] (Google LLC -> Google, Inc.)

ShellIconOverlayIdentifiers: [    GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\95.0.0.0\drivefsext.dll [2024-08-01] (Google LLC -> Google, Inc.)

ShellIconOverlayIdentifiers: [    GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\95.0.0.0\drivefsext.dll [2024-08-01] (Google LLC -> Google, Inc.)

ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2022-02-01] (Google LLC -> Google)

ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2022-02-01] (Google LLC -> Google)

ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2022-02-01] (Google LLC -> Google)

ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2020-01-22] (Autodesk, Inc. -> Autodesk, Inc.)

ShellIconOverlayIdentifiers-x32: [     OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncShell64.dll [2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [     OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncShell64.dll [2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [     OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncShell64.dll [2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [     OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncShell64.dll [2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [     OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncShell64.dll [2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [     OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncShell64.dll [2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [     OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncShell64.dll [2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncShell64.dll [2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2020-01-22] (Autodesk, Inc. -> Autodesk)

ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\95.0.0.0\drivefsext.dll [2024-08-01] (Google LLC -> Google, Inc.)

ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2022-02-01] (Google LLC -> Google)

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-05-17] (Malwarebytes Inc. -> Malwarebytes)

ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncShell64.dll [2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\95.0.0.0\drivefsext.dll [2024-08-01] (Google LLC -> Google, Inc.)

ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2022-02-01] (Google LLC -> Google)

ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncShell64.dll [2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\95.0.0.0\drivefsext.dll [2024-08-01] (Google LLC -> Google, Inc.)

ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-05-17] (Malwarebytes Inc. -> Malwarebytes)

ContextMenuHandlers1_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncShell64.dll [2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers4_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncShell64.dll [2024-08-02] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers5_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.141.0714.0003\FileSyncShell64.dll [2024-08-02] (Microsoft Corporation -> Microsoft Corporation)
 

==================== Codecs (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Drivers32: [msacm.pspgru] => C:\Windows\SysWOW64\pspgru.acm [401920 2010-03-22] (Philips Austria GmbH - Speech Processing) [Datei ist nicht signiert]
 

==================== Verknüpfungen & WMI ========================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

Shortcut: C:\Users\do83h\OneDrive\Bilder\Desktop\Google Drive.lnk -> C:\Program Files\Google\Drive File Stream\launch.bat ()
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
 

2024-08-08 20:01 - 2024-08-08 20:01 - 000114176 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\_ctypes.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000172544 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\_elementtree.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 002255872 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\_hashlib.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000032256 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\_multiprocessing.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000046080 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\_psutil_windows.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000047616 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\_socket.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 002825216 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\_ssl.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000026112 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\_yappi.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000080896 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\bz2.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000015872 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\common.time34.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000007680 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\hashobjs_ext.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000301568 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\PIL._imaging.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000168448 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\pyexpat.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 001084416 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\pysqlite2._sqlite.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000548864 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\pythoncom27.dll

2024-08-08 20:01 - 2024-08-08 20:01 - 000137728 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\pywintypes27.dll

2024-08-08 20:01 - 2024-08-08 20:01 - 000010752 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\select.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000020992 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\thumbnails_ext.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000689664 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\unicodedata.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000119808 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\usb_ext.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000128512 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\win32api.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000438784 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\win32com.shell.shell.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000011776 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\win32crypt.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000023040 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\win32event.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000149504 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\win32file.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000223232 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\win32gui.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000048128 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\win32inet.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000029696 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\win32pdh.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000027648 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\win32pipe.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000044032 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\win32process.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000020480 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\win32profile.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000136192 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\win32security.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000026624 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\win32ts.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000034304 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\windows.conditional.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000037888 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\windows.connectivity.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000071680 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\windows.device_monitor.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000103936 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\windows.volumes.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000019968 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\windows.winwrap.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 001325056 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\wx._controls_.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 001489408 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\wx._core_.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 001007104 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\wx._gdi_.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000103424 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\wx._html2.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 000916992 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\wx._misc_.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 001039872 _____ () [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\wx._windows_.pyd

