Trojaner-Board - Windows-Sicherheit meldet Trojan:HTML/Phish!pz

Hallo zusammen,
ersteinmal ein gesundes neues Jahr 2024.

Mein Problem ist aufgefallen, weil die Windows Sicherung einige Male nicht abgeschlossen werden konnte. Unter Windows-Sicherheit / Viren- & Bedrohungsschutz / Schutzverlauf finden sich 5 Einträge "Wartung unvollständig" mit besagtem Trojaner. Betroffenes Element ist immer "file: \Device\HarddiskVolumeShadowCopy24\Users\pentr\AppData\Local\Mozilla\Firefox\Profiles\r8lix907.default-release\cache2\entries\00B130FD507B21FB0847F88D12DC9F867174015C"

Der Scan mit FRTS brachte folgende logs:

Code:



Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 01.01.2024

durchgeführt von pentr (Administrator) auf WORXX2 (Hewlett-Packard HP Z440 Workstation) (02-01-2024 12:17:23)

Gestartet von C:\Users\pentr\Downloads\FRST64(2).exe

Geladene Profile: pentr & 

Plattform: Microsoft Windows 10 Pro Version 22H2 19045.3803 (X64) Sprache: Deutsch (Deutschland)

Standard-Browser: FF

Start-Modus: Normal
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iTunes_12131.3.2010.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe

(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe

(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe

(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe ->) (Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe

(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Crash Processor.exe

(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe

(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe

(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe

(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\Creative Cloud UI Helper.exe <4>

(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe

(C:\Program Files\Adobe\Adobe Photoshop 2024\Photoshop.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\120.0.2210.91\msedgewebview2.exe <6>

(C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\libs\node.exe

(C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_appbroker.exe

(C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe

(C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ai.exe

(C:\Program Files\PostgreSQL\15\bin\pg_ctl.exe ->) (PostgreSQL Global Development Group) [Datei ist nicht signiert] C:\Program Files\PostgreSQL\15\bin\postgres.exe <7>

(C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(C:\Program Files\WindowsApps\AppleInc.iCloud_14.2.122.0_x64__nzyj5cx40ttqa\iCloud\iCloudServices.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc) C:\Program Files\WindowsApps\AppleInc.iCloud_14.2.122.0_x64__nzyj5cx40ttqa\iCloud\iCloudCKKS.exe

(C:\Program Files\WindowsApps\AppleInc.iCloud_14.2.122.0_x64__nzyj5cx40ttqa\iCloud\iCloudServices.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Microsoft Corporation) C:\Program Files\WindowsApps\AppleInc.iCloud_14.2.122.0_x64__nzyj5cx40ttqa\iCloud\WebView2\msedgewebview2.exe <6>

(C:\Program Files\WindowsApps\AppleInc.iTunes_12131.3.2010.0_x64__nzyj5cx40ttqa\AMDS32\AppleMobileDeviceHelper.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iTunes_12131.3.2010.0_x64__nzyj5cx40ttqa\VFS\ProgramFilesCommonX86\Apple\Apple Application Support\distnoted.exe

(C:\Program Files\WindowsApps\AppleInc.iTunes_12131.3.2010.0_x64__nzyj5cx40ttqa\iTunes.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iTunes_12131.3.2010.0_x64__nzyj5cx40ttqa\AMDS32\AppleMobileDeviceHelper.exe

(C:\Windows\SysWOW64\TgbStarter.exe ->) (THEGREENBOW (SISTECH S.A.) -> TheGreenBow) C:\Program Files (x86)\TheGreenBow\TheGreenBow VPN\tgbikeNG.exe

(explorer.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_14.2.122.0_x64__nzyj5cx40ttqa\iCloud\iCloudDrive.exe

(explorer.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_14.2.122.0_x64__nzyj5cx40ttqa\iCloud\iCloudServices.exe

(explorer.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iTunes_12131.3.2010.0_x64__nzyj5cx40ttqa\iTunes.exe

(explorer.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>

(explorer.exe ->) (Adobe Inc. -> Adobe) C:\Program Files\Adobe\Adobe Photoshop 2024\Photoshop.exe

(explorer.exe ->) (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering, Ltd.) C:\Program Files\Focusrite\Drivers\Focusrite Notifier.exe

(explorer.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2311.21001.0_x64__8wekyb3d8bbwe\MicrosoftSecurityApp\MicrosoftSecurityApp.exe

(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE

(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe

(explorer.exe ->) (PANGOLIN LASER SYSTEMS, INC. -> Pangolin Laser Systems Inc.) C:\BEYOND52\BEYOND.exe

(explorer.exe ->) (Sven Ritter -> SWE Sven Ritter) C:\Program Files\SpeedProject\SpeedCommander 20\SpeedCommander.exe <2>

(explorer.exe ->) (THEGREENBOW (SISTECH S.A.) -> TheGreenBow) C:\Program Files (x86)\TheGreenBow\TheGreenBow VPN\vpnconf.exe

(Intel(R) Rapid Storage Technology enterprise -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorIcon.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe

(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <20>

(services.exe ->) () [Datei ist nicht signiert] C:\Program Files\Focusrite\Focusrite Control\Server\ControlServer.exe

(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe

(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe

(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe

(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\DiagsCap.exe

(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\NetworkCap.exe

(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe

(services.exe ->) (Intel(R) Rapid Storage Technology enterprise -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorDataMgrSvc.exe

(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe

(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbengine.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe

(services.exe ->) (ND_Apps -> Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe

(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvwu.inf_amd64_4716be75eaec31a5\Display.NvContainer\NVDisplay.Container.exe <2>

(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvwu.inf_amd64_4716be75eaec31a5\NVWMI\nvWmi64.exe <2>

(services.exe ->) (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe

(services.exe ->) (PostgreSQL Global Development Group) [Datei ist nicht signiert] C:\Program Files\PostgreSQL\15\bin\pg_ctl.exe

(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe

(services.exe ->) (THEGREENBOW (SISTECH S.A.) -> TheGreenBow) C:\Windows\SysWOW64\TgbStarter.exe

(svchost.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_14.2.122.0_x64__nzyj5cx40ttqa\iCloud\APSDaemon.exe

(svchost.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple, Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_14.2.122.0_x64__nzyj5cx40ttqa\iCloud\secd.exe

(svchost.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\WindowsApps\AdobeNotificationClient_3.0.1.1_x86__enpm4xejd91yc\AdobeNotificationClient.exe

(svchost.exe ->) (Adobe Systems Incorporated -> ) C:\Program Files\WindowsApps\AcrobatNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe

(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_6.123.11012.0_x64__8wekyb3d8bbwe\GameBar.exe

(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_6.123.11012.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe <2>

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe

(svchost.exe ->) (QNAP Systems, Inc. -> ) C:\Program Files (x86)\QNAP\Qfinder\iSCSIAgent.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)

HKLM\...\Run: [TgbVpn] => C:\Program Files (x86)\TheGreenBow\TheGreenBow VPN\vpnconf.exe [970192 2020-03-10] (THEGREENBOW (SISTECH S.A.) -> TheGreenBow)

HKLM\...\Run: [Network Configuration] => C:\Program Files (x86)\Okidata\ActKey\Network Configuration.exe [826288 2020-10-20] (Oki Electric Industry Co.,Ltd. -> Oki Data Corporation)

HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [4096992 2023-11-07] (Adobe Inc. -> Adobe Systems, Incorporated)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [19570992 2020-08-27] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM\...\Run: [Focusrite Notifier] => C:\Program Files\Focusrite\Drivers\Focusrite Notifier.exe [906840 2023-08-23] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering, Ltd.)

HKLM\...\Run: [KeePass 2 PreLoad] => C:\Program Files\KeePass Password Safe 2\KeePass.exe [3293072 2023-10-12] (Open Source Developer, Dominik Reichl -> Dominik Reichl)

HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorIcon.exe [291416 2017-11-24] (Intel(R) Rapid Storage Technology enterprise -> Intel Corporation)

HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )

HKLM-x32\...\Run: [QfinderPro] => C:\Program Files (x86)\QNAP\Qfinder\QfinderPro.exe [5788496 2023-08-17] (QNAP Systems, Inc. -> QNAP)

HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [1131488 2023-12-15] (Adobe Inc. -> Adobe Inc.)

HKU\S-1-5-21-3318351353-4052915309-164348779-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [11517400 2023-11-05] (Adobe Inc. -> Adobe Systems Incorporated)

HKU\S-1-5-21-3318351353-4052915309-164348779-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2595344 2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-3318351353-4052915309-164348779-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [44486048 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)

HKU\S-1-5-21-3318351353-4052915309-164348779-1001\...\Run: [MicrosoftEdgeAutoLaunch_F327D6058D3328CD029FC604FE9ACAD4] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3854280 2023-12-21] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-3318351353-4052915309-164348779-1001\...\RunOnce: [msedge_resetsb_{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --reset-startup-boost-last-used [3854280 2023-12-21] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-3318351353-4052915309-164348779-1011\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2595344 2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-18\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [44486048 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)

HKLM\...\Windows x64\Print Processors\OKX05HPP: C:\Windows\System32\spool\prtprocs\x64\OKX05HPP.DLL [52224 2020-11-23] (Microsoft Windows Hardware Compatibility Publisher -> Oki Data Corporation)

HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [203936 2023-08-01] (Adobe Inc. -> Adobe Systems Inc)

HKLM\...\Print\Monitors\Oki Language Monitor v2 x64: C:\Windows\system32\OPPFLM64.DLL [24064 2011-07-04] (Microsoft Windows Hardware Compatibility Publisher -> Oki Data Corporation)

Startup: C:\Users\pentr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2022-07-22]

ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)

Startup: C:\Users\pentr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Outlook.lnk [2021-12-24]

ShortcutTarget: Outlook.lnk -> C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE (Microsoft Corporation -> Microsoft Corporation)

HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG

HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG

HKLM\SOFTWARE\Policies\Microsoft\Edge: Beschränkung <==== ACHTUNG
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {2762E91E-A34D-46D4-875D-1634DD074AB7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1566200 2023-09-20] (Adobe Inc. -> Adobe Inc.)

Task: {67CF1CF9-E463-4A98-94CB-E1772D54D3CF} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [4096992 2023-11-07] (Adobe Inc. -> Adobe Systems, Incorporated)

Task: {F37E1CEA-9BFA-44F6-BC68-8DAAC6C6EDD9} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [4434400 2023-11-07] (Adobe Inc. -> Adobe Systems, Incorporated)

Task: {2DAABCB3-32FA-468F-ACD3-BA91D1494E3A} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)

Task: {FF86C7F4-51D2-4667-8FAF-7C142996B03D} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703648 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "b36808a4-31c8-4ac6-9d19-053952426952" --version "6.19.10858" --silent

Task: {6487A50A-D32D-4C23-B302-D2FCE46A4FE9} - System32\Tasks\CCleanerSkipUAC - pentr => C:\Program Files\CCleaner\CCleaner.exe [37458848 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)

Task: {CC5FBB10-ED00-449E-AA52-143AEAEBBA25} - System32\Tasks\CCleanerSkipUAC - SYSTEM => C:\Program Files\CCleaner\CCleaner.exe [37458848 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)

Task: {1D2FBCCC-94AE-415B-832E-CB95E2F1A63E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [703536 2023-10-30] (HP Inc. -> HP Inc.)

Task: {D3B252A1-2DA3-4827-A387-942C8BDDF5E8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2023-10-30] (HP Inc. -> HP Inc.)

Task: {3F01A80C-0718-4DE0-9E9F-C808E1B17FB4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161264 2023-10-30] (HP Inc. -> HP Inc.)

Task: {EAA014D7-F6F4-4C42-B7C1-68B41E7A6651} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161264 2023-10-30] (HP Inc. -> HP Inc.)

Task: {053BAF8C-02F9-4C6A-99BE-5E5DFF59797E} - System32\Tasks\iSCSIAgentAutoStartup => C:\Program Files (x86)\QNAP\Qfinder\iSCSIAgent.exe [1741136 2023-08-17] (QNAP Systems, Inc. -> )

Task: {DBAC1141-CE34-4B48-8084-9AC287EF02F7} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28175336 2023-11-19] (Microsoft Corporation -> Microsoft Corporation)

Task: {38849C6E-D4BF-4B37-BDA2-01BBB27F3996} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28175336 2023-11-19] (Microsoft Corporation -> Microsoft Corporation)

Task: {8774B181-F879-4DEE-9475-84245CF37F40} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [306624 2023-12-05] (Microsoft Corporation -> Microsoft Corporation)

Task: {51D1AEAC-DDEC-4A5E-B227-D1EB170517FC} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [306624 2023-12-05] (Microsoft Corporation -> Microsoft Corporation)

Task: {90614681-FF43-4343-A17E-6E54A90514F9} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [169144 2023-11-19] (Microsoft Corporation -> Microsoft Corporation)

Task: {C815F64F-BA13-4983-88EE-B03FD9D8EF9E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {183DA614-29B3-4CAF-9BE5-FB158DB0FF93} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {3EF12FBC-C581-4056-998B-BD6E21227F9E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {42EE3797-B8A9-41A1-B18C-2754FF707F6C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {AC30F350-B1FB-4E2E-A9F8-4201FF44E881} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [674720 2023-12-21] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate

Task: {3A6CC4E6-1734-4A07-B25D-0856A8D129C7} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [35232 2023-12-21] (Mozilla Corporation -> Mozilla Foundation)

Task: {7DEAF2E9-67EC-46CF-A012-E6B3D1F16D5D} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat [815 2022-11-22] () [Datei ist nicht signiert]

Task: {B6DA96AF-E2A4-4C4A-88B6-FDD5395A6E6A} - System32\Tasks\nWizard_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [1555952 2023-01-22] (Nvidia Corporation -> NVIDIA Corporation)

Task: {688A8257-35CF-402C-BEE5-340474D31B47} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130736 2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

Task: {E2CB22EB-A5ED-412A-ABFD-BE4F7F0CB4AB} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3318351353-4052915309-164348779-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130736 2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

Task: {DD4ABBEB-84CF-4065-9014-CC7733FA8620} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3318351353-4052915309-164348779-1006 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130736 2023-12-08] (Microsoft Corporation -> Microsoft Corporation)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc. -> Apple Inc.)

Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-30] (Apple Inc. -> Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{70e651a9-a250-4d6c-8d0c-4abfe799ed45}: [DhcpNameServer] 172.20.10.1

Tcpip\..\Interfaces\{ea5cf1ad-55a8-4830-8f93-b8a2a0ced240}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{ea5cf1ad-55a8-4830-8f93-b8a2a0ced240}: [DhcpDomain] fritz.box

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <==== ACHTUNG
 

Edge: 

=======

Edge Profile: C:\Users\pentr\AppData\Local\Microsoft\Edge\User Data\Default [2023-12-22]

Edge Notifications: Default -> hxxps://en.softonic.com

Edge Extension: (Google Docs Offline) - C:\Users\pentr\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-08-29]

Edge Extension: (Edge relevant text changes) - C:\Users\pentr\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-13]
 

FireFox:

========

FF DefaultProfile: a8s34wki.default

FF ProfilePath: C:\Users\pentr\AppData\Roaming\Mozilla\Firefox\Profiles\a8s34wki.default [2021-12-16]

FF ProfilePath: C:\Users\pentr\AppData\Roaming\Mozilla\Firefox\Profiles\r8lix907.default-release [2024-01-02]

FF Notifications: Mozilla\Firefox\Profiles\r8lix907.default-release -> hxxps://drive.google.com; hxxps://www.instagram.com; hxxps://notification.myqnapcloud.com; hxxps://www.wetter.com; hxxps://twitter.com; hxxps://web.whatsapp.com

FF Extension: (AdBlocker Ultimate) - C:\Users\pentr\AppData\Roaming\Mozilla\Firefox\Profiles\r8lix907.default-release\Extensions\adblockultimate@adblockultimate.net.xpi [2023-11-30]

FF Extension: (To Google Translate) - C:\Users\pentr\AppData\Roaming\Mozilla\Firefox\Profiles\r8lix907.default-release\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2023-07-20]

FF Extension: (I don't care about cookies) - C:\Users\pentr\AppData\Roaming\Mozilla\Firefox\Profiles\r8lix907.default-release\Extensions\jid1-KKzOGWgsW3Ao4Q@jetpack.xpi [2023-12-06]

FF Extension: (NoScript) - C:\Users\pentr\AppData\Roaming\Mozilla\Firefox\Profiles\r8lix907.default-release\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2023-12-13]

FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi

FF Extension: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2021-02-01]

FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-11-19] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)

FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)

FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)

FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2023-11-05] (Adobe Inc. -> Adobe Systems Inc.)

FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2023-12-15] (Adobe Inc. -> Adobe Systems)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-11-19] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2023-12-15] (Adobe Inc. -> Adobe Systems)
 

Chrome: 

=======

CHR HKU\S-1-5-21-3318351353-4052915309-164348779-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-09-20] (Adobe Inc. -> Adobe Inc.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [944096 2023-12-15] (Adobe Inc. -> Adobe Inc.)

R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [4555744 2023-11-07] (Adobe Inc. -> Adobe Systems, Incorporated)

R3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1082784 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13233744 2023-11-19] (Microsoft Corporation -> Microsoft Corporation)

S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncHelper.exe [3514384 2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

R2 Focusrite Control Server; C:\Program Files\Focusrite\Focusrite Control\Server\ControlServer.exe [1297920 2023-08-24] () [Datei ist nicht signiert]

R2 HPAppHelperCap; C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe [887848 2023-10-30] (HP Inc. -> HP Inc.)

R2 HPDiagsCap; C:\Program Files\HP\HP Enabling Services\DiagsCap.exe [886824 2023-10-30] (HP Inc. -> HP Inc.)

R2 HPNetworkCap; C:\Program Files\HP\HP Enabling Services\NetworkCap.exe [882728 2023-10-30] (HP Inc. -> HP Inc.)

R2 HPSysInfoCap; C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe [886824 2023-10-30] (HP Inc. -> HP Inc.)

R2 NVWMI; C:\Windows\System32\DriverStore\FileRepository\nvwu.inf_amd64_4716be75eaec31a5\NVWMI\nvWmi64.exe [4513264 2023-07-17] (NVIDIA Corporation -> NVIDIA Corporation)

S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\23.246.1127.0002\OneDriveUpdaterService.exe [3851280 2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

R2 OptionsPlusUpdaterService; C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe [17595136 2023-02-03] (Logitech Inc -> Logitech, Inc.)

R2 postgresql-x64-15; C:\Program Files\PostgreSQL\15\bin\pg_ctl.exe [118784 2022-11-09] (PostgreSQL Global Development Group) [Datei ist nicht signiert]

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [534472 2023-12-13] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 TgbIke Starter; C:\Windows\SysWOW64\TgbStarter.exe [316368 2020-03-10] (THEGREENBOW (SISTECH S.A.) -> TheGreenBow)

R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe [3174840 2023-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe [133592 2023-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nvwu.inf_amd64_4716be75eaec31a5\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nvwu.inf_amd64_4716be75eaec31a5\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
 

===================== Treiber (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 AppleKmdfFilter; C:\Windows\System32\drivers\AppleKmdfFilter.sys [39272 2023-06-27] (Apple Inc. -> Apple Inc.)

S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [55608 2023-06-27] (Apple Inc. -> Apple Inc.)

S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [282624 2023-08-09] (Microsoft Corporation) [Datei ist nicht signiert]

S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [147968 2022-04-13] (Microsoft Corporation) [Datei ist nicht signiert]

S3 FB3SE_x64; C:\Windows\System32\Drivers\FB3SE_x64.sys [56416 2011-01-22] (Pangolin -> Pangolin Laser Systems, Inc.)

R3 FocusritePCIeSwRoot; C:\Windows\System32\drivers\FocusritePCIeSwRoot.sys [105168 2023-08-23] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)

R3 FocusriteUsb; C:\Windows\System32\drivers\FocusriteUsb.sys [169680 2023-08-23] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)

R3 FocusriteUsbAudio; C:\Windows\System32\drivers\FocusriteUsbAudio.sys [106192 2023-08-23] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)

R3 FocusriteUsbSwRoot; C:\Windows\System32\drivers\FocusriteUsbSwRoot.sys [111824 2023-08-23] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)

S3 Netaapl; C:\Windows\System32\drivers\netaapl64.sys [32352 2017-11-28] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)

R1 npcap; C:\Windows\system32\DRIVERS\npcap.sys [77792 2023-10-19] (Nmap Software LLC -> Insecure.Com LLC.)

R3 TGBMPEnum; C:\Windows\System32\drivers\TGBMPEnum.sys [49760 2019-07-23] (THEGREENBOW (SISTECH S.A.) -> TheGreenBow)

R3 TGBVPNVirtM; C:\Windows\System32\drivers\TGBVPNVirtM.sys [182776 2020-01-28] (THEGREENBOW (SISTECH S.A.) -> TheGreenBow)

S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [55856 2023-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [594304 2023-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105856 2023-12-07] (Microsoft Windows -> Microsoft Corporation)

U3 iswSvc; kein ImagePath

U4 npcap_wifi; kein ImagePath
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2024-01-02 11:48 - 2024-01-02 11:49 - 000063705 _____ C:\Users\pentr\Downloads\Addition.txt

2024-01-02 11:46 - 2024-01-02 12:18 - 000035084 _____ C:\Users\pentr\Downloads\FRST.txt

2024-01-02 11:45 - 2024-01-02 12:17 - 000000000 ____D C:\FRST

2024-01-02 11:45 - 2024-01-02 11:45 - 000000000 ____D C:\Users\pentr\Downloads\FRST-OlderVersion

2024-01-02 11:41 - 2024-01-02 11:45 - 002387456 _____ (Farbar) C:\Users\pentr\Downloads\FRST64(2).exe

2024-01-02 11:38 - 2024-01-02 11:38 - 000000089 _____ C:\Users\pentr\Desktop\Neues Textdokument.txt

2023-12-31 11:07 - 2023-12-31 11:07 - 007449560 _____ C:\Users\pentr\Downloads\Nicht benannt(4).mp4

2023-12-30 22:14 - 2023-12-30 22:14 - 007380779 _____ C:\Users\pentr\Downloads\Nicht benannt(2).mp4

2023-12-30 22:05 - 2023-12-30 22:05 - 006007272 _____ C:\Users\pentr\Downloads\Nicht benannt(1).mp4

2023-12-30 20:57 - 2023-12-30 20:57 - 011925918 _____ C:\Users\pentr\Downloads\Nicht benannt.mp4

2023-12-30 00:21 - 2023-12-30 00:21 - 000128323 _____ C:\Users\pentr\Downloads\manufacturer-1120960-pdf-1-de-datenblatt.pdf

2023-12-29 19:41 - 2023-12-29 19:41 - 001567125 _____ C:\Users\pentr\Downloads\372987_c_372987_v4_r1_de_online.pdf

2023-12-29 08:27 - 2023-12-29 08:27 - 000194180 _____ C:\Users\pentr\Downloads\Versicherungsschein.pdf

2023-12-29 08:16 - 2023-12-29 08:16 - 000182912 _____ C:\Users\pentr\Downloads\Arc_ZVFE_JS_RECH01K650011251005222DP20024620160103sapi2pci_I2P_401703816341738_Q2f2-467.pdf.pdf

2023-12-23 22:32 - 2023-12-23 22:32 - 261740021 _____ C:\Users\pentr\Desktop\Weihnachtsgruß.mp4

2023-12-23 22:06 - 2023-12-23 22:06 - 001199260 _____ C:\Users\pentr\Downloads\NVPRSRUG.pdf

2023-12-23 22:02 - 2023-12-23 22:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Neat Video v5 (SR) for Premiere

2023-12-23 22:02 - 2023-12-23 22:02 - 000000000 ____D C:\Program Files\Neat Video v5 (SR) for Premiere

2023-12-23 22:00 - 2023-12-23 22:02 - 014936904 _____ (Neat Video team, ABSoft ) C:\Users\pentr\Downloads\NeatVideo5PR(SR)-Demo-64bit-Setup.exe

2023-12-23 17:46 - 2023-12-23 17:46 - 037750368 _____ C:\Users\pentr\Desktop\In der Weihnachtsbäckerei 2_mixdown.wav

2023-12-23 17:46 - 2023-12-23 17:46 - 000589692 _____ C:\Users\pentr\Desktop\In der Weihnachtsbäckerei 2_mixdown.pkf

2023-12-23 09:49 - 2023-12-23 09:49 - 000075790 _____ C:\Users\pentr\Downloads\ShowInvoice.pdf

2023-12-22 11:07 - 2023-12-22 11:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IVGI2

2023-12-22 11:06 - 2023-12-22 11:06 - 004700073 _____ C:\Users\pentr\Downloads\IVGI2-win-installer(1).zip

2023-12-22 11:06 - 2023-12-22 11:06 - 000000000 ____D C:\Users\pentr\Downloads\IVGI2-win-installer

2023-12-22 11:02 - 2023-12-22 11:02 - 000000000 ____D C:\Users\pentr\AppData\Roaming\Tokyo Dawn Labs

2023-12-22 10:19 - 2023-12-22 11:05 - 000000000 ____D C:\Users\pentr\AppData\Roaming\Acon Digital

2023-12-22 10:19 - 2023-12-22 10:19 - 000000000 ____D C:\ProgramData\Acon Digital

2023-12-22 10:19 - 2023-12-22 10:19 - 000000000 ____D C:\Program Files\Acon Digital

2023-12-22 10:16 - 2023-12-22 10:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LALA

2023-12-22 10:12 - 2023-12-22 10:12 - 022447365 _____ C:\Users\pentr\Downloads\dragonfly-reverb-3.2.10-win64.zip

2023-12-22 10:11 - 2023-12-22 10:11 - 006086632 _____ (Acon AS ) C:\Users\pentr\Downloads\Multiply_Win64_1_3_1.exe

2023-12-22 10:09 - 2023-12-22 10:09 - 004700073 _____ C:\Users\pentr\Downloads\IVGI2-win-installer.zip

2023-12-22 10:08 - 2023-12-22 10:08 - 008098622 _____ C:\Users\pentr\Downloads\LALA_3.1.zip

2023-12-22 10:08 - 2023-12-22 10:08 - 005678875 _____ (Analog Obsesion ) C:\Users\pentr\Downloads\LALA_3.1.exe

