Trojaner-Board - Wondows 10 Pro - PDF Datei mit verdächtigen Namen lässt sich nicht löschen - Bluescreen

Zitat:

Zitat von cosinus (Beitrag 1767995)

Hi,

Logfiles bitte direkt und und CODE-Tags posten.

Ich hoffe jetzt ist es richtig

FRST

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 30-08-2022

durchgeführt von AR (Administrator) auf AR-DELL (Dell Inc. Inspiron 17-7779) (02-09-2022 18:43:12)

Gestartet von C:\Users\AR\Downloads

Geladene Profile: AR

Plattform: Microsoft Windows 10 Pro Version 21H1 19043.1889 (X64) Sprache: Deutsch (Deutschland)

Standard-Browser: Brave

Start-Modus: Normal
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.133\BraveCrashHandler.exe

(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.133\BraveCrashHandler64.exe

(C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.UserSessionAgent.exe

(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\DCF\Dell.DCF.UA.Bradbury.API.SubAgent.exe

(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\DataManagerSubAgent\Dell.TechHub.DataManager.SubAgent.exe

(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\DiagnosticsSubAgent\Dell.TechHub.Diagnostics.SubAgent.exe

(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe

(C:\Program Files\Logitech\LogiOptions\LogiOptions.exe ->) (Logitech Inc -> Logitech, Inc.) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe

(C:\Program Files\Rivet Networks\SmartByte\RAPSService.exe ->) (Rivet Networks LLC -> Rivet Networks LLC) C:\Program Files\Rivet Networks\SmartByte\RAPS.exe

(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCopyAccelerator.exe

(C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\bin\cloud-drive-ui.exe ->) (Synology Inc. -> Synology Inc.) C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\bin\cloud-drive-connect.exe

(C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\bin\cloud-drive-ui.exe ->) (Synology Inc. -> Synology Inc.) C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\bin\cloud-drive-daemon.exe

(DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxEM.exe

(explorer.exe ->) (Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe <44>

(explorer.exe ->) (DISPLAYLINK (UK) LIMITED -> DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkTrayApp.exe

(explorer.exe ->) (Henrik Wenz -> Henrik Wenz) C:\Users\AR\AppData\Local\Programs\all-in-one-messenger\All-in-One Messenger.exe <8>

(explorer.exe ->) (HP Inc. -> Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP Officejet Pro 8620\Bin\ScanToPCActivationApp.exe <2>

(explorer.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe

(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE

(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mstsc.exe

(explorer.exe ->) (milosp) C:\Program Files\WindowsApps\44576milosp.OneCommander_3.10.3.0_neutral__p0rg76fmnrgsm\Rapidrive\OneCommander.exe

(explorer.exe ->) (Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo75de.inf_amd64_5ff36f834a6d461a\WavesSvc64.exe

(explorer.exe ->) (Wistron Corporation -> Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe

(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe

(Intel\DPTF\esif_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\dptf_helper.exe

(Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe

(services.exe ->) (CHENGDU YIWO Tech Development Co., Ltd. -> ) C:\Program Files (x86)\EaseUS\ENS\ensserver.exe

(services.exe ->) (Cisco WebEx LLC -> Cisco WebEx LLC) C:\Windows\SysWOW64\atashost.exe

(services.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe

(services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files (x86)\Dell Customer Connect\DCCService.exe

(services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files\Dell\Dell Help & Support\MDLCSvc.exe

(services.exe ->) (Dell Inc -> Dell INC.) C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe

(services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe

(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe

(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe

(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe

(services.exe ->) (Dell Inc -> Dell) C:\Program Files\Dell\TechHub\Dell.TechHub.exe

(services.exe ->) (geek software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe <2>

(services.exe ->) (Glarysoft LTD -> Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\GUBootService.exe

(services.exe ->) (Glarysoft LTD -> Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\GUPMService.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxCUIService.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_9cf4db1a1fd1b22d\OneApp.IGCC.WinService.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_4de65d949492707a\IntelCpHDCPSvc.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_4de65d949492707a\IntelCpHeciSvc.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe

(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe

(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_ffd80069472091bc\RstMwService.exe

(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe

(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>

(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvdm.inf_amd64_4793842ae20151f0\Display.NvContainer\NVDisplay.Container.exe <2>

(services.exe ->) (philandro Software GmbH -> AnyDesk Software GmbH) C:\Program Files (x86)\AnyDesk\AnyDesk.exe

(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <3>

(services.exe ->) (Rivet Networks LLC -> Rivet Networks) C:\Program Files\Rivet Networks\SmartByte\SmartByteAnalyticsService.exe

(services.exe ->) (Rivet Networks LLC -> Rivet Networks) C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe

(services.exe ->) (Rivet Networks LLC -> Rivet Networks, LLC.) C:\Program Files\Rivet Networks\SmartByte\RAPSService.exe

(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe

(services.exe ->) (Synology Inc. -> ) C:\Program Files (x86)\Synology\SynologyDrive\bin\vss-service-x64.exe

(services.exe ->) (Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo75de.inf_amd64_5ff36f834a6d461a\WavesSysSvc64.exe

(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\SDXHelper.exe

(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Cortana.exe

(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22062.542.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe <2>

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Speech_OneCore\common\SpeechRuntime.exe

(Synology Inc. -> Synology Inc.) C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\bin\cloud-drive-ui.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [3893296 2016-05-17] (Wistron Corporation -> Dell Inc.)

HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [2109064 2019-11-27] (Logitech Inc -> Logitech, Inc.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3951024 2019-10-11] (Microsoft Windows Hardware Compatibility Publisher -> Logitech, Inc.)

HKLM\...\Run: [WavesSvc] => C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo75de.inf_amd64_5ff36f834a6d461a\WavesSvc64.exe [1222536 2018-12-05] (Waves Inc -> Waves Audio Ltd.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [834336 2019-02-26] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM\...\Run: [DisplayLinkTrayApp] => C:\Program Files\DisplayLink Core Software\DisplayLinkTrayApp.exe [6342856 2021-05-11] (DISPLAYLINK (UK) LIMITED -> DisplayLink Corp.)

HKLM\...\Run: [WinZip UN] => C:\Program Files\WinZip\WZUpdateNotifier.exe [2814096 2020-02-25] (Corel Corporation -> Corel Corporation)

HKLM\...\Run: [PDF24] => C:\Program Files\PDF24\pdf24.exe [592608 2022-07-13] (geek software GmbH -> geek software GmbH)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)

HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Beschränkung <==== ACHTUNG

HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\Run: [HP Officejet Pro 8620 (NET) #2] => C:\Program Files\HP\HP Officejet Pro 8620\Bin\ScanToPCActivationApp.exe [3486368 2021-11-30] (HP Inc. -> Hewlett-Packard Development Company, LP)

HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\Run: [HPECF0D0 (HP Officejet Pro 8620)] => C:\Program Files\HP\HP Officejet Pro 8620\Bin\ScanToPCActivationApp.exe [3486368 2021-11-30] (HP Inc. -> Hewlett-Packard Development Company, LP)

HKU\S-1-5-21-3220973240-3280425687-1539964896-500\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe -os-restarted [666960 2022-08-27] (Mozilla Corporation -> Mozilla Corporation)

HKU\S-1-5-21-3220973240-3280425687-1539964896-500\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2629520 2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

HKLM\...\Print\Monitors\HP 7012 Status Monitor: C:\WINDOWS\system32\hpinksts7012LM.dll [328704 2014-03-03] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Co.)

HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Officejet Pro 8620): C:\WINDOWS\system32\HPDiscoPM7012.dll [763040 2021-11-30] (HP Inc. -> Hewlett-Packard Development Company, LP)

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\104.0.5112.102\Installer\chrmstp.exe [2022-08-22] (Google LLC -> Google LLC)

HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\105.1.43.88\Installer\chrmstp.exe [2022-09-01] (Brave Software, Inc. -> Brave Software, Inc.)

Startup: C:\Users\AR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Synology Drive Client.lnk [2022-09-02]

ShortcutTarget: Synology Drive Client.lnk -> C:\Program Files (x86)\Synology\SynologyDrive\bin\launcher.exe (Synology Inc. -> Synology Inc.)

Startup: C:\Users\AR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet Pro 8620.lnk [2022-09-02]

ShortcutAndArgument: Tintenwarnungen überwachen - HP Officejet Pro 8620.lnk -> C:\WINDOWS\system32\RunDll32.exe => "C:\Program Files\HP\HP Officejet Pro 8620\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN63KFW165;CONNECTION=USB;MONITOR=1;

BootExecute: autocheck autochk *  
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {030CF179-90DF-4C6D-80FB-AC2CC098F6A8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-03-07] (Google Inc -> Google Inc.)

Task: {0318FD73-3EC5-4C3C-85DE-61078738A432} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)

Task: {06278D0B-8E14-4706-BBBC-0D6C1120AFFE} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [6570472 2022-08-31] (Microsoft Corporation -> Microsoft Corporation)

Task: {084101FA-9324-428B-8CEB-33A5861EC636} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {0BED3D25-098B-40B1-BA4A-36909B358BA6} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2021-11-18] (Brave Software, Inc. -> BraveSoftware Inc.)

Task: {1251D14E-1773-41CC-BDA7-4A1CA40CD004} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2021-11-18] (Brave Software, Inc. -> BraveSoftware Inc.)

Task: {15ACD386-64CA-40AA-827B-2B92A1B671BB} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe do-task "E7CF176E110C211B"

Task: {284A8A5B-7DE5-4781-8021-5688E2E47996} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3220973240-3280425687-1539964896-500 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4154248 2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

Task: {2AEA4CBA-9C79-4A09-9741-F7B0D510CABF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {2BD5930E-C7AA-48E2-B073-0F99A31FC79B} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\IntelPTTEKRecertification.exe [818008 2021-09-15] (Intel Corporation -> Intel(R) Corporation)

Task: {2EB36D93-9B29-45C4-A94F-DDE44D3659FD} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [116632 2022-08-31] (Microsoft Corporation -> Microsoft Corporation)

Task: {2F1DBA31-F773-484A-9CAA-16BA2DBA367C} - System32\Tasks\WinZip Update Notifier 3 => C:\Program Files\WinZip\WZUpdateNotifier.exe [2814096 2020-02-25] (Corel Corporation -> Corel Corporation)

Task: {3747A056-34EA-453F-8244-530C74798AA0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {3DFCEBDC-D553-4767-90C2-328B0E0EAB4D} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3220973240-3280425687-1539964896-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4154248 2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

Task: {3F800F2B-8BE0-4F40-840D-2E69E15417D6} - System32\Tasks\WinZip Update Notifier 1 => C:\Program Files\WinZip\WZUpdateNotifier.exe [2814096 2020-02-25] (Corel Corporation -> Corel Corporation)

Task: {44B74B5E-67C2-40A6-A52E-ECC2F7EEA889} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [4475136 2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)

Task: {47038120-DBA8-4376-AFDA-DEBD27F6A60B} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)

Task: {4C8AFA11-D3B8-471E-A1BA-C7DB4131ED3A} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG

Task: {676D9780-E075-4813-8A9E-936E22A115E3} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906752 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)

Task: {73B66B52-B5E4-4F00-853E-3F01D1C646C4} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646344 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)

Task: {7C6BE2BB-152A-4DCE-B843-726C99863744} - System32\Tasks\Optimize Push Notification Data File-S-1-5-21-3220973240-3280425687-1539964896-500 => {201600D8-6EFF-48CE-B842-E14D37A0682D} C:\WINDOWS\System32\wpninprc.dll [24064 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

Task: {800DC2FE-65BA-4C57-A106-5049111CF4A3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {A774CB27-34AF-473B-9DFA-F8BE42528C43} - System32\Tasks\Mozilla\Firefox Background Update E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask backgroundupdate

Task: {A7E162D3-4F21-4122-AA3D-8A2A1ECF5E87} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK

Task: {AC6624F1-9C61-4FF4-B0E4-06C68CFA0F20} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)

Task: {B0A15D36-9523-44A2-B284-E397D5432149} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4154248 2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

Task: {BBAA493E-6786-40E7-830F-3EBA1729ACFB} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23713200 2022-08-02] (Microsoft Corporation -> Microsoft Corporation)

Task: {BECFB25C-0985-45E7-AED9-7D85FDD71915} - System32\Tasks\HPCustParticipation HP Officejet Pro 8620 => C:\Program Files\HP\HP Officejet Pro 8620\Bin\HPCustPartic.exe [5744800 2021-11-30] (HP Inc. -> Hewlett-Packard Development Company, LP)

Task: {C8986703-3803-450F-A373-5598AC1F7B0F} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)

Task: {C9D77B54-A26B-41B6-86A3-02DE329B54D7} - System32\Tasks\WinZip Update Notifier 2 => C:\Program Files\WinZip\WZUpdateNotifier.exe [2814096 2020-02-25] (Corel Corporation -> Corel Corporation)

Task: {C9D994DC-22CE-4497-9548-CD7219C5349B} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3342080 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)

Task: {CE42D257-B237-4D22-AAE8-A2BE94A5A906} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1003128 2022-03-01] (Nvidia Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log

Task: {D3563C98-9F23-43EB-B45F-EC9D99842F5B} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\FrameworkAgents\SupportAssistInstaller.exe [663392 2022-08-22] (Dell Inc -> Dell Inc.)

Task: {D71F3985-3312-4D17-93DB-1BB5FAA70069} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23713200 2022-08-02] (Microsoft Corporation -> Microsoft Corporation)

Task: {DA5355A5-6B71-4705-BDF9-96EEA61BAE29} - System32\Tasks\G2MUploadTask-S-1-5-21-3220973240-3280425687-1539964896-1001 => C:\Users\AR\AppData\Local\GoToMeeting\19950\g2mupload.exe [33456 2022-08-07] (LogMeIn, Inc. -> LogMeIn, Inc.)

Task: {DE550027-F199-4E67-A40E-12A08F93D352} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-03-07] (Google Inc -> Google Inc.)

Task: {E549966C-1E01-4B88-B1A4-56C1186D72A3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [6570472 2022-08-31] (Microsoft Corporation -> Microsoft Corporation)

Task: {E80A164C-1D73-43EC-A336-F6BBD6C16B56} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906752 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)

Task: {F855D619-26F4-4C58-9204-71A0A28DC400} - System32\Tasks\G2MUpdateTask-S-1-5-21-3220973240-3280425687-1539964896-1001 => C:\Users\AR\AppData\Local\GoToMeeting\19950\g2mupdate.exe [33456 2022-08-07] (LogMeIn, Inc. -> LogMeIn, Inc.)