2024-08-08 20:01 - 2024-08-08 20:01 - 003043328 _____ (Python Software Foundation) [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\python27.dll

2024-01-05 18:19 - 2024-01-05 18:19 - 001626624 _____ (Robert Simpson, et al.) [Datei ist nicht signiert] C:\Program Files\Intel\SUR\QUEENCREEK\x64\SQLite.Interop.dll

2024-01-05 18:19 - 2024-01-05 18:19 - 002973696 _____ (SQLite Development Team) [Datei ist nicht signiert] C:\Program Files\Intel\SUR\QUEENCREEK\x64\sqlite3.dll

2021-09-29 07:30 - 2021-09-29 07:30 - 000218624 _____ (WIBU-SYSTEMS AG) [Datei ist nicht signiert] C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.lDe

2021-09-29 07:30 - 2021-09-29 07:30 - 000056320 _____ (WIBU-SYSTEMS AG) [Datei ist nicht signiert] C:\Windows\SYSTEM32\WIBUCM64.lDe

2024-08-08 20:01 - 2024-08-08 20:01 - 000202240 _____ (wxWidgets development team) [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\wxbase30u_net_vc90_x64.dll

2024-08-08 20:01 - 2024-08-08 20:01 - 002831872 _____ (wxWidgets development team) [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\wxbase30u_vc90_x64.dll

2024-08-08 20:01 - 2024-08-08 20:01 - 001654784 _____ (wxWidgets development team) [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\wxmsw30u_adv_vc90_x64.dll

2024-08-08 20:01 - 2024-08-08 20:01 - 006542336 _____ (wxWidgets development team) [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\wxmsw30u_core_vc90_x64.dll

2024-08-08 20:01 - 2024-08-08 20:01 - 000773632 _____ (wxWidgets development team) [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\wxmsw30u_html_vc90_x64.dll

2024-08-08 20:01 - 2024-08-08 20:01 - 000137216 _____ (wxWidgets development team) [Datei ist nicht signiert] C:\Users\do83h\AppData\Local\Temp\_MEI130002\wxmsw30u_webview_vc90_x64.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\Windows:CM_460d012b145979dbf37dc3b0d01ccb88c0d32947f35d43424efdd9b5dd3d14d5 [74]

AlternateDataStreams: C:\Windows:CM_663b0d0a539d6165560218efcbd7453ad718e66208ff706cc3a31c7a8e4b9b0e [74]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 

HKU\S-1-5-21-584500284-1391629960-3397962802-1005\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"
 

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
 

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2024-05-19] (Microsoft Corporation -> Microsoft Corporation)

BHO: Dragon Web Extension For Internet Explorer -> {609C0837-8DD3-4F9B-AAC5-446F36BC0353} -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\x64\dgnriaie_x64.dll [2018-09-24] (Nuance Communications, Inc. -> Nuance Communications, Inc.)

BHO: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Program Files (x86)\Internet Explorer\Citavi Picker\x64\SwissAcademic.Citavi.IEPicker.DLL [2023-03-23] (Swiss Academic Software -> Swiss Academic Software)

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2024-05-19] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: Dragon Web Extension For Internet Explorer -> {609C0837-8DD3-4F9B-AAC5-446F36BC0353} -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\dgnriaie.dll [2018-09-24] (Nuance Communications, Inc. -> Nuance Communications, Inc.)

BHO-x32: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Program Files (x86)\Internet Explorer\Citavi Picker\SwissAcademic.Citavi.IEPicker.DLL [2023-03-23] (Swiss Academic Software -> Swiss Academic Software)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2024-07-14] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2024-07-14] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2024-07-14] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2024-07-14] (Microsoft Corporation -> Microsoft Corporation)

Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2024-07-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2024-07-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2024-07-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2024-07-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2024-07-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2024-07-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2024-07-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2024-07-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2024-07-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2024-07-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2024-07-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2024-07-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2024-07-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2024-07-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2024-07-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2024-07-02] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost

IE trusted site: HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\localhost -> localhost
 

==================== Hosts Inhalt: =========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2019-12-07 11:14 - 2024-08-02 15:33 - 000000027 _____ C:\Windows\system32\drivers\etc\hosts

127.0.0.1       localhost
 

==================== Andere Bereiche ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-584500284-1391629960-3397962802-1005\Control Panel\Desktop\\Wallpaper -> C:\Users\do83h\OneDrive\Bilder\20201203_232012.jpg

DNS Servers: 192.168.2.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

 ist aktiviert.
 