2023-12-22 10:05 - 2023-12-22 10:05 - 022482867 _____ C:\Users\pentr\Downloads\TDR Nova (no installer).zip

2023-12-22 10:05 - 2023-12-22 10:05 - 009439899 _____ C:\Users\pentr\Downloads\TDR Nova (installer).zip

2023-12-21 07:48 - 2023-12-21 07:48 - 000001149 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder 2024.lnk

2023-12-21 07:47 - 2023-12-21 07:47 - 000001092 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom Classic.lnk

2023-12-21 07:46 - 2023-12-21 07:46 - 000001071 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2024.lnk

2023-12-21 07:43 - 2023-12-21 07:48 - 000000000 ____D C:\Program Files\Mozilla Firefox

2023-12-20 19:46 - 2023-12-20 19:57 - 000000000 ____D C:\Users\_ashbackuppbf_

2023-12-20 19:46 - 2023-12-20 19:46 - 000000020 ___SH C:\Users\_ashbackuppbf_\ntuser.ini

2023-12-20 19:46 - 2023-12-20 19:46 - 000000000 _SHDL C:\Users\_ashbackuppbf_\Vorlagen

2023-12-20 19:46 - 2023-12-20 19:46 - 000000000 _SHDL C:\Users\_ashbackuppbf_\Startmenü

2023-12-20 19:46 - 2023-12-20 19:46 - 000000000 _SHDL C:\Users\_ashbackuppbf_\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2023-12-20 19:46 - 2023-12-20 19:46 - 000000000 _SHDL C:\Users\_ashbackuppbf_\AppData\Local\Verlauf

2023-12-20 19:46 - 2023-12-20 19:46 - 000000000 _SHDL C:\Users\_ashbackuppbf_\AppData\Local\Anwendungsdaten

2023-12-20 19:46 - 2023-12-20 19:46 - 000000000 ___SD C:\Users\_ashbackuppbf_\AppData\Roaming\Microsoft\Protect

2023-12-20 19:46 - 2023-12-20 19:46 - 000000000 ____D C:\Users\_ashbackuppbf_\AppData\Local\Ashampoo

2023-12-20 19:46 - 2021-12-16 18:17 - 000000000 ___RD C:\Users\_ashbackuppbf_\OneDrive

2023-12-20 19:46 - 2019-12-07 10:31 - 000000000 ____D C:\Users\_ashbackuppbf_\AppData\Roaming\Microsoft\Windows

2023-12-20 19:45 - 2023-12-20 19:45 - 105718768 _____ (Ashampoo GmbH & Co. KG ) C:\Users\pentr\Downloads\ashampoo_backup_free_36148.exe

2023-12-20 15:36 - 2023-12-20 15:36 - 004297870 _____ C:\Users\pentr\Downloads\HBS-diagnosis-report-2023-12-20T15 36 08.zip

2023-12-20 07:31 - 2023-12-20 07:31 - 000000000 ___HD C:\OneDriveTemp

2023-12-19 11:03 - 2023-12-19 11:03 - 000000000 ____D C:\Users\pentr\Apple

2023-12-18 18:00 - 2023-12-18 18:00 - 065482811 _____ C:\Users\pentr\Downloads\Jean Michel Jarre x Armin van Buuren - EPICA MAXIMA (Official Visualizer).mp4

2023-12-18 11:52 - 2023-12-18 11:52 - 000203488 _____ C:\Users\pentr\Downloads\Krankenschein Tepper.pdf

2023-12-17 18:32 - 2023-12-17 18:32 - 299328453 _____ C:\Users\pentr\Downloads\USBbootSetup-SeaToolsBootable.zip

2023-12-17 18:05 - 2023-12-17 18:05 - 003169795 _____ C:\Users\pentr\Downloads\HBS-diagnosis-report-2023-12-17T18 05 03.zip

2023-12-17 10:59 - 2023-12-17 10:59 - 001038452 _____ C:\Users\pentr\Downloads\In der Weihnachtsbäckerei (Instrumental).pkf

2023-12-17 10:54 - 2023-12-17 10:55 - 033229076 _____ C:\Users\pentr\Downloads\In der Weihnachtsbäckerei (Instrumental).wav

2023-12-17 09:55 - 2023-12-17 09:55 - 000000000 ____D C:\Users\pentr\AppData\Roaming\Maxon

2023-12-17 09:50 - 2023-12-17 09:50 - 000000000 ____D C:\Users\pentr\AppData\Roaming\ASCOMP Software

2023-12-17 09:49 - 2023-12-17 09:49 - 010189776 _____ (ASCOMP Software GmbH ) C:\Users\pentr\Downloads\bkmaker.exe

2023-12-16 10:53 - 2023-10-31 10:13 - 2783045887 _____ C:\Users\pentr\Downloads\A Haunting in Venice.mkv

2023-12-16 09:44 - 2023-12-22 10:05 - 000000000 ____D C:\Users\pentr\AppData\Local\RealVNC

2023-12-16 09:44 - 2023-12-16 10:40 - 000000000 ____D C:\Users\pentr\AppData\Roaming\RealVNC

2023-12-16 09:43 - 2023-12-16 09:43 - 011021376 _____ (RealVNC) C:\Users\pentr\Downloads\VNC-Viewer-7.8.0-Windows-64bit.exe

2023-12-15 09:15 - 2023-12-15 09:15 - 003936063 _____ C:\Users\pentr\Downloads\HBS-diagnosis-report-2023-12-15T09 15 52.zip

2023-12-13 18:57 - 2023-12-13 18:57 - 000000000 ____D C:\Windows\InboxApps

2023-12-13 18:14 - 2023-12-13 18:14 - 000001349 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Character Animator 2023.lnk

2023-12-13 18:07 - 2023-12-13 18:07 - 000001089 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Audition 2024.lnk

2023-12-13 17:56 - 2023-12-13 17:56 - 000001257 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects 2024.lnk

2023-12-13 17:54 - 2023-12-13 17:54 - 000001137 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Premiere Pro 2024.lnk

2023-12-13 17:49 - 2023-12-13 17:49 - 000002500 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator 2024.lnk

2023-12-13 16:38 - 2023-12-13 16:38 - 000016707 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json

2023-12-13 16:30 - 2023-12-13 16:30 - 000000000 ___HD C:\$WinREAgent

2023-12-13 16:23 - 2023-12-13 16:23 - 000004636 _____ C:\Users\pentr\Downloads\sitemap(1).xml

2023-12-13 16:06 - 2023-12-13 16:06 - 000004489 _____ C:\Users\pentr\Downloads\sitemap.xml

2023-12-12 15:33 - 2023-12-12 15:33 - 000000000 ____D C:\Users\pentr\AppData\Local\QfinderPro

2023-12-12 15:32 - 2023-12-12 15:32 - 033999536 _____ (QNAP Systems, Inc.) C:\Users\pentr\Downloads\QNAPQfinderProWindows-7.9.1.0817.exe

2023-12-12 15:32 - 2023-12-12 15:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QNAP

2023-12-12 14:39 - 2023-12-19 07:27 - 000000000 ____D C:\Program Files (x86)\SeaTools5

2023-12-12 14:39 - 2023-12-12 14:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SeaTools

2023-12-12 14:38 - 2023-12-12 14:38 - 051958280 _____ (Seagate) C:\Users\pentr\Downloads\SeaToolsWindowsInstaller.exe

2023-12-12 12:41 - 2023-12-12 12:41 - 006969600 _____ C:\Users\pentr\Downloads\100869623_B.pdf

2023-12-12 12:17 - 2023-12-12 12:17 - 000000000 ____D C:\Users\pentr\.ssh

2023-12-12 09:22 - 2023-12-12 09:22 - 000009326 _____ C:\Users\pentr\Downloads\cm_log_2023-12-12_09-22-45.zip

2023-12-11 14:41 - 2023-12-11 14:41 - 000000000 ____D C:\Users\pentr\Downloads\HBS-diagnosis-report-2023-12-11T14 33 30

2023-12-11 14:33 - 2023-12-11 14:33 - 003972979 _____ C:\Users\pentr\Downloads\HBS-diagnosis-report-2023-12-11T14 33 30.zip

2023-12-11 12:55 - 2023-12-11 12:55 - 000000494 _____ C:\Users\pentr\Downloads\Integrity Check_20231211.zip

2023-12-11 12:08 - 2023-12-11 12:08 - 000003460 _____ C:\Windows\system32\Tasks\npcapwatchdog

2023-12-11 12:08 - 2023-12-11 12:08 - 000001834 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk

2023-12-11 12:08 - 2023-12-11 12:08 - 000000000 ____D C:\Windows\SysWOW64\Npcap

2023-12-11 12:08 - 2023-12-11 12:08 - 000000000 ____D C:\Windows\system32\Npcap

2023-12-11 12:02 - 2023-12-11 12:02 - 000010720 _____ C:\Users\pentr\Downloads\QuFirewall_Q19BB03462_Basic protection_20231211.pcap

2023-12-10 18:12 - 2023-12-10 18:12 - 001041980 _____ C:\Users\pentr\Downloads\Rolf Zuckowski ｜ In der Weihnachtsbäckerei.pkf

2023-12-10 18:10 - 2023-12-10 18:11 - 033341126 _____ C:\Users\pentr\Downloads\Rolf Zuckowski ｜ In der Weihnachtsbäckerei.wav

2023-12-10 09:05 - 2023-12-22 11:07 - 000000000 ____D C:\Program Files\VSTPlugins

2023-12-10 09:05 - 2023-12-22 11:07 - 000000000 ____D C:\Program Files\Common Files\VST3

2023-12-10 09:05 - 2023-12-10 09:05 - 000000000 ____D C:\Program Files\Common Files\Avid

2023-12-10 09:05 - 2023-12-10 09:05 - 000000000 ____D C:\Program Files (x86)\VSTPlugins

2023-12-10 09:05 - 2023-12-10 09:05 - 000000000 ____D C:\Program Files (x86)\Auburn Sounds

2023-12-10 09:03 - 2023-12-10 09:03 - 027523282 _____ C:\Users\pentr\Downloads\Graillon-FREE-2.7.zip

2023-12-09 11:22 - 2023-12-09 11:22 - 009625260 _____ C:\Users\pentr\Downloads\Weihnachtslied an Weihnachtslied： Der schönste Weihnachtslieder Mix.pkf

2023-12-09 11:16 - 2023-12-09 11:19 - 308006102 _____ C:\Users\pentr\Downloads\Weihnachtslied an Weihnachtslied： Der schönste Weihnachtslieder Mix.wav

2023-12-09 11:03 - 2023-12-09 11:03 - 001911877 _____ C:\Users\pentr\Downloads\Scarlett2i2 3rd Gen User Guide_DE_0.pdf

2023-12-08 18:15 - 2023-12-08 18:15 - 000043065 _____ C:\Users\pentr\Downloads\kindergeburtstag.jpeg

2023-12-07 17:31 - 2023-12-07 17:31 - 000000000 ____D C:\Users\pentr\Downloads\gpg4usb-0.3.3-1

2023-12-07 17:30 - 2023-12-07 17:30 - 024339124 _____ C:\Users\pentr\Downloads\gpg4usb-0.3.3-1.zip

2023-12-07 17:13 - 2023-12-11 11:48 - 000000000 ____D C:\Users\pentr\AppData\Roaming\tor
 

==================== Ein Monat (geänderte) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2024-01-02 12:13 - 2022-09-02 12:48 - 000000000 ____D C:\Users\pentr\AppData\Local\LogiOptionsPlus

2024-01-02 12:08 - 2023-10-04 16:54 - 000000000 ____D C:\Users\pentr\AppData\Roaming\KeePass

2024-01-02 11:56 - 2021-12-16 16:42 - 000000000 ____D C:\Users\pentr\AppData\Local\D3DSCache

2024-01-02 11:55 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2024-01-02 09:21 - 2020-11-19 08:43 - 000000000 ____D C:\Windows\system32\SleepStudy

2023-12-31 12:38 - 2021-12-22 23:36 - 000000000 ____D C:\Users\pentr\AppData\Roaming\vlc

2023-12-31 11:24 - 2021-12-18 09:55 - 000000000 ____D C:\Users\pentr\AppData\Roaming\Microsoft\Word

2023-12-30 21:28 - 2023-11-11 15:24 - 000000000 ____D C:\Users\pentr\AppData\Roaming\XnView

2023-12-30 18:31 - 2021-05-04 12:17 - 000000000 ____D C:\ProgramData\NVIDIA

2023-12-30 18:31 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\ServiceState

2023-12-30 08:51 - 2022-05-16 17:37 - 000000000 ____D C:\Users\pentr\AppData\Roaming\com.adobe.dunamis

2023-12-27 09:24 - 2023-10-04 16:35 - 000000000 ____D C:\Users\pentr\AppData\Local\CrashDumps

2023-12-23 09:34 - 2020-11-19 08:46 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2023-12-23 09:34 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps

2023-12-23 09:34 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\AppReadiness