Task: {FE365810-C33E-4E71-AB22-4488DC141919} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [116632 2022-08-31] (Microsoft Corporation -> Microsoft Corporation)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-3220973240-3280425687-1539964896-1001.job => C:\Users\AR\AppData\Local\GoToMeeting\19950\g2mupdate.exe

Task: C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-3220973240-3280425687-1539964896-1001.job => C:\Users\AR\AppData\Local\GoToMeeting\19950\g2mupload.exe

Task: C:\WINDOWS\Tasks\RunDLC.job => cmd c sc start Dell Help SupportWORKGROUP AR DELL

Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe-CheckUpdate(Tracker Software Products (Canada) Ltd.Kee
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{1d0ac1ee-0caa-4089-8e82-f0dcd41815dc}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{1daca583-56f2-4e85-8fc4-3c101282df7e}: [DhcpNameServer] 192.168.2.1
 

Edge: 

=======

Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]

Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]

Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]

Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]

Edge DefaultProfile: Default

Edge Profile: C:\Users\AR\AppData\Local\Microsoft\Edge\User Data\Default [2022-08-28]
 

FireFox:

========

FF DefaultProfile: piwot1xb.default-1614160673643

FF ProfilePath: C:\Users\AR\AppData\Roaming\Mozilla\Firefox\Profiles\piwot1xb.default-1614160673643 [2022-08-31]

FF Homepage: Mozilla\Firefox\Profiles\piwot1xb.default-1614160673643 -> hxxps://web.de/

FF Session Restore: Mozilla\Firefox\Profiles\piwot1xb.default-1614160673643 -> ist aktiviert.

FF Notifications: Mozilla\Firefox\Profiles\piwot1xb.default-1614160673643 -> hxxps://mail.protonmail.com; hxxps://web.whatsapp.com

FF Extension: (Cisco Webex Extension) - C:\Users\AR\AppData\Roaming\Mozilla\Firefox\Profiles\piwot1xb.default-1614160673643\Extensions\ciscowebexstart1@cisco.com.xpi [2022-07-22]

FF Extension: (Kee - Password Manager) - C:\Users\AR\AppData\Roaming\Mozilla\Firefox\Profiles\piwot1xb.default-1614160673643\Extensions\keefox@chris.tomlinson.xpi [2021-05-06]

FF Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\AR\AppData\Roaming\Mozilla\Firefox\Profiles\piwot1xb.default-1614160673643\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2022-08-30]

FF Extension: (1Password – Passwort-Manager) - C:\Users\AR\AppData\Roaming\Mozilla\Firefox\Profiles\piwot1xb.default-1614160673643\Extensions\{d634138d-c276-4fc8-924b-40a0ea21d284}.xpi [2022-07-08]

FF ProfilePath: C:\Users\AR\AppData\Roaming\kompozer.net\KompoZer\Profiles\3761y37m.default [2018-02-24]

FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)

FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)

FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2022-08-31] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-08-31] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)

FF Plugin HKU\S-1-5-21-3220973240-3280425687-1539964896-1001: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)

FF Plugin ProgramFiles/Appdata: C:\Users\AR\AppData\Roaming\mozilla\plugins\npatgpc.dll [2018-10-02]
 

Chrome: 

=======

CHR Profile: C:\Users\AR\AppData\Local\Google\Chrome\User Data\Default [2022-09-01]

CHR Extension: (Google Docs Offline) - C:\Users\AR\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-09-01]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\AR\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-24]
 

Brave: 

=======

BRA DefaultProfile: Default

BRA Profile: C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2022-09-02]

BRA StartupUrls: Default -> "hxxps://web.de/magazine/panorama/ehemaliges-heimkind-versuchskaninchen-pharmaindustrie-37207212","hxxps://www.ebay-kleinanzeigen.de/p-anzeige-aufgeben-bestaetigung.html?adId=1500132752&uuid=210ac365-1221-49ae-8a84-59929efdd28a&edited=true","hxxps://bulksell.ebay.de/ws/eBayISAPI.dll?SingleList&sellingMode=ReviseItem&&lineID=195295013856&guest=1","hxxps://mesg.ebay.de/mesgweb/ViewMessages/0/All","hxxps://www.dein-heizungsbauer.de/ratgeber/bauen-sanieren/waermepumpe-arten/","hxxps://solar.huawei.com/de/Products/FusionSolar","hxxps://krannich-solar.com/de-de/unternehmen/kontakt","hxxps://pvaustria.at/technische-grundlagen/","hxxps://www.tecalor.de/de/home.html","hxxps://www.pvxchange.com/Wechselrichter/HUAWEI/SUN2000-12KTL-M2-996000051","hxxps://www.pvxchange.com/mediafiles/pvxchange/attachments/Datasheet_SUN2000-12_20KTL-M2.pdf","hxxps://www.pvxchange.com/Wechselrichter/AC-Nennleistung-5-kW-bis-10-kW::HUAWEI#hfilter","hxxps://www.google.com/search?q=SPR-MAX3-400&ei=0IP7YpTCHbeF9u8PsPex-Ac&ved=0ahUKEwiU6s-Apcv5AhW3gv0HHbB7DH8Q4dUDCA4&oq=SPR-MAX3-400&gs_lcp=Cgdnd3Mtd2l6EAwyBQgAEIAEMgUIABCABDIFCAAQgAQyBQgAEIAEMgQIABAeMgQIABAeMgQIABAeMgYIABAeEAVKBAhBGABKBAhGGABQAFgAYOJoaABwAXgAgAGDAYgBgwGSAQMwLjGYAQCgAQKgAQHAAQE&sclient=gws-wiz","hxxps://www.photovoltaik4all.de/komplettanlagen/?p=6","hxxps://www.memodo.de/sunpower-maxeon-3-400-watt","hxxps://www.hte-shop.de/admin/cache.php","hxxps://www.forexbestshop.com/product/ultimate-trend-following-indicator/","hxxp://themeloader.com/","hxxps://www.google.com/search?q=%C3%BCbersetzer&oq=%C3%BCbersetzer&aqs=chrome.0.69i59.3365j0j1&sourceid=chrome&ie=UTF-8","hxxps://fxmt4indicators.com/product/ultimate-trend-following-indicator/","hxxps://www.pvxchange.com/Mein-Konto","hxxps://www.pvxchange.com/Wechselrichter/HUAWEI/SUN2000-8KTL-M1-High-Current-Version-996000257","hxxps://www.pvxchange.com/mediafiles/pvxchange/attachments/Datasheet_SUN2000-12_20KTL-M2.pdf","hxxps://www.maxsel.de/","hxxps://www.photovoltaik4all.de/phoenix-contact-pv-gak-sol-sc-1st-0-dc-2mppt-1000se","hxxps://www.photovoltaik-shop.com/mwdownloads/download/link/id/160/","hxxps://www.shinetech-power.de/solar-module/jinko/","hxxps://www.photovoltaik4all.de/speicher/?p=1","hxxps://www.amazon.de/dp/B00KM3URHG/ref=cm_sw_r_api_i_YKPE5YN27RTHSFNKPZB4_0?_encoding=UTF8&psc=1","hxxps://www.photovoltaik-shop.com/wechselrichter-huawei-sun2000-12ktl-m2.html","hxxps://www.google.com/search?q=NOCT+module+leistung&oq=NOCT+module+leistung&aqs=chrome..69i57.9663j0j1&sourceid=chrome&ie=UTF-8","hxxps://solaranlagen-forum.com/forum/board/2-photovoltaikanlagen-planung/?pageNo=3","hxxps://my.1password.com/signin?landing-page=%2Fvaults%2Faeg7aqj5ba2eq4bq7w6y6xdpgy%2F001%2F4mh6jszqnwrelnwfjc6ir2mqui","hxxps://www.maxsel.de/produkt-kategorie/wechselrichter/hybrid-wechselrichter/hybrid-wechselrichter-von-huawei/","hxxps://www.photovoltaikforum.com/thread/162394-unterschied-huawei-sun2000-15ktl-m0-bzw-sun2000-15ktl-m2/","hxxps://www.rechnerphotovoltaik.de/photovoltaik/kosten-finanzierung/kosten-preise","hxxps://www.pvxchange.com/Energiespeicher","hxxps://www.pvxchange.com/mediafiles/pvxchange/attachments/Datasheet_SUN2000-12_20KTL-M2.pdf","hxxps://www.pvxchange.com/mediafiles/pvxchange/attachments/Datasheet_SUN2000-12_20KTL-M2.pdf","hxxps://www.google.com/search?q=SUN2000-12KTL-M2&oq=SUN2000-12KTL-M2&aqs=chrome..69i57j69i60l3.1555j0j1&sourceid=chrome&ie=UTF-8","hxxps://www.voltus.de/?cl=details&anid=3b700e2210d7deed529db81fc5ab546a&iaid=20220821100846547401060df99a0b","hxxps://www.ske-solar.com/produkt/huawei-sun2000-12ktl-m2-wechselrichter/","hxxps://www.voltus.de/?cl=details&anid=1548031267957e2262455efd58a725ab&iaid=2022082112334243323735bbc9be2d","hxxps://forum.jtl-software.de/threads/artikelmerkmale-sortieren-nicht-konsequent.136983/","hxxps://guide.jtl-software.de/jtl-wawi/jtl-ameise/attribute-merkmale-und-eigene-felder-importieren/","hxxps://forum.jtl-software.de/attachments/bildschirmfoto-2020-09-17-um-12-21-50-png.46593/","hxxps://www.shinetech-power.de/","hxxps://www.memodo.de/jinkosolar-jkm375n-6tl3-v","hxxps://www.google.com/search?q=%C3%BCbersetzer&oq=%C3%BCbersetzer&aqs=chrome.0.69i59.5520j0j1&sourceid=chrome&ie=UTF-8","hxxps://www.sparda-bw.de/","hxxps://www.jtl-software.de/extension-store/wnm-eu-energielabels-jtl-shop-5","hxxp://hte-shop.de/"

BRA DefaultSearchKeyword: Default -> :g

BRA Session Restore: Default -> ist aktiviert.

BRA Extension: (Google Übersetzer) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2022-03-10]

BRA Extension: (lock) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\aeblfdkhhhdcdjpifhhbdiojplfjncoa [2022-07-07]

BRA Extension: (Mate Translate – Übersetzer, Wörterbuch) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\ihmgiclibbndffejedjimfjmfoabpcke [2022-08-30]

BRA Profile: C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\System Profile [2022-08-25]

BRA Extension: (Brave Local Data Files Updater) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2022-09-01]

BRA Extension: (Brave NTP background images) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2022-08-11]

BRA Extension: (Brave Ads Resources) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\bbefpembgddgdihpkcidgdgiojjlchji [2021-12-09]

BRA Extension: (Wallet Data Files Updater) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2022-08-17]

BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2022-09-02]

BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2022-09-01]

BRA Extension: (Brave Ad Block Updater (EasyList Germany)) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\faknfgalcghekhfggcdikddilkpjbonh [2022-09-02]

BRA Extension: (Brave Ads Resources) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\jcncoheihebhhiemmbmpfhkceomfipbj [2021-12-09]

BRA Extension: (Brave SpeedReader Updater) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\jicbkmdloagakknpihibphagfckhjdih [2022-03-11]

BRA Extension: (Brave NTP sponsored images) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\obbokncgfcbepeipkhpdepjjoncelefj [2022-09-02]

BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\AR\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2022-08-31]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [3853384 2022-08-12] (philandro Software GmbH -> AnyDesk Software GmbH)

S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2021-11-18] (Brave Software, Inc. -> BraveSoftware Inc.)

S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162456 2021-11-18] (Brave Software, Inc. -> BraveSoftware Inc.)

R3 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12102608 2022-08-02] (Microsoft Corporation -> Microsoft Corporation)

R2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [458960 2022-08-16] (Dell Inc -> Dell Technologies Inc.)

R2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [161488 2022-08-16] (Dell Inc -> Dell Technologies Inc.)

R2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [484560 2022-08-16] (Dell Inc -> Dell Technologies Inc.)

R2 Dell Customer Connect; C:\Program Files (x86)\Dell Customer Connect\DCCService.exe [130936 2017-09-19] (Dell Inc -> Dell Inc.)

S4 Dell Foundation Services; C:\Program Files\Dell\Dell Foundation Services\DFSSvc.exe [97616 2017-01-11] (Dell Inc -> Dell)

R2 Dell Help & Support; C:\Program Files\Dell\Dell Help & Support\MDLCSvc.exe [41008 2018-01-16] (Dell Inc -> Dell Inc.)

R2 Dell SupportAssist Remediation; C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe [22224 2022-08-11] (Dell Inc -> Dell INC.)

R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [45784 2022-08-17] (Dell Inc -> )

R2 DellTechHub; C:\Program Files\Dell\TechHub\Dell.TechHub.exe [156064 2022-08-15] (Dell Inc -> Dell)

R2 EaseUS UPDATE SERVICE; C:\Program Files (x86)\EaseUS\ENS\ensserver.exe [27784 2021-11-15] (CHENGDU YIWO Tech Development Co., Ltd. -> )

S3 ElfoService; C:\Program Files (x86)\ElsterFormular Update Service\bin\elfoService.exe [1113864 2020-03-18] (Bayerisches Landesamt fuer Steuern -> )

S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncHelper.exe [3380624 2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

R2 GUBootService; C:\Program Files (x86)\Glary Utilities 5\GUBootService.exe [875392 2021-12-12] (Glarysoft LTD -> Glarysoft Ltd)

R2 GUPMService; C:\Program Files (x86)\Glary Utilities 5\GUPMService.exe [65408 2021-12-12] (Glarysoft LTD -> Glarysoft Ltd)

S4 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2016-03-02] (Intel Corporation) [Datei ist nicht signiert]

S4 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-02] (Intel Corporation) [Datei ist nicht signiert]

S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.166.0807.0002\OneDriveUpdaterService.exe [3800976 2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

R2 PDF24; C:\Program Files\PDF24\pdf24.exe [592608 2022-07-13] (geek software GmbH -> geek software GmbH)

S4 Product Registration; C:\Program Files\Dell\Dell Product Registration\PRSvc.exe [47144 2017-04-06] (Dell Inc -> Dell)

R2 RAPSService; C:\Program Files\Rivet Networks\SmartByte\RAPSService.exe [64848 2020-08-14] (Rivet Networks LLC -> Rivet Networks, LLC.)