Network Binding:

=============

Bluetooth-Netzwerkverbindung: Bluetooth Device (Personal Area Network) -> bthpan.sys

WLAN: Intel(R) Wi-Fi 6 AX200 160MHz -> Netwtw10.sys

Ethernet 2: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 -> vpnva64-6.sys

Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys
 
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\StartupApproved\Run: => "EpicGamesLauncher"

HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"

HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-584500284-1391629960-3397962802-1005\...\StartupApproved\Run: => "GoogleDriveFS"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{870BCBC5-84EC-4D97-9806-6FC5A1648DF3}] => (Allow) C:\Program Files (x86)\Steam\steam.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{41C04D94-2DED-47AF-927D-24307823C8BC}] => (Allow) C:\Program Files (x86)\Steam\steam.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{483D104F-A1D4-4C63-AE89-0DA865596CDC}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{6A0DBC52-E83C-482A-949B-2DD9F2EEA734}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{0AA0F887-C941-41FA-BAF9-6D37D76D6CC5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{C3CC91C4-5B21-440C-AB06-7D0AFCD4BE2D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{81B799AB-882F-42FB-9FBF-8E4FF515F7E9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{E3071A0C-8214-41E2-8420-9F9986F6EF00}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{C231EB42-731F-4CE2-BAA6-B965B52CA9BB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{24C1533D-2763-41D1-93E9-DDD1B9F3A209}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{8EF565AE-949D-4A0A-9EDB-3AC9F239428C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{FA9B90AE-986B-4F51-B8E5-5897AFF6A3BB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{C51F8EE4-2E70-4C3E-960A-F04DC566BEB7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{C0ABFF40-35E9-4E8A-AF00-926300860327}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)

FirewallRules: [{163EED97-E72A-403F-9A76-4A19176D9199}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

FirewallRules: [{47F246AB-AF21-417F-8ABF-E4DB098EA0AC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.125.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{71992A7F-8AFE-4AA5-BD84-E1988C54D09A}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.125.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{F2A509C6-0111-433A-98BF-FB946E3BC01C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.125.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{D4DB30B7-5C9A-46A9-A73F-104163C735A6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.125.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

DomainProfile\AuthorizedApplications: [C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe] => Enabled:CodeMeter Runtime Server

StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe] => Enabled:CodeMeter Runtime Server
 

==================== Wiederherstellungspunkte =========================
 

07-08-2024 19:35:00 Geplanter Prüfpunkt
 

==================== Fehlerhafte Geräte im Gerätemanager ============
 

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64

Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Cisco Systems

Service: vpnva

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Fehlereinträge in der Ereignisanzeige: ========================
 

Applikationsfehler:

==================

Error: (08/08/2024 08:02:51 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT-AUTORITÄT)

Description: Windows kann die erweiterbare Leistungsindikator-DLL "C:\Windows\system32\sysmain.dll" nicht laden (Win32-Fehlercode 126).
 

Error: (08/07/2024 09:30:21 PM) (Source: DNS logging) (EventID: 0) (User: )

Description: Event-ID 0
 

Error: (08/07/2024 08:55:53 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-V3T0UTA)

Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.
 

Error: (08/07/2024 07:34:57 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )

Description: Die Speicheroptimierung konnte erneut optimieren auf HDDRIVE2GO (G:) nicht abschließen. Grund: Dieser Vorgang wird auf diesem Dateisystem nicht unterstützt. (0x89000020)
 

Error: (08/07/2024 06:01:21 PM) (Source: VSS) (EventID: 8193) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "QueryFullProcessImageNameW" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007001f, Ein an das System angeschlossenes Gerät funktioniert nicht..
 