2023-12-22 13:42 - 2023-05-24 19:50 - 000000000 ____D C:\BEYOND52

2023-12-22 10:05 - 2021-12-26 17:07 - 000000000 ____D C:\Windows\Minidump

2023-12-22 10:01 - 2021-12-16 21:46 - 000000000 ____D C:\Program Files\CCleaner

2023-12-21 07:48 - 2022-02-12 19:59 - 000000000 ___HD C:\adobeTemp

2023-12-21 07:48 - 2021-12-16 18:48 - 000000000 ____D C:\Program Files\Adobe

2023-12-21 07:48 - 2021-12-16 17:09 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

2023-12-21 07:48 - 2021-12-16 17:09 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2023-12-21 07:46 - 2021-12-16 18:49 - 000000000 ____D C:\ProgramData\Adobe

2023-12-21 07:46 - 2021-12-16 18:48 - 000000000 ____D C:\Program Files\Common Files\Adobe

2023-12-20 19:56 - 2023-03-18 10:25 - 000000000 ____D C:\Users\pentr\AppData\Local\Ashampoo Backup PBF

2023-12-20 07:37 - 2021-02-15 12:57 - 001568902 _____ C:\Windows\system32\perfh007.dat

2023-12-20 07:37 - 2021-02-15 12:57 - 000390846 _____ C:\Windows\system32\perfc007.dat

2023-12-20 07:37 - 2020-11-19 08:54 - 000004502 _____ C:\Windows\system32\PerfStringBackup.INI

2023-12-20 07:31 - 2022-10-01 11:52 - 000000000 ___RD C:\Users\pentr\iCloudDrive

2023-12-20 07:31 - 2021-12-16 18:52 - 000000000 ___RD C:\Users\pentr\Creative Cloud Files

2023-12-20 07:31 - 2021-12-16 16:44 - 000000000 ___RD C:\Users\pentr\OneDrive

2023-12-20 07:30 - 2021-05-04 11:49 - 000008192 ___SH C:\DumpStack.log.tmp

2023-12-20 07:30 - 2020-11-19 08:43 - 000000006 ____H C:\Windows\Tasks\SA.DAT

2023-12-20 07:30 - 2019-12-07 10:03 - 000524288 _____ C:\Windows\system32\config\BBI

2023-12-20 07:29 - 2021-12-16 16:40 - 000000000 ____D C:\Users\pentr

2023-12-18 13:05 - 2019-12-07 10:51 - 000000000 ____D C:\Windows\system32\FxsTmp

2023-12-17 17:19 - 2023-10-04 08:51 - 000000000 ____D C:\Program Files\KeePass Password Safe 2

2023-12-17 08:55 - 2021-12-16 17:01 - 000000000 ___SD C:\Users\pentr\AppData\Roaming\Microsoft\Credentials

2023-12-15 09:02 - 2023-08-10 10:14 - 000001389 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk

2023-12-15 09:02 - 2021-12-16 18:48 - 000000000 ____D C:\Program Files (x86)\Adobe

2023-12-13 18:59 - 2021-12-16 16:42 - 000000000 ____D C:\Users\pentr\AppData\Local\Packages

2023-12-13 18:59 - 2019-12-07 10:13 - 000000000 ____D C:\Windows\INF

2023-12-13 18:58 - 2022-12-21 08:45 - 000000666 _____ C:\Windows\Tasks\CCleanerCrashReporting.job

2023-12-13 18:58 - 2020-11-19 08:43 - 000498384 _____ C:\Windows\system32\FNTCACHE.DAT

2023-12-13 18:57 - 2019-12-07 10:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection

2023-12-13 18:57 - 2019-12-07 10:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel

2023-12-13 18:57 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata

2023-12-13 18:57 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\lv-LV

2023-12-13 18:57 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\lt-LT

2023-12-13 18:57 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\et-EE

2023-12-13 18:57 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\es-MX

2023-12-13 18:57 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\Dism

2023-12-13 18:57 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SystemResources

2023-12-13 18:57 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\WinMetadata

2023-12-13 18:57 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\oobe

2023-12-13 18:57 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\lv-LV

2023-12-13 18:57 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\lt-LT

2023-12-13 18:57 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\et-EE

2023-12-13 18:57 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\es-MX

2023-12-13 18:57 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\Dism

2023-12-13 18:57 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\ShellExperiences

2023-12-13 18:57 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\Provisioning

2023-12-13 18:57 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\PolicyDefinitions

2023-12-13 18:57 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\bcastdvr

2023-12-13 18:57 - 2019-12-07 10:03 - 000000000 ____D C:\Windows\servicing

2023-12-13 17:49 - 2021-12-16 18:49 - 000000000 ____D C:\Users\pentr\AppData\Roaming\Adobe

2023-12-13 16:50 - 2022-09-15 17:35 - 000000000 ____D C:\Users\pentr\AppData\Local\ElevatedDiagnostics

2023-12-13 16:40 - 2019-12-07 10:54 - 000023040 _____ (Microsoft Corporation) C:\Windows\system32\OEMDefaultAssociations.dll

2023-12-13 16:40 - 2019-12-07 10:54 - 000020827 _____ C:\Windows\system32\OEMDefaultAssociations.xml

2023-12-13 16:40 - 2019-12-07 10:03 - 000000000 ____D C:\Windows\CbsTemp

2023-12-13 16:38 - 2020-11-19 08:45 - 003016192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll

2023-12-13 15:44 - 2023-03-09 14:16 - 000003380 _____ C:\Windows\system32\Tasks\CCleanerCrashReporting

2023-12-13 15:44 - 2021-12-16 21:46 - 000003936 _____ C:\Windows\system32\Tasks\CCleaner Update

2023-12-12 15:32 - 2023-02-16 17:49 - 000003040 _____ C:\Windows\system32\Tasks\iSCSIAgentAutoStartup

2023-12-11 12:55 - 2022-01-12 17:29 - 000000000 ____D C:\Users\pentr\AppData\Roaming\Microsoft\Excel

2023-12-11 12:10 - 2022-08-01 15:53 - 000000000 ____D C:\Program Files\Microsoft OneDrive

2023-12-11 12:08 - 2022-04-04 16:44 - 000000000 ____D C:\Program Files\Npcap

2023-12-11 12:08 - 2022-04-04 16:43 - 000000000 ____D C:\Program Files\Wireshark

2023-12-11 12:07 - 2021-12-16 16:30 - 000000000 ____D C:\ProgramData\Package Cache

2023-12-08 18:13 - 2023-01-19 18:00 - 000002155 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2023-12-08 18:13 - 2022-07-30 08:51 - 000003592 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3318351353-4052915309-164348779-1001

2023-12-08 18:13 - 2022-07-30 08:51 - 000003194 _____ C:\Windows\system32\Tasks\OneDrive Per-Machine Standalone Update Task

2023-12-07 18:28 - 2021-12-16 17:09 - 000000000 ____D C:\Users\pentr\AppData\LocalLow\Mozilla

2023-12-07 16:49 - 2020-11-19 08:43 - 000000000 ____D C:\Windows\system32\Drivers\wd

2023-12-06 18:20 - 2023-07-31 08:48 - 000003530 _____ C:\Windows\system32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0

2023-12-06 18:20 - 2022-03-17 17:35 - 000003506 _____ C:\Windows\system32\Tasks\AdobeGCInvoker-1.0

2023-12-05 12:16 - 2022-07-30 08:58 - 000000000 ____D C:\Program Files\Microsoft Office
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
 

2022-03-17 18:32 - 2022-03-17 18:32 - 000000000 _____ () C:\Users\pentr\AppData\Local\oobelibMkey.log

2023-10-04 16:01 - 2023-11-25 09:49 - 000000128 _____ () C:\Users\pentr\AppData\Local\PUTTY.RND

2021-12-16 21:02 - 2021-12-16 21:02 - 000007605 _____ () C:\Users\pentr\AppData\Local\Resmon.ResmonCfg
 

==================== SigCheck ============================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

==================== Ende von FRST.txt ========================

Bis auf den Scan habe ich noch nichts unternommen. Woher das kommen könnte kann ich mir nicht erklären. Wie ich gelesen habe, gibt es hier schon einen solchen Fall.

VG
Thomas

hier noch die Addition.txt

Code:



Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 01.01.2024

durchgeführt von pentr (02-01-2024 12:18:34)

Gestartet von C:\Users\pentr\Downloads

Microsoft Windows 10 Pro Version 22H2 19045.3803 (X64) (2021-12-16 15:31:22)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

Administrator (S-1-5-21-3318351353-4052915309-164348779-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-3318351353-4052915309-164348779-503 - Limited - Disabled)

Gast (S-1-5-21-3318351353-4052915309-164348779-501 - Limited - Disabled)

pentr (S-1-5-21-3318351353-4052915309-164348779-1001 - Administrator - Enabled) => C:\Users\pentr

WDAGUtilityAccount (S-1-5-21-3318351353-4052915309-164348779-504 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: ZoneAlarm Free Firewall Firewall (Disabled) {6621BDDE-E30C-5CC1-8960-D295C590684C}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

7-Zip 21.06 (x64) (HKLM\...\7-Zip) (Version: 21.06 - Igor Pavlov)

Acon Digital Multiply (64 bit) 1.3.1 (HKLM\...\{A5E784FC-ABB8-486F-8740-6550BFB4CC6D}_is1) (Version: 1.3.1 - Acon AS)

ActKey (HKLM-x32\...\{681B82EF-A457-4849-AABC-5B6099380FA5}) (Version: 1.12.0.0 - Oki Data Corporation) Hidden

Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1033-FFFF-7760-BC15014EA700}) (Version: 23.006.20380 - Adobe)

Adobe After Effects 2024 (HKLM-x32\...\AEFT_24_1) (Version: 24.1 - Adobe Inc.)

Adobe Animate 2024 (HKLM-x32\...\FLPR_24_0) (Version: 24.0 - Adobe Inc.)

Adobe Audition 2024 (HKLM-x32\...\AUDT_24_0_3) (Version: 24.0.3 - Adobe Inc.)

Adobe Character Animator 2023 (HKLM-x32\...\CHAR_23_6) (Version: 23.6 - Adobe Inc.)

Adobe Character Animator 2024 (HKLM-x32\...\CHAR_24_0) (Version: 24.0 - Adobe Inc.)

Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 6.1.0.587 - Adobe Inc.)

Adobe Dreamweaver 2021 (HKLM-x32\...\DRWV_21_3) (Version: 21.3 - Adobe Inc.)

Adobe Genuine Service (HKLM-x32\...\AdobeGenuineService) (Version: 8.4.0.63 - Adobe Inc.)

Adobe Illustrator 2024 (HKLM-x32\...\ILST_28_1) (Version: 28.1 - Adobe Inc.)

Adobe Lightroom Classic (HKLM-x32\...\LTRM_13_1) (Version: 13.1 - Adobe Inc.)

Adobe Media Encoder 2024 (HKLM-x32\...\AME_24_1_1) (Version: 24.1.1 - Adobe Inc.)

Adobe Photoshop 2024 (HKLM-x32\...\PHSP_25_3_1) (Version: 25.3.1.241 - Adobe Inc.)

Adobe Premiere Pro 2024 (HKLM-x32\...\PPRO_24_1) (Version: 24.1 - Adobe Inc.)

Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601053}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden

Auburn Sounds Graillon 2 (HKLM\...\Auburn Sounds Graillon 2) (Version:  - )

Audacity 3.3.3 (HKLM\...\Audacity_is1) (Version: 3.3.3 - Audacity Team)

BEYOND 3D Support (HKLM-x32\...\{B71B220C-6499-4CA4-9F77-746FD3520D8D}) (Version: 2.1 - Pangolin)

BEYOND version 5.2 (HKLM-x32\...\{58025D4D-63E4-49E8-8D39-5BDBECE34598}_is1) (Version: 5.2 - Pangolin Laser Systems, Inc.)

blender (HKLM\...\{C6318CE0-4C79-469E-9097-6A75C0DD6589}) (Version: 3.5.1 - Blender Foundation)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

CCleaner (HKLM\...\CCleaner) (Version: 6.19 - Piriform)

CPUID CPU-Z 2.03 (HKLM\...\CPUID CPU-Z_is1) (Version: 2.03 - CPUID, Inc.)

FileZilla 3.66.1 (HKLM-x32\...\FileZilla Client) (Version: 3.66.1 - Tim Kosse)

Focusrite Audio Drivers 4.116.9.27 (HKLM\...\Focusrite Audio Drivers_is1) (Version: 4.116.9.27 - Focusrite Audio Engineering, Ltd.)

Focusrite Control 3.15.0.172 (HKLM\...\Focusrite Control_is1) (Version: 3.15.0.172 - Focusrite Audio Engineering Ltd.)

HandBrake 1.4.2 (HKLM-x32\...\HandBrake) (Version: 1.4.2 - )

iCloud Outlook (HKLM\...\{F054257C-600A-4918-B730-F6829E491781}) (Version: 13.0.0.201 - Apple Inc.)

iLoad Software (HKU\S-1-5-21-3318351353-4052915309-164348779-1001\...\iLoad) (Version: 8.7.2 - )

Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)

Intel(R) Network Connections 24.0.0.11 (HKLM\...\{7044D5A2-21D1-4DE9-8E70-BBB6EADBE22E}) (Version: 24.0.0.11 - Intel) Hidden

Intel(R) Network Connections 24.0.0.11 (HKLM\...\PROSetDX) (Version: 24.0.0.11 - Intel)

Intel(R) Rapid Storage Technology enterprise (HKLM-x32\...\{8B313BF5-9BD5-42a3-94C1-A28AF3AA51CC}) (Version: 4.7.0.1098 - Intel Corporation)

IVGI2 version 2.5.0.0 (HKLM\...\IVGI2_is1) (Version: 2.5.0.0 - )

KeePass Password Safe 2.55 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.55 - Dominik Reichl)

LCBlender_install version 1.2.8 (HKLM-x32\...\{E54882EF-C130-4880-B8B4-23268E861BB7}_is1) (Version: 1.2.8 - Pangolin Laser Systems, Inc.)