S3 RNDBWM; C:\Program Files\Rivet Networks\SmartByte\RNDBWMService.exe [64856 2020-08-14] (Rivet Networks LLC -> Rivet Networks, LLC.)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6255896 2022-08-10] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 SmartByte Analytics Service; C:\Program Files\Rivet Networks\SmartByte\SmartByteAnalyticsService.exe [1630576 2020-08-14] (Rivet Networks LLC -> Rivet Networks)

R2 SmartByte Network Service x64; C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe [2385256 2020-08-14] (Rivet Networks LLC -> Rivet Networks)

R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)

R2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [160096 2022-08-22] (Dell Inc -> Dell Inc.)

R2 Synology Drive VSS Service x64; C:\Program Files (x86)\Synology\SynologyDrive\bin\vss-service-x64.exe [372208 2022-04-26] (Synology Inc. -> )

S3 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [14621592 2022-07-13] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe [3120992 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe [133544 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvdm.inf_amd64_4793842ae20151f0\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvdm.inf_amd64_4793842ae20151f0\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
 

===================== Treiber (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]

S3 DDDriver; C:\WINDOWS\System32\drivers\dddriver64Dcsa.sys [43400 2021-09-09] (Microsoft Windows Hardware Compatibility Publisher -> Dell Technologies)

R3 DellInstrumentation; C:\WINDOWS\System32\drivers\DellInstrumentation.sys [37808 2022-05-20] (Microsoft Windows Hardware Compatibility Publisher -> Dell)

S3 DellProf; C:\WINDOWS\system32\drivers\DellProf.sys [41208 2018-05-08] (Techporch Incorporated -> Dell Computer Corporation)

S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

R3 dlcdcncm; C:\WINDOWS\System32\drivers\dlcdcncm62_x64.sys [81744 2021-05-28] (DISPLAYLINK (UK) LIMITED -> DisplayLink Corp.)

S3 dlusbaudio; C:\WINDOWS\system32\DRIVERS\dlusbaudio_x64.sys [238352 2017-09-18] (DISPLAYLINK -> DisplayLink Corp.)

R2 DpmLiteDrv; c:\Program Files\Dell\QuickSet\DpmLiteDrv64.sys [15080 2014-10-15] (Wistron Corporation -> Wistron Corp.)

R1 GUBootStartup; C:\WINDOWS\System32\drivers\GUBootStartup.sys [30720 2021-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Glarysoft Ltd)

R3 MpKsl24634efd; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{84C5DA60-4792-4526-9486-B8D2E6FC3DF4}\MpKslDrv.sys [141576 2022-09-02] (Microsoft Windows -> Microsoft Corporation)

R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48552 2021-11-01] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)

R3 SmbCoSvc; C:\WINDOWS\system32\DRIVERS\SmbCo10X64.sys [164424 2020-08-14] (Rivet Networks LLC -> Rivet Networks, LLC.)

S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167544 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-06-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [452856 2022-06-23] (Microsoft Windows -> Microsoft Corporation)

R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [91384 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

Fehler beim Lesen der Datei: "C:\Users\AR\Desktop\eyJraWQiOiJsbmstc3J2LXYxIiwiYWxnIjoiUlMyNTYifQ.eyJpc3MiOiJsbmstc3J2IiwiYXVkIjoibG5rLXJlcyIsImV4cCI6MTY1NDE2MjA2MiwianRpIjoiMzBjMzZlZDQtMWM0NS00ODQxLTgxMzYtMjEyMjYwOWE2NzA1LUlVLWlOdnF4bWZyMmZZOENKQmxFcWciLCJpYXQiOjE2NTQxNjExNjIsInR5cCI6ImtyZWRfaW52b2lj.pdf"

2022-09-02 18:42 - 2022-09-02 18:42 - 002371072 _____ (Farbar) C:\Users\AR\Downloads\FRST64 (3).exe

2022-09-02 11:49 - 2022-09-02 11:49 - 000068202 _____ C:\Users\AR\Downloads\Verkaufsschild--Lieferbar---Jinko-PV-Module-375W-Tiger-All-Black-JKM-M6RL3B (1).pdf

2022-09-02 11:47 - 2022-09-02 11:47 - 000068202 _____ C:\Users\AR\Downloads\Verkaufsschild--Lieferbar---Jinko-PV-Module-375W-Tiger-All-Black-JKM-M6RL3B.pdf

2022-09-01 22:42 - 2022-09-01 22:43 - 000111420 _____ C:\Users\AR\Downloads\Auftragsbestätigung 2022210055.PDF

2022-09-01 22:39 - 2022-09-01 22:39 - 000077870 _____ C:\Users\AR\Downloads\Angebot (1).pdf

2022-09-01 21:25 - 2022-09-01 21:33 - 000074657 _____ C:\Users\AR\Downloads\Addition.txt

2022-09-01 21:15 - 2022-09-02 18:44 - 000046032 _____ C:\Users\AR\Downloads\FRST.txt

2022-09-01 21:14 - 2022-09-01 21:14 - 002371072 _____ (Farbar) C:\Users\AR\Downloads\FRST64 (2).exe

2022-09-01 21:13 - 2022-09-01 21:13 - 002371072 _____ (Farbar) C:\Users\AR\Downloads\FRST64 (1).exe

2022-09-01 21:12 - 2022-09-01 21:13 - 002371072 _____ (Farbar) C:\Users\AR\Downloads\FRST64.exe

2022-09-01 21:04 - 2022-09-01 21:04 - 003373192 _____ (Crystal Rich Ltd ) C:\Users\AR\Downloads\lockhuntersetup_3-4-3 (1).exe

2022-09-01 20:56 - 2022-09-01 20:57 - 000000000 ____D C:\ProgramData\LockHunter

2022-09-01 20:48 - 2022-09-01 20:48 - 000000934 ____C C:\Users\AR\Desktop\LockHunter.lnk

2022-09-01 20:47 - 2022-09-01 20:47 - 000000000 ____D C:\Users\AR\AppData\Roaming\LockHunter

2022-09-01 20:47 - 2022-09-01 20:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LockHunter

2022-09-01 20:47 - 2022-09-01 20:47 - 000000000 ____D C:\Program Files\LockHunter

2022-09-01 20:46 - 2022-09-01 20:46 - 003373192 _____ (Crystal Rich Ltd ) C:\Users\AR\Downloads\lockhuntersetup_3-4-3.exe

2022-09-01 20:39 - 2022-09-01 20:39 - 001078591 _____ C:\Users\AR\Downloads\Unlocker1.9.2 (1).exe

2022-09-01 20:20 - 2022-09-01 20:20 - 001078591 _____ C:\Users\AR\Downloads\Unlocker1.9.2.exe

2022-09-01 19:38 - 2022-09-01 19:39 - 000000000 ___DC C:\Users\AR\Desktop\Neuer Ordner

2022-09-01 18:31 - 2022-09-01 18:31 - 000000000 ____D C:\Users\AR\OneCommander

2022-09-01 17:45 - 2022-09-01 20:57 - 000008192 ___SH C:\DumpStack.log.tmp

2022-09-01 13:22 - 2022-09-01 13:22 - 000466750 _____ C:\Users\AR\Downloads\montageanleitung_its_96.pdf

2022-09-01 13:15 - 2022-09-01 13:15 - 001136626 _____ C:\Users\AR\Downloads\montageanleitung_ts93b.pdf

2022-09-01 09:55 - 2022-09-01 09:55 - 000245546 _____ C:\Users\AR\Downloads\Re Luftdruckwächter 2019_11_18.pdf

2022-09-01 07:54 - 2022-09-01 07:54 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task

2022-09-01 07:54 - 2022-09-01 07:54 - 000002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2022-09-01 07:53 - 2022-09-02 10:26 - 000000000 ____D C:\Program Files\Microsoft OneDrive

2022-08-31 14:57 - 2022-08-31 14:57 - 000077870 _____ C:\Users\AR\Downloads\Angebot.pdf

2022-08-31 14:56 - 2022-08-31 14:56 - 001418966 _____ C:\Users\AR\Downloads\Mono_S4_395-410W_HC_MBB_108-Zellen_web_de.pdf

2022-08-31 14:55 - 2022-08-31 14:55 - 000589426 _____ C:\Users\AR\Downloads\Luna2000.pdf

2022-08-31 11:28 - 2022-06-26 21:26 - 006366208 ____C C:\Users\AR\Documents\backup.bak

2022-08-31 11:05 - 2022-08-31 11:59 - 000000000 ___DC C:\Users\AR\Documents\Outlook-Dateien

2022-08-31 00:16 - 2022-08-31 00:16 - 000002626 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk

2022-08-31 00:16 - 2022-08-31 00:16 - 000002622 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk

2022-08-31 00:16 - 2022-08-31 00:16 - 000002601 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk

2022-08-31 00:16 - 2022-08-31 00:16 - 000002579 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk

2022-08-31 00:16 - 2022-08-31 00:16 - 000002576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk

2022-08-31 00:16 - 2022-08-31 00:16 - 000002543 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk

2022-08-31 00:16 - 2022-08-31 00:16 - 000002540 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk

2022-08-31 00:16 - 2022-08-31 00:16 - 000002512 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk

2022-08-31 00:16 - 2022-08-31 00:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools

2022-08-31 00:12 - 2022-08-31 00:16 - 000000000 ____D C:\Program Files (x86)\Microsoft Office

2022-08-31 00:12 - 2022-08-31 00:12 - 000000000 ____D C:\Program Files\Microsoft Office 15

2022-08-31 00:03 - 2022-09-01 07:54 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3220973240-3280425687-1539964896-1001

2022-08-31 00:03 - 2022-09-01 07:54 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3220973240-3280425687-1539964896-500

2022-08-31 00:03 - 2022-08-31 00:03 - 000000000 ___RD C:\Users\defaultuser100001\OneDrive

2022-08-31 00:03 - 2022-08-31 00:03 - 000000000 ___RD C:\Users\defaultuser100000\OneDrive

2022-08-31 00:03 - 2022-08-31 00:03 - 000000000 ___RD C:\Users\Default\OneDrive

2022-08-30 17:48 - 2022-09-01 07:43 - 000469008 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2022-08-30 00:04 - 2022-08-30 00:04 - 000195848 _____ C:\Users\AR\Downloads\Jahrlicher Uberblick uber Kosten und Gebuhren CFD 2022.pdf

2022-08-30 00:02 - 2022-08-30 00:02 - 000039090 _____ C:\Users\AR\Downloads\Jahrlicher Uberblick uber Kosten und Gebuhren Beschreibung 2022.pdf

2022-08-29 17:38 - 2022-08-29 17:38 - 000017509 ____C C:\Users\AR\Desktop\Retoure_Vlasveld_24376417.pdf

2022-08-28 13:53 - 2022-08-28 13:53 - 000000000 ____D C:\WINDOWS\Panther

2022-08-28 13:53 - 2019-07-05 11:50 - 009899960 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RsCRIcon.dll

2022-08-28 13:53 - 2019-07-05 11:50 - 000443480 _____ (Realsil Semiconductor Corporation) C:\WINDOWS\system32\Drivers\RtsUer.sys

2022-08-28 13:47 - 2022-08-28 13:47 - 000005674 _____ C:\Users\AR\Downloads\6x_Sudoku_Level_Schwer (9).pdf

2022-08-28 13:47 - 2022-08-28 13:47 - 000005674 _____ C:\Users\AR\Downloads\6x_Sudoku_Level_Schwer (6).pdf

2022-08-28 13:47 - 2022-08-28 13:47 - 000005673 _____ C:\Users\AR\Downloads\6x_Sudoku_Level_Schwer (5).pdf

2022-08-28 13:47 - 2022-08-28 13:47 - 000005668 _____ C:\Users\AR\Downloads\6x_Sudoku_Level_Schwer (2).pdf

2022-08-28 13:47 - 2022-08-28 13:47 - 000005659 _____ C:\Users\AR\Downloads\6x_Sudoku_Level_Schwer (3).pdf

2022-08-28 13:47 - 2022-08-28 13:47 - 000005657 _____ C:\Users\AR\Downloads\6x_Sudoku_Level_Schwer (1).pdf

2022-08-28 13:47 - 2022-08-28 13:47 - 000005654 _____ C:\Users\AR\Downloads\6x_Sudoku_Level_Schwer (7).pdf

2022-08-28 13:47 - 2022-08-28 13:47 - 000005649 _____ C:\Users\AR\Downloads\6x_Sudoku_Level_Schwer (8).pdf

2022-08-28 13:47 - 2022-08-28 13:47 - 000005648 _____ C:\Users\AR\Downloads\6x_Sudoku_Level_Schwer (4).pdf

2022-08-28 13:46 - 2022-08-28 13:46 - 000005663 _____ C:\Users\AR\Downloads\6x_Sudoku_Level_Schwer.pdf

2022-08-27 14:47 - 2022-08-27 14:47 - 000056106 _____ C:\Users\AR\Downloads\IG_Steuererklaerung_2019.pdf

2022-08-27 14:46 - 2022-08-27 14:46 - 000055431 _____ C:\Users\AR\Downloads\IG_Steuererklaerung_2020.pdf

2022-08-27 14:45 - 2022-08-27 14:45 - 000054198 _____ C:\Users\AR\Downloads\IG_Steuererklaerung_2021.pdf

2022-08-26 13:50 - 2022-08-26 13:50 - 000000080 _____ C:\Users\AR\Downloads\export_csv.csv

2022-08-26 13:35 - 2022-08-26 13:36 - 000000000 ___DC C:\Users\AR\Desktop\Lieferanten PV

2022-08-26 13:27 - 2022-08-26 13:27 - 000003946 _____ C:\WINDOWS\system32\Tasks\Dell SupportAssistAgent AutoUpdate

2022-08-23 09:18 - 2022-08-23 09:18 - 002855157 _____ C:\Users\AR\Downloads\Datenblatt Jinko 375, full black.pdf

2022-08-19 15:56 - 2022-08-19 15:56 - 000003536 _____ C:\Users\AR\AppData\Local\recently-used.xbel

2022-08-13 20:27 - 2022-08-13 20:27 - 000000000 ____D C:\WINDOWS\{B08702CA-6882-42A8-8C5E-5D4BC82C0E88}

2022-08-12 17:50 - 2022-08-12 17:50 - 000000162 ___HC C:\Users\AR\Desktop\~$cherungskopie von leer.wbk

2022-08-11 09:40 - 2022-08-11 09:40 - 000151329 ____C C:\Users\AR\Desktop\klarna Rechnung (002).jpeg