Vorgang:

   Asynchroner Vorgang wird ausgeführt
 

Kontext:

   Aktueller Status: DoSnapshotSet
 

Error: (08/07/2024 05:52:21 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT-AUTORITÄT)

Description: Windows kann die erweiterbare Leistungsindikator-DLL "C:\Windows\system32\sysmain.dll" nicht laden (Win32-Fehlercode 126).
 

Error: (08/05/2024 09:19:47 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT-AUTORITÄT)

Description: Windows kann die erweiterbare Leistungsindikator-DLL "C:\Windows\system32\sysmain.dll" nicht laden (Win32-Fehlercode 126).
 

Error: (08/05/2024 09:17:14 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1017) (User: NT-AUTORITÄT)

Description: Erfassung von Leistungsindikatordaten von „BITS“ deaktiviert Dienst, weil die Leistungsindikatorbibliothek für diesen Dienst einen oder mehrere Fehler generiert hat. Die Fehler, die diese Aktion erzwungen haben, wurden in das Anwendungsereignisprotokoll geschrieben. Korrigieren Sie die Fehler, bevor Sie die Leistungsindikatoren für diesen Dienst aktivieren.
 
 

Systemfehler:

=============

Error: (08/07/2024 09:02:52 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (60000 ms) wurde beim Verbindungsversuch mit dem Dienst Intel(R) SUR QC Software Asset Manager erreicht.
 

Error: (08/07/2024 08:53:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 

Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.
 

Error: (08/07/2024 08:53:54 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (60000 ms) wurde beim Verbindungsversuch mit dem Dienst Google Update-Dienst (gupdate) erreicht.
 

Error: (08/07/2024 08:52:55 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (60000 ms) wurde beim Verbindungsversuch mit dem Dienst Intel(R) SUR QC Software Asset Manager erreicht.
 

Error: (08/07/2024 08:51:51 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "rsVPNClientSvc" wurde aufgrund folgenden Fehlers nicht gestartet: 

Das System kann die angegebene Datei nicht finden.
 

Error: (08/07/2024 08:51:51 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "rsVPNSvc" wurde aufgrund folgenden Fehlers nicht gestartet: 

Das System kann die angegebene Datei nicht finden.
 

Error: (08/07/2024 08:51:23 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "User Energy Server Service queencreek" wurde mit folgendem Fehler beendet: 

Debugger hat eine RIP-Ausnahme empfangen.
 

Error: (08/07/2024 08:49:21 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9NMPJ99VJBWV-Microsoft.YourPhone
 
 

Windows Defender:

================

Date: 2024-08-08 20:05:56

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=PUA:Win32/FusionCore.C&threatid=266656&enterprise=0

Name: PUA:Win32/FusionCore.C

Schweregrad: Niedrig

Kategorie: Potenziell unerwünschte Software

Pfad: file:_C:\Users\do83h\Downloads\CheatEngine72.exe

Erkennungsursprung: Lokaler Computer

Erkennungstype: Konkret

Erkennungsquelle: System

Benutzer: 

Prozessname: C:\Users\do83h\Downloads\FRST64.exe

Sicherheitsversion: AV: 1.417.26.0, AS: 1.417.26.0, NIS: 1.417.26.0

Modulversion: AM: 1.1.24070.3, NIS: 1.1.24070.3
 

Date: 2024-08-07 19:17:05

Description: 

Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.

Überprüfungs-ID: {2556CFA8-2EDF-4A09-91FB-2B4767C46843}

Überprüfungstyp: Antimalware

Überprüfungsparameter: Schnellüberprüfung

Benutzer: NT-AUTORITÄT\SYSTEM
 

Date: 2024-08-07 19:07:57

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=PUABundler:Win32/FusionCore&threatid=311944&enterprise=0

Name: PUABundler:Win32/FusionCore

Schweregrad: Niedrig

Kategorie: Potenziell unerwünschte Software

Pfad: file:_C:\FRST\Quarantine\C\Users\do83h\Downloads\CheatEngine681.exe.xBAD; file:_C:\Users\do83h\AppData\Local\Temp\_iu14D2N.tmp; file:_C:\Users\do83h\Downloads\CheatEngine681.exe; file:_G:\__Neuer PC Medion Oktober 2020\EXEn für Programm\CheatEngine681.exe