LinuxLive USB Creator (HKLM-x32\...\LinuxLive USB Creator) (Version: 2.9 - Thibaut Lauziere)

Logi Options+ (HKLM\...\{850cdc16-85df-4052-b06e-4e3e9e83c5c6}) (Version: 1.32.366807 - Logitech)

Magic Bullet Suite (HKLM\...\Magic Bullet Suite v2023.0.0) (Version:  - Maxon Computer GmbH)

Microsoft .NET Host - 5.0.13 (x64) (HKLM\...\{07FD769C-6C18-4038-A261-E9859C74E624}) (Version: 40.52.30715 - Microsoft Corporation) Hidden

Microsoft .NET Host - 6.0.12 (x64) (HKLM\...\{E215AA9E-5DF2-44BC-9D6F-E1A1B0C348FB}) (Version: 48.51.51943 - Microsoft Corporation) Hidden

Microsoft .NET Host FX Resolver - 5.0.13 (x64) (HKLM\...\{0F011389-4823-40D0-AB50-711628D820F5}) (Version: 40.52.30715 - Microsoft Corporation) Hidden

Microsoft .NET Host FX Resolver - 6.0.12 (x64) (HKLM\...\{0712F23C-FBAC-436C-9DDB-125F32D15033}) (Version: 48.51.51943 - Microsoft Corporation) Hidden

Microsoft .NET Runtime - 5.0.13 (x64) (HKLM\...\{C84C2DA1-52E2-4183-8F20-88176B77848F}) (Version: 40.52.30715 - Microsoft Corporation) Hidden

Microsoft .NET Runtime - 6.0.12 (x64) (HKLM\...\{1BF67DC1-8BB5-4AF5-BE20-3B53D9532D01}) (Version: 48.51.51943 - Microsoft Corporation) Hidden

Microsoft .NET Runtime - 6.0.12 (x64) (HKLM-x32\...\{35588924-6b2a-48cd-a3ee-b9118cad2d01}) (Version: 6.0.12.31918 - Microsoft Corporation)

Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.17029.20068 - Microsoft Corporation)

Microsoft ASP.NET Core 6.0.12 - Shared Framework (x64) (HKLM-x32\...\{e51f0aee-1c51-4172-bb0c-58ce50a6c648}) (Version: 6.0.12.22571 - Microsoft Corporation)

Microsoft ASP.NET Core 6.0.12 Shared Framework (x64) (HKLM\...\{EB4AA7BF-1E27-33BB-91BC-1FD67B340EB0}) (Version: 6.0.12.22571 - Microsoft Corporation) Hidden

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 120.0.2210.91 - Microsoft Corporation)

Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 120.0.2210.91 - Microsoft Corporation)

Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 23.246.1127.0002 - Microsoft Corporation)

Microsoft Report Viewer 2015 Runtime (HKLM-x32\...\{3ECE8FC7-7020-4756-A71C-C345D4725B77}) (Version: 12.0.2402.15 - Microsoft Corporation)

Microsoft System CLR Types for SQL Server 2014 (HKLM\...\{68BA34E8-9B9D-4A74-83F0-7D366B532D75}) (Version: 12.0.2402.11 - Microsoft Corporation)

Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.36.32532 (HKLM-x32\...\{8bdfe669-9705-4184-9368-db9ce581e0e7}) (Version: 14.36.32532.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.32.31326 (HKLM-x32\...\{817e21c1-6b3a-4bc1-8c49-67e4e1887b3a}) (Version: 14.32.31326.0 - Microsoft Corporation)

Microsoft Visual C++ 2022 X64 Additional Runtime - 14.36.32532 (HKLM\...\{0025DD72-A959-45B5-A0A3-7EFEB15A8050}) (Version: 14.36.32532 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.36.32532 (HKLM\...\{D5D19E2F-7189-42FE-8103-92CD1FA457C2}) (Version: 14.36.32532 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X86 Additional Runtime - 14.32.31326 (HKLM-x32\...\{A250E750-DB3F-40C1-8460-8EF77C7582DA}) (Version: 14.32.31326 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.32.31326 (HKLM-x32\...\{46E11E7F-01E1-44D0-BB86-C67342D253DD}) (Version: 14.32.31326 - Microsoft Corporation) Hidden

Microsoft Windows Desktop Runtime - 5.0.13 (x64) (HKLM\...\{E41C6EA8-A897-4008-835E-151A92FD6F95}) (Version: 40.52.30717 - Microsoft Corporation) Hidden

Microsoft Windows Desktop Runtime - 5.0.13 (x64) (HKLM-x32\...\{e2d1ae32-dd1d-4ad7-a298-10e42e7840fc}) (Version: 5.0.13.30717 - Microsoft Corporation)

Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 121.0 (x64 de)) (Version: 121.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 95.0.1 - Mozilla)

Neat Video v5.6.0 Demo plug-in (Second Revision) for Premiere (HKLM\...\Neat Video v5 (SR) for Premiere_is1) (Version:  - Neat Video team, ABSoft)

Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.2 - Notepad++ Team)

Npcap (HKLM-x32\...\NpcapInst) (Version: 1.78 - Nmap Project)

NVIDIA Grafiktreiber 536.67 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 536.67 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.40.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.40.14 - NVIDIA Corporation)

NVIDIA RTX Desktop Manager 203.20 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView) (Version: 203.20 - NVIDIA Corporation)

oCam Version 520.0 (HKLM-x32\...\oCam_is1) (Version: 520.0 - hxxp://ohsoft.net/)

Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.17029.20000 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.17029.20068 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.17029.20000 - Microsoft Corporation) Hidden

OKI ActKey (HKLM-x32\...\InstallShield_{681B82EF-A457-4849-AABC-5B6099380FA5}) (Version: 1.12.0.0 - Oki Data Corporation)

OKI Network Extension (HKLM-x32\...\{38ADB9A6-798C-11D6-A855-00105A80791C}) (Version: 1.6.0 - Okidata)

OKI Universal Scanner (HKLM-x32\...\InstallShield_{B20CCB24-C32F-4C2A-A6E0-B0D78456CAD1}) (Version: 1.2.5.0 - Oki Data Corporation)

Pistonsoft BPM Detector 1.0 (HKLM-x32\...\Pistonsoft BPM Detector_is1) (Version: 1.0 - Piston Software)

PostgreSQL 15  (HKLM\...\PostgreSQL 15) (Version: 15 - PostgreSQL Global Development Group)

PuTTY release 0.76 (64-bit) (HKLM\...\{1E0D5689-40F1-4E46-ABBB-EAAC68B5CD89}) (Version: 0.76.0.0 - Simon Tatham)

QNAP Qfinder Pro (HKLM-x32\...\QNAP_FINDER) (Version: 7.9.1.0817 - QNAP Systems, Inc.)

Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9013.1 - Realtek Semiconductor Corp.)

ScannerDriver (HKLM-x32\...\{B20CCB24-C32F-4C2A-A6E0-B0D78456CAD1}) (Version: 1.2.5.0 - Oki Data Corporation) Hidden

SeaTools (HKLM-x32\...\SeaTools 5.1.182) (Version: 5.1.182 - Seagate)

Showcontroller, Version:19.6.2023 (HKLM-x32\...\Showcontroller_is1) (Version: 19.6.2023 - )

SpeedCommander 20 (HKLM\...\SpeedCommander 20) (Version: 20.50.11000 - SWE Sven Ritter)

TheGreenBow VPN Client (HKLM-x32\...\TheGreenBow VPN Client) (Version:  - TheGreenBow)

Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{7B63012A-4AC6-40C6-B6AF-B24A84359DD5}) (Version: 8.93.0.0 - Microsoft Corporation)

UXP WebView Support (HKLM-x32\...\UXPW_1_1_0) (Version: 1.1.0 - Adobe Inc.)

VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN)

VSDC Free Audio Converter Version 1.6.5.353 (HKLM-x32\...\VSDC Free Audio Converter_is1) (Version: 1.6.5.353 - Flash-Integro LLC)

WakeOnLAN Version 2.12.4.0 (HKLM\...\{05DF342B-3E1A-4862-9E67-8E7E9839D3EC}_is1) (Version: 2.12.4.0 - Aquila Technology)

WinDirStat 1.1.2 (HKU\S-1-5-21-3318351353-4052915309-164348779-1001\...\WinDirStat) (Version:  - )

Windows-PC-Integritätsprüfung (HKLM\...\{4254C1AD-B9B0-4020-A4B1-D8B61D12142A}) (Version: 3.7.2204.15001 - Microsoft Corporation)

Windows-Treiberpaket - Intel Corporation (iaStorA) SCSIAdapter  (11/24/2017 4.7.0.1098) (HKLM\...\A4344CAEC74ABE170EA8B5612B964A2850D3875C) (Version: 11/24/2017 4.7.0.1098 - Intel Corporation)

Windows-Treiberpaket - Intel Corporation (iaStorB) SCSIAdapter  (11/24/2017 4.7.0.1098) (HKLM\...\95204F4E85D1AC2EE8490A0AB4BBE6D996F8BD2A) (Version: 11/24/2017 4.7.0.1098 - Intel Corporation)

Wireshark 4.2.0 x64 (HKLM-x32\...\Wireshark) (Version: 4.2.0 - The Wireshark developer community, hxxps://www.wireshark.org)

XnView 2.51.5 (HKLM-x32\...\XnView_is1) (Version: 2.51.5 - Gougelet Pierre-e)

ZoneAlarm Firewall (HKLM-x32\...\{F87E3D99-2119-4C29-8075-E69798E05B44}) (Version: 15.8.213.19411 - Check Point Software Technologies Ltd.) Hidden

ZoneAlarm Security (HKLM-x32\...\{2CBE1694-928D-4265-80C0-D0F97594A6C5}) (Version: 15.8.213.19411 - Check Point Software Technologies Ltd.) Hidden
 

Packages:

=========

Acrobat Notification Client -> C:\Program Files\WindowsApps\AcrobatNotificationClient_1.0.4.0_x86__e1rzdqpraam7r [2023-08-14] (Adobe Systems Incorporated)

Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC [2023-11-17] ()

Adobe Notification Client -> C:\Program Files\WindowsApps\AdobeNotificationClient_3.0.1.1_x86__enpm4xejd91yc [2022-04-21] (Adobe Systems Incorporated)

Canon Inkjet Print Utility -> C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_3.1.0.0_neutral__6e5tt8cgb93ep [2021-12-18] (Canon Inc.)

Fotos-Add-On -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2022-05-27] (Microsoft Corporation)

HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.31.22.0_x64__v10z8vjag6ke6 [2023-11-04] (HP Inc.)

iCloud -> C:\Program Files\WindowsApps\AppleInc.iCloud_14.2.122.0_x64__nzyj5cx40ttqa [2023-11-17] (Apple Inc.) [Startup Task]

iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12131.3.2010.0_x64__nzyj5cx40ttqa [2023-12-17] (Apple Inc.) [Startup Task]

Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-12-27] (Microsoft Corporation)

Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2311.21001.0_x64__8wekyb3d8bbwe [2023-12-11] (Microsoft Corporation) [Startup Task]

NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.964.0_x64__56jybvy8sckqj [2023-09-13] (NVIDIA Corp.)

Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.18.11020.0_x64__8wekyb3d8bbwe [2023-11-06] (Microsoft Studios) [MS Ad]
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-3318351353-4052915309-164348779-1001_Classes\CLSID\{0a3fb2d4-8a6d-4678-8fdf-e4a78f689d41}\localserver32 -> "C:\Program Files\Veeam\Backup and Replication\Console\veeam.backup.shell.exe" -ToastActivated => Keine Datei

CustomCLSID: HKU\S-1-5-21-3318351353-4052915309-164348779-1001_Classes\CLSID\{0A66226B-52EC-4591-9798-6036B32905D1} -> [iCloud Drive] => C:\Users\pentr\iCloudDrive [2022-10-01 11:52]

CustomCLSID: HKU\S-1-5-21-3318351353-4052915309-164348779-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-113506480AE2} -> [Creative Cloud Files] => C:\Users\pentr\Creative Cloud Files [2021-12-16 18:52]

CustomCLSID: HKU\S-1-5-21-3318351353-4052915309-164348779-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)

CustomCLSID: HKU\S-1-5-21-3318351353-4052915309-164348779-1001_Classes\CLSID\{2A1E356B-DEB5-45B5-B155-722E24936CA4} -> [iCloud Drive] => C:\Users\pentr\iCloudDrive [2022-10-01 11:52]

CustomCLSID: HKU\S-1-5-21-3318351353-4052915309-164348779-1001_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4}\localserver32 -> C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Inc. -> Adobe Inc.)