2022-08-10 09:01 - 2022-08-10 09:01 - 000000000 ___HD C:\$WinREAgent

2022-08-10 00:41 - 2022-08-10 00:41 - 001329416 _____ C:\WINDOWS\system32\FaceTrackerInternal.dll

2022-08-10 00:41 - 2022-08-10 00:41 - 001314304 _____ C:\WINDOWS\system32\FaceProcessor.dll

2022-08-10 00:41 - 2022-08-10 00:41 - 000506136 _____ C:\WINDOWS\system32\FaceProcessorCore.dll

2022-08-10 00:40 - 2022-08-10 00:40 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr

2022-08-10 00:40 - 2022-08-10 00:40 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr

2022-08-10 00:40 - 2022-08-10 00:40 - 000011803 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim

2022-08-10 00:39 - 2022-08-10 00:39 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe

2022-08-10 00:38 - 2022-08-10 00:38 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll

2022-08-10 00:38 - 2022-08-10 00:38 - 000162304 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe

2022-08-10 00:38 - 2022-08-10 00:38 - 000089088 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.proxystub.dll

2022-08-10 00:38 - 2022-08-10 00:38 - 000073216 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll

2022-08-08 14:55 - 2022-08-08 14:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24

2022-08-08 14:54 - 2022-08-08 14:55 - 000000000 ____D C:\Program Files\PDF24

2022-08-07 14:53 - 2022-08-10 08:54 - 000000632 _____ C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-3220973240-3280425687-1539964896-1001.job

2022-08-07 14:53 - 2022-08-10 08:54 - 000000536 _____ C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-3220973240-3280425687-1539964896-1001.job

2022-08-05 13:05 - 2022-08-07 14:53 - 000003780 _____ C:\WINDOWS\system32\Tasks\G2MUploadTask-S-1-5-21-3220973240-3280425687-1539964896-1001

2022-08-05 13:05 - 2022-08-07 14:53 - 000003684 _____ C:\WINDOWS\system32\Tasks\G2MUpdateTask-S-1-5-21-3220973240-3280425687-1539964896-1001

2022-08-05 13:05 - 2022-08-07 14:53 - 000000000 ____D C:\Users\AR\AppData\Local\GoToMeeting

2022-08-05 13:05 - 2022-08-05 13:05 - 000000000 ____D C:\Users\AR\AppData\Local\GoTo Opener
 

==================== Ein Monat (geänderte) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2022-09-02 18:45 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2022-09-02 18:44 - 2018-05-25 16:56 - 000000000 ____D C:\FRST

2022-09-02 17:50 - 2021-12-10 16:41 - 000000000 ____D C:\Users\AR\AppData\Roaming\All-in-One Messenger

2022-09-02 17:45 - 2017-03-07 12:23 - 000000000 ____D C:\Program Files (x86)\Google

2022-09-02 17:42 - 2020-10-07 12:08 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2022-09-02 16:36 - 2017-03-12 19:45 - 000000000 ___DC C:\Users\AR\AppData\LocalLow\Mozilla

2022-09-02 16:14 - 2020-06-14 22:14 - 000000000 ____D C:\Users\AR\AppData\Local\SynologyDrive

2022-09-02 14:08 - 2017-03-07 10:43 - 000000000 ___DC C:\Users\AR\AppData\Local\CrashDumps

2022-09-02 12:25 - 2017-10-05 22:19 - 000000000 ____D C:\ProgramData\NVIDIA

2022-09-02 08:15 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase

2022-09-02 08:14 - 2016-10-25 17:39 - 000000000 __SHD C:\Users\AR\IntelGraphicsProfiles

2022-09-01 23:47 - 2017-03-07 09:49 - 000002346 ___HC C:\Users\AR\Documents\Default.rdp

2022-09-01 21:05 - 2020-10-07 12:28 - 001632230 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2022-09-01 21:05 - 2019-12-07 16:51 - 000708722 _____ C:\WINDOWS\system32\perfh007.dat

2022-09-01 21:05 - 2019-12-07 16:51 - 000142964 _____ C:\WINDOWS\system32\perfc007.dat

2022-09-01 21:05 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF

2022-09-01 20:57 - 2020-10-07 12:37 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2022-09-01 20:57 - 2020-10-07 12:15 - 000000000 ____D C:\Users\AR

2022-09-01 20:57 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState

2022-09-01 20:57 - 2019-12-07 11:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI

2022-09-01 20:57 - 2016-10-08 12:46 - 000000000 ___DC C:\Intel

2022-09-01 20:56 - 2017-02-12 21:50 - 000000000 ___DC C:\Users\AR\AppData\Roaming\KeePass

2022-09-01 20:05 - 2018-05-29 08:16 - 000000000 ___DC C:\Users\AR\AppData\Local\D3DSCache

2022-09-01 19:45 - 2021-11-26 07:59 - 000000000 ____D C:\WINDOWS\Minidump

2022-09-01 19:45 - 2017-03-07 11:43 - 000000000 ___DC C:\Users\AR\AppData\Roaming\FileZilla

2022-09-01 19:42 - 2021-12-16 11:28 - 000000000 ____D C:\Program Files (x86)\Glary Utilities 5

2022-09-01 18:36 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness

2022-09-01 18:30 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps

2022-09-01 18:30 - 2018-06-14 18:33 - 000000000 ____D C:\ProgramData\Packages

2022-09-01 18:30 - 2018-05-27 11:48 - 000000000 ___DC C:\Users\AR\AppData\Local\PlaceholderTileLogoFolder

2022-09-01 18:30 - 2017-12-13 23:55 - 000000000 ___DC C:\Users\AR\AppData\Local\Packages

2022-09-01 17:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports

2022-09-01 17:43 - 2021-11-18 14:44 - 000002401 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk

2022-08-31 23:10 - 2020-10-14 19:50 - 000000000 ____D C:\Users\AR\AppData\Local\Deployment

2022-08-31 20:55 - 2021-12-16 13:06 - 000000000 ____D C:\Program Files (x86)\AnyDesk

2022-08-31 11:33 - 2022-06-26 21:26 - 006620160 ____C C:\Users\AR\Documents\backup.pst

2022-08-31 00:12 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared

2022-08-31 00:03 - 2022-06-26 16:22 - 000000000 ____D C:\Users\defaultuser100001

2022-08-31 00:03 - 2022-06-26 16:15 - 000000000 ____D C:\Users\defaultuser100000

2022-08-31 00:03 - 2016-10-25 17:40 - 000000000 ___RD C:\Users\AR\OneDrive

2022-08-30 23:29 - 2022-02-09 15:36 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38

2022-08-30 17:48 - 2017-03-29 11:47 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox

2022-08-30 17:48 - 2016-10-25 19:01 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2022-08-29 22:40 - 2020-10-07 12:37 - 000003632 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA

2022-08-29 22:40 - 2020-10-07 12:37 - 000003508 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore

2022-08-28 13:53 - 2016-10-08 12:45 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2022-08-28 13:53 - 2016-10-08 12:45 - 000000000 ____D C:\ProgramData\Package Cache

2022-08-28 13:53 - 2016-10-08 12:45 - 000000000 ____D C:\Program Files (x86)\Realtek

2022-08-28 10:46 - 2016-10-08 22:22 - 000000000 ____D C:\ProgramData\Dell

2022-08-27 19:50 - 2020-07-05 01:39 - 000002473 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2022-08-27 17:45 - 2021-10-06 07:16 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla

2022-08-27 17:45 - 2016-10-25 19:01 - 000001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

2022-08-26 13:28 - 2016-10-08 12:45 - 000000000 ____D C:\Program Files\Dell

2022-08-26 13:21 - 2022-04-03 19:11 - 000000000 ____D C:\Program Files\dotnet

2022-08-23 07:44 - 2020-10-07 12:37 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

2022-08-23 07:44 - 2020-10-07 12:37 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

2022-08-22 23:39 - 2017-03-07 12:23 - 000002328 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2022-08-19 16:53 - 2018-05-27 11:59 - 000000000 ___DC C:\Users\AR\AppData\Local\babl-0.1

2022-08-19 13:37 - 2021-04-09 08:27 - 000000000 ____D C:\Users\AR\AppData\Roaming\Telegram Desktop

2022-08-15 13:35 - 2021-11-18 14:42 - 000003654 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineUA

2022-08-15 13:35 - 2021-11-18 14:42 - 000003530 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineCore

2022-08-13 20:29 - 2021-09-01 13:45 - 000000000 ____D C:\ProgramData\Temp

2022-08-13 20:29 - 2016-10-08 12:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell

2022-08-13 20:29 - 2016-10-08 12:45 - 000000000 ____D C:\Program Files (x86)\Dell

2022-08-12 19:20 - 2020-10-07 12:15 - 000000000 ____D C:\Users\Administrator

2022-08-12 18:59 - 2022-03-31 08:59 - 000000000 ____D C:\ProgramData\Malwarebytes

2022-08-12 18:59 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP

2022-08-12 18:56 - 2019-12-07 11:14 - 000000000 ____D C:\PerfLogs

2022-08-12 18:51 - 2017-03-07 10:57 - 000000000 ____D C:\Program Files (x86)\TeamViewer

2022-08-12 18:28 - 2017-03-07 10:57 - 000000000 ___DC C:\Users\AR\AppData\Roaming\TeamViewer

2022-08-11 00:45 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2022-08-11 00:42 - 2019-12-07 16:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection

2022-08-11 00:42 - 2019-12-07 16:54 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer

2022-08-11 00:42 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2022-08-11 00:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata

2022-08-11 00:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism

2022-08-11 00:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources

2022-08-11 00:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata

2022-08-11 00:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe

2022-08-11 00:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism

2022-08-11 00:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences

2022-08-11 00:42 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr

2022-08-10 09:20 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp

2022-08-10 00:38 - 2020-10-07 12:09 - 003011072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll

2022-08-10 00:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates

2022-08-10 00:05 - 2016-11-06 15:14 - 000000000 ____D C:\WINDOWS\system32\MRT

2022-08-09 23:51 - 2016-11-06 15:14 - 144534560 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
 

2022-06-26 20:43 - 2022-06-26 20:43 - 000052319 _____ () C:\Users\AR\AppData\Roaming\Durch Trennzeichen getrennte Werte.ADR

2022-06-26 21:03 - 2022-06-26 21:03 - 000017063 _____ () C:\Users\AR\AppData\Roaming\Durch Trennzeichen getrennte Werte.CAL

2018-06-06 18:10 - 2018-06-06 18:10 - 000003584 ____C () C:\Users\AR\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2022-08-19 15:56 - 2022-08-19 15:56 - 000003536 _____ () C:\Users\AR\AppData\Local\recently-used.xbel

2021-01-23 12:01 - 2021-01-23 12:57 - 000007601 _____ () C:\Users\AR\AppData\Local\Resmon.ResmonCfg
 

==================== SigCheck ============================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

==================== Ende von FRST.txt ========================

Addition

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 30-08-2022

durchgeführt von AR (02-09-2022 18:46:37)

Gestartet von C:\Users\AR\Downloads

Microsoft Windows 10 Pro Version 21H1 19043.1889 (X64) (2020-10-07 10:38:11)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

Administrator (S-1-5-21-3220973240-3280425687-1539964896-500 - Administrator - Disabled) => C:\Users\Administrator

AR (S-1-5-21-3220973240-3280425687-1539964896-1001 - Administrator - Enabled) => C:\Users\AR

DefaultAccount (S-1-5-21-3220973240-3280425687-1539964896-503 - Limited - Disabled)

Gast (S-1-5-21-3220973240-3280425687-1539964896-501 - Limited - Disabled)

WDAGUtilityAccount (S-1-5-21-3220973240-3280425687-1539964896-504 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

7-Zip 21.07 (x64) (HKLM\...\7-Zip) (Version: 21.07 - Igor Pavlov)

Admiral Markets MT4 (HKLM-x32\...\Admiral Markets MT4) (Version: 4.00 - MetaQuotes Software Corp.)

AllDup 4.5.10 (HKLM-x32\...\AllDup_is1) (Version: 4.5.10 - MTSD)

All-in-One Messenger 2.5.0 (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\b6dcb923-775d-56f6-b8cb-dbde86aa378b) (Version: 2.5.0 - Henrik Wenz)

AnyDesk (HKLM-x32\...\AnyDesk) (Version: ad 7.0.14 - AnyDesk Software GmbH)

Azure Data Studio (HKLM\...\{6591F69E-6588-4980-81ED-C8FCBD7EC4B8}_is1) (Version: 1.37.0 - Microsoft Corporation)

Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 105.1.43.88 - Die Brave-Autoren)

CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1187.1 - Piriform Software) Hidden

Cisco Webex Meetings (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\ActiveTouchMeetingClient) (Version:  - Cisco Webex LLC)

Dell Customer Connect (HKLM-x32\...\{04A41EBC-AB30-4574-A14D-E0CDFE31AB70}) (Version: 1.5.1.0 - Dell Inc.)

Dell Digital Delivery (HKLM-x32\...\{A9758B6E-19FC-4DB4-A031-AFE6C2327A35}) (Version: 3.5.1004.0 - Dell Products, LP)

Dell Foundation Services (HKLM\...\{BDB50421-E961-42F3-B803-6DAC6F173834}) (Version: 3.4.16100.0 - Dell Inc.)

Dell Hilfe und Support (HKLM\...\{8917AEA5-01A5-476F-AA27-A52EA6C94212}) (Version: 2.6.1.0 - Dell Inc.) Hidden

Dell Hilfe und Support (HKLM-x32\...\InstallShield_{8917AEA5-01A5-476F-AA27-A52EA6C94212}) (Version: 2.6.1.0 - Dell Inc.)

Dell SupportAssist (HKLM\...\{22D635F9-FB28-453B-9A12-4CE47C6BBC05}) (Version: 3.12.1.180 - Dell Inc.)

Dell SupportAssist OS Recovery Plugin for Dell Update (HKLM\...\{08E7C8D5-F2B5-4F09-B0EA-F28913BEFDB0}) (Version: 5.5.1.16143 - Dell Inc.) Hidden

Dell SupportAssist OS Recovery Plugin for Dell Update (HKLM-x32\...\{2a8bafd6-22ae-4d0e-87a4-686b2a4a2ab0}) (Version: 5.5.1.16143 - Dell Inc.)

Dell SupportAssist Remediation (HKLM\...\{D5DA219C-155F-45A8-9736-B9350978F2BE}) (Version: 5.5.4.16189 - Dell Inc.) Hidden

Dell SupportAssist Remediation (HKLM-x32\...\{619cf756-16ec-42a3-9b4a-d99ad99fd636}) (Version: 5.5.4.16189 - Dell Inc.)