Erkennungsursprung: Lokaler Computer

Erkennungstype: Konkret

Erkennungsquelle: Echtzeitschutz

Benutzer: 

Prozessname: C:\Users\do83h\AppData\Local\Temp\{629e41e9-0dce-475f-8415-3122f85d0104}\a17a4b1f.exe

Sicherheitsversion: AV: 1.417.10.0, AS: 1.417.10.0, NIS: 1.417.10.0

Modulversion: AM: 1.1.24070.3, NIS: 1.1.24070.3
 

Date: 2024-08-05 21:03:42

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=Backdoor:Win32/mIRCbased&threatid=2147790169&enterprise=0

Name: Backdoor:Win32/mIRCbased

Schweregrad: Schwerwiegend

Kategorie: Hintertür

Pfad: file:_C:\Users\do83h\OneDrive\Dokumente\GermanFunScript\mirc.exe

Erkennungsursprung: Lokaler Computer

Erkennungstype: Konkret

Erkennungsquelle: Echtzeitschutz

Benutzer: DESKTOP-V3T0UTA\do83h

Prozessname: C:\Users\do83h\AppData\Local\Temp\{629e41e9-0dce-475f-8415-3122f85d0104}\a17a4b1f.exe

Sicherheitsversion: AV: 1.415.515.0, AS: 1.415.515.0, NIS: 1.415.515.0

Modulversion: AM: 1.1.24060.5, NIS: 1.1.24060.5
 

Date: 2024-08-05 20:35:49

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=PUA:Win32/FusionCore.C&threatid=266656&enterprise=0

Name: PUA:Win32/FusionCore.C

Schweregrad: Niedrig

Kategorie: Potenziell unerwünschte Software

Pfad: file:_C:\Users\do83h\Downloads\CheatEngine72.exe

Erkennungsursprung: Lokaler Computer

Erkennungstype: Konkret

Erkennungsquelle: System

Benutzer: 

Prozessname: C:\Users\do83h\AppData\Local\Temp\{629e41e9-0dce-475f-8415-3122f85d0104}\a17a4b1f.exe

Sicherheitsversion: AV: 1.415.515.0, AS: 1.415.515.0, NIS: 1.415.515.0

Modulversion: AM: 1.1.24060.5, NIS: 1.1.24060.5

Event[0]:
 

Date: 2023-03-18 11:58:52

Description: 

Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.

Neue Version der Sicherheitsinformationen: 

%Vorherige Version der Sicherheitsinformationen: 1.327.879.0

Update Source: Microsoft Center zum Schutz vor Schadsoftware

Sicherheitstyp: AntiVirus

Updatetyp: Voll

Benutzer: NT-AUTORITÄT\Netzwerkdienst

Aktuelle Modulversion: 

%Vorherige Modulversion: 1.1.17600.5

Fehlercode: 0x80004004

Fehlerbeschreibung: Vorgang abgebrochen 
 

Date: 2023-03-18 11:58:52

Description: 

Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.

Neue Version der Sicherheitsinformationen: 

%Vorherige Version der Sicherheitsinformationen: 1.327.879.0

Update Source: Microsoft Center zum Schutz vor Schadsoftware

Sicherheitstyp: AntiSpyware

Updatetyp: Voll

Benutzer: NT-AUTORITÄT\Netzwerkdienst

Aktuelle Modulversion: 

%Vorherige Modulversion: 1.1.17600.5

Fehlercode: 0x80004004

Fehlerbeschreibung: Vorgang abgebrochen 
 

Date: 2023-03-18 11:58:52

Description: 

Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.