CustomCLSID: HKU\S-1-5-21-3318351353-4052915309-164348779-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)

CustomCLSID: HKU\S-1-5-21-3318351353-4052915309-164348779-1001_Classes\CLSID\{D78FF447-9831-4B31-7437-D401237E504F}\InprocServer32 -> C:\BEYOND52\BEYOND.exe (PANGOLIN LASER SYSTEMS, INC. -> Pangolin Laser Systems Inc.)

CustomCLSID: HKU\S-1-5-21-3318351353-4052915309-164348779-1001_Classes\CLSID\{D78FF447-9831-4B31-CBF1-30BF6D4841BD}\InprocServer32 -> C:\BEYOND50\BEYOND.exe => Keine Datei

CustomCLSID: HKU\S-1-5-21-3318351353-4052915309-164348779-1001_Classes\CLSID\{D78FF447-9831-4B31-D2D5-C588E12D75A6}\InprocServer32 -> C:\BEYOND52\BEYOND.exe (PANGOLIN LASER SYSTEMS, INC. -> Pangolin Laser Systems Inc.)

CustomCLSID: HKU\S-1-5-21-3318351353-4052915309-164348779-1001_Classes\CLSID\{D78FF447-9831-4B31-DB9F-5D3C0FD37FD3}\InprocServer32 -> C:\BEYOND50\BEYOND.exe => Keine Datei

CustomCLSID: HKU\S-1-5-21-3318351353-4052915309-164348779-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems)

ShellIconOverlayIdentifiers: [    OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [    OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [    OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [    OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [    OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [    OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [    OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [   AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-12-13] (Adobe Inc. -> )

ShellIconOverlayIdentifiers: [   AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-12-13] (Adobe Inc. -> )

ShellIconOverlayIdentifiers: [   AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-12-13] (Adobe Inc. -> )

ShellIconOverlayIdentifiers-x32: [    OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [    OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [    OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [    OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [    OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [    OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [    OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-11-24] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-12-13] (Adobe Inc. -> )

ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2023-09-07] (Adobe Inc. -> Adobe Systems Inc.)

ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2021-12-31] (Notepad++ -> )

ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-11-24] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\23.246.1127.0002\FileSyncShell64.dll [2023-12-08] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nvwu.inf_amd64_4716be75eaec31a5\nvshext.dll [2023-07-17] (NVIDIA Corporation -> NVIDIA Corporation)

ContextMenuHandlers5: [NvQuadroView] -> {1E9B04FB-F9E5-4718-997B-B8DA88302A48} => C:\Program Files\NVIDIA Corporation\nview\nvshell.dll [2023-01-22] (Nvidia Corporation -> NVIDIA Corporation)

ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-11-24] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-12-13] (Adobe Inc. -> )

ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2023-09-07] (Adobe Inc. -> Adobe Systems Inc.)
 

==================== Codecs (Nicht auf der Ausnahmeliste) ====================
 

==================== Verknüpfungen & WMI ========================
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
 

2023-11-05 04:48 - 2023-11-05 04:48 - 000375296 _____ () [Datei ist nicht signiert] C:\Program Files\Adobe\Acrobat DC\Acrobat\Locale\de_DE\Adobe Send\SendAsLinkX.DEU

2023-08-01 06:57 - 2023-08-01 06:57 - 000052224 _____ () [Datei ist nicht signiert] C:\Program Files\Adobe\Acrobat DC\Acrobat\Locale\de_de\PDFMaker\PDFMOutlookAddin.DEU

2023-10-02 07:40 - 2022-11-09 04:45 - 002210816 _____ () [Datei ist nicht signiert] C:\Program Files\PostgreSQL\15\bin\libxml2.dll

2023-10-02 07:41 - 2022-11-09 04:45 - 000089600 _____ () [Datei ist nicht signiert] C:\Program Files\PostgreSQL\15\bin\zlib1.dll

2023-12-22 13:43 - 2023-12-22 13:43 - 000010752 ____N () [Datei ist nicht signiert] C:\Users\pentr\AppData\Local\Temp\5709a3a0.dll

2023-12-22 13:43 - 2023-12-22 13:43 - 000010752 ____N () [Datei ist nicht signiert] C:\Users\pentr\AppData\Local\Temp\5709a3a1.dll

2023-12-22 13:43 - 2023-12-22 13:43 - 000010752 ____N () [Datei ist nicht signiert] C:\Users\pentr\AppData\Local\Temp\5709a3a2.dll

2023-12-22 13:43 - 2023-12-22 13:43 - 000010752 ____N () [Datei ist nicht signiert] C:\Users\pentr\AppData\Local\Temp\5709a3a3.dll

2023-11-05 04:48 - 2023-11-05 04:48 - 000021504 _____ (Adobe Systems Inc.) [Datei ist nicht signiert] C:\Program Files\Adobe\Acrobat DC\Acrobat\locale\de_de\Acrobat Elements\ContextMenuShim64.deu

2023-08-01 06:57 - 2023-08-01 06:57 - 000060416 _____ (Adobe Systems Incorporated) [Datei ist nicht signiert] C:\Program Files\Adobe\Acrobat DC\Acrobat\Locale\de_de\Adobe Send\SendAsLinkAddin.DEU

2023-10-02 07:40 - 2022-11-09 04:45 - 001850401 _____ (Free Software Foundation) [Datei ist nicht signiert] C:\Program Files\PostgreSQL\15\bin\libiconv-2.dll

2023-10-02 07:40 - 2022-11-09 04:45 - 000475769 _____ (Free Software Foundation) [Datei ist nicht signiert] C:\Program Files\PostgreSQL\15\bin\libintl-9.dll

2021-12-16 18:24 - 2021-11-24 15:00 - 000093696 _____ (Igor Pavlov) [Datei ist nicht signiert] C:\Program Files\7-Zip\7-zip.dll

2023-09-16 10:06 - 2023-09-16 10:06 - 000021504 _____ (Intel Corporation) [Datei ist nicht signiert] C:\Windows\assembly\NativeImages_v4.0.30319_32\IAStorCommon\261288dea50ce96f2474d8e1c16000d8\IAStorCommon.ni.dll

2023-11-17 18:20 - 2023-11-17 18:20 - 000027648 _____ (Intel Corporation) [Datei ist nicht signiert] C:\Windows\assembly\NativeImages_v4.0.30319_32\IAStorDataMcfeeca6f#\1ea9b6772eb37523b1c57f2084b4531a\IAStorDataMgrSvcInterfaces.ni.dll

2023-11-17 18:20 - 2023-11-17 18:20 - 000083968 _____ (Intel Corporation) [Datei ist nicht signiert] C:\Windows\assembly\NativeImages_v4.0.30319_32\IAStorDataMgr\30787ee5c451c6e91f36a93755bb2883\IAStorDataMgr.ni.dll

2023-09-16 10:06 - 2023-09-16 10:06 - 000008704 _____ (Intel Corporation) [Datei ist nicht signiert] C:\Windows\assembly\NativeImages_v4.0.30319_32\IAStorEnclo20813ba4#\d599d65a33d32bea2555f385c5ed3cc2\IAStorEnclosurePlugin.ni.dll

2023-11-17 18:20 - 2023-11-17 18:20 - 000364032 _____ (Intel Corporation) [Datei ist nicht signiert] C:\Windows\assembly\NativeImages_v4.0.30319_32\IAStorUtil\d736afd836e7e915d193008b91db68e6\IAStorUtil.ni.dll

2023-11-17 18:20 - 2023-11-17 18:20 - 003857920 _____ (Intel Corporation) [Datei ist nicht signiert] C:\Windows\assembly\NativeImages_v4.0.30319_32\PSI\a0e5bf19814b680e39a6345ad8f78c73\PSI.ni.dll

2023-11-17 18:20 - 2023-11-17 18:20 - 000016384 _____ (Intel Corporation) [Datei ist nicht signiert] C:\Windows\assembly\NativeImages_v4.0.30319_32\PSIClient\dfca9a3477e80e2698c73ff8e6845973\PSIClient.ni.dll

2023-11-17 18:20 - 2023-11-17 18:20 - 000685056 _____ (Intel Corporation) [Datei ist nicht signiert] C:\Windows\assembly\NativeImages_v4.0.30319_32\PsiData\ac7e2a1f10ae83542de39510076d3fc0\PsiData.ni.dll

2019-05-14 12:30 - 2019-05-14 12:30 - 000373248 _____ (Intel(R) Corporation) [Datei ist nicht signiert] C:\Windows\system32\NCS2Setp.dll

2022-07-30 09:01 - 2022-07-30 09:01 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\root\Client\AppVIsvSubsystems64.dll

2022-07-30 09:01 - 2022-07-30 09:01 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\root\Office16\AppVIsvSubsystems64.dll

2022-07-30 09:01 - 2022-07-30 09:01 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\root\Office16\c2r64.dll

2022-07-30 09:01 - 2022-07-30 09:01 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\c2r64.dll

2023-10-02 07:41 - 2022-11-09 04:45 - 000052736 _____ (MingW-W64 Project. All rights reserved.) [Datei ist nicht signiert] C:\Program Files\PostgreSQL\15\bin\libwinpthread-1.dll

2023-10-02 07:41 - 2022-11-09 04:45 - 000312832 _____ (PostgreSQL Global Development Group) [Datei ist nicht signiert] C:\Program Files\PostgreSQL\15\bin\LIBPQ.dll

2023-10-02 07:41 - 2022-11-09 04:45 - 000038400 _____ (PostgreSQL Global Development Group) [Datei ist nicht signiert] C:\Program Files\PostgreSQL\15\lib\pg_stat_statements.dll

2023-04-11 07:34 - 2023-10-15 23:00 - 000333824 _____ (Software Security System) [Datei ist nicht signiert] C:\Program Files\SpeedProject\SpeedCommander 20\EKC6420.DLL

2023-10-02 07:40 - 2022-11-09 04:45 - 028399104 _____ (The ICU Project) [Datei ist nicht signiert] C:\Program Files\PostgreSQL\15\bin\icudt67.dll

2023-10-02 07:40 - 2022-11-09 04:45 - 002686976 _____ (The ICU Project) [Datei ist nicht signiert] C:\Program Files\PostgreSQL\15\bin\icuin67.dll

2023-10-02 07:40 - 2022-11-09 04:45 - 001934336 _____ (The ICU Project) [Datei ist nicht signiert] C:\Program Files\PostgreSQL\15\bin\icuuc67.dll

2019-12-16 10:10 - 2019-12-16 10:10 - 000411648 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\TheGreenBow\TheGreenBow VPN\ssleay32.dll

2023-10-02 07:40 - 2022-11-09 04:45 - 004348416 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\PostgreSQL\15\bin\libcrypto-3-x64.dll

2023-10-02 07:40 - 2022-11-09 04:45 - 000745984 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\PostgreSQL\15\bin\libssl-3-x64.dll

2019-07-23 10:29 - 2019-07-23 10:29 - 000192512 _____ (TheGreenBow) [Datei ist nicht signiert] C:\Program Files (x86)\TheGreenBow\TheGreenBow VPN\COMLIB.dll

2019-07-23 10:30 - 2019-07-23 10:30 - 000039424 _____ (TheGreenBow) [Datei ist nicht signiert] C:\Program Files (x86)\TheGreenBow\TheGreenBow VPN\Languages\ger.dll

2019-12-16 10:10 - 2019-12-16 10:10 - 000540672 _____ (TheGreenBow) [Datei ist nicht signiert] C:\Program Files (x86)\TheGreenBow\TheGreenBow VPN\VpnToken.dll

2023-10-02 07:41 - 2022-11-09 04:45 - 000113152 _____ (Yann Collet) [Datei ist nicht signiert] C:\Program Files\PostgreSQL\15\bin\liblz4.dll

2023-10-02 07:41 - 2022-11-09 04:45 - 000674816 _____ (Yann Collet, Facebook, Inc.) [Datei ist nicht signiert] C:\Program Files\PostgreSQL\15\bin\libzstd.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
 

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
 

BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2023-08-01] (Adobe Inc. -> Adobe Systems Incorporated)

BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2023-10-30] (HP Inc. -> HP Inc.)

BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2023-08-01] (Adobe Inc. -> Adobe Systems Incorporated)

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2023-11-19] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2023-08-01] (Adobe Inc. -> Adobe Systems Incorporated)

BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2023-10-30] (HP Inc. -> HP Inc.)

BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2023-08-01] (Adobe Inc. -> Adobe Systems Incorporated)

Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2023-08-01] (Adobe Inc. -> Adobe Systems Incorporated)

Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2023-08-01] (Adobe Inc. -> Adobe Systems Incorporated)

Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-11-19] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-11-19] (Microsoft Corporation -> Microsoft Corporation)

Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-11-19] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-11-19] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-11-19] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-11-19] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-11-19] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-11-19] (Microsoft Corporation -> Microsoft Corporation)
 

==================== Hosts Inhalt: =========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
 

==================== Andere Bereiche ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> %INTEL_DEV_REDIST%redist\intel64\compiler;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\dotnet\;C:\Program Files\PuTTY\

HKU\S-1-5-21-3318351353-4052915309-164348779-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\pentr\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\color burst 2.jpg

HKU\S-1-5-21-3318351353-4052915309-164348779-1011\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg

DNS Servers: 192.168.178.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

 ist aktiviert.
 