Dell Update (HKLM-x32\...\{051401F9-2A83-4E2B-9454-9ED39AA60491}) (Version: 4.6.0 - Dell Inc.)

DisplayLink Graphics (HKLM\...\{A973BFE8-87CE-406B-9B33-C4C4895D1DA9}) (Version: 10.1.2762.0 - DisplayLink Corp.)

EaseUS Data Recovery Wizard (HKLM\...\EaseUS Data Recovery Wizard_is1) (Version:  - EaseUS)

ElsterFormular (HKLM-x32\...\{870D4BDF-96FD-4A68-ACF4-A35CB31E0B3A}) (Version: 21.2.0 - Thüringer Landesamt für Finanzen)

FileZilla 3.60.2 (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\FileZilla Client) (Version: 3.60.2 - Tim Kosse)

GIMP 2.10.30 (HKLM\...\GIMP-2_is1) (Version: 2.10.30 - The GIMP Team)

Glary Utilities 5.178 (HKLM-x32\...\Glary Utilities 5) (Version: 5.178.0.206 - Glarysoft Ltd)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 104.0.5112.102 - Google LLC)

Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.101.0 - Google LLC) Hidden

GoTo Opener (HKLM-x32\...\{E69269DB-A77B-4BC1-8F39-241107B09F26}) (Version: 1.0.539 - LogMeIn, Inc.)

GoToMeeting 10.19.0.19950 (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\GoToMeeting) (Version: 10.19.0.19950 - LogMeIn, Inc.)

HP Officejet Pro 8620 - Grundlegende Software für das Gerät (HKLM\...\{E603B1C0-46D3-41C8-BFB4-BA4E50732701}) (Version: 32.4.116.94128 - Hewlett-Packard Co.)

HP Officejet Pro 8620 Hilfe (HKLM-x32\...\{F8E43C63-DFF2-4134-A46C-2A6F00517A35}) (Version: 32.0.0 - Hewlett Packard)

HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)

I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)

IG MetaTrader 4 Terminal (HKLM-x32\...\IG MetaTrader 4 Terminal) (Version: 4.00 - MetaQuotes Software Corp.)

Integration Services (HKLM-x32\...\{95D3D528-8F5B-436E-ADC6-6F184B13F1B0}) (Version: 15.0.2000.229 - Microsoft Corporation) Hidden

Intel(R) Chipset Device Software (HKLM\...\{81520FC5-3518-40E9-9803-70CE8A801D07}) (Version: 10.1.1.38 - Intel Corporation) Hidden

Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.3.10209.6897 - Intel Corporation)

Intel(R) HID Event Filter (HKLM-x32\...\3FB06EEC-013D-4366-9918-71B97DFB84EB) (Version: 1.1.0.313 - Intel Corporation)

Intel(R) Management Engine Components (HKLM\...\{18ECCB13-1AAB-4366-B8CD-D78EDDDCB37E}) (Version: 1.0.0.0 - Intel Corporation) Hidden

Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 2014.14.0.1540 - Intel Corporation)

Intel(R) Management Engine Components (HKLM\...\{5F3D379F-069B-4BBB-B7AA-CBDFA1877343}) (Version: 1.0.0.0 - Intel Corporation) Hidden

Intel(R) Management Engine Driver (HKLM\...\{8FFDA2DD-9B70-4A8A-8ACD-CBF774D1885B}) (Version: 1.0.0.0 - Intel Corporation) Hidden

Intel(R) ME UninstallLegacy (HKLM\...\{E9B9A1A5-6398-4C99-8FDE-10794F6505C5}) (Version: 1.0.1.0 - Intel Corporation) Hidden

Intel(R) Serial IO (HKLM\...\{75000D29-0D43-467B-84AC-12EB33DA1F14}) (Version: 30.100.1943.2 - Intel Corporation) Hidden

Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1943.2 - Intel Corporation)

Intel(R) Trusted Connect Service Client x64 (HKLM\...\{C9552825-7BF2-4344-BA91-D3CD46F4C442}) (Version: 1.60.155.0 - Intel Corporation) Hidden

Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.60.155.0 - Intel Corporation) Hidden

Intel(R) Trusted Connect Services Client (HKLM-x32\...\{047f2156-ee7f-4a24-b3c2-c0c5c2c81557}) (Version: 1.60.155.0 - Intel Corporation) Hidden

Intel(R) Virtual Buttons (HKLM-x32\...\1992736F-C90A-481C-B21B-EE34CAD07387) (Version: 1.1.0.21 - Intel Corporation)

Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000110-0210-1031-84C8-B8D95FA3C8C3}) (Version: 21.110.0.3 - Intel Corporation)

Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden

Intel® Integrated Sensor Solution (HKLM-x32\...\{b3782b53-1b6c-436a-b0f0-f65d83ae74d9}) (Version: 3.0.30.1119 - Intel Corporation)

Intel® PROSet/Wireless Software (HKLM-x32\...\{5a64c890-83f9-4399-b0c9-5e9a80890fdd}) (Version: 21.40.1 - Intel Corporation)

Intel® PROSet/Wireless WiFi Software (HKLM\...\{68A981A0-ED59-41E0-B45E-7A78F643120D}) (Version: 21.40.1.3406 - Intel Corporation) Hidden

Intel® Security Assist (HKLM-x32\...\{8B08DDA1-FDE7-4897-8EB6-E0B048A6D88B}) (Version: 1.0.1.618 - Intel Corporation)

Intel® Software Installer (HKLM-x32\...\{7b25185f-5362-49ee-b5e7-b5f4732bc748}) (Version: 22.70.0.6 - Intel Corporation) Hidden

ISS_Drivers_x64 (HKLM\...\{6F91DCD1-30DB-449C-AE79-6948BEB15825}) (Version: 3.0.30.1119 - Intel Corporation) Hidden

JFD MetaTrader 4 (HKLM-x32\...\JFD MetaTrader 4) (Version: 4.00 - MetaQuotes Ltd.)

JPEGmini (HKLM-x32\...\{5E92D6F9-47A0-40D9-B555-B7EB7A8A910F}) (Version: 1.9.5.0 - Beamr Imaging LTD)

JTL-Wawi (HKLM-x32\...\JTL-Wawi_is1) (Version: 1.3.16.0 - JTL-Software-GmbH)

KeePass Password Safe 2.47 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.47 - Dominik Reichl)

LockHunter 3.4, 32/64 bit (HKLM\...\LockHunter_is1) (Version: 3.4.3.146 - Crystal Rich Ltd)

LogiOptionsExcelAddin (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\5B9DBC017A73395321F758581D1CBC19EA9DF4FF) (Version: 8.10.33.0 - Logitech)

LogiOptionsPowerPointAddin (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\2C15990041C0A40782166403A24D0F52DFC41095) (Version: 8.10.33.0 - Logitech)

LogiOptionsWordAddin (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\77F95DB8F75F35C40BD868B4D39ADCCB966A0FD1) (Version: 8.10.33.0 - Logitech)

Logitech Options (HKLM\...\LogiOptions) (Version: 8.10.84 - Logitech)

Maxx Audio Installer (x64) (HKLM\...\{307032B2-6AF2-46D7-B933-62438DEB2B9A}) (Version: 2.7.8942.2 - Waves Audio Ltd.) Hidden

MetaTrader 4 Terminal (HKLM-x32\...\MetaTrader 4 Terminal) (Version: 4.00 - MetaQuotes Software Corp.)

Microsoft .NET Host - 5.0.17 (x64) (HKLM\...\{E663ED1E-899C-40E8-91D0-8D37B95E3C69}) (Version: 40.68.31213 - Microsoft Corporation) Hidden

Microsoft .NET Host - 6.0.8 (x64) (HKLM\...\{6950FA03-8B88-4675-B685-FB21CA1762CC}) (Version: 48.35.45462 - Microsoft Corporation) Hidden

Microsoft .NET Host FX Resolver - 5.0.17 (x64) (HKLM\...\{8BA25391-0BE6-443A-8EBF-86A29BAFC479}) (Version: 40.68.31213 - Microsoft Corporation) Hidden

Microsoft .NET Host FX Resolver - 6.0.8 (x64) (HKLM\...\{3C3CA326-3F1D-43B7-B0AD-CBC06B2DED5A}) (Version: 48.35.45462 - Microsoft Corporation) Hidden

Microsoft .NET Runtime - 5.0.17 (x64) (HKLM\...\{5A66E598-37BD-4C8A-A7CB-A71C32ABCD78}) (Version: 40.68.31213 - Microsoft Corporation) Hidden

Microsoft .NET Runtime - 5.0.17 (x64) (HKLM-x32\...\{a699b48e-5748-4980-ad92-0b61b1d9d718}) (Version: 5.0.17.31213 - Microsoft Corporation)

Microsoft .NET Runtime - 6.0.8 (x64) (HKLM\...\{7CEA3ABF-FE24-42AF-ADE6-B4A3EE346743}) (Version: 48.35.45462 - Microsoft Corporation) Hidden

Microsoft .NET Runtime - 6.0.8 (x64) (HKLM-x32\...\{df65a075-27e0-4afc-baea-ecaadef7b85c}) (Version: 6.0.8.31513 - Microsoft Corporation)

Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.15427.20210 - Microsoft Corporation)

Microsoft Analysis Services OLE DB Provider (HKLM\...\{7EA2A3F7-A6D2-4D28-B3C4-4C32BCF4A0A2}) (Version: 15.0.2000.832 - Microsoft Corporation) Hidden

Microsoft Analysis Services OLE DB Provider (HKLM-x32\...\{8CE89D3D-FBC5-4964-B6AD-2F52060304C3}) (Version: 15.0.2000.832 - Microsoft Corporation) Hidden

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 104.0.1293.70 - Microsoft Corporation)

Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 105.0.1343.25 - Microsoft Corporation)

Microsoft Help Viewer 2.3 (HKLM-x32\...\{99DC6816-30B2-32EB-9E12-AF8944C4FA4E}) (Version: 2.3.28307 - Microsoft Corporation) Hidden

Microsoft Help Viewer 2.3 (HKLM-x32\...\Microsoft Help Viewer 2.3) (Version: 2.3.28307 - Microsoft Corporation)

Microsoft HEVC Media Extension Installation for Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe (x64) (HKLM\...\{B0169E83-757B-EF66-E2F0-391944D785BC}) (Version: 1.0.0.0 - Microsoft Corporation) Hidden

Microsoft ODBC Driver 17 for SQL Server (HKLM\...\{853997DA-6FCB-4FB9-918E-E0FF881FAF65}) (Version: 17.7.2.1 - Microsoft Corporation)

Microsoft Office Professional Plus 2016 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 16.0.15427.20210 - Microsoft Corporation)

Microsoft OLE DB Driver for SQL Server (HKLM\...\{9D6F8754-28E9-4940-B319-3FC8588CF18F}) (Version: 18.5.0.0 - Microsoft Corporation)

Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 22.166.0807.0002 - Microsoft Corporation)

Microsoft SQL Server 2012 Native Client  (HKLM\...\{9D93D367-A2CC-4378-BD63-79EF3FE76C78}) (Version: 11.4.7462.6 - Microsoft Corporation)

Microsoft SQL Server Management Studio - 18.12.1 (HKLM-x32\...\{09a17706-821c-4c52-8fcd-ace4783362bb}) (Version: 15.0.18424.0 - Microsoft Corporation)

Microsoft Update Health Tools (HKLM\...\{7B1FCD52-8F6B-4F12-A143-361EA39F5E7C}) (Version: 3.67.0.0 - Microsoft Corporation)

Microsoft VC++ redistributables repacked. (HKLM\...\{7F09DF2D-9B17-4E4D-B247-9AE0E918C32B}) (Version: 12.0.0.0 - Intel Corporation) Hidden

Microsoft VC++ redistributables repacked. (HKLM-x32\...\{5213821B-E78E-4346-9CEC-8F6BA7D6F115}) (Version: 12.0.0.0 - Intel Corporation) Hidden

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.22.27821 (HKLM-x32\...\{6361b579-2795-4886-b2a8-53d5239b6452}) (Version: 14.22.27821.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.22.27821 (HKLM-x32\...\{5bfc1380-fd35-4b85-9715-7351535d077e}) (Version: 14.22.27821.0 - Microsoft Corporation)

Microsoft Visual C++ 2019 X64 Additional Runtime - 14.22.27821 (HKLM\...\{6E2C7A8E-B17A-4637-9CE9-F0B1157CF378}) (Version: 14.22.27821 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.22.27821 (HKLM\...\{0093C20C-273D-4397-B623-515CB8616CB9}) (Version: 14.22.27821 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2019 X86 Additional Runtime - 14.22.27821 (HKLM-x32\...\{3BDE80F7-7EC9-448E-8160-4ADA0CDA8879}) (Version: 14.22.27821 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.22.27821 (HKLM-x32\...\{1E6FC929-567E-4D22-9206-C5B83F0A21B9}) (Version: 14.22.27821 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{7C0242A3-8B66-35D1-9FE0-13B426ACB609}) (Version: 10.0.60729 - Microsoft Corporation) Hidden

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.60724 - Microsoft Corporation)

Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.60724 - Microsoft Corporation)

Microsoft Visual Studio Tools for Applications 2017 (HKLM-x32\...\{f895a2f1-ae3f-4212-8af1-7fa1f8c212ea}) (Version: 15.0.27520 - Microsoft Corporation)

Microsoft Visual Studio Tools for Applications 2017 x64 Hosting Support (HKLM\...\{AFFB9D8D-6E58-38A0-A7DD-F6F1F4247B36}) (Version: 15.0.27520 - Microsoft Corporation) Hidden

Microsoft Visual Studio Tools for Applications 2017 x86 Hosting Support (HKLM-x32\...\{9594C97E-6A20-38B3-81BB-2778C4780BE1}) (Version: 15.0.27520 - Microsoft Corporation) Hidden

Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 104.0 (x64 de)) (Version: 104.0 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 104.0.0.8265 - Mozilla)

Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.1.9.3 - Notepad++ Team)

NVIDIA FrameView SDK 1.2.7521.31103277 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.2.7521.31103277 - NVIDIA Corporation)

NVIDIA GeForce Experience 3.25.1.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.25.1.27 - NVIDIA Corporation)

NVIDIA Grafiktreiber 511.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 511.69 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)

Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.15427.20178 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.15427.20178 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.15427.20148 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.15427.20178 - Microsoft Corporation) Hidden

OpenOffice 4.1.3 (HKLM-x32\...\{8D5FCC56-BB9F-4122-923C-71753F50F6F5}) (Version: 4.13.9783 - Apache Software Foundation)

OptaneDowngradeGuard (HKLM\...\{86B0E6C1-32E0-42CC-BC4F-BF3C0730CECB}) (Version: 18.0.0.0 - Intel Corporation) Hidden

PDF24 Creator 11.3.0 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.3.0 - PDF24.org)

PDF24 Tools (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\5e56983f8f6eaa0650401cca749f0834) (Version: 1.0 - BraveSoftware\Brave-Browser)

PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.322.10 - Tracker Software Products Ltd)

PowerArchiver 2017 (HKLM\...\PowerArchiver_is1) (Version: 17.01.04 - ConeXware, Inc.)