Neue Version der Sicherheitsinformationen: 

%Vorherige Version der Sicherheitsinformationen: 1.327.879.0

Update Source: Microsoft Center zum Schutz vor Schadsoftware

Sicherheitstyp: AntiVirus

Updatetyp: Voll

Benutzer: NT-AUTORITÄT\Netzwerkdienst

Aktuelle Modulversion: 

%Vorherige Modulversion: 1.1.17600.5

Fehlercode: 0x80004004

Fehlerbeschreibung: Vorgang abgebrochen 
 

Date: 2023-03-18 11:58:49

Description: 

Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.

Neue Version der Sicherheitsinformationen: 1.385.384.0

%Vorherige Version der Sicherheitsinformationen: 1.327.879.0

Update Source: Benutzer

Sicherheitstyp: AntiSpyware

Updatetyp: Voll

Benutzer: NT-AUTORITÄT\Netzwerkdienst

Aktuelle Modulversion: 1.1.20100.6

%Vorherige Modulversion: 1.1.17600.5

Fehlercode: 0x80004004

Fehlerbeschreibung: Vorgang abgebrochen 
 

Date: 2023-03-18 11:58:49

Description: 

Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.

Neue Version der Sicherheitsinformationen: 1.385.384.0

%Vorherige Version der Sicherheitsinformationen: 1.327.879.0

Update Source: Benutzer

Sicherheitstyp: AntiVirus

Updatetyp: Voll

Benutzer: NT-AUTORITÄT\Netzwerkdienst

Aktuelle Modulversion: 1.1.20100.6

%Vorherige Modulversion: 1.1.17600.5

Fehlercode: 0x80004004

Fehlerbeschreibung: Vorgang abgebrochen 
 

CodeIntegrity:

===============

Date: 2024-08-08 20:03:49

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e8f9f51120464f93\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

Date: 2024-08-08 20:03:05

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.24060.7-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e8f9f51120464f93\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
 

==================== Speicherinformationen =========================== 
 

BIOS: American Megatrends Inc. 360H4W0X.116 02/25/2020

Hauptplatine: MEDION B360H4-EM

Prozessor: Intel(R) Core(TM) i5-9400 CPU @ 2.90GHz

Prozentuale Nutzung des RAM: 35%

Installierter physikalischer RAM: 16237.51 MB

Verfügbarer physikalischer RAM: 10397.32 MB

Summe virtueller Speicher: 18669.51 MB

Verfügbarer virtueller Speicher: 12979.68 MB
 

==================== Laufwerke ================================
 

Drive c: (Boot) (Fixed) (Total:449.85 GB) (Free:12.02 GB) (Model: E12-512G-PHISON-SSD-B16-BB1) NTFS

Drive d: (Recover) (Fixed) (Total:25 GB) (Free:7.09 GB) (Model: E12-512G-PHISON-SSD-B16-BB1) NTFS

Drive f: (INTENSO) (Removable) (Total:58.59 GB) (Free:57.37 GB) FAT32

Drive g: (HDDRIVE2GO) (Fixed) (Total:931.47 GB) (Free:425.92 GB) (Model: ASMT 2115 SCSI Disk Device) FAT32
 

\\?\Volume{b319fff4-b23e-42fe-b98d-753bae4dd40c}\ () (Fixed) (Total:0.98 GB) (Free:0.26 GB) NTFS

\\?\Volume{63a434ab-a066-44ea-8fb0-0e21ce378da4}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
 

==================== MBR & Partitionstabelle ====================
 

==========================================================

Disk: 0 (Size: 476.9 GB) (Disk ID: A9B97C02)
 

Partition: GPT.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 2.
 

==========================================================

Disk: 3 (Protective MBR) (Size: 58.6 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

==================== Ende von Addition.txt =======================

SecurityCheck

Code:

SecurityCheck by glax24 & Severnyj v.1.4.0.57 [24.01.24]

WebSite: www.safezone.cc

DateLog: 08.08.2024 20:09:11

Path starting: C:\Users\do83h\AppData\Local\Temp\SecurityCheck\SecurityCheck.exe

Log directory: C:\SecurityCheck\

IsAdmin: True

User: do83h

VersionXML: 12.43is-30.07.2024

___________________________________________________________________________
 

Windows 10(6.3.19045) (x64) Core Release: 2009 Lang: German(0407)

Installation date OS: 27.08.2020 06:57:47

LicenseStatus: Windows(R), Core edition The machine is permanently activated.