Network Binding:

=============

Ethernet: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 

TGB No Tunnel: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"

HKLM\...\StartupApproved\Run: => "RTHDVCPL"

HKLM\...\StartupApproved\Run: => "Network Configuration"

HKLM\...\StartupApproved\Run: => "WSVCUUpdateHelper.exe"

HKLM\...\StartupApproved\Run: => "Wondershare Helper Compact.exe"

HKLM\...\StartupApproved\Run: => "Ashampoo Backup PB"

HKLM\...\StartupApproved\Run: => "Ashampoo Backup PBF"

HKLM\...\StartupApproved\Run32: => "GDataRegistrationNotifier"

HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"

HKLM\...\StartupApproved\Run32: => "QfinderPro"

HKU\S-1-5-21-3318351353-4052915309-164348779-1001\...\StartupApproved\StartupFolder: => "An OneNote senden.lnk"

HKU\S-1-5-21-3318351353-4052915309-164348779-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

HKU\S-1-5-21-3318351353-4052915309-164348779-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_F327D6058D3328CD029FC604FE9ACAD4"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{E602AD83-BF6B-4EA8-BB53-454EB13DB03A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{2E7D54E9-6E9D-498F-9CA6-14901CB9574F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{107A9FEB-6470-43E4-9DD9-5DF5EF0B2D8B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{5DAA1433-BBBE-4C08-ADFB-20F03A332DD7}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{73EBF641-A1D1-48EE-9E6C-705786A934E7}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{614CDF07-CD6E-423C-96EA-AFF007690EEA}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{F52ECC6F-FCB9-4CDD-8DF6-0FB1449598CA}] => (Allow) c:\beyond50\beyond.exe => Keine Datei

FirewallRules: [{0FF5C085-CDC4-4804-A99F-65B38325AF8F}] => (Allow) c:\beyond50\beyond.exe => Keine Datei

FirewallRules: [{F5E87B91-CBAB-4240-A84D-EB2309999CE2}] => (Allow) LPort=500

FirewallRules: [{9E812D15-F4C0-4278-9546-A2480BB095BD}] => (Allow) LPort=4500

FirewallRules: [{E38EB595-4E16-45D0-96E3-E69E2A2A6752}] => (Allow) C:\Program Files (x86)\Okidata\ActKey\Network Configuration.exe (Oki Electric Industry Co.,Ltd. -> Oki Data Corporation)

FirewallRules: [{5A6FDFA8-34DE-41E2-9B7E-BCF83EB48729}] => (Allow) C:\Program Files (x86)\Okidata\ActKey\Network Configuration.exe (Oki Electric Industry Co.,Ltd. -> Oki Data Corporation)

FirewallRules: [TCP Query User{CEF9B2D5-4E49-4572-AB7B-61480CC6DD90}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)

FirewallRules: [UDP Query User{263296C1-5375-4E1E-91B0-5196BF7AB40A}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)

FirewallRules: [TCP Query User{19394BCE-B26F-4D53-B80D-CAD1C3E5692F}C:\program files\adobe\adobe dreamweaver 2021\node\node.exe] => (Allow) C:\program files\adobe\adobe dreamweaver 2021\node\node.exe (Adobe Inc. -> Node.js)

FirewallRules: [UDP Query User{C6370396-A479-402F-98C3-089D171645D3}C:\program files\adobe\adobe dreamweaver 2021\node\node.exe] => (Allow) C:\program files\adobe\adobe dreamweaver 2021\node\node.exe (Adobe Inc. -> Node.js)

FirewallRules: [TCP Query User{98E6F6FE-155F-4FDC-BEE8-27A8BA0DB9AC}C:\program files\adobe\adobe dreamweaver 2021\dreamweaver.exe] => (Allow) C:\program files\adobe\adobe dreamweaver 2021\dreamweaver.exe (Adobe Inc. -> Adobe Inc.)

FirewallRules: [UDP Query User{2217F3FC-4E68-4443-AFBF-6B0693D253E3}C:\program files\adobe\adobe dreamweaver 2021\dreamweaver.exe] => (Allow) C:\program files\adobe\adobe dreamweaver 2021\dreamweaver.exe (Adobe Inc. -> Adobe Inc.)

FirewallRules: [{FC4A540A-DE32-4136-96F4-C8BB9358FDEC}] => (Allow) C:\Program Files (x86)\FlashIntegro\AudioConverter\AudioConverter.exe (Vector Ltd. -> Flash-Integro LLC)

FirewallRules: [{E4820AA4-69DE-43A9-906C-6F04AB26221E}] => (Allow) C:\Program Files (x86)\FlashIntegro\AudioConverter\AudioConverter.exe (Vector Ltd. -> Flash-Integro LLC)

FirewallRules: [{745831A6-E150-4E05-9BAE-9315746CF584}] => (Allow) C:\Program Files (x86)\FlashIntegro\AudioConverter\Updater.exe (Vector Ltd. -> Flash-Integro LLC)

FirewallRules: [{35498E70-49D0-4F82-A852-3181C888A3EB}] => (Allow) C:\Program Files (x86)\FlashIntegro\AudioConverter\Updater.exe (Vector Ltd. -> Flash-Integro LLC)

FirewallRules: [{4A9883C5-5F06-47EC-8F7C-877AE4C8D194}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)

FirewallRules: [TCP Query User{068C59F0-35FE-44BA-9EB2-FE68D24048DE}C:\program files\aquila technology\wakeonlan\wakeonlan.exe] => (Allow) C:\program files\aquila technology\wakeonlan\wakeonlan.exe (Open Source Developer, Philip Sterling Tull -> Aquila Technology)

FirewallRules: [UDP Query User{DB70B33E-8EA6-4188-8858-97BA26A932F7}C:\program files\aquila technology\wakeonlan\wakeonlan.exe] => (Allow) C:\program files\aquila technology\wakeonlan\wakeonlan.exe (Open Source Developer, Philip Sterling Tull -> Aquila Technology)

FirewallRules: [{F16E4062-8DC2-4C8C-8C8D-3813E4EB1213}] => (Block) C:\program files\aquila technology\wakeonlan\wakeonlan.exe (Open Source Developer, Philip Sterling Tull -> Aquila Technology)

FirewallRules: [{7B913B7E-D159-42E8-BC78-6D9704343334}] => (Block) C:\program files\aquila technology\wakeonlan\wakeonlan.exe (Open Source Developer, Philip Sterling Tull -> Aquila Technology)

FirewallRules: [TCP Query User{F0E97CB0-4404-435E-B076-13DD7505B546}C:\program files (x86)\qnap\qfinder\qfinderpro.exe] => (Allow) C:\program files (x86)\qnap\qfinder\qfinderpro.exe (QNAP Systems, Inc. -> QNAP)

FirewallRules: [UDP Query User{347E76CF-ECAF-4D58-9A6B-4EB0EDB9ECC1}C:\program files (x86)\qnap\qfinder\qfinderpro.exe] => (Allow) C:\program files (x86)\qnap\qfinder\qfinderpro.exe (QNAP Systems, Inc. -> QNAP)

FirewallRules: [{D07F5E2A-3E2A-49CB-95F9-ADA041745925}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{D753C25D-C981-452C-BD97-E7668C09E118}] => (Allow) c:\beyond52\beyond.exe (PANGOLIN LASER SYSTEMS, INC. -> Pangolin Laser Systems Inc.)

FirewallRules: [{7D3D821E-5FA0-4067-AF26-1350045602BA}] => (Allow) c:\beyond52\beyond.exe (PANGOLIN LASER SYSTEMS, INC. -> Pangolin Laser Systems Inc.)

FirewallRules: [{522222D3-ED95-44F6-BE88-E0C3925028C4}] => (Allow) C:\Showcontroller{\Bin\Realtime.exe} => Keine Datei

FirewallRules: [{826CDBAC-0471-47A5-9DD7-406452EC91F8}] => (Allow) C:\Showcontroller{\Bin\PicEdit.exe} => Keine Datei

FirewallRules: [{A14959C4-0672-4442-9657-CDABFC4F611B}] => (Allow) C:\Showcontroller{\Bin\Live.exe} => Keine Datei

FirewallRules: [{D3DC3F97-0147-4FC7-A27D-D43B15D62F6A}] => (Allow) C:\Showcontroller{\Bin\Hardwarecheck.exe} => Keine Datei

FirewallRules: [{E83A30AD-A394-40FE-BF4C-51DBCA62F63E}] => (Allow) C:\Showcontroller{\Bin\Player.exe} => Keine Datei

FirewallRules: [{FED3DFB8-F799-4533-A394-B9E950741C77}] => (Allow) C:\Showcontroller{\Bin\Player_2023.exe} => Keine Datei

FirewallRules: [{13BC827A-ECC5-4199-BCD7-14B00F9918A6}] => (Allow) C:\Showcontroller{\Bin\ShowNETAdminTool.exe} => Keine Datei

FirewallRules: [{D704F1D3-1020-452D-98C2-E5AB4BD195C3}] => (Allow) C:\Showcontroller{\Bin\Tracer.exe} => Keine Datei

FirewallRules: [{EA4A2BE3-1953-4E77-A8EE-399FF3DAA6DF}] => (Allow) C:\Showcontroller{\Bin\SVGConverter.exe} => Keine Datei

FirewallRules: [TCP Query User{3D2A67FF-3183-4E10-A3C8-5ACE1DD496C4}C:\showcontroller\bin\picedit.exe] => (Allow) C:\showcontroller\bin\picedit.exe (Laserworld (Switzerland) AG -> PicEdit)

FirewallRules: [UDP Query User{F6DEF593-20A3-41F2-BF05-78589EA3EBC9}C:\showcontroller\bin\picedit.exe] => (Allow) C:\showcontroller\bin\picedit.exe (Laserworld (Switzerland) AG -> PicEdit)

FirewallRules: [{64CFBD8A-3F18-47C4-A22A-994D68C4C65B}] => (Allow) C:\Program Files\Veeam\VSS Hardware Provider\Veeam.VssHwSnapshotProvider.exe => Keine Datei

FirewallRules: [{DE3753DC-24BE-4E65-8BCC-C7FFEDE15825}] => (Allow) C:\Program Files\Veeam\VSS Hardware Provider\Veeam.VssHwSnapshotProvider.exe => Keine Datei

FirewallRules: [{B9447D7D-BE84-4CE8-8410-116F1B844477}] => (Allow) C:\Program Files\Focusrite\Focusrite Control\Server\ControlServer.exe () [Datei ist nicht signiert]

FirewallRules: [TCP Query User{5D156894-281E-43BA-9378-D4F5ADE07BEF}C:\program files\adobe\adobe premiere pro 2024\adobe premiere pro.exe] => (Allow) C:\program files\adobe\adobe premiere pro 2024\adobe premiere pro.exe (Adobe Inc. -> Adobe)

FirewallRules: [UDP Query User{9905838F-5368-4873-AAC6-69E7FA1423E4}C:\program files\adobe\adobe premiere pro 2024\adobe premiere pro.exe] => (Allow) C:\program files\adobe\adobe premiere pro 2024\adobe premiere pro.exe (Adobe Inc. -> Adobe)

FirewallRules: [{6F33594A-615D-4B42-908E-8678245928E3}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.110.3218.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{03C8E9DA-7195-49EB-8D08-49AC8845AE00}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.110.3218.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{A91301F0-7914-4A43-BA7A-94EC2EF38343}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.110.3218.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{9C975E75-AAD4-44D5-977F-911D964F01E6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.110.3218.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{42894161-D512-415A-AA6E-1692B10E20F5}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12131.3.2010.0_x64__nzyj5cx40ttqa\iTunes.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)

FirewallRules: [{FF375ED4-BE9A-49E3-90C4-72702E3E35A5}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12131.3.2010.0_x64__nzyj5cx40ttqa\iTunes.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)

FirewallRules: [{B801934D-11FA-422A-8A34-158E053DF840}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12131.3.2010.0_x64__nzyj5cx40ttqa\iTunes.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)

FirewallRules: [{9BD77AB3-2B13-47BC-B616-75B904B87166}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12131.3.2010.0_x64__nzyj5cx40ttqa\iTunes.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)

FirewallRules: [{CC055E74-73C1-41C9-8A58-E658C9757785}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12131.3.2010.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)

FirewallRules: [{018BD084-D7C1-42F3-BACC-70B27244A646}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12131.3.2010.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)

FirewallRules: [{D0F2A532-75D4-43EA-8C2A-15C4AFB44699}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12131.3.2010.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)

FirewallRules: [{501DA323-ACD9-45C3-A2D3-B2C69DB17EB5}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12131.3.2010.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.)