ProRealTime (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\ProRealTime_is1) (Version: 1.19 - IT-Finance)

QuickSet64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.1.37 - Dell Inc.)

QuickSteuer 2018 (HKLM-x32\...\{464D2DB3-1837-498A-80E9-EBFA247E2267}) (Version: 23.39.56 - Haufe-Lexware GmbH & Co.KG)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.18362.31252 - Realtek Semiconductor Corp.)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8642 - Realtek Semiconductor Corp.)

Realtek PC Camera (HKLM-x32\...\{E399A5B3-ED53-4DEA-AF04-8011E1EB1EAC}) (Version: 10.0.10586.11224 - Realtek Semiconductor Corp.)

Realtek USB Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{04201224-2B34-4EE7-862B-B7BBF89DB3AB}) (Version: 10.24.326.2018 - Realtek)

Registrierung eines Dell Produkts (HKLM-x32\...\InstallShield_{48114909-3C3B-43E6-BF98-AE9C396500A3}) (Version: 3.0.127.0 - Dell Inc.)

Registrierung eines Produkts (HKLM\...\{48114909-3C3B-43E6-BF98-AE9C396500A3}) (Version: 3.0.127.0 - Dell Inc.) Hidden

RstDowngradeGuard (HKLM\...\{13C2A26E-7AD4-4D82-BB4F-DEA6E871B958}) (Version: 18.0.0.0 - Intel Corporation) Hidden

Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.)

Smart Switch (HKLM-x32\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.21075.3 - Samsung Electronics Co., Ltd.) Hidden

Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.21075.3 - Samsung Electronics Co., Ltd.)

SmartByte Drivers and Services (HKLM\...\{9668B1BB-D0FE-4C0C-800C-B1555E069A62}) (Version: 3.1.940 - Rivet Networks)

SQL Server Management Studio (HKLM\...\{83C9183A-A0F9-4E57-ACEC-4282F1028D25}) (Version: 15.0.18424.0 - Microsoft Corporation) Hidden

SQL Server Management Studio (HKLM\...\{ECC23FD6-535B-43CB-894B-F47FA605EBB3}) (Version: 15.0.18424.0 - Microsoft Corporation) Hidden

SQL Server Management Studio for Analysis Services (HKLM\...\{2635EEB8-0BDC-43F4-8477-3F3A17485D9A}) (Version: 15.0.18424.0 - Microsoft Corporation) Hidden

SQL Server Management Studio for Reporting Services (HKLM\...\{EC766230-FA07-4462-95EC-589FE19A6B19}) (Version: 15.0.18424.0 - Microsoft Corporation) Hidden

SSMS Post Install Tasks (HKLM\...\{BCE4DAEE-4995-4E80-9222-86C950DDD940}) (Version: 15.0.18424.0 - Microsoft Corporation) Hidden

Studie zur Verbesserung von HP Officejet Pro 8620 (HKLM\...\{C8049994-7BD4-4C9A-8508-F6ADDD6ABB62}) (Version: 32.4.116.94128 - Hewlett-Packard Co.)

Synology Drive Client (remove only) (HKLM\...\Synology Drive) (Version: 7.1.0.12923 - Synology, Inc.)

TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.32.3 - TeamViewer)

Telegram Desktop version 3.3 (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 3.3 - Telegram FZ-LLC)

Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{16AD6161-2E47-4BF1-AA77-0946EFE93E08}) (Version: 2.61.0.0 - Microsoft Corporation)

Visual Studio 2017 Isolated Shell for SSMS (HKLM-x32\...\{AAA9F15B-AF45-4562-9991-93A848D3A902}) (Version: 15.0.28307.421 - Microsoft Corporation) Hidden

Vulkan Run Time Libraries 1.0.33.0 (HKLM\...\VulkanRT1.0.33.0) (Version: 1.0.33.0 - LunarG, Inc.)

Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1) (Version: 1.0.54.1 - Intel Corporation Inc.) Hidden

Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1-4) (Version: 1.0.54.1 - Intel Corporation Inc.)

Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden

WhatsApp (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\WhatsApp) (Version: 0.3.4482 - WhatsApp)

Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)

WinZip 24.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C24127}) (Version: 24.0.14033 - Corel Corporation)

Zoom (HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\ZoomUMX) (Version: 5.6.5 (823) - Zoom Video Communications, Inc.)
 

Packages:

=========

Dell SupportAssist for Home PCs -> C:\Program Files\WindowsApps\DellInc.DellSupportAssistforPCs_3.12.5.0_x64__htrsf667h5kn2 [2022-08-26] (Dell Inc)

Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.14.67.0_x64__rz1tebttyb220 [2022-07-09] (Dolby Laboratories)

HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_138.2.412.0_x64__v10z8vjag6ke6 [2022-08-25] (HP Inc.)

Intel® Grafik-Kontrollraum -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3408.0_x64__8j3eq9eme6ctt [2022-08-14] (INTEL CORP) [Startup Task]

Intel® Optane™ Memory and Storage Management -> C:\Program Files\WindowsApps\AppUp.IntelOptaneMemoryandStorageManagement_18.1.1032.0_x64__8j3eq9eme6ctt [2022-08-15] (INTEL CORP)

Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-09-28] (Microsoft Corporation)

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-09-03] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-09-03] (Microsoft Corporation) [MS Ad]

Microsoft To Do -> C:\Program Files\WindowsApps\Microsoft.Todos_2.77.52361.0_x64__8wekyb3d8bbwe [2022-08-25] (Microsoft Corporation) [Startup Task]

My Photos -> C:\Program Files\WindowsApps\4846UtilitiesTools.MyPhotos_1.1.3.0_x64__b17t1j31etq18 [2022-08-12] (Utilities Tools) [MS Ad]

Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.98.1805.0_x64__mcm4njqhnhss8 [2022-02-16] (Netflix, Inc.)

NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.962.0_x64__56jybvy8sckqj [2022-01-18] (NVIDIA Corp.)

One Commander -> C:\Program Files\WindowsApps\44576milosp.OneCommander_3.10.3.0_neutral__p0rg76fmnrgsm [2022-09-01] (milosp)

Waves MaxxAudio Pro for Dell -> C:\Program Files\WindowsApps\WavesAudio.WavesMaxxAudioProforDell_1.1.131.0_x64__fh4rh281wavaa [2020-12-13] (Waves Audio)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation) [Datei ist nicht signiert]

CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{2C4A5D61-009C-4561-9A33-6AFD542FD237}\InprocServer32 -> C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\ContextMenu.dll (Synology Inc. -> )

CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation) [Datei ist nicht signiert]

CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{472CE1AD-5D53-4BCF-A1FB-3982A5F55138}\InprocServer32 -> C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\iconOverlay.dll (Synology Inc. -> TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{48AB5ADA-36B1-4137-99C9-2BD97F8788AB}\InprocServer32 -> C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\iconOverlay.dll (Synology Inc. -> TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation) [Datei ist nicht signiert]

CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation) [Datei ist nicht signiert]

CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\AR\AppData\Local\GoToMeeting\14172\G2MOutlookAddin64.dll (LogMeIn, Inc. -> LogMeIn, Inc.)

CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{A433C3E0-8B24-40EB-93C3-4B10D9959F58}\InprocServer32 -> C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\iconOverlay.dll (Synology Inc. -> TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{a9872fee-5a55-4ecb-9b0f-b06fedcf14d1}\localserver32 -> C:\Program Files\Waves\MaxxAudio\MaxxAudioPro.exe (Waves Inc -> Waves Audio Ltd)

CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation) [Datei ist nicht signiert]

CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{AEB16659-2125-4ADA-A4AB-45EE21E86469}\InprocServer32 -> C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\iconOverlay.dll (Synology Inc. -> TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation) [Datei ist nicht signiert]

CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{C701AD67-3DF0-47C9-89CB-DFA6207BE229}\InprocServer32 -> C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\iconOverlay.dll (Synology Inc. -> TODO: <Company name>)

CustomCLSID: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001_Classes\CLSID\{CB2B673F-D441-4CD4-AFBE-DC4037CA4220}\InprocServer32 -> C:\Program Files\WinZip\adxloader64.WinZipExpressForOffice.dll (Corel Corporation -> )

ShellIconOverlayIdentifiers: [    OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [    OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [    OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [    OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [    OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [    OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [    OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [   01UnsuppModule] -> {AEB16659-2125-4ADA-A4AB-45EE21E86469} => C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\iconOverlay.dll [2022-06-29] (Synology Inc. -> TODO: <Company name>)

ShellIconOverlayIdentifiers: [   02SyncingModule] -> {48AB5ADA-36B1-4137-99C9-2BD97F8788AB} => C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\iconOverlay.dll [2022-06-29] (Synology Inc. -> TODO: <Company name>)

ShellIconOverlayIdentifiers: [   03SyncedModule] -> {472CE1AD-5D53-4BCF-A1FB-3982A5F55138} => C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\iconOverlay.dll [2022-06-29] (Synology Inc. -> TODO: <Company name>)

ShellIconOverlayIdentifiers: [   04ReadOnlyModule] -> {A433C3E0-8B24-40EB-93C3-4B10D9959F58} => C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\iconOverlay.dll [2022-06-29] (Synology Inc. -> TODO: <Company name>)

ShellIconOverlayIdentifiers: [   05NoPermModule] -> {C701AD67-3DF0-47C9-89CB-DFA6207BE229} => C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\iconOverlay.dll [2022-06-29] (Synology Inc. -> TODO: <Company name>)

ShellIconOverlayIdentifiers-x32: [    OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [    OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [    OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [    OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [    OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [    OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [    OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-12-26] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2019-06-17] (Notepad++ -> )

ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2021-12-12] (Glarysoft LTD -> Glarysoft Ltd)

ContextMenuHandlers1: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => C:\Program Files\LockHunter\LHShellExt64.dll [2021-06-24] (Crystal Rich Ltd -> Crystal Rich Ltd)

ContextMenuHandlers1: [PowerArchiver] -> {d03d3e68-0c44-3d45-b15f-bcfd8a8b4c7e} => C:\Program Files\PowerArchiver\PASHLEXT.DLL [2017-08-08] (ConeXware, Inc. -> ConeXware, Inc.)

ContextMenuHandlers1: [PowerArchiver64] -> {d03d3e78-0c44-3d45-b15f-bcfd8a8b4c7e} => C:\Program Files\PowerArchiver\pashlext64.dll [2017-08-08] (ConeXware, Inc. -> ConeXware, Inc.)

ContextMenuHandlers1: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2020-02-25] (Corel Corporation -> WinZip Computing)

ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2021-12-12] (Glarysoft LTD -> Glarysoft Ltd)

ContextMenuHandlers2: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => C:\Program Files\LockHunter\LHShellExt64.dll [2021-06-24] (Crystal Rich Ltd -> Crystal Rich Ltd)

ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-12-26] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers4: [LockHunterShellExt] -> {0BB27CDA-7029-4C0E-9C56-D922B229F0EB} => C:\Program Files\LockHunter\LHShellExt64.dll [2021-06-24] (Crystal Rich Ltd -> Crystal Rich Ltd)

ContextMenuHandlers4: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2020-02-25] (Corel Corporation -> WinZip Computing)

ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.166.0807.0002\FileSyncShell64.dll [2022-09-01] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvdm.inf_amd64_4793842ae20151f0\nvshext.dll [2022-03-14] (Nvidia Corporation -> NVIDIA Corporation)

ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-12-26] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Keine Datei

ContextMenuHandlers6: [Fast Explorer] -> {693BE9C0-BEC3-11D2-B4C1-C33BBD3AD64B} => C:\ProgramData\AllDup\FEShlExt.dll [2008-08-21] (Alex Yakovlev) [Datei ist nicht signiert]

ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2021-12-12] (Glarysoft LTD -> Glarysoft Ltd)

ContextMenuHandlers6: [PowerArchiver] -> {d03d3e68-0c44-3d45-b15f-bcfd8a8b4c7e} => C:\Program Files\PowerArchiver\PASHLEXT.DLL [2017-08-08] (ConeXware, Inc. -> ConeXware, Inc.)

ContextMenuHandlers6: [PowerArchiver64] -> {d03d3e78-0c44-3d45-b15f-bcfd8a8b4c7e} => C:\Program Files\PowerArchiver\pashlext64.dll [2017-08-08] (ConeXware, Inc. -> ConeXware, Inc.)