LicenseStatus: Office 16, Office16O365HomePremR_Grace edition Windows is in Notification mode

Boot Mode: Normal

Default Browser: C:\Program Files\Mozilla Firefox\firefox.exe

SystemDrive: C: FS: [NTFS] Capacity: [449.8 Gb] Used: [438 Gb] Free: [11.8 Gb]

------------------------------- [ Windows ] -------------------------------

User Account Control enabled (Level 3)

Sicherheitscenter (wscsvc) - The service is running

Remoteregistrierung (RemoteRegistry) - The service has stopped

SSDP-Suche (SSDPSRV) - The service is running

Remotedesktopdienste (TermService) - The service has stopped

Windows-Remoteverwaltung (WS-Verwaltung) (WinRM) - The service has stopped

---------------------------- [ Antivirus_WMI ] ----------------------------

Windows Defender (enabled and up to date)

--------------------------- [ FirewallWindows ] ---------------------------

Windows Defender Firewall (mpssvc) - The service is running

---------------------- [ AntiVirusFirewallInstall ] -----------------------

Malwarebytes version 5.1.6.117 v.5.1.6.117

--------------------------- [ OtherUtilities ] ----------------------------

Microsoft 365 Apps for Business - de-de v.16.0.17628.20188 Warning! Download Update
 How Install Office updates?

FileZilla Client 3.51.0 v.3.51.0 Warning! Download Update

Microsoft Edge WebView2-Laufzeit v.126.0.2592.113 Warning! Download Update

Steam v.2.10.91.91

Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.36.32532 v.14.36.32532.0 Warning! Download Update

Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.36.32532 v.14.36.32532.0 Warning! Download Update

Intel® Driver & Support Assistant v.24.4.32.8 [+]

------------------------------- [ Backup ] --------------------------------

Microsoft OneDrive v.24.141.0714.0003 [+]

Backup and Sync from Google v.3.57.4256.0809 Warning! This software is no longer supported. Please use Google Drive.

Google Drive v.95.0.0.0 [+]

------------------------------ [ ArchAndFM ] ------------------------------

7-Zip 22.01 (x64) v.22.01 Warning! Download Update
 Uninstall old version and install new one.

------------------------------- [ Imaging ] -------------------------------

GIMP 2.10.22 v.2.10.22 Warning! Download Update

-------------------------- [ IMAndCollaborate ] ---------------------------

GoToMeeting 10.20.0.19992 v.10.20.0.19992

Microsoft Teams v.1.4.00.18264 Warning! Download Update

Zoom v.5.13.5 (12053) Warning! Download Update

mIRC v.7.63 Warning! Download Update

-------------------------------- [ Media ] --------------------------------

VLC media player v.3.0.18 Warning! Download Update

--------------------------- [ AdobeProduction ] ---------------------------

Adobe Acrobat Reader - Deutsch v.24.002.20965

------------------------------- [ Browser ] -------------------------------

Mozilla Firefox (x64 de) v.128.0.3

Google Chrome v.127.0.6533.99 [+]

Microsoft Edge v.127.0.2651.86 [+]

------------------ [ AntivirusFirewallProcessServices ] -------------------

Malwarebytes Service (MBAMService) - The service is running

C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe v.3.2.0.1306

C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MsMpEng.exe v.4.18.24070.5

C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\NisSrv.exe v.4.18.24070.5

Microsoft Defender Antivirus-Dienst (WinDefend) - The service is running

Microsoft Defender Antivirus-Netzwerkinspektionsdienst (WdNisSvc) - The service is running

---------------------------- [ UnwantedApps ] -----------------------------

AppDataProtection v.24.5.0.45 << Hidden Warning! Suspected Adware! If this program is not familiar to you it is recommended to uninstall it and execute PC scanning using Malwarebytes Anti-Malware and Malwarebytes AdwCleaner. Before uninstallation and scanning it is necessary to consult in the forum where cure is provided for you!!!

----------------------------- [ End of Log ] ------------------------------