FirewallRules: [{5A490C86-EDBF-48C4-A3CF-A24BD4963595}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\120.0.2210.91\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
 

==================== Wiederherstellungspunkte =========================
 

22-12-2023 11:57:25 Geplanter Prüfpunkt

26-12-2023 17:45:38 Windows-Sicherung

31-12-2023 10:23:41 Windows-Sicherung

31-12-2023 12:35:15 Windows-Sicherung

02-01-2024 09:24:47 Windows-Sicherung

02-01-2024 10:47:49 Windows-Sicherung

02-01-2024 11:17:41 Windows-Sicherung
 

==================== Fehlerhafte Geräte im Gerätemanager ============
 

Name: Microsoft PS/2-Maus

Description: Microsoft PS/2-Maus

Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}

Manufacturer: Microsoft

Service: i8042prt

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 

Name: PS/2-Standardtastatur

Description: PS/2-Standardtastatur

Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}

Manufacturer: (Standardtastaturen)

Service: i8042prt

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
 

==================== Fehlereinträge in der Ereignisanzeige: ========================
 

Applikationsfehler:

==================

Error: (01/02/2024 11:13:04 AM) (Source: COM) (EventID: 10031) (User: )

Description: Eine das Marshalling aufhebende Richtlinienprüfung wurde ausgeführt, als das Marshalling eines benutzerdefinierten gemarshallten Objekts aufgehoben wurde. Die Klasse "{BE88F957-42CC-4DA7-92CF-9BC35C5D5EE2}" wurde abgelehnt.
 

Error: (01/02/2024 11:13:04 AM) (Source: COM) (EventID: 10031) (User: )

Description: Eine das Marshalling aufhebende Richtlinienprüfung wurde ausgeführt, als das Marshalling eines benutzerdefinierten gemarshallten Objekts aufgehoben wurde. Die Klasse "{BE88F957-42CC-4DA7-92CF-9BC35C5D5EE2}" wurde abgelehnt.
 

Error: (01/02/2024 11:13:03 AM) (Source: Windows Backup) (EventID: 4104) (User: )

Description: Die Sicherung war nicht erfolgreich. Fehler: Der Vorgang konnte nicht erfolgreich abgeschlossen werden, da die Datei einen Virus oder möglicherweise unerwünschte Software enthält. (0x800700E1).
 

Error: (01/02/2024 11:12:57 AM) (Source: Microsoft-Windows-Backup) (EventID: 517) (User: NT-AUTORITÄT)

Description: Fehler bei der um 2024-01-02T09:47:49.1814588Z gestarteten Sicherung. Fehlercode: "0x8078015b" (Fehler der Windows-Sicherung beim Zugreifen auf den freigegebenen Remoteordner. Stellen Sie sicher, dass der Ordner verfügbar und zugänglich ist, und versuchen Sie es erneut.

). Suchen Sie in den Ereignisdetails nach einer Lösung, und führen Sie die Sicherung erneut aus, nachdem das Problem behoben wurde.
 

Error: (01/02/2024 10:47:44 AM) (Source: COM) (EventID: 10031) (User: )

Description: Eine das Marshalling aufhebende Richtlinienprüfung wurde ausgeführt, als das Marshalling eines benutzerdefinierten gemarshallten Objekts aufgehoben wurde. Die Klasse "{BE88F957-42CC-4DA7-92CF-9BC35C5D5EE2}" wurde abgelehnt.
 

Error: (01/02/2024 10:47:43 AM) (Source: COM) (EventID: 10031) (User: )

Description: Eine das Marshalling aufhebende Richtlinienprüfung wurde ausgeführt, als das Marshalling eines benutzerdefinierten gemarshallten Objekts aufgehoben wurde. Die Klasse "{BE88F957-42CC-4DA7-92CF-9BC35C5D5EE2}" wurde abgelehnt.
 

Error: (01/02/2024 10:45:03 AM) (Source: COM) (EventID: 10031) (User: )

Description: Eine das Marshalling aufhebende Richtlinienprüfung wurde ausgeführt, als das Marshalling eines benutzerdefinierten gemarshallten Objekts aufgehoben wurde. Die Klasse "{BE88F957-42CC-4DA7-92CF-9BC35C5D5EE2}" wurde abgelehnt.
 

Error: (01/02/2024 10:45:02 AM) (Source: COM) (EventID: 10031) (User: )

Description: Eine das Marshalling aufhebende Richtlinienprüfung wurde ausgeführt, als das Marshalling eines benutzerdefinierten gemarshallten Objekts aufgehoben wurde. Die Klasse "{BE88F957-42CC-4DA7-92CF-9BC35C5D5EE2}" wurde abgelehnt.
 
 

Systemfehler:

=============

Error: (01/02/2024 11:21:58 AM) (Source: Virtual Disk Service) (EventID: 9) (User: )

Description: Unerwarteter Anbieterfehler. Möglicherweise kann das Problem durch erneutes Starten des Dienstes behoben werden. Fehlercode: 80070037@02000014
 

Error: (01/02/2024 11:21:54 AM) (Source: Microsoft-Windows-FilterManager) (EventID: 3) (User: NT-AUTORITÄT)

Description: Der Filter-Manager konnte keine Verbindung mit dem Volume "\Device\HarddiskVolume71" herstellen. Dieses Volume ist erst nach einem Neustart für die Filterung verfügbar. Der letzte Status war "0xc03a001c".
 

Error: (01/02/2024 11:21:55 AM) (Source: Virtual Disk Service) (EventID: 9) (User: )

Description: Unerwarteter Anbieterfehler. Möglicherweise kann das Problem durch erneutes Starten des Dienstes behoben werden. Fehlercode: 80070037@02000014
 

Error: (01/02/2024 11:21:53 AM) (Source: Microsoft-Windows-FilterManager) (EventID: 3) (User: NT-AUTORITÄT)

Description: Der Filter-Manager konnte keine Verbindung mit dem Volume "\Device\HarddiskVolume69" herstellen. Dieses Volume ist erst nach einem Neustart für die Filterung verfügbar. Der letzte Status war "0xc03a001c".
 

Error: (01/02/2024 11:21:53 AM) (Source: Virtual Disk Service) (EventID: 9) (User: )

Description: Unerwarteter Anbieterfehler. Möglicherweise kann das Problem durch erneutes Starten des Dienstes behoben werden. Fehlercode: 80070037@02000014
 

Error: (01/02/2024 10:52:53 AM) (Source: Microsoft-Windows-FilterManager) (EventID: 3) (User: NT-AUTORITÄT)

Description: Der Filter-Manager konnte keine Verbindung mit dem Volume "\Device\HarddiskVolume63" herstellen. Dieses Volume ist erst nach einem Neustart für die Filterung verfügbar. Der letzte Status war "0xc03a001c".
 

Error: (01/02/2024 10:52:53 AM) (Source: Virtual Disk Service) (EventID: 9) (User: )

Description: Unerwarteter Anbieterfehler. Möglicherweise kann das Problem durch erneutes Starten des Dienstes behoben werden. Fehlercode: 80070037@02000014
 

Error: (01/02/2024 10:52:51 AM) (Source: Microsoft-Windows-FilterManager) (EventID: 3) (User: NT-AUTORITÄT)

Description: Der Filter-Manager konnte keine Verbindung mit dem Volume "\Device\Harddisk2\DR30" herstellen. Dieses Volume ist erst nach einem Neustart für die Filterung verfügbar. Der letzte Status war "0xc03a001c".
 
 

Windows Defender:

================

Date: 2024-01-02 11:55:52

Description: 

Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.

Überprüfungs-ID: {9F81E92E-F80E-4B31-9A35-C30E91910EAC}

Überprüfungstyp: Antimalware

Überprüfungsparameter: Schnellüberprüfung

Benutzer: NT-AUTORITÄT\SYSTEM
 

Date: 2024-01-02 11:21:24

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:HTML/Phish!pz&threatid=2147888341&enterprise=0

Name: Trojan:HTML/Phish!pz

Schweregrad: Schwerwiegend

Kategorie: Trojaner

Pfad: file:_\Device\HarddiskVolumeShadowCopy24\Users\pentr\AppData\Local\Mozilla\Firefox\Profiles\r8lix907.default-release\cache2\entries\00B130FD507B21FB0847F88D12DC9F867174015C

Erkennungsursprung: Unbekannt

Erkennungstype: Konkret

Erkennungsquelle: Echtzeitschutz

Benutzer: NT-AUTORITÄT\SYSTEM

Prozessname: C:\Windows\System32\svchost.exe

Sicherheitsversion: AV: 1.403.1516.0, AS: 1.403.1516.0, NIS: 1.403.1516.0

Modulversion: AM: 1.1.23110.2, NIS: 1.1.23110.2
 

Date: 2024-01-02 10:52:27

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:HTML/Phish!pz&threatid=2147888341&enterprise=0

Name: Trojan:HTML/Phish!pz

Schweregrad: Schwerwiegend

Kategorie: Trojaner

Pfad: file:_\Device\HarddiskVolumeShadowCopy21\Users\pentr\AppData\Local\Mozilla\Firefox\Profiles\r8lix907.default-release\cache2\entries\00B130FD507B21FB0847F88D12DC9F867174015C

Erkennungsursprung: Unbekannt

Erkennungstype: Konkret

Erkennungsquelle: Echtzeitschutz

Benutzer: NT-AUTORITÄT\SYSTEM

Prozessname: C:\Windows\System32\svchost.exe

Sicherheitsversion: AV: 1.403.1516.0, AS: 1.403.1516.0, NIS: 1.403.1516.0

Modulversion: AM: 1.1.23110.2, NIS: 1.1.23110.2
 

Date: 2024-01-02 09:28:54

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:HTML/Phish!pz&threatid=2147888341&enterprise=0

Name: Trojan:HTML/Phish!pz

Schweregrad: Schwerwiegend

Kategorie: Trojaner

Pfad: file:_\Device\HarddiskVolumeShadowCopy18\Users\pentr\AppData\Local\Mozilla\Firefox\Profiles\r8lix907.default-release\cache2\entries\00B130FD507B21FB0847F88D12DC9F867174015C

Erkennungsursprung: Unbekannt

Erkennungstype: Konkret

Erkennungsquelle: Echtzeitschutz

Benutzer: NT-AUTORITÄT\SYSTEM

Prozessname: C:\Windows\System32\svchost.exe

Sicherheitsversion: AV: 1.403.1516.0, AS: 1.403.1516.0, NIS: 1.403.1516.0

Modulversion: AM: 1.1.23110.2, NIS: 1.1.23110.2
 

Date: 2023-12-31 12:39:38

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:HTML/Phish!pz&threatid=2147888341&enterprise=0

Name: Trojan:HTML/Phish!pz

Schweregrad: Schwerwiegend

Kategorie: Trojaner

Pfad: file:_\Device\HarddiskVolumeShadowCopy15\Users\pentr\AppData\Local\Mozilla\Firefox\Profiles\r8lix907.default-release\cache2\entries\00B130FD507B21FB0847F88D12DC9F867174015C

Erkennungsursprung: Unbekannt

Erkennungstype: Konkret

Erkennungsquelle: Echtzeitschutz

Benutzer: NT-AUTORITÄT\SYSTEM

Prozessname: C:\Windows\System32\svchost.exe

Sicherheitsversion: AV: 1.403.1377.0, AS: 1.403.1377.0, NIS: 1.403.1377.0

Modulversion: AM: 1.1.23110.2, NIS: 1.1.23110.2

Event[0]:
 

Date: 2023-11-09 19:50:01

Description: 

Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.

Neue Version der Sicherheitsinformationen: 

%Vorherige Version der Sicherheitsinformationen: 1.401.284.0

Update Source: Microsoft Update-Server

Sicherheitstyp: AntiVirus

Updatetyp: Voll

Benutzer: NT-AUTORITÄT\SYSTEM

Aktuelle Modulversion: 

%Vorherige Modulversion: 1.1.23100.2009

Fehlercode: 0x80240438

Fehlerbeschreibung: Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support". 
 

CodeIntegrity:

===============

Date: 2024-01-02 12:00:49

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.
 
 

==================== Speicherinformationen =========================== 
 

BIOS: Hewlett-Packard M60 v02.59 03/31/2022

Hauptplatine: Hewlett-Packard 212B

Prozessor: Intel(R) Xeon(R) CPU E5-1650 v4 @ 3.60GHz

Prozentuale Nutzung des RAM: 49%

Installierter physikalischer RAM: 32684.31 MB

Verfügbarer physikalischer RAM: 16613.56 MB

Summe virtueller Speicher: 39660.74 MB

Verfügbarer virtueller Speicher: 6841 MB
 

==================== Laufwerke ================================
 

Drive c: (Windows) (Fixed) (Total:237.48 GB) (Free:15.38 GB) (Model: SSD_2.5"_TLC_256GB_InnovationIT) (Protected) NTFS

Drive d: (Daten) (Fixed) (Total:1863 GB) (Free:1651.75 GB) (Model: ST2000DM001-1ER164) NTFS

Drive y: (home) (Network) (Total:2459.76 GB) (Free:1294.82 GB) (Model: SSD_2.5"_TLC_256GB_InnovationIT) NTFS

Drive z: (Multimedia) (Network) (Total:2459.76 GB) (Free:1294.82 GB) (Model: SSD_2.5"_TLC_256GB_InnovationIT) NTFS
 

\\?\Volume{39800d9c-9817-4173-854f-25fc074f0a5c}\ (Recovery tools) (Fixed) (Total:0.88 GB) (Free:0.28 GB) NTFS

\\?\Volume{9ef07727-7f3c-4e2d-b9fa-6be827c1b73d}\ (SYSTEM) (Fixed) (Total:0.09 GB) (Free:0.05 GB) FAT32
 

==================== MBR & Partitionstabelle ====================
 

==========================================================

Disk: 0 (Size: 238.5 GB) (Disk ID: 71362614)
 

Partition: GPT.
 

==========================================================

Disk: 1 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

==================== Ende von Addition.txt =======================