ContextMenuHandlers6: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2020-02-25] (Corel Corporation -> WinZip Computing)

ContextMenuHandlers1_S-1-5-21-3220973240-3280425687-1539964896-1001: [CloudStation.SyncFolderContextMenu] -> {2C4A5D61-009C-4561-9A33-6AFD542FD237} => C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\ContextMenu.dll [2022-06-29] (Synology Inc. -> )

ContextMenuHandlers6_S-1-5-21-3220973240-3280425687-1539964896-1001: [CloudStation.SyncFolderContextMenu] -> {2C4A5D61-009C-4561-9A33-6AFD542FD237} => C:\Users\AR\AppData\Local\SynologyDrive\SynologyDrive.app\icon-overlay\22\x64\ContextMenu.dll [2022-06-29] (Synology Inc. -> )
 

==================== Codecs (Nicht auf der Ausnahmeliste) ====================
 

==================== Verknüpfungen & WMI ========================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

ShortcutWithArgument: C:\Users\AR\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Brave-Apps\PDF24 Tools.lnk -> C:\Program Files\BraveSoftware\Brave-Browser\Application\chrome_proxy.exe (Brave Software, Inc.) ->  --profile-directory=Default --app-id=olgkfmmpjkmmgmjlnginclnfgmildjlo
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
 

2021-12-10 16:41 - 2020-10-04 23:02 - 002812416 ____C () [Datei ist nicht signiert] C:\Users\AR\AppData\Local\Programs\all-in-one-messenger\ffmpeg.dll

2021-12-10 16:41 - 2020-10-04 23:02 - 000465408 ____C () [Datei ist nicht signiert] C:\Users\AR\AppData\Local\Programs\all-in-one-messenger\swiftshader\libegl.dll

2021-12-10 16:41 - 2020-10-04 23:02 - 003177984 ____C () [Datei ist nicht signiert] C:\Users\AR\AppData\Local\Programs\all-in-one-messenger\swiftshader\libglesv2.dll

2021-12-30 12:40 - 2008-08-21 01:08 - 001107520 _____ (Alex Yakovlev) [Datei ist nicht signiert] C:\ProgramData\AllDup\FEShlExt.dll

2022-08-31 20:55 - 2022-09-01 23:19 - 000394240 _____ (Google Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\AnyDesk\gcapi.dll

2022-09-01 18:30 - 2022-09-01 18:30 - 004563456 _____ (Google Inc.) [Datei ist nicht signiert] C:\Program Files\WindowsApps\44576milosp.OneCommander_3.10.3.0_neutral__p0rg76fmnrgsm\Rapidrive\x64\Pdfium.dll

2021-12-30 12:38 - 2021-12-26 16:00 - 000093696 _____ (Igor Pavlov) [Datei ist nicht signiert] C:\Program Files\7-Zip\7-zip.dll

2022-08-31 00:15 - 2022-08-31 00:15 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems32.dll] C:\Program Files (x86)\Microsoft Office\Root\Office16\AppVIsvSubsystems32.dll

2022-08-31 00:15 - 2022-08-31 00:15 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R32.dll] C:\Program Files (x86)\Microsoft Office\Root\Office16\c2r32.dll

2018-03-08 07:18 - 2018-03-08 07:18 - 000015360 _____ (NHibernate community) [Datei ist nicht signiert] C:\Program Files\Dell\SupportAssistAgent\bin\Iesi.Collections.dll

2020-11-11 20:57 - 2020-11-11 20:57 - 000537088 _____ (NHibernate.info) [Datei ist nicht signiert] C:\Program Files\Dell\SupportAssistAgent\bin\FluentNHibernate.dll

2018-02-06 17:25 - 2018-02-06 17:25 - 000176640 _____ (rubicon IT GmbH) [Datei ist nicht signiert] C:\Program Files\Dell\SupportAssistAgent\bin\Remotion.Linq.dll

2018-03-23 12:10 - 2018-03-23 12:10 - 000028160 _____ (rubicon IT GmbH) [Datei ist nicht signiert] C:\Program Files\Dell\SupportAssistAgent\bin\Remotion.Linq.EagerFetching.dll

2021-02-17 04:19 - 2021-02-17 04:19 - 000124928 _____ (Stateless Contributors) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\Dell\SupportAssistAgent\bin\stateless.dll

2021-12-17 05:45 - 2021-12-17 05:45 - 000258048 _____ (The Apache Software Foundation) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\Dell\SupportAssistAgent\bin\log4net.dll

2016-12-18 08:55 - 2016-12-18 08:55 - 000097280 _____ (Tunnel Vision Laboratories, LLC) [Datei ist nicht signiert] C:\Program Files\Dell\SupportAssistAgent\bin\Antlr3.Runtime.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
 

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
 

HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus15.msn.com/?pc=ASTE

HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell17win10.msn.com/?pc=DCTE

HKU\S-1-5-21-3220973240-3280425687-1539964896-500\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://dell17win10.msn.com/?pc=DCTE

HKU\S-1-5-21-3220973240-3280425687-1539964896-500\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell17win10.msn.com/?pc=DCTE

SearchScopes: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001 -> DefaultScope {4233574B-46D8-4120-BF6C-C8D593F10E7C} URL = 

SearchScopes: HKU\S-1-5-21-3220973240-3280425687-1539964896-1001 -> {4233574B-46D8-4120-BF6C-C8D593F10E7C} URL = 

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2022-08-31] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2022-08-31] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-08-31] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-08-31] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-08-31] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-08-31] (Microsoft Corporation -> Microsoft Corporation)

Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} -  Keine Datei
 

==================== Hosts Inhalt: =========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2018-06-05 14:57 - 2018-06-05 14:57 - 000000855 _____ C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1       localhost
 

2019-04-17 07:40 - 2019-04-17 07:40 - 000000375 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
 

==================== Andere Bereiche ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg

HKU\S-1-5-21-3220973240-3280425687-1539964896-500\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg

DNS Servers: 192.168.2.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)

 ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

MSCONFIG\Services: Cloud Station Backup VSS Service x64 => 2

MSCONFIG\Services: Cloud Station Drive VSS Service x64 => 2

MSCONFIG\Services: cphs => 3

MSCONFIG\Services: cplspcon => 2

MSCONFIG\Services: DDVCollectorSvcApi => 2

MSCONFIG\Services: DDVDataCollector => 2

MSCONFIG\Services: DDVRulesProcessor => 2

MSCONFIG\Services: Dell Customer Connect => 2

MSCONFIG\Services: Dell Foundation Services => 2

MSCONFIG\Services: Dell Hardware Support => 2

MSCONFIG\Services: Dell Help & Support => 2

MSCONFIG\Services: Dell SupportAssist Remediation => 2

MSCONFIG\Services: DellDigitalDelivery => 2

MSCONFIG\Services: DellUpdate => 2

MSCONFIG\Services: ElfoService => 3

MSCONFIG\Services: esifsvc => 2

MSCONFIG\Services: EvtEng => 2

MSCONFIG\Services: gupdate => 2

MSCONFIG\Services: gupdatem => 3

MSCONFIG\Services: IAStorDataMgrSvc => 2

MSCONFIG\Services: ibtsiva => 2

MSCONFIG\Services: igfxCUIService2.0.0.0 => 2

MSCONFIG\Services: Intel(R) Capability Licensing Service TCP IP Interface => 3

MSCONFIG\Services: Intel(R) Security Assist => 3

MSCONFIG\Services: Intel(R) TPM Provisioning Service => 2

MSCONFIG\Services: isaHelperSvc => 2

MSCONFIG\Services: jhi_service => 2

MSCONFIG\Services: LMS => 2

MSCONFIG\Services: MBAMService => 2

MSCONFIG\Services: MozillaMaintenance => 3

MSCONFIG\Services: MyWiFiDHCPDNS => 3

MSCONFIG\Services: NvContainerLocalSystem => 2

MSCONFIG\Services: NvContainerNetworkService => 3

MSCONFIG\Services: NVDisplay.ContainerLocalSystem => 2

MSCONFIG\Services: NvTelemetryContainer => 2

MSCONFIG\Services: PDF24 => 2

MSCONFIG\Services: Product Registration => 2

MSCONFIG\Services: RegSrvc => 2

MSCONFIG\Services: RtkAudioService => 2

MSCONFIG\Services: SupportAssistAgent => 2

MSCONFIG\Services: TeamViewer => 2

MSCONFIG\Services: WavesSysSvc => 2

MSCONFIG\Services: ZeroConfigService => 2

HKLM\...\StartupApproved\Run: => "NvBackend"

HKLM\...\StartupApproved\Run: => "ShadowPlay"

HKLM\...\StartupApproved\Run: => "WinZip UN"

HKLM\...\StartupApproved\Run32: => "Dropbox"

HKU\S-1-5-21-3220973240-3280425687-1539964896-1001\...\StartupApproved\Run: => "Lync"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [UDP Query User{507FEABC-ABCE-4104-AA62-D86F0AD23E9D}C:\users\ar\appdata\local\synologydrive\synologydrive.app\bin\cloud-drive-ui.exe] => (Allow) C:\users\ar\appdata\local\synologydrive\synologydrive.app\bin\cloud-drive-ui.exe (Synology Inc. -> Synology Inc.)

FirewallRules: [TCP Query User{3B05D6D4-BAB3-4E29-80CB-B1888CBD441A}C:\users\ar\appdata\local\synologydrive\synologydrive.app\bin\cloud-drive-ui.exe] => (Allow) C:\users\ar\appdata\local\synologydrive\synologydrive.app\bin\cloud-drive-ui.exe (Synology Inc. -> Synology Inc.)

FirewallRules: [{4C1B851E-5DE3-49D7-B655-2C07543FDD0A}] => (Allow) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.EXE (Logitech Inc -> Logitech, Inc.)

FirewallRules: [UDP Query User{5DD3E04D-967D-4F5B-8475-1C9713F18311}C:\program files (x86)\keepass password safe 2\keepass.exe] => (Allow) C:\program files (x86)\keepass password safe 2\keepass.exe (Open Source Developer, Dominik Reichl -> Dominik Reichl)

FirewallRules: [TCP Query User{A04F85DB-FC74-40E7-9D71-9B8EC50E6468}C:\program files (x86)\keepass password safe 2\keepass.exe] => (Allow) C:\program files (x86)\keepass password safe 2\keepass.exe (Open Source Developer, Dominik Reichl -> Dominik Reichl)

FirewallRules: [TCP Query User{52A6D9BF-21CD-47A8-A8F8-16A400357D5A}C:\program files\hp\hp officejet pro 8620\bin\hpnetworkcommunicatorcom.exe] => (Allow) C:\program files\hp\hp officejet pro 8620\bin\hpnetworkcommunicatorcom.exe (HP Inc. -> Hewlett-Packard Development Company, LP)

FirewallRules: [UDP Query User{FBD34E5C-D780-4660-B766-33CEAB944C48}C:\program files\hp\hp officejet pro 8620\bin\hpnetworkcommunicatorcom.exe] => (Allow) C:\program files\hp\hp officejet pro 8620\bin\hpnetworkcommunicatorcom.exe (HP Inc. -> Hewlett-Packard Development Company, LP)

FirewallRules: [{2E6CDE12-1541-4622-8A9A-0A657CAE3213}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{8E9C8411-8404-40CD-BB78-79F04E37266F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{0B5C1EF7-3E8C-468E-AC36-5D8714E230F7}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{5278AF98-95E4-4257-9348-88ECBB04FFB5}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{3DC1BB45-4A74-4DAD-84BC-9963EB74BD0D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)

FirewallRules: [{72CDE0D9-78F6-4EAF-80EB-96D0BB614D40}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)

FirewallRules: [{1199CC01-36FB-4921-9EF0-FEB4568DFFEF}] => (Allow) C:\Users\AR\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)

FirewallRules: [{FE0503F0-B8C5-44CD-ADF0-90C83C8948AC}] => (Allow) C:\Program Files (x86)\HP\Diagnostics\PSDR\SoftPaq\Binaries\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)

FirewallRules: [{BB92C25A-C16F-4D05-BA1A-40A1095B820C}] => (Allow) C:\Program Files (x86)\HP\Diagnostics\PSDR\SoftPaq\Binaries\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)

FirewallRules: [{FBC5F8BC-38BA-437C-989D-98544D410BEC}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\FaxApplications.exe (HP Inc. -> Hewlett-Packard Development Company, LP)

FirewallRules: [{52495381-9614-48CC-8684-43E01C4E0244}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\DigitalWizards.exe (HP Inc. -> Hewlett-Packard Development Company, LP)

FirewallRules: [{0A92B1FE-4040-413C-B8FA-1BF69053C0AC}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\bin\SendAFax.exe (HP Inc. -> Hewlett-Packard Development Company, LP)

FirewallRules: [{873307EC-DF7B-4F19-8A35-837A2E230078}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\Bin\DeviceSetup.exe (HP Inc. -> Hewlett-Packard Development Company, LP)

FirewallRules: [{AD7C241C-BB33-46F0-873C-33C59FAE0834}] => (Allow) LPort=5357

FirewallRules: [{22E25DF5-084B-48F9-B885-5C6F440129CB}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8620\Bin\HPNetworkCommunicatorCom.exe (HP Inc. -> Hewlett-Packard Development Company, LP)

FirewallRules: [{4873DF41-D838-495D-842F-847E8B6C4BCB}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)

FirewallRules: [{5411CCCD-5BB4-44DA-B258-A34212B6562F}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)

FirewallRules: [{A30225E4-5B15-4B8D-9581-3AA93A92601A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)

FirewallRules: [{AC577C34-127D-4B3C-B414-1F39D12E320E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)

FirewallRules: [{985928B6-C1F8-4548-9640-D88E6D21D865}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)

FirewallRules: [{6635EB00-56B6-4311-8EF0-F4D94259336D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)

FirewallRules: [{F532175D-C87F-493B-8FC2-B311FAF32980}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{02E62318-33D6-4AB5-AFCC-7ABDC68FC635}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{9E11DEDA-AC25-4175-BF42-751D41DC5B0F}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{71E338D2-A69D-40F7-85E4-3F00110D6683}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [TCP Query User{636F0419-ED0B-427E-8DDD-43FF04B46409}C:\users\ar\appdata\local\synologydrive\synologydrive.app\bin\cloud-drive-connect.exe] => (Block) C:\users\ar\appdata\local\synologydrive\synologydrive.app\bin\cloud-drive-connect.exe (Synology Inc. -> Synology Inc.)

FirewallRules: [UDP Query User{73C9CBA6-A69A-478D-9EDC-D0F6A1A7D648}C:\users\ar\appdata\local\synologydrive\synologydrive.app\bin\cloud-drive-connect.exe] => (Block) C:\users\ar\appdata\local\synologydrive\synologydrive.app\bin\cloud-drive-connect.exe (Synology Inc. -> Synology Inc.)

FirewallRules: [{466BABB7-03C2-4ED6-9D9A-E15EE71A11A9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{F75243F2-9A10-4BD3-B752-FD8391421143}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{98AB0051-5C85-40E3-A6AB-610DBE507614}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{8E221186-6815-4571-9862-34AB656CC978}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{B3774AD3-218F-4688-AD91-C1259381E403}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)

FirewallRules: [{B72EB8A2-5828-4D9E-8BD0-BE8C06DEEB61}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)

FirewallRules: [{10841FED-C663-4A33-9D61-69FC42EA2CB9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.87.3406.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{B46D28FE-0E20-48B8-8F6E-D6177CB88F3C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.87.3406.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{CDC23CB3-0AA7-4437-8B21-1B301E8F184D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.87.3406.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{3ED742F7-4AE9-463A-88B9-FC7C41FAC4B6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.87.3406.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{9C022B27-337C-487E-B2BC-ADBFA80FCCBC}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

FirewallRules: [{D87DA0A7-FD91-4110-8131-027E4CD3CE2D}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{A2D85D26-E1AF-43E6-BDEF-600C6A59BAA2}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{2140320B-2419-4B56-BDBA-40757A3E8B00}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{6F3B0234-73E0-4490-9E46-C10C5C02482E}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)

FirewallRules: [{6DE687CF-90F5-40BE-95DB-E64E87791CF9}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)

FirewallRules: [{F074CEEF-BD9F-4A32-BE94-4CEB0F9DE53E}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)

FirewallRules: [{81BB2003-36CE-4343-AED5-5CC149932E57}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)

FirewallRules: [{7459EF54-55DD-4E07-B1EF-15464D7D3036}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)

FirewallRules: [{65960BCD-C73E-4810-96FF-9C39EBC7C62C}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\105.0.1343.25\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
 

==================== Wiederherstellungspunkte =========================
 

ACHTUNG: Systemwiederherstellung ist deaktiviert (Total:103.84 GB) (Free:17.18 GB) (17%)
 

==================== Fehlerhafte Geräte im Gerätemanager ============
 
 

==================== Fehlereinträge in der Ereignisanzeige: ========================
 

Applikationsfehler:

==================

Error: (09/02/2022 06:49:57 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: nvcontainer.exe, Version: 1.37.3103.4323, Zeitstempel: 0x621dbda6

Name des fehlerhaften Moduls: NvBackend64.dll, Version: 39.3.0.0, Zeitstempel: 0x6244904c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000080031

ID des fehlerhaften Prozesses: 0x4404

Startzeit der fehlerhaften Anwendung: 0x01d8beebe30a7544

Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

Pfad des fehlerhaften Moduls: C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User\NvBackend\NvBackend64.dll

Berichtskennung: c4469c14-db70-4d04-b716-7b83397fb8f9

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/02/2022 06:48:53 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: nvcontainer.exe, Version: 1.37.3103.4323, Zeitstempel: 0x621dbda6

Name des fehlerhaften Moduls: NvBackend64.dll, Version: 39.3.0.0, Zeitstempel: 0x6244904c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000080031

ID des fehlerhaften Prozesses: 0x65c

Startzeit der fehlerhaften Anwendung: 0x01d8beebbc7174eb

Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

Pfad des fehlerhaften Moduls: C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User\NvBackend\NvBackend64.dll

Berichtskennung: b447470f-0ab6-41a7-8277-c7158f11aafc

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/02/2022 06:47:48 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: nvcontainer.exe, Version: 1.37.3103.4323, Zeitstempel: 0x621dbda6

Name des fehlerhaften Moduls: NvBackend64.dll, Version: 39.3.0.0, Zeitstempel: 0x6244904c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000080031

ID des fehlerhaften Prozesses: 0x2cd4

Startzeit der fehlerhaften Anwendung: 0x01d8beeb95e2dee5

Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

Pfad des fehlerhaften Moduls: C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User\NvBackend\NvBackend64.dll

Berichtskennung: e57d6ad8-174a-4a55-979a-4748526afb69

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/02/2022 06:46:43 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: nvcontainer.exe, Version: 1.37.3103.4323, Zeitstempel: 0x621dbda6

Name des fehlerhaften Moduls: NvBackend64.dll, Version: 39.3.0.0, Zeitstempel: 0x6244904c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000080031

ID des fehlerhaften Prozesses: 0x49e4

Startzeit der fehlerhaften Anwendung: 0x01d8beeb6f4ba97c

Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

Pfad des fehlerhaften Moduls: C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User\NvBackend\NvBackend64.dll

Berichtskennung: ef88e15f-2c26-4b74-9230-cf2e8c8c555f

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/02/2022 06:45:38 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: nvcontainer.exe, Version: 1.37.3103.4323, Zeitstempel: 0x621dbda6

Name des fehlerhaften Moduls: NvBackend64.dll, Version: 39.3.0.0, Zeitstempel: 0x6244904c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000080031

ID des fehlerhaften Prozesses: 0x37c

Startzeit der fehlerhaften Anwendung: 0x01d8beeb48a87169

Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

Pfad des fehlerhaften Moduls: C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User\NvBackend\NvBackend64.dll

Berichtskennung: e49baa72-888e-4e2b-8797-921e5c3f0aa0

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/02/2022 06:44:34 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: nvcontainer.exe, Version: 1.37.3103.4323, Zeitstempel: 0x621dbda6

Name des fehlerhaften Moduls: NvBackend64.dll, Version: 39.3.0.0, Zeitstempel: 0x6244904c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000080031

ID des fehlerhaften Prozesses: 0x3f44

Startzeit der fehlerhaften Anwendung: 0x01d8beeb2220fc72

Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

Pfad des fehlerhaften Moduls: C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User\NvBackend\NvBackend64.dll

Berichtskennung: e6dad75d-7c0b-4195-babe-21644fa28a4a

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/02/2022 06:43:29 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: nvcontainer.exe, Version: 1.37.3103.4323, Zeitstempel: 0x621dbda6

Name des fehlerhaften Moduls: NvBackend64.dll, Version: 39.3.0.0, Zeitstempel: 0x6244904c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000080031

ID des fehlerhaften Prozesses: 0x291c

Startzeit der fehlerhaften Anwendung: 0x01d8beeafb30e500

Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

Pfad des fehlerhaften Moduls: C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User\NvBackend\NvBackend64.dll

Berichtskennung: fcee0836-4097-4314-87d5-7dc5e21820af

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/02/2022 06:42:22 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: nvcontainer.exe, Version: 1.37.3103.4323, Zeitstempel: 0x621dbda6

Name des fehlerhaften Moduls: NvBackend64.dll, Version: 39.3.0.0, Zeitstempel: 0x6244904c

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000080031

ID des fehlerhaften Prozesses: 0x13ac

Startzeit der fehlerhaften Anwendung: 0x01d8beead3211a21

Pfad der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

Pfad des fehlerhaften Moduls: C:\Program Files\NVIDIA Corporation\NvContainer\plugins\User\NvBackend\NvBackend64.dll

Berichtskennung: 4059fcfa-fc58-4d76-b6fd-ad286b931f5a

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 
 

Systemfehler:

=============

Error: (09/02/2022 06:18:04 PM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.
 

Error: (09/02/2022 06:15:03 PM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.
 

Error: (09/02/2022 08:19:20 AM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.
 

Error: (09/01/2022 08:58:02 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "Intel(R) PROSet/Wireless Zero Configuration Service" wurde mit folgendem Fehler beendet: 

%%2147770990
 

Error: (09/01/2022 08:57:45 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "LMS" wurde aufgrund folgenden Fehlers nicht gestartet: 

Das System kann die angegebene Datei nicht finden.
 

Error: (09/01/2022 08:56:33 PM) (Source: DCOM) (EventID: 10010) (User: AR-DELL)

Description: Der Server "{5F7F3F7B-1177-4D4B-B1DB-BC6F671B8F25}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (09/01/2022 06:27:18 PM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.
 

Error: (09/01/2022 05:53:43 PM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.
 
 

Windows Defender:

================

Date: 2022-09-02 18:46:23

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=PUA:Win32/Presenoker&threatid=242420&enterprise=0

Name: PUA:Win32/Presenoker

Schweregrad: Niedrig

Kategorie: Potenziell unerwünschte Software

Pfad: file:_C:\Users\AR\Downloads\unlocker-1-9-2.zip; file:_C:\Users\AR\Downloads\Unlocker1.9.2 (1).exe; file:_C:\Users\AR\Downloads\Unlocker1.9.2.exe; webfile:_C:\Users\AR\Downloads\unlocker-1-9-2.zip|about:internet|pid:20104,ProcessStart:133065299382781126; webfile:_C:\Users\AR\Downloads\Unlocker1.9.2 (1).exe|about:internet|pid:3196,ProcessStart:133065311675114742; webfile:_C:\Users\AR\Downloads\Unlocker1.9.2.exe|about:internet|pid:16956,ProcessStart:133065300279314068

Erkennungsursprung: Internet

Erkennungstype: Konkret

Erkennungsquelle: Downloads und Anlagen

Benutzer: 

Prozessname: C:\Users\AR\Downloads\FRST64.exe

Sicherheitsversion: AV: 1.373.1394.0, AS: 1.373.1394.0, NIS: 1.373.1394.0

Modulversion: AM: 1.1.19500.2, NIS: 1.1.19500.2
 

Date: 2022-09-01 22:30:22

Description: 

Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.

Überprüfungs-ID: {0D9F7E54-CEC2-4BA8-88FD-BA2053B93A7F}

Überprüfungstyp: Antimalware

Überprüfungsparameter: Schnellüberprüfung

Benutzer: NT-AUTORITÄT\SYSTEM
 

Date: 2022-09-01 21:25:20

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=PUA:Win32/Presenoker&threatid=242420&enterprise=0

Name: PUA:Win32/Presenoker

Schweregrad: Niedrig

Kategorie: Potenziell unerwünschte Software

Pfad: file:_C:\Users\AR\Downloads\unlocker-1-9-2.zip; file:_C:\Users\AR\Downloads\Unlocker1.9.2 (1).exe; file:_C:\Users\AR\Downloads\Unlocker1.9.2.exe; webfile:_C:\Users\AR\Downloads\unlocker-1-9-2.zip|about:internet|pid:20104,ProcessStart:133065299382781126; webfile:_C:\Users\AR\Downloads\Unlocker1.9.2 (1).exe|about:internet|pid:3196,ProcessStart:133065311675114742; webfile:_C:\Users\AR\Downloads\Unlocker1.9.2.exe|about:internet|pid:16956,ProcessStart:133065300279314068

Erkennungsursprung: Internet

Erkennungstype: Konkret

Erkennungsquelle: Downloads und Anlagen

Benutzer: 

Prozessname: C:\Users\AR\Downloads\FRST64.exe

Sicherheitsversion: AV: 1.373.1365.0, AS: 1.373.1365.0, NIS: 1.373.1365.0

Modulversion: AM: 1.1.19500.2, NIS: 1.1.19500.2
 

Date: 2022-09-01 21:03:20

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=PUA:Win32/Presenoker&threatid=242420&enterprise=0

Name: PUA:Win32/Presenoker

Schweregrad: Niedrig

Kategorie: Potenziell unerwünschte Software

Pfad: file:_C:\Users\AR\Downloads\unlocker-1-9-2.zip; file:_C:\Users\AR\Downloads\Unlocker1.9.2 (1).exe; file:_C:\Users\AR\Downloads\Unlocker1.9.2.exe; webfile:_C:\Users\AR\Downloads\unlocker-1-9-2.zip|about:internet|pid:20104,ProcessStart:133065299382781126; webfile:_C:\Users\AR\Downloads\Unlocker1.9.2 (1).exe|about:internet|pid:3196,ProcessStart:133065311675114742; webfile:_C:\Users\AR\Downloads\Unlocker1.9.2.exe|about:internet|pid:16956,ProcessStart:133065300279314068

Erkennungsursprung: Internet

Erkennungstype: Konkret

Erkennungsquelle: Downloads und Anlagen

Benutzer: 

Prozessname: C:\Windows\explorer.exe

Sicherheitsversion: AV: 1.373.1336.0, AS: 1.373.1336.0, NIS: 1.373.1336.0

Modulversion: AM: 1.1.19500.2, NIS: 1.1.19500.2
 

Date: 2022-09-01 20:39:44

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=PUA:Win32/Presenoker&threatid=242420&enterprise=0

Name: PUA:Win32/Presenoker

Schweregrad: Niedrig

Kategorie: Potenziell unerwünschte Software

Pfad: file:_C:\Users\AR\Downloads\unlocker-1-9-2.zip; file:_C:\Users\AR\Downloads\Unlocker1.9.2 (1).exe; file:_C:\Users\AR\Downloads\Unlocker1.9.2.exe; webfile:_C:\Users\AR\Downloads\unlocker-1-9-2.zip|about:internet|pid:20104,ProcessStart:133065299382781126; webfile:_C:\Users\AR\Downloads\Unlocker1.9.2 (1).exe|about:internet|pid:3196,ProcessStart:133065311675114742; webfile:_C:\Users\AR\Downloads\Unlocker1.9.2.exe|about:internet|pid:16956,ProcessStart:133065300279314068

Erkennungsursprung: Internet

Erkennungstype: Konkret

Erkennungsquelle: Downloads und Anlagen

Benutzer: AR-DELL\AR

Prozessname: C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe

Sicherheitsversion: AV: 1.373.1336.0, AS: 1.373.1336.0, NIS: 1.373.1336.0

Modulversion: AM: 1.1.19500.2, NIS: 1.1.19500.2



CodeIntegrity:

===============

Date: 2022-09-02 16:33:21

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume5\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_4de65d949492707a\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 

Date: 2022-09-01 22:27:42

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume5\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
 
 

==================== Speicherinformationen =========================== 
 

BIOS: Dell Inc. 1.36.0 12/15/2021

Hauptplatine: Dell Inc. 04PYT3

Prozessor: Intel(R) Core(TM) i7-7500U CPU @ 2.70GHz

Prozentuale Nutzung des RAM: 54%

Installierter physikalischer RAM: 16249.91 MB

Verfügbarer physikalischer RAM: 7460.38 MB

Summe virtueller Speicher: 18681.91 MB

Verfügbarer virtueller Speicher: 6555.53 MB
 

==================== Laufwerke ================================
 

Drive c: (OS) (Fixed) (Total:103.84 GB) (Free:17.18 GB) (Model: TOSHIBA THNSNK128GVN8 M.2 2280 128GB) NTFS

Drive d: (Volume) (Fixed) (Total:931.5 GB) (Free:796.29 GB) (Model: WDC WD10SPZX-75Z10T1) NTFS
 

\\?\Volume{c857a228-8bd0-494d-9592-3085a87c346d}\ () (Fixed) (Total:0.87 GB) (Free:0.42 GB) NTFS

\\?\Volume{f89eda33-8d38-47a9-93c2-f71612f15477}\ (Image) (Fixed) (Total:12.42 GB) (Free:0.64 GB) NTFS

\\?\Volume{452007c5-4b23-4268-8a1f-3c3b1470ca77}\ (DELLSUPPORT) (Fixed) (Total:1.05 GB) (Free:0.22 GB) NTFS

\\?\Volume{16990b29-32c7-4f38-95ab-2a8aa8e4d9a5}\ (ESP) (Fixed) (Total:0.48 GB) (Free:0.43 GB) FAT32
 

==================== MBR & Partitionstabelle ====================
 

==========================================================

Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

==========================================================

Disk: 1 (Size: 119.2 GB) (Disk ID: 125E2515)
 

Partition: GPT.
 

==================== Ende von Addition.txt =